WO2008075626A1

WO2008075626A1 - Communication terminal authentication system and telephone system using internet

Info

Publication number: WO2008075626A1
Application number: PCT/JP2007/074143
Authority: WO
Inventors: Eiji Matsuoka
Original assignee: Feel & Tec.2 Co., Ltd.
Priority date: 2006-12-18
Filing date: 2007-12-14
Publication date: 2008-06-26
Also published as: JPWO2008075626A1

Abstract

Provided is a communication terminal authentication system capable of performing authentication and enabling a communication terminal to transmit/receive information without requiring a manual operation by a user even if the communication terminal moves in an information transmission/reception using a local communication network. The communication terminal authentication system (S1) holds a plurality of first correlation information (138c) to be correlated with a first identifier (108a) assigned to each communication terminal (102). The system (S1) includes: first holding means (138a) connected to a wide-range communication network (IN1) insuch a manner that information can be transmitted and received; first acquisition means (140a) which acquires via the wide-range communication network, the first identifier automatically acquired from a communication terminal connected to a relay device (AP1) for building the local communication network; first correlation means (140b) which correlates the first identifier acquired by the acquisition means with the first correlation information; and transmission means (140c) which transmits permission information (111) to the relay device according to the correlation result obtained by the first correlation means.

Description

Specification

Communication terminal authentication system, Internet telephone system

Technical field

TECHNICAL FIELD [0001] The present invention relates to a communication terminal authentication system and a telephone system using the Internet, and in particular, automatically authenticates a communication terminal used for information transmission / reception via a wide-area communication network such as the Internet network, thereby reducing authentication effort. The present invention relates to a communication terminal authentication system and the like.

[0002] The present invention relates to a telephone system using the Internet.

The telephone system using the Internet of the present invention is such that a mobile phone equipped with a softphone is connected to the Internet via a wireless LAN connection service.

[0004] In recent years, various information can be transmitted and received by communication terminals connected via a wide-area communication network such as the Internet network. As described above, the information transmitted and received via the Internet network includes voice information, so that a voice call can be made by a communication terminal via the Internet network.

Such a voice call can be realized, for example, when a communication terminal connected to the Internet network has software (soft phone) for voice call.

[0006] A soft phone can cause a personal computer (personal computer) or the like as a communication terminal connected to the Internet to function as a telephone capable of voice calls. If the other party is also a communication terminal that has this softphone, you can make a free call without any restrictions of the region (even overseas), so the softphone can be connected to the Internet. Is rapidly becoming popular among owners.

[0007] A softphone does not have a special server for managing IP address information, and can make a call on a peer-to-peer basis with a call partner. When connecting to the other party, the communication is done via a special personal computer called “Super Node” on the Internet.

[0008] The super node has a soft phone, and is in the personal computer that is running the soft phone. Softphones that are automatically selected and connected to the Internet always belong to some super-node group, and IP address information is managed by the super node.

[0009] Calling the other party with a soft phone is not a telephone number like a public telephone. Calling is performed by specifying a destination communication terminal using a telephone book managed by a super node called a “contact list”. It is like that.

[0010] Since a softphone call requires a PC connected to the Internet, and the other party's PC is also connected to the Internet, the operation is cumbersome. However, there was a limit to its widespread use.

[0011] In order to deal with the problem of the convenience of this soft phone, a mobile phone type soft phone that does not require a personal computer has recently been developed.

[0012] Recently, it has become possible to connect to the Internet network by a communication terminal such as a personal computer or wirelessly. A communication base station called an access point connected to the Internet network and a wireless communication terminal capable of transmitting and receiving information wirelessly communicate with each other, thereby transmitting and receiving information via the Internet network. Can do it. A communication network that enables connection to the Internet network by wireless communication is called a wireless local area communication network (also called a wireless LAN), and a number of wireless local area communication networks are connected to the Internet network. Wireless local area networks are being built in various locations (regions) around the world.

[0013] If the wireless communication terminal has a soft phone! /, Even if the wireless communication terminal is moved to various locations, it is possible to make a call as long as there is an access point. Some wireless communication terminals with softphones are small and have excellent portability, and they can be easily carried around like a mobile phone and can make calls in various places (hereinafter referred to as this Such a wireless communication terminal is called a mobile phone type soft phone.)

[0014] The mobile phone type softphone is equipped with a personal computer function and a wireless LAN function necessary for the softphone inside the telephone so that a voice call can be made without a personal computer in a wireless LAN environment. Mobile phone type softphones also have a function to make calls to general subscriber phones and mobile phones that can be made only by free calls between softphones, and to receive calls from general subscriber phones and mobile phones. [0015] The feature of this mobile phone-type softphone is that this phone can use the softphone alone, and the main body is equipped with a wireless LAN function! /, So a wireless LAN router (a kind of access point) at home. ) Is able to talk as if it were a mobile phone, and can also check the other party and send and receive information. Note that the information transmitted / received via the communication terminal power S Internet network such as a mobile phone type soft phone is not limited to voice information, but includes text information, image information, and various other types of information.

[0016] Examples of such are disclosed in, for example, Patent Documents;

[0017] Patent Document 1: Japanese Unexamined Patent Publication No. 2006-222549

Patent Document 2: JP 2005-277517 A

Patent Document 3: Japanese Patent Application Laid-Open No. 2004-304824

Patent Document 4: Japanese Unexamined Patent Application Publication No. 2005 304005

Disclosure of the invention

Problems to be solved by the invention

[0018] In order for a wireless communication terminal to transmit and receive information via an access point, the wireless communication terminal must be authenticated to the access point. More specifically, the access point and the wireless communication terminal encrypt the information for wireless communication using a key such as a WEP (Wired Epuivalent Privacy) key. In other words, the access point authenticates the wireless communication terminal with the common information (encryption key) used to encrypt the information (hereinafter referred to as encryption authentication).

[0019] The key number is often set as unique information on the access point side. On the wireless communication terminal side, an encryption key is set according to the access point, and the encryption key is sent to the communication terminal. By doing so, authentication of a communication terminal and information transmission / reception are performed.

[0020] Therefore, when the wireless communication terminal moves to the communication area of the access point where a different encryption key is set, authentication and information transmission / reception are not performed unless the encryption key is set again on the wireless communication terminal side each time. It is very troublesome because it cannot be done. In addition, the key number possessed by terminals communicating in this way is also called PSK (Pre Shared Key)! /.

[0021] If the effort of authentication is omitted, the data is not encrypted between the wireless communication terminal and the access point! / Since the information is simply transmitted and received, the information can be easily wiretapped by a third party. Sekiyurite This is not preferable.

[0022] Also, when an encryption key is illegally obtained by some means, if the encryption key set in the access point is always the same, information is continuously transmitted and received using the illegally obtained encryption key. There is also a problem of being able to perform.

[0023] Furthermore, even if the information is encrypted and transmitted / received with the encryption key, if the information is intercepted and decrypted with an illegally obtained encryption key, the contents of the information can be easily obtained. They are stolen and the confidentiality of information is compromised, making it impossible to send and receive information safely.

[0024] Mobile phone softphones equipped with a PC function and wireless LAN function required for softphones inside the phone cannot be used at home using a wireless LAN router! /, NA! /.

[0025] Also, mobile phone softphones do not come with web authentication! Therefore, they are being introduced to station platforms, restaurants, and other public wireless LAN services such as “hot spots” and “BB mopoint points”. The wireless LAN service such as "cannot be used! /, So there are major restrictions on the usable area, and the convenience of mobile phones has not been realized.

[0026] In order to solve this problem, there is a demand for the realization of a telephone system having the convenience of a mobile phone by expanding the range of use of the mobile phone type softphone.

[0027] The present invention has been made in view of the above circumstances. For information transmission / reception using a local communication network, authentication is possible without bothering the user even if the communication terminal moves. It is an exemplary problem to provide a communication terminal authentication system that can perform information transmission and reception by performing the above-described process.

Means for solving the problem

[0028] In order to solve the above problems, a communication terminal authentication system as an exemplary aspect of the present invention includes first identification information provided differently for each communication terminal in order to identify the communication terminal. Holds a plurality of first verification information for verification, and is connected to the first holding means connected to the wide area communication network so that information can be transmitted and received, and to the first holding means via the wide area communication network A first acquisition means for acquiring first identification information automatically acquired from a communication terminal connected to a relay device for constructing a local communication network via a wide area communication network; A first collation unit that collates the first identification information obtained by the stage with the first collation information, and a relay device based on a result of the collation by the first collation unit, via the relay device by the communication terminal And transmitting means for transmitting permission information to permit information transmission / reception.

[0029] Since the verification is performed using the first identification information given differently for each communication terminal

Whether or not information transmission / reception is permitted can be determined for each communication terminal.

[0030] Since the first identification information of the communication terminal connected to the relay device that constructs the local communication network is acquired via the wide area communication network, the communication information is transmitted without holding the first identification information on the local communication network side. Authentication terminal can be authenticated. For example, even when multiple relay devices are connected to a wide area communication network and a plurality of local communication networks are constructed, the holding means acquires the first identification information via the wide area communication network and collates it. Therefore, it is possible to authenticate from any local communication network using the same first identification information.

[0031] Further, since the first verification information is held in the holding means connected to the wide area communication network so as to be able to transmit and receive information, the cost of information management can be reduced by collectively managing the first verification information on the holding means side. Can be planned.

[0032] Since the first identification information is automatically acquired from the communication terminal, information verification, that is, authentication of the communication terminal can be performed without bothering the player, which is very convenient. Automatic acquisition can be performed when the communication terminal is turned on or when the user performs an operation for transmitting and receiving information. If the local area communication network is a wireless local area communication network, automatic acquisition may be performed when a communication terminal enters the communication area. That is, “automatic acquisition of information” in the present application means that the communication terminal authentication system can acquire information without the user of the communication terminal performing a special operation for transmitting information. For example, acquiring information automatically sent from a communication terminal that has received a request signal issued by the communication terminal authentication system also falls under “automatic acquisition”, and the user has performed a dial operation for a voice call, etc. It is also included in the concept of “automatic acquisition” to acquire information sent automatically from the communication terminal.

[0033] Here, the wide area communication network refers to a relatively large communication network such as the Internet network, for example, which enables information transmission / reception between communication terminals in different buildings or different areas. Through Refers to a trust net. On the other hand, the local communication network is a communication network having a smaller scale than the wide area communication network. For example, it is possible to send and receive information between communication terminals in the same building. If the local communication network is connected to a wide area communication network, the wide area communication network can be connected to the communication terminal connected to the local communication network. It is also possible to send and receive information via

[0034] Also, "connected to a relay device" means that a communication terminal can transmit / receive information to / from a relay device (for example, a router that relays information between the communication terminal and a wide area network). It means being in a state. When the local area communication network is a wireless local area communication network (wireless LAN), it means that the wireless communication terminal is in the communication area of the relay device as a communication base station.

Here, the communication terminal refers to a communication terminal device, and includes a device having a function of transmitting and receiving information via a wide area communication network, such as a personal computer or a mobile phone terminal. Further, a communication terminal having software (soft phone) for realizing a voice call through a wide area communication network, for example, a mobile phone type soft phone (mobile phone type terminal) is also included in the concept of the communication terminal.

[0036] The automatic acquisition of the first identification information is a request signal transmission in which the relay device transmits a first request signal for requesting transmission of the first identification information to a communication terminal connected to the relay device at a predetermined interval. It may be realized by having means and second acquisition means for acquiring first identification information transmitted from the communication terminal in response to the first request signal.

[0037] Since the relay device transmits the first request signal at predetermined intervals, the first identification information can be automatically acquired more reliably from the communication terminal connected to the relay device. For example, when the local area communication network is a wireless local area communication network, even if a communication terminal in the communication area fails to receive the first request signal, the next first request signal transmitted at a predetermined interval is not received. If it can be received, automatic acquisition of the first identification information is established.

[0038] The relay device further includes a relay device, and when the relay device obtains permission information, the relay device permits information transmission / reception via the relay device by the communication terminal, and receives a first request from the communication terminal permitted to transmit / receive information. If the first identification information cannot be acquired for signal transmission, the communication terminal may have information control means for rejecting information transmission / reception via the relay device.

[0039] When the first identification information for the transmission of the first request signal cannot be obtained, the communication with the communication terminal is refused, so the connection with the relay device is released ( If it was a wireless local area network, it moved outside the communication area. ) There is no need to allow transmission / reception of information for communication terminals. For example, when the relay device stores identification information of a communication terminal that allows information transmission / reception, information on the communication terminal that has moved out of the communication area can be deleted as appropriate to reject information transmission / reception. Therefore, the relay device does not need to hold identification information more than necessary, and there is no need to provide an excessive storage device. Therefore, it is possible to reduce the cost for the relay device.

[0040] The second holding means in which the relay device holds in advance the second collation information for collating with the second identification information given in common to the plurality of communication terminals, and the second identification transmitted from the communication terminal A third acquisition unit for automatically acquiring information and a second verification unit for comparing the acquired second identification information with the second verification information, and the information control unit not only acquires the permission information but also the second verification unit. Based on the result of the verification by the verification means, the communication terminal may allow information transmission / reception via the relay device.

[0041] Since relaying of information transmission / reception is permitted when the second identification information commonly given to a plurality of communication terminals matches the second verification information, information including a double verification procedure is included. Transmission / reception is permitted, and the safety of information transmission / reception by the communication terminal can be further enhanced.

[0042] The communication terminal may be a wireless communication terminal, and the private communication network may be a wireless private communication network.

Since information transmission / reception is performed by wireless communication, no wiring is required for the communication terminal to transmit / receive information. Therefore, it is possible to freely carry communication terminals that are not restricted by connection wiring to the local communication network.

[0043] Here, the wireless local area communication network enables a communication terminal to transmit and receive information by wireless communication with a wide area communication network. Generally, a local area communication network has an access point as a relay device connected to a wide area communication network, and information can be transmitted and received by wireless communication between the access point and a communication terminal. Of course, it is necessary for the communication terminal to have a function for performing wireless communication. A communication terminal having such a function is also called a wireless communication terminal. Range power that radio waves emitted from the access point can reach.This is called “communication area” where wireless communication is possible. In this application, the term “wireless local area network” and “communication area where wireless communication with the access point” is possible. Are used almost synonymously.

[0044] The second acquisition unit is configured to transmit and receive information to and from a relay device different from the relay device. The first identification information transmitted from the communication terminal in response to the first request signal may be acquired. Since the first identification information is obtained from the communication terminal capable of transmitting / receiving information to / from a different relay device, it is not necessary to interrupt the transmission / reception of information when the communication terminal moves in the communication area. In other words, when the communication terminal moves to a range where the communication areas overlap, the first identification information is acquired by the second acquisition means of the relay device, and authentication for the relay device is performed in advance. Therefore, even if the communication terminal completely moves to a different communication area, authentication has already been completed, and information transmission / reception can be performed via the destination relay device without interruption of information transmission / reception.

[0045] The communication terminal authentication system according to any one of claims 4 to 6, wherein the first identification information is a MAC address, and the second identification information is a WEP key. The MAC address is unique ID information assigned to each terminal that can be connected to an information communication network such as a wide area communication network or a private communication network. Therefore, if this MAC address is used as the second identification information, the communication terminal can be identified without adding new information to the communication terminal. The WEP key is an encryption key for encrypting information transmitted and received between the relay device and the communication terminal. Therefore, more secure information transmission / reception is possible by encrypting information and identifying the communication terminal by MAC address.

[0046] Information transmission / reception may be transmission / reception of audio information. Sending and receiving voice information enables voice calls over a wide area communication network. If information is transmitted and received via a wireless local area network, voice calls can be easily made via a wide area network at various locations. Since the cost of voice calls over a wide-area communication network is generally low, it is very convenient for users to use. Moreover, since there is no troublesome authentication of the communication terminal, it can be used as easily as a mobile phone terminal.

[0047] The present invention is equipped with a personal computer function and a wireless LAN function, and has a function of making a softphone call by transmitting and receiving communications with a wireless LAN access point using a preset authentication key! Type softphone and a predetermined communication area that has an access server connected to the Internet circuit and can transmit / receive to / from the mobile phone type softphone, and the mobile phone type softphone was used in the communication area In this case, the mobile phone softphone can be connected via wireless communication by confirming the preset authentication key. Whether the wireless LAN access point that can be connected to one network circuit and the authentication key of the mobile phone soft phone are stored in the database, and whether or not the authentication key is registered in the database in response to a request from the access server By implementing a telephone system that uses the Internet, and an authentication server provided in the Internet circuit that performs processing to return the results to the access server, the mobile phone software phone The range of use is expanded.

[0048] Further objects and other features of the present invention will become apparent from the preferred embodiments described below with reference to the accompanying drawings.

The invention's effect

[0049] According to the present invention, the communication terminal can be authenticated without requiring the user of the communication terminal to perform a special operation, and information transmission / reception via the wide area communication network can be easily used. Even if the communication terminal moves, authentication can be performed without bothering the user. In addition, since identification information used for authentication of the communication terminal is collectively managed by the holding means, the information management cost can be reduced. Furthermore, since authentication of the communication terminal is performed by collating with identification information managed in a batch, authentication can be performed with the same identification information from any local communication network constructed in various places.

[0050] According to the present invention, the range of use of the mobile phone type softphone is expanded, so that a telephone system using the Internet that provides convenience to a mobile phone type softphone like a mobile phone is realized. You can make calls with the other party's softphone at no charge, and there are no restrictions on the area! /, So you can easily make overseas calls and use overseas as if you were using a mobile phone. be able to.

BEST MODE FOR CARRYING OUT THE INVENTION

[0051] [Embodiment 1]

Embodiments embodying the present invention will be described in detail below.

FIG. 1 is a block diagram showing a configuration of a telephone system using the Internet of the present invention.

In FIG. 1, reference numerals 11, 12, and 13 denote mobile phone type softphones (communication terminals). Mobile phone type softphones 11, 12 and 13 are equipped with a PC function and WE Equipped with a wireless LAN function based on P (Wired Epuivalent Privacy) authentication, and if you have a wireless LAN environment that can be connected via WEP authentication, you can send and receive communications with a wireless LAN access point without a computer to make a softphone call have.

[0054] The mobile phone type softphones 11, 12, 13 can make calls to general subscriber phones and mobile phones via the connection points of general subscriber phones that can be used only by free calls between softphones via the Internet circuit. On the other hand, it also has a function to receive calls from general subscriber phones and mobile phones.

IN is an Internet circuit (wide area communication network).

[0056] A, B, and C are wireless LAN access points (private communication networks). Each of the wireless LAN access points A, B, and C has a predetermined communication area that can transmit and receive with the mobile phone type softphones 11, 12, and 13. Each wireless LAN access point is configured such that when a mobile phone softphone is used in the communication area, wireless communication can be performed with the mobile phone softphone using WEP authentication. ing. In addition, mobile phone-type softphones cannot communicate with wireless LAN access points A, B, and C wirelessly without receiving WEP authentication!

[0057] Each wireless LAN access point A, B, C has antennas 21, 22, 23 for wireless transmission and reception and access sano (relay devices) 31, 32, 33 connected to the Internet circuit, and is portable. When antennas 21, 22, and 23 receive wireless communication from telephone-type softphones 11, 12, and 13, they are transmitted to access servers 31, 32, and 33, and transmission signals from each access server are transmitted to each antenna. By using this method, communication is transmitted wirelessly to each mobile phone type softphone in the communication area.

[0058] The access servers 31, 32, and 33 of the wireless LAN access points A, B, and C are connected to the Internet circuit of the mobile phone type soft phone according to the WEP authentication process, the MAC address authentication and management process, and the traffic state. It has a function to execute the control process.

[0059] In the WEP authentication process, a WEP key is set in the mobile phone type softphone, and authentication is performed to match the WEP setting when the mobile phone type softphone is connected to the wireless LAN.

Because the WEP key is set correctly! /, N! /, Mobile phone softphones cannot connect to the access point, so only mobile phone softphones that have been previously WEP-authenticated can access Can be used.

[0060] The same WEP key (encryption key) is set for both the access point and the mobile phone softphone by WEP authentication, and a function for encrypting data to be communicated by the common key encryption method is added. Data is encrypted and communication confidentiality is maintained.

[0061] SV is an authentication server provided in the Internet circuit. The authentication server SV registers and holds the MAC addresses of all mobile phone softphones that can communicate from the access point in the database, and the access server responds to the request from the access server of each access point. It searches whether the MAC address of the mobile phone softphone that has been authenticated is registered in the database of the authentication server SV, and returns the result to the requested access server.

[0062] Therefore, the MAC address of the mobile phone type softphone that has contracted to communicate from the access point of the telephone system of the present invention is sequentially registered in the database of the authentication server SV, and the MAC address is registered! /, N! /, Mobile phone softphones refuse to communicate with the access point.

[0063] Reference numerals 41 and 42 denote a personal computer in which a softphone connected to the Internet circuit is installed.

[0064] TL is a general subscriber telephone line.

[0065] Reference numeral 50 denotes a connection point between the Internet circuit of the softphone and the general subscriber telephone line. The connection point 50 executes a function of making a call to a general subscriber phone or a mobile phone to a softphone user who has contracted in advance, or receiving a call from a general subscriber phone or a mobile phone.

[0066] Operation of the telephone system using the Internet of the present invention configured as described above will be described below.

[0067] While the power is on, the mobile phone softphones 11, 12, and 13 perform notification processing by the function of the wireless LAN interface, and perform mobile phone softphones at regular time intervals. 11, 12, 13 Transmit broadcast information including a WEP authentication key and MAC address (Media Access Control address) as unique identification information.

[0068] This mobile phone type softphone 11, 12, 13 enters the wireless LAN access point and The operation connected to the net circuit and the operation up to exiting from the access point are executed by the steps of the flowchart as shown in Fig.2.

[0069] Step 1.

When the mobile phone softphones 11, 12, 13 that are turned on enter the communication area of the wireless LAN access points A, B, C, the antennas 21, 22, 23, 3 of each access point are used. A notification process for transmitting notification information including a WEP authentication key and MAC address (Media Access Control Address) as identification information unique to the mobile phone type softphone to the access servers 31, 32, and 33 is executed.

[0070] When the mobile phone type softphones 11, 12, and 13 exist within the communication area of the wireless LAN access points A, B, and C, the access servers 31, 32, and 33 are connected to the mobile phone type soft phone at predetermined intervals. Broadcast information including WEP authentication key and MAC address from 11, 12 and 13 will be received. The predetermined interval is an interval at which the presence of a mobile phone softphone can be immediately detected when the mobile phone softphone enters the communication area of the wireless LAN access point. This is the interval at which it can be detected immediately when it moves out of the area.

[0071] Step 2

When the access servers 31, 32, and 33 receive communication including the WEP authentication key and MAC address of the mobile phone type softphone, the access servers 31, 32 and 33 first execute WEP authentication processing.

If the determination result of the WEP authentication process is affirmative, the access servers 31, 32, 33 perform the MAC address authentication and management process. If the result of this WEP authentication process is negative, the access server blocks communication with the mobile phone type softphone.

[0073] Step 3.

As a result of the WEP authentication process, the access servers 31, 32, and 33, when the WEP key is stored in the storage unit and WEP authentication is successful, the MAC of the mobile phone softphone with respect to the authentication server SV. Send the address and check whether this MAC address is registered in the authentication server SV database.

[0074] Step 4.

The authentication server SV receives the broadcast information of the MAC address from the access servers 31, 32, 33. If received, the MAC address search process is executed to search whether the MAC address of the received mobile phone type softphone is registered in the database of the authentication server SV. Then, if the MAC address searched in the database is registered! /, The authentication server SV returns this fact to the access server of the sender.

[0075] Step 5.

Upon receiving the return result of the authentication server SV, the access servers 31, 32, and 33 register the MAC address of the mobile phone type softphone in the storage unit. As a result, the access servers 31, 32, and 33 use the force S for recognizing that the mobile phone type softphone exists within their own communication area.

[0076] Step 6.

At the same time, the access servers 31, 32, 33 execute an address addition process, add an IP address to the mobile phone softphone, and connect to the Internet circuit IN.

[0077] Thereby, since the mobile phone type softphone is connected to the Internet circuit IN via the access server 31, 32, 33 of the wireless LAN access point, all the mobile phone types connected to the Internet circuit IN are connected. It is possible to make a soft phone call with a personal computer 41 or 42 installed with a soft phone or a soft phone connected to the Internet circuit.

[0078] Step 7.

The access servers 31, 32, and 33 monitor the state in which all mobile phone type softphones registered in the storage unit that are in the communication area of the mobile phone are making a call. The number of connections to the Internet circuit is executed, and control is performed so that the phone call is stable.

[0079] If there are mobile phone type soft phones 11, 12, 13 that have registered MAC addresses in the access servers 31, 32, 33 within the communication area of the wireless LAN access point, all mobile phones Type softphones 11, 12 and 13 can transmit softphone communications, but the amount of wireless LAN traffic using the IEEE802.11 standard is not so large. Since the number of calls is about 250, if more calls are requested, the mobile phone that is currently talking through the access servers 31, 32, 33 The mobile phone softphone that requested the call is put on standby until one call of the mobile phone softphone is completed.

[0080] Step 8.

It is detected that the mobile phone type softphone in which the access servers 31, 32, and 33 exist in its own communication area and are registered in the storage unit moves out of its own communication area and no notification information is received.

[0081] Step 9.

The access servers 31, 32, and 33 delete the MAC address of the mobile phone software phone registered in the storage unit from the storage unit.

[0082] In the softphone, the Internet circuit IN and the general subscriber telephone line TL are connected by the connection point 50, and the connection point 50 is connected to the softphone user who has contracted in advance with a general subscriber telephone or a cellular phone. Mobile phone type softphone users can also make calls with general subscriber phones and mobile phones.

[0083] Since the mobile phone type softphones 11, 12, 13 always transmit the notification information at a predetermined time interval at predetermined intervals only by turning on the power by the function of the wireless LAN interface, If a mobile phone type soft phone exists in the communication area of LAN access points A, B, and C, broadcast information continues to be transmitted to the wireless LAN access point. For this reason, users of mobile phone type softphones do not need to reconnect each time they enter the communication area of a new wireless LAN access point.

[0084] As described above in detail, the telephone system using the Internet of the present invention has the following features.

[0085] The mobile phone type softphone can talk to the partner softphone connected to the Internet for free, and there are no restrictions on the area! / Can be done easily.

[0086] Mobile phone type softphones are easy to introduce, and you can make free calls with the other party connected to the Internet. It is necessary to be a member of the same provider, and it is not possible to make free calls with partners who have contracts with different providers! /, So it is wider than IP phones! /!

[0087] [Embodiment 2]

Hereinafter, communication terminal authentication system S 1 according to Embodiment 2 of the present invention will be described with reference to the drawings. FIG. 3 is a schematic block diagram showing an overall configuration of an information transmission / reception system S2 that includes the communication terminal authentication system S1 and that performs information transmission / reception using the communication terminal.

[0088] The information transmission / reception system S2 includes a mobile phone type terminal (soft phone) (communication terminal) 102 and a communication terminal authentication system S1, and is roughly configured.

[0089] The mobile phone terminal 102 performs voice communication (information transmission / reception) by wireless communication via the wireless local area communication networks (local area communication networks) 134a and 134b and the Internet network (wide area communication network) INI, which will be described later. Communication terminal. Hereinafter, the procedure for transmitting and receiving information by the mobile phone type terminal 102 will be described on the assumption that the mobile phone type terminal 102 is within the communication area of the wireless local area communication network 134a.

FIG. 4 is a diagram showing a schematic configuration of the mobile phone type terminal 102. The mobile phone type terminal 102 has a main unit 103 and an antenna unit (radio wave transmission / reception unit) 105 and is roughly configured. On the surface of the main body 103, there are arranged a display 102a and operation buttons 102d for the user of the mobile phone terminal 102 to perform various operations. The display unit 102a displays information necessary for the operation of the mobile phone type terminal 102 or when the mobile phone type terminal 102 is used to access a web page held by a server connected to the Internet network IN1. The web page can be displayed on the screen.

[0091] Inside the main unit 103, a SIM card 108 as a storage device, a memory 109, and a CPU 110 as an arithmetic processing unit are arranged!

[0092] The SIM card 108 of the mobile phone terminal 102 is a storage device that is easily provided in the main body 103.

[0093] In the SIM card 108 of the mobile phone type terminal 102, an area that functions as the terminal-side MAC address holding means 108b that holds the MAC address (first identification information) 108a of the mobile phone type terminal 102 is constructed. ing. The MAC address is assigned differently for each communication terminal. This information is unique to the communication terminal and can be identified using this MAC address. The MAC address is generally composed of a 48-bit code, and the first 24 bits are assigned differently depending on the manufacturer of the communication terminal. Therefore, the manufacturer of the mobile phone terminal 102 can be specified by the MAC address.

The SIM card 108 of the mobile phone type terminal 102 has an area that functions as terminal-side WEP key holding means (holding unit) 108c. The terminal-side WEP key holding means 108c holds a terminal-side WEP key (second identification information) 108d as encryption key information. This WEP key is information that is assigned in common to a plurality of mobile phone terminals capable of transmitting / receiving information to / from an access point described later, and is held in advance in the terminal-side WEP key holding means 108c.

[0095] Note that the WEP (Wired Epuivalent Privacy) key means that the mobile phone terminal 102 and the access point described later encrypt and decrypt information with the same WEP key, so that information can be transmitted and received between the two. It is possible.

The memory 109 of the mobile phone type terminal 102 is a storage device that is provided inside the main body 103 so as to be difficult to attach and detach. The memory 109 stores a terminal program P1. Based on the command of the terminal program P1, the CPU 110 of the mobile phone type terminal 102 performs the following various functions.

[0097] CPU 110 of mobile phone terminal 102 automatically transmits MAC address 108a to the access point when mobile phone terminal 102 receives MAC request signal 136 broadcast from an access point, which will be described later. The MAC address transmission means (transmission unit) 110a functions as a.

The CPU 110 of the mobile phone type terminal 102 has an access point (relay device) API, which will be described later,

When the mobile phone terminal 102 receives the WEP request signal 137 transmitted from the AP2 to the mobile phone terminal 2, the terminal-side WEP key 108d is sent to the access point. Part) It has a function as 110b.

[0099] The concept of "transmission of WEP key" includes not only transmitting the WEP key as it is, but also encrypting specific information using the WEP key and transmitting the encrypted information. It is. The access point also encrypts specific information with its own WEP key, and the encrypted information is the same as the encrypted information sent from the mobile phone terminal 102. If it matches, it can be confirmed that the specific information is encrypted with the common WEP key, in other words, that the common WEP key is held. In other words, such indirect WEP key transmission is also included in the concept of “WEP key transmission”. In the challenge response method, which is known as authentication using a WEP key, this indirect WEP key transmission is used. In the second embodiment, the terminal-side WEP key 108d is transmitted as it is to the access point API, AP2.

[0100] The antenna unit 105 of the mobile phone type terminal 102 is used to receive and transmit radio waves in order to transmit and receive various types of information such as the MAC address 108a by wireless communication with the access point API and AP2, which will be described later. Is.

[0101] The communication terminal authentication system S1 is roughly configured to include an access point API, AP2, an authentication server 104, and an Internet network (wide area communication network) IN1, and the access point API is connected to the Internet network IN1. , AP2 and authentication server 104 are connected to transmit and receive information.

[0102] FIG. 5 is a diagram showing a schematic configuration of the access point API, AP2. The access points A PI and AP2 are roughly configured with a casing 128, a memory 130, and a CPU 132. The access points are connected to the Internet network IN1 and are installed in various places around the world. The casing 128 constitutes the outline of the access point API, AP2, and an antenna portion 128a is formed to protrude. Wireless communication with the cellular phone terminal 102 is possible by transmitting and receiving wireless radio waves by the antenna unit 128a. The access point API, AP2, is connected to the Internet network IN1 so that information can be sent and received.

[0103] In the second embodiment, the wireless radio wave transmission range transmitted from the antenna unit 128a of the access point API and AP2, that is, the communication area of the access point API and AP2, uses the mobile phone terminal 102. It is defined as wireless local area network (local area network) 134a, 134b that can send and receive information via Internet network IN1.

The memory 130 of the access point API, AP2 is a storage device accommodated in the housing 128. The memory 130 of the access point API, AP2 has an area that functions as the AP-side WEP key holding means (second holding means) 130a. AP side WEP key holding means 130a holds an AP side WEP key (second verification information) 130b. AP side WEP key 13 Ob is information used when a voice call is made via the Internet network INI using the mobile phone terminal 102.

[0105] The memory 130 of the access point API, AP2 has an area that functions as temporary holding means 130c that temporarily holds the MAC address 108a to which the mobile phone type terminal 102 has also been transmitted.

[0106] Further, the memory 130 of the access point API and AP2 holds the MAC address 108a of the mobile phone terminal 102 that is allowed to transmit and receive information via the Internet network IN1 as the AP-side MAC address information 130d. It has an area that functions as the MAC address holding means 130e. As shown in FIG. 6, the AP-side MAC address information 130d is held in the AP-side MAC address database 130f constructed in the AP-side MAC address holding unit 130e, and is written by the writing unit 132c and the deleting unit 132d described later. · Erasable.

[0107] AP program P2 is stored in memory 130 of access point API and AP2. Based on the command of the AP program P2, the access point API and the CPU 132 of the AP2 perform the following various functions.

[0108] The CPU 132 of the access point API, AP2 sends a MAC request signal 136 for requesting transmission of the MAC address 108a to the local communication networks 134a, 134b at a predetermined interval (one minute interval in the second embodiment). ) Broadcast request transmission MAC request signal transmission means (request signal transmission means) It has a function as 132a. As described above, the MAC address 108a is automatically transmitted from the mobile phone terminal 102 that has received the MAC request signal 136. Broadcast cast transmission means sending a signal without identifying the other party. Therefore, if the mobile phone type terminal 102 having the MAC address transmission means 110a enters the wireless local area network 134a, 134b, that is, within the communication area, it automatically responds to the MAC request signal 136 broadcasted at intervals of 1 minute. MAC address 108a will be transmitted

[0109] The CPU 132 of the access point API, AP2 acquires the MAC address 108a transmitted from the mobile phone terminal 102, and forwards it to the authentication server 104. MAC address transfer means (second acquisition means) Function as 132b Have

[0110] Access point API, CPU 132 of AP2 is sent from authentication server 4 to be described later When the coincidence signal (permission information) 111 is received, the MAC address 108a held in the temporary holding means 130c is written into the AP-side MAC address database 130f, and functions as a writing means 132c. When the mismatch signal 112 is received, the MAC address 108a is not written! /.

[0111] Further, the CPU 132 of the access point API, AP2 also has a function as a deletion means 132d for deleting the MAC address 108a written in the AP-side MAC address data base 130f. The MAC address 108a is deleted by the XI removal means 132d after the MAC address 108a is written in the AP-side MAC address database 130f, and the MAC request signal 1 36 is sent a predetermined number of times (in this embodiment 2, three times). .) Even if a call is made, it is performed when the mobile phone terminal 102 does not transmit the MAC address 108a. That is, even if the MAC request signal 136 is transmitted three times, the mobile phone terminal 102 that does not transmit the MAC address 108a is determined to have already moved to a position away from the access point API, AP2, The MAC address 108a is deleted.

[0112] The CPU 132 of the access point API, AP2 transmits a WEP request signal 137 to the mobile phone terminal 102 when acquiring the coincidence signal 111 transmitted from the authentication server 104. WEP request signal transmission means It has a function as 132e. As described above, the terminal-side WEP key 108d is automatically transmitted from the mobile phone terminal 102 that has received the WEP request signal 137. Note that WEP request signal 137 is transmitted to a specific mobile phone terminal 102 that has transmitted MAC address 108a, unlike MAC request signal 136 that is broadcast.

[0113] The CPU 132 of the access point API, AP2 has a function as second verification means 132f for verifying the terminal-side WEP key 108d and the AP-side WEP key 130b transmitted from the mobile phone type terminal 102.

[0114] The CPU 132 of the access point API, AP2 has a function as information control means 132g that allows the mobile phone terminal 102 to transmit and receive information via the access point API, AP2.

[0115] The information control unit 132g sends a match signal 111 from the authentication server 104, and writes that the MAC address 108a is written in the AP-side MAC address database 130f (that is, the match) Obtaining signal 111. In the verification by the second verification means, only when the terminal side WEP key 108d and the AP side WEP key 130b match, information transmission / reception is allowed.

[0116] If information indicating the MAC address 108a is included in the voice information transmitted when the mobile phone terminal 102 makes a voice call, the MAC address 108a is written in the AP-side MAC address database 130f. Therefore, transmission of voice information is permitted. On the other hand, if the voice information transmitted from the call destination to the mobile phone terminal 102 also includes information indicating the MAC address 108a of the mobile phone terminal 102, the voice information of the mobile phone terminal 102 Reception is allowed. Therefore, the communication terminal corresponding to the MAC address 108a deleted from the AP-side MAC address database 130f by the deleting means 132d is refused to transmit / receive information such as a voice call.

FIG. 7 is a block diagram showing a schematic configuration of the authentication server 104. The authentication server 104 is a server for authenticating the mobile phone type terminal 102. Here, “authentication” means whether or not the mobile phone terminal 102 that has attempted to transmit / receive information via the Internet IN1 is a communication terminal that should be allowed to relay information transmission / reception by the communication terminal authentication system S1. It means to judge. “Communication terminals that should be allowed to relay information transmission / reception” refers to, for example, communication terminals sold by operators providing information transmission / reception services using this communication terminal authentication system S1, and information transmission / reception to / from operators. A communication terminal with a contract for service. In the second embodiment, authentication server 104 is a mobile phone type terminal manufactured by a provider (hereinafter referred to as the provider) that provides an information transmission / reception service by communication terminal authentication system S1. Is determined using the MAC address 108a. The determination procedure will be described in detail later.

[0118] The authentication server 104 is configured to include a hard disk 138 as a storage device and a CPU 140 as an arithmetic processing unit. The authentication server 104 is connected to the Internet network IN1 so as to be able to transmit and receive information, and passes through the Internet network IN1. Information can be sent to and received from the access point API and AP2.

[0119] The hard disk 138 of the authentication server 104 is an area that stores and holds the MAC address of the mobile phone terminal 102 as terminal identification information (first verification information) 138c, that is, the server-side MAC. The address holding means (first holding means) has a region functioning as 138a.

[0120] As shown in FIG. 8, the MAC address database 138b is constructed in the server-side MAC address holding means 138a. In the MAC address database 138b, a plurality of MAC addresses 108a assigned to communication terminals that should be allowed to relay information transmission / reception by the communication terminal authentication system S1 are held as terminal identification information 138c. The MAC address database 138b can be updated. In the second embodiment, the mobile phone type terminal 102 sold by the operator before the mobile phone type terminal 102 is shipped from the manufacturing factory. The MAC address 108a is added to the MAC address database 138b as needed and updated. In addition, the timing at which the MAC address is additionally updated includes various nominations such as when the mobile phone terminal 102 is purchased by the user, and is shipped from the factory as in the second embodiment. It is not limited before.

[0121] The server program P3 is stored in the hard disk 138 of the authentication server 104. Based on the command of the server program P3, the CPU 140 of the authentication server 104 performs the following various functions.

[0122] The CPU 140 of the authentication server 104 has a function as a MAC address acquisition means (first acquisition means) 140a for acquiring the MAC address 108a transferred from the access point API via the Internet network IN1.

[0123] The CPU 140 of the authentication server 104 has a function as first verification means 140b for verifying the acquired MAC address 108a and the terminal identification information 138c held in the MAC address database 138b.

[0124] As a result of the verification by the first verification unit 140b, the CPU 140 of the authentication server 104 determines that the acquired MAC address 108a matches the terminal identification information 138c, and the mobile phone type terminal manufactured and sold by the operator And has a function as permission information transmitting means (transmitting means) 140c for transmitting the coincidence signal 111 to the access point API. The permission information transmitting means 140c also has a function of transmitting the mismatch signal 112 to the access point API when the MAC address 108a and the terminal identification information 138c do not match.

[0125] As described above, the terminal program P1, the AP program P2, and the server program P3 cooperate with each other to exhibit a function as a communication terminal authentication program. It is.

[0126] The communication terminal authentication system S1 according to the second embodiment has a handover function that prevents a voice call from being interrupted when the mobile phone terminal 102 moves to a different wireless local area communication network. .

Specifically, the mobile phone terminal 102 in the wireless local area communication network 134a moves in the direction indicated by the arrow X, and moves to the region H where the wireless local area communication network 134a and the wireless local area communication network 134b overlap. . Then, the mobile phone terminal 102 can receive not only the MAC request signal 136 from the access point API but also the MAC request signal 136 transmitted from the access point AP2. In this case, the cellular phone terminal 102 transmits the MAC address 108a by the MAC address transmission means 110a without blocking the voice call via the access point API, and the cellular phone terminal 102 is completely connected to the wireless local area network. Before moving to 134b (see also arrow Y), authentication must be completed in advance to enable voice calls via access point AP2.

[0128] Next, the procedure from the authentication of the mobile phone terminal 102 using the communication terminal authentication system S1 until the voice call through the access point API is permitted will be described with reference to the flowchart of FIG. To do.

[0129] When the cellular phone terminal 102 enters the wireless local area network 134a and receives the MAC request signal 136 transmitted from the access point API (S. 1), the MAC address 108a of the cellular phone terminal 102 accesses. Sent toward the API (S. 2). The MAC address 108a is held in the access point API temporary holding means 130c (S. 3), and the MAC address 108a is transferred to the authentication server 104 (S. 4).

[0130] MAC address acquired by authentication server 104 MAC address acquisition means 140a

108a and terminal identification information 138c are collated by the first collating means 140b (S. 5). If the MAC address 108a and the terminal identification information 138c do not match in the verification by the first verification means 140b (S. 6), the permission information transmission means 140c sends a mismatch signal 112 to the access point API (S 7) Voice call is rejected (S. 8). If the MAC address 108a and the terminal identification information 138c match in the verification by the first verification means 140b (S. 6), the permission information transmission means 140c sends the match signal 111 to the access point. Sent to the API (S. 9), the MAC address 108a held in the temporary holding means 130c is written in the AP MAC address database 130f (S. 10), and the WEP request signal 137 is sent to the mobile phone. Is sent to the type terminal 102 (S. 11).

[0131] Then, in response to the WEP request signal 137, the terminal-side WEP key 10 8d is transmitted from the mobile phone terminal 102 to the access point API (S. 12), and the terminal-side WEP key 108d and the AP-side WEP key 130b are transmitted. Are collated by the second collating means 132f (S. 13). If the terminal-side WEP key 108d and the AP-side WEP key 130b match in the verification by the second verification unit 132f (S. 14), the voice call is permitted (S. 15). (S. 14) The voice call is rejected (S. 16).

[0132] Here, the other party with whom the mobile phone terminal 102 makes a voice call may be a communication terminal capable of making a voice call connected to the Internet network IN1, or connected to a public telephone network (not shown). It may be a telephone (not shown).

[0133] The mobile phone terminal 102 described in the second embodiment has a function of performing a voice call via the Internet network IN1, but the mobile phone terminal 2 is connected only via the public telephone network. May have a function of making a voice call. In this case, for example, when a mobile phone is in a wireless communication network, a voice call is made via the Internet network with a relatively low call charge, and when the mobile phone is away from the wireless communication network, a voice call is made via a public telephone network. Start making calls.

[0134] In the second embodiment, the automatic transmission of MAC address 108a by MAC address transmission means 110a and the automatic transmission of terminal-side WEP key 108d by WEP key transmission means 110b are performed at different timings. Configured force The timing may be simultaneous. For example, the MAC address 108a and the terminal-side WEP key 108d are automatically transmitted at the same time when a dial operation is performed to make a voice call using the mobile phone terminal 102 in the wireless local area network 134a. Authentication may be performed. In this case, the access point API AP2 does not need to send the MAC request signal 136.

In addition, the authentication using the MAC address 108a may be performed based on reception of the MAC request signal, and the authentication using the terminal-side WEP key 108d may be performed at the time of dial operation. [0136] In the second embodiment, the authentication server performs authentication of the mobile phone terminal using the MAC address S, and a switch that controls transmission / reception of information between the Internet network and the authentication server. Install a device, etc., and configure the switch device to perform part or all of the authentication function.

As described above, the force S describing the preferred embodiment of the present invention, the present invention is not limited to these, and various modifications and changes can be made within the scope of the gist thereof.

Brief Description of Drawings

FIG. 2 is a flowchart showing the operation up to connection to a mobile phone type softphone internet circuit.

FIG. 3 is a schematic block diagram showing an overall configuration of an information transmission / reception system configured to include the communication terminal authentication system according to Embodiment 2 of the present invention.

4 is a diagram showing a schematic configuration of a mobile phone type terminal constituting the information transmission / reception system shown in FIG.

5 is a diagram showing a schematic configuration of an access point constituting the information transmission / reception system shown in FIG.

[Fig.6] Built on AP side MAC address holding means of access point shown in Fig.5

It is a figure which shows the data structure of AP type | mold MAC address database.

7 is a diagram showing a schematic configuration of an authentication server constituting the information transmission / reception system shown in FIG.

8 is a diagram showing a data structure of a MAC address database constructed in server side MAC address holding means possessed by the authentication server shown in FIG.

FIG. 9 is a flowchart showing a procedure from the authentication of the mobile phone terminal using the communication terminal authentication system shown in FIG. 1 until the voice call through the access point is permitted.

[0139] A, B, C: Wireless LAN access point (private communication network) IN: Internet circuit (wide area communication network)

SV: Authentication server provided in the Internet circuit

TL: General subscriber phone line

API, AP2: Access point (relay device)

P1: Terminal program

P2: AP program

P3: Server program

S 1: Communication terminal authentication system

S2: Information transmission / reception system

IN1: Internet network (wide area communication network)

H: Area

X, Y: Arrow

11, 12, 13: Mobile phone type softphone (communication terminal)

21, 22, 23: Antennas for wireless transmission and reception

31, 32, 33: Access server (relay device)

41, 42: PC with a softphone connected to the Internet circuit

50: Connection point between Internet circuit of softphone and general subscriber telephone line

102: Mobile phone type terminal (soft phone) (communication terminal)

102a: Display section

102d: Operation button

103: Body part

104: Authentication server

105: Antenna (radio wave transmitter / receiver)

108: SIM card

108a: MAC address (first identification information)

108b: Terminal side MAC address holding means

108c: Terminal side WEP key holding means (holding part)

108d: Terminal side WEP key (second identification information) 109: Memory

110: CPU (arithmetic processing unit)

110a: MAC address transmission means (transmitter)

110b: WEP key transmission means (transmitter)

111: Match signal (permission information)

112: Mismatch signal

128: Housing

128a: Antenna part

130: Memory

130a: AP side WEP key holding means (second holding means)

130b: AP side WEP key (second verification information)

130c: Temporary holding means

130d: AP side MAC address information

130e: AP side MAC address holding means

130f: AP side MAC address database

132: CPU

132a: MAC request signal transmission means (request signal notification means)

132b: MAC address transfer means (second acquisition means)

132c: Writing method

132d: Delete method

132e: WEP request signal transmission means

132f: Second verification means

132g: Information control means

134a, 134b: Wireless local area network (local area network)

136: MAC request signal

137: WEP request signal

138: Hard disk

138a: Server side MAC address holding means (first holding means) 138b: MAC address database

138c: Terminal identification information (first verification information)

140: CPU

140a: MAC address acquisition means (first acquisition means)

140b: First verification means

140c: Permit information transmission means (transmission means)

Claims

The scope of the claims

[1] Holds multiple pieces of first collation information for collation with first identification information assigned differently for each communication terminal in order to identify the communication terminal, and can send and receive information to and from the wide area communication network A first holding means connected to the

First identification information automatically acquired from the communication terminal connected to a relay device for constructing a local communication network connected to the first holding means via the wide area communication network is used as the wide area communication network. A first acquisition means for acquiring via

First verification means for verifying the first identification information acquired by the first acquisition means and the first verification information;

Transmitting means for transmitting permission information to permit the information transmission / reception via the relay device by the communication terminal to the relay device based on the result of the collation by the first collating device. Communication terminal authentication system.

[2] The automatic acquisition of the first identification information

Request signal transmitting means for transmitting, at a predetermined interval, a first request signal for requesting transmission of the first identification information toward the communication terminal connected to the relay device; and the first request signal. The communication terminal authentication system according to claim 1, wherein the communication terminal authentication system is realized by having second acquisition means for acquiring first identification information transmitted from the communication terminal.

[3] Further comprising the relay device,

The relay device

When the permission information is acquired, information transmission / reception via the relay device by the communication terminal is permitted,

Information control for rejecting information transmission / reception by the communication terminal via the relay device when the first identification information for the transmission of the first request signal cannot be obtained from the communication terminal permitted to transmit / receive the information The communication terminal authentication system according to claim 2, further comprising means.

[4] The relay device

A second reference for collating with second identification information commonly given to the plurality of communication terminals. Second holding means for holding the combined information in advance;

A third acquisition means for automatically acquiring the second identification information transmitted from the communication terminal; and a second verification means for verifying the acquired second identification information and the second verification information. 4. The communication terminal according to claim 3, wherein the control means allows not only the acquisition of the permission information but also information transmission / reception via the relay device by the communication terminal based on a result of matching by the second collating means. Authentication system.

5. The communication terminal authentication system according to any one of claims 1 to 4, wherein the communication terminal is a wireless communication terminal, and the local communication network is a wireless local communication network.

6. The second acquisition means acquires first identification information transmitted in response to the first request signal from a wireless communication terminal capable of transmitting / receiving information to / from a relay device different from the relay device. The communication terminal authentication system described in 1.

7. The communication terminal authentication system according to claim 1, wherein the first identification information is a MAC address, and the second identification information is a WEP key.

[8] The information transmission / reception is transmission / reception of audio information.

The communication terminal authentication system according to item 1.