JP6767422B2 - Wireless access point device and wireless communication method - Google Patents

Description

The present invention relates to a wireless access point device and a wireless communication method.

Internet connection services using wireless technology such as WiFi (registered trademark) are known. Various settings may be required to establish a wireless connection with a wireless access point device such as WiFi (registered trademark), but this setting may be complicated for the user. Patent Document 1 describes a wireless router that returns an IP address on the LAN side as a DNS reply regardless of the content of the DNS request when a DNS request is received from a client in a state where the user ID setting has not been completed in the wireless router. ing.

Japanese Unexamined Patent Publication No. 2006-20017

Authentication may be required when accessing an external network such as the Internet via a wireless access point device. In general, you cannot connect to an external network at all without passing the authentication. However, it may be inconvenient if you cannot access the external network at all until the authentication is passed.

On the other hand, the present invention provides a technique that enables access to a specific resource on an external network even from a wireless communication terminal that is not permitted to access the external network.

The present invention comprises a storage unit that stores information for specifying a specified connection destination, which is a resource for permitting connection, a wireless communication unit that establishes a wireless connection for wireless communication with a wireless communication terminal, and the wireless communication. A request receiving unit that receives a connection request requesting a connection from a terminal to a request connection destination that is a resource on an external network via the wireless connection, and the request connection destination are stored in the storage unit. When the determination unit for determining whether or not the specified connection destination matches and the requested connection destination and the specified connection destination are determined to match, the first permission for permitting the connection from the wireless communication terminal to the specified connection destination is permitted. When it is determined that the request connection destination and the specified connection destination do not match, the acquisition unit that acquires authentication information indicating whether the wireless communication terminal is permitted to connect to the external network, and the acquisition unit. When the authentication information indicates that the connection from the wireless communication terminal to the external network is permitted, the second permission unit that permits the connection from the wireless communication terminal to the request connection destination and the first permission When the connection to the request connection destination is permitted by the unit or the second permission unit, the connection process to the request connection destination is performed, and the connection from the wireless communication terminal to the external network is not permitted. When indicated by the authentication information, a wireless access point device having a control unit that performs refusal processing other than permission of connection from the wireless communication terminal to the request connection destination is provided.

The control unit maintains the first communication path, which is a communication path for connecting the wireless communication terminal to the external network, and makes the specified connection via a second communication path different from the first communication path. You may connect first.

The rejection process includes a process of transmitting data on an input screen for inputting information used for authenticating access to the external network to the wireless communication terminal, and the input screen provides a link to the specified connection destination. It may be included.

The rejection process includes a redirect to a predetermined resource, and the data may be data transmitted from the redirected predetermined resource to the wireless access point device.

The specified connection destination may be a resource of a support center that supports connection to the external network.

The specified connection destination may be a SIP (Session Initiation Protocol) for communicating with another wireless communication terminal belonging to the same network as the wireless access point.

Further, the present invention establishes a wireless connection for a wireless access point device having a storage unit for storing information for specifying a specified connection destination, which is a resource for permitting connection, to perform wireless communication with a wireless communication terminal. A step, a step in which the wireless access point device receives a connection request from the wireless communication terminal for a connection to a request connection destination which is a resource on an external network via the wireless connection, and the wireless access. When the point device determines that the step of determining whether the specified connection destination and the requested connection destination stored in the storage unit match, and the step of determining whether the requested connection destination and the specified connection destination match, the above. When the wireless access point device determines that the step of permitting the connection from the wireless communication terminal to the specified connection destination does not match the requested connection destination and the specified connection destination, the wireless access point device determines. The authentication information indicates that the step of acquiring the authentication information indicating whether the connection from the wireless communication terminal to the external network is permitted and that the connection from the wireless communication terminal to the external network is permitted. In this case, when the wireless access point device permits the connection from the wireless communication terminal to the request connection destination and the connection to the request connection destination is permitted by the first permission unit or the second permission unit. When the authentication information indicates that the wireless access point device is not permitted to connect to the external network from the wireless communication terminal and the step of performing the connection process to the request connection destination, the wireless communication is performed. Provided is a wireless communication method including a step of performing refusal processing other than permission of connection from the terminal to the request connection destination.

According to the present invention, it is possible to access a specific resource on the external network even from a wireless communication terminal that is not permitted to access the external network.

The figure which illustrates the outline of the wireless communication system 1 which concerns on one Embodiment. The figure which illustrates the functional structure of LAN11. The figure which illustrates the hardware composition of the wireless access point apparatus 100. The flowchart which illustrates the operation of the wireless communication system 1. A sequence chart illustrating the operation in Example 1 of the wireless communication system 1. The figure which illustrates the login screen. The figure which illustrates the support screen. A flowchart illustrating an outline of processing in the support center. The figure which illustrates the UI screen in the chat with the support center. The figure which illustrates the database 1211. The figure which illustrates the database 1121. The figure which shows the outline of the service in Example 2. A sequence chart illustrating the operation in Example 2 of the wireless communication system 1. The figure which illustrates the UI screen in the client terminal of the private call service.

1. 1. Configuration FIG. 1 is a diagram illustrating an outline of a wireless communication system 1 according to an embodiment. The wireless communication system 1 has a LAN (Local Area Network) 11 and an Internet 12. LAN 11 is a computer network formed in a limited area. The Internet 12 includes a management system 121 and resources 122.

The LAN 11 provides the wireless communication terminal 9 with an Internet connection service (so-called public wireless LAN) via a wireless connection. The wireless communication terminal 9 is, for example, a smartphone, a tablet terminal, or a notebook type PC (Personal Computer). The use of this service requires authentication of the user or wireless communication terminal. This authentication is performed by the management system 121. When the wireless communication terminal 9 (or its user) is authenticated, the LAN 11 permits access to the Internet 12, which is an example of an external network. The wireless communication terminal 9 can access the Internet 12 via the LAN 11. If the wireless communication terminal 9 (or its user) is not authenticated, the LAN 11 denies access to the Internet 12. However, the LAN 11 allows the wireless communication terminal 9 to access only the resource 122, which is an example of a specific resource (specified connection destination) on the Internet 12. Resource 122 is, for example, a server, storage, or printer.

FIG. 2 is a diagram illustrating a functional configuration of LAN 11. The LAN 11 has a wireless communication unit 111, a storage unit 112, and an access control unit 113. The wireless communication unit 111 establishes a wireless connection for wireless communication with the wireless communication terminal 9. This wireless communication is a predetermined wireless communication standard (for example, at least one of IEEE 802.11a, IEEE 802.11b, IEEE 802.11g, IEEE 802.11n, IEEE 802.11ac, and IEEE 802.11ad, so-called WiFi (registered trademark)). Communication is compliant with. The storage unit 112 stores various types of information. The information stored in the storage unit 112 includes authentication information and identification information of the resource 122. The authentication information indicates whether or not access to the Internet 12 from the wireless communication terminal 9 is permitted. The access control unit 113 controls access to the Internet 12 from the wireless communication terminal 9.

The access control unit 113 includes a request reception unit 1131, a determination unit 1132, a first permission unit 1133, an acquisition unit 1134, a second permission unit 1135, and a control unit 1136. The request receiving unit 1131 receives a connection request from the wireless communication terminal 9 requesting a connection to the request connection destination, which is a resource on the external network, via the wireless connection established by the wireless communication unit 111. The determination unit 1132 determines whether the request connection destination matches the specified connection destination stored in the storage unit 112. When it is determined that the requested connection destination and the specified connection destination match, the first permission unit 1133 permits the connection from the wireless communication terminal 9 to the specified connection destination. When it is determined that the requested connection destination and the specified connection destination do not match, the acquisition unit 1134 acquires authentication information indicating whether the connection from the wireless communication terminal 9 to the external network is permitted. The second permission unit 1135 permits the connection from the wireless communication terminal 9 to the request connection destination when the authentication information indicates that the connection from the wireless communication terminal 9 to the external network is permitted. When the control unit 1136 is permitted to connect to the request connection destination by the first permission unit 1133 or the second permission unit 1135, the control unit 1136 performs connection processing to the request connection destination. Further, when the authentication information indicates that the connection from the wireless communication terminal 9 to the external network is not permitted, the control unit 1136 performs a rejection process other than the permission to connect the wireless communication terminal 9 to the request connection destination. ..

In this example, the LAN 11 has a wireless access point device 100 (referred to as a wireless AP device 100 in some drawings) and a router 150. The wireless communication unit 111, the storage unit 112, and the access control unit 113 are mounted on the wireless access point device 100.

FIG. 3 is a diagram illustrating a hardware configuration of the wireless access point device 100. The wireless access point device 100 is a device having a processor 101, a memory 102, a wireless communication unit 103, and a wired communication unit 104. The processor 101 executes various operations and processes according to the program stored in the memory 102. The memory 102 is a storage device for storing programs and data, and includes, for example, a volatile memory and a non-volatile memory. Volatile memory includes, for example, RAM (Random Access Memory). Non-volatile memory includes, for example, ROM (Read Only Memory) and flash memory. The wireless communication unit 103 is a device that performs wireless communication in accordance with the above-mentioned wireless communication standard, and includes, for example, an antenna for receiving a wireless signal and a chipset for processing the signal. The wired communication unit 104 is a device that performs communication in accordance with a predetermined communication standard (for example, Ethernet (registered trademark)), for example, a connector for connecting a cable for transmitting a signal and a chipset for processing the signal. including.

In this example, the memory 102 stores a program (hereinafter referred to as “control program”) for implementing the function of FIG. 2 in the wireless access point device. The wireless communication unit 103 is an example of the wireless communication unit 111 in the situation where the processor 101 is executing the control program. The memory 102 is an example of the storage unit 112, and stores an identifier (for example, a URL (Uniform Resource Locator)) of a specific resource (resource 122 in this example). Hereinafter, this specific resource is referred to as a "default connection destination" in the sense that a connection destination is permitted to connect. The processor 101 is an example of the access control unit 113.

Although detailed illustration is omitted, the wireless communication terminal 9 includes a CPU (Central Processing Unit), a memory (including storage), an input device (touch sensor, microphone, etc.), an output device (display, speaker, etc.), and a wireless communication unit. A general-purpose computer device having the above, for example, a smartphone, a tablet terminal, or a personal computer.

2. Operation FIG. 4 is a flowchart illustrating an operation (wireless communication method) according to an embodiment of the wireless communication system 1. FIG. 4 specifically focuses on the operation of the wireless access point device 100. In step S101, the wireless access point device 100 establishes a wireless connection with the wireless communication terminal 9. The wireless connection is established in response to a request from the wireless communication terminal 9. The security information (for example, SSID and password) used for establishing the wireless connection is provided in advance to the user of the wireless communication terminal 9.

In step S102, the wireless access point device 100 receives a connection request (for example, an HTTP (Hypertext Transfer Protocol) request) from the wireless communication terminal 9. This connection request includes an identifier of the resource to be connected (for example, a URL) and an identifier of the wireless communication terminal 9 itself (for example, a MAC (Media Access Control) address). Hereinafter, the connection destination indicated by the connection request transmitted from the wireless communication terminal 9 is referred to as a "request connection destination". In step S103, the wireless access point device 100 determines whether the request connection destination and the specified connection destination match. When it is determined that the requested connection destination and the specified connection destination match (S103: YES), the wireless access point device 100 shifts the process to step S104. When it is determined that the requested connection destination and the specified connection destination do not match (S103: NO), the wireless access point device 100 shifts the process to step S105.

In step S104, the wireless access point device 100 connects to the request connection destination (in this case, equal to the specified connection destination, that is, the resource 122). That is, the connection request received from the wireless communication terminal 9 is transmitted to the specified connection destination. After that, the wireless communication terminal 9 can communicate with the resource 122 via the wireless access point device 100. This means that the communication path for connecting to the resource 122 (for example, the port of port number P2 (an example of the second communication path)) is always open.

In step S105, the wireless access point device 100 determines whether the wireless communication terminal 9 has been authenticated. The wireless access point device 100 stores a list of authenticated wireless communication terminal identifiers in, for example, a storage unit 112. The wireless access point device 100 refers to the identifier stored in the storage unit 112 and determines whether the wireless communication terminal 9 has been authenticated. When it is determined that the wireless communication terminal 9 has been authenticated (S105: YES), the wireless access point device 100 shifts the process to step S106. When it is determined that the wireless communication terminal 9 is not authenticated (S105: NO), the wireless access point device 100 shifts the process to step S107.

In step S106, the wireless access point device 100 connects to the request connection destination (in this case, an arbitrary resource connected to the Internet 12). That is, the connection request received from the wireless communication terminal 9 is transmitted to the request connection destination. Hereinafter, the wireless communication terminal 9 can communicate with the request connection destination via the wireless access point device 100.

In step S107, the wireless access point device 100 transmits to the management system 121 an inquiry as to whether the connection (or access) from the wireless communication terminal 9 to the Internet 12 is permitted. This inquiry includes information (for example, MAC address) for identifying the wireless communication terminal 9. At this time, the wireless access point device 100 may maintain the communication path for connecting the wireless communication terminal 9 to the Internet 12 (for example, the port of the port number P1 (an example of the first communication path)). ..

Upon receiving this inquiry, the management system 121 performs a process for authenticating the wireless communication terminal 9 or determines whether the wireless communication terminal 9 may be authenticated. In one example, the management system 121 stores a database in which authentication information regarding the wireless communication terminal 9 is recorded. The authentication information is information indicating whether or not access to the external network (Internet 12) is permitted from the wireless communication terminal. This database contains a plurality of sets of a wireless communication terminal identifier, a LAN identifier, and authentication information corresponding to the wireless communication terminal and the LAN. The management system 121 stores authentication information for each of the plurality of wireless communication terminals. Upon receiving the inquiry from the wireless access point device 100, the management system 121 extracts the identifier of the wireless communication terminal and the identifier of the LAN from the inquiry. The management system 121 extracts the authentication information for the wireless communication terminal corresponding to this identifier from the stored database. The management system 121 transmits a response to the inquiry to the wireless access point device 100. This answer includes the authentication information corresponding to the wireless communication terminal 9. The wireless access point device 100 receives the authentication result from the management system 121 (step S108).

In step S109, the wireless access point device 100 determines whether the connection from the wireless communication terminal 9 to the Internet 12 has been authenticated. This determination is made based on the authentication result received from the management system 121. The authentication result includes information indicating whether or not the authentication is possible. When the connection from the wireless communication terminal 9 to the Internet 12 is authenticated (S109: YES), the wireless access point device 100 stores the authenticated flag in the storage unit 112 in association with the identifier of the wireless communication terminal 9. The process proceeds to step S106. When the connection from the wireless communication terminal 9 to the Internet 12 is not authenticated (S109: NO), the wireless access point device 100 shifts the process to step S110.

In step S110, the wireless access point device 100 performs a rejection process. The rejection process is a process different from the process when the connection is permitted (steps S104 and S106). The rejection process is, for example, a process for notifying the user of the wireless communication terminal 9 that the connection to the request connection destination is not authenticated. The rejection process includes, for example, a process of transmitting data to the wireless communication terminal 9 for displaying a screen indicating that the connection to the request connection destination is not authenticated. The wireless communication terminal 9 that has received this data displays a screen indicating that the connection to the request connection destination is not authenticated. This screen may include a link to the default connection destination (resource 122). The resource 122 is, for example, a resource of a support center that supports a connection to the Internet 12. Even if the connection to the Internet 12 is not authenticated, the user of the wireless communication terminal 9 can connect to the support center by clicking this link, and the support center provides information for authenticating the connection to the Internet 12. Obtainable. The user of the wireless communication terminal 9 can use the information thus obtained to try to authenticate the connection to the Internet 12 again. The wireless access point device 100 may allocate a port different from the port for connecting to the Internet 12 for connecting to the resource 122. Further, in step S107, if the wireless access point device 100 maintains the port for connecting from the wireless communication terminal 9 to the Internet 12, the wireless communication terminal 9 does not reconnect to another port. Can also be connected to the Internet 12 from the wireless communication terminal 9.

In step S111, the wireless access point device 100 determines whether the wireless connection termination condition is satisfied. The termination condition includes, for example, receiving an instruction to terminate the wireless connection from the wireless communication terminal 9, a predetermined time has elapsed since the wireless connection was established, or receiving an instruction to terminate the wireless connection from the management system 121. , Whichever. If it is determined that the termination condition is not satisfied (S111: NO), the wireless access point device 100 shifts the process to step S103. When it is determined that the termination condition is satisfied (S111: YES), the wireless access point device 100 terminates (releases) the wireless connection with the wireless communication terminal 9, and terminates the flow of FIG.

In the present embodiment, the wireless access point device 100 can provide a connection to the resource 122 which is a specified connection destination regardless of whether or not the connection from the wireless communication terminal 9 to the Internet 12 can be authenticated.

3. 3. Specific Examples Hereinafter, a more specific example of the wireless communication system 1 and its operation will be described. Here, as specific examples, two examples, Example 1 and Example 2, will be taken up. Example 1 is an example in which the wireless communication system 1 is applied to a connection support service in a so-called public wireless LAN. Example 2 is an example in which the wireless communication system 1 is applied to the private telephone service.

3-1. Example 1
In this example, the LAN 11 is a public wireless LAN provided at a facility that provides a public wireless LAN service (wireless LAN connection service) for accessing the Internet 12. Facilities that provide public wireless LAN services include, for example, commercial facilities (shopping malls or department stores, etc.), public transportation (railway stations, railroad vehicles, airports, passenger planes, bus stops, etc.), public facilities (city halls, museums, etc.) , Museums, etc.), accommodation facilities (hotels, inns, etc.), or schools, etc. In one example, this facility is a hotel, and one or more wireless access point devices 100 are installed in the hotel. The wireless communication terminal 9 is, for example, a smartphone or tablet terminal owned by a user, that is, a guest of a hotel.

The public wireless LAN service has the following problems. In some public wireless LAN services, a user registration procedure or a login procedure is imposed, and the Internet 12 cannot be accessed unless this procedure is completed. However, even if the instruction manual is placed in the hotel room, some users do not know how to register as a user or enter the password incorrectly. For users who cannot register as a user, the hotel provides support by connecting a call to the support center in the public wireless LAN service, or by having the front desk of the hotel explain by extension or verbally. However, providing these supports is costly and requires simpler support services.

In this example, the resource 122 is a resource for supporting the registration procedure or the login procedure for the public wireless LAN service, that is, a resource for supporting the connection to the Internet 12, for example, a server for providing the support service (for example, A server that functions as a support center). That is, in this example, in the wireless communication system 1, the wireless communication terminal 9 can connect to the server for providing the support service even when the user registration procedure or the login procedure for the public wireless LAN service is not completed. it can.

FIG. 5 is a sequence chart illustrating the operation in Example 1 of the wireless communication system 1. In step S201, the wireless communication terminal 9 establishes a wireless connection with the wireless access point device 100. To establish a wireless connection between the wireless communication terminal 9 and the wireless access point device 100, for example, an SSID (Service Set IDentifier) and an encryption key (sometimes referred to as a security key or a password) are input in the wireless communication terminal 9. Well-known techniques are used. The input of the encryption key may be omitted. In the following, functional elements such as the access control unit 113 will be described as the main body of the process, which means that the processor 101 executing the control program executes the process in cooperation with other hardware elements. means. Further, the wireless communication terminal 9 executes a web browser, and the processing described below is executed by the web browser.

In step S202, the wireless communication unit 111 receives the connection request from the wireless communication terminal 9. This connection request is, for example, a http request, and includes an identifier (for example, MAC address) of the wireless communication terminal 9 that is the connection source and an identifier (for example, URL) of the request connection destination (for example, a server on the Internet 12).

In step S203, the access control unit 113 determines whether the connection to the request connection destination is permitted with respect to the connection request received by the wireless communication unit 111. This determination includes the determination in step S103 and the determination in step S105 in FIG. Here, an example is used in which the request connection destination is not the specified connection destination (S103: NO) and the connection from the wireless communication terminal 9 to the Internet 12 is not authenticated (S105: NO). In this case, in step S204, the access control unit 113 makes an inquiry to the management system 121. This process corresponds to the process of step S107 in FIG.

Upon receiving the inquiry, the management system 121 transmits a reservation instruction for connection to the request connection destination to the wireless access point device 100 that is the source of the inquiry (step S205). Upon receiving this reservation instruction, the wireless access point device 100 reserves the connection to the request connection destination. With respect to the reservation of the connection to the required connection destination, for example, the technique of Japanese Patent No. 5848467 can be used. At this time, the wireless access point device 100 maintains wireless communication with the wireless communication terminal 9. Further, the wireless access point device 100 maintains a communication path (port) for connecting from the wireless communication terminal 9 to the request connection destination.

The management system 121 that has received the inquiry further transmits data for displaying a screen for inputting registration information to the wireless communication terminal 9 that is the source of the inquiry (step S206). The registration information is information used for login processing in the public wireless LAN service.
For example, ID and password. The registration information is not limited to this, and may include other information such as an e-mail address, a telephone number, a name, and a date of birth. Hereinafter, the screen for inputting registration information is referred to as a login screen, and the data for displaying the login screen is referred to as "login screen data". The wireless communication terminal 9 that has received the login screen data displays the login screen.

FIG. 6 is a diagram illustrating a login screen. This login screen includes an input field 91, an input field 92, a button 93, and a link 94. This login screen is an example of an input screen for inputting information used for authentication of connection to an external network. The input field 91 and the input field 92 are fields for inputting a user ID and a password, respectively. The user ID and password are given by, for example, the management system 121, and are notified to the user (guest) from the front desk of the hotel. The user of the wireless communication terminal 9 operates an input device (touch screen, keypad, keyboard, etc., not shown) of the wireless communication terminal 9 and inputs a user ID and a password in an input field. The button 93 is a UI object for requesting the login process from the management system 121. After entering the user ID and password, the user clicks button 93. When the button 93 is clicked, a registration request including the entered user ID and password is sent to the management system 121. Link 94 is a link to a support center that supports a connection to the Internet. In this example, resource 122 is a support center server. Users who have trouble logging in can connect to the support center by clicking link 94.

See FIG. 5 again. The user of the wireless communication terminal 9 inputs registration information on this login screen (step S207). When the user who has input the registration information clicks the button 93, that is, when the wireless communication terminal 9 accepts the input of the authentication information, the wireless communication terminal 9 transmits the input registration information to the management system 121 (step). S208).

The management system 121 that has received the registration information determines whether or not the connection from the wireless communication terminal 9 to the Internet 12 may be authenticated (step S209). The received registration information is used for this determination. For example, the management system 121 authenticates the connection from the wireless communication terminal 9 to the Internet 12 when the ID and password included in the registration information are appropriate. Alternatively, if the ID and password included in the registration information are not appropriate, the management system 121 does not authenticate the connection from the wireless communication terminal 9 to the Internet 12. In step S210, the management system 121 transmits screen data to the wireless communication terminal 9 that is the source of the registration information. This screen data includes information according to the result of the authentication in step S209. When the connection from the wireless communication terminal 9 to the Internet 12 is not authenticated, this screen data is data for displaying a screen for prompting the connection to the support center (hereinafter referred to as "support screen").

FIG. 7 is a diagram illustrating a support screen. In this example, the support screen includes an input field 91, an input field 92, a button 93, a link 94, and a message 95. The message 95 includes information that the login to the public wireless LAN service has failed and a link to the resource 122 (“support center” in the figure). The input field 91, the input field 92, and the button 93 are the same as the login screen (FIG. 5). The support screen may not include the input field 91, the input field 92, and the button 93. Users who have trouble logging in can connect to the support center by clicking link 94.

See FIG. 5 again. When the user clicks the link 94, the wireless communication terminal 9 transmits a connection request to the resource 122 (step S211). Upon receiving the connection request, the wireless access point device 100 determines whether or not the connection to the request connection destination is permitted with respect to this connection request (step S212). This determination is made in the same manner as the determination in step S203. In step S212, the request connection destination is the same as the specified connection destination. Therefore, the wireless access point device 100 connects to the specified connection destination. That is, the wireless access point device 100 transmits the connection request to the resource 122 (step S213).

The resource 122 establishes a connection with the wireless communication terminal 9 in response to the connection request (step S214). The user of the wireless communication terminal 9 acquires information necessary for the login process from the resource 122 (support center) via this connection (step S215).

FIG. 8 is a flowchart illustrating an outline of processing in the support center. In this example, when connected to the wireless communication terminal 9, the support center transmits the page data for chatting between the user and the support center to the wireless communication terminal 9 (step S301). This chat is a chat by automatic response using AI (Artificial Intelligence) or so-called bot. In the automatic response, for example, a response is performed based on a set of a question and an answer prepared in advance. The set of this question and answer is the so-called FAQ (Frequently Asked Question) and its answer. That is, the support center identifies the question corresponding to the question text input by the user from the FAQ, and outputs the answer corresponding to the specified question. If the problem is not solved by chatting by automatic response (S302: NO), the support center switches the chat partner with the user from AI (machine) to operator (human) (step S303). If the chat does not resolve the issue (S304: NO), the support center makes a voice or video call with the user (step S305). This call is made via the Internet 12. When the problem is solved by the auto-answer chat or the operator-response chat (S302 or S304: YES), the support center ends the flow of FIG. In the support center, it is possible to provide a more efficient response by first connecting to an automatic response chat instead of outputting a web page summarizing the FAQ.

The flow of FIG. 8 is merely an example, and the processing at the support center is not limited to this. In the flow of FIG. 8, the order of processing may be changed, some steps may be deleted, or new steps may be added. For example, when connected to the wireless communication terminal 9, the support center may first output the data of the Web page summarizing the FAQ and its answer to the wireless communication terminal 9.

FIG. 9 is a diagram illustrating a UI screen in a chat with the support center. In this example, an interactive UI using balloons is adopted. In the example of the figure, comments 81, 83, and 85 are user remarks, and comments 82, 84, and 86 are support center remarks. At the beginning of the dialogue in this example, the support center's remarks are by AI. That is, comment 82 is a statement by AI. Although there is no particular change in the UI screen, in response to the user's comment 83, AI judges that it is impossible to respond by itself, and the operator (human) takes over the processing. Comment 84 is a statement by the operator. According to this example, the user can seamlessly receive the response by the AI (machine) and the response by the operator (human).

See FIG. 5 again. The user who has acquired the information required for the login process inputs the registration information on the login screen (FIG. 6) or the support screen (FIG. 7) on the wireless communication terminal 9 (step S216). When the user who has input the registration information clicks the button 93, that is, when the wireless communication terminal 9 accepts the input of the registration information, the wireless communication terminal 9 transmits the input registration information to the management system 121 ( Step S217). The management system 121 that has received the registration information determines whether to authenticate the connection from the wireless communication terminal 9 to the Internet 12 (step S218). This determination is made in the same manner as in step S209. When it is determined that the connection from the wireless communication terminal 9 to the Internet 12 may be authenticated, the management system 121 writes the identifier of the wireless communication terminal 9 and the conditions for authenticating the connection in the database 1211. The conditions for authenticating a connection include, for example, the deadline for authenticating the connection. Database 1211 is a database that records the identifiers and conditions of terminals that have been authenticated to connect to the external network.

FIG. 10 is a diagram illustrating the database 1211. In this example, the identifier of the wireless communication terminal is associated with the identifier of the LAN, the authentication information, and the restriction information. The authentication information is information indicating whether or not the connection to the external network is possible. The restriction information is information regarding restrictions at the time of connection. The restriction information is, for example, the one that limits the time range (example: until 12:00 on May 1, 2017), the one that limits the amount of data (example: up to 500 megabytes per day), or the connection destination. There are things (eg, only .jp and .com are allowed). For example, in the example of FIG. 7, when the wireless communication terminal having the identifier "12:34:56:78: 9A: BC" requests the connection from the LAN having the identifier "3456789" to the external network, 2017 Connection is permitted until 12:00 on May 1, 2014. Even a wireless communication terminal having the identifier "12:34:56:78: 9A: BC" is not allowed to connect to the external network from a LAN that is not associated with the wireless communication terminal in the database 1211.

See FIG. 5 again. The management system 121 transmits the authentication result to the wireless access point device 100 (step S219). In this example, the authentication result includes the result that the connection from the wireless communication terminal 9 to the Internet 12 is authenticated. In addition, the authentication result includes the authentication conditions (expiration date in the example of FIG. 10) given in the management system 121. The wireless access point device 100 records (writes) the information received from the management system 121 in the database 1121 (step S220). The database 1121 is a database that records the identifiers and conditions of terminals whose connections to the external network are authenticated in the LAN to which the wireless access point device 100 belongs.

FIG. 11 is a diagram illustrating the database 1121. The storage unit 112 stores the identifier (MAC address in this example) of the wireless communication terminal whose connection to the external network is authenticated. The storage unit 112 further stores the authentication deadline in association with the identifier of the wireless communication terminal. For example, it is shown that the wireless communication terminal in the top row of FIG. 10 is allowed to connect to the external network for a limited time until 12:00 on May 1, 2017.

See FIG. 5 again. The wireless access point device 100 transmits an answer to the wireless communication terminal 9 that is the source of the authentication information (step S221). This answer includes data for displaying information that the connection to the Internet 12 has been authenticated. This data may be included in the data transmitted from the management system 121. The wireless communication terminal 9 that has received this data displays a screen according to this data. The user who sees this screen knows that the connection to the Internet 12 has been authenticated, and operates the wireless communication terminal 9 to instruct the connection to the desired website. After that, the wireless access point device 100 determines whether or not the authentication has been completed each time the connection request is received from the wireless communication terminal 9 (FIG. 4: step S105). This determination is made with reference to database 1121. Since it is recorded in the database 1121 that the connection from the wireless communication terminal 9 to the Internet 12 has been authenticated, the wireless access point device 100 transfers the connection request to the Internet 12. That is, the wireless communication terminal 9 can be connected to the Internet 12.

According to the present embodiment, even if the connection to the Internet 12 which is the external network of the LAN 11 is not permitted (regardless of whether or not the connection to the Internet 12 is authenticated), the connection to the Internet 12 is performed. Only connections to resource 122, which acts as a supporting support center, are allowed. The hotel operator does not hire staff to support the connection of public wireless LAN services, and does not have to conclude a contract for support services via a telephone line other than LAN11 with a support service company. It is possible to provide connection support for public wireless LAN services to customers.

3-2. Example 2
In this example, the point that the LAN 11 is a public wireless LAN provided in a facility that provides a public wireless LAN service (wireless LAN connection service) for connecting to the Internet 12 is the same as in Example 1. In Example 2, LAN 11 is also used for the private call service. The premises call service is a service that provides a voice call between two wireless communication terminals 9 connected to the LAN 11. That is, the wireless communication terminal 9 functions as a voice communication terminal. In one example, the facility where the LAN 11 is installed is a hotel, and the premises call service is a service that provides an extension call within the hotel. In the following, when distinguishing each of the plurality of wireless communication terminals 9, subscripts are used as in the wireless communication terminals 9A and 9B. The same applies to other elements such as the wireless access point device 100.

FIG. 12 is a diagram showing an outline of the service in Example 2. In this example, the resource 122 is a resource for making a voice call or a video call via LAN 11 between two wireless communication terminals, and is, for example, a SIP (Session Initiation Protocol) server. The wireless communication terminal 9A is, for example, a communication terminal owned by the guest, and a wireless connection with the wireless access point device 100A has been established. The wireless communication terminal 9B is, for example, a communication terminal owned by a front service person in a hotel, and a wireless connection with the wireless access point device 100B has been established. The wireless communication terminal 9A communicates voice packets using so-called VoIP (Voice over Internet Protocol) technology, and makes a voice call with the wireless communication terminal 9B.

An application program (hereinafter referred to as "call application") for using the private call service is installed in the wireless communication terminals 9A and 9B. By executing the call application, the wireless communication terminal 9 is implemented with a function as a client terminal (that is, a voice call terminal) of the private call service.

The wireless communication terminal 9 first acquires a number (hereinafter, "identification number") for identifying a user (wireless communication terminal) in the private telephone service. This identification number is, for example, a number used as an extension number in a premises call, and is a room number in an example of a hotel extension call. The identification number may be directly input by the user by operating the keypad or the like of the wireless communication terminal 9, or may be input by reading data from a code image such as a two-dimensional bar code or a wireless tag or the like. Good. Alternatively, the identification number may be obtained by receiving the information of the reserved room from the server (not shown) that manages the hotel reservation.

FIG. 13 is a sequence chart illustrating the operation of the wireless communication system 1 in the private telephone service. At the time before the start of the flow of FIG. 13, the call application is installed in the wireless communication terminals 9A and 9B. In step S301, the wireless communication terminal 9A establishes a wireless connection with the wireless access point device 100A. Here, the connection from the wireless communication terminal 9A to the Internet 12 may or may not be permitted. In step S302, the wireless communication terminal 9A transmits a connection request including a registration request for its own identification number to the SIP server. Since the SIP server is a specific resource (resource 122), the wireless access point device 100A makes a connection request to the SIP server, regardless of whether or not the connection from the wireless communication terminal 9A to the Internet 12 is permitted. Send to the server. The SIP server registers the identification number and the like of the wireless communication terminal 9A in the database in response to the registration request. In this database, for example, the identification number (room number) of the wireless communication terminal 9A, the identifier (MAC address) of the wireless communication terminal 9A, and the identifier of the wireless access point device 100 to which the wireless communication terminal 9A is connected are recorded. .. In this example, the SIP server authenticates using the identifier of the LAN to which the device that is the source of the registration request is wirelessly connected. That is, the SIP server allows the registration request from the wireless communication terminal 9 connected via the LAN 11 and rejects the registration request from the wireless communication terminal 9 connected via the LAN other than the LAN 11. In step S303, the wireless communication terminal 9B establishes a wireless connection with the wireless access point device 100B. In step S304, the wireless communication terminal 9B transmits a connection request including a registration request for its own identification number to the SIP server. The processing of steps S303 and S304 is performed in the same manner as the processing of steps S301 and S302.

FIG. 14 is a diagram illustrating a UI screen in a client terminal of a private telephone service. This UI screen has a numeric keypad 96 and a button 97. The numeric keypad 96 is a UI object for inputting the extension number of the other party. Button 97 is a UI object for instructing a call. The user of the wireless communication terminal 9 uses the private call service via this UI screen.

See FIG. 13 again. The user of the wireless communication terminal 9A inputs the identification number of the other party via the UI screen of FIG. 14 and instructs the call. In step S305, the wireless communication terminal 9A transmits a connection request including an outgoing request for a private call to the SIP server. To reiterate, since the SIP server is a specific resource, the wireless access point device 100A makes a connection request to the SIP server regardless of whether or not the connection from the wireless communication terminal 9A to the Internet 12 is permitted. Send to the SIP server. This connection request includes the identification number of the other party. In this example, the SIP server authenticates using the identifier of the LAN to which the device that is the source of the call request is wirelessly connected. That is, the SIP server allows the call request from the wireless communication terminal 9 connected via the LAN 11 and rejects the call request from the wireless communication terminal 9 connected via the LAN other than the LAN 11. .. The SIP server refers to the database to identify the wireless communication terminal 9 (in this example, the wireless communication terminal 9B) as the other party, and transmits an incoming call request to the specified wireless communication terminal 9 (step S306). When the wireless communication terminal 9B responds to the incoming call request, a call is made between the wireless communication terminal 9A and the wireless communication terminal 9B (step S307). The details of the process shown in FIG. 12 are performed according to, for example, a well-known SIP. The communication between the wireless communication terminal 9A and the wireless communication terminal 9B is a closed communication in the LAN 11 without going through the Internet 12. Since it does not go through the Internet 12, even if one of the wireless communication terminals 9A and 9B is not permitted to connect to the Internet 12, the wireless communication terminal 9A and the wireless communication terminal 9B can make a call.

Conventionally, for example, in a hotel, in order to enable a call between guest rooms or a call from a guest room to a hotel service (front desk, room service, etc.), a telephone is installed in each guest room, and a switchboard (so-called PBX (so-called PBX)) is installed in the facility. Private Branch eXchange)) was installed. However, there is a problem that maintenance and management of PBX requires cost and installation space. On the other hand, according to the present embodiment, the premises call service can be provided only by installing the wireless access point device 100 (and the router 150). The wireless access point device 100 can be used for providing the public wireless LAN service as described in Example 1, and is advantageous in terms of cost and installation space as compared with the conventional PBX.

4. Modifications The present invention is not limited to the above-described embodiment, and various modifications can be performed. Hereinafter, some modification examples will be described. Two or more of the following modifications may be used in combination.

The number of resources set as a specific resource is not limited to one. Two or more resources may be set as specific resources. For example, both the support center server of Example 1 and the SIP server of Example 2 may be set as specific resources.

In Example 1, when the authentication using the information entered on the registration page is not successful (when the wireless access point device 100 receives the authentication result indicating that the connection to the external network is not permitted), the wireless access point device The 100 may redirect the wireless communication terminal 9 to a specific resource (resource 122). According to this example, in a situation where a connection to a specific resource (for example, a support center server) is required, it is possible to connect to the specific resource more easily.

The specific example of the operation of the support center (FIG. 8) and the UI screen (FIG. 9) in Example 1 are merely examples, and the operation of the support center is not limited thereto. For example, the support center server may only provide chat.

In Example 1, in the above-described embodiment, an example has been described in which a user who sees the information (step S215) obtained from the resource 122 operates the wireless communication terminal 9 and (manually) inputs the registration information. However, the specific method for inputting the registration information using the information obtained from the resource 122 is not limited to this. For example, the wireless communication terminal 9 may automatically input registration information using the information obtained from the resource 122. More specifically, for example, so-called redirect URL technology is used. The resource 122 transmits the wireless communication terminal 9 including the registration information in the redirect URL. Upon receiving this redirect URL, the wireless communication terminal 9 transmits a connection request including registration information to the management system 121. Alternatively, the provider of the wireless communication system 1 may prepare an application program for the wireless communication terminal 9. This application program is pre-installed on the wireless communication terminal 9. This application program has a function of transmitting registration information to the management system 121 (performing the process of step S217) in response to an instruction from the resource 122 (information transmitted in step S215). In yet another example, the wireless communication terminal 9 may semi-automatically input registration information using the information obtained from the resource 122. More specifically, the resource 122 transmits the registration information as a code image such as a QR code (registered trademark). The wireless communication terminal 9 converts this code image into registration information and displays a web page (for example, FIG. 6) in which the registration information is entered. In this state, the user can send the registration information simply by pressing the button 93.

The external network to which the connection from the LAN 11 is controlled is not limited to the Internet 12. The external network may be a network other than the Internet 12, such as another LAN different from the LAN 11 or a WAN (Wide Area Network).

The hardware configuration of the device constituting the wireless communication system 1 is not limited to that illustrated in the embodiment. Each hardware device may have any hardware configuration as long as it can realize the required functions. For example, the wireless access point device 100 may be integrated with the router 150.

The sequence charts and flowcharts described in the embodiments are broadly exemplified, and the present invention is not limited thereto. For example, the order of the plurality of steps shown in the sequence chart or the flowchart may be changed, or some steps may be omitted.

The control program or the communication application may be provided by a storage medium such as an optical disk, a magnetic disk, or a semiconductor memory, or may be downloaded via a communication line such as the Internet. It should be noted that the auditory training program does not have to include all the steps of the sequence chart or the slow chart illustrated in the embodiment, and may include only a part thereof.

1 ... Wireless communication system, 9 ... Wireless communication terminal, 11 ... LAN, 12 ... Internet, 91 ... Input field, 92 ... Input field, 93 ... Button, 94 ... Link, 95 ... Message, 96 ... Tenkey, 97 ... Button, 100 ... Wireless access point device, 101 ... Processor, 102 ... Memory, 103 ... Wireless communication unit, 104 ... Wired communication unit, 111 ... Wireless communication unit, 112 ... Storage unit, 113 ... Access control unit, 121 ... Management system, 122 ... resources, 150 ... routers

Claims (7)

It is a wireless access point device
A storage unit that stores information for identifying the default connection destination, which is a resource that allows connection,
A wireless communication unit that establishes a wireless connection for wireless communication with a wireless communication terminal,
A request receiving unit that receives a connection request from the wireless communication terminal for connecting to a request connection destination that is a resource on the Internet via the wireless connection.
A determination unit for determining whether the request connection destination matches the specified connection destination stored in the storage unit, and
When it is determined that the requested connection destination and the specified connection destination match, the first permission unit that permits the connection from the wireless communication terminal to the specified connection destination and
If it is determined that the requested connection destination and the specified connection destination do not match, and the connection from the wireless communication terminal to the Internet has not been authenticated, authentication information indicating whether the connection is permitted is provided. The acquisition unit acquired from the management system on the Internet and
When the authentication information indicates that the wireless communication terminal is permitted to connect to the Internet , the second permission unit that permits the connection from the wireless communication terminal to the requested connection destination and
When the connection to the request connection destination is permitted by the first permission unit or the second permission unit, the connection process to the request connection destination is performed, and the connection from the wireless communication terminal to the Internet is permitted. A wireless access point device having a control unit that performs refusal processing other than permission of connection from the wireless communication terminal to the request connection destination when the authentication information indicates that there is no such information. The control unit maintains the first communication path, which is a communication path for connecting the wireless communication terminal to the Internet, and the specified connection destination via a second communication path different from the first communication path. The wireless access point device according to claim 1. The rejection process includes a process of transmitting input screen data for inputting information used for authenticating the connection to the Internet to the wireless communication terminal.
The wireless access point device according to claim 1 or 2, wherein the input screen includes a link to the specified connection destination. The rejection process involves redirecting to a given resource.
The wireless access point device according to claim 3, wherein the data is data transmitted from the redirected predetermined resource to the wireless access point device. The wireless access point device according to any one of claims 1 to 4, wherein the specified connection destination is a resource of a support center that supports connection to the Internet . The wireless according to any one of claims 1 to 5, wherein the specified connection destination is SIP (SESSION INITIATION PROTOCOL) for communicating with another wireless communication terminal belonging to the same network as the wireless access point device. Access point device. A step of establishing a wireless connection for wireless communication with a wireless communication terminal by a wireless access point device having a storage unit that stores information for specifying a specified connection destination, which is a resource for permitting connection.
The wireless access point device requests a connection request from the wireless communication terminal to a request connection destination which is a resource on the Internet as seen from a router constituting a local area network including the wireless access point device. Steps to receive via wireless connection and
A step of determining whether the wireless access point device matches the specified connection destination stored in the storage unit with the request connection destination.
When it is determined that the requested connection destination and the specified connection destination match, the step of allowing the wireless access point device to connect from the wireless communication terminal to the specified connection destination, and
If it is determined that the requested connection destination and the specified connection destination do not match, and the connection from the wireless communication terminal to the Internet has not been authenticated, the wireless access point device is permitted to make the connection. The step of acquiring the authentication information indicating whether or not the information is obtained from the management system on the Internet , and
When the authentication information indicates that the wireless communication terminal is permitted to connect to the Internet , the step of permitting the wireless access point device to connect to the requested connection destination from the wireless communication terminal.
When the connection to the request connection destination is permitted, the step that the wireless access point device performs the connection process to the request connection destination, and
When the authentication information indicates that the connection from the wireless communication terminal to the Internet is not permitted, the wireless having a step of performing a refusal process other than permitting the connection from the wireless communication terminal to the request connection destination. Communication method.

Images