JP2002345041A - Method for registering secret information in subscriber terminal - Google Patents

Abstract

PROBLEM TO BE SOLVED: To overcome such a problem that the burden of work for writing an authentication key is excessive and the secrecy of the authentication key is lowered when forwarding a subscriber terminal. SOLUTION: This method is provided with a maintenance operating client 8 for automatically generating the authentication key by operating a random number on the basis of an ID assigned to a subscriber terminal 1, a subscriber terminal connecting interface 9 for writing the authentication key received from this maintenance operating client 8 into a subscriber terminal 1' before installation and a maintenance operating server 7 for writing the masked authentication key and the ID received from the maintenance operating client 8.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method for registering secret information in a subscriber terminal when registering an authentication key or the like in a wireless local fixed wireless device, and more particularly to a method for performing PHS wireless communication with a base station. The present invention relates to a method for registering secret information in a subscriber terminal when writing authentication key data in a subscriber terminal.

[0002]

2. Description of the Related Art In a depopulated area, a PHS radio wave is transmitted between a base station installed on a telephone pole in the area and each subscriber terminal in order to reduce equipment costs such as a communication line using a metal pair line. Communication is performed. In this case, it is necessary to write, in each subscriber terminal, data of an authentication key for keeping confidentiality of the terminal in accordance with the PHS standard together with a terminal ID which is a unique number corresponding to each subscriber terminal. Further, it is necessary to write the data of the terminal ID and the authentication key corresponding to each subscriber terminal in the database of the exchange on the base station side and the database of the supervisory control station that controls a plurality of exchanges. Of course, it is necessary to write the data of the terminal ID and the authentication key of the same symbol and number in the database of each subscriber terminal and the exchange and the supervisory control station.

FIG. 3 is a schematic diagram of a conventional wireless local loop fixed radio system (WLL system) and a conceptual diagram showing a method of writing an authentication key. FIG.
In the WLL system, 21 is a subscriber terminal (WS).
U: wireless service unit), 22 is a base station (WCS: wireless cell station), 2
3 is an exchange (WAC: wireless access controller), 27 is a maintenance operation server (WOPS server:
Reference numeral 28 denotes a maintenance operation client (WOPS client: WLL).
Operation system client), and 29 is a data writing device.

In the conventional WLL system shown in FIG. 3, every time the subscriber terminal 21 is shipped to the customer, the maker uses the data writing device 29 to identify the terminal ID of the subscriber terminal 21.
And authentication key data writing. At this time, at the same time, the maintenance operation server 27 under the jurisdiction of the telecommunications carrier side.
Also, the same terminal ID and authentication key are written from the data writing device 29 to the exchange 23 as well. After the maker performs such a writing operation, the communication carrier gives a predetermined telephone number to the subscriber terminal 21, whereby highly confidential communication is performed based on the PHS standard. The maintenance operation client 28 is a WLL.
It is a monitor device such as a personal computer that monitors the entire system.

Japanese Patent Application Laid-Open No. 8-79816 discloses that
A method for generating authentication information in a mobile terminal is disclosed. According to this technology, a manufacturer writes a sequence number and authentication information in a ROM of a mobile terminal and ships the same, and a communication carrier calculates a random number corresponding to the sequence number to generate an authentication number. Then, when the mobile terminal is sold by the dealer, the seller notifies the communication carrier of the sequence number of the sold mobile terminal, and the communication carrier allows the customer to select one telephone number. This allows the telecommunications carrier to register the sequence number, telephone number and authentication number in association with each other. Can be implemented.

[0006]

However, in the conventional authentication key data writing method as shown in FIG. 3, it is necessary to write the authentication key data on the maker side every time the subscriber terminal is shipped. For this reason, there has been a problem that the work load on the manufacturer side increases, and the work efficiency deteriorates, and the installation workability decreases. Furthermore, each time a subscriber terminal is installed individually, the manufacturer must write the authentication key data and then notify the communication carrier and related organizations of the authentication key number. However, there is a problem that the security of the authentication key is reduced, and the security of the communication is reduced as a result.

In the technique disclosed in Japanese Patent Application Laid-Open No. Hei 8-79816, although the work load on the manufacturer side is somewhat reduced, generation of a sequence number, generation of an authentication number, and reporting of a sold mobile terminal are performed. And so on are performed by different organizations, so that the problem of complicating the management of customer data and lowering the confidentiality of the authentication information still remains.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-described problems, and it is possible to reduce the burden of writing an authentication key at the time of shipping a subscriber terminal and to reduce the confidentiality of communication. An object of the present invention is to provide a method for registering secret information in a subscriber terminal.

[0009]

SUMMARY OF THE INVENTION A method for registering secret information in a subscriber terminal according to the present invention is a method for registering an ID and an authentication key in a subscriber terminal that performs wireless communication with a base station. In the method for registering secret information according to the first aspect, the registration of the authentication key includes the first procedure of connecting the subscriber terminal before installation to the interface of the maintenance operation client for monitoring and controlling the communication state of the subscriber terminal, and the subscriber before installation. A second procedure in which the maintenance operation client writes the ID determined corresponding to the terminal, a third procedure in which the maintenance operation client calculates a random number by using ID writing software to generate an authentication key, and A fourth procedure in which the authentication key and the ID are written to the maintenance server, and the generated authentication key and the ID are set via the interface of the maintenance client. 5 to be written to the previous subscriber terminal
Is performed through the following procedure.

[0010] A method for registering secret information in a subscriber terminal according to the present invention comprises the steps of:
The authentication key and the ID are masked and written.

In the method for registering secret information in a subscriber terminal according to the present invention, when an ID is written by a maintenance operation client in a second procedure, an authentication key is automatically generated in a third procedure in conjunction therewith. Things.

[0012]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described below. Embodiment 1 FIG. FIG. 1 is a configuration diagram of a wireless local loop fixed wireless system (WLL system) according to the present invention. In FIG. 1, 1 is a subscriber terminal (WSU:
Wireless service unit), 2 is a base station (WCS:
Wireless cell station), 3 is exchange (WAC:
Wireless access controller), 4 is a public network, and 5 is a wireless access monitoring control station.

The subscriber terminal 1 is wired indoors, but communicates with the base station 2 by PHS radio waves, and has a unique terminal ID number and a subscriber ID for each subscriber. An authentication key number unique to the user terminal 1 is provided. The authentication key number is a 16-digit number generated by a random number. It should be noted that the terminal ID and the authentication key are managed by the communication carrier, and only the telephone number of the subscriber terminal 1 is known to the subscriber, and these terminal IDs and the number of the authentication key are not known.

The base station 2 is installed, for example, on a telephone pole at the center of a village, and has a jurisdiction over a communication area of a plurality of subscriber terminals 1 and communicates with each of the subscriber terminals 1 by PHS radio waves. At the same time, transmission and reception with the exchange 3 by optical communication (optical entrance) or wireless communication (wireless entrance) is performed. The exchange 3 has jurisdiction over a plurality of base stations 2 and selectively controls access to each base station 2. The public network 4 is a so-called communication network, and connects a plurality of exchanges.

The radio access monitoring and control station 5 is managed by a communication carrier, is a monitoring and control station for controlling communication of PHS radio waves, and includes a router 6 for interconnecting LANs, A maintenance operation server (WOPS server: WLL operation system server) 7 that stores terminal IDs, authentication keys, installation locations, and other individual data relating to the terminals 1 in a database and manages communication for each base station group, and writes IDs. Software (WOPS client: W), such as a personal computer that installs software for
LL operation system client) 8. Therefore, the operator automatically generates an authentication key while looking at the screen of the maintenance operation client 8, but at this time, the authentication key itself is masked and cannot be seen. Since the same data is distributed from the router 6 to the database of the exchange 3 and the database of the maintenance operation server 7, the same data is stored in the exchange 3 and the maintenance operation server 7.

The radio access monitoring and control station 5 has a subscriber terminal connection interface 9 as shown by a broken line in the figure, and connects the subscriber terminal 1 'before installation to the subscriber terminal connection interface 9. By doing so, the terminal ID and the authentication key acquired from the maintenance operation client 8 can be written to the subscriber terminal 1 'before installation.
The communication carrier manages the wireless access monitoring control station 5 configured as described above, and writes the data of the terminal ID and the authentication key to the subscriber terminal 1 ′ before the installation delivered from the manufacturer. The subscriber terminal 1 is installed in a predetermined place.

The subscriber terminal 1 in which the data of the terminal ID and the authentication key is written, performs optical communication between the exchange 3 and the base station 2 under the control of the radio access monitoring control station 5 in a normal communication operation. Transmission / reception by optical communication or wireless communication (wireless entrance) is performed, and communication by PHS radio waves is performed between the base station 2 and the subscriber terminal 1. At this time, the subscriber terminal 1 is performing communication using PHS radio waves while maintaining high confidentiality using the terminal ID and the authentication key.

Next, the flow of the operation of writing the terminal ID and the authentication key according to the present invention will be described. FIG. 2 is a conceptual diagram showing a method of writing an authentication key in the WLL system of the present invention. That is, FIG. 2 is a diagram functionally depicting the WLL system of FIG. 1 along the flow of the authentication key. First, in the wireless access monitoring control station 5 of FIG. 1 managed by the communication carrier, the ID writing software is installed in the maintenance operation client 8 and the subscriber terminal connection interface 9 is provided. Further, the communication carrier connects the subscriber terminal 1 ′ before installation to the subscriber terminal connection interface 9.

Next, the write operation in the radio access monitoring control station 5 will be described with reference to FIG. First, the telecommunications carrier manages subscribers, so that a terminal ID (hereinafter referred to as WSU-ID) corresponding to the subscriber terminal 1 'before installation is provided.
Decide. Then, the determined WSU-ID is written by the maintenance operation client 8 in which the ID writing software is installed. At this time, while viewing the screen of the maintenance operation client 8, the WSU-
When the ID is written, the maintenance operation client 8 calculates a random number using ID writing software to generate an authentication key. Then, the 16-digit authentication key generated by the maintenance operation client 8 is written to the maintenance operation server 7 together with the WSU-ID while being masked in a form invisible to the operator of the communication carrier. Further, the authentication key generated by the maintenance operation client 8 is also transmitted to the exchange 3.

On the other hand, the authentication key and the WSU-ID are transmitted from the maintenance operation client 8 to the subscriber terminal connection interface 9 at the same time, level-converted, and written into the subscriber terminal 1 'before installation. In this way, the authentication key and the WSU-ID are registered for the entire WLL system including the subscriber terminal 1 'before installation. Thereafter, the telecommunications carrier installs the subscriber terminal 1 'before installation as a subscriber terminal 1 at a predetermined installation location. Thereby, the confidentiality of the authentication key is sufficiently maintained, and the authentication key and the WSU-ID of the subscriber terminal 1 are registered in the entire WLL system, and the PHS
The operation of communication by radio waves is started.

As described above, according to the authentication key writing method in this embodiment, the authentication key of the subscriber terminal is masked in a manner invisible to the operator in the radio access monitoring control station of the communication carrier. Is written
Confidentiality can be made extremely high. Therefore, an effect is obtained that communication confidentiality can be maintained at a high level. Also, even if the maker does not write the authentication key every time the subscriber terminal is shipped, before installing the subscriber terminal on the telecommunications carrier side, the terminal ID and the authentication key can be set in the installation work flow. Since the writing operation only needs to be performed, an effect of extremely improving the operation efficiency can be obtained.

Further, since the subscriber management data including the terminal ID and the authentication key is managed on the communication carrier side, even if the current subscriber terminal fails, the replacement work of the subscriber terminal can be performed by the manufacturer. Can be performed by the telecommunications carrier without relying on. In other words, on the carrier side,
The terminal ID of the corresponding subscriber terminal and the data of the authentication key may be automatically written into the spare terminal device to be replaced, so that the replacement work can be easily performed only by the judgment of the communication carrier. The effect is also obtained.

The embodiment described above is an example for explaining the present invention, and the present invention is not limited to the above embodiment, and various modifications are possible within the scope of the invention. is there. For example, in the above embodiment, the case where the authentication key is generated by running a random number independently of the terminal ID has been described. However, the authentication key can be automatically generated in conjunction with the writing of the terminal ID. .

[0024]

As described above, according to the present invention, the communication carrier writes the authentication key into the subscriber terminal and the maintenance operation server immediately before installation by the maintenance operation client under its control. Thus, the work efficiency of the communication carrier is improved, and the work load on the maker side for supplying the subscriber terminal is reduced. Furthermore, since the writing operation can be performed collectively by the maintenance operation client, there is an effect that there is no need for a communication step between workers and there is no possibility that secret information leaks.

According to the present invention, since the authentication key and the ID are configured to be written while being masked, the confidentiality of the authentication key is further improved. Therefore, there is an effect that communication confidentiality can be maintained at a high level.

According to the present invention, when the ID is written, the authentication key is automatically generated in conjunction therewith, so that the operation of writing the authentication key is simplified and the authentication key is not forgotten to be written. , ID for subscriber terminal
Since the authentication key and the authentication key are always registered as a pair, it is possible to construct an extremely confidential wireless communication system.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of a wireless local loop fixed wireless system (WLL system) according to the present invention.

FIG. 2 is a conceptual diagram showing a method of writing an authentication key in the WLL system of the present invention.

FIG. 3 is a configuration diagram of a wireless local loop fixed wireless system (WLL system) and a conceptual diagram illustrating a method of writing an authentication key in a conventional technique.

[Explanation of symbols]

1 subscriber terminal (WSU), 1 'subscriber terminal before installation (WSU), 2 base station (WCS), 3 exchange (WA)
C), 4 public network, 5 wireless access monitoring and control station, 6
Router, 7 maintenance operation server (WOPS server), 8
Maintenance operation client (WOPS client), 9
Subscriber terminal connection interface.

Continuation of the front page (72) Inventor Yukihide Mizumoto 2-3-1 Otemachi, Chiyoda-ku, Tokyo F-term in Nippon Telegraph and Telephone Corporation (reference) 5J104 AA16 BA06 EA04 EA26 NA02 PA02 5K067 AA32 AA44 BB04 BB08 DD43 EE02 EE10 EE16 GG01 GG11 HH23 HH24 KK11

Claims (3)

[Claims] 1. A method for registering secret information in a subscriber terminal when registering an ID and an authentication key in a subscriber terminal performing wireless communication with a base station, wherein the registration of the authentication key is performed by the subscriber A first procedure for connecting a subscriber terminal before installation to an interface of a maintenance operation client for monitoring and controlling the communication state of the terminal; and an ID determined corresponding to the subscriber terminal before installation by the maintenance operation client. A second procedure of writing, a third procedure in which the maintenance operation client calculates a random number by using ID writing software to generate an authentication key, and the generated authentication key and the ID are written in the maintenance operation server. A fourth procedure in which the generated authentication key and the ID are written to the subscriber terminal before installation via an interface of a maintenance client. 5. A method for registering confidential information in a subscriber terminal, the method comprising: 2. The method for registering secret information in a subscriber terminal according to claim 1, wherein in the fourth and fifth procedures, the authentication key and the ID are masked and written. 3. The authentication key according to claim 1, wherein when the ID is written by the maintenance operation client in the second procedure, the authentication key is automatically generated in the third procedure. How to register confidential information at the subscriber terminal.