JP2002290480A - Communication system and data communication method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system of low cost and low possibility of causing congestion problems without using the public exchange network and specific connection stations (centralizing stations). SOLUTION: A connection system 10 for connecting a communication node 12 with the Internet network 14 is constituted of a base station router 18 connected to one of the lines on a high speed IP network 16 of an ASP 20 which forms part of the Internet networks, and an authentication server 22 which has user managing database holding user information which uses the communication node 12 connected to the Internet network 14. The base station router 18 has a wireless communication part for wireless communications by radio with the communication node 12 located in its own covering area, and an Internet side communication part for IP communications between servers connected to the Internet network 14 including the authentication server 22 via lines and the Internet network 14.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a communication system for connecting a portable terminal to the Internet.

[0002]

2. Description of the Related Art Conventionally, in order to realize a wide area mobile Internet communication service (MIS), a plurality of base stations (BSs) providing access lines and a network connecting these BSs are unified. It was necessary to operate it. FIG. 1 is a diagram illustrating an example of a conventional MIS system. As shown in FIG. 1, in an operator's base network 100, a number of BSs 102-1, 102-2,... Are arranged, and a number of connection networks are provided therebetween. A mobile phone 112 is connected to any of these, so that the signal propagates through the BS and a network spanned between the BSs.

[0003]

[Problems to be Solved by the Invention] PHS and PDC (Perso
In the Internet connection using a telephone network (public switching network) such as nal digital cellular, the use cost of a circuit switching network is high. In other words, it is inevitable that a large number of BSs need to be arranged, or a network must be added in accordance with the BS arrangement, and the cost is reflected in the utilization cost. Therefore, due to its nature, the fact is that it is unavoidable to pay for usage.

In the above-mentioned conventional service mode, FIG.
As shown in (1), connection to the Internet network 14 is performed centrally via a specific connection station (for example, a gateway (GW) 104). Therefore, there is a problem that it is impossible to avoid problems such as congestion due to traffic concentration. SUMMARY OF THE INVENTION An object of the present invention is to provide a low-cost system that does not cause a problem of congestion without using a public switched network or a specific connection station (centralized station).

[0005]

SUMMARY OF THE INVENTION It is an object of the present invention to provide a communication system for connecting a communication node to an Internet network, wherein the Internet service provider owns a high-speed IP network and forms a part of the Internet network. A base station router connected to any one of the lines constituting the high-speed IP network, and an authentication server having a user management database for holding user information using communication nodes connected to the Internet network, A base station router for wirelessly communicating with a communication node located in an area covered by the base station router by radio, and connecting to the Internet network including an authentication server via the line and the Internet network; Internet-side communication means for performing communication using IP between various servers When the wireless communication means receives user information and a connection request regarding a user who uses the communication node from a communication node, the Internet-side communication means sends the user information to an authentication server via the Internet network. To communicate and ask for their certification,
According to the communication system, the communication node is configured to permit connection to the Internet network via the base station according to the authentication result.

According to the present invention, by connecting a base station router directly to an existing high-speed IP network forming a part of the Internet network, for example, an optical fiber network or an xDSL network, a communication node such as a portable terminal can be used. You can connect to the Internet just by passing through a base station router. For example, a communication node may be identified by a global IP address. User authentication can be realized by the base station router inquiring the authentication server when the communication node makes a connection request to the base station router.

The communication network between base station routers is based on existing high-speed I
Since the P network is used, there is no need to maintain a network between base stations. Therefore, it is possible to significantly reduce the base station installation cost. As a result, the connection fee for the user who uses the communication node can be set to a fixed rate instead of the metered rate.

[0008] In a preferred embodiment of the present invention, there is further provided a home agent which is connected to the Internet network and registers an IP address obtained by a communication node accessing the Internet network. By updating the IP address in the home agent, a packet can be transmitted to the newly acquired IP address even at the time of so-called handover. This makes it possible to realize a so-called mobile Internet.

[0009] In a more preferred embodiment, the base station router uses a parameter, which is owned in advance, common to the communication node and a unique parameter, to exchange a key to be exchanged with the communication node. Means for generating / exchanging a key, wherein the wireless communication means encrypts data to be transmitted to the communication node and decrypts the data transmitted from the communication node using the generated key. .
By using the key obtained by the key exchange, confidentiality between the base station router and the communication node can be ensured. For example, a line constituting a high-speed IP network of an Internet service provider is an optical cable, and an Internet communication means of a base station router has an optical fiber interface for converting received data into a signal transmitted through the optical cable. Is also good. Needless to say, the lines constituting the high-speed IP network may be xDSL or other media.

[0010] For example, the base station, the authentication server and the home agent are controlled by a management system by an operator other than the Internet service provider. Under this operator, for the user who provides the installation location of the base station router, the access right through the base station by wireless or the access right using the branch line branched from the line is provided free of charge. desirable. This makes it possible to install the base station router in many places.
This installation location may be, for example, inside a store such as a coffee shop or a fast food restaurant, or may be outside such as on the roof of a building.

Another object of the present invention is to provide an Internet service provider who owns a high-speed IP network, is connected to any one of the lines constituting the high-speed IP network and forms a part of the Internet network, and wirelessly communicates with a predetermined line. A base station router capable of data communication with a base station located in a wireless propagation area, and an authentication server provided with a user management database holding user information using communication nodes connected to the Internet network. In the system,
A data communication method for connecting a communication node to an Internet network, wherein the communication node transmits user information and a connection request to a base station router having a wireless propagation area covering a position of the communication node. In the base station router, transmitting the user information and the connection request to an authentication server via the line and the Internet network, and receiving an authentication result from the authentication server; based on the authentication result,
And transmitting a connection permission notification when the authentication is successful.

In a preferred embodiment, further, when the connection is permitted, the I / O acquired by the communication node with respect to the home agent connected to the Internet network.
The method includes a step of registering a P address.

[0013] In another preferred embodiment, the communication node has a first common node with a base station router.
Generating the first information using the common parameters of the communication node and the first unique parameter unique to the communication node, and transmitting the first information to the base station router when transmitting the connection request. At the base station router, a first common parameter and a second common parameter specific to the base station.
Generating the second information by using the unique parameters of the first and second parameters, and generating the third information by using the first information and the second unique parameters. When transmitting, the second information is transmitted to the communication node, and, in the communication node, using the second information and the first unique parameter,
Generating third information equal to that generated at the base station router, wherein the third information is used by the communication node and the base station router as a common key.

It is another object of the present invention to provide a communication node used in the communication system and a wireless communication adapter used in the communication system, the personal computer being connected to a slot of the personal computer. The present invention is also achieved by a wireless communication adapter that realizes data communication between the wireless communication adapter and the base station router.

[0015]

Embodiments of the present invention will be described below with reference to the accompanying drawings. FIG. 2 is a block diagram schematically showing the communication system according to the present embodiment. In this embodiment, it is possible to provide an extremely low-cost wide area mobile Internet communication service by arranging a base use and control server (for example, a home agent or an authentication server) described later.

As shown in FIG. 2, in the communication system 10 according to the present embodiment, the portable terminal 12-1 and the computer 12-m (hereinafter, these are referred to as "communication nodes") are access points. Some base station router 18
To connect to. This communication node 12
It is identified by a global IP address. For example,
Insert the wireless LAN card into the computer 12-m,
What is necessary is just to enable data communication with the base station router 18.

The base station router 18 is configured to perform data communication with the communication node 12 via a wireless LAN. The base station router 18 has a wireless communication control unit that controls wireless communication with the communication node 12 and an Internet-side communication control unit that controls communication with the existing communication network 16. When the communication network to be connected is an optical cable, the Internet-side communication control unit is provided with an optical cable interface.

In the base station router 18 according to the present embodiment, the Internet-side communication control section is directly connected to the Internet network 14. In the example of FIG.
The base station router groups 12-11,.
A connection to the Internet network 14 is realized by using an existing communication network 16-1 that is provided by a provider (a kind of ISP) 20-1. Also, the base station router groups 12-21,..., 12-2m correspond to the second ISP2.
The connection to the Internet network 14 is realized by using the existing communication network 16-2 in which 0-2 runs. Thus, in the present embodiment, the wireless LAN
By connecting the base station router 12 capable of data communication with the communication node 12 to any provider having the Internet network, there is no need to establish a connection network between dedicated bases, and the cost for infrastructure maintenance is reduced. It can be significantly reduced.

As shown in FIG. 2, in the communication system according to the present embodiment, an authentication server 22 for authenticating the communication node 12 and a home agent 24 for grasping the position of the communication node 12 are provided on the Internet 14. It is connected. The authentication server 22 stores the user ID and the password of the user registered in advance in a database in association with the user, and authenticates the user in response to reception of data from the base station router 12 as described later. It is configured to transmit the authentication result to the base station router 12. The home agent 24 grasps the position of the communication node 12 used by the user, and executes processing necessary for transmitting a packet to an appropriate base station router 12.

FIG. 3 is a diagram schematically showing a communication procedure when the communication node 12 accesses the Internet in the communication system according to the present embodiment. As shown in FIG. 3, as shown in FIG. 3, the communication node 12 transmits a connection request to the base station router 18 covering the area including the communication node 12 (see reference numeral 301) (see reference numeral). , The base station router 18 sends the communication node 12 to the authentication server 22 via the Internet network 14.
Require authentication (see sign). Next, the authentication server 22 notifies the authentication result to the base station router 18 (see reference numeral). If the authentication result is “yes”, that is, the user is authenticated, the base station router 18 transmits the authentication result to the communication node 12. Is connected to the Internet network 14 (see reference numerals). As a result, the communication node 12 can access a server connected to the Internet 14.

FIG. 4 is a flowchart showing the above communication procedure in more detail. As shown in FIG.
2 transmits a connection request and information (user ID (UID) and password (pwd)) for specifying the user to the base station router 18 (step 40).
1). For example, the user may operate a key of communication node 12 to input a UID and pwd. In this case, the UID and pw are stored in the memory of the communication node 12.
d is stored, and at least as long as the communication node 12 is connected to the Internet, these UID and pw
d may be held. For example, when there is a radio wave interruption, connection and authentication are automatically started using the UID and pwd stored in the communication node 12, and once the user turns on the communication node, the connection and UID are disconnected.
There is no need to be conscious of such things.

In response to the reception of the connection request from the communication node 12, the base station router 18 transmits the connection request of the communication node 12 together with the UID and pwd to the authentication server 2.
2 (step 402). The authentication server 22
When this is received, the user is authenticated by comparing the UID and pwd stored in the user management database (not shown) with the received one, and the authentication result is transmitted to the base station router 18 (step 403). .

The base station router 18 determines that the authentication result is “No”.
In other words, if the user is not recognized as a correct user, this is transmitted to the communication node 12 and the process ends. That is,
The connection to the Internet network 14 by the communication node 12 fails. In the present embodiment, the UID is configured to be given to the user. Therefore, when the user has a plurality of terminals, the user can access the Internet using one UID.
However, a plurality of terminals cannot simultaneously connect to the Internet. Therefore, for example, if the user has already connected to the Internet using a certain communication node of his own and requests connection using another communication node, the authentication result becomes “No” and the other The connection using the communication node of will fail.

If the authentication result is "yes", connection permission is transmitted from the base station router 18 to the communication node 12 (step 404). Here, in the communication node 12 and the base station router 18, a series of processes (key exchange) for securing security between them is executed (steps 405 and 406), and thereafter, the communication node 12 connects to the Internet. Connection is realized.
FIG. 5 is a flowchart showing the portion indicated by reference numeral 411 in FIG. 4 in more detail. In the present embodiment, communication node 12 holds predetermined parameters “g” and “p”, and base station router 18 similarly performs
The parameters “g” and “p” are held.

As shown in FIG. 5, the communication node 12 generates “g ^a ” from the parameter “g” using the parameter “p” prior to the connection request (step 501). Here, the parameter “b” is unique to the communication node 12. Then, when a connection request has been transmitted is generated with UID and pwd to ^{"g a"} to the base station router 18 (step 502). This “g ^b ” is temporarily stored in the base station router 18.

The base station router 18 makes an authentication request to the authentication server 22 together with the UID and pwd (step 503), and generates “g ^a ” from the parameter “g” using the parameter “p”. (Step 504).
Here, the parameter “a” is unique to the base station router 18. If the authentication result transmitted from the authentication server 22 is “yes” (step 505), the base station router 18 transmits “g ^a ” generated in step 504 to the communication node 12 together with the connection permission (step 505). 50
6).

The communication node 12 generates “g ^ab ” using the parameter “b” unique to the received “g ^a ” (step 507). On the other hand, the base station router 18
“G ^ab ” is generated using the parameter “a” unique to “g ^b ” temporarily held (step 50).
9). “Gab” created in steps 507 and 509 is a common key (steps 508 and 51).
0), and thereafter, encrypted data communication using “g ^ab ” is performed between the communication node 12 and the base station router 18.

For example, referring to FIG.
Is transmitted to the base station router 12 in an encrypted state (step 407), and after being decrypted here, is transmitted to the destination content server (step 408). Similarly, when the content is supplied from the content server (step 409), the content is encrypted by the base station router 18 using the common key and then transmitted to the communication node 12 (step 41).
0). In this manner, the communication node 12 can connect to the Internet network 14 and access various sites. In the present embodiment, in consideration of the movement of the communication node 12, when the connection between the communication node 12 and the base station router 18 is established, the IP address acquired by the communication node 12 is provided to the home agent 24. be registered.

FIG. 6 is a diagram showing an outline of processing for realizing mobile communication. As shown in FIG.
2 transmits the acquired IP address to the home agent 24 during the connection to the Internet 14 via a certain base station router 18-i, and updates the IP address of the communication node 12 in the home agent 24. (See reference numeral).

On the other hand, when the communication node 12 moves away from the area 301 covered by the base station router 18-i, for example, moves, the communication node 12
When the intensity of the received radio wave is weakened, the peripheral base station router is scanned to find, for example, another base station router 18-j (see reference numeral). further,
When entering the area 302 of the base station router 18-j and determining that the radio wave intensity that can be received from the base station router 18-j is higher, the base station router 1
Switch 8-j. Here, similarly to the processing shown in FIGS. 4 and 5, the communication node 12 via the base station 18-j is used.
Authentication, and processing for ensuring confidentiality by generating a common key between the base station 18-j and the communication node 12 are executed.
The home agent 24 is notified of the IP address newly acquired by the communication node 12, and the home agent 2
At 4, the IP address of the communication node 12 is updated (see the reference numeral).

According to the present embodiment, a communication node can directly connect to the Internet without going through a circuit switching network. Therefore, data communication by connectionless packet switching can be realized. As a result, it is possible to use a flat-rate billing system without using a pay-as-you-go billing system like the Internet connection by a conventional portable terminal. Also, according to the present embodiment, connection to the Internet is realized by connecting the base station router 18 to an existing communication network owned by a type of ISP. Therefore, there is no need to manage a connection network between base stations, and the cost for installing base stations can be significantly reduced. This makes it possible to minimize capital investment even when expanding the service area. This also makes it possible to provide the user with a flat-rate billing.

Further, since the connection is not to the Internet via a gateway or the like, the connection is not limited to only web contents and e-mail via the Internet.
It is also possible to enjoy the use of the application. Further, since the data does not pass through a gateway, high-speed data communication can be realized without being affected by congestion.

In the present embodiment, the base station router 1
8 is operated as follows. FIG. 7 is a diagram illustrating an operation example of the system according to the present embodiment. As shown in FIG. 7, an operator (provider) using the base station router 18 connects the base station router 18 to a communication network of one kind of Internet service providers (ISPs) 701 and 702 to connect to the Internet network 14. Connection has been realized. For example, the base station routers 18-1, 18-2,.
01 are connected to the optical fiber networks 711 and 712, and the base station routers 18-i, 18-j,... Are connected to the xDSL network of the ISP 702.

An operator pays a communication network usage fee by borrowing a network in bulk from an ISP. Also,
The general user pays a fixed amount of Internet connection fee (access fee) to the operator. On the other hand, the base station router 18
(Hereinafter referred to as a “customer”) is connected to the wired side by the optical cable or xDSL, that is,
A branch access right on the wired side or a wireless access right via the installed base station router 18 is given free of charge.

The customers include, for example, owners of coffee shops and buildings. Fast food restaurants and restaurants can also be customers. For example, in a coffee shop, a fast food restaurant, or the like, a general user stays there for a certain period of time and activates the communication node 12 to connect to the Internet network 14 via the base station router 18 located in the shop. Access becomes possible. In addition, by installing the base station router 18 in the building, when a general user is in or around the building, the communication node 12 is operated, and the Internet network 14 via the base station router 18 installed in the building is operated.
Will be accessible. In this way, by giving the customer an incentive of free access right, it becomes possible to install many base station routers 18.

The present invention is not limited to the embodiments described above, and various modifications can be made within the scope of the invention described in the appended claims, which are also included in the scope of the present invention. Needless to say, this is done. In the above embodiment, a mobile phone-like terminal (see reference numeral 12-1 in FIG. 1) or a personal computer with a LAN card attached (see reference numeral 12-m) is used as a communication node. However, it is clear that other forms of communication nodes can be used. For example,
If it is a communication node for music reproduction that is always connected to a music distribution site, it may have a shape similar to a portable cassette recorder, and if it is a communication node that is connected to a movie distribution site, the number of keys may be reduced. Alternatively, the display may be enlarged.

Further, in the above embodiment, the key exchange is performed at the time of authentication of the communication node, but it is needless to say that the procedure is not limited to such a procedure. Further, in the above-described embodiment, an ISP optical cable or xDS
Although a base station router is connected to L, the present invention is not limited to this, and the base station router may be connected to any high-speed digital transmission medium that can be directly connected to the Internet network.

In the present invention, the communication node may always be connected to the Internet. As a result, the user can use only a single terminal, but can access a desired site at any time and at any time as long as the user is in the area covered by the base station router. In this specification, the function of one unit may be realized by two or more physical units, or the function of two or more units may be realized by one physical unit.

[0039]

According to the present invention, it is possible to provide a low-cost system that does not cause a problem of congestion without using a public switched network or a specific connecting station (centralized station). Becomes

[Brief description of the drawings]

FIG. 1 is a diagram illustrating an example of a conventional MIS system.

FIG. 2 is a block diagram schematically showing a communication system according to the present embodiment.

FIG. 3 is a diagram schematically showing a communication procedure when a communication node accesses the Internet in the communication system according to the present embodiment.

FIG. 4 is a flowchart showing the communication procedure shown in FIG. 3 in more detail;

FIG. 5 is a flowchart showing key exchange between a communication node and a base station router according to the present embodiment.

FIG. 6 is a diagram schematically illustrating a process for realizing mobile communication in the present embodiment.

FIG. 7 is a diagram illustrating an operation example of the system according to the present embodiment;

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 Communication system 12 Communication node 14 Internet network 16 Existing communication network 18 Base station router 20 ISP 22 Authentication server 24 Home agent

 ──────────────────────────────────────────────────続 き Continued on the front page F-term (reference)

Claims (10)

[Claims] 1. A communication system for connecting a communication node to an Internet network, the Internet service provider owning a high-speed IP network and forming a part of the Internet network. A base station router connected to the base station, and an authentication server having a user management database holding user information using a communication node connected to the Internet network. Between a wireless communication means for performing wireless communication with a communication node located in an area covered by the office router, and various servers connected to the Internet network including the authentication server via the line and the Internet network; Internet-side communication means for performing communication using IP, wherein the wireless communication means includes When receiving the user information and the connection request regarding the user using the communication node from the communication node,
The Internet-side communication means transmits the user information,
It is configured to be transmitted to an authentication server via the Internet network, to request the authentication, and to allow a communication node to connect to the Internet network via the base station according to the authentication result. Communication system. 2. The communication system according to claim 1, further comprising a home agent connected to the Internet network and registering an IP address obtained by a communication node accessing the Internet network. 3. A key generation / key generation method for generating a key to be exchanged with the communication node using a parameter common to the communication node and a unique parameter owned by the base station router in advance. Having a switching unit, wherein the wireless communication unit is configured to use the generated key to encrypt data to be transmitted to the communication node and to decrypt data transmitted from the communication node. The communication system according to claim 1 or 2, wherein: 4. A line constituting a high-speed IP network of the Internet service provider is an optical cable,
The communication system according to any one of claims 1 to 3, wherein the Internet-side communication means of the base station router has an optical fiber interface for converting the received data into a signal transmitted through the optical cable. 5. The communication according to claim 1, wherein the base station, the authentication server, and the home agent are controlled by a management system by an operator other than the Internet service provider. system. 6. An Internet service provider who owns a high-speed IP network and forms a part of the Internet network, is connected to one of lines constituting the high-speed IP network,
And an authentication comprising a base station router capable of wireless data communication with a base station located in a predetermined wireless propagation area, and a user management database holding user information using communication nodes connected to the Internet network. A data communication method for connecting a communication node to an Internet network in a system including a server, wherein the communication node transmits user information and a connection request to a base having a wireless propagation area covering a position of the communication node. Transmitting the user information and the connection request to the base station router via the line and the Internet network.
Data transmitted to an authentication server and receiving an authentication result from the authentication server; and transmitting a connection permission notification when authentication is successful based on the authentication result. Communication method. 7. The method according to claim 6, further comprising the step of registering an IP address obtained by a communication node with a home agent connected to the Internet network when the connection is permitted. Data communication method described. 8. The method according to claim 8, wherein the communication node generates first information using a first common parameter common to a base station router and a first unique parameter unique to the communication node. And transmitting the first information to the base station router when transmitting the connection request. The base station router includes: a first common parameter;
Using a second unique parameter unique to the base station,
Generating second information; and generating third information by using the first information and a second unique parameter. When the connection permission is transmitted, the second information is transmitted. 2 information to the communication node, and at the communication node, using the second information and the first unique parameter, third information equal to that generated at the base station router 8. The data communication method according to claim 6, further comprising the step of: generating the third information, and using the third information as a common key in the communication node and the base station router. 9. A communication node used in the communication system according to claim 1. Description: 10. A wireless communication adapter used in the communication system according to claim 1, wherein the wireless communication adapter is connected to a slot of a personal computer so that the personal computer and the base station router can be connected to each other. A wireless communication adapter for realizing data communication between the wireless communication adapters.