JP2006262068A - Mobile communication system and mobile communication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a mobile communication system and mobile communication method having high security without requiring complicated maintenance and operation. <P>SOLUTION: The mobile communication system having a home agent for transferring a communication packet to mobile communication equipment connected to a foreign network is provided with: an address management means for managing a plurality of IP addresses; an address generation means for allocating any of the IP addresses managed by the address management means to the mobile communication equipment as a home address; a server device for storing the home address of the mobile communication equipment and specific information on the mobile communication equipment in association with each other; and a transmitter node which is connected to the server device via the network and transmits the communication packet to any of the home addresses stored in the server device as a transmitted party. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a mobile communication system and a mobile communication method having a home agent for transferring a communication packet to a mobile communication device connected to a foreign network, and more specifically, high security without requiring complicated maintenance and operation. The present invention relates to a mobile communication system and a mobile communication method.

  FIG. 10 is a diagram showing a configuration of a conventional mobile communication system. 11 and 12 are diagrams showing the configurations of the mobile communication device 10 and the home agent 20 shown in FIG.

  In FIG. 10, a home network 100 is a subnetwork to which a mobile communication device (hereinafter abbreviated as device) 10 is originally connected. The foreign network 200 is a subnetwork to which the device 10 that has moved from the home network 100 is actually connected. The device 10 can be carried and carried, and the connected subnetwork changes as the device 10 moves. The personal computer 30 is a transmission source node, and communicates with the device 10 by transmitting and receiving communication packets.

  The home network 100, the foreign network 200, and the personal computer 30 are connected by the Internet 300. The networks 100 and 200 are provided with routers R1 and R2, respectively, and are connected to nodes in the networks 100 and 200.

  In FIG. 11, the device 10 includes a memory 11, an address generation unit 12, and an authentication unit 13, corresponds to a communication protocol mobile IPv6 (Internet Protocol Version 6), and has a so-called mobile node (Mobile Node) function in mobile IP. Have. The memory 11 has specific information (for example, an identifier such as a serial number) for identifying the device 10 and a MAC (Media Access Control) address in advance (for example, when the device 10 is manufactured or repaired). Is remembered. The address generation unit 12 generates an IP address of the device 10 and stores it in the memory 11. The authentication unit 13 authenticates the communication partner node.

  In addition, the device 10 is assigned a home address and a care-of address. The home address is an address uniquely assigned to the device 10 without depending on the sub-network, and is the same network address as the home network 100. The care-of address is an address assigned by the foreign network 200.

  In FIG. 12, the home agent 20 includes a memory 21, a transfer unit 22, and an authentication unit 23, operates on a node in the home network 100, and when the device 10 is in the foreign network 200, a communication packet addressed to the device 10. The transfer means 22 transfers the data to the device 10 with reference to the contents of the memory 21. The authentication unit 23 authenticates the communication partner node.

The operation of such a system will be described.
First, an operation for registering the device 10 in the home agent 20 will be described.
A user activates the home agent 20 on a node having a home agent function on the home network 100 and installs the device 10 in the home network 100. The router R1 gives a prefix (corresponding to the network address of the home network 100) to the device 10. As a result, the address generation means 12 of the device 10 generates the home address of the device 10 from the MAC address stored in the memory 11 of the device 10 and the assigned prefix, and stores the home address in the memory 11. Further, the home address is stored in the memory 21 of the activated home agent 20. Then, a shared key generation unit (not shown) generates a first shared key and stores it in the memories 11 and 21 of the device 10 and the home agent 20, respectively.

Next, an operation of registering that the device 10 is installed in the foreign network 200 with the home agent 20 will be described.
The device 10 is installed in the foreign network 200. Then, the router R2 existing in the foreign network 200 gives a prefix (corresponding to the network address of the foreign network 200) to the device 10. Thereby, the address generation means 12 of the device 10 generates a care-of address of the own device 10 in the foreign network 200 from the MAC address stored in the memory 11 of the device 10 and the assigned prefix, and stores the care-of address in the memory 11. .

  Then, the device 10 transmits a communication packet including the care-of address to the home agent 20. At this time, the device 10 shows validity to the home agent 20 using the first shared key stored in the memory 11. The authentication means 13 and 23 of each of the device 10 and the home agent 20 authenticate with the first shared key. If the authentication is successful, the communication packet encrypted with the first shared key is transmitted and received, and the care-of address in the communication packet is stored in the memory 21, but the home address of the device 10 and the care-of address are associated with each other. Register in the memory 21.

  Next, an operation of transmitting a communication packet from the personal computer 30 to the device 10 connected to the foreign network 200 will be described. The personal computer 30 transmits a communication packet using the home address of the device 10 as a transmission destination. The home agent 20 takes this communication packet, knows the transfer destination of the communication packet from the correspondence between the home address in the memory 21 and the care-of address, and transmits the communication packet to the device 10 as the transfer address. As a result, the communication packet issued from the personal computer 30 reaches the foreign network device 10 and communication between the device 10 and the personal computer 30 is started.

Japanese Patent No. 3617952 Japanese Patent No. 3621917

  The user uses the specific information of the device 10 to identify the destination device 10 from among a plurality of devices. For this reason, the user creates a list in which the serial number and home address of the device 10 are recorded in the personal computer 30 or the like, refers to this list, searches for the home address of the device 10 from the specific information of the device 10, and It was necessary to input the home address of the computer into the personal computer 30. That is, it is necessary to separately manage a list describing the correspondence between the specific information of the device 10 and the home address.

  In addition, as the number of devices 10 increases, (1) it takes time to create a list, (2) there is a high possibility that an error will occur when the list is created, and (3) each time communication with the device 10 is performed, a huge list is created. There is a problem that it takes time to search for the device 10 from the inside, and (4) when setting the home address obtained from the list in the personal computer 30, there is a high possibility that a setting error will occur.

  Furthermore, there is a problem that communication with the device 10 is performed by a malicious third party who obtains the list.

  An object of the present invention is to realize a mobile communication system and a mobile communication method having high security without requiring complicated maintenance and operation.

  To achieve this object, the invention according to claim 1 is an address management means for managing a plurality of IP addresses in a mobile communication system having a home agent for transferring a communication packet to a mobile communication device connected to a foreign network. And an address generation means for assigning one of the IP addresses managed by the address management means to the mobile communication device as a home address, and storing the home address of the mobile communication device and the specific information of the mobile communication device in association with each other And a server node connected to the server apparatus via a network and transmitting the communication packet with any one of home addresses stored in the server apparatus as a transmission destination.

  According to a second aspect of the present invention, in the mobile communication system according to the first aspect, the transmission source node includes an external storage device that stores information associated with specific information stored in the server device. To do.

  According to a third aspect of the invention, in the first aspect of the invention, the address management means manages the address block.

  According to a fourth aspect of the present invention, in the mobile communication system according to the first or second aspect, the server device includes an HTTP server that operates in response to a request from the transmission source node, a home address of the mobile communication device, and the mobile communication device. And a processing unit for performing processing for displaying information on the device selected as the transmission source node on a browser.

  According to a fifth aspect of the present invention, in the mobile communication system according to the first to fourth aspects, the home agent and the mobile communication device share the first key, and the source node and the mobile communication device share the second key. The shared mobile communication device includes an authentication unit that performs authentication using each of the first and second keys.

  According to a sixth aspect of the present invention, in the mobile communication system according to the first to fifth aspects, the external storage device stores the second key in association with specific information stored in the server device, and the transmission It is characterized in that it is detachably connected to the original node.

  The invention according to claim 7 is the mobile communication system according to claim 5, wherein the authentication unit is configured such that the transmission source node and the server device share a third key, and authentication is performed using the third key. It is characterized by performing.

  The invention according to claim 8 is the mobile communication system according to claim 4, wherein the table stores screen information to be displayed on a browser of a transmission source node.

  The invention according to claim 9 is the mobile communication system according to any one of claims 1 to 8, wherein the screen information is hypertext and includes icon information related to the specific information of the mobile communication device. To do.

  According to a tenth aspect of the present invention, in the mobile communication system according to any one of the first to ninth aspects, the mobile communication device has a communication protocol of mobile IP.

  The invention according to claim 11 is a mobile communication method having a home agent for transferring a communication packet to a mobile communication device connected to a foreign network, wherein the address management means manages the address block; The home address of the mobile communication device, the home agent storing the home address, the mobile communication device storing a shared key, and the server device storing the home address of the mobile communication device. Storing the specific information including the address in association with each other, storing the shared key in the transmission source node, and the transmission source node using the home address of the server device, the specific information, and the shared key of the external storage device A communication packet is connected to the mobile communication device. Transmitting the communication packet from the transmission source node, the authentication means of the mobile communication device authenticates the transmission source node from the stored shared key, and the transmission source And initiating communication with the node.

The present invention has the following effects.
According to the first to tenth aspects, the server device stores the mobile communication device specific information and the home address in association with each other, and the home address of the mobile communication device is assigned an IP address managed by the address management means. Thus, for example, if a home agent is provided in the network of the address managed by the address management means, the user does not need to individually operate the home agent, and the specific information and home information are transmitted to the source node used for transmission. There is no need to create a list of addresses. Thereby, it is possible to prevent a mistake in creating a list, association, a mistake in setting a home address for a transmission source node, and the like.

  According to the sixth aspect, since only the mobile communication device and the transmission source node have the second shared key, the information of the communication packet between the mobile communication device and the transmission source node is not easily leaked / falsified. Thereby, even if the operator of the home agent is different from the operator of the mobile communication device or the server device, high security can be maintained.

  Also, by storing the second shared key on the source node side in the external storage device, a third party who does not have the external storage device cannot communicate with the mobile communication device. Therefore, high security can be achieved without requiring complicated maintenance and operation. The external storage device may have a relatively small capacity, and even if it is lost, the contents are only part of the second shared key and the specific information of the corresponding device, so the risk is Less.

  Furthermore, according to claim 7, by having the third shared key between the transmission source node and the server device, a third party who does not have the third shared key cannot access the server device. Therefore, it can have higher security.

  According to the ninth aspect, since the table of the server device includes icon information related to the specific information of the mobile communication device, the desired specific information is searched from the icon image as compared with the tabular list by text. be able to. Thereby, desired specific information can be easily discriminated, and selection errors of mobile communication devices can be prevented.

  According to the eleventh aspect, the IP address managed by the address management means is allocated to the mobile communication device as a home address, the shared key is stored in the mobile communication device and the transmission source node, and the server device stores the home address of the mobile communication device and The specific information is associated and stored, and the shared key is stored in the transmission source node. Then, the transmission source node transmits a communication packet to the mobile communication device using the home address of the server device, the specific information, and the shared key of the external storage device, and the home agent transfers the communication packet from the transmission source node. To do. Further, the authentication means of the mobile communication device authenticates the transmission source node from the stored shared key, and starts communication with the transmission source node. Thus, for example, if a home agent is provided in the home network managed by the address management means, the user does not need to individually operate the home agent, and the specific information and home address are transmitted to the source node used for transmission. This eliminates the need to create a list, and can prevent a mistake in creating the list, associating it, and setting a home address for the transmission source node. Further, only the mobile communication device and the transmission source node have a shared key, and the shared key on the transmission source node side is detachably stored in the external storage device so that it does not have an external storage device. A third party cannot communicate with the mobile communication device. Accordingly, it is possible to have high security without requiring complicated maintenance and operation, and it is difficult for information of communication packets between the mobile communication device and the memory device to be leaked or falsified. Thereby, even if the operator of the home agent is different from the operator of the mobile communication device or the server device, high security can be maintained.

Embodiments of the present invention will be described below with reference to the drawings.
FIG. 1 is a block diagram showing an embodiment of the present invention. 2, 3, and 4 are diagrams showing configurations of the mobile communication device 10, the table 500 </ b> B in the server device 500, and the external storage device 50 shown in FIG. 1, respectively. Here, the same components as those in FIGS. 10 to 12 are denoted by the same reference numerals, and description thereof is omitted. 1 to 4, a home network 400 is provided instead of the home network 100. The home network 400 includes a home agent 20, a router R1, and a newly provided address management unit 40. The address management means 40 manages a plurality of IP addresses, for example, manages address blocks acquired from an APNIC (Asia Pacific Network Information Center) by a manufacturer that manufactures the device 10. The home network 400 is the same as the network address of the address block.

  The server device 500 is connected to the Internet 300 and operates according to a request from the transmission source node, a table 500B that stores the home address and specific information of the device 10 in association with each other, and the device selected as the transmission source node. A processing unit 500C that performs processing for displaying the information on the browser.

  The table 500B of the server device 500 stores GUI data to be displayed by the browser 31 operating on the personal computer 30. This data includes a hypertext HTML format file as screen information, and a shape for each serial number. Different icon information is included. The HTML format file also includes hyperlink information to the home address of the device 10.

  Further, an external storage device 50 that can be carried and carried like a USB memory is provided. The external storage device 50 is detachable from the personal computer 30 and stores the specific information of the device 10 and the second key shared with the personal computer 30 in association with each other. Here, the specific information indicates a part of information in the serial number of the device or a home address uniquely given to the device 10.

  Instead of the address generation means 12 of the device 10, an address generation means 14 is provided. The address generation unit 14 assigns one of the IP addresses managed by the address management unit 40 to the own device 10 as a home address and stores it in the memory 11.

  Next, the operation of such a system will be described. First, the operation of registering the device 10 in the home agent 20 will be described with reference to FIG. A manufacturer of the device 10 activates the home agent 20 on the node having the home agent function on the home network 400 and installs the device 10 in the home network 400. The router R1 refers to the address managed by the address management means 40 and assigns a first prefix for the home address (corresponding to the network address of the home network 400) to the device 10 (SQ10).

  Thereby, the address generation unit 14 of the device 10 generates the home address of the device 10 from the MAC address stored in the memory 11 of the device 10 and the prefix for the assigned home address (SQ11). It stores in the memory 21 of the activated home agent 20 (SQ12, SQ13). At this time, the home address is an IP address included in one of the address blocks. That is, the address generation unit 14 generates a home address according to a certain rule from the prefix from the router R1 and the MAC address unique to the device 10, and thus becomes an address in the address block.

  Further, the specific information stored in the memory 11 of the device 10 and the home address are associated with each other and stored as a set in the server device 500 (SQ14). Further, for example, a screen information generation unit operating on a personal computer (not shown) associates the specific information of the device 10 with the home address, and represents an HTML format file or device 10 in which the home address is described as a hyperlink destination. Icon information and the like are generated and stored in the server device 500. When a plurality of sets of specific information and home addresses are stored in server device 500, the shape of the icon may be changed for each specific information (SQ15).

  Then, a shared key generation unit (not shown) generates a first shared key and stores it in the memories 11 and 21 of the device 10 and home agent 20 (SQ16, SQ17).

  Next, an operation for registering that the device 10 is installed in the foreign network 200 with the home agent 20 will be described with reference to FIG. The user receives the device 10 shipped from the manufacturer.

  The user connects the external storage device 50 to the personal computer 30. Then, a shared key generation unit (not shown) generates a second shared key, and stores the generated shared key only in the memory 11 and the external storage device 50 of the device 10. In the external storage device 50, a part of the specific information corresponding to the device 10, the home address and the second shared key are associated with each other and stored as a pair (SQ20, SQ21).

  Then, the device 10 is installed in the foreign network 200. Further, the router R2 existing in the foreign network 200 gives the device 10 a second prefix (corresponding to the network address of the foreign network 200) for the foreign network 200 (SQ22). Thereby, the address generation unit 14 of the device 10 generates the care-of address of the device 10 in the foreign network 200 from the MAC address stored in the memory 11 of the device 10 and the assigned second prefix (SQ23). And stored in the memory 11 (SQ24).

  Then, the device 10 transmits a communication packet including the care-of address to the home agent 20, and at that time, authentication is performed. In other words, the device 10 shows validity to the home agent 20 using the first shared key stored in the memory 11, and the authentication unit 23 of the home agent 20 authenticates with the first shared key in the memory 21. Perform (SQ25). If authentication is performed, communication starts, and a care-of address is extracted from the communication packet received from the device 10 and stored in the memory 21. Of course, the home address and care-of address of the device 10 are associated and registered in the memory 21 (SQ24). After authentication is performed, communication is performed using encryption and decryption using the first shared key.

  Next, the operation of transmitting a communication packet from the personal computer 30 to the device 10 connected to the foreign network 200 will be described using FIG. The user connects the external storage device 50 to the personal computer 30 and activates the browser 31 of the personal computer 30. The browser 31 reads the HTML format file and icon information on the table 500B of the server device 500 (SQ30), and displays an icon including specific information of the device 10 along the file description (SQ31). When the user selects an icon indicating desired specific information using an interface such as a mouse (SQ32), the home address paired with the selected specific information is set by a hyperlink described in the file. Referring to (SQ33A), the communication packet is transmitted with the home address as the transmission destination (SQ34). At this time, authentication is performed using the second shared key stored in the external storage device 50 and paired with the specific information (SQ33B).

  The home agent 20 picks up the communication packet, determines the transfer destination of the communication packet and the first shared key for authentication from the correspondence between the home address and the care-of address in the memory 21 (SQ35), and the transfer means 22 takes care of A communication packet is transmitted to the device 10 using the address as a transfer destination. Then, authentication between the device 10 and the home agent 20 is performed by the authentication means 13 and 23 (SQ36).

  Further, the authentication means 13 of the device 10 authenticates the personal computer 30 with the second shared key of the memory 11 and determines whether or not access to the personal computer 30 is possible (SQ37).

  After the authentication means 13 authenticates, the browser 31 of the personal computer 30 encrypts the communication packet with the second shared key and transmits it to the home agent 20 (SQ38), and the home agent 20 stores the first packet in the memory 21. The communication packet from the personal computer 30 is encrypted with one shared key. Then, the transfer unit 22 transfers the encrypted communication packet to the device 10 (SQ39).

  Further, the device 10 receives the communication packet transferred from the home agent 20, decrypts it with the first shared key, and decrypts it with the second shared key 2. As described above, the communication packet from the personal computer 30 reaches the device 10 existing in the foreign network 200, and communication is started between the device 10 and the personal computer 30.

  Note that authentication with a third shared key may be performed between the personal computer 30 and the server device 500 before the screen information reading (SQ30) in FIG. Thereby, the access right with respect to the server apparatus 500 can be further limited.

  In FIG. 6, the second shared key storage (SQ26) is performed for the external storage device 50. As shown in FIG. 8, the second shared key storage (SQ26B) is performed for the server device 500. You may do it. At this time, the operation of transmitting a communication packet from the personal computer 30 to the device 10 connected to the foreign network 200 is as shown in FIG.

  In FIG. 9, the authentication means 13 of the device 10 first authenticates the server device 500 with the second shared key of the memory 11 and determines whether or not access to the server device 500 is possible (SQ40). Next, the communication packet is encrypted with the second shared key and transmitted to the home agent 20 (SQ41).

  The home agent 20 takes the communication packet, determines the transfer destination of the communication packet and the first shared key for authentication from the correspondence between the home address and the care-of address in the memory 21 (SQ42), and the transfer means 22 takes care of A communication packet is transmitted to the device 10 using the address as a transfer destination. Then, authentication between the device 10 and the home agent 20 is performed by the authentication means 13 and 23 (SQ43). The home agent 20 encrypts the communication packet from the server device 500 with the first shared key in the memory 21. Then, the transfer means 22 transfers the encrypted communication packet to the device 10 (SQ44).

  The device 10 notifies the server device 500 of information on the device itself (SQ45). Then, the personal computer 30 activates the browser 31, reads out the HTML file, icon information, etc. of the selected device on the table 500B of the server device 500 (SQ47), and includes the specific information of the device 10 along the file description. The icon is displayed (SQ48).

  In addition, you may make it authenticate with the 3rd shared key between the apparatus 10 and the server apparatus 500 (SQ46).

  The present invention is not limited to this, and may be as shown below. For example, although the configuration in which the home agent 20 is operated on a node different from the router R1 is shown, it may be operated on the router.

  Moreover, although the configuration in which the address management unit 40 is provided separately from the home agent 20 is shown, it may be provided in a node where the home agent 20 operates.

  The configuration in which the device 10 and the external storage device 50 are provided with the second shared key is shown. However, if the security between the personal computer 30 to which the device 10 and the external storage device 50 are connected is guaranteed, the second shared key is used. Need not be stored.

  Further, although the configuration using mobile IPv6 as the communication protocol of the device 10 has been shown, a foreign agent may be installed in the foreign network 200 and mobile IPv4 may be used.

  Furthermore, the personal computer 30 may be provided with IPv4-IPv6 tunnel means, the personal computer 30 may be set to IPv4, and the networks 200 and 400 may be set to IPv6.

  The external storage device 50 may be any device that can be connected to the interface of the personal computer 30 (for example, a floppy (registered trademark) disk, SD card, MO, CD, CF card, etc.).

  Further, although the specific information, the home address, and the screen information are stored in the table 500B of the server device 500, the data may be notified to the user after the device 10 is shipped. For example, it may be printed on paper, mailed / faxed, or transmitted to the user in the form of electronic data. As a result, the degree of freedom in sending data is increased, and the degree of freedom in managing the home agent 20 and the address block including the home address is increased. The address block can be changed flexibly, and the user can use a desired memory device.

  The second shared key has been shown to be stored in the device 10 and the external storage device 50 by the user after shipment, but may be stored before shipment of the device 10 and the external storage device 50 at the time of shipment. This saves the user the trouble of storing the second shared key.

  Further, although only one personal computer 30 and device 10 are shown, any number of personal computers 30 and devices 10 may be provided. Similarly, any number of foreign networks 200 may be provided.

  Furthermore, although the configuration using a serial number is shown as the specific information of the device 10, any specific information may be used as long as it is unique. Further, the screen information generating means may create screen information in which a name different from the specific information is associated with the specific information. As a result, the user can identify the device 10 with a user-specific name that is easier to manage than the serial number.

It is the block diagram which showed the 1st Example of this invention. It is the block diagram which showed an example of the mobile communication apparatus shown in FIG. It is the figure which showed an example of the table in the server apparatus shown in FIG. FIG. 2 is a configuration diagram showing an example of an external storage device shown in FIG. 1. FIG. 2 is a diagram illustrating an operation example of registering a device 10 with a home agent 20 in the system illustrated in FIG. 1. FIG. 2 is a diagram illustrating an operation example of registering with the home agent 20 that the device 10 is installed in the foreign network 200 in the system shown in FIG. It is the figure which showed the operation example which transmits a communication packet from the personal computer 30 to the apparatus 10 connected to the foreign network 200 among the systems shown in FIG. It is the figure which showed the other operation example of FIG. It is the figure which showed the other operation example of FIG. It is the figure which showed the structure of the conventional mobile communication system. It is the block diagram which showed an example of the mobile communication apparatus shown in FIG. It is the block diagram which showed an example of the home agent shown in FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Mobile communication apparatus 11 Memory 13 Authentication means 14 Address generation means 20 Home agent 30 Personal computer 31 Browser 50 External storage device 200 Foreign network 400 Home network 500 Server apparatus 500A HTTP server 500B Table 500C Processing part

Claims (11)

In a mobile communication system having a home agent for transferring a communication packet to a mobile communication device connected to a foreign network,
Address management means for managing a plurality of IP addresses;
Address generating means for allocating one of the IP addresses managed by the address management means to the mobile communication device as a home address;
A server device that stores the home address of the mobile communication device and the specific information of the mobile communication device in association with each other;
A source node that connects to the server device via a network and transmits the communication packet with a home address stored in the server device as a destination;
A mobile communication system comprising:   The mobile communication system according to claim 1, wherein the transmission source node includes an external storage device that stores information associated with specific information stored in the server device.   2. The mobile communication system according to claim 1, wherein the address management means manages an address block. The server device includes an HTTP server that operates according to a request from the transmission source node;
A table that stores a home address of the mobile communication device and specific information of the mobile communication device in association with each other;
The mobile communication system according to claim 1, further comprising a processing unit that performs processing for displaying information on the device selected by the transmission source node on a browser. The home agent and the mobile communication device share the first key,
The source node and the mobile communication device share the second key,
5. The mobile communication system according to claim 1, wherein the mobile communication device has authentication means for performing authentication using each of the first and second keys.   6. The external storage device according to claim 1, wherein the external storage device stores the second key in association with specific information stored in the server device, and is detachably connected to the transmission source node. Mobile communication system.   6. The mobile communication system according to claim 5, wherein the authenticating means shares the third key between the transmission source node and the server device and performs authentication using the third key.   The mobile communication system according to claim 4, wherein the table stores screen information to be displayed on a browser of a transmission source node.   The mobile communication system according to claim 1, wherein the screen information is hypertext and includes icon information related to the specific information of the mobile communication device.   The mobile communication system according to any one of claims 1 to 9, wherein the mobile communication device has a communication protocol of mobile IP. In a mobile communication method having a home agent for transferring a communication packet to a mobile communication device connected to a foreign network,
An address management means for managing address blocks;
Allocating the IP address in this address block to the mobile communication device as a home address;
Storing a home address in the home agent;
Storing a shared key in the mobile communication device, storing the server device in association with specific information including a home address of the mobile communication device, and storing the shared key in the transmission source node;
A source node transmitting a communication packet to the mobile communication device using a home address of the server device, specific information, and a shared key of the external storage device;
The home agent forwarding a communication packet from a source node;
A mobile communication method comprising: an authenticating unit of the mobile communication device authenticating a transmission source node from the stored shared key and starting communication with the transmission source node.

Images