JP2000201186A - Communication repeating system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To obtain a communication repeating system improving convenience and safety by changing a certification method for each computer. SOLUTION: In the communication repeating system connecting plural computers having communication systems by a communication line including a radio communication line and a communication network, computers 100, 200, 300, 310 are connected by executing certification in each computer based on a service/certification method correspondence table 202 storing service classes and certification system classes and the table 202 sets up the service/certification method of each computer based on past communication history. When plural computers 100, 200, 300, 310 connected through a communication line are disconnected due to the deterioration of a line state, the connection of a communication line other than the disconnected communication line is held, certification is executed based on the table 202 and the disconnected line is connected again.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a communication relay system for relaying communication between communication systems including a wireless communication line, and more particularly to a communication relay system for changing a method of authenticating a user of a communication system according to a situation. .

[0002]

2. Description of the Related Art With the miniaturization and weight reduction of computers, mobile communications that can use computers even when they are away from home or on the move have begun to be widely used. In general mobile communication, as shown in FIG. 4, a communication system 101 on a computer 100 and a communication system 3 on a computer 300
There is a wireless communication line 11 on the path where 01 communicates. However, the communication quality of the wireless communication line 11 is much worse than those of the communication line 21 and the communication line network 40, and instantaneous interruption of communication and performance degradation occur.

In order to solve such a problem in the communication of the wireless communication line 11, a communication relay system 201 is now provided between the wireless communication processing device 400 and the communication line network 40 as shown in FIG. ing. This communication relay system 201 is a communication system 101 on the computer 100.
And the communication of the communication system 301 on the computer 300.

With this configuration, the state of the wireless communication line 11 is poor, and the communication system 101 and the communication relay system 20
1 is interrupted, the communication relay system 20
Since the communication state between the communication system 1 and the communication system 301 is maintained, if the state of the wireless communication line 11 is improved, the communication between the communication system 101 and the communication relay system 201 is resumed and immediately returns to the state before disconnection. Can be. An example of this communication relay system is described in "Transactions of the Information Processing Society of Japan, Multimedia, Distributed, Cooperative and Mobile (DICOMO'98) Symposium, pp. 165-172".

[0005]

However, in the prior art described above, the authentication means for the user of the communication system 101 is constant for any communication system in which the communication relay system 201 holds the connection state. . That is,
Even if the communication system 311 performs the user authentication more strictly than the communication system 301, the communication system 31
There is a problem that the authentication performed by the communication relay system 201 for the user of the communication system 101 is the same in both the communication state with the communication system 1 and the communication state with the communication system 301.

If the user authentication of the communication system 301 is performed more strictly than the user authentication of the communication relay system 201, the strictness of the user authentication in the communication between the communication system 101 and the communication system 301 is lost. There was also a problem that it would be damaged.

The present invention has been made in view of such a background, and a communication relay system which can be used without changing the security of the entire system by changing an authentication function by connecting to a currently held communication system. The purpose is to provide.

[0008]

According to a first aspect of the present invention, there is provided a communication relay system for connecting a plurality of computers having a communication system by a communication line including a wireless communication line and a communication line network. A communication relay system is characterized in that authentication and connection are performed based on a service / authentication method correspondence table in which a service class and an authentication method class are stored every time.

[0009] The invention according to claim 2 is the service / service /
2. The communication relay system according to claim 1, wherein the authentication method correspondence table sets a service / authentication method for each computer based on a past communication history.

According to a third aspect of the present invention, when a plurality of computers connected by a communication line are disconnected due to deterioration of the line condition, the connection of a line other than the disconnected communication line is maintained, and 3. The communication relay system according to claim 1, wherein authentication is performed based on a / authentication method correspondence table and reconnection is performed.

[0011]

DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram of a computer system connected by a communication line according to an embodiment of the present invention. In FIG. 1, a service / authentication method correspondence table 202 used by the communication relay system 201 is provided on a computer 200 on which the communication relay system 201 is operating. The other configuration is the same as the configuration shown in FIG. FIG. 2 is a conceptual diagram showing the contents of the service / authentication method correspondence table 202. FIG. 3 shows a communication relay system 20 according to an embodiment of the present invention.
3 is a flowchart for explaining the operation of FIG.

Next, the operation of the present embodiment will be described with reference to FIG. 1, FIG. 2, and FIG. It is assumed that the communication relay system 201 is in a state of receiving a communication request from the communication system 101 on the other side of the wireless communication line 11 at the same time when the communication relay system 201 is started.

A service / authentication method correspondence table 202 shown in FIG. 2 is prepared for each user of the communication system 101 in advance. Each table describes a pair of a service 202A, which is a set of a computer name, a port number, and a protocol on which the communication system is running (the service is recognized by all of them), and an authentication method 202B.

In the authentication method, the strictness of the authentication method represented by a symbol is described, and a strength relationship is defined for each element of the method. In this example, the authentication method is described by a number, and the strength is defined by the magnitude of the number.

Step S0 of the flowchart shown in FIG.
1 (hereinafter S01), the communication system 101
A communication request for the communication system 301 is transmitted to the communication relay system 201. The communication relay system 201 authenticates the user in response to the communication request from the communication system 101 (S02), and determines whether the authentication is successful (S02).
03).

As a result of the authentication, when it is confirmed that a predetermined user is using the communication, communication between the communication system 101 and the communication relay system 201 is established. When communication between the communication relay system 201 and the communication system 101 is established, the communication relay system 201
From the communication system 301 to the communication system 301 (S0
4), communication from the communication system 101 is performed by the communication system 3
01 (S05).

Communication system 101 and communication system 301
If the state of the wireless communication line 11 becomes worse during communication with
The communication between the communication system 101 and the communication relay system 201 may be disconnected (S06). When the communication with the communication system 101 is disconnected, the communication relay system 201 retains the communication with the communication system 301 which has been performed by the communication system 101 without disconnecting the communication.

When the communication system 101 requests the communication relay system 201 to connect again (S07), the communication relay system 201 searches the service / authentication method correspondence table 202 of FIG. 2 to authenticate the user of the communication system 101. The method is determined (S08). Using the determined authentication method, the user of the communication system 101 is authenticated (S0
9).

If the authentication is successful in S10, a reconnection request from the communication system 101 is accepted, and the communication from the communication system 101 is transferred to the communication system 301 again (S11). If the authentication fails in S10, the reconnection request of the communication system 101 is rejected (S1).
2) The communication with the communication system 301 that has been left without being disconnected is disconnected (S13). Through the above process,
The process of reconnection at the time of disconnection ends, and the communication relay system 201 enters a state of accepting communication from another communication system.

The operation of one embodiment of the present invention has been described above in detail with reference to the drawings. However, the present invention is not limited to this embodiment, and a design change or the like may be made without departing from the scope of the present invention. The present invention is also included in the present invention.

[0021]

As described above, the first effect obtained by the communication relay system according to the present invention is that, by having a service / authentication method correspondence table, an authentication method of a user according to the connection status of the communication system. Therefore, the security of the entire system can be improved.

The second effect is that it is possible to weaken the strictness of the authentication, so that the convenience of the communication relay system can be improved.

[Brief description of the drawings]

FIG. 1 is a block diagram showing connection of computers using a communication relay system according to an embodiment of the present invention.

FIG. 2 is a conceptual diagram showing contents of a service / authentication method correspondence table of FIG. 1;

FIG. 3 is a flowchart for explaining the operation of the communication relay system of FIG. 1;

FIG. 4 is a block diagram showing connection of computers when a communication relay system according to a conventional technique is not used.

FIG. 5 is a block diagram showing connection of computers using a communication relay system according to a conventional technique.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 11 ... Wireless communication line 21 ... Communication line 22 ... Communication line 31, 32 ... Communication line 40 ... Communication line network 100 ... Computer 101 ... Communication system 200 ... Computer 201 ... Communication relay system 202 ... Service / authentication method correspondence table 202A ... Service 202B ... authentication method 300, 310 ... computer 301, 302, 311 ... communication system

 ──────────────────────────────────────────────────続 き Continued on the front page F-term (reference) 5J104 AA07 BA02 KA01 KA04 NA38 PA01 PA07 5K030 GA15 HC09 JL01 JT02 JT09 KA04 LB01 LD20 MA04 MB01 MC08 5K033 AA08 BA04 CB06 CB08 DA19 DB12 EA02 EB02 5K0 EE17A02 BB03 BB03 CC05 CC07 LL03

Claims (3)

[Claims] 1. A communication relay system for connecting a plurality of computers having a communication system by a communication line including a wireless communication line and a communication line network, wherein a service class and an authentication system class are stored for each computer. A communication relay system for performing authentication and connection based on a / authentication method correspondence table. 2. The communication relay system according to claim 1, wherein in the service / authentication method correspondence table, a service / authentication method for each computer is set based on a past communication history. 3. When a plurality of computers connected by a communication line are disconnected due to deterioration of the line condition, the connection of lines other than the disconnected communication line is maintained, and based on the service / authentication method correspondence table. 3. The communication relay system according to claim 1, wherein authentication is performed and reconnection is performed.