JP2004140563A - Communication system and communication terminal device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To ensure security in a wireless communication system using both of a high-speed communication system and a low-speed communication system. <P>SOLUTION: The wireless communication system has the low-speed communication system consisting of a low-speed system base station CS and a mobile communication network MCN, and the high-speed communication system consisting of a high-speed system wireless base station AP and a high-speed backbone network HSN. A security management server SES for performing security processing such as authentication of security information is directly connected to the network MCN by an exclusive line, and the transmission of security information to the server SES is carried out via the low-speed communication system having comparatively high security. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a data communication method in a high-speed communication device, and more particularly to a wireless communication method using a system interconnected with a low-speed wireless communication system such as a mobile phone including a PHS and a high-speed wireless communication system such as a wireless LAN. The present invention relates to communication control of a communication network.
[0002]
[Prior art]
2. Description of the Related Art In recent years, wireless LAN (Local Area Network) systems have become increasingly popular as systems that enable high-speed wireless communication with mobile stations. However, at present, an area where a wireless service provided by a high-speed wireless communication system such as a wireless LAN can be received is a limited place such as a campus. Therefore, when using a high-speed system service, a terminal corresponding to the high-speed system wireless communication service is used, and a target communication partner (a wireless base station or the like) is used via an access point (wireless base station or the like) of the high-speed system wireless communication system. Server, etc.).
[0003]
On the other hand, a mobile communication network of a mobile phone that provides a low-speed wireless communication service is still realized nationwide. Therefore, even in a place where the high-speed wireless communication service cannot be used, it is possible to access a target communication partner from the low-speed wireless communication system using a terminal corresponding to the low-speed wireless communication service.
[0004]
As a system that takes advantage of both of these advantages, a wireless communication system that can use both a high-speed wireless system and a low-speed wireless communication system without intervention of a user regarding the proper use of both systems has been proposed ( For example, Patent Document 1).
[0005]
[Patent Document 1]
JP 2001-144815 A (Page 4-9, FIG. 1-6)
[0006]
[Problems to be solved by the invention]
In such a wireless communication system, after the mobile terminal once secures the line of the high-speed communication system, the mobile terminal waits until the communication ends or the mobile terminal moves out of the high-speed wireless communication area. Communication using the communication system (high-speed communication) is continued. In this case, information (for example, personal information such as a personal telephone number, a personal identification number of a portable terminal device, and a credit card number) that needs to ensure security (security) with a communication partner ( Communication (defined as "security information" in this specification) also uses communication between a mobile station and a high-speed wireless base station or the Internet.
[0007]
Generally, a mobile communication network of a mobile phone including a PHS is configured by a dedicated line and a communication device peculiar to each mobile phone operator, and is managed by those limited operators, and access from a source other than the mobile phone is performed. Is difficult, so the security on security is relatively high. On the other hand, a high-speed communication system such as a high-speed backbone network connected via a wireless LAN or the like can be easily accessed via a public line by any communication device such as a personal computer, similarly to the Internet. Is considered low.
[0008]
That is, in the conventional wireless communication system using both the high-speed and low-speed wireless communication systems as described above, information (security information) such as personal information that needs to ensure security is intended by the user. Irrespective of this, there is a possibility that communication may be performed via communication between a mobile terminal and a high-speed wireless base station having relatively low security or via Internet communication. That is, there is a risk that important data of an individual or important data of a service provider may be leaked due to unauthorized access, hacking, or the like.
[0009]
The present invention has been made to solve the above problems, and provides a communication system capable of ensuring security in a wireless communication system using both a high-speed system and a low-speed system. The purpose is to do.
[0010]
[Means for Solving the Problems]
The communication system according to claim 1, wherein a first communication network and a second communication network connectable to each other, a communication terminal connectable to both the first communication network and the second communication network, A service server for providing content to the communication terminal via a first communication network and the second communication network, and security for personal information and the like directly connected to the first communication network and transmitted from the communication terminal A security management server that performs security processing necessary for accessing specific content provided by the service server based on the information, and wherein the security information from the communication terminal to the security server is provided. Is transmitted only through the first communication network.
[0011]
BEST MODE FOR CARRYING OUT THE INVENTION
<Embodiment 1>
FIG. 1 is a diagram showing a configuration of a wireless communication system according to Embodiment 1 of the present invention. The mobile terminal device MT can be connected to a low-speed communication network and a high-speed communication network. Here, a mobile communication network MCN that provides services such as a mobile phone including a PHS is assumed as a low-speed communication system. Communication between the portable terminal device MT and the mobile communication network MCN is performed via the low-speed radio base station CS connected to the mobile communication network MCN by wire. In addition, a security management server SES that performs security processing such as authentication based on security information such as personal information transmitted from the mobile terminal device MT is directly connected to the mobile communication network MCN via a dedicated line. Although only one low-speed radio base station CS is shown in FIG. 1, a plurality of radio base stations CS are actually connected to the mobile communication network MCN, and each of the radio base stations CS has an area of the mobile communication network. Is provided.
[0012]
Also, a wireless LAN system is assumed as a high-speed communication system. The mobile terminal device MT can be connected to a high-speed backbone network HSN via a high-speed wireless base station AP that provides a wireless LAN area. Although only one high-speed wireless base station AP is shown in FIG. 1, a plurality of high-speed wireless base stations AP are actually distributed and installed in various places.
[0013]
The high-speed backbone network HSN is connected to a service server SS that provides contents to the portable terminal device MT via the Internet network INET. The contents provided by the service server SS include, in addition to ordinary contents, contents that require a specific access right obtained as a result of security processing such as authentication processing based on security information for accessing, and security information used for the security processing. (Hereinafter, “content exclusively for security processing”) and the like. Examples of the security information include a personal telephone number, a personal identification number of a portable terminal device, and a credit card number. The content dedicated to security processing includes, for example, an identifier indicating that an input of security information is required in data of content information in accordance with a predetermined rule (that is, an identifier indicating that the content is content dedicated to security processing), and security management. This is a signal to which an access method to the server SES is added.
[0014]
The security management server SES is a server that performs security processing such as authentication of security information and is directly connected to the mobile communication network MCN via a dedicated line. Access to the security management server SES is always performed by the low-speed wireless base station CS. And a low-speed communication system including a mobile communication network MCN. The security management server SES has a URL (Uniform Resource) indicating the location of the content that needs access right and exists in the service server SS.
Locator) is stored in advance.
[0015]
The mobile communication network MCN is connected to the high-speed backbone network HSN via a gateway device GW. The gateway device GW relays a signal of a communication channel between a low-speed communication system and a high-speed communication system having different communication speeds, so that a communication between the mobile communication network MCN and the high-speed backbone network HSN is performed. Communication becomes possible.
[0016]
An operation of the wireless communication system according to the present embodiment will be described. Here, an operation in a case where the mobile terminal device MT attempts to access content that requires an access right by security processing from a state where a high-speed communication has already been established will be described. 2, 3, and 4 are a sequence diagram showing a communication control operation of the entire wireless communication system in that case, a flowchart showing an operation of the mobile terminal device MT, and a flowchart showing an operation of the service server SS, respectively. In FIG. 2, thin arrows indicate signals transmitted / received via the low-speed communication system (low-speed communication signals), and thick arrows indicate signals transmitted / received via the high-speed communication system (signals). High-speed communication signal). The following description will be basically made based on the sequence diagram of FIG. 2, but S101 to S113 shown in parentheses in the following description correspond to the steps in the flowchart of FIG. 4 corresponds to the steps in the flowchart of FIG.
[0017]
First, it is assumed that the mobile terminal apparatus MT is connected to a high-speed communication system via a high-speed wireless base station AP. Then, the mobile terminal device MT transmits a content request 100 for accessing predetermined content to the high-speed wireless base station AP (S101). Here, the mobile terminal device MT is trying to connect to the content for security processing in order to obtain the right to access a specific content, that is, the content request 100 is for requesting the content for security processing.
[0018]
Upon receiving the content request 100, the high-speed wireless base station AP transmits the content request 100 to the high-speed backbone network HSN as a content request 101. The high-speed backbone network HSN transmits the received content request 101 as a content request 102 to the service server SS via the Internet network INET. Then, the service server SS receives the content request 102 (S121).
[0019]
Upon receiving the content request 102, the service server SS returns content information corresponding to the request (S122). Here, since the content request 102 requests the content dedicated to security processing, the content information 103 returned by the service server SS is the content information dedicated to security processing. As described above, the content dedicated to security processing is content that prompts the terminal that has received the security processing to input security information.
[0020]
The content information 103 transmitted from the service server SS is received by the high-speed backbone network HSN via the Internet network INET, and transmitted as the content information 104 to the high-speed wireless base station AP. The high-speed wireless base station AP transmits the content information 105 to the portable terminal device MT, and the portable terminal device MT receives the content information 105 (S102). The mobile terminal device MT that has received the content information 105 checks whether or not the content information 105 is content dedicated to security processing (S103).
[0021]
At this time, if the content information 105 is information of normal content that is not content dedicated to security processing, a reproduction process adapted to the content is performed (S112), and a user operation wait state is set (S113). Here, the content information 105 is information on content dedicated to security processing. In this case, the mobile terminal MT performs a process of switching a communication system (communication line) to be used to a low-speed line (S104). Then, the mobile terminal device MT prompts the user to input security information, and transmits the input security information as the security information 106 to the service server SS using the low-speed communication system (S105). The low-speed radio base station CS receives the security information 106 and transmits it as security information 107 to the mobile communication network MCN. The mobile communication network MCN that has received the security information 107 transmits it as security information 108 to the security management server SES.
[0022]
Upon receiving the security information 108, the security management server SES performs security processing such as personal authentication, acquisition of a credit number, collation, or billing based on the security information 108. As a result of the security processing, when the normal processing has been completed normally, an access permission signal 109 including an access right to specific content is generated and transmitted to the mobile communication network MCN. The access permission signal 109 does not include the content of the security information transmitted from the mobile terminal device MT. The mobile communication network MCN that has received the access permission signal 109 is transmitted to the low-speed radio base station CS as the access permission signal 110. The low-speed radio base station CS that has received the access permission signal 110 transmits it to the portable terminal device MT as the access permission signal 111. Then, the mobile terminal device MT receives the access permission signal 111 (S106).
[0023]
Upon receiving the access permission signal 111, the mobile terminal apparatus MT sends a content position information request 112 requesting information indicating the position of the content using the access permission signal (content requiring the access right) to the security management server SES. (S107).
[0024]
The content location information request 112 is received by the low-speed radio base station CS and transmitted to the mobile communication network MCN as the content location information request 113. The mobile communication network MCN that has received the content location information request 113 transmits it to the security management server SES as a content location information request 114. Upon receiving the content location information request 114, the security management server SES transmits the location information of the content requiring the access right, for example, its URL or the like as the content location information 115 to the mobile communication network MCN. The mobile communication network MCN transmits it to the low-speed radio base station CS as the content location information 116. The low-speed wireless base station CS that has received the content location information 116 transmits the content location information 117 to the portable terminal device MT as content location information 117. Then, the mobile terminal device MT receives the content position information 117 (S108).
[0025]
Upon receiving the content location information 117, the mobile terminal device MT switches the communication system (communication line) to be used to a high-speed line (S109). Then, a content request 118 including the location of the content indicated by the content location information 117 and the information of the access right acquired earlier by the access permission signal 111 is generated, and is transmitted to the service server SS using a high-speed communication system. It is transmitted (S110). Also in this case, the access right information included in the content request 118 does not include the content of the security information transmitted from the mobile terminal device MT, and does not include the security information as a whole of the content request 118.
[0026]
The content request 118 is received by the high-speed wireless base station AP and transmitted to the high-speed backbone network HSN as a content request 119. The high-speed backbone network HSN that has received the content request 119 transmits it as a content request 120 to the service server SS via the Internet network INET. Then, the service server SS receives the content request 120 (S123).
[0027]
Upon receiving the content request 120, the service server SS extracts the access right information and the content location information included in the content request 120, and checks whether the target content has an access right (S124). When it is determined that the user has the access right, access to the content is permitted, and the content information 121 corresponding to the content location information is transmitted to the portable terminal device MT (S125). (S126). If it is determined that there is no access right, an error signal indicating that access is not permitted is transmitted to the portable terminal device MT (S127), and then a request waiting state is set (S126). Here, it is assumed that it is determined that there is an access right.
[0028]
Access to the content is permitted, and the content information 121 transmitted from the service server SS is received by the high-speed backbone network HSN via the Internet network INET. The high-speed backbone network HSN transmits the content information 122 to the high-speed wireless base station AP. The content information 122 received by the high-speed wireless base station AP is transmitted as content information 123 and received by the portable terminal device MT (S111). Thereby, the access to the content requiring the access right by the portable terminal device MT is completed.
[0029]
Upon receiving the content information 123, the mobile terminal device MT performs reproduction, display processing, or storage processing adapted to the content (S112). After processing the content, the mobile terminal device MT enters a request waiting state (S113).
[0030]
The above operation is focused on the portable terminal device MT, the security management server SES, and the service server SS, and the communication system to be used is classified into a high-speed system and a low-speed system, as shown in the sequence diagram of FIG. As can be seen from this figure, according to the wireless communication system according to the present embodiment, even when portable terminal device MT is using a high-speed communication system, communication of information related to security processing is automatically performed. This is performed via a low-speed communication system. That is, unlike a conventional wireless communication system that uses both a low-speed communication system and a high-speed communication system, communication of security information (106 to 108) for which high security must be ensured is always performed by a low-speed communication system. Only done by.
[0031]
As described above, the mobile communication network MCN, which is a low-speed communication system, has relatively high security, and the high-speed backbone network HSN and the Internet, which are high-speed communication systems, have relatively low security. That is, according to the present embodiment, the communication of security information is always performed only by the communication system having the higher security among the two communication systems, and the security information is leaked due to unauthorized access, hacking, or the like. And tampering can be prevented. After the security processing is completed, the process returns to the high-speed communication, and the advantage of the high-speed communication system that high-speed communication is possible is utilized.
[0032]
Note that, in the present embodiment, the identifier indicating that the content is dedicated to security processing included in the content information 103 to 105 is determined by the service server SS to be accessed (that is, the server that provides the content dedicated to security processing). If they are different, or if they are different content dedicated to security processing even in the same service server SS, each may have a configuration having a different identifier. Accordingly, it is possible to prompt input of appropriate security information corresponding to each of the service server SS or the content dedicated to security processing, and it is possible to flexibly respond to any security information.
[0033]
When the service server SS has a plurality of contents that can be accessed with the same access right, the service server SS is controlled so that the plurality of contents can be accessed with the access right acquired by one access permission signal. Is also good. This can save the user of the mobile terminal device MT from repeatedly inputting the security information, and reduce the number of times the security information is transmitted to the communication system. Sex can be further suppressed.
[0034]
Further, in the above example, the access permission signals 109 to 111 and the content location information 112 to 114 are transmitted separately, but a signal including both information is transmitted from the security management server SES as an access permission signal. It may be. Thereby, the number of times of communication using the low-speed communication is reduced, so that the mobile terminal device MT can more quickly acquire the access right and the content position.
[0035]
Further, in this embodiment, the security management server SES according to the present invention is newly provided as a special server connected to the mobile communication network MCN, but the existing server is provided in the conventional low-speed communication network. (For example, the management device DB in Patent Literature 1) may have a configuration having the same function, which can contribute to simplification of the system configuration.
[0036]
In the above description, it is assumed that the mobile terminal device MT is connected to the high-speed communication system in advance. However, as described above, at this time, the wireless service provided by the high-speed wireless communication system such as the wireless LAN is not available. The area that can be received (that is, the area of the high-speed wireless base station AP) is a limited place such as a campus. In a place where a high-speed wireless communication service cannot be used, the above-described operation may be performed using only a low-speed wireless communication system widely provided. Also in this case, the communication of the security information is performed only by a relatively low-speed wireless communication system having relatively high security, and leakage or falsification of the security information due to unauthorized access, hacking, or the like is prevented. Then, for example, when the mobile terminal apparatus MT moves into the area of the high-speed wireless base station AP, if the high-speed communication system is preferentially used, high-speed communication can be performed. Benefits are taken advantage of.
[0037]
<Embodiment 2>
In the second embodiment, a configuration example in which the content information dedicated to security processing is transmitted from the security management server SES to the portable terminal device MT instead of the service server SS. That is, in the present embodiment, the content dedicated to security processing is provided by the security management server SES. If the received content request is a request for the content dedicated to security processing, the service server SS returns location information such as a URL indicating the location of the content dedicated to security processing on the security management server SES. In that case, normal content information is returned. The security processing-dedicated content position information is, for example, information obtained by adding an identifier indicating that the content is the security processing-dedicated content position information to the content in accordance with a predetermined rule.
[0038]
Note that, also in the present embodiment, the overall system configuration is the same as the system configuration shown in FIG. 1, and a detailed description thereof will be omitted.
[0039]
Hereinafter, the operation of the wireless communication system according to the present embodiment will be described. Also in this case, the mobile terminal device MT is mutually connectable to a low-speed communication network and a high-speed communication network, and it is assumed that the mobile terminal device MT has already established high-speed communication. An operation in a case where an attempt is made to access content that requires an access right by security processing from that state will be described. 6, 7, and 8 are a sequence diagram showing the communication control operation of the entire wireless communication system in that case, a flowchart showing the operation of the portable terminal device MT, and a flowchart showing the operation of the service server SS. In FIG. 6, thin arrows indicate signals transmitted / received through the low-speed communication system (low-speed communication signals), and thick arrows indicate signals transmitted / received via the high-speed communication system (signals). High-speed communication signal). The following description is basically based on the sequence diagram of FIG. 6, but S201 to S215 shown in parentheses in the following description correspond to the steps in the flowchart of FIG. 8 corresponds to the steps in the flowchart of FIG.
[0040]
First, it is assumed that the mobile terminal apparatus MT is connected to a high-speed communication system via a high-speed wireless base station AP. Then, the mobile terminal device MT transmits a content request 200 for accessing predetermined content to the service server SS via the high-speed communication system (S201). Here, too, the mobile terminal device MT is trying to connect to the content dedicated to security processing in order to obtain the right to access specific content, that is, the content request 200 requests the content dedicated to security processing.
[0041]
When the mobile terminal device MT transmits the content request 200 (S201), the content request 200 is transmitted as a content request 201 to the high-speed backbone network HSN via the high-speed wireless base station AP, and further transmitted to the content via the high-speed backbone network HSN. The request is received by the service server SS as a request 202 (S221).
[0042]
As described above, the service server SS according to the present embodiment, when the received content request is a request for the security processing-dedicated content, such as a URL indicating the position of the security processing-dedicated content on the security management server SES. Returns location information, otherwise returns normal content information. Here, since the content request 202 requests the security processing-specific content, the service server SS transmits security processing-specific content position information 203 indicating the position of the security processing-specific content as a response (S222).
[0043]
The security processing-dedicated content position information 203 transmitted from the service server SS is received by the high-speed backbone network HSN via the Internet network INET, and transmitted as the security processing-dedicated content position information 204 to the high-speed wireless base station AP. The high-speed wireless base station AP transmits this to the portable terminal device MT as the content position information 205 dedicated to security processing, and the portable terminal device MT receives it (S202). The portable terminal device MT that has received the content information 105 checks whether or not the response is content position information dedicated to security processing (S203).
[0044]
If the response is normal content information other than the content position information dedicated to security processing, a reproduction process adapted to the content is performed (S214), and the process waits for a user operation (S215). Here, the response is the security processing-dedicated content position information 205. In this case, the mobile terminal MT performs a process of switching the communication system (communication line) to be used to a low-speed line (S204). Then, the mobile terminal apparatus MT sends a security processing-dedicated content request 206 for requesting a security processing-dedicated content corresponding to the received security processing-dedicated content position information 205 to the low-speed radio base station using the low-speed communication system. The message is transmitted to the CS (S205). That is, the security processing-dedicated content information request 206 is transmitted to the mobile communication network MCN as the security processing-dedicated content information request 207 via the low-speed radio base station CS, and further transmitted via the mobile communication network MCN. It is received by the security management server SES as a dedicated content information request 208.
[0045]
Upon receiving the security processing content information request 208, the security management server SES generates the security processing content information 209 corresponding to the request 208 and transmits it to the mobile communication network MCN. The security processing-dedicated content information 209 is transmitted as security processing-dedicated content information 210 to the low-speed radio base station CS via the mobile communication network MCN, and further transmitted as security processing-dedicated content information 211 via the low-speed radio base station CS. The data is transmitted and received by the mobile terminal device MT (S206).
[0046]
The mobile terminal device MT that has received the security processing-specific content information 211 prompts the user to input security information, and transmits the input security information as the security information 212 to the service server SS using the low-speed communication system. (S207). The security information 212 is transmitted as security information 213 to the mobile communication network MCN via the low-speed radio base station CS, and further transmitted as security information 214 to the security management server SES via the mobile communication network MCN. .
[0047]
Upon receiving the security information 214, the security management server SES performs security processing such as personal authentication, acquisition of a credit number, collation, or billing based on the security information. As a result of the security processing, when the normal processing is completed normally, an access permission signal 215 including an access right to specific content is generated and transmitted to the mobile communication network MCN. The access permission signal 215 does not include the content of the security information transmitted from the mobile terminal device MT. The access permission signal 215 is transmitted as an access permission signal 216 to the low-speed radio base station CS via the mobile communication network MCN, and further transmitted as an access permission signal 217 to the portable terminal device MT via the low-speed radio base station CS. Is done. Then, the mobile terminal device MT receives the access permission signal 217 (S208).
[0048]
Upon receiving the access permission signal 217, the mobile terminal apparatus MT sends a content position information request 218 requesting information indicating the position of the content using the access permission signal (content requiring the access right) to the security management server SES. (S209).
[0049]
The content location information request 218 is transmitted as a content location information request 219 to the mobile communication network MCN via the low-speed radio base station CS, and is further transmitted as a content location information request 220 via the mobile communication network MCN. Sent to server SES. Upon receiving the content location information request 220, the security management server SES transmits, for example, its URL or the like as content location information 221 to the mobile communication network MCN as content location information of the content requiring the access right. The content location information 221 is transmitted as content location information 222 to the low-speed radio base station CS via the mobile communication network MCN, and is further transmitted as content location information 223 via the low-speed radio base station CS. The message is transmitted to the MT, and the portable terminal device MT receives it (S210).
[0050]
Upon receiving the content position information 223, the mobile terminal device MT switches the communication system (communication line) to be used to a high-speed line (S211). Then, a content request 224 including the location of the content indicated by the content location information 223 and the information of the access right acquired earlier by the access permission signal 217 is generated, and is transmitted to the service server SS using a high-speed communication system. It is transmitted (S212). Also in this case, the access right information included in the content request 224 does not include the content of the security information transmitted from the mobile terminal device MT, and does not include the security information as the entire content request 224.
[0051]
The content request 224 is transmitted as a content request 225 to the high-speed backbone network HSN via the high-speed wireless base station AP. The high-speed backbone network HSN that has received the content request 225 transmits it as a content request 226 to the service server SS via the Internet network INET. Then, the service server SS receives the content request 226 (S213).
[0052]
Upon receiving the content request 226, the service server SS extracts the access right information and the content location information included in the content request 226, and checks whether the target content has an access right (S224). If it is determined that the user has the access right, the access to the content is permitted, and the content information 227 corresponding to the content location information is transmitted to the mobile terminal device MT (S225), and thereafter, the device enters a request waiting state. (S226). If it is determined that there is no access right, an error signal indicating that the access is not permitted is transmitted to the portable terminal device MT (S227), and then a request waiting state is set (S226). Here, it is assumed that it is determined that there is an access right.
[0053]
Access to the content is permitted, and the content information 227 transmitted from the service server SS is received by the high-speed backbone network HSN via the Internet network INET. The high-speed backbone network HSN transmits the content information 228 to the high-speed wireless base station AP. The content information 228 received by the high-speed wireless base station AP is transmitted as content information 229 and received by the mobile terminal device MT (S213). Thereby, the access to the content requiring the access right by the portable terminal device MT is completed.
[0054]
Upon receiving the content information 123, the mobile terminal device MT performs reproduction, display processing, or storage processing adapted to the content (S214). After processing the content, the mobile terminal device MT enters a request waiting state (S215).
[0055]
The above operation is focused on the mobile terminal device MT, the security management server SES, and the service server SS, and the communication system to be used is classified into a high-speed system and a low-speed system, as shown in the sequence diagram of FIG. As can be seen from this figure, according to the wireless communication system according to the present embodiment, even when portable terminal device MT is using a high-speed communication system, communication of information related to security processing is automatically performed. This is performed via a low-speed communication system. That is, unlike the conventional wireless communication system using both the low-speed communication system and the high-speed communication system, the communication of the security information (213 to 214) for which high security must be ensured is always performed by the low-speed communication system. Only done by.
[0056]
That is, also in the present embodiment, the communication of the security information is always performed by the communication system having the higher security among the two communication systems, and the security information is leaked or falsified due to unauthorized access or hacking. Can be prevented. After the security processing is completed, the process returns to the high-speed communication, and the advantage of the high-speed communication system that high-speed communication is possible is utilized.
[0057]
Also in the present embodiment, the identifier indicating the security processing dedicated content information included in the security processing dedicated content information 209, 210, and 211 is used when the security processing dedicated content provided by the security management server SES is different. May have different identifiers. As a result, it is possible to prompt input of appropriate security information corresponding to each of the contents dedicated to security processing, and it is possible to flexibly cope with all kinds of security information.
[0058]
When the service server SS has a plurality of contents that can be accessed with the same access right, the service server SS is controlled so that the plurality of contents can be accessed with the access right acquired by one access permission signal. Is also good. This can save the user of the mobile terminal device MT from repeatedly inputting the security information, and reduce the number of times the security information is transmitted to the communication system. Sex can be further suppressed.
[0059]
Furthermore, in the above example, the access permission signals 215 to 217 and the content location information 221 to 223 are transmitted separately, but a signal including both information is transmitted from the security management server SES as an access permission signal. It may be. Thereby, the number of times of communication using the low-speed communication is reduced, so that the mobile terminal device MT can more quickly acquire the access right and the content position.
[0060]
Also in the present embodiment, the security management server SES according to the present invention is newly provided as a special server connected to the mobile communication network MCN, but the existing server is provided in the conventional low-speed communication network. (For example, the management device DB in Patent Literature 1) may have a configuration having the same function, which can contribute to simplification of the system configuration.
[0061]
Also, in the present embodiment, it is assumed that mobile terminal device MT is connected to a high-speed communication system in advance. However, in a place where high-speed wireless communication service cannot be used, low-speed communication provided over a wide range is provided. The above-described operation may be performed using only the system wireless communication system. Then, for example, when the mobile terminal apparatus MT moves into the area of the high-speed wireless base station AP, if the high-speed communication system is preferentially used, high-speed communication can be performed. Benefits are taken advantage of.
[0062]
【The invention's effect】
As described above, according to the communication system of the first aspect, communication of security information is always performed only by the first communication network. Therefore, if a relatively high-security communication network is used for the first communication network among the first and second communication networks, leakage or falsification of security information due to unauthorized access, hacking, or the like can be prevented. . For example, in an existing communication system, a mobile communication network providing a mobile phone service has relatively high security, and a high-speed backbone network connectable via a wireless LAN has relatively low security. In this case, a mobile communication network may be used as the first communication network, and a high-speed backbone network may be used as the second communication network. Furthermore, although the area where the existing wireless LAN service can be received is small, high-speed communication is possible in which communication with a normal service server is performed via the wireless LAN, thereby enabling high-speed communication. The advantages of the system are also utilized.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration of a wireless communication system according to a first embodiment.
FIG. 2 is a sequence diagram showing a communication control operation in the wireless communication system according to the first embodiment.
FIG. 3 is a flowchart showing an operation of the portable terminal device MT in the wireless communication system according to the first embodiment.
FIG. 4 is a flowchart showing an operation of the service server SS in the wireless communication system according to the first embodiment.
FIG. 5 is a sequence diagram for describing effects in the wireless communication system according to the first embodiment.
FIG. 6 is a sequence diagram showing a communication control operation in the wireless communication system according to the second embodiment.
FIG. 7 is a flowchart showing an operation of the mobile terminal device MT in the wireless communication system according to the second embodiment.
FIG. 8 is a flowchart showing an operation of a service server SS in the wireless communication system according to the second embodiment.
FIG. 9 is a sequence diagram for explaining an effect of the wireless communication system according to the second embodiment.
[Explanation of symbols]
MT mobile terminal device, CS low-speed wireless base station, MCN mobile communication network, SES security management server, AP high-speed wireless base station, HSN high-speed backbone network, GW gateway device, INET Internet network, SS service server.

Claims (10)

A first communication network and a second communication network connectable to each other;
A communication terminal connectable to both the first communication network and the second communication network;
A service server that provides content to the communication terminal via the first communication network and the second communication network;
A security management server that is directly connected to the first communication network and performs security processing necessary to access specific content provided by the service server based on security information such as personal information transmitted from the communication terminal; A wireless communication system comprising:
A communication system, wherein transmission of the security information from the communication terminal to the security server is performed only through the first communication network. The communication system according to claim 1, wherein
The communication terminal is a mobile communication terminal having a function as a mobile phone terminal and a function as a wireless LAN terminal,
The first communication network is a mobile communication network that provides a service of the mobile phone,
The second communication network is a high-speed backbone network having a higher communication speed than the mobile communication network connectable via the wireless LAN,
The communication system, wherein the communication terminal performs communication with the service server by using the second communication network with priority. The communication system according to claim 1 or claim 2,
The service server further provides a content that prompts the communication terminal to input the security information (hereinafter, “content exclusively for security processing”),
The communication system according to claim 1, wherein the communication terminal switches the communication network to be used to the first communication network when receiving the security processing content. The communication system according to claim 1 or claim 2,
The security management server further provides the communication terminal with location information of the content dedicated to security processing,
The service server further provides location information of the security processing dedicated content provided by the security management server,
Upon receiving the location information, the communication terminal switches a communication network to be used to the first communication network, and requests the security management server for the security processing-dedicated content corresponding to the location information. Communication system. A communication control method in the communication system according to claim 3 or 4, wherein:
The communication system according to claim 1, wherein each of the content for security processing has a different identifier according to a type of the content for security processing or a type of a server that provides the content for security processing. A communication control method in the communication system according to claim 1, wherein:
A communication system, wherein a single security process in the security management server enables access to a plurality of the specific contents. A first communication network to which a security management server that performs processing necessary for accessing specific content based on security information such as personal information is directly connected, and a first communication network that can be connected to the first communication network. A communication terminal device connectable to both of the first communication network and the service server that provides the content via the first communication network and the second communication network,
The communication terminal device, wherein the transmission of the security information to the security server is performed only through the first communication network. The communication terminal device according to claim 7, wherein
The first communication network is a mobile communication network that provides a mobile phone service,
The second communication network is a high-speed backbone network having a higher communication speed than the mobile communication network connectable via a wireless LAN,
The communication terminal device is a mobile communication terminal having a function as a terminal of the mobile phone and a function as a terminal of the wireless LAN, and preferentially uses the second communication network for communication with the service server. A communication terminal device. The communication terminal device according to claim 7 or 8, wherein:
A communication terminal device that switches a communication network to be used to the first communication network when receiving a content dedicated to security processing. The communication terminal device according to claim 7 or 8, wherein:
A communication terminal device, wherein upon receiving position information of security processing-dedicated content, a communication network to be used is switched to the first communication network, and a request is made for the security processing-dedicated content corresponding to the position information.

Images