JP2004310581A - Network connecting method, and network system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a network connecting method, and a network system facilitating a procedure in service entry, and terminal operation in service connection. <P>SOLUTION: Information for connection to a second network is requested from a user terminal 10 to a linking device 40 via a first network 150. The information for connection to the second network is delivered from the linking device 40 to the user terminal 10 via the first network 150. The user terminal 10 sends a connection request to the second network 250 by using the information for connection to the second network. Authentication of the user terminal 10 is requested by sending the information for connection to the second network to the linking device 40 from the second network 250. The authentication of the user terminal 10 is carried out on the basis of the information for connection to the second network in the linking device 40. The second network 250 allows or rejects connection of the user terminal 10 in response to an authentication result by the linking device 40. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a network system that determines whether connection from a user terminal is possible or not by authentication.
[0002]
[Prior art]
According to the public wireless LAN, the user can connect to the LAN regardless of the location, so that the convenience is high. In a remote connection network system such as a public wireless LAN, authentication is performed to determine whether or not the user is connectable (for example, see Patent Document 1).
[0003]
In a network system using the authentication method described in Patent Literature 1, a user obtains an authentication ID and password using a user PHS terminal. Thereafter, the user connects to the remote connection device using the user PC.
[0004]
[Patent Document 1]
JP-A-2000-10927
[0005]
[Problems to be solved by the invention]
In the conventional public wireless LAN service, when subscribing to the service, a user has to perform a complicated procedure such as registering a credit card for charging. In addition, when using the subscribed service, the user has to manually input the user ID and password for authentication into the terminal.
[0006]
Further, an electronic certificate distributed by a third-party certificate authority or the like may be used to remotely connect to a corporate network via a VPN or to strengthen security of a wireless LAN connection. However, the distribution of the electronic certificate required a great deal of man-hour and cost.
[0007]
SUMMARY OF THE INVENTION An object of the present invention is to provide a network connection method and a network system that facilitate a procedure at the time of service subscription and a terminal operation at the time of service connection.
[0008]
[Means for Solving the Problems]
In order to achieve the above object, a network connection method according to the present invention is a network connection method for connecting a user terminal subscribed to a first network to a second network. A linking device for linking the second network is provided in advance, and the user terminal requests the linking device for the second network connection information via the first network, and the linking device sends the first network connection information to the first network. Paying out the second network connection information to the user terminal via the network, and making a connection request from the user terminal to the second network using the second network connection information; The network sends the second network connection information to the coordination device to request authentication of the user terminal, and the coordination device authenticates the user terminal based on the second network connection information. The second device according to the authentication result by the cooperation device. Network is permitted or denied method to connect the user terminal.
[0009]
Further, the network system of the present invention is a network system for linking a first network to which a user terminal is subscribed and a second network to which the user terminal is not subscribed. The second network connection information requested via the first network is given to the user terminal, and the user terminal uses the second network connection information when connecting to the second network. A coordinating device for performing authentication, and belonging to the first network, requesting the coordinating device for the second network connection information when requested by the user terminal for second network connection information, A first network authentication device that pays out the obtained second network connection information to the user terminal, and a second network connection device that belongs to the second network and uses the second network connection information from the user terminal. When a connection request to the second network is made, A second network authentication device that sends the second network connection information to a portable device to request authentication of the user terminal, and permits or denies the connection of the user terminal according to an authentication result by the cooperative device; And a network system having:
[0010]
Therefore, according to the present invention, the second terminal is given the second network connection information from the cooperation device via the first network to which the user terminal is subscribed, to the user terminal to be connected to the second network. When there is a connection request from the same user terminal to the second network using the second network connection information, the second network requests authentication to the cooperative device, and if the authentication is normally performed, the user terminal transmits to the second terminal. Since the connection to the network is made, authentication at the time of connection to the second network is possible by the connection information given to the user terminal via the first network without subscribing to the second network.
[0011]
In the present invention, the second network connection information may include user identification information and a password for connecting to the second network.
[0012]
Further, the password may be a one-time password that takes a different value each time it is paid out.
[0013]
Therefore, more secure authentication can be provided by using a one-time password as the password for the second network connection provided by the cooperative device to the user terminal.
[0014]
Further, the second network connection information may further include an electronic certificate.
[0015]
Therefore, the user terminal can acquire and use the electronic certificate in addition to the user identification information and the password for the second network connection from the cooperation device.
[0016]
Further, the first network may be a PHS network, and the second network may be a public wireless LAN service network.
[0017]
Therefore, mutual authentication of a wireless LAN conforming to IEEE802.1x is also possible.
[0018]
Further, when the authentication of the user terminal is normally performed, time information of the start of connection of the user terminal to the second network may be recorded and held by the cooperative device. Therefore, the cooperative device records and holds the time information of the connection of each user terminal to the second network at the time of authentication.
[0019]
Further, in the network system of the present invention, the authentication device may be incorporated in the first network authentication device. Alternatively, the authentication device may be incorporated in the second network authentication device.
[0020]
Therefore, since the first or second network authentication device also functions as an authentication cooperation device, it is possible to collectively manage the second network connection information in the first or second network without separately providing a cooperation device. it can.
[0021]
Further, the network system of the present invention obtains the second network connection information from the coordination device via the first network authentication device, and uses the second network connection information to acquire the second network connection information. The apparatus may further include the user terminal that automatically performs a network connection process for making a connection request to the user terminal.
[0022]
Therefore, the user terminal automatically obtains the second network connection information from the first network and makes a connection request to the second network by using the information. There is no need to be aware of the cooperation of networks.
[0023]
BEST MODE FOR CARRYING OUT THE INVENTION
An embodiment of the present invention will be described in detail with reference to the drawings.
[0024]
FIG. 1 is a diagram illustrating a configuration of a system according to the first embodiment. Referring to FIG. 1, the system of the first embodiment includes a PHS authentication device 20, a public wireless LAN service authentication device 30, and an authentication cooperation device 40.
[0025]
The PHS authentication device 20 is provided in a PHS network 150, and the public wireless LAN service authentication device 30 is provided in a public wireless LAN service network 250. The authentication cooperation device 40 is connected to both of the two authentication devices 20 and 30. The public wireless LAN service network 250 is connected to a network 350 such as the Internet, and enables connection from the user terminal 10 to the network 350.
[0026]
The user terminal 10 is an information processing device such as a notebook personal computer. A PHS card and a wireless LAN card are mounted on the user terminal 10.
As a result, the user terminal 10 can make an Internet connection via the PHS network 150 and an Internet connection through a public wireless LAN service. In addition, the user terminal 10 has installed therein public wireless LAN service automatic connection software, and operates by executing the software. The public wireless LAN service automatic connection software is software for performing authentication processing of a public wireless LAN service by the present system.
[0027]
The PHS authentication device 20 transmits a public wireless LAN service connection request via the PHS network 150 by the user terminal 10 executing the public wireless LAN service automatic connection software, and transmits the public wireless LAN service connection user ID and password. When you make a request, you receive that request. Then, the PHS authentication device 20 transmits the unique ID of the user terminal 10 to the authentication cooperation device 40, and requests the public wireless LAN service connection user ID and the password. The unique ID is identification information unique to each of the user terminals 10, and is, for example, a telephone number.
[0028]
When the user terminal 10 makes a public wireless LAN service connection request using the public wireless LAN service connection user ID and password, the public wireless LAN service authentication device 30 sends an authentication request to the authentication cooperation device 40. Thereafter, based on the authentication result by the authentication cooperation device 40, the connection to the network 350 by the user terminal 10 is permitted or rejected.
[0029]
Upon receiving the request for the public wireless LAN service connection user ID and password using the unique ID from the PHS authentication device 20, the authentication cooperation device 40 sends the public wireless LAN service connection user ID and password to the PHS authentication device 20. Pay out (send).
[0030]
Note that the password issued from the authentication cooperation device 40 may be a fixed password for each user terminal 10, or may be a one-time password having a different value each time it is issued. According to the fixed password, the number of operations performed by the authentication cooperation device 40 is reduced. On the other hand, the one-time password increases the security of authentication.
[0031]
Further, when receiving the authentication request for the connection of the public wireless LAN service from the public wireless LAN service authentication device 30, the authentication cooperation device 40 performs the authentication process using the user ID and the password for the connection of the public wireless LAN service, and returns the authentication result. . In the authentication process, the public wireless LAN service connection user ID and password issued and stored by the authentication cooperation device 40 and the public wireless LAN service connection received from the user terminal 10 via the public wireless LAN service authentication device 30. The user ID and password are collated.
[0032]
Further, the authentication cooperation apparatus 40 records and holds the unique ID of the user terminal 10, the user ID and password for connecting to the public wireless LAN service, and the information on the connection time to the public wireless LAN service in association with each other. The user is charged using the information. When the password paid out from the authentication cooperation device 40 is a one-time password, the password to be recorded is also updated every time the password is paid out.
[0033]
FIG. 2 is a sequence diagram showing a connection operation of the system according to the first embodiment. Referring to FIG. 2, first, in step A1, the public wireless LAN service automatic connection software of the user terminal 10 is activated.
[0034]
Next, in step A2, the user terminal 10 executing the public wireless LAN service automatic connection software requests the PHS authentication device 20 for the public wireless LAN service connection user ID and password via the PHS network 150.
[0035]
Next, in step A3, the PHS authentication device 20 that has received the request from the user terminal 10 transmits the unique ID of the user terminal 10 to the authentication cooperation device 40, and sets the user ID and the public wireless LAN service connection user ID. Require a password.
[0036]
Next, in step A4, the authentication cooperation device 40 that has received the request from the PHS authentication device 20 pays out (transmits) the public wireless LAN service connection user ID and password to the PHS authentication device 20.
[0037]
Next, in step A5, the authentication cooperation device 40 holds the unique ID of the user terminal 10 received from the PHS authentication device 20 in association with the public wireless LAN service connection user ID and password transmitted to the PHS authentication device 20. I do. The stored information is used for billing.
[0038]
In step A6, the PHS authentication device 20 pays out (sends) the public wireless LAN service connection user ID and password from the authentication cooperation device 40 to the user terminal 10.
[0039]
Next, in step A7, the user terminal 10 that has received the public wireless LAN service connection user ID and password from the PHS authentication device 20 automatically changes the public wireless LAN service authentication device 30 via the public wireless LAN service network 250. , A public wireless LAN service connection request is made using the public wireless LAN service connection user ID and password. For example, when the public wireless LAN service performs Web authentication, this connection request is made on an http basis.
[0040]
Next, in step A8, the public wireless LAN service authentication device 30 sends an authentication request to the authentication cooperation device 40 using the public wireless LAN service connection user ID and password received from the user terminal 10.
[0041]
Next, in step A9, the authentication cooperation apparatus 40 performs authentication using the public wireless LAN service connection user ID and the password from the public wireless LAN service authentication apparatus 30, and authenticates the authentication result to the public wireless LAN service authentication apparatus 30. Send to Here, a case where the authentication is normally performed and the connection is permitted as the authentication OK is shown.
[0042]
Next, in step A10, the authentication cooperation device 40 holds the time at which the authentication was normally performed as the connection start time in the charging database, and uses it as information used for charging. FIG. 3 is a diagram illustrating a data configuration of the accounting database. Referring to FIG. 3, the charging database records the unique ID of the user terminal 10, the user ID for public wireless LAN connection, the password for public wireless LAN connection, the connection start time, and the connection end time. Is being held. When calculating the hourly fee based on these pieces of information, the connection time of each user terminal 10 to the public wireless LAN is obtained.
[0043]
Next, in step A11, the public wireless LAN service authentication device 30 sends the authentication result from the authentication cooperation device 40 to the user terminal 10. Here, the authentication result of the authentication OK is sent.
[0044]
Next, in step A12, the user terminal 10 executing the public wireless LAN service automatic connection software confirms that the connection to the network 350 (for example, the Internet) has been successful, and indicates on the screen that the connection has been successful. Is displayed.
[0045]
As described above, the user terminal 10 is connected to the network 350 by the public wireless LAN service.
[0046]
FIG. 4 is a sequence diagram showing a disconnection operation of the system according to the first embodiment. Referring to FIG. 4, first, in step B1, the user terminal 10 executing the public wireless LAN service automatic connection software sends a network disconnection request to the public wireless LAN service authentication device 30. The public wireless LAN service connection ID and password are sent from the user terminal 10 to the public wireless LAN service authentication device 30 together with the network disconnection request.
[0047]
Next, in step B2, the public wireless LAN service authentication device 30 transmits a network disconnection request to the authentication cooperation device 40 together with the public wireless LAN connection user ID and password.
[0048]
Next, in step B3, the authentication cooperation device 40 confirms the public wireless LAN connection user ID and password and the network disconnection request, and sets the connection end time in the accounting database shown in FIG.
[0049]
Next, in step B4, the authentication cooperation device 40 transmits a network disconnection request to the public wireless LAN service authentication device 30.
[0050]
Next, in step B5, the public wireless LAN service authentication device 30 disconnects the user terminal 10 from the network 350.
[0051]
Here, an example is shown in which the user terminal 10 executing the public wireless LAN service automatic connection software automatically performs the disconnection operation shown in FIG. In this example, the public wireless LAN service automatic connection software includes a process of sending a network disconnection request to the public wireless LAN service authentication device 30 using the public wireless LAN service connection user ID and the password. The link device 40 can record the connection end time. However, in the present invention, this processing does not necessarily need to be included in the public wireless LAN service automatic connection software. In this case, only the connection start time is recorded in the charging database, and daily charging is possible thereby.
[0052]
As described above, according to the system according to the first embodiment, when the user terminal 10 executes the public wireless LAN service automatic connection software, the authentication coordination device is connected via the PHS authentication device 20 in the PHS network 150. 40, a public wireless LAN connection user ID and password are acquired, and a connection request is issued to the public wireless LAN service authentication device 30 in the public wireless LAN service network 250 using the user ID and password. The authentication request is sent from the device 30 to the authentication cooperation device 40, the authentication result by the authentication cooperation device 40 is notified to the public wireless LAN service authentication device 30, and the public wireless LAN service authentication device 30 permits the connection according to the authentication result. Or reject, do not subscribe to public wireless LAN service network 250. In both cases, authentication at the time of connection to the public wireless LAN service network 250 is possible by the connection information given to the user terminal 10 via the PHS network 150, and the user performs a procedure for subscribing to the public wireless LAN service. The public wireless LAN service can be easily used without any troublesome operation such as manually inputting a user ID and a password at the time of connection, and the PHS network 150 and the public wireless LAN service network can be used easily. It is possible to connect to the public wireless LAN service network 250 without being aware of the cooperation of the 250.
[0053]
In addition, by using a one-time password as the public wireless LAN service connection password provided by the authentication cooperation device 40 to the user terminal 10, it is possible to provide easy and secure authentication.
[0054]
In addition, since the authentication cooperation device 40 records and manages the connection time or connection time of each user terminal 10 to the public wireless LAN with the unique ID at the time of authentication or the user ID for connection to the public wireless LAN service, the connection to the public wireless LAN is controlled. The connection fee of each user terminal 10 can be easily calculated without managing the user's subscription and the connection time of the subscribed user.
[0055]
Here, an example in which the PHS network and the public wireless LAN are linked is shown, but the present invention is not limited to this, and can be similarly applied to any network.
[0056]
A second embodiment of the present invention will be described. The configuration of the system according to the second embodiment is the same as that shown in FIG.
[0057]
FIG. 5 is a sequence diagram showing the operation of the system according to the second embodiment. The system according to the second embodiment differs from the system according to the first embodiment in that an electronic certificate is used in addition to a user ID and password for public wireless LAN connection. An electronic certificate is a certificate given to prove the identity of a data creator, and is issued by a certificate authority. In the present embodiment, the authentication cooperation device 40 plays the role of a certificate authority.
[0058]
In the system according to the present embodiment, a unique ID (for example, a telephone number) used in the user terminal 10 subscribed to the PHS service is used as personal authentication of the user, and an electronic certificate for the user is distributed to the user terminal 10.
[0059]
Referring to FIG. 5, first, at step C1, the public wireless LAN service automatic connection software of the user terminal 10 is activated.
[0060]
Next, in step C2, the user terminal 10 executing the public wireless LAN service automatic connection software sends the public wireless LAN service connection user ID and password and the electronic certificate to the PHS authentication device 20 via the PHS network 150. Request.
[0061]
Next, in step C3, the PHS authentication device 20 that has received the request from the user terminal 10 transmits the unique ID of the user terminal 10 to the authentication cooperation device 40, and transmits the user ID for connecting to the public wireless LAN service and Request a password and digital certificate.
[0062]
Next, in step C4, the authentication cooperation device 40 that has received the request from the PHS authentication device 20 pays out (transmits) the public wireless LAN service connection user ID, password, and electronic certificate to the PHS authentication device 20. ).
[0063]
Next, in step C5, the authentication cooperation device 40 holds the unique ID of the user terminal 10 received from the PHS authentication device 20 in association with the public wireless LAN service connection user ID and password transmitted to the PHS authentication device 20. I do. The stored information is used for billing.
[0064]
In step C6, the PHS authentication device 20 pays out (sends) the public wireless LAN service connection user ID and password and the electronic certificate from the authentication cooperation device 40 to the user terminal 10.
[0065]
Next, in step C7, the user terminal 10 receives the public wireless LAN service connection user ID and password from the PHS authentication device 20, and the electronic certificate.
[0066]
Thereafter, when connecting to the public wireless LAN, the user terminal 10 uses the public wireless LAN service connection user ID, password, and electronic certificate. This connection is also performed by the user terminal 10 executing the public wireless LAN service automatic connection software.
[0067]
According to the second embodiment, the user terminal 10 can obtain and use an electronic certificate in addition to the public wireless LAN service connection ID and the password from the authentication cooperation device 40, so that the user is more secure. In addition, a VPN connection can be easily performed, and mutual authentication of a wireless LAN compliant with IEEE 802.1x is also possible.
[0068]
A third embodiment of the present invention will be described. FIG. 6 is a diagram illustrating a configuration of a system according to the third embodiment. Referring to FIG. 6, the system according to the third embodiment has a PHS authentication cooperation device 50 instead of the PHS authentication device 20 and the authentication cooperation device 40 of FIG. Other configurations are the same as those of the first embodiment shown in FIG.
[0069]
The PHS authentication cooperation device 50 has the function of the authentication cooperation device 40 of FIG. 1 incorporated in the PHS authentication device.
[0070]
Therefore, the PHS authentication coordinating device 50 sends the public wireless LAN service connection request via the PHS network 150 by the user terminal 10 executing the public wireless LAN service automatic connection software, and outputs the public wireless LAN service connection user ID. And a password, the public wireless LAN service connection user ID and password are paid out to the user terminal 10.
[0071]
Further, when receiving the authentication request for the connection of the public wireless LAN service from the public wireless LAN service authentication device 30, the PHS authentication cooperation device 50 performs the authentication process using the user ID and password for the connection of the public wireless LAN service, and returns the authentication result. I do.
[0072]
Further, the authentication cooperation apparatus 40 records and holds the unique ID of the user terminal 10, the user ID and password for connecting to the public wireless LAN service, and the information on the connection time to the public wireless LAN service in association with each other. The user is charged using the information.
[0073]
According to the third embodiment, since the PHS authentication device also functions as an authentication cooperation device, it is possible to collectively manage the public wireless LAN connection user ID and password on the PHS network side without separately providing an authentication cooperation device. As a result, the system configuration is simplified, and equipment and maintenance costs are reduced.
[0074]
A fourth embodiment of the present invention will be described. FIG. 7 is a diagram illustrating a configuration of a system according to the fourth embodiment. Referring to FIG. 7, the system according to the fourth embodiment has a public wireless LAN service authentication cooperation device 60 instead of the public wireless LAN service authentication device 30 and the authentication cooperation device 40 of FIG. Other configurations are the same as those of the first embodiment shown in FIG.
[0075]
The public wireless LAN authentication coordination apparatus 60 has the function of the authentication coordination apparatus 40 of FIG. 1 incorporated in a public wireless LAN service authentication apparatus.
[0076]
Therefore, when receiving the request for the public wireless LAN service connection user ID and password using the unique ID from the PHS authentication device 20, the public wireless LAN service authentication cooperation device 60 receives the request for the public wireless LAN service connection user ID and password. To the PHS authentication device 20.
[0077]
Further, when the user terminal 10 makes a public wireless LAN service connection request using the public wireless LAN service connection user ID and password, the public wireless LAN service authentication cooperation device 60 The authentication process is performed using the password, and the connection to the network 350 by the user terminal 10 is permitted or rejected based on the authentication result.
[0078]
Further, the public wireless LAN service authentication coordinating apparatus 60 records the unique ID of the user terminal 10, the user ID and password for connecting to the public wireless LAN service, and the information on the connection time to the public wireless LAN service in association with each other, The information is stored, and each user is charged using the information.
[0079]
According to the fourth embodiment, since the public wireless LAN service authentication device also functions as an authentication cooperation device, the public wireless LAN connection user ID and password can be transmitted to the public wireless LAN service network without separately providing an authentication cooperation device. , The system configuration is simplified, and equipment and maintenance costs are reduced.
[0080]
【The invention's effect】
According to the present invention, the second terminal is given the second network connection information to the user terminal to be connected to the second network from the cooperative device via the first network to which the user terminal subscribes. When there is a connection request from the terminal to the second network using the second network connection information, the second network requests authentication to the cooperative device, and if the authentication is normally performed, the user terminal is connected to the second network. Since the connection is established, it is possible to authenticate at the time of connection to the second network by the connection information given to the user terminal via the first network without subscribing to the second network. The user can easily use the second network without performing a procedure for joining the second network and without performing complicated operations such as manually inputting connection information such as a user ID and a password at the time of connection. can do.
[0081]
Further, by using a one-time password as the password for the second network connection provided by the cooperative device to the user terminal, more secure authentication can be provided.
[0082]
Also, the user terminal can obtain and use the electronic certificate in addition to the user identification information and password for the second network connection from the cooperative device, so that the user can more securely and easily connect to the VPN. .
[0083]
Also, mutual authentication of a wireless LAN compliant with IEEE 802.1x is possible.
[0084]
In addition, since the cooperative device records and holds the time information of the connection of each user terminal to the second network at the time of authentication, it manages the registration of the user to the second network and the connection time information of the subscribed user. It is possible to easily calculate the connection fee of each user terminal without performing.
[0085]
In addition, since the first or second network authentication device also functions as an authentication cooperation device, it is possible to collectively manage the second network connection information in the first or second network without separately providing a cooperation device. As a result, the system configuration is simplified, and equipment and maintenance costs are reduced.
[0086]
Also, the user terminal automatically obtains the second network connection information from the first network, and uses it to make a connection request to the second network, so that the user can connect to the first network and the second network. Can be connected to the second network without being aware of the cooperation of the other networks.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration of a system according to a first embodiment.
FIG. 2 is a sequence diagram showing a connection operation of the system according to the first embodiment.
FIG. 3 is a diagram showing a data configuration of a charging database.
FIG. 4 is a sequence diagram showing a disconnection operation of the system according to the first embodiment.
FIG. 5 is a sequence diagram showing an operation of the system according to the second embodiment.
FIG. 6 is a diagram illustrating a configuration of a system according to a third embodiment.
FIG. 7 is a diagram illustrating a configuration of a system according to a fourth embodiment.
[Explanation of symbols]
10 User terminal
20 PHS authentication device
30 Public wireless LAN service authentication device
40 Authentication linkage device
50 PHS authentication coordination device
60 Public Wireless LAN Service Authentication Cooperation Device
150 PHS network
250 Public wireless LAN service network
350 Network
A1-A12, B1-B5, C1-C7 steps

Claims (15)

A network connection method for connecting a user terminal subscribed to a first network to a second network,
A coordination device that cooperates the first network and the second network is provided in advance,
Requesting second network connection information from the user terminal to the coordination device via the first network,
Paying out the second network connection information from the coordination device to the user terminal via the first network,
Making a connection request from the user terminal to the second network using the second network connection information;
Requesting authentication of the user terminal by sending the second network connection information from the second network to the cooperation device,
Authenticating the user terminal based on the second network connection information in the cooperation device,
A network connection method, wherein the second network permits or denies the connection of the user terminal according to an authentication result by the cooperation device. 2. The network connection method according to claim 1, wherein the second network connection information includes user identification information and a password for connecting to the second network. The network connection method according to claim 2, wherein the password is a one-time password that takes a different value each time the password is issued. 4. The network connection method according to claim 2, wherein the second network connection information further includes an electronic certificate. The network connection method according to any one of claims 1 to 4, wherein the first network is a PHS network, and the second network is a public wireless LAN service network. The method according to any one of claims 1 to 5, wherein when the authentication of the user terminal is performed normally, time information of the start of connection of the user terminal to the second network is recorded and held by the cooperative device. The described network connection method. A network system for linking a first network to which a user terminal is subscribed and a second network to which the user terminal is not subscribed,
The second network connection information requested from the user terminal via the first network is given to the user terminal, and the second terminal is connected to the second network when the user terminal connects to the second network. A coordination device that performs authentication using information,
Belonging to the first network, when requesting the second network connection information from the user terminal, requesting the second network connection information from the coordination device, the second network connection information obtained from the coordination device A first network authentication device that pays out network connection information to the user terminal;
Belonging to the second network, when a request for connection to the second network is made from the user terminal using the second network connection information, the second network connection And a second network authentication device that sends information to request authentication of the user terminal, and permits or denies connection of the user terminal according to an authentication result by the cooperative device. The network system according to claim 7, wherein the second network connection information includes user identification information and a password for connecting to the second network. 9. The network system according to claim 8, wherein the password is a one-time password having a different value each time the password is issued. The network system according to claim 8, wherein the second network connection information further includes an electronic certificate. The network system according to any one of claims 7 to 10, wherein the first network is a PHS network, and the second network is a public wireless LAN service network. The said cooperation apparatus records the time information of the connection start of the said user terminal to the said 2nd network, and hold | maintains, when the authentication of the said user terminal is performed normally. The network system according to 1. The network system according to claim 7, wherein the authentication device is incorporated in the first network authentication device. The network system according to any one of claims 7 to 12, wherein the authentication device is embedded in the second network authentication device. A network connection process for acquiring the second network connection information from the coordination device via the first network authentication device, and requesting a connection to the second network using the second network connection information The network system according to any one of claims 7 to 15, further comprising the user terminal that automatically performs the operation.

Images