JP5216687B2 - Subscriber information access method, subscriber information access system and server device thereof - Google Patents

Description

  The present invention is applied to a system that provides a service from another network such as the Internet to a user terminal connected to an IP network managed by a telecommunications carrier using a network service function of the IP network. , A subscriber information access method, a subscriber information access system, and a server apparatus used in the system.

  A next generation network (NGN) discussed in ITU-T and the like assumes a network architecture in which services are provided via an IP (Internet Protocol) network. NGN has decided to adopt the IP Multimedia Subsystem (IMS) established by 3GPP, the standardization organization for third-generation mobile communication networks, and provides network services using this IMS. . IMS is a subsystem that performs service execution control, session control between terminals, registration processing, charging processing, and the like by using SIP (Session Initiation Protocol) (see, for example, Non-Patent Document 1).

  In the IMS, various applications are executed using a SIP application server (SIP AS). By using SIP AS, IMS can not only establish a multimedia session between two parties, but also realize an extended service. For example, NGN defines an interface with an application called ANI (Application Network Interface). The ANI is an interface that provides a communication path for realizing information exchange and the like between an application and an NGN function. On the other hand, by using SIP AS in NGN, an application can be disclosed to other networks in the form of API. By using the API, for example, as shown in FIG. 9, for the user terminals UT1 to UTn connectable to the first network NW1 using the IMS, a service connected to another second network NW2 such as the Internet Service can be performed from the server 6 for use.

  In order to use a service in NGN, it is necessary that a user contracts for the service, and usage information indicating that the service can be used is registered in user profile information which is subscriber information. User profile information is managed in a subscriber information database (HSS: Home Subscriber Server) 1 defined by IMS.

  The HSS 1 manages user profile information, and is referred to by a session control server (P-CSCF (Call Session Control Function), S-CSCF) or SIP AS 3 when executing an application using session control or higher-level SIP. The The interface between the HSS1 and the SIP AS3 uses a Sh interface using the Diameter protocol.

  The Sh interface is an interface that defines functions for exchanging data between the SIP AS 3 and the HSS 1, storing data in the HSS 1, and searching a database of the HSS 1, and is provided based on the SIP protocol. Information exchanged on the Sh interface includes repository data, user ID, IMS registration status, session control server address assigned to the user, public user ID and iFC (initial filer criteria) There are profiles, location information, user status, and billing information. In order to handle the personal information as described above, the Sh interface is defined as an interface inside the communication carrier.

  iFC determines the service type provided to the user indicated by the public user ID group in the service profile information. In this iFC, an AS address having a service point trigger for determining whether or not to transfer the SIP request to the SIP AS 3 is described. The iFC is downloaded from the HSS to the session control server upon reception of the SIP request transmitted from the user terminal, and is used for checking the contract status of the service, determining the next routing destination of the SIP message, etc. (for example, non-patent See reference 2.)

3GPP IP Multimedia (IM) Subsystem; IP Multimedia Subsystem (IMS); Stage 2 (Release 8), 3rd Generation Partnership Project (3GPP), Mar. 2009. 3GPP IP Multimedia (IM) Subsystem Sh Interfaces; Signaling flows and message contents.3GPP TS 29.328, 3rd Generation Partnership Project (3GPP), Dec. 2008.

  Recently, it has been actively studied to provide a user terminal connected to the IMS with a service that uses the function of the IMS from another network. However, in order to provide services to IMS subscribers from an external network using SIP AS, it is necessary that the subscriber information managed by the IMS carrier is described so that the service can be used. is there.

  Therefore, conventionally, for example, the following measures have been considered. As shown in FIG. 10, the countermeasure is that the provider providing the service in the second network NW2 notifies the communication provider of the first network NW1 of the contract information of the corresponding user by some method, and subscribes. The user profile (HSS) 1 is requested to update the user profile of the user.

  However, in order to realize this measure, first, the service provider requests the communication provider to register the contract information, and in response to this request, the communication provider updates the user profile information on the subscriber database. It is necessary to execute three procedures of notifying the completion of registration from the communication carrier to the service carrier after the update process. For this reason, it takes a lot of labor and time before the communication service using IMS can be provided from the second network NW2 after the user makes a contract.

  The present invention has been made paying attention to the above circumstances, and the object of the present invention is to use the second network without relying on the telecommunications carrier of the first network for the subscriber information managed by the first network. It is possible to provide a subscriber information access method, a subscriber information access system, and a server device thereof, which can be easily accessed in a short time by setting a profile for providing services for subscriber information.

In order to achieve the above object, according to a first aspect of the present invention, there is provided a service that uses a function of the IMS to a subscriber terminal connected to a first network using IMS (IP Multimedia Subsystem). The system provided from the two networks includes the following components.
That is, when a service provider authentication request including service provider profile information and identification information is transmitted from a service provider terminal connected to the second network, the second network sends the service provider authentication request to the first service provider request. A function of converting to a format that can be handled by the first network and transmitting to the first network, and when the first network receives the converted operator authentication request transmitted from the second network. The operator profile information stored in advance is searched based on the operator identification information included in the received operator authentication request after the conversion, and the searched operator profile information is retrieved from the received business. A function for collating with the user profile information, and the first network handling information representing the collation result in the second network A function of converting the information into a possible format and returning it to the second network; and information indicating the verification result when the second network receives the information indicating the verification result returned from the first network. And when the browsing request including the function of transferring to the service provider terminal and the identification information of the subscriber to be browsed is transmitted from the service provider terminal, the second network A function that determines whether or not the service provider that is the sender of the authentication has been authenticated based on the information indicating the stored collation result, and when the service provider that is the sender is determined to be authenticated A function in which the second network converts the received browsing request into a format that can be handled by the first network, and transmits the request to the first network; When the work receives the converted browsing request transmitted from the second network, the corresponding subscriber profile information from the subscriber information storage means based on the subscriber identification information included in the browsing request And a function of converting the retrieved subscriber profile information into a format that can be handled by the second network and returning it to the second network, and the second network includes the first network A function of transferring the received subscriber profile information to the service provider terminal when receiving the subscriber profile information returned from the service provider.

  Therefore, according to the first aspect of the present invention, the service provider uses the first network for subscriber profile information managed in the first network from its own terminal connected to the second network. It is possible to browse directly without relying on a telecommunications carrier.

  In addition, when the service provider logs in to the second network, the service provider is first authenticated based on the profile information of the service provider stored in the first network. For this reason, it is possible to limit the service provider who wants to browse the profile information of the subscriber to only a pre-approved contractor, so that the malicious service provider or other subscribers can browse the subscriber profile information. You can make it impossible.

The first aspect of the present invention is also characterized by having the following functions. That is, when the first network returns the subscriber profile information to the second network, the service provider identification information is included in the subscriber profile information corresponding to the subscriber identification information included in the browsing request. Information in a range designated by range designation information stored in advance in correspondence is selected, the selected subscriber profile information is converted into a format that can be handled by the second network, and the second Return to the network.
If it does in this way, it will become possible to restrict | limit the browsing range with respect to subscriber profile information for every service provider, and it will become possible to further improve the secrecy performance with respect to personal information by this.

On the other hand, in order to achieve the above object, the second aspect of the present invention includes the following components.
That is, when a service provider authentication request including service provider profile information and identification information is transmitted from a service provider terminal connected to the second network, the second network sends the service provider authentication request to the service provider terminal. The function of converting to a format that can be handled by one network and transmitting it to the first network, and the first network received the converted operator authentication request transmitted from the second network In the case, the operator profile information stored in advance is searched based on the operator identification information included in the received operator authentication request after conversion, and the searched operator profile information is received as described above. And the function of collating with the operator profile information, and the first network handles the information indicating the collation result in the second network. A function for converting the information into a format that can be returned to the second network, and when the second network receives the information indicating the result of the verification returned from the first network, When transmitting an update request containing information representing the update content and the function of holding information transferred and transferring it to the service provider terminal, the identification information of the subscriber whose profile is to be updated from the service provider terminal, A function in which the second network determines whether or not the service provider that is the transmission source of the update request has been authenticated, based on the information indicating the stored collation result, and the service provider that is the transmission source Is determined to be authenticated, the second network converts the received update request into a format that can be handled by the first network and converts the first request Update request transmission processing function to be transmitted to the network, and subscriber identification information included in the received update request when the first network receives the converted update request transmitted from the second network. And a function of performing update registration processing of the corresponding subscriber profile information based on the information indicating the update contents of the profile.

  Therefore, according to the second aspect of the present invention, the service provider, for the subscriber profile information managed in the first network, from the own terminal connected to the second network, Updates can be made directly without relying on the network operator. For this reason, setting of profile information for providing services for subscriber information can be performed easily and in a short time, and service provision can be started quickly.

  In addition, as in the first aspect, when the service provider logs in to the second network, the service provider is first authenticated based on the profile information of the service provider stored in the first network. Is called. For this reason, it is possible to limit the service provider who intends to update the subscriber profile information to only those who have been approved in advance, so that the malicious service operator or other subscribers can update the subscriber profile information. You can make it impossible.

  The second aspect of the present invention is also characterized by having the following functions. That is, when it is determined that the service provider as the transmission source has been authenticated, prior to the update request transmission process in the update request transmission process, the second network recognizes the subscriber approval including information indicating the update contents of the profile. A request is generated, and the subscriber approval request is converted into a format that can be handled by the first network and transmitted to the first network. When the first network receives the subscriber approval request transmitted from the second network, the first network transmits information representing the updated contents of the profile to the corresponding subscriber terminal, and the subscription request is sent to the subscriber approval request. When the information indicating whether to approve is received from the subscriber terminal, the subscriber approval notification including the information indicating whether to approve is converted into a format that can be handled by the second network, and the second Return to the network. When the second network receives the subscriber authentication notification returned from the first network, the second network determines whether or not the update has been approved based on the information included in the subscriber authentication notification. If the update is approved as a result of the determination, the update request transmission process is performed in the update request transmission process.

  In this way, prior to the update processing of the subscriber profile information, the subscriber is inquired whether the update is permitted or not, and the update processing of the subscriber profile information is performed only when the subscriber permits the update in response to the inquiry. Done. For this reason, it is possible to prevent unauthorized update processing.

  That is, according to the present invention, it is possible to access the subscriber information managed by the first network for browsing or updating from the second network without relying on the telecommunications carrier of the first network. Thus, it is possible to provide a subscriber information access method, a subscriber information access system, and a server device thereof that can easily and quickly perform profile setting for providing services for subscriber information.

It is a block diagram which shows one Embodiment of the subscriber information access system concerning this invention. FIG. 2 is a block diagram illustrating a functional configuration of a profile setting SIP application server, a user approval SIP application server, and a profile setting setting portal provided in the system illustrated in FIG. 1. It is a figure which shows an example of the user profile information stored in the subscriber information database (HSS) of the system shown in FIG. 1, and the user profile information displayed on a setting portal. In the system shown in FIG. 1, it is a figure which shows the outline | summary of the operation | movement procedure when a service provider browses the profile information of the user under contract. FIG. 2 is a sequence diagram showing details of an operation procedure when a service provider browses profile information of a user under contract in the system shown in FIG. 1. In the system shown in FIG. 1, it is a figure which shows the outline | summary of the operation | movement procedure when a service provider updates the profile information of the user under contract. In the system shown in FIG. 1, it is a sequence diagram which shows in detail the first half part of the operation | movement procedure when a service provider updates the profile information of the user under contract. FIG. 3 is a sequence diagram showing in detail the second half of the operation procedure when the service provider updates profile information of a user under contract in the system shown in FIG. 1. It is a figure which shows the basic composition of the system which provides a service from another network using the function which IMS has with respect to the user terminal connected to IMS. FIG. 10 is a diagram for explaining a conventional method for setting a service providing profile for user profile information in the system shown in FIG. 9.

Embodiments according to the present invention will be described below with reference to the drawings.
FIG. 1 is a block diagram showing an embodiment of a subscriber information access system according to the present invention. In this system, a first network NW1 and a second network NW2 can be connected to each other. An HTTP / SOAP interface (REST / Parlay X) is used as the connection interface.

  The first network NW1 is a so-called managed network based on IMS (IP Multimedia Subsystem) managed by a communication carrier, and uses SIP (Session Initiation Protocol) as a communication protocol. The first network NW1 accommodates user terminals UT1 to UTn such as mobile phones and PDAs (Personal Digital Assistants). On the other hand, the second network NW2 is an open network such as the Internet, and HTTP (Hyper Text Transfer Protocol) is used as a communication protocol.

  The first network NW1 includes a subscriber information database (HSS: Home Subscriber Server) 1, a session control server group 2, and a service providing SIP application server (SIP AS: SIP Application Server) 3, and profile setting. SIP application server (profile setting SIP AS) 4 and user approval application server (user approval SIP AS) 5 are provided.

  The HSS1 stores subscriber profile information necessary for a subscriber (user) registered and subscribed to the first network NW1 to use the network. The subscriber profile information also stores profile information indicating whether or not the service can be used, which is necessary when the subscriber wants to receive service from the service provider. The HSS 1 also stores service provider profile information. The profile information of the service provider is used for authentication of the service provider.

  The session control server group 2 includes a plurality of session control servers (S-CSCF) 2a, (I-CSCF) 2b, and (P-CSCF) 2c. When the user terminals UT1 to UTn perform communication, these session control servers 2a to 2c perform SIP session setting or release processing on the user terminals UT1 to UTn based on the subscriber profile information stored in the HSS1. Share and do.

  The SIP AS 3 for service provision stores various applications for service provision. And according to the instruction | indication from the application server 6 for service provided in the 2nd network NW2 mentioned later, the process which provides a service with respect to the user terminals UT1-UTn is performed.

  By the way, the profile setting SIP AS 4 includes an operator authentication request receiving unit 41, an operator authentication request converting unit 42, an operator authentication request transmitting unit 43, and an operator authentication result receiving unit 44, as shown in FIG. The business operator authentication result conversion unit 45, the business operator authentication result transmission unit 46, the profile operation request reception unit 47, the profile operation request conversion unit 48, the profile operation request transmission unit 49, and the profile operation result reception unit 31 The profile operation result conversion unit 32 and the profile operation result transmission unit 33 are provided. Note that all these functional units are realized by causing a processor to execute a program.

  Of these, first, the provider authentication request receiving unit 41, the provider authentication request converting unit 42, and the provider authentication request transmitting unit 43 are the provider authentication request transferred by the SOAP protocol from the setting portal 7 of the second network NW2 described later. Is transmitted to HSS1 after the format is converted to a format corresponding to the Diameter protocol in order to access HSS1.

  The company authentication result receiving unit 44, the company authentication result converting unit 45, and the company authentication result transmitting unit 46 receive the company profile information returned from the HSS 1 by the Diameter protocol in response to the company authentication request. Then, the service provider is authenticated by collating the acquired provider profile information with the provider profile information received from the setting portal 7 together with the provider authentication request. In order to perform communication, the data is converted into a format corresponding to the SOAP protocol and then transmitted to the setting portal 7.

  The profile operation request receiving unit 47, the profile operation request converting unit 48, and the profile operation request transmitting unit 49 receive an operation request transferred from the setting portal 7 by the SOAP protocol, that is, a request for browsing or updating subscriber profile information. In order to access the HSS1, the format is converted into a format corresponding to the Diameter protocol, and then transmitted to the HSS1.

  The profile operation result receiving unit 31, the profile operation result converting unit 32, and the profile operation result transmitting unit 33 receive the operation result returned from the HSS 1 by the Diameter protocol in response to the operation request, that is, the subscriber profile information or the update completion notification. . Then, the information representing the received operation result is converted into a format corresponding to the SOAP protocol for communication with the setting portal 7 and then transmitted to the setting portal 7.

  As shown in FIG. 2, the user approval SIP AS 5 includes an approval request information storage unit 50, a profile operation request reception unit 51, a profile operation approval message generation unit 52, an approval request message transmission unit 53, and an approval result message reception. Unit 54, profile operation result conversion unit 55, and profile operation result transmission unit 56. Similar to the profile setting SIP AS 4, each functional unit included in the user approval SIP AS 5 is also realized by causing the processor to execute a program.

  The approval request information storage unit 50 is used to store information representing the result of the subscriber (user) approval for the update of the subscriber profile information. The profile operation request receiving unit 51, the profile operation approval message generating unit 52, and the approval request message transmitting unit 53 are profile operation requests transferred by the SOAP protocol from the setting portal 7 of the second network NW2, that is, subscriber profile information. The update request is received, the format is converted into a format corresponding to SIP for performing communication with the user terminals UT1 to UTn, and then transmitted to the user terminals UT1 to UTn.

  The approval result message receiving unit 54, the profile operation result converting unit 55, and the profile operation result transmitting unit 56 are the operation approval results returned by the SIP from the user terminals UT1 to UTn in response to the profile operation approval request, that is, the subscriber profile information. Receive user approval results for updates. Then, the information indicating the received approval result is stored in the approval request information storage unit 50, and is converted to a format corresponding to the SOAP protocol for communication with the setting portal 7, and then transmitted to the setting portal 7.

On the other hand, the second network NW2 includes a service application server (service A) 6 and a profile setting portal server (hereinafter referred to as a setting portal) 7.
The service application server 6 gives a service information distribution instruction to the service providing SIP AS 3, and thereby performs a process of providing a service to the user terminals UT1 to UTn.

  As shown in FIG. 2, the setting portal 7 includes an approval request storage unit 70, an approval request control unit 71, an operator authentication information transmission / reception unit 72, an operator authentication unit 73, a profile operation request reception unit 74, and a profile. An operation unit 75 is provided. Similar to the profile setting SIP AS 4, each functional unit included in the setting portal 7 is realized by causing a processor to execute a program.

  The approval request storage unit 70 is used for storing information representing the authentication result of the service provider returned from the profile setting SIP AS 4. The provider authentication information transmitting / receiving unit 72 receives a provider authentication request sent by HTTP from the service provider terminal STM, and transmits information representing the authentication result to the service provider terminal STM by HTTP.

  The carrier authentication unit 73 transfers the carrier authentication request received by the carrier authentication information transmitting / receiving unit 72 to the profile setting SIP AS 4 using the SOAP protocol, and is returned from the profile setting SIP AS 4 using the SOAP protocol. Information representing the authentication result of the operator is transferred to the operator authentication information transmitting / receiving unit 72. Further, the provider authentication unit 73, when an operation request such as a browsing request or an update request is sent from the service provider terminal STM, whether or not the requesting service provider has been authenticated. 70 also has a function of making a determination based on information representing the authentication result of the service provider stored in 70.

  The profile operation request receiving unit 74 receives an operation request such as a profile browsing request or an update request sent from the service provider terminal STM by HTTP, and sends the profile operation result, that is, the subscriber profile information and the update completion notification to the HTTP. To the service provider terminal STM.

  When the profile operation unit 75 receives an operation request from the profile operation request reception unit 74, the profile operation unit 75 instructs the approval request control unit 71 to execute a user approval procedure, and receives the result of the user approval. When the user's approval is obtained, the operation request received from the profile operation request receiving unit 74 is transmitted to the profile setting SIP AS 4 by the SOAP protocol. Further, when subscriber profile information or update completion notification is returned from the profile setting SIP AS 4 by the SOAP protocol in response to the operation request, the returned information is transferred to the profile operation request receiving unit 74 as an operation result. To do.

  The approval request control unit 71 transmits a user approval request to the user approval SIP AS 5 by the SOAP protocol according to the user approval instruction from the profile operation unit 75. In response to this user approval request, information indicating the user approval result returned from the user approval SIP AS 5 by the SOAP protocol is received, and this information is passed to the profile operation unit 75.

  Next, the browsing and updating operation of the subscriber profile information by the system configured as described above will be described. The subscriber information database (HSS) 1 will be described assuming that service provider profile information is stored in advance.

(1) Browsing subscriber profile information
As shown in FIG. 4, the browsing process of the subscriber profile information is performed between the service provider terminal STM and the HSS 1 via the setting portal 7 of the second network NW 2 and the SIP AS 4 for profile setting of the first network NW 1. Done. The procedure is described in detail below. FIG. 5 is a sequence diagram showing this procedure.

(1-1) First, in step S11, a service provider authentication procedure is executed as follows.
That is, when the operator performs a login operation at the service provider terminal STM, the service provider terminal STM generates an HTTP GET including the provider profile information P1, the service provider ID and the password, and this HTTP GET is sent to the setting portal 7. Sent. When the HTTP GET requesting the provider authentication is sent from the service provider terminal STM, the setting portal 7 generates a SOAP request including the service provider authentication request, the provider profile information P1, and the service provider ID. The SOAP request is transmitted to the profile setting SIP AS 4 of the first network NW1.

  When receiving the SOAP request including the service provider authentication request from the setting portal 7, the profile setting SIP AS 4 transmits the service provider ID included in the SOAP request to the HSS 1 by the Diameter UDR defined by the Diameter protocol. Upon receiving the Diameter UDR, the HSS 1 reads the carrier profile information P1 ′ corresponding to the service carrier ID included in this message, and the read carrier profile information P1 ′ is sent to the profile setting SIP AS 4 by the Diameter UDA. Return it.

  Next, the profile setting SIP AS 4 verifies the acquired provider profile information P1 ′ with the provider profile information P1 received by the SOAP request, and authenticates the requesting service provider. Then, the authentication result is returned to the requesting setting portal 7 by a SOAP response. When the authentication result is returned as a SOAP response, the setting portal 7 holds the authentication result in the internal memory and transfers it to the requesting service provider terminal STM by HTTP 200 OK.

(1-2) Next, in step S12 and step S13, a request for browsing the profile information of the desired user and an acquisition process of the profile information are performed.
When the operator inputs the ID of the user that the operator desires to browse at the service provider terminal STM, the service provider terminal STM generates an HTTP GET including the input user ID and the authentication result of the provider received earlier. This HTTP GET is transmitted to the setting portal 7. Upon receiving the HTTP GET, the setting portal 7 determines whether or not the transmission service provider has been authenticated based on the authentication result included in the HTTP GET and the information indicating the authentication result held above. Determine. When the validity of the service provider is confirmed, a request for browsing the subscriber profile information corresponding to the user ID and a SOAP request including the service provider ID are generated, and this SOAP request is sent to the first network NW1. To the profile setting SIP AS4.

  When the profile setting SIP AS 4 receives a SOAP request including a browsing request for subscriber profile information from the setting portal 7, the profile setting SIP AS 4 transmits the user ID included in the SOAP request to the HSS 1 by the Diameter UDR. When receiving the Diameter UDR, the HSS 1 reads the subscriber profile information corresponding to the user ID included in the message, and returns the read subscriber profile information to the profile setting SIP AS 4 by the Diameter UDA.

  When the profile setting SIP AS 4 receives the subscriber profile information from the HSS 1, the profile setting SIP AS 4 selects, from the received subscriber profile information, information corresponding to a viewable range preset for the requesting service provider. . Then, the selected subscriber profile information is returned to the requesting setting portal 7 by a SOAP response.

  When the subscriber profile information is returned from the profile setting SIP AS 4 as a SOAP response in response to the transmission of the browsing request, the setting portal 7 sends the returned subscriber profile information to the request source service using HTTP 200 OK. Transfer to the operator terminal STM. In the service provider terminal STM, the transferred subscriber profile information is displayed on the display unit, and the operator can confirm the subscriber profile information by this display.

(2) Updating subscriber profile information
The updating process of the subscriber profile information is performed as follows. That is, as shown in FIG. 6, in response to an update request from the service provider terminal STM, a user approval procedure is first executed between the setting portal 7 and the user terminals UT1 to UTn via the user authentication SIP AS5. The When the user's approval is confirmed, the subscriber profile information is updated between the setting portal and the HSS 1 via the profile setting SIP AS 4 of the first network NW 1. The procedure is described in detail below. 7 and 8 are sequence diagrams showing this procedure.

(2-1) First, in step S21, a service provider authentication procedure is executed. This service provider authentication procedure is performed in the same manner as when browsing the subscriber profile information described in (1-1) above.
(2-2) Next, in step S22 and step S23, a profile browsing process for searching for subscriber profile information to be updated is performed. The browsing processing procedure at this time is also performed in the same manner as the procedure described in (1-2) above.

(2-3) When the update target subscriber profile information is specified by the search process, the update target subscriber profile information is acquired in steps S24 and S25 as follows.
In other words, when the operator performs a login operation at the service provider terminal STM, the service provider ID and password input by the login operation and the provider previously acquired in (2-1) are displayed at the service provider terminal STM. HTTP GET including the authentication result is generated, and this HTTP GET is transmitted to the setting portal 7. When the setting portal 7 receives the HTTP GET, the service provider of the transmission source has been authenticated based on the authentication result included in the HTTP GET and the information indicating the authentication result of the held carrier. It is determined whether or not. If the service provider has been authenticated, the authentication result is returned to the service provider terminal STM by HTTP 200 OK.

  Next, when an operator performs an update request operation on the subscriber profile information to be updated in the service provider terminal STM, a request for acquiring a subscriber profile including the input user ID is generated in the service provider terminal STM. This acquisition request is transmitted to the setting portal 7 by HTTP GET. Upon receiving the HTTP GET, the setting portal 7 generates a SOAP request including an acquisition request for the subscriber profile information to be updated based on the user ID and the acquisition request included in the HTTP GET. 1 to the profile setting SIP AS4 of the network NW1.

  When the profile setting SIP AS 4 receives a SOAP request including an acquisition request for subscriber profile information from the setting portal 7, the profile setting SIP AS 4 transmits the user ID included in the SOAP request to the HSS 1 by using the Diameter UDR. When receiving the Diameter UDR, the HSS 1 reads the subscriber profile information corresponding to the user ID included in the message, and returns the read subscriber profile information to the profile setting SIP AS 4 by the Diameter UDA.

  When the profile setting SIP AS 4 receives the subscriber profile information from the HSS 1, the profile setting SIP AS 4 selects, from the received subscriber profile information, information corresponding to a viewable range preset for the requesting service provider. . Then, the selected subscriber profile information is returned to the requesting setting portal 7 by a SOAP response. In response to the transmission of the acquisition request, the setting portal 7 returns the subscriber profile information returned from the profile setting SIP AS 4 as a SOAP response by the HTTP 200 OK. Transfer to the operator terminal STM.

  In the service provider terminal STM, the transferred subscriber profile information is displayed on the display unit, and the operator can confirm the contents of the subscriber profile information to be updated by this display. However, the subscriber profile information displayed at this time is limited to information within a viewable range preset for each service provider by the information selection processing by the profile setting SIP AS 4. An example is shown in FIG. In this example, all the items are displayed for the service provider A in the subscriber profile F1 stored in the HSS 1, but some items are masked and not displayed for the service provider B. Shows the case.

  (2-4) When the operator inputs, for example, information necessary for providing the service to the acquired subscriber profile information and then performs an update request operation, the user approval procedure for updating the subscriber profile information, and the subscription The profile information update procedure is executed as follows.

  That is, in the service provider terminal STM, an HTTP GET including the input updated subscriber profile information and the update request is generated, and this HTTP GET is transmitted to the setting portal 7. Upon receiving the HTTP GET including the profile update request, the setting portal 7 first transmits a user approval request to the user approval SIP AS 5 of the first network NW1 using the SOAP protocol. When receiving the user approval request by SOAP from the setting portal 7, the user approval SIP AS 5 transmits the user approval request to the corresponding user terminal (for example, UT 1) via the session control server 2 by SIP MESSAGE.

  In the user terminal UT1, the content of the user approval request, that is, the content of the profile information to be updated is displayed, and when the user who confirms the updated content inputs permission for the update, information indicating the input approval result is displayed as SIP. It is returned to the SIP AS 5 for user approval via the session control server 2 by MESSAGE. When the information indicating the approval result is returned by the SIP MESSAGE from the user terminal UT1, the user approval SIP AS 5 returns the information indicating the approval result to the setting portal 7 using the SOAP protocol.

  The setting portal 7 determines whether or not the user has permitted the profile update based on the information indicating the returned approval result. As a result of this determination, if the user permits the update, the setting portal 7 transmits a request for updating the subscriber profile information to the profile setting SIP AS 4 by a SOAP request. If the user does not permit the update, the setting portal 7 transmits notification information to that effect to the requesting service provider terminal STM by HTTP 200 OK.

When an update request for subscriber profile information is sent from the setting portal 7 as a SOAP request from the setting portal 7, the profile setting SIP AS 4 transmits information indicating the update contents of the profile included in the update request to the HSS 1 using the Diameter PUR. When the HSS 1 receives this Diameter PUR, it updates the corresponding subscriber profile information based on the information indicating the update content included therein. Then, the HSS 1 returns an update completion notification to the profile setting SIP AS 4 by the Diameter PUA. The profile setting SIP AS 4 transfers the returned update completion notification to the setting portal 7 by a SOAP response, and the setting portal 7 transmits this update completion notification to the requesting service provider terminal STM by HTTP 200 OK.
Thus, the subscriber profile information is updated.

  As described above in detail, in this embodiment, the browsing process for the subscriber profile information stored in the HSS1 of the first network is performed from the service provider terminal STM connected to the second network NW2. This is performed via the setting portal 7 of the NW2 and the profile setting SIP AS4 of the first network NW1. Also, the update process of the subscriber profile information is first executed when the user approval procedure is executed between the setting portal 7 and the user terminals UT1 to UTn via the user authentication SIP AS5, and the user approval is confirmed. Subscriber profile information update processing is executed between the portal and the HSS 1 via the profile setting SIP AS 4 of the first network NW 1.

  Accordingly, the service provider, for the subscriber profile information managed by the HSS1 of the first network NW1, from the service provider terminal STM connected to the second network NW2, communicates with the first network NW1. It is possible to browse and update directly without relying on a person. Moreover, when the service provider logs in to the second network NW2, first, the provider authentication is performed based on the profile information of the service provider stored in advance in the HSS1 of the first network NW1. For this reason, service providers who want to view and update subscriber profile information can be limited to only those companies that have been approved in advance, and thereby subscriber profiles by malicious service providers or other subscribers. It is possible to prevent browsing and updating of information.

  Further, when returning the subscriber profile information from the first network NW1 to the second network NW2 in response to the browsing request, out of the subscriber profile information corresponding to the user ID included in the browsing request, the service provider's Information within a range designated by range designation information stored in advance in association with the carrier ID is selected, and the selected subscriber profile information is returned to the second network NW2. For this reason, it is possible to limit the viewable range for the subscriber profile information for each service provider, thereby further improving the secrecy performance for personal information.

  Further, in response to the update request, an update approval inquiry procedure is first executed for the user terminals UT1 to UTn, and the update procedure of the subscriber profile information is executed only when the user permits the update in response to the inquiry. Yes. Therefore, it is possible to prevent the subscriber profile information from being updated without permission for the user.

  The present invention is not limited to the above embodiment. For example, in the above-described embodiment, the case where part of the subscriber profile information already stored in the HSS 1 is updated in the update procedure of the subscriber profile information has been described as an example. However, new subscriber profile information is newly registered. Alternatively, additional registration may be performed.

  In the embodiment, the user approval procedure is always executed prior to the update of the subscriber profile information. However, the past user approval result is stored in the setting portal 7 and the stored user approval result is stored. If the content has been approved, the user approval procedure may be omitted.

  Furthermore, in the above-described embodiment, when browsing the subscriber profile information, the procedure for selecting only information within the viewable range predetermined for each service provider is executed. However, this selection process may be omitted. In addition, information selection processing may be executed by setting a common viewable range for all service providers.

In addition, the functions and the like of the types and configurations of the first and second networks, the protocol used, the setting portal, the profile setting SIP AS4, and the user approval SIP AS5 are variously modified without departing from the scope of the present invention. Can be implemented.
In short, the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Further, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine suitably the component covering different embodiment.

  NW1 ... first network, NW2 ... second network, CTM ... communication operator terminal, STM ... service operator terminal, UT1-UTn ... user terminal, 1 ... subscriber information database (HSS), 2 ... session control server Group, 2a, 2b, 2c ... session control server, 3 ... service providing SIP application server (service providing SIP AS), 4 ... profile setting SIP application server (profile setting SIP AS), 5 ... user approval SIP Application server (SIP AS for user approval), 6 ... service application server, 7 ... setting portal, 41 ... operator authentication request receiving unit, 42 ... operator authentication request converting unit, 43 ... operator authentication request transmitting unit, 44 ... Business authentication result receiver 45, business authentication result conversion , 46 ... operator authentication result transmission unit, 47 ... profile operation request reception unit, 48 ... profile operation request conversion unit, 49 ... profile operation request transmission unit, 31 ... profile operation result reception unit, 32 ... profile operation result conversion unit, 33 ... Profile operation result transmission unit, 50 ... Approval request information storage unit, 51 ... Profile operation request reception unit, 52 ... Profile operation approval message generation unit, 53 ... Approval request message transmission unit, 54 ... Approval result message reception unit, 55 ... Profile operation result conversion unit, 56 ... Profile operation result transmission unit, 70 ... Approval request storage unit, 71 ... Approval request control unit, 72 ... Provider authentication information transmission / reception unit, 73 ... Provider authentication unit, 74 ... Profile operation request Receiving unit, 75... Profile operation unit.

Claims (11)

Subscriber information access method used in a system for providing a service using a function of the IMS from a second network to a subscriber terminal connected to a first network using an IMS (IP Multimedia Subsystem) Because
When a service provider authentication request including service provider profile information and identification information is transmitted from a service provider terminal connected to the second network, the second network sends the service provider authentication request to the first service provider terminal. A process of converting to a format that can be handled by the network and transmitting to the first network;
When the first network receives the converted operator authentication request transmitted from the second network, the first network is based on the operator identification information included in the received converted operator authentication request. Searching for the company profile information stored in advance, and collating the searched company profile information with the received company profile information;
A process in which the first network converts information representing the matching result into a format that can be handled by the second network and returns the information to the second network;
When the second network receives the information representing the collation result returned from the first network, holding the information representing the collation result and transferring the information to the service provider terminal;
When a browsing request including identification information of a subscriber to be browsed is transmitted from the service provider terminal, whether or not the service provider serving as the transmission source of the browsing request has been authenticated by the second network. Determining based on information representing the held matching result;
When it is determined that the service provider serving as the transmission source has been authenticated, the second network converts the received browsing request into a format that can be handled by the first network. Sending to one network,
When the first network receives the converted browsing request transmitted from the second network, the corresponding subscription is stored from the subscriber information storage means based on the subscriber identification information included in the browsing request. Searching the user's profile information, converting the searched subscriber profile information into a format that can be handled by the second network, and returning it to the second network;
A step of transferring the received subscriber profile information to the service provider terminal when the second network receives the subscriber profile information returned from the first network. A method for accessing subscriber information. The process of returning the subscriber profile information to the second network by the first network includes:
A step of selecting information within a range designated by range designation information stored in advance in association with service provider identification information, out of subscriber profile information corresponding to subscriber identification information included in the browsing request; ,
2. The subscriber information according to claim 1, further comprising a step of converting the selected subscriber profile information into a format that can be handled by the second network and returning the converted information to the second network. how to access. Subscriber information access method used in a system for providing a service using a function of the IMS from a second network to a subscriber terminal connected to a first network using an IMS (IP Multimedia Subsystem) Because
When a service provider authentication request including service provider profile information and identification information is transmitted from a service provider terminal connected to the second network, the second network sends the service provider authentication request to the first service provider terminal. A process of converting to a format that can be handled by the network and transmitting to the first network;
When the first network receives the converted operator authentication request transmitted from the second network, the first network is based on the operator identification information included in the received converted operator authentication request. Searching for the company profile information stored in advance, and collating the searched company profile information with the received company profile information;
A process in which the first network converts information representing the matching result into a format that can be handled by the second network and returns the information to the second network;
When the second network receives the information representing the collation result returned from the first network, holding the information representing the collation result and transferring the information to the service provider terminal;
When the service provider terminal transmits an update request including identification information of a subscriber whose profile is to be updated and information indicating the update content, the second network is a service business that is the transmission source of the update request. Determining whether or not the person has been authenticated based on the information representing the stored verification result;
When it is determined that the service provider serving as the transmission source has been authenticated, the second network converts the received update request into a format that can be handled by the first network. Update request transmission process to be transmitted to one network;
When the first network receives the converted update request transmitted from the second network, it is based on the subscriber identification information included in the received update request and information representing the profile update content. And a process of performing update registration processing of the corresponding subscriber profile information. If it is determined that the service provider as the transmission source has been authenticated, prior to the update request transmission process in the update request transmission process, the second network includes a subscription that includes information indicating profile update content. Generating a user approval request, converting the generated subscriber approval request into a format that can be handled by the first network, and transmitting the request to the first network;
When the first network receives a subscriber approval request transmitted from the second network, a process of transmitting information representing the updated contents of the profile to the corresponding subscriber terminal;
When the first network receives information indicating whether or not to approve the subscriber approval request from the subscriber terminal, a subscriber approval notification including information indicating whether or not to approve is received. Converting to a format that can be handled by the second network and returning it to the second network;
When the second network receives the subscriber authentication notification returned from the first network, it is determined whether or not the update is approved based on the information included in the subscriber authentication notification; 4. The subscriber information access method according to claim 3, further comprising a step of performing an update request transmission process in the update request transmission process when an update is approved as a result of the determination. A system for providing a service using a function of the IMS from a second network to a subscriber terminal connected to a first network using IMS (IP Multimedia Subsystem),
The second network is
When a service provider authentication request including service provider profile information and identification information is received from a service provider terminal connected to the second network, the received service provider authentication request is handled by the first network. Means for converting to a format capable of being transmitted to the first network,
The first network is
A provider information storage means for storing the profile information of the provider in advance in association with the identification information of the service provider;
When receiving the converted operator authentication request transmitted from the second network, the operator information storage means based on the operator identification information included in the received converted operator authentication request Searching for the corresponding company profile information from, and collating the searched company profile information with the received company profile information;
Means for converting the information representing the matching result into a format that can be handled by the second network and returning the information to the second network;
Furthermore, the second network is
Means for holding the information representing the matching result and transferring it to the service provider terminal when receiving the information representing the matching result returned from the first network;
When the browsing request including the identification information of the subscriber to be browsed is received from the service provider terminal, whether the service provider that is the transmission source of the browsing request has been authenticated or not Means for determining based on the information to be represented
Means for converting the received browsing request into a format that can be handled by the first network and transmitting it to the first network when it is determined that the service provider as the transmission source has been authenticated. And
The first network is
Subscriber information storage means for storing the profile information of the subscriber in association with the subscriber identification information;
When the converted browsing request transmitted from the second network is received, the corresponding subscriber profile information is retrieved from the subscriber information storage means based on the subscriber identification information included in the browsing request. And means for converting the retrieved subscriber profile information into a format that can be handled by the second network and returning it to the second network,
The second network is
A subscriber information access system comprising means for transferring the received subscriber profile information to the service provider terminal when the subscriber profile information returned from the first network is received. . Means for returning the subscriber profile information to the second network;
Means for preliminarily storing range designation information for designating a range of subscriber profile information that can be browsed by the service provider in association with identification information of the service provider;
Means for selecting information within a range designated by the stored range designation information among subscriber profile information corresponding to subscriber identification information included in the browsing request;
6. The subscriber information according to claim 5, further comprising means for converting the selected subscriber profile information into a format that can be handled by the second network and returning the converted information to the second network. Access system. A system for providing a service using a function of the IMS from a second network to a subscriber terminal connected to a first network using IMS (IP Multimedia Subsystem),
The second network is
When a service provider authentication request including service provider profile information and identification information is received from a service provider terminal connected to the second network, the received service provider authentication request is handled by the first network. Means for converting to a format capable of being transmitted to the first network,
The first network is
A provider information storage means for storing the profile information of the provider in advance in association with the identification information of the service provider;
When receiving the converted operator authentication request transmitted from the second network, the operator information storage means based on the operator identification information included in the received converted operator authentication request Searching for the corresponding company profile information from, and collating the searched company profile information with the received company profile information;
Means for converting the information representing the matching result into a format that can be handled by the second network and returning the information to the second network;
Furthermore, the second network is
Means for holding the information representing the matching result and transferring it to the service provider terminal when receiving the information representing the matching result returned from the first network;
Whether or not the service provider that is the transmission source of the update request has been authenticated when receiving an update request including identification information of the subscriber whose profile is to be updated from the service provider terminal and information indicating the update content Means for determining based on the information indicating the held matching result;
Update in which the received update request is converted into a format that can be handled by the first network and transmitted to the first network when it is determined that the service provider as the transmission source has been authenticated. Request transmission processing means,
The first network is
When a converted update request transmitted from the second network is received, a corresponding subscriber profile is determined based on subscriber identification information included in the received update request and information indicating profile update content. A subscriber information access system comprising: means for performing an information update registration process. The second network is
When it is determined that the service provider as the transmission source has been authenticated, prior to the update request transmission processing by the update request transmission processing unit, generate a subscriber approval request including information indicating the update contents of the profile, Means for converting the generated subscriber approval request into a format that can be handled by the first network and transmitting the request to the first network;
The first network is
Means for transmitting information representing the updated contents of the profile to a corresponding subscriber terminal when receiving a subscriber approval request transmitted from the second network;
When receiving information indicating whether or not to approve the subscriber approval request from the subscriber terminal, the second network can handle a subscriber approval notification including information indicating whether or not to approve the request. Means for converting to a different format and returning it to the second network,
The second network is
When the subscriber authentication notification returned from the first network is received, it is determined whether or not the update has been approved based on the information included in the subscriber authentication notification. 8. The subscriber information access system according to claim 7, further comprising means for causing the update request transmission processing means to perform an update request transmission process when the update request is transmitted.   9. The subscriber information access system according to claim 5, wherein the server apparatus operates as a profile setting portal that is provided in the second network and executes each means included in the second network.   8. The subscriber information access system according to any one of claims 5 to 7, wherein the profile setting server device is provided in a first network and executes each means provided in the first network.   9. The subscriber information access system according to claim 8, wherein the subscriber approval server device is provided in the first network and executes each means included in the first network.

Images