JP4078261B2 - INTERNET CONNECTION TERMINAL, ITS CONTROL METHOD, PROGRAM, AND STORAGE MEDIUM - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a multimedia data communication type Internet connection terminal that provides secure communication in voice communication via the Internet, a control method thereof, a program, and a storage medium.
[0002]
[Prior art]
Two terminals that perform data communication using IPsec require an authentication / encryption key. A technique for exchanging keys between two terminals ad hoc via the Internet is IKE (The Internet Key Exchange) (see, for example, Patent Document 1). In this IKE, PKI (Public Key Management System), pre-shared key, etc. are used for authentication of the communication partner. However, IKE is mainly used on servers and PCs because of its heavy processing, and is not suitable for telephones and facsimile machines that can be connected to the Internet. In addition, the acquisition of PKI certificates and the pre-shared key pre-setting require troublesome work, which is an obstacle to introduction into ordinary households.
[0003]
Therefore, it is not common for each user to have a PKI certificate even if it is easy to achieve IPsec communication via the Internet between general users without using a specific server or gateway. is there. Also, the task of setting a pre-shared key for ad hoc secure communication is cumbersome and device authentication is relatively easy, but user authentication is difficult (for example, secure communication of important data from the destination terminal to the company) It is difficult to realize the transmission at the present time).
[0004]
[Patent Document 1]
Japanese Patent Laid-Open No. 2002-344438
[Problems to be solved by the invention]
Thus, conventionally, it has not been possible to easily realize IPsec communication via the Internet between general users. In addition, although the setting work necessary for realizing secure communication is complicated, user authentication is difficult.
[0006]
SUMMARY An advantage of some aspects of the invention is that it avoids complication of setting work necessary for realizing secure communication and enables user authentication easily.
[0007]
[Means for Solving the Problems]
In order to solve the above-described problems, the present invention provides an Internet connection terminal, a voice communication unit for performing voice communication, a reception unit for receiving setting of information from a user, and the reception unit during the voice communication. Based on the received information, a setting means for setting a secure communication path with the counterpart terminal of the voice communication, and a communication means for performing data communication with the counterpart terminal via the secure communication path Prepare.
[0008]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
[0009]
FIG. 1 is a configuration diagram of a network according to an embodiment of the present invention. In FIG. 1, reference numeral 101 denotes a user A network. Reference numeral 102 denotes a user B network. The user A network 101 and the user B network 102 can perform data communication using the IPv6 communication protocol via the IPv6 Internet 103.
[0010]
104 Internet telephone terminals are connected to the user A network 101. In addition, 105 Internet telephone terminals are connected to the user B network 102. The user A's Internet telephone terminal 104 and the user B's Internet telephone terminal 105 can implement a telephone communication function (calling a partner terminal and establishing a session, voice IP packet communication, etc.) via the IPv6 Internet 103. Internet telephone terminals 104 and 105 are each equipped with a hard disk.
[0011]
In the present embodiment, a terminal used by a user, such as the Internet telephone terminal 104, will be described as an Internet telephone terminal for the sake of simplicity of explanation, but this has a form as a general telephone terminal. Not necessarily required. That is, the “Internet telephone terminal” in the present embodiment is a terminal capable of voice communication, such as a personal computer or a personal digital assistant (PDA), to which the present invention described in detail below can be applied. If so, it is described as a concept including all of them.
[0012]
FIG. 2 shows an example of the hardware configuration of an Internet connection terminal that operates a software program that implements the functions of this embodiment. The Internet connection terminal 104 includes a CPU 201, a ROM 202, a RAM 203, a hard disk (HD) 207, a disk controller (DC) 205 of a floppy (registered trademark) disk (FD) 208, and a network interface card (NIC) 206. The system is configured to be communicably connected to each other via the system bus 204.
[0013]
The system bus 204 is connected to the network 101 and the network interface card 206 shown in FIG. The CPU 201 centrally controls each component connected to the system bus 204 by executing software stored in the ROM 202 or HD 207 or software supplied from the FD 208.
[0014]
In other words, the CPU 201 reads out and executes a processing program according to the processing sequence described in the present embodiment from the ROM 202, the HD 208, or the FD 209, thereby performing control for realizing the operation in the present embodiment. . The RAM 203 functions as a main memory or work area for the CPU 201.
[0015]
The DC 205 controls access to the HD program 208 and the FD 209 that store a boot program, various applications, an edit file, a user file, a network management program, the processing program in the present embodiment, and the like. The voice input / output unit 206 includes a microphone and a speaker, and performs voice input / output for making a call. The NIC 207 exchanges data with the IPv6 Internet 103 through the network 101 using the IPv6 communication protocol.
[0016]
FIG. 3 is an internal module configuration diagram of the Internet telephone terminal 104 owned by the user A. Note that the internal module of the Internet telephone terminal 105 owned by the user B can take the same configuration.
[0017]
An information management module 301 manages various types of information (status, etc.) currently held by the Internet telephone terminal 104. For example, when the Internet phone terminal 104 is in a call with the Internet phone terminal 105, the information management module 301 provides information on the IP address of the other party on the call and the current call status (calling, calling, disconnecting, etc.) Is managed.
[0018]
A security setting panel 302 receives and processes user operations related to security settings and security communication from various buttons installed on the Internet telephone terminal 104, and displays the results on the interface of the Internet telephone terminal 104. .
[0019]
For example, an “IPsec use” button and a display that displays several digits of alphanumeric characters are installed on the interface of the Internet phone terminal 104, and the “IPsec use” button is pressed to establish an IPsec Start the setting process. The result of this IPsec setting process is displayed on the display.
[0020]
A hard disk 303 stores data to be transmitted using IPsec. Reference numeral 304 denotes an IPsec setting module that accepts a request for IPsec setting processing from the security setting panel 302 and sets the kernel to perform IPsec communication. It also has a function of accepting a request for termination processing of IPsec communication from the security setting panel 302 or a normal telephone function and canceling the setting of IPsec communication.
[0021]
Reference numeral 305 denotes a communication module, which holds an IPv6 protocol stack that performs all communication of the Internet telephone terminal 104. For this communication module 305, the IPsec setting module 304 performs IPsec setting. The communication module 305 also has a function of notifying the IPv6 address information of its own network interface and the IPv6 address information of the Internet telephone terminal that is in communication with the Internet telephone terminal 104 to the 301.
[0022]
FIG. 4 shows a call from user A's Internet telephone terminal 104 to user B's Internet telephone terminal 105, and at that time, user A transmits electronic data to user B through a secure communication path using IPsec. It is a flowchart of the process of the internet telephone terminal 104 of the user A side in the case. In the description of this processing in the present embodiment, it is assumed that the user A and the user B use the Internet telephone terminal 104 and the Internet telephone terminal 105 by calling from either of them and are talking.
[0023]
In S401, the start of IPsec use is detected based on an instruction from user A. In this embodiment, the instruction from the user A is performed by operating the security setting panel 302, and this is an opportunity to start processing based on the flowchart of FIG. When a start instruction from user A is detected in S401, a security code from user A is accepted in S402.
[0024]
The “security code” is a code serving as a source of key information for performing IPsec communication between the Internet telephone terminal 104 and the Internet telephone terminal 105, and is set as “## 436 # 36”, for example. The user can input from a numeric button, “#” button, and “*” button in the security setting panel 302 which is an interface of the Internet telephone terminal.
[0025]
The security code entered here must be the same for both devices that use IPsec, but the security code can be determined in advance between user A and user B in a call prior to the start of IPsec use. Therefore, there is no significant burden on each user. When the security code is performed using the security setting panel 302, the contents are notified to the IPsec setting module 304.
[0026]
When the acceptance of the security code is completed, as the information collection for IPsec setting, in S403, the IPv6 address of the Internet telephone terminal 105 of the communication partner (user B in this embodiment) that is currently communicating with the Internet telephone terminal 104 is obtained. To be acquired. That is, the IPv6 address of the other party who is in a call held in the information management module 301 is notified to the IPsec setting module 304.
[0027]
In step S <b> 404, the Internet telephone terminal 104 and the Internet telephone terminal 105 negotiate the authentication / encryption algorithm used in IPsec and the mutual IP address and port number. This IPsec setting negotiation is executed when the IPsec setting modules 304 of the two Internet telephone terminals communicate with each other.
[0028]
At the end of the processing in S404, the IPsec setting module 304 of the Internet telephone terminal 104 has its own IPv6 address and communication port, the communication partner's IPv6 address and communication port, authentication / encryption algorithm to be used, and authentication / encryption thereof. Information of key information (security code input in S402) to be used in FIG.
[0029]
From these pieces of information, IPsec communication with the Internet telephone terminal 105 is set in S405. This setting is performed by the IPsec setting module 304 and reflected in the IPv6 stack (kernel) 305. In this S405 process, a key must be generated. As an example of the generation method, a method of applying a hash to an element (security code) of key information is conceivable.
[0030]
When the IPsec setting is completed for the time being, the setting content is confirmed in S406. In this confirmation, if the IPsec setting has failed and IPsec communication between the Internet telephone terminal 104 and the Internet telephone terminal 105 cannot be performed, the process proceeds to an error process in S410. On the other hand, when the IPsec setting is successful (IPsec setting is completed), the process proceeds to the data transfer process of S407.
[0031]
This data transfer process is a process in which user A transmits data to user B through a secure communication path using IPsec in which certain electronic data (for example, document data or image data) is set. When performing the data transfer process, the user (user A in this embodiment) stores electronic data to be transmitted in advance in the hard disk 303 inside the Internet telephone terminal 104. As a result, electronic data stored in the hard disk 303 can be transmitted via a secure communication path.
[0032]
In S407, a data transfer process is executed based on a data transmission instruction from the user A via the security setting panel 302. Here, data in the hard disk 303 is transmitted to the Internet telephone terminal 105 which is a communication partner via the communication module 305. Since the electronic data to be transmitted has been subjected to IPsec setting, the communication module 305 performs transmission processing after encryption. Therefore, browsing of transmitted electronic data can be effectively prevented on the IPv6 Internet 103.
[0033]
In S408, it is determined whether or not the data transfer process by IPsec is normally completed. When the data transfer process is normally completed, the process proceeds to a normal end process S409. On the other hand, if the data transfer process cannot be completed, the process proceeds to the error process of S410. In the normal termination process in S409, the IPsec setting module 304 is notified of the IPsec setting cancellation request triggered by the IPsec termination instruction from the security setting panel 302 or the call termination event in the information management module 301. The IPsec communication path set between the Internet telephone terminal 104 and the Internet telephone terminal 105 is canceled.
[0034]
In S410, the security setting panel 302 displays the details of the error on the display. Then, in S411, processing for canceling the setting contents so far is executed, and the process returns to step S402 to accept the security code again. At this time, a display prompting the user to input the security code again is displayed on the security setting panel 302.
[0035]
An error is displayed in S410 when the processing in S406 or S408 is not completed.
[0036]
First, in the case of S406, there may be a case where IPsec setting fails and IPsec communication between the Internet telephone terminal 104 and the Internet telephone terminal 105 cannot be performed. For example, in the confirmation processing of the IPsec setting contents in S406, an IPsec packet is received from the communication partner (internet phone terminal B, which is the partner terminal), but cannot be decrypted. When the process moves to S410 due to such a decoding error, an “input code error” is displayed on the display.
[0037]
As another example, the packet itself may not reach from the communication partner (Internet telephone terminal B) immediately after the IPsec setting. At this time, “no response” is displayed.
[0038]
In the case of S408, for example, the data transfer process may not be completed due to the case where the security code values set by the user A and the user B are different.
[0039]
FIG. 5 is a diagram illustrating an example of internal data of the information management module 301. In FIG. 5, 501 indicates data in the information management module 401 of the Internet telephone terminal 104, 502 indicates data in the information management module 401 of the Internet telephone terminal 105, and in particular, the Internet telephone terminal 104 and the Internet telephone terminal. Data in each information management module 401 when 105 is in a call state is shown.
[0040]
Reference numerals 501 and 502 hold their own IPv6 addresses (503 and 507) and their own IPsec algorithm lists (504 and 508), respectively. Then, the IPv6 address (505, 509) and the current state (506, 510) of the call partner are held in the information management module 401 in each Internet telephone terminal.
[0041]
FIG. 6 shows a communication sequence executed between the Internet telephone terminal 104 and the Internet telephone terminal 105 corresponding to the flowchart of the processing using IPsec shown in FIG.
[0042]
First, at 601 and 602, a call between the Internet telephone terminal 104 and the Internet telephone terminal 105 is started. During the call, at 603, an operation for using IPsec from the user A (for example, an operation of pressing an “IPsec use” button installed on the interface of the Internet telephone terminal 104 corresponding to S401 and S402 in FIG. , An operation of inputting a security code).
[0043]
At substantially the same time as this processing, the operation for using IPsec in the user B is similarly performed at 604. Here, the security codes input by both (user A and user B) must be the same value. In addition, the synchronization work related to the use of IPsec is approved by both parties (user A and user B) in an Internet telephone call and executed mutually.
[0044]
As described above, in this embodiment, communication is basically unnecessary between the Internet telephone 104 and the Internet telephone 105 in order to prompt the user to perform the work. However, when one user (for example, user A) presses the IPsec use button, the other user (for example, user B) is notified by voice or display that the button has been operated by the other party. It does not exclude doing.
[0045]
By the operation of the above IPsec use button and the input of the security code, the IPsec setting process is executed in both Internet telephone terminals (104, 105). First, at 605, negotiation regarding IPsec setting is performed. This is processing corresponding to the determination of the authentication / encryption algorithm for IPsec setting in S404 of FIG. When the negotiation regarding the setting in 605 is completed, both Internet telephone terminals (104, 105) enter into an IPsec setting process corresponding to S405, and establish a secure communication path using IPsec.
[0046]
Next, at 606, the user A performs an operation of starting data transmission in order to send the electronic data previously stored in the hard disk 303 inside the Internet telephone terminal 104 to the user B. In response to this operation, data transmission is performed at 608. This data transmission start operation is performed, for example, by the user A pressing the “data transmission” button installed in the interface of the Internet telephone terminal, and stored in the hard disk 303 in the display unit of the Internet telephone terminal 104 accordingly. A list of the electronic data thus displayed is displayed. After the data to be transmitted is selected by the selection button, the determination button is operated to execute the list.
[0047]
In the data transmission at 608, secure data communication using the IPsec communication path is performed. In 609 and 610, the result of data transmission in 608 is notified to both (user A and user B) (for example, a data transmission completion message is displayed on the display unit of the Internet telephone terminal (104, 105)).
[0048]
Both parties (user A and user B) confirm that the target data communication has been completed, and disconnect the Internet telephone call at 611 and 612 (for example, by operating the call disconnect button). In this disconnection process, the settings of both terminals (Internet telephone terminal 104 and Internet telephone terminal 105) are canceled regarding the IPsec setting.
[0049]
In this way, if an Internet phone is used, it is possible to easily perform IPsec communication over the Internet between general users by avoiding complicated setting work for using IPsec. In addition, the user can be easily authenticated by utilizing the characteristic of the telephone that human authentication is possible by direct communication via voice between users.
[0050]
Furthermore, according to the present invention corresponding to the present embodiment, it is possible to realize secure communication using a telephone familiar to general users, and the presetting for IPsec communication includes a start button and a several-digit security code. It can be realized only by input. In addition, IPsec communication based on authentication between users can be performed without depending on a location or a terminal. For example, it is possible to easily transmit important data from the outside to the company.
[0051]
The application range of the present invention is not limited to the use of the IPv6 communication protocol as the communication protocol. In addition, the Internet telephone terminal only needs to have an IP connection, and may be a fixed telephone or a portable telephone. Further, any terminal can be used as long as it is a terminal that functions as a telephone without being particular about the name of “telephone”, that is, a terminal that can communicate voice with a partner terminal via the Internet.
[0052]
Furthermore, the storage location of electronic data in the Internet telephone terminal is not limited to the hard disk. In other words, if electronic data can be acquired from a recording medium or device holding electronic data directly connected to an Internet telephone terminal, the same mechanism can be used. Regarding the interface of the Internet telephone terminal, the “IPsec use” button and the “data transmission” button may be physical switches or logical switches. Also, it does not ask for the identity of names.
[0053]
【The invention's effect】
As described above, according to the present invention, it is possible to avoid complication of setting work necessary for realizing secure communication and to easily authenticate a user through voice communication.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating an example of a network configuration corresponding to an embodiment of the present invention.
FIG. 2 is a diagram illustrating an example of a hardware configuration of an Internet connection terminal corresponding to the embodiment of the present invention.
FIG. 3 is a diagram showing an example of the internal module configuration of the Internet connection terminal corresponding to the embodiment of the present invention.
FIG. 4 is a flowchart of an example of processing corresponding to the embodiment of the present invention.
FIG. 5 is a diagram showing an example of internal data of the information management module 301 corresponding to the embodiment of the present invention.
FIG. 6 shows an example of a communication sequence corresponding to the embodiment of the present invention.

Claims (8)

An internet connection terminal,
Voice communication means for performing voice communication;
A receiving means for receiving information settings from the user;
Based on information received by the receiving means during the voice communication, setting means for setting a secure communication path with the counterpart terminal of the voice communication;
An Internet connection terminal comprising: a communication unit that performs data communication with the counterpart terminal through the secure communication path. The Internet connection terminal according to claim 1, wherein the setting unit generates a key for secure communication based on information received by the receiving unit. The setting means; a determination means for determining success or failure of setting of the secure communication path;
The Internet connection terminal according to claim 1, further comprising notification means for notifying a request for re-inputting information received from the user when the determination means determines that the setting has failed. A method for controlling an internet connection terminal,
A voice communication process for performing voice communication;
A reception process for accepting setting of information from the user;
Based on the information received in the reception step during the voice communication, a setting step of setting a secure communication path with the counterpart terminal of the voice communication;
And a communication step of performing data communication with the counterpart terminal on the secure communication path. 5. The method for controlling an Internet connection terminal according to claim 4, wherein in the setting step, a key for secure communication is generated based on the information received in the reception step. In the setting step,
A determination step of determining success or failure of the setting of the secure communication path;
5. The control of an Internet connection terminal according to claim 4, further comprising a notification step of notifying a request for re-inputting information received from the user when it is determined that the setting has failed in the determination step. Method. A control program for an Internet connection terminal for causing a computer to execute the control method for the Internet connection terminal according to claim 4. A computer-readable storage medium storing the control program for an Internet connection terminal according to claim 7.

Images