JP2001156776A - Internet authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an Internet authentication system where illegal intrusion hardly takes place and the possibility of interception to the entire network can be precluded. SOLUTION: A connection point section 1 obtains an SA error value 62 denoting an error depending on deterioration in position measuring accuracy on the basis of a position and a time of a satellite (GPST) sent from a GPS satellite, stores the SA error value 62 together with the GPST and transfers an IP packet to the IP header, of which the GPST at the transfer time and the SA error value 62 are stored. An HIBB 2 having stored the GPST and the SA error value 62 similarly to the case with the connection point section 1, receives the transferred IP packet, passes the IP packet when the GPST and the SA error value 62 in the IP header are those having been stored in the HIBB 2, an intra-net server section 3 having stored the GPST and the SA error value 62 similarly to the case with the connection point section 1, receives the transferred IP packet, and passes the IP packet when the GPST and the SA error value 62 recorded in the IP header are those having in advance been stored in the intra-net server section 3.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to an Internet authentication system, and more particularly to an Internet authentication system with enhanced security.

[0002]

2. Description of the Related Art Conventionally, this type of Internet authentication system is used for confirming a destination IP address of an IP packet and ensuring security by passing only an IP packet whose IP address is registered in advance. ing.

A conventional Internet authentication system will be described with reference to FIG. 3, which is a block diagram of the conventional Internet authentication system. The computer 97 such as a personal computer is connected to the IP of the intranet server unit.
IP packet by address to first firewall 9
Transfer to 8. The first firewall 98
Pass P packets. The first router 99 confirms the destination address (IP address) of the IP packet transferred from the first firewall 98 and transfers it to the second router on the highway internet backbone.
The second router 100 of the highway Internet backbone confirms the destination address of the transferred IP packet, and checks the destination address of the third router 101 of the intranet server unit.
Transfer to The third router of the intranet server receives the IP packet and receives the IP packet from the second firewall 10.
2 to the IP packet. The second firewall 102 checks whether or not the IP address indicating the destination of the IP packet is registered in advance. If the IP address is registered in advance, the IP address is transferred to the intranet server 103, and if not, discarded. The intranet server 103 executes a predetermined application based on the IP packet.

[0004]

The above-mentioned conventional Internet authentication system uses the firewall to
It checks whether the IP address indicating the destination of the IP packet is registered in advance or not, and when the IP address is registered in advance, passes this IP packet. Therefore, since anyone who knows the IP address can access the intranet server, there is a problem that unauthorized intrusion by a third party is likely to occur. Also, since the authentication is performed only with the IP address, if an external network connection device such as a router is eavesdropped, the IP address of the IP packet passing through the router is stolen and the stolen IP address is used. There is a problem that the entire network may be eavesdropped.

An object of the present invention is to eliminate such a conventional drawback by constructing a complex authentication system by installing a new security device in addition to an authentication operation using only an IP address by a firewall. It is another object of the present invention to provide an Internet authentication system in which an unauthorized intrusion by a user is unlikely to occur, and even if an external network connection device such as a router is eavesdropped and an IP address is stolen, there is no risk of eavesdropping on the entire network.

[0006]

SUMMARY OF THE INVENTION A first Internet authentication system of the present invention comprises a global positioning system.
The positioning accuracy is determined by "selective availability (hereinafter referred to as SA), which is a function that intentionally degrades the positioning accuracy of the satellite navigation system", which is sent from a system (hereinafter referred to as GPS) satellite from time to time. The position of the deteriorated satellite and the time within the satellite (hereinafter referred to as GPS-Tim
described as e. ), An SA error value indicating an error corresponding to the deterioration of the positioning accuracy is obtained from time to time, and the GPS-Time and the SA error value corresponding to the GPS-Time are stored, and an intranet server is stored. When transferring an IP packet with a predetermined IP address to connect to the GPS, the stored GPS-Time corresponding to the time of the transfer and the GP
A connection base for recording and transferring the stored SA error value corresponding to S-Time in the IP header of the IP packet, and a position of the satellite transmitted from the GPS satellite every moment The SA error value is obtained momentarily from the satellite information including the GPS-Time and the GPS-Time, and the GPS-Time and the SA error value corresponding to the GPS-Time are stored and transferred by the connection base unit. When receiving the IP packet, the GPS-Tim recorded in the IP header of the IP packet
e and the SA error value are stored in the GPS.
-Check whether the time is between the Time and the SA error value, pass the IP packet if it is stored, and pass the IP packet if it is not stored.
The SA error value is obtained from the satellite information including the highway Internet backbone for discarding the packet, the position of the satellite transmitted from the GPS satellite from time to time, and the GPS-Time, and the GPS-Ti value is obtained from time to time.
me and the SA error value corresponding to the GPS-Time are stored, and when the IP packet transmitted by the highway internet backbone is received,
The IP address of the transfer destination of the IP packet is identified. If the IP address is not registered in advance, the IP packet is discarded. If the IP address is registered in advance, the IP packet is recorded in the IP header of the IP packet. The obtained GPS-Time and the SA error value correspond to the stored GPS-Time and the S
A error value is checked to see if it is within the stored value, and if it is not stored, the IP packet is discarded. It is provided with.

In the first Internet authentication system of the present invention, when an IP packet to be transferred to the connection point is generated and the IP packet is transferred, the IP packet corresponding to the time at which the transfer is performed. The GPS-Time stored in the intranet server unit and this G-Time
The SA error value corresponding to PS-Time and the IP
The intranet server unit that records and transfers the packet in the IP header, and the GPS-Ti that is recorded in the IP header of the IP packet when the intranet server unit receives the transferred IP packet.
me and the SA error value are the GPS-Time stored in the highway Internet backbone.
And the SA error value is checked to see if they are in the storage, and if they are stored, the IP packet is passed through,
Said highway internet backbone for discarding said IP packets when not stored therein;
Upon receiving the IP packet transferred by the highway Internet backbone, the IP address of the transfer destination of the IP packet is identified, and if the IP address is not registered in advance, the IP packet is discarded. Is registered in advance, the G recorded in the IP header of the IP packet is
It is checked whether the PS-Time and the SA error value are between the GPS-Time and the SA error value stored in the connection base unit. The connection base unit that discards the IP packet and stores the IP packet when it is stored.

A second Internet authentication system according to the present invention comprises a computer for transferring an IP packet with a predetermined IP address for connecting to an intranet server, and a global positioning system (hereinafter referred to as G).
Described as PS. ) The position of the satellite whose positioning accuracy has been degraded due to "Selective Availability (hereinafter, referred to as SA), which is a function that intentionally degrades the positioning accuracy of the satellite navigation system" sent from time to time, and the satellite's position (Hereinafter referred to as GPS-Time), an SA error value indicating an error corresponding to the deterioration of the positioning accuracy is obtained every moment from the satellite information including the GPS-Time and the GPS-Time corresponding to the GPS-Time. And the stored GPS corresponding to the time when the computer transferred the IP packet after receiving the IP packet transferred by the computer.
A first GPS-SA authentication server unit that records and transfers the stored SA error value corresponding to the GPS-Time in the IP header of the IP packet, A first router that receives and forwards the IP packet transferred by the GPS-SA authentication server unit via a first firewall and transfers the first packet; A second router for receiving and transferring the transferred IP packet;
Receiving the IP packet transferred by the second router, transferring the received IP packet to authenticate the IP packet, receiving an authentication result, and passing the IP packet when the authentication result indicates that the IP packet is authenticated; An access server for discarding the IP packet when the authentication result indicates that the IP packet is not authenticated;
The SA error value is obtained from the satellite information including the position of the satellite transmitted from the S satellite from time to time and the GPS-Time, and the GPS-Time and the GPS
-The SA error value corresponding to -Time is stored, and the GPS packet and the SA error value recorded in the IP header of the IP packet received by the IP packet transferred by the access server are the It checks whether the stored GPS-Time is within the SA error value or not, and outputs an authentication result indicating that the IP packet is authenticated when the stored GPS-Time is within the stored SA error value. A second GP that outputs an authentication result indicating that the IP packet is not authenticated when the IP packet is not stored
A highway internet backbone having an S-SA authentication server unit and a third router for receiving and forwarding the IP packet passed by the access server; and the highway internet backbone having the third router forwarded. A fourth router for receiving and transferring the IP packet, and receiving the IP packet transferred by the fourth router,
A second firewall that identifies the P address and transfers only the IP packet in which the IP address is registered in advance, and the position of the satellite and the GPS-Time transmitted from the GPS satellite every moment. Calculating the SA error value from the satellite information including the GPS
-Time and the SA corresponding to this GPS-Time
An error value is stored, and the GPS packet and the SA error value recorded in the IP header of the IP packet after receiving the IP packet transferred by the second firewall are stored. Said GPS-T
A third check is made to determine whether the IP packet is within the stored I.I.m. and the SA error value. If the IP packet is stored, the IP packet is passed. And an intranet server unit that receives the IP packet passed by the third GPS-SA authentication server unit and executes a predetermined application. ing.

[0009] A third Internet authentication system of the present invention is a global positioning system (hereinafter referred to as "global positioning system").
Described as GPS. ) The position of the satellite whose positioning accuracy has been degraded due to "Selective Availability (hereinafter, referred to as SA), which is a function that intentionally degrades the positioning accuracy of the satellite navigation system" sent from time to time, and the satellite's position (Hereinafter referred to as GPS-Time)
From the satellite information including: the local positioning information indicating the own position including an error corresponding to the deterioration of the positioning accuracy, the kinematic positioning information indicating the own position including no error corresponding to the deterioration of the positioning accuracy, and the positioning accuracy Showing an error according to the deterioration of
An error value is obtained from time to time, and the GPS-Time, the single positioning information corresponding to the GPS-Time, the kinematic positioning information, and the SA error value are stored together with a first IP address that is an own IP address. The kinematic positioning information obtained from time to time is transferred from time to time together with the GPS-Time and the first IP address corresponding to the kinematic positioning information, and the IP address of the transfer source transferred from time to time and the transfer source Receiving and storing the kinematic positioning information and the GPS-Time corresponding to this kinematic positioning information, and transferring an IP packet with a predetermined destination IP address for connection to an intranet server The first IP address corresponding to the time of the transfer.
A connection base for recording and transferring the GPS-Time stored together with the address and the single positioning information corresponding to the GPS-Time in the IP header of the IP packet, and are transmitted from the GPS satellite every moment From the satellite information including the position of the satellite and the GPS-Time, the single positioning information, the kinematic positioning information, and the SA error value are obtained from time to time to obtain the GPS-T
and the kinematic positioning information and the kinematic positioning information, which store the single positioning information, the kinematic positioning information, and the SA error value corresponding to the GPS-Time and the GPS-Time. The GPS-Time corresponding to the information and the first IP
Receiving the address, transferring and storing the received kinematic positioning information, the GPS-Time, and the first IP address every moment, and transmitting the IP address of the transfer source transmitted every moment to the transfer source. Receiving the kinematic positioning information originally obtained and the GPS-Time corresponding to the kinematic positioning information, receiving the kinematic positioning information and the GPS-Time
e and the IP address of the transfer source are transferred and stored in the connection base unit, and when the IP packet transferred by the connection base unit is received, the transfer destination of the IP packet is determined from this IP packet. IP address and this I
The GPS-Time and the single positioning information recorded in the IP header of the P packet are acquired, and the acquired IP address matches the GPS-Time, and the stored moment-to-time is transferred. The stored kinematic positioning information corresponding to the IP address of the first IP address and the transfer source IP address and the GPS-Time corresponding to the IP address. And the obtained SA error value from the obtained single positioning information, and the obtained SA error value and the GP transmitted from the GPS satellite every moment.
It is checked whether or not the SA error value obtained and stored corresponding to S-Time matches, and when the SA error value matches, the IP
A highway internet backbone that passes packets and discards the IP packet when they do not match, and the single positioning information based on the satellite information including the position of the satellite and the GPS-Time transmitted from the GPS satellite every moment. The kinematic positioning information and the SA error value are obtained from time to time to obtain the GPS-Time
And the single positioning information, the kinematic positioning information, and the SA error value corresponding to the GPS-Time
Stored with the second IP address, which is the P address,
Transferring the kinematic positioning information obtained from time to time to the highway internet backbone with the GPS-Time corresponding to the kinematic positioning information and the second IP address being the transfer source IP address, The first IP address, the GPS-Time, and the GPS-Time transferred from the Internet backbone moment by moment
And receives and stores the kinematic positioning information corresponding to the IP packet. When the IP packet transferred by the highway Internet backbone is received, the IP
Identifying the IP address to which the packet is to be forwarded,
When the P address is not registered in advance, the IP packet is discarded. When the IP address is registered in advance, the IP address, the GPS-Time recorded in the IP header of the IP packet, and the single positioning are used. Information, and the obtained IP address and the GPS-Time coincide with each other, and the IP address of the stored first IP address and the second IP address and the Calculating the SA error value from the stored kinematic positioning information corresponding to the GPS-Time corresponding to the IP address, and the obtained single positioning information; The SA error value obtained and stored in correspondence with the GPS-Time sent from the GPS satellite every moment is one. Investigated whether the to the discard IP packets, and is configured with, and intranet server unit for receiving the IP packet when matching when they do not match.

[0010] The third Internet authentication system of the present invention further comprises an IP packet to be transferred to the connection point, and the IP packet corresponding to the time when the IP packet is transferred. The GPS-Time stored and transmitted by the intranet server from time to time from the GPS satellite, and the single positioning information obtained by the intranet server corresponding to the GPS-Time are recorded in the IP header of the IP packet. The intranet server unit to which the IP packet is transferred, and when the intranet server unit receives the transferred IP packet, the IP packet is recorded in the IP address of the transfer destination of the IP packet and the IP header of the IP packet. And obtains the GPS-Time and the independent positioning information. The IP address and the GPS was
And the GPS-Time corresponding to the IP address of the stored first-time IP address and the transfer source IP address, which coincide with each other. The SA error value is obtained from the stored kinematic positioning information and the obtained single positioning information corresponding to the stored SA error value and transmitted from the GPS satellite every moment. The highway internet backbone checks whether or not the SA error value obtained and stored corresponding to the incoming GPS-Time matches, and if it matches, passes the IP packet; otherwise, discards the IP packet. When the IP packet transmitted by the highway internet backbone is received, Identify the IP address of the packet transfer destination, discard the IP packet if the IP address is not registered in advance, and discard the IP address and the IP address of the IP packet when the IP address is registered in advance. The GP recorded in the header
S-Time and the single positioning information are acquired, and the acquired first IP address and the transfer source IP address that match the acquired IP address and the GPS-Time are obtained. The SA from the stored kinematic positioning information corresponding to the IP address and the GPS-Time corresponding to the IP address and the acquired single positioning information.
An error value is obtained, and it is checked whether or not the obtained SA error value and the SA error value obtained and stored corresponding to the GPS-Time sent from the GPS satellite every moment coincide with each other. Discarding the IP packet,
And a connection base unit that stores the IP packet when they match.

A fourth Internet authentication system according to the present invention includes a computer for transferring an IP packet at a predetermined transfer destination IP address for connecting to an intranet server, and a global positioning system (hereinafter referred to as GPS). )) "Selective availability (hereinafter referred to as S), a function that intentionally degrades the positioning accuracy of the satellite navigation system
Described as A. )) Indicates its own position including an error corresponding to the deterioration of the positioning accuracy from the satellite information including the position of the satellite whose positioning accuracy has deteriorated and the time in the satellite (hereinafter, referred to as GPS-Time). The GPS-Time is obtained by obtaining, from time to time, single positioning information, kinematic positioning information indicating an own position that does not include an error corresponding to the deterioration of the positioning accuracy, and SA error value indicating an error corresponding to the deterioration of the positioning accuracy.
And the single positioning information, the kinematic positioning information, and the SA error value corresponding to the GPS-Time
Stored together with the first IP address that is the P address,
The kinematic positioning information obtained from time to time is transferred from time to time together with the GPS-Time and the first IP address corresponding to the kinematic positioning information, and the transfer source IP address and the transfer source transferred from time to time are used. The received kinematic positioning information and the GPS-Time corresponding to the kinematic positioning information are received and stored, and the IP packet transferred by the computer is received. When the computer transfers the IP packet, The GPS-Time stored together with the first IP address corresponding to the time, and the GPS-Ti
a first GPS-S for recording and transferring the single positioning information corresponding to the “me” in the IP header of the IP packet.
A authentication server unit, and the IP packet transferred by the first GPS-SA authentication server unit is received and transferred via a first firewall.
The S-SA authentication server receives the kinematic positioning information obtained and transferred from time to time, the GPS-Time corresponding to the kinematic positioning information, and the first IP address, and transfers the information from time to time, and transfers from time to time. Receiving the IP address of the transfer source, the kinematic positioning information obtained by the transfer source, and the GPS-Time corresponding to the kinematic positioning information, and transferring the GPS-Time via the first firewall. A connection base unit having a router; receiving and transferring the IP packet transferred by the first router of the connection base unit, and the kinematic positioning information transferred from time to time by the first router; The GP corresponding to tick positioning information
Receiving the S-Time and the first IP address and transferring the information from time to time, the IP address of the transfer source transferred from time to time, the kinematic positioning information obtained by the transfer source, and the kinematic positioning information. The GPS-Ti
and a second router that forwards to the first router at the connection base unit, and the I that is forwarded by the second router.
Receiving a P packet or kinematic positioning information, the GPS-Time, and the first IP address,
When a packet is received, the IP packet is forwarded for authentication, an authentication result is received, and the authentication result is transmitted to the IP packet.
Passing the IP packet when indicating to authenticate the packet, discarding the IP packet when the authentication result indicates that the IP packet is not authenticated,
When the kinematic positioning information, the GPS-Time, and the first IP address are received, they are transferred as they are, and the IP address of the transfer source that is transferred from time to time and the kinematic positioning information obtained by the transfer source And the GPS-T corresponding to the kinematic positioning information
an access server for receiving and transferring the IP and the GP
The GPS-Time is obtained by obtaining the single positioning information, the kinematic positioning information, and the SA error value from the satellite information including the position of the satellite transmitted from the S satellite from time to time and the GPS-Time. And this GPS
-Stores the single positioning information, the kinematic positioning information, and the SA error value corresponding to the Time, and the kinematic positioning information transferred from the access server from time to time and the kinematic positioning information corresponding to the kinematic positioning information. A GPS-Time and the first IP address are received and stored, and the IP address of the transfer source transferred from the access server from time to time, the kinematic positioning information obtained by the transfer source, and the kinematic The GPS-Time corresponding to the positioning information is received and stored. When the IP packet is received from the access server, the transfer destination IP address of the IP packet and the IP address of the IP packet are received from the IP packet. The GPS-Time and the independent positioning information recorded in the IP header are obtained. Then, the obtained IP address and the GPS-Time coincide with each other, and the IP address of the stored first IP address and the transfer source IP address which is transferred momentarily is stored. And the GPS-Time corresponding to this IP address,
From the stored kinematic positioning information and the obtained single positioning information corresponding to
An A error value is obtained, and it is checked whether or not the obtained SA error value matches the SA error value obtained and stored corresponding to the GPS-Time transmitted from the GPS satellite at every moment. A second G that outputs an authentication result indicating that the IP packet is authenticated to the access server, and outputs an authentication result indicating that the IP packet is not authenticated to the access server when they do not match.
A PS-SA authentication server unit, receiving and transferring the IP packet passed by the access server or the kinematic positioning information transferred by the access server, the GPS-Time and the first IP address, and A third router that receives the transferred IP address of the transfer source, the kinematic positioning information obtained by the transfer source, and the GPS-Time corresponding to the kinematic positioning information, and transfers the information to the access server from time to time; And receiving and transferring the IP packet or the kinematic positioning information, the GPS-Time, and the first IP address transferred by the third router of the highway Internet backbone. Transfer source IP
A fourth router which receives the address, the kinematic positioning information obtained by the transfer source, and the GPS-Time corresponding to the kinematic positioning information, and transfers the information to the third router from time to time; Said I transferred by
Receiving a P packet or kinematic positioning information, the GPS-Time, and the first IP address,
When a packet is received, the IP packet
The P address is identified, and only the IP packet in which this IP address is registered in advance is transferred. When the kinematic positioning information, the GPS-Time, and the first IP address are received, these are transferred as they are. Receiving the IP address of the transfer source transferred from time to time, the kinematic positioning information obtained by the transfer source, and the GPS-Time corresponding to the kinematic positioning information, and transferring the information to the fourth router from time to time. From the satellite information including the second firewall and the position of the satellite transmitted from the GPS satellite every moment and the GPS-Time, the single positioning information, the kinematic positioning information, and the SA error value are calculated. The GPS-Time, the single positioning information corresponding to the GPS-Time, The GPS over T the tick positioning information and said SA error value stored together with the second IP address is the local IP address corresponding the kinematic positioning information obtained every moment in the kinematic positioning information
image and the second I which is the IP address of the transfer source.
The IP address or the kinematic positioning information, the GPS-Time, and the first IP address transferred from time to time to the second firewall together with the P address,
When the first IP address, the GPS-Time, and the kinematic positioning information are received, they are stored. When the IP packet is received, the IP address of the transfer destination of the IP packet is received from the IP packet. And the GPS-Time and the single positioning information recorded in the IP header of the IP packet,
The obtained IP address and the GPS-Time
The GPS-Time corresponding to the IP address of the stored first IP address and second IP address and the GPS-Time corresponding to the IP address,
From the stored kinematic positioning information and the obtained single positioning information corresponding to
An A error value is obtained, and it is checked whether or not the obtained SA error value matches the SA error value obtained and stored corresponding to the GPS-Time transmitted from the GPS satellite at every moment. A third GPS-SA authentication server unit that passes the IP packet when it does not match and discards the IP packet when they do not match, and a predetermined application that receives the IP packet that has passed through the third GPS-SA authentication server unit. And an intranet server unit having the following.

[0012]

Next, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 is a block diagram showing a first embodiment of the Internet authentication system of the present invention.

The present embodiment shown in FIG.
A positioning system (hereinafter, referred to as GPS), which is sent from time to time by a satellite, "Selective Availability (hereinafter, referred to as SA) is a function that intentionally degrades the positioning accuracy of a satellite navigation system by the US Department of Defense. The position of the satellite whose positioning accuracy has deteriorated due to ") and the time within the satellite (hereinafter referred to as GPS-Tim)
described as e. ) Is determined from time to time from the satellite information including
The S-Time and the SA error value 62 corresponding to the GPS-Time are stored, and the IP address is set to a predetermined IP address to connect to the intranet server 23 which is an application server constructed as an intranet.
When a P packet is transferred, the stored GPS-Time corresponding to the time of the transfer and this GP-Time
SA error value 62 stored corresponding to S-Time
Is recorded in the IP header of the IP packet and transferred, and the SA error value 62 is obtained from the satellite information including the GPS position and the satellite position transmitted from the GPS satellite from time to time. -Time and this GPS
When the connection base unit 1 receives the transferred IP packet, the GPS error recorded in the IP header of the IP packet is stored.
-GPS in which Time and SA error value 62 are stored
It is checked whether or not the packet is within the Time and the SA error value 62. If the packet is stored, the IP packet is passed.
Highway Internet Backbone 2 (hereinafter referred to as HIBB2) for discarding packets, the position of satellites sent from GPS satellites every moment, and GPS-Ti
The SA error value 62 is determined from time to time from the satellite information including the “me” and the GPS-Time and the SA error value 62 corresponding to the GPS-Time are stored. When the HIBB 2 receives the IP packet transferred, The IP address of the transfer destination of the IP packet is identified, and when the IP address is not registered in advance, the IP packet is discarded.
When this IP address is registered in advance,
GPS-Time recorded in IP header of P packet
GPS-Time stored with the SA error value 62
And the SA error value 62, and discards the IP packet when it is not stored, and when it is stored, the intranet server unit 3 which receives this IP packet. It is composed of

The intranet server unit 3 generates an IP packet to be transferred to the connection base unit 1 and
When a packet is transferred, the G stored in the intranet server unit 3 corresponding to the time at which the packet is transferred is stored.
PS-Time and SA corresponding to this GPS-Time
The error value 62 is recorded in the IP header of the IP packet and transferred. When the HIBB 2 receives the IP packet transferred by the intranet server unit 3, the HIBB 2
The GPS-Time recorded in the IP header of the packet and the SA error value 62 correspond to the GPS stored in HIBB2.
It is checked whether or not the packet is within the Time and the SA error value 62. If the packet is stored, the IP packet is passed.
Packets are discarded, and the connection base unit 1
When B2 receives the transferred IP packet,
The IP address of the transfer destination of the packet is identified. If this IP address is not registered in advance, this IP packet is discarded.
It is checked whether or not the S-Time and the SA error value 62 are in the GPS-Time and the SA error value 62 stored in the connection base unit 1. The packet is discarded, and the IP packet is stored when stored.

The connection base unit 1 includes an intranet server 2
And a computer 4 such as a personal computer for transferring an IP packet with a predetermined IP address to connect to the satellite 3 and a satellite including the position of the satellite whose positioning accuracy has been degraded by the SA and the time in the satellite (GPS-Time). From the information, an SA error value 62 indicating an error corresponding to the deterioration of the positioning accuracy is obtained from time to time.
Is stored, and the stored GPS-Time and the GPS-Time corresponding to the time when the computer 4 receives the IP packet transferred by the computer 4 and transfers the IP packet are stored. First GPS-SA for recording and transferring the stored SA error value 62 corresponding to the Time in the IP header of the IP packet
Authentication server unit 5 and first GPS-SA authentication server unit 5
Forwards the IP packet to the first firewall 6
And a first router 7 which receives and transfers the data via the first router.

The HIBB 2 receives the IP packet transferred by the first router 7 of the connection base 1 and transfers the IP packet. The HIBB 2 receives the IP packet transferred by the second router 12 and authenticates the IP packet. When the authentication result indicates that the IP packet is to be authenticated, the IP packet is passed, and the authentication result indicates that the IP packet has been authenticated.
When indicating that the P packet is not authenticated, the access server 13 discarding the IP packet, the SA error value 62 is obtained from the satellite information including the GPS position and the satellite position transmitted from the GPS satellite from time to time, and the GPS error is calculated from time to time.
-Time and the SA error value 62 corresponding to the GPS-Time are stored, the IP packet transferred by the access server 13 is received, and the GPS-Time and the SA error value 62 recorded in the IP header of the IP packet are stored. Is checked between the stored GPS-Time and the SA error value 62, and if it is stored, I
A second GPS-SA authentication server unit 14 for outputting an authentication result indicating that the P packet is authenticated, and outputting an authentication result indicating that the IP packet is not authenticated when it is not stored, and an access server I passed 13
And a third router 15 that receives and transfers the P packet.

The intranet server unit 3 is a HIBB 2
A fourth router 20 that receives and forwards an IP packet transferred by the third router 15 of the above, and an IP destination that receives the IP packet transferred by the fourth router 20
A second firewall 21 for identifying an address and transferring only an IP packet in which this IP address is registered in advance, and satellite information including a satellite position and a GPS-Time transmitted from a GPS satellite every moment. The SA error value 62 is obtained every moment, and the GPS-Time and this GPS
The SA error value 62 corresponding to -Time is stored, and the IP packet transferred by the second firewall 21 is received, and the GPS-Time and the SA error value 62 recorded in the IP header of the IP packet are stored. It is checked whether it is between the stored GPS-Time and the SA error value 62. If it is stored, this IP packet is passed. If it is not stored, this IP packet is passed. It comprises a third GPS-SA authentication server unit 22 for discarding packets, and an intranet server 23 for receiving an IP packet passed by the third GPS-SA authentication server unit 22 and executing a predetermined application.

In the intranet server unit 3,
The intranet server 23 transfers the IP packet with the IP address of the connection base unit 1 when an IP packet to be transferred to the connection base unit 1 occurs, and the third GP
The S-SA authentication server unit 22 is connected to the intranet server 2
3 receives the transferred IP packet, and corresponds to the GPS-Time stored in the third GPS-SA authentication server unit 22 corresponding to the time when the intranet server 23 transfers the IP packet and the GPS-Time. Is recorded in the IP header of the IP packet and transferred, and the fourth router 20 transmits the third GP
The IP packet transferred by the S-SA authentication server unit 22 is received and transferred via the second firewall 21. In HIBB2, the third router 15
Receives and transfers the IP packet transferred by the fourth router 20 of the intranet server unit 3, and
3 receives the IP packet transferred by the third router 15, transfers the received IP packet to authenticate the IP packet, receives the authentication result, and passes the IP packet when the authentication result indicates that the IP packet is authenticated. When the result indicates that the IP packet is not authenticated, the IP packet is discarded, and the second router 12 receives and transfers the IP packet passed by the access server 13. In the connection base unit 1, the first router 7
The first firewall 6 receives the IP packet transferred by the second router 12 of BB2 and transfers it. The first firewall 6 receives the IP packet transferred by the first router 7 and identifies the transfer destination IP address of the IP packet. Only the IP packet whose IP address is registered in advance is transferred, and the first GPS-SA authentication server unit 5 receives the IP packet transferred by the first firewall 6 and receives the IP packet.
GPS-Time recorded in IP header of P packet
And the SA error value 62 are the GPS-Time and the SA error value 62 stored in the first GPS-SA authentication server unit 5.
It is checked whether or not the IP packet is stored. If the packet is stored, the IP packet is passed. If the packet is not stored, the IP packet is discarded.
The computer 4 includes a first GPS-SA authentication server unit 5
Receives and stores the passed IP packet.

The first GPS-SA authentication server unit 5
Positions of satellites and GPS sent from moment to moment from PS satellites
A first SA error value creating unit 9 for obtaining a GPS error Time and an SA error value 62 corresponding to the GPS error Time from the satellite information including the GPS information Time, and a computer 4; Alternatively, when the first firewall 6 receives the transferred IP packet and receives the IP packet from the computer 4, the first SA error value creation unit 9 corresponding to the time when the computer 4 transferred the IP packet is transmitted. GPS-T stored
IP and the SA error value 62 stored in the first SA error value creation unit 9 corresponding to this GPS-Time
When the IP packet is received from the first firewall 6, the IP address is recorded in the IP header of the packet and transferred.
It is determined whether or not the GPS-Time and the SA error value 62 recorded in the IP header of the packet are included in the GPS-Time and the SA error value 62 stored by the first SA error value creation unit 9. The first GPS-SA authentication server 8 is configured to pass the IP packet when it is checked and stored, and to discard the IP packet when it is not stored.

The second GPS-SA authentication server unit 14
Positions and GPs of GPS satellites sent from time to time
A second SA error value creating unit 17 for obtaining an SA error value 62 from time to time from the satellite information including the S-Time and storing the GPS-Time and the SA error value 62 corresponding to the GPS-Time; IP transferred by server 13
The GPS-Time recorded in the IP header of the received IP packet and the SA error value 62 correspond to the second SA
The error value creation unit 17 checks whether or not the GPS-Time and the SA error value 62 are stored. If the stored value is within the stored value, the authentication result indicating that the IP packet is authenticated is determined. A second GPS-SA authentication server 16 that outputs an authentication result indicating that the IP packet is not authenticated when it is not stored and stored.

The third GPS-SA authentication server unit 22 includes:
Positions and GPs of GPS satellites sent from time to time
A third SA error value creation unit 25 that obtains the SA error value 62 from the satellite information including the S-Time every moment and stores the GPS-Time and the SA error value 62 corresponding to the GPS-Time; Receives the IP packet transferred by the second firewall 21 or the intranet server 23, and transfers the IP packet to the second firewall 21.
When received, the GPS-Time recorded in the IP header of the IP packet and the SA error value 62 correspond to the GPS-Time stored in the third SA error value creation unit 25.
e and the SA error value 62 are checked to see if they are stored. If they are stored, the IP packet is passed. If they are not stored, this IP packet is discarded. When the packet is received from the intranet server 23, the intranet server 23
The GPS-Time stored in the third SA error value creation unit 25 corresponding to the time when the packet was transferred and the SA error value 62 corresponding to the GPS-Time are stored in the IP.
Third GPS that records and transfers in the IP header of the packet
And the SA authentication server 24.

The first SA error value creating section 9 performs the first GP
Via the S antenna, the carrier waves of the L1 band carrying the general purpose satellite information and the P code for military purposes and the L2 band carrying only the P code for military purposes are received. A signal coded by the CDMA method for identifying a plurality of pieces of satellite information is taken out, and this signal is extracted from the position of a GPS satellite whose positioning accuracy has been previously degraded by the SA and the GPS.
-Time and the time when the signal including the satellite information is received and the satellite information including the satellite information are received.
The distance between a GPS antenna and a GPS satellite is
The absolute position of the first GPS antenna including an error corresponding to the deterioration of the positioning accuracy is obtained from the plurality of distances and the positions of the plurality of GPS satellites, respectively, based on the obtained plurality of distances and the positions of the plurality of GPS satellites. This is a value calculated based on the satellite information obtained from the carrier wave in the L1 band, and is a value using the information sent from the satellite as it is.)
The carrier phase is obtained from the received carrier (this is a value obtained by expressing the distance between the GPS satellite and the GPS antenna by the wave number of the carrier), and the first GPS is obtained from the carrier phase.
An absolute position that does not include an error of the antenna is obtained as kinematic positioning information 61, and an SA error value 62 indicating an error corresponding to the deterioration of the positioning accuracy is obtained from the single positioning information 60 and the kinematic positioning information 61, and GPS-Time And this G
First GPS receiver 11 that outputs SA error value 62 corresponding to PS-Time, and first GPS data that stores GPS-Time and SA error value 62 output by first GPS receiver 11 And a storage unit 10.

The second SA error value creating section 17 provides a second G
A carrier wave in the L1 band and the L2 band is received via the PS antenna, a signal coded by the CDMA method is taken out from the carrier wave, and this signal is used to determine the position of the GPS satellite whose positioning accuracy has been previously degraded by the SA and the GPS-Time And the second GPS antenna and GP from the time when the signal containing the satellite information is received and the signal containing the satellite information is received.
The distance to the S satellite is determined for each of the plurality of GPS satellites, and the second G including an error corresponding to the deterioration of the positioning accuracy is obtained from the determined distances and the positions of the GPS satellites.
The absolute position of the PS antenna is obtained as independent positioning information 60, the phase of this carrier is obtained from the received carrier, and the absolute position of the second GPS antenna that does not include an error is obtained from the phase of this carrier to obtain kinematic positioning information 61. age,
A second SA error value 62 indicating an error corresponding to the deterioration of the positioning accuracy is obtained from the single positioning information 60 and the kinematic positioning information 61, and a GPS-Time and an SA error value 62 corresponding to the GPS-Time are output. GPS receiver 19
And the GPS-Tim output from the second GPS receiver 19
e and the second GPS data storage unit 18 that stores the SA error value 62.

The third SA error value creating section 25 outputs the third G
A carrier wave in the L1 band and the L2 band is received via the PS antenna, a signal coded by the CDMA method is extracted from the carrier wave, and this signal is used to determine the position of the GPS satellite whose positioning accuracy has been previously degraded by the SA and the GPS-Time And a third GPS antenna and GP from the time when the signal containing the satellite information is received and the signal containing the satellite information is received.
The distance from the S satellite is determined for each of the plurality of GPS satellites, and the third G including an error corresponding to the deterioration of the positioning accuracy is obtained from the determined plurality of distances and the positions of the plurality of GPS satellites.
The absolute position of the PS antenna is obtained as independent positioning information 60, the phase of this carrier is obtained from the received carrier, and the absolute position of the third GPS antenna that does not include an error is obtained from the phase of this carrier to obtain kinematic positioning information 61. age,
An SA error value 62 indicating an error corresponding to the deterioration of the positioning accuracy is obtained from the single positioning information 60 and the kinematic positioning information 61, and the third error is output as GPS-Time and the SA error value 62 corresponding to the GPS-Time. GPS receiver 27
And the GPS-Tim output by the third GPS receiver 27
e and the third GPS data storage unit 26 that stores the SA error value 62.

Next, the operation of the Internet authentication system according to the present embodiment will be described in detail.

In FIG. 1, the first connection base unit 1
The SA error value generator 9 of the first embodiment, the second SA error value generator 17 of the HIBB 2 and the third SA error value generator 25 of the intranet server unit 3 respectively generate the SA error value 62 for each GPS-Time. The obtained SA error value 62 corresponding to the obtained GPS-Time is stored. That is, the first SA error value creating unit 9 extracts a signal coded by the CDMA method from the carrier received via the first GPS antenna by the first GPS receiver 11, and extracts this signal in advance by the SA. GP with degraded positioning accuracy
The distance between the first GPS antenna and the GPS satellite is determined from the time when the signal including the position of the S satellite and the GPS-Time is decoded and the signal including the satellite information is received and the satellite information. The absolute position of the first GPS antenna including an error corresponding to the deterioration of the positioning accuracy is obtained from the plurality of distances and the positions of the plurality of GPS satellites obtained from the obtained distances and the positions of the plurality of GPS satellites to obtain the single positioning information 60, The carrier phase (the value obtained by counting the wave numbers of the L1 and L2 carrier waves transmitted from the GPS satellites by the GPS receiver) from the received carrier wave is obtained, and the first GP is obtained from the carrier phase.
An absolute position that does not include an error of the S antenna is obtained and used as kinematic positioning information 61 (a kinematic positioning method is known as a method of obtaining the kinematic positioning information 61, which is referred to as “guidance and control in aerospace” (author: Toshimitsu Nishimura et al.) Publisher: The Society of Instrument and Control Engineers, Publication year: November 30, 1995, P210-P289, especially P276
To P287). Briefly described, the kinematic positioning method is a method of obtaining a position from a carrier phase and “a value that determines an unknown offset amount”. In order to measure from the carrier phase, the value at the start of measurement is an integer of the wavelength. Twice the unknown offset (integer bias) is included, and if this integer bias is determined, the satellite and GPS
The distance to the receiver is required with high accuracy. A method for solving this integer bias is a feature of kinematic positioning. An integer bias is initially set at the start of reception, and a positioning is obtained after a baseline connecting a plurality of GPS receivers is obtained. In addition, positioning by this method is used for work that places great importance on the accuracy of public surveying, construction surveying, and the like, and position information can be obtained with an accuracy of the order of several cm. ). Then, the independent positioning information 60 and the kinematic positioning information 61
The SA error value 62 is calculated as the SA error value 62, and the SA error value 62 and the GPS-Ti corresponding to the SA error value 62 are calculated.
me and the G output from the first GPS receiver 11.
PS-Time and SA corresponding to this GPS-Time
The error value 62 is stored in the first GPS data storage. Similarly, the second SA error value creation unit 17 obtains the single positioning information 60, the kinematic positioning information 61, and the SA error value 62 by the second GPS receiver 19, and calculates the SA error value 62 GP corresponding to this SA error value 62
S-Time is output, and the GPS-Time output by the second GPS receiver 19 and the SA error value 62 corresponding to the GPS-Time are stored in the second GPS data storage unit. Further, similarly, the third SA error value creation unit 25 uses the third GPS receiver 27 to output the single positioning information 6.
0, the kinematic positioning information 61 and the SA error value 62 are obtained, the SA error value 62 and the GPS-Time corresponding to the SA error value 62 are output, and the GPS-time output from the third GPS receiver 27 is output. Time and this GPS-Tim
The SA error value 62 corresponding to e is stored in the third GPS data storage unit.

Next, in the connection base unit 1, the computer 4
Transfers an IP packet with a predetermined IP address for connecting to the intranet server 23 to connect to the intranet server 23, the first GPS-SA
The authentication server 8 receives the IP packet from the computer 4, obtains the time when the computer 4 transfers the IP packet from the IP header of the IP packet, and obtains the first SA error value creation unit 9 corresponding to this time. GPS-Time and this GPS-Time which are stored every moment in advance
The SA error value 62 corresponding to e is taken out from the first GPS data storage unit, recorded in the IP header of the IP packet, and transferred. The first router 7 receives the IP packet transferred by the first GPS-SA authentication server 8 via the first firewall 6 and transfers it to the HIBB 2.

In the HIBB 2, the second router 12 receives and transfers the IP packet transferred by the first router 7 of the connection base 1, and the access server 13 receives the IP packet and authenticates the IP packet. The second GPS
-Transfer to the SA authentication server 16. Second GPS-SA
The authentication server 16 sends the IP
The GPS-Time recorded in the IP header of this IP packet and the SA error value 62 are
The access server checks whether the GPS-Time stored in the PS storage unit is within the SA error value 62 or not, and if it is stored, the authentication result indicating that the IP packet is to be authenticated is stored in the access server. 13 and outputs an authentication result indicating that the IP packet is not authenticated to the access server 13 when it is not stored. The access server 13 receives the authentication result, passes the IP packet when the authentication result indicates that the IP packet is authenticated, and discards the IP packet when the authentication result indicates that the IP packet is not authenticated. The third router 15 receives the IP packet passed by the access server 13 and transfers it to the intranet server unit 3.

In the intranet server section 3, the fourth router 20 receives and transfers the IP packet transferred by the third router 15 of the HIBB 2, and the second firewall 21 transfers the IP packet. Upon receiving the IP packet, the transfer destination of the IP packet is identified, and only the IP packet in which the IP address is registered in advance is transferred. Third GPS-SA authentication server 24
Receives the IP packet transferred by the second firewall 21 and calculates the GPS-Time and the SA error value 62 recorded in the IP header of the IP packet from the third GPS.
The storage unit checks whether it is between the stored GPS-Time and the SA error value 62, and if it is stored, passes this IP packet. If not, this IP packet is discarded. The intranet server 23 receives the IP packet passed by the third GPS-SA authentication server 24 and executes a predetermined application.

Then, in the intranet server section 3,
When an IP packet to be transferred to the connection base unit 1 is generated, the intranet server 23 transfers the IP packet with the IP address of the connection base unit 1. Third GPS-SA
The authentication server 24 receives the IP packet, obtains the time when the intranet server 23 forwards the IP packet from the IP header of the IP packet, and the third GPS-SA authentication server unit 22 corresponding to this time sometimes preliminarily obtains the time. GPS-Time and this GPS-Ti
The SA error value 62 corresponding to “me” is extracted from the third GPS data storage unit, recorded in the IP header of the IP packet, and transferred. The fourth router 20 is connected to the third GPS-S
The IP packet transferred by the A authentication server 24 is received via the second firewall 21 and transferred to the HIBB 2.

In the HIBB 2, the third router 15 receives and transfers the IP packet transferred by the fourth router 20 of the intranet server unit 3, and the access server 13 receives the IP packet and authenticates the IP packet. Is transferred to the second GPS-SA authentication server 16. Second
The GPS-SA authentication server 16 of the access server 13
Receives the IP packet transferred by
GPS-Time and SA error value 62 recorded in the header
Is the GPS-T stored in the second GPS storage unit.
It is checked whether or not the value is between the “im” and the SA error value 62. If the value is stored, an authentication result indicating that the IP packet is authenticated is output to the access server 13, and the stored value is stored. Otherwise, an authentication result indicating that the IP packet is not authenticated is output to the access server 13. The access server 13 receives the authentication result, and when the authentication result indicates that the IP packet is
Pass the packet, and discard the IP packet when the authentication result indicates that the IP packet is not authenticated. Second
Of the IP address passed by the access server 13
Upon receiving the packet, the packet is transferred to the connection base unit 1.

In the connection base unit 1, the first router 7
The first firewall 6 receives the IP packet transferred by the second router 12 of the IBB 2 and transfers it. The first firewall 6 receives the IP packet transferred by the first router 7 and identifies the transfer destination IP address of the IP packet. Only the IP packet whose IP address is registered in advance is transferred. The first GPS-SA authentication server 8 receives the IP packet transferred by the first firewall 6 and stores the GPS-Time and the SA error value 62 recorded in the IP header of the IP packet in the first GPS storage. G stored by the department
It is checked whether it is between the PS-Time and the SA error value 62, and if it is stored, this IP packet is passed.
Discard the P packet. Computer 4 is the first GP
The IP packet received by the S-SA authentication server 8 is received and stored.

FIG. 2 is a block diagram showing a second embodiment of the Internet authentication system of the present invention.

The present embodiment shown in FIG. 2 is based on satellite information including the position of a satellite whose positioning accuracy has been degraded by the SA transmitted from a GPS satellite every moment and the time within the satellite (GPS-Time). It shows the independent positioning information 60 indicating the own position including an error corresponding to the deterioration of the positioning accuracy, the kinematic positioning information 61 indicating the own position not including the error corresponding to the deterioration of the positioning accuracy, and the error corresponding to the deterioration of the positioning accuracy. SA error value 6
2 is obtained from time to time, and the GPS-Time and the independent positioning information 60, the kinematic positioning information 61, and the SA error value 62 corresponding to the GPS-Time are stored together with the first IP address as the own IP address. The kinematic positioning information 61 obtained every moment is stored in the GPS-Time corresponding to the kinematic positioning information 61 and the first IP.
The IP address of the transfer source, which is transferred from time to time, together with the address, the kinematic positioning information 61 obtained at the transfer source, and the GPS-Time corresponding to the kinematic positioning information 61 are received and stored. When transferring an IP packet with a predetermined transfer destination IP address to connect to the intranet server 53,
GPS-Time stored together with the first IP address corresponding to the time at which this transfer is performed, and this GPS-Ti
and the independent positioning information 60 corresponding to the IP packet I
A connection base unit 31 for recording and transferring in a P header and a GPS
Satellite position and GPS-T sent from satellite every moment
The GPS-Time, the single positioning information 60, the kinematic positioning information 61 corresponding to the GPS-Time, and the single positioning information 60, the kinematic positioning information 61, and the SA error value 62 are obtained from the satellite information including the GPS information. S
The kinematic positioning information 61 transferred from the connection base unit 31 every moment, the GPS-Time corresponding to the kinematic positioning information 61, and the first IP address are received. The kinematic positioning information 61, the GPS-Time, and the first IP address are transferred and stored every moment, and the kinematic positioning information 61 obtained by the transfer source and the IP address of the transfer source transferred every moment. And the GPS-Time corresponding to the kinematic positioning information 61 and the received kinematic positioning information 61 and the GPS-Time
And the IP address of the transfer source are transferred to the connection base unit 31 and stored, and the IP transferred by the connection base unit 31 is stored.
When a packet is received, the IP packet
The IP address of the transfer destination of the P packet, the GPS-Time recorded in the IP header of this IP packet, and the single positioning information 60 are obtained, and the obtained IP address and GP
Corresponds to the IP address of the stored first-time IP address and the transfer source IP address that match the S-Time and the GPS-Time corresponding to this IP address. Kinematic positioning information 61 stored and obtained, and the obtained single positioning information 60
And the SA error value 62 is obtained from
-Tim sent from GPS satellites every moment
e, and checks whether or not the SA error value 62 obtained and stored matches. If the SA error value 62 matches, the IP packet is passed. If the SA error value 62 does not match, the high-speed Internet backbone 32 (hereinafter referred to as HIBB 32) discards the IP packet. The local positioning information 60, the kinematic positioning information 61, and the SA error value 62 are obtained from the satellite information including the position of the satellite transmitted from the GPS satellite from time to time and the GPS-Time. GPS
-Time, independent positioning information 60 corresponding to this GPS-Time, kinematic positioning information 61 and SA error value 6
2 is stored together with the second IP address which is its own IP address, and the kinematic positioning information 61 obtained every moment is stored.
Together with the GPS-Time corresponding to the kinematic positioning information 61 and the second IP address which is the IP address of the transfer source to the HIBB 32 every moment.
The first IP address, GPS-Time, and kinematic positioning information 61 corresponding to the GPS-Time, which are transferred from time to time, are stored from time to time.
When the IBB 32 receives the transferred IP packet, the IP address of the transfer destination of the IP packet is identified. If the IP address is not registered in advance, the IP packet is discarded, and the IP address is registered in advance. At this time, the IP address, the GPS-Time recorded in the IP header of the IP packet and the single positioning information 60 are acquired, and the acquired IP address and the GPS-Time are acquired.
e, and the IP address of the stored first IP address and second IP address and this IP address
The SA error value 62 is obtained from the kinematic positioning information 61 stored corresponding to the GPS-Time corresponding to the address, and the obtained single positioning information 60, and the obtained SA error value 62 and the GPS satellite It is checked whether or not the SA error value 62 obtained and stored corresponding to the GPS-Time transmitted from time to time matches, and if not, the IP packet is discarded.
It comprises an intranet server unit 33 for receiving packets.

Then, the intranet server unit 33
When an IP packet to be transferred to the connection base unit 31 is generated and the IP packet is transferred, the GPS-Time stored in the intranet server unit 33 corresponding to the time of the transfer and transmitted from the GPS satellite every moment. The single positioning information 60 obtained by the intranet server unit 33 corresponding to this GPS-Time is recorded in the IP header of this IP packet and transferred, and the HIBB 32
When receiving the IP packet transferred by the intranet server unit 33, the IP address of the transfer destination of the IP packet and the IP address of the IP packet
GPS-Time and independent positioning information 6 recorded in the header
0 and the acquired IP address and GPS-T
The IP address corresponding to the IP address of the stored first IP address and the IP address of the transfer source that match each other, and the GP corresponding to this IP address
The SA error value 62 is obtained from the kinematic positioning information 61 stored corresponding to S-Time, and the obtained single positioning information 60, and the obtained SA error value 62 and GP
It checks whether or not the SA error value 62 obtained and stored corresponding to the GPS-Time sent from time to time from the S satellite matches, and when the SA error value 62 matches, the IP packet is passed.
If they do not match, discard the IP packet,
When receiving the IP packet transferred by the HIBB 32, the connection base unit 31 identifies the IP address of the transfer destination of the IP packet, and discards the IP packet if this IP address is not registered in advance. Is registered in advance, this IP address and the GPS-Ti recorded in the IP header of this IP packet
me and the independent positioning information 60, and the obtained IP
IP address of the stored first IP address and transfer source IP address whose address and GPS-Time match, and the GPS corresponding to this IP address
-Time, based on the kinematic positioning information 61 stored in correspondence with
A error value 62 is obtained and the obtained SA error value 62 and GPS
It is checked whether or not the SA error value 62 obtained and stored corresponding to the GPS-Time transmitted from the satellite from time to time matches, and if not, this IP packet is discarded. It is stored.

The connection base unit 31 is composed of a computer 34 such as a personal computer for transferring an IP packet at a predetermined transfer destination IP address to connect to the intranet server 53, and an SA transmitted from a GPS satellite every moment. From satellite information including the position of the satellite whose positioning accuracy has deteriorated and the time within the satellite (GPS-Time),
It shows the independent positioning information 60 indicating the own position including an error corresponding to the deterioration of the positioning accuracy, the kinematic positioning information 61 indicating the own position not including the error corresponding to the deterioration of the positioning accuracy, and the error corresponding to the deterioration of the positioning accuracy. The SA error value 62 is obtained every moment, and the GPS-Time, the independent positioning information 60 corresponding to the GPS-Time, the kinematic positioning information 61 and the SA
The error value 62 is stored together with the first IP address as its own IP address, and the kinematic positioning information 61 obtained from time to time is sometimes used together with the GPS-Time and the first IP address corresponding to the kinematic positioning information 61. The IP address of the transfer source, which is transferred every moment, and the kinematic positioning information 61 obtained from the transfer source, and the GPS-T corresponding to the kinematic positioning information 61
is received and stored, and the computer 34 receives the IP packet transferred from the
GPS-Time stored with the first IP address corresponding to the time when the packet was transferred, and this GPS
1st GPS-SA which records and transfers single positioning information 60 corresponding to Time in the IP header of the IP packet
The authentication server unit 35 receives and forwards the IP packet transferred by the first GPS-SA authentication server unit 35 through the first firewall 36, and transfers the IP packet to the first GPS.
-Receiving the kinematic positioning information 61 obtained and transferred by the SA authentication server unit 35 from time to time, the GPS-Time corresponding to the kinematic positioning information 61 and the first IP address, and transferring the information from time to time, and transferring the information from time to time. A first router that receives the IP address of the transfer source, the kinematic positioning information 61 obtained by the transfer source, and the GPS-Time corresponding to the kinematic positioning information 61 and transfers the received data via the first firewall 36. 37.

The HIBB 32 receives and transfers the IP packet transferred by the first router 37 of the connection base 31, and adds the kinematic positioning information 61 transferred from time to time by the first router 37 to the kinematic positioning information 61. The corresponding GPS-Time and the first IP address are received and transferred from time to time, and the IP address of the transfer source transferred from the access server 43 from time to time, the kinematic positioning information 61 obtained by the transfer source, and this kinematic The second router 4 that receives the GPS-Time corresponding to the positioning information 61 and transfers it to the first router 37 of the connection base unit 31
2, the IP packet or the kinematic positioning information 61, the GPS-Time, and the first IP address transferred by the second router 42. When the IP packet is received, the IP packet is transferred for authentication. When the authentication result is received and the authentication result indicates that the IP packet is to be authenticated, the IP packet is passed and the authentication result is
When it indicates that the packet is not authenticated, the IP packet is discarded. When the kinematic positioning information 61, the GPS-Time, and the first IP address are received, these are transferred as they are, and the transfer source that is transferred momentarily is received. The kinematic positioning information 61 obtained from the IP address and the transfer source and the GP corresponding to the kinematic positioning information 61
The access server 43 which transfers the S-Time every moment, and the independent positioning information 60, the kinematic positioning information 61, and the SA based on the satellite information including the satellite position and the GPS-Time transmitted from the GPS satellite every moment. Error value 6
2 is obtained from time to time, and the GPS-Time, the independent positioning information 60, the kinematic positioning information 61, and the SA error value 62 corresponding to the GPS-Time are stored, and the kinematics transferred from the access server 43 from time to time are stored. The tick positioning information 61, the GPS-Time corresponding to the kinematic positioning information 61 and the first IP address are received and stored, and the IP address of the transfer source transferred from the access server 43 from time to time is transferred. The kinematic positioning information 61 originally obtained and the GPS-Time corresponding to the kinematic positioning information 61 are received and stored, and when an IP packet is received from the access server 43, the IP packet is authenticated. This I
From the P packet, the IP address of the transfer destination of this IP packet and the GPS recorded in the IP header of this IP packet
-Time and the independent positioning information 60 are acquired, and the acquired IP address and the GPS-Time coincide with each other. The SA error value 62 is obtained from the kinematic positioning information 61 stored corresponding to the GPS-Time corresponding to the IP address and the obtained single positioning information 60, and the obtained SA error value 62 and the GPS satellites are obtained. GPS-Time sent from time to time
It is checked whether or not the SA error value 62 obtained and stored in correspondence with the above matches. If the SA error value 62 matches, an authentication result indicating that this IP packet is authenticated is output to the access server 43. A second GPS-SA authentication server unit 44 that outputs an authentication result indicating that the authentication is not authenticated to the access server 43, and an IP packet passed by the access server 43 or the access server 43
Kinematic positioning information 61 and GPS-Ti
and the kinematic positioning information 61 obtained at the transfer source, the kinematic positioning information 61 obtained at the transfer source, and the GPS-Time corresponding to the kinematic positioning information 61. And a third router 45 that transfers the data to the access server 43 every moment.

The intranet server unit 33 has a HIBB
The third router 45 receives the IP packet or the kinematic positioning information 61, the GPS-Time, and the first IP address transferred from the third router 45 and transfers the received IP packet. A fourth router 50 that receives the obtained kinematic positioning information 61 and a GPS-Time corresponding to the kinematic positioning information 61 and transfers them to the third router 45 from time to time;
0 receives the transferred IP packet or kinematic positioning information 61, GPS-Time, and the first IP address, and when receiving the IP packet, identifies the IP address of the IP packet and registers the IP address in advance. When the kinematic positioning information 61, the GPS-Time, and the first IP address are received, these are transferred as they are, and the transfer source IP address and the transfer source that are transferred momentarily are transferred. Receiving the kinematic positioning information 61 obtained in the above and the GPS-Time corresponding to the kinematic positioning information 61,
And a kinematic positioning information 61 and SA based on a second firewall 51 that transfers the data from time to time to the router 50, and satellite information including the position of the satellite transmitted from the GPS satellite and the GPS-Time. The error value 62 is obtained from time to time, and GPS-Time and this GPS
-Stores the single positioning information 60, the kinematic positioning information 61, and the SA error value 62 corresponding to the Time together with the second IP address which is the own IP address, and stores the kinematic positioning information 61 obtained every moment from the kinematic positioning information. The GPS-Time corresponding to the positioning information 61 and the second IP address which is the transfer source IP address are transferred from time to time to the second firewall 51, and the IP packet or kinematic positioning transferred by the second firewall 51 is performed. Information 61, GPS-Time and first IP
Address and the first IP address and GPS-Ti
me and the kinematic positioning information 61 are stored when received, and when an IP packet is received, the IP address of the transfer destination of this IP packet from this IP packet and the IP header of this IP packet are recorded. Acquire GPS-Time and single positioning information 60,
The acquired first IP address and second IP address that match the acquired IP address and GPS-Time
IP address of the address, GPS-Time corresponding to this IP address, and the IP address of the obtained transfer destination
The IP address and GPS-Ti that the stored address and GPS-Time coincide with each other are
The SA error value 62 is obtained from the kinematic positioning information 61 stored corresponding to the “me” and the obtained single positioning information 60, and the obtained SA error value 62 and the GPS transmitted from the GPS satellite are transmitted from time to time. -Check whether or not the SA error value 62 obtained and stored corresponding to the Time coincides,
A third GPS-SA authentication server unit 52 that passes the IP packet when they match and discards the IP packet when they do not match, and a third GPS-SA authentication server unit 5
2 includes an intranet server 53 that receives the passed IP packet and executes a predetermined application.

Then, in the intranet server unit 33, the intranet server 53 is connected to the connection base unit 31 when an IP packet to be transferred to the connection base unit 31 is generated.
The third GPS-SA authentication server unit 52 receives the IP packet transferred by the intranet server 53 and corresponds to the time when the intranet server 53 transfers the IP packet. The intranet server unit 33 stores the GPS-Time transmitted from the GPS satellite at every moment and stored, and the single positioning information 60 obtained by the intranet server unit 33 corresponding to the GPS-Time, as the IP packet IP.
The header is transferred to the fourth router 50.
Is the ID transferred by the third GPS-SA authentication server unit 52.
The P packet is received and transferred via the second firewall 51.

In the HIBB 32, the third router 45
Upon receiving and transferring the IP packet transferred by the fourth router 50 of the intranet server unit 33, the access server 43
Receives an IP packet transferred by the third router 45, transfers the received IP packet to authenticate the IP packet, receives an authentication result, and passes the IP packet when the authentication result indicates that the IP packet is authenticated. When the result indicates that the IP packet is not authenticated, the IP packet is discarded. When the second GPS-SA authentication server unit 44 receives the IP packet transferred by the access server 43, the second GPS-SA authentication server unit To authenticate, the IP address of the transfer destination of this IP packet from this IP packet and the G recorded in the IP header of this IP packet
The PS-Time and the single positioning information 60 are acquired, and the acquired IP address matches the GPS-Time.
Kinema stored in correspondence with the stored IP address of the first and second IP addresses transferred from moment to moment and the GPS-Time corresponding to this IP address. Tick positioning information 61,
An SA error value 62 is obtained from the obtained single positioning information 60, and the obtained SA error value 62 matches the SA error value 62 obtained and stored in correspondence with the GPS-Time transmitted from the GPS satellite every moment. It is determined whether or not the authentication result indicates that the IP packet is authenticated is output to the access server 43 when they match, and the authentication result indicating that the IP packet is not authenticated is output to the access server 43 when they do not match. And the second router 42
Is configured to receive and transfer the IP packet passed by the access server 43.

In the connection base unit 31, the first router 37
Receives and forwards the IP packet transferred by the second router 42 of the HIBB 32, and transfers the IP packet to the first firewall 36.
Receives the IP packet transferred by the first router 37, identifies the transfer destination IP address of the IP packet, transfers only the IP packet whose IP address is registered in advance, SA authentication server 3
5 receives the IP packet transferred by the first firewall 36, acquires the transfer destination IP address of the IP packet, the GPS-Time recorded in the IP header of the IP packet, and the single positioning information 60, The IP address of the stored first IP address and the transfer source IP address that matches the acquired IP address and GPS-Time, and the G corresponding to this IP address
The SA error value 62 is obtained from the kinematic positioning information 61 stored corresponding to PS-Time, and the obtained single positioning information 60, and the obtained SA error value 62 and G
It is checked whether or not the SA error value 62 obtained and stored corresponding to the GPS-Time sent from the PS satellite every moment matches, and if it does not match, this IP packet is discarded. , And the computer 34 receives and stores the IP packet passed by the first GPS-SA authentication server unit 35.

The first GPS-SA authentication server unit 35
Positions and GPs of GPS satellites sent from time to time
From the satellite information including S-Time, single positioning information 60, kinematic positioning information 61, and SA error value 62 are obtained from time to time. GPS-Time, single positioning information 60 and kinematic positioning information 61 corresponding to this GPS-Time.
And the SA error value 62 with the first IP
A first SA that stores the IP address of the transfer source, which is transferred from time to time, the kinematic positioning information 61 obtained at the transfer source, and the GPS-Time corresponding to the kinematic positioning information 61. The kinematic positioning information 61 obtained and stored by the error value generating unit 39 and the first SA error value generating unit 39 at every moment is stored together with the GPS-Time and the first IP address corresponding to the kinematic positioning information 61 in the first position. From time to time to the first firewall 36
The first SA error value creation unit 39 receives the IP address of the transfer source transferred from time to time, the kinematic positioning information 61 obtained at the transfer source, and the GPS-Time corresponding to the kinematic positioning information 61. The first SA receives the IP packet transferred by the computer 34 or the first firewall 36, and when the IP packet is received from the computer 34, the first SA corresponding to the time when the computer 34 transfers the IP packet. The error value creation unit 39 records the GPS-Time stored together with the first IP address and the single positioning information 60 corresponding to the GPS-Time in the IP header of the IP packet and transfers the IP packet. When the IP packet is received from the firewall 36, the I
The P-address, the GPS-Time recorded in the IP header of this IP packet, and the single positioning information 60 are acquired, and the acquired IP address matches the GPS-Time, and the stored first IP address. And transfer source IP
The SA error value 62 is obtained from the kinematic positioning information 61 stored corresponding to the IP address of the address and the GPS-Time corresponding to this IP address, and the obtained single positioning information 60. Whether the obtained SA error value 62 matches the SA error value 62 obtained and stored by the first SA error value creating unit 39 corresponding to the GPS-Time sent from the GPS satellite every moment. And if they do not match, discard this IP packet,
When they match, the first GPS-SA authentication server 38 that passes this IP packet is configured.

The second GPS-SA authentication server unit 44
Positions and GPs of GPS satellites sent from time to time
From the satellite information including the S-Time, the single positioning information 60, the kinematic positioning information 61, and the SA error value 62 are obtained every moment, and the GPS-Time, the single positioning information 60 corresponding to the GPS-Time, and the kinematic positioning information are obtained. 6
1 and the SA error value 62 are stored. The kinematic positioning information 61 transferred every moment, the GPS-Time and the first IP address corresponding to the kinematic positioning information 61 are received and stored. The IP address of the transfer source transferred every moment, the kinematic positioning information 61 obtained from the transfer source, and the kinematic positioning information 61
A second SA error value creation unit 47 that receives and stores the GPS-Time corresponding to the kinematic positioning information 61, the kinematic positioning information 61 transferred from the access server 43 from time to time, and the GPS-time corresponding to the kinematic positioning information 61. Tim
e and the first IP address are transferred to the second SA error value creating unit 47, and the IP address of the transfer source transferred from the access server 43 every moment and the kinematic positioning information obtained from the transfer source 61 and the GPS-Time corresponding to the kinematic positioning information 61 are transferred to the second SA error value creating unit 47, and when the IP packet is received from the access server 43, the IP packet is authenticated. The IP address of the transfer destination of this IP packet from this IP packet and the I
The GPS-Time and the single positioning information 60 recorded in the P header are acquired, and the acquired IP address matches the GPS-Time, and the stored first IP address transferred from moment to moment is used. IP address of transfer source IP address and G corresponding to this IP address
The SA error value 62 is obtained from the kinematic positioning information 61 stored corresponding to PS-Time, and the obtained single positioning information 60, and the obtained SA error value 62 and G
The second SA error value creation unit 47 checks whether the SA error value 62 obtained and stored in correspondence with the GPS-Time transmitted from the PS satellite every moment matches or not. A second GPS-SA authentication server 46 outputs an authentication result indicating that this IP packet is authenticated to the access server 43 and outputs an authentication result indicating that this IP packet is not authenticated to the access server 43 when they do not match. It consists of.

The third GPS-SA authentication server unit 52
Positions and GPs of GPS satellites sent from time to time
From the satellite information including S-Time, single positioning information 60, kinematic positioning information 61, and SA error value 62 are obtained from time to time. GPS-Time, single positioning information 60 and kinematic positioning information 61 corresponding to this GPS-Time.
And the SA error value 62 in the second IP address
The first that is stored along with the address and is transferred momentarily
IP address and kinematic positioning information 61 and GPS-Time corresponding to the kinematic positioning information 61
And the kinematic positioning information 61 obtained and stored by the third SA error value generating section 55 every moment is stored in the GPS-data corresponding to the kinematic positioning information 61. The first IP address, the kinematic positioning information 61, and the kinematic positioning information, which are transferred from time to time to the second firewall 51 together with the Time and the second IP address, and are transferred from time to time from the second firewall 51. G corresponding to 61
In response to PS-Time, the third SA error value creation unit 55
And receives the IP packet transferred by the intranet server 53 or the second firewall 51. When the IP packet is received from the intranet server 53, the IP packet corresponds to the time when the intranet server 53 transfers the IP packet. The third SA error value creation unit 55 records the GPS-Time stored together with the second IP address and the single positioning information 60 corresponding to the GPS-Time in the IP header of the IP packet and transfers them. Is received from the second firewall 51, the IP address of the transfer destination of this IP packet and the GPS recorded in the IP header of this IP packet
-Time and the independent positioning information 60 are acquired, and the acquired IP address matches the GPS-Time, and the IP address of the stored first IP address and second IP address and G corresponding to IP address
The SA error value 62 is obtained from the kinematic positioning information 61 stored corresponding to PS-Time, and the obtained single positioning information 60, and the obtained SA error value 62 and G
The third SA error value creation unit 55 checks whether the SA error value 62 obtained and stored in correspondence with the GPS-Time sent from the PS satellite from time to time matches or not. A third GPS-S that discards the IP packet and passes the IP packet when they match.
A authentication server 54.

The first SA error value generator 39 generates the first G
A carrier wave in the L1 band and the L2 band is received via the PS antenna, a signal coded by the CDMA method is extracted from the carrier wave, and this signal is used to determine the position of the GPS satellite whose positioning accuracy has been previously degraded by the SA and the GPS-Time The first GPS antenna and the GP are determined from the time when the signal containing the satellite information is decoded and the signal containing the satellite information is received.
The distance from the S satellite is determined for each of the plurality of GPS satellites, and the first G including an error corresponding to the deterioration of the positioning accuracy is obtained from the determined distances and the positions of the GPS satellites.
The absolute position of the PS antenna is obtained as the single positioning information 60, the carrier wave phase is obtained from the received carrier wave, and the absolute position of the first GPS antenna which does not include the error is obtained from the phase of the carrier wave as the kinematic positioning information 61. From the single positioning information 60 and the kinematic positioning information 61, an SA error value 62 indicating an error corresponding to the deterioration of the positioning accuracy is obtained, and the GPS-Time, the single positioning information 60 corresponding to the GPS-Time and the kinematic positioning information are obtained. 61 and S
A first GPS receiver 41 that outputs an A error value 62 and a first IP address that is its own IP address, and a first GP
GPS-Time output from the S receiver 41, the independent positioning information 60, the kinematic positioning information 61, and the SA error value 62
And the IP address of the transfer source transmitted from time to time, the kinematic positioning information 61 obtained by the transfer source, and the GPS-Time corresponding to the kinematic positioning information 61 are received. The first GPS data storage unit 40 stores the data.

The second SA error value creating section 47 provides a second G
A carrier wave in the L1 band and the L2 band is received via the PS antenna, a signal coded by the CDMA method is taken out from the carrier wave, and this signal is used to determine the position of the GPS satellite whose positioning accuracy has been previously degraded by the SA and the GPS-Time And the second GPS antenna and GP from the time when the signal containing the satellite information is received and the signal containing the satellite information is received.
The distance to the S satellite is determined for each of the plurality of GPS satellites, and the second G including an error corresponding to the deterioration of the positioning accuracy is obtained from the determined distances and the positions of the GPS satellites.
The absolute position of the PS antenna is obtained as independent positioning information 60, the phase of this carrier is obtained from the received carrier, and the absolute position of the second GPS antenna that does not include an error is obtained from the phase of this carrier to obtain kinematic positioning information 61. age,
From the single positioning information 60 and the kinematic positioning information 61, an SA error value 62 indicating an error corresponding to the deterioration of the positioning accuracy is obtained, and the GPS-Time and the single positioning information 60 and the kinematic positioning information 61 corresponding to the GPS-Time are obtained. And S
A second GPS receiver 49 that outputs an A error value 62;
GPS-Time output by the second GPS receiver 49, single positioning information 60, kinematic positioning information 61, and SA
In addition to storing the error value 62, the kinematic positioning information 61 transferred every moment, the GPS-Time corresponding to the kinematic positioning information 61, and the first IP
Receiving and storing the IP address of the transfer source transferred from time to time, the kinematic positioning information 61 obtained at the transfer source, and the GPS-Time corresponding to the kinematic positioning information 61; And two GPS data storage units 48.

The third SA error value creating section 55 outputs the third G
A carrier wave in the L1 band and the L2 band is received via the PS antenna, a signal coded by the CDMA method is extracted from the carrier wave, and this signal is used to determine the position of the GPS satellite whose positioning accuracy has been previously degraded by the SA and the GPS-Time And a third GPS antenna and GP from the time when the signal containing the satellite information is received and the signal containing the satellite information is received.
The distance from the S satellite is determined for each of the plurality of GPS satellites, and the third G including an error corresponding to the deterioration of the positioning accuracy is obtained from the determined plurality of distances and the positions of the plurality of GPS satellites.
The absolute position of the PS antenna is obtained as independent positioning information 60, the phase of this carrier is obtained from the received carrier, and the absolute position of the third GPS antenna that does not include an error is obtained from the phase of this carrier to obtain kinematic positioning information 61. age,
From the single positioning information 60 and the kinematic positioning information 61, an SA error value 62 indicating an error corresponding to the deterioration of the positioning accuracy is obtained, and the GPS-Time and the single positioning information 60 and the kinematic positioning information 61 corresponding to the GPS-Time are obtained. And S
A third GPS receiver 57 that outputs the A error value 62 and a second IP address that is its own IP address, and a third GP
GPS-Time output from the S receiver 57, the independent positioning information 60, the kinematic positioning information 61, and the SA error value 62
And the second IP address, and the first IP address and the kinematic positioning information 61 transmitted from time to time, and G corresponding to the kinematic positioning information 61.
And a third GPS data storage unit 56 that receives and stores the PS-Time.

Next, the operation of the Internet authentication system according to the present embodiment will be described in detail.

In FIG. 2, the first SA error value creation unit 39 of the connection base unit 31 and the second SA error
The third value of the error value creation unit 47 and the intranet server unit 33
And the SA error value creation unit 55 of GPS-Ti
Individual positioning information 60 and kinematic positioning information 6 for each me
1 and the SA error value 62, respectively, and this GPS-Ti
The single positioning information 60, the kinematic positioning information 61, and the SA error value 62 are stored in correspondence with me.
Information and the like transferred from other units are also stored. That is, the first SA error value creating unit 39 extracts a signal coded by the CDMA method from the carrier received via the first GPS antenna by the first GPS receiver 41, and extracts this signal by SA in advance. The first GPS antenna and the GPS satellite are deciphered based on the time when the signal containing the satellite information is decoded by decoding the satellite information including the position of the GPS satellite whose positioning accuracy has deteriorated and the GPS-Time and receiving the signal including the satellite information, and the satellite information. The distances are respectively obtained in correspondence with the plurality of GPS satellites, and the obtained plurality of distances and the plurality of GPS
From the position of the satellite, the absolute position of the first GPS antenna including an error corresponding to the deterioration of the positioning accuracy is obtained, and the single positioning information 6 is obtained.
0, the phase of this carrier is determined from the received carrier,
From the phase of this carrier wave, an absolute position that does not include an error of the first GPS antenna is obtained as kinematic positioning information 61, a difference between the independent positioning information 60 and the kinematic positioning information 61 is obtained, and this is set as an SA error value 62. Single positioning information 60, kinematic positioning information 61 and SA error value 6
2 and the GPS-Time corresponding to the SA error value 62 and the first IP address, and the first GPS data accumulating section 40 outputs the GPS-Time output from the first GPS receiver 41.
The PS-Time, the single positioning information 60, the kinematic positioning information 61, the SA error value 62, and the first IP address are stored, and the transfer is transmitted from the first GPS-SA authentication server 38 every moment. The original IP address, the kinematic positioning information 61 obtained at the transfer source, and the GPS-Time corresponding to the kinematic positioning information 61 are received and stored. Similarly, the second SA error value creation unit 47 obtains the single positioning information 60, the kinematic positioning information 61, and the SA error value 62 by the second GPS receiver 49, and Kinematic positioning information 61, SA error value 62, and this SA error value 62
And outputs a GPS-Time corresponding to the second GPS
The data storage unit 48 stores the GPS-Time, the single positioning information 60, the kinematic positioning information 61, and the SA error value 62 output from the second GPS receiver 49, and performs the second GPS-SA authentication. The kinematic positioning information 61 transferred from the server 46 every moment and the GPS-Tim corresponding to the kinematic positioning information 61
e and the first IP address, receive and store the second GP
The IP address of the transfer source transferred from the S-SA authentication server 46 from time to time, the kinematic positioning information 61 obtained at the transfer source, and the GPS-Time corresponding to the kinematic positioning information 61 are received and stored. . Further, the third SA error value creation unit 55 similarly obtains the single positioning information 60, the kinematic positioning information 61, and the SA error value 62 by the third GPS receiver 57, and Kinematic positioning information 61 and SA error value 62
And the GPS-Time corresponding to the SA error value 62 and the second IP address, and the third GPS data storage unit 56 outputs the GP output from the third GPS receiver 57.
In addition to storing the S-Time, the single positioning information 60, the kinematic positioning information 61, the SA error value 62, and the second IP address, the third GPS-SA authentication server 5
4, the first IP address, the kinematic positioning information 61, and the GPS-Time corresponding to the kinematic positioning information 61, which are transmitted from time to time, are stored.

Next, in the connection base unit 31, the computer 34 connects the intranet server 53 to the predetermined intranet server 53 for connection to the intranet server 53.
When the IP packet is transferred with the P address, the first GPS
The SA authentication server 38 receives the IP packet from the computer 34, obtains the time at which the computer 34 forwarded the IP packet from the IP header of the IP packet, and obtains a first SA error value creation unit corresponding to this time. 39
The GPS-Time obtained and stored every moment and the single positioning information 60 corresponding to this GPS-Time are
It is recorded in the IP header of the P packet and transferred. The first GPS-SA authentication server 38 is connected to the first router 37.
The IP address of the transfer source transmitted from time to time via the first firewall 36, the kinematic positioning information 61 obtained by the transfer source, and the GPS-Time corresponding to the kinematic positioning information 61 are received. First G
The data is transferred for storage in the PS data storage unit 40. Further, the first GPS-SA authentication server 38 stores the first SA
The GPS-Time obtained and output by the first GPS receiver 41 and the kinematic positioning information 61 corresponding to the GPS-Time stored in the error value creation unit 39 and the first
Is transferred to the first router 37 via the first firewall 36 from time to time. The first router 37 receives the IP packet transferred by the first GPS-SA authentication server 38 via the first firewall 36 and transfers the received IP packet to the second router 42, and furthermore, the first GPS-SA The authentication server 38 receives the kinematic positioning information 61 transferred from time to time, the GPS-Time corresponding to the kinematic positioning information 61 and the first IP address via the first firewall 36, and receives the kinematic positioning information 61 from time to time. To the second router 42.
The IP address of the transfer source transferred from time to time, the kinematic positioning information 61 obtained at the transfer source, and the GPS-Time corresponding to the kinematic positioning information 61 are received via the first firewall 36. 1 G
Transfer to the PS-SA authentication server 38.

In the HIBB 32, the second router 42
Upon receiving the IP packet transferred by the first router 37 of the connection base unit 31 and transferring it to the access server 43,
The first router 37 receives the kinematic positioning information 61 transferred from time to time, the GPS-Time corresponding to the kinematic positioning information 61 and the first IP address, and transfers the information to the access server 43 from time to time.
3 receives the IP address of the transfer source transferred from time to time, the kinematic positioning information 61 obtained by the transfer source, and the GPS-Time corresponding to the kinematic positioning information 61, and the first router of the connection base 31. Transfer to 37. The access server 43 compares the IP packet or kinematic positioning information 61 transferred by the second router 42 with the GP
Receiving the S-Time and the first IP address, the kinematic positioning information 61 transferred by the second router 42 and the GP
When the S-Time and the first IP address are received, they are forwarded to the third router 45 and to the second GPS-SA authentication server 46 as they are,
The GPS-SA authentication server 46 transfers this to the second SA error value creating unit 47, and the second GPS data storage unit 48
To be stored. Further, the access server 43 transmits the IP address of the transfer source transferred from the third router 45 from time to time, the kinematic positioning information 61 obtained by the transfer source, and the GPS-Ti corresponding to the kinematic positioning information 61.
is transferred to the second router 42 at every moment, and is transferred to the second GPS-SA authentication server 46 for the second time.
The GPS-SA authentication server 46 transfers this to the second SA error value creating unit 47, and the second GPS data storage unit 48
To be stored. When receiving the IP packet from the second router 42, the access server 43
The P packet is forwarded to the second GPS-SA authentication server 46 for authentication. Second GPS-SA authentication server 4
6 receives the IP packet transferred by the access server 43 and obtains, from the IP packet, the IP address of the transfer destination of the IP packet, the GPS-Time recorded in the IP header of the IP packet, and the single positioning information 60. ,
The IP address in the first IP address stored in the second GPS data storage unit 48 and the IP address of the transfer source, where the obtained IP address matches the GPS-Time, and this IP address Search for the GPS-Time corresponding to the
-Second GPS data storage unit 48 corresponding to -Time
The SA error value 62 is obtained from the kinematic positioning information 61 stored in the GPS and the obtained independent positioning information 60, and the obtained SA error value 62 corresponds to the GPS-Time transmitted from the GPS satellite every moment. It is checked whether the SA error value 62 obtained and stored by the second SA error value creation unit 47 matches, and when the SA error value 62 matches, an authentication result indicating that this IP packet is authenticated is output to the access server 43. If they do not match, an authentication result indicating that this IP packet is not authenticated is output to the access server 43.
The access server 43 receives the authentication result, and when the authentication result indicates that the IP packet is
When the P packet is passed and the authentication result indicates that the IP packet is not authenticated, the IP packet is discarded. The third router 45 receives the IP packet passed by the access server 43 or the kinematic positioning information 61 transferred by the access server 43, the GPS-Time, and the first IP address, and transfers them to the fourth router 50. , The transfer source I that is transferred from the fourth router 50 every moment
Kinematic positioning information obtained from P address and transfer source 6
1 and GPS corresponding to this kinematic positioning information 61
-Time is transferred to the access server 43 every moment.

In the intranet server unit 33, the fourth router 50 communicates the IP packet or kinematic positioning information 61 transferred by the third router 45 of the HIBB 32 with the G
The PS-Time and the first IP address are received and transferred to the second firewall 51, and the transfer source IP address (second IP address) transferred from time to time from the second firewall 51 and transferred. Kinematic positioning information 61 obtained from the original and this kinematic positioning information 6
Receiving the GPS-Time corresponding to No. 1 and transferring it from time to time to the third router 45. Second firewall 5
1 receives the IP packet or the kinematic positioning information 61, the GPS-Time, and the first IP address transferred by the fourth router 50, and when receiving the IP packet, identifies the IP address of the IP packet. This I
Only the IP packet whose P address is registered in advance is transferred, and the kinematic positioning information 61 and the GPS-Time
And the first IP address are transferred to the third GPS-SA authentication server 54 as they are, and the second IP address and the second IP address transferred from the third GPS-SA authentication server 54 every moment are received. Kinematic positioning information 6
1 and GPS corresponding to this kinematic positioning information 61
-Time is transferred to the fourth router 50 every moment. The third GPS-SA authentication server 54 transmits the third S
The kinematic positioning information 61 output by the third receiver stored in the A error value creation unit 55 is stored in the GPS-Time corresponding to the kinematic positioning information 61 and the second IP address of the transfer source IP address. The IP packet or kinematic positioning information 61, the GPS-Time, and the first IP, which are transferred from time to time to the second firewall 51 together with the address, and are transferred by the second firewall 51.
Address and the first IP address and GPS-Ti
When me and the kinematic positioning information 61 are received, they are transferred to the third SA error value creation unit 55 and stored in the third GPS data storage unit 56. When an IP packet is received, the transfer destination IP address of this IP packet and the I
The GPS-Time and the single positioning information 60 recorded in the P header are acquired, and the acquired IP address matches the GPS-Time, and the first IP address stored in the third data storage unit IP address in the IP address and the second IP address and the GP corresponding to this IP address
Search for S-Time, and find the IP address and G
Kinematic positioning information 61 stored in a third GPS data storage unit 56 corresponding to PS-Time,
The SA error value 62 is obtained from the obtained single positioning information 60, and the third SA error value creation unit 55 obtains the SA error value 62 corresponding to the obtained SA error value 62 and the GPS-Time sent from the GPS satellite every moment. It is checked whether or not the stored SA error value 62 matches, and if the SA error value 62 matches, the IP packet is passed. If not, the IP packet is discarded. The intranet server 53 receives the IP packet passed by the third GPS-SA authentication server unit 52 and executes a predetermined application.

Then, in the intranet server unit 33, the intranet server 53 is connected to the connection base unit 31 when an IP packet to be transferred to the connection base unit 31 is generated.
The IP packet is transferred using the IP address. Third GP
The S-SA authentication server 54 receives the IP packet, obtains the time when the intranet server 53 transfers the IP packet from the IP header of the IP packet, and obtains the third SA error value creation unit 55 corresponding to this time. GPS-Time and GPS-Ti which are stored every moment
and the independent positioning information 60 corresponding to the IP packet I
Record in P header and transfer. The fourth router 50 receives and transfers the IP packet transferred by the third GPS-SA authentication server 54 via the second firewall 51.

In the HIBB 32, the third router 45
Upon receiving and transferring the IP packet transferred by the fourth router 50 of the intranet server unit 33, the access server 43
Receives the IP packet transferred by the third router 45 and transfers it to the second GPS-SA authentication server 46 to authenticate the IP packet. The second GPS-SA authentication server 46 receives the IP packet transferred by the access server 43, and receives the IP address of the transfer destination of the IP packet and the GPS-Time recorded in the IP header of the IP packet from the IP packet. The positioning information 60 is obtained, and the first IP address and the second IP address stored in the second GPS data storage unit 48, where the obtained IP address matches the GPS-Time, are obtained. IP address and GPS corresponding to this IP address
-Time and the IP address and GP
Second GPS data storage unit 4 corresponding to S-Time
8, an SA error value 62 is obtained from the obtained kinematic positioning information 61 and the obtained single positioning information 60, and corresponds to the obtained SA error value 62 and the GPS-Time transmitted from the GPS satellite every moment. The second SA error value creation unit 47 checks whether or not the SA error value 62 obtained and stored matches, and outputs an authentication result indicating that the IP packet is authenticated to the access server 43 when the SA error value 62 matches. If they do not match, an authentication result indicating that this IP packet is not authenticated is output to the access server 43. The access server 43 receives the authentication result from the second GPS-SA authentication server 46, passes the IP packet when the authentication result indicates that the IP packet is authenticated, and indicates that the authentication result does not authenticate the IP packet. Sometimes this IP packet is discarded. The second router 42 receives the IP packet passed by the access server 43 and transfers it to the connection base unit 31.

In the connection base unit 31, the first router 37
Receives and forwards the IP packet transferred by the second router 42 of the HIBB 32, and transfers the IP packet to the first firewall 36.
Receives the IP packet transferred by the first router 37, identifies the transfer destination IP address of the IP packet, and transfers only the IP packet whose IP address is registered in advance. The first GPS-SA authentication server 38
Receives the IP packet transferred by the firewall 36, and the IP address of the transfer destination of the IP packet and this IP packet.
The GPS-Time and the single positioning information 60 recorded in the IP header of the packet are acquired, and the acquired IP address and the GPS-Time match, and the first data stored in the first data storage unit. An IP address in the IP address and the second IP address and a GPS-Time corresponding to this IP address are searched for, and the
The SA error value 62 is obtained from the kinematic positioning information 61 stored corresponding to the address and the GPS-Time and the obtained single positioning information 60, and the obtained SA error value 62 and the instantaneous transmission from the GPS satellite are performed. It is checked whether the SA error value 62 obtained and stored by the first SA error value creation unit 39 corresponds to the received GPS-Time, and
If they do not match, this IP packet is discarded, and if they match, this IP packet is passed. The computer 34 receives and stores the IP packet passed by the first GPS-SA authentication server 38.

[0057]

As described above, according to the Internet authentication system of the present invention, the connection base unit makes the GP
The position of the satellite whose positioning accuracy has been degraded by Selective Availability (SA), which is a function that intentionally degrades the positioning accuracy of the satellite navigation system, and the time in the satellite (GPS-Time) sent from time to time from the S satellite GPS-Time and the GPS-T are obtained from the satellite information including the GPS-Time and the GPS-T
and the SA error value corresponding to the “im” is stored every moment in advance, and when an IP packet is transferred at a predetermined IP address for connection to an intranet server, the IP packet is stored in advance corresponding to the time at which this transfer is performed. GP
The S-Time and the SA error value corresponding to the GPS-Time are recorded in the IP header of the IP packet and transferred,
GPS via highway internet backbone
Satellite position and GPS-T sent from satellite every moment
The SA error value is determined from time to time from the satellite information including the GPS-time and the GPS-Time corresponding to the GPS-Time.
A error value is stored in advance every moment, and when an IP packet transferred from the connection base unit is received, the GPS-Time and the SA error value recorded in the IP header of the IP packet are stored in advance. A check is performed to determine whether the value is within the stored GPS-Time and the SA error value. If the value is stored, the IP packet is passed. If the value is not stored, the IP packet is discarded. Then, the intranet server unit obtains an SA error value from time to time from the satellite information including the position of the satellite transmitted from the GPS satellite and the GPS-Time, and the GPS-Time and the SA error value corresponding to the GPS-Time. Is stored every moment in advance, and when an IP packet transferred by the highway Internet backbone is received, this I
The IP address of the transfer destination of the P packet is identified.
If the address is not registered in advance, the IP packet is discarded. If the IP address is registered in advance, the GPS-T recorded in the IP header of the IP packet is discarded.
GPS-T in which image and SA error value are stored in advance
It is checked whether or not it is within the im and the SA error value. If it is not stored, the IP packet is discarded, and if it is stored, the IP packet is received. Is a confirmation of the GPS-Time and the SA error value corresponding to the GPS-Time other than the confirmation of the IP address. Since no one who knows the IP address can access the intranet server, Unauthorized intrusion by a third party is unlikely to occur. Also, besides the IP address, GPS-Time
And the SA error value corresponding to the GPS-Time, the external network connection device such as a router is eavesdropped, and the IP address of an IP packet passing through the router is stolen. Even if the address is used, there is no risk of eavesdropping on the entire network.

Further, the connection base unit obtains the positioning accuracy from the satellite information including the position of the satellite whose positioning accuracy has been degraded by the SA transmitted from the GPS satellite every moment and the time in the satellite (GPS-Time). Single positioning information 60 indicating the self-position including an error corresponding to the deterioration and kinematic positioning information 6 indicating the self-position including no error according to the deterioration of the positioning accuracy 6
1 and an SA error value indicating an error corresponding to the deterioration of the positioning accuracy are obtained from time to time to obtain GPS-Time and GPS-Time
e, the independent positioning information, the kinematic positioning information, and the SA error value corresponding to the e are stored in advance together with the first IP address, which is the own IP address, and the kinematic positioning information obtained from time to time is stored in the kinematic positioning information. The corresponding GPS-Time and the first IP address are transferred to the highway Internet backbone from time to time, and the second IP address and the kinematic positioning information transferred from the highway Internet backbone from time to time correspond to the kinematic positioning information. GP
S-Time is received and stored, and when an IP packet is transferred at a predetermined transfer destination IP address for connection to an intranet server, a first IP address corresponding to the time at which the transfer is performed The GPS-Time stored together with the GPS-Time and the independent positioning information corresponding to the GPS-Time are recorded in the IP header of the IP packet and transferred, and are transmitted by the highway Internet backbone.
Positions and GPs of GPS satellites sent from time to time
The independent positioning information, the kinematic positioning information, and the SA error value are obtained from the satellite information including S-Time every moment, and G
Stores PS-Time, independent positioning information, kinematic positioning information, and SA error value corresponding to this GPS-Time, and corresponds to kinematic positioning information and kinematic positioning information transferred from the connection base every moment. Receiving the GPS-Time and the first IP address, and transferring it from time to time to the intranet server unit and storing it. The second IP address, kinematic positioning information, and the like transferred from the intranet server unit every moment are received. GPS-Ti corresponding to kinematic positioning information
is transferred to and stored in the connection base unit, and when the connection base unit receives the transferred IP packet, the IP address of the transfer destination of this IP packet and the IP address of this IP packet are obtained from this IP packet. The GPS-Time and the independent positioning information recorded in the header are acquired, and the acquired IP address matches the GPS-Time, and the first IP stored and transmitted momentarily.
Kinematic positioning information stored corresponding to the IP address of the address and the transfer source IP address and the GPS-Time corresponding to the IP address;
An SA error value is obtained from the acquired single positioning information, and the obtained SA error value and G transmitted from the GPS satellite every moment.
It is checked whether or not the SA error value obtained and stored in correspondence with PS-Time matches, and if the SA error value matches, the IP packet is passed. If the SA error value does not match, the IP packet is discarded.
Satellite position and GPS-T sent from satellite every moment
The GPS-Time and the single positioning information, the kinematic positioning information and the SA error value corresponding to the GPS-Time are obtained from the satellite information including the satellite information including the GPS-Time. The kinematic positioning information, which is stored together with the second IP address which is the own IP address, is obtained every moment, and the GPS-Time corresponding to this kinematic positioning information and the IP address of the transfer source are stored.
The first IP address, the GPS-Time, and the G-Time, which are transferred from time to time to the highway Internet backbone along with the second IP address, which is an address, are transferred from the highway Internet backbone from time to time.
The kinematic positioning information corresponding to the PS-Time is received and stored, and when an IP packet transferred by the highway internet backbone is received, this IP packet is received.
The IP address of the transfer destination of the P packet is identified.
When the address is not registered in advance, the IP packet is discarded. When the IP address is registered in advance, the IP address, the GPS-Time recorded in the IP header of the IP packet, and the single positioning information are obtained. The acquired IP address matches the GPS-Time, which corresponds to the stored IP address of the first IP address and the second IP address and the GPS-Time corresponding to the IP address. An SA error value is obtained from the stored kinematic positioning information and the obtained independent positioning information, and is obtained and stored in correspondence with the obtained SA error value and the GPS-Time sent from the GPS satellite every moment. Check whether the obtained SA error value matches,
When the packet does not match, the IP packet is discarded, and when the packet matches, the IP packet is received.
e and the SA error value corresponding to this GPS-Time, and it is unlikely that anyone who knows the IP address can access the intranet server. . Also, IP
In addition to the address, GPS-Time and this GPS-Tim
e, the external network connection device such as a router is eavesdropped, the IP address of an IP packet passing through the router is stolen, and the stolen IP address is used. However, there is no risk of eavesdropping on the entire network.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a first embodiment of the Internet authentication system of the present invention.

FIG. 2 is a block diagram showing a second embodiment of the Internet authentication system of the present invention.

FIG. 3 is a block diagram of a conventional Internet authentication system.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Connection base part 2 Highway Internet backbone 3 Intranet server part 4 Computer 5 First GPS-SA authentication server part 6 First firewall 7 First router 8 First GPS-SA authentication server 9 First SA error Value creation unit 10 First GPS data storage unit 11 First GPS receiver 12 Second router 13 Access server 14 Second GPS-SA authentication server unit 15 Third router 16 Second GPS-SA authentication server 17 second SA error value creation unit 18 second GPS data storage unit 19 second GPS receiver 20 fourth router 21 second firewall 22 third GPS-SA authentication server unit 23 intranet server 24 No. 3 GPS-SA authentication server 25 Third SA error value creation unit 26 Third GPS Data storage unit 27 third GPS receiver 31 connection base unit 32 highway internet backbone 33 intranet server unit 34 computer 35 first GPS-SA authentication server unit 36 first firewall 37 first router 38 first GPS-SA authentication server 39 First SA error value creation unit 40 First GPS data storage unit 41 First GPS receiver 42 Second router 43 Access server 44 Second GPS-SA authentication server unit 45 Third Router 46 second GPS-SA authentication server 47 second SA error value creating unit 48 second GPS data storage unit 49 second GPS receiver 50 fourth router 51 second firewall 52 third GPS-SA authentication server unit 53 Intranet server 54 Third GPS-SA authentication Certificate server 55 Third SA error value creation unit 56 Third GPS data storage unit 57 Third GPS receiver 60 Single positioning information 61 Kinematic positioning information 62 SA error value 97 Personal computer 98 First firewall 99 1st router 100 2nd router 101 3rd router 102 2nd firewall 103 Intranet server

 ──────────────────────────────────────────────────続 き Continued on front page F term (reference) 5J062 AA08 AA13 CC07 EE04 5J104 AA04 AA07 EA16 GA03 KA02 MA01 PA07 5K030 GA15 HB15 HD03 KA05 LA18 LC15 LD18 LD20 9A001 BB03 CC07 DD10 GG01 JJ18 JJ25 JJ27 JJ78 LL

Claims (24)

[Claims] 1. A selective availability (hereinafter, referred to as S) function that deliberately degrades the positioning accuracy of a satellite navigation system, which is sent from a global positioning system (hereinafter, referred to as a GPS) satellite from time to time.
Described as A. )), An SA error value indicating an error corresponding to the deterioration of the positioning accuracy is sometimes obtained from satellite information including the position of the satellite whose positioning accuracy has deteriorated and the time in the satellite (hereinafter, referred to as GPS-Time). GPS-T
i and the SA error value corresponding to the GPS-Time are stored, and when an IP packet is transferred with a predetermined IP address to connect to an intranet server, the time corresponding to the transfer time is transferred. The stored GPS-Time and the GPS-Time
e, a connection point for recording and storing the stored SA error value in the IP header of the IP packet, the position of the satellite transmitted from the GPS satellite every moment, The SA error value is momentarily obtained from the satellite information including the GPS-Time, and the GPS-Time and the SA error value corresponding to the GPS-Time are stored, and the IP transmitted by the connection base unit is stored. When a packet is received, the GPS-Time and the SA error value recorded in the IP header of the IP packet are within the stored GPS-Time and the SA error value. A highway for checking whether or not the IP packet is passed when the packet is stored, and discarding the IP packet when the packet is not stored. The SA error value is obtained from the satellite information including the Internet backbone, the position of the satellite transmitted from the GPS satellite from time to time, and the GPS-Time, and the GPS-Time and the GPS-Time correspond to each other. When the IP packet transmitted by the highway internet backbone is received, the IP
Identifying the IP address to which the packet is to be forwarded,
When the P address is not registered in advance, the IP packet is discarded. When the IP address is registered in advance, the GPS-Time and the SA error value recorded in the IP header of the IP packet are stored. It checks whether it is between the stored GPS-Time and the SA error value, discards the IP packet if it is not stored, and discards the IP packet if it is stored. An Internet authentication system, comprising: an intranet server unit that receives an IP packet. 2. When an IP packet to be transferred is generated at the connection base unit and the IP packet is transferred, the GPS-Time stored in the intranet server unit corresponding to the time at which the transfer is performed. And this GPS
The intranet server unit that records and transfers the SA error value corresponding to the Time in the IP header of the IP packet, and, when the intranet server unit receives the transferred IP packet, It checks whether the GPS-Time and the SA error value recorded in the IP header are in the GPS-Time and the SA error value stored in the highway internet backbone, and stores the result. The highway internet backbone, which passes the IP packet when it is in the storage, and discards the IP packet when it is not stored, when it receives the IP packet transferred by the highway internet backbone. The IP address to which this IP packet is forwarded. Identifies less, this when the IP address is not registered in advance discards the IP packet, the G recorded in the IP header of the IP packet when the IP address is registered in advance
It is checked whether the PS-Time and the SA error value are between the GPS-Time and the SA error value stored in the connection base unit. The Internet authentication system according to claim 1, further comprising: the connection base unit for discarding an IP packet and storing the IP packet when the IP packet is stored. 3. A computer for transferring an IP packet with a predetermined IP address to connect to an intranet server, and a global positioning system (hereinafter referred to as GPS).
It is described. ) The position of the satellite whose positioning accuracy has been degraded due to "Selective Availability (hereinafter, referred to as SA), which is a function that intentionally degrades the positioning accuracy of the satellite navigation system" sent from time to time, and the satellite's position (Hereinafter referred to as GPS-Time), an SA error value indicating an error corresponding to the deterioration of the positioning accuracy is obtained every moment from the satellite information including the GPS-Time and the GPS-Time corresponding to the GPS-Time. And the stored GPS corresponding to the time when the computer transferred the IP packet after receiving the IP packet transferred by the computer.
A first GPS-SA authentication server unit for recording and transferring the stored SA error value corresponding to the GPS-Time in the IP header of the IP packet; The above I transferred by the GPS-SA authentication server unit
A first router that receives and forwards the P packet via the first firewall; and a connection base unit having: a first router that receives and transfers the IP packet transferred by the first router of the connection base unit Second
The second router receives the IP packet transferred by the second router, transfers the received IP packet to authenticate the IP packet, receives an authentication result, and when the authentication result indicates that the IP packet is authenticated, the IP packet is Pass, the access server discarding the IP packet when the authentication result indicates that the IP packet is not authenticated, and the position of the satellite transmitted from the GPS satellite every moment and the GPS-Time, The SA error value is obtained from satellite information from time to time, the GPS-Time and the SA error value corresponding to the GPS-Time are stored, and the IP packet transferred by the access server is received. The GPS-Time and the SA error value recorded in the IP header are stored. It checks whether it is between the GPS-Time and the SA error value, and if it is stored, outputs an authentication result indicating that the IP packet is authenticated. A second GPS-SA authentication server unit that outputs an authentication result indicating that the IP packet is not authenticated when the IP packet is not authenticated, and a third router that receives and transfers the IP packet passed by the access server. A highway internet backbone having; a fourth router receiving and transferring the IP packet transferred by the third router of the highway internet backbone; and receiving the IP packet transferred by the fourth router. Identifying the IP address of the transfer destination,
A second firewall for transferring only the IP packet in which the IP address is registered in advance, and the satellite information including the position of the satellite and the GPS-Time transmitted from time to time from the GPS satellite. The SA error value is obtained from time to time, the GPS-Time and the SA error value corresponding to the GPS-Time are stored, and the IP packet transferred by the second firewall is received. The GPS-Time and the SA error value recorded in the header correspond to the stored GPS-Time and S
A third GPS unit which checks whether or not it is within the A error value, passes the IP packet when it is stored, and discards the IP packet when it is not stored. An SA authentication server unit; and the I through which the third GPS-SA authentication server unit has passed.
An Internet authentication system, comprising: an intranet server that receives a P packet and executes a predetermined application; and an intranet server unit having: 4. An intranet server that forwards the IP packet with an IP address of the connection base unit when an IP packet to be transferred to the connection base unit occurs, and receives the IP packet transferred by the intranet server. The third GPS-SA corresponding to the time when the intranet server forwards the IP packet
The third GPS-SA authentication server unit that records the GPS-Time stored in the authentication server unit and the SA error value corresponding to the GPS-Time in the IP header of the IP packet and transfers the same. And the I transferred by the third GPS-SA authentication server unit.
The fourth router for receiving and transferring the P packet via the second firewall; and the intranet server unit having the following: the IP transferred by the fourth router of the intranet server unit
The third router for receiving and transferring the packet; receiving the IP packet transferred by the third router, transferring the IP packet for authentication, receiving the authentication result, and authenticating the IP packet based on the authentication result. The access server that passes the IP packet when indicating that the IP packet is to be transmitted, and discards the IP packet when the authentication result indicates that the IP packet is not authenticated; the second GPS-SA authentication server unit; The second router for receiving and transferring the IP packet passed by the access server; and the highway internet backbone having; and receiving and transferring the IP packet transferred by the second router of the highway internet backbone. The first router, and the first router forwards the Receiving a P packet identifies the IP address of the transfer destination of the IP packet,
The first firewall that transfers only the IP packet in which the IP address is registered in advance; and the IP packet that is transferred by the first firewall and that is recorded in the IP header of the IP packet. The GPS-Time and the SA error value correspond to the G stored in the first GPS-SA authentication server unit.
It is checked whether it is between PS-Time and the SA error value, and if it is stored, the IP packet is passed. If it is not stored, the IP packet is sent.
The first GPS-SA authentication server unit for discarding the P packet;
The Internet authentication system according to claim 3, further comprising: the computer that receives and stores a P packet; and the connection base unit having: 5. The first GPS-SA authentication server unit is configured to determine the SA error value from time to time from the satellite information including the position of the satellite and the GPS-Time sent from the GPS satellite from time to time. A first SA error value creation unit for storing the obtained GPS-Time and the SA error value corresponding to the GPS-Time, and receiving the IP packet transferred by the computer or the first firewall; When the IP packet is received from the computer, the GPS stored in the first SA error value creating unit corresponding to the time when the computer forwards the IP packet.
-Time and the first corresponding to this GPS-Time
The SA error value stored by the SA error value creation unit is recorded in the IP header of the IP packet and transferred, and when the IP packet is received from the first firewall, the The GPS-Time recorded in the IP header and the SA error value correspond to the G value stored in the first SA error value creation unit.
It is checked whether it is between PS-Time and the SA error value, and if it is stored, the IP packet is passed. If it is not stored, the IP packet is sent.
The Internet authentication system according to claim 3, further comprising: a first GPS-SA authentication server that discards the P packet. 6. The second GPS-SA authentication server unit is configured to calculate the SA error value from time to time from the satellite information including the position of the satellite transmitted from the GPS satellite and the GPS-Time. A second SA error value creation unit for storing the obtained GPS-Time and the SA error value corresponding to the GPS-Time; and receiving the transmitted IP packet and adding the same to the IP header of the IP packet. It is checked whether or not the recorded GPS-Time and the SA error value are included in the GPS-Time and the SA error value stored in the second SA error value creation unit, and stored. An authentication result indicating that the IP packet is authenticated is output when the packet is stored, and an authentication result indicating that the IP packet is not authenticated when the IP packet is not stored is stored. Second G for outputting
The Internet authentication system according to claim 3, further comprising: a PS-SA authentication server. 7. The third GPS-SA authentication server unit, from time to time, calculates the SA error value from the satellite information including the position of the satellite transmitted from the GPS satellite and the GPS-Time. A third SA error value creation unit for storing the obtained GPS-Time and the SA error value corresponding to the GPS-Time, and the IP packet transferred by the second firewall or the intranet server. When the IP packet is received from the second firewall, the GPS-Time and the SA error value recorded in the IP header of the IP packet are equal to the third S value.
The GPS-Time stored by the A error value creation unit
And the SA error value is checked to see if they are in the storage, and if they are stored, the IP packet is passed through,
When the IP packet is not stored, the IP packet is discarded, and when the IP packet is received from the intranet server, the intranet server
The third S corresponding to the time when the packet was transferred
The GPS-Time stored by the A error value creation unit
And a third GPS-SA authentication server which records the SA error value corresponding to the GPS-Time in the IP header of the IP packet and transfers the same. 7. The Internet authentication system according to 5 or 6. 8. The first GPS-SA authentication server unit is configured to calculate the SA error value from time to time from the satellite information including the position of the satellite transmitted from the GPS satellite and the GPS-Time. A first SA error value creation unit for storing the obtained GPS-Time and the SA error value corresponding to the GPS-Time, and receiving the IP packet transferred by the computer or the first firewall; When the IP packet is received from the computer, the GPS stored in the first SA error value creation unit corresponding to the time when the computer forwards the IP packet.
-Time and the first corresponding to this GPS-Time
The SA error value stored by the SA error value creation unit is recorded in the IP header of the IP packet and transferred, and when the IP packet is received from the first firewall, the The GPS-Time recorded in the IP header and the SA error value correspond to the G value stored in the first SA error value creation unit.
It is checked whether it is between PS-Time and the SA error value, and if it is stored, the IP packet is passed. If it is not stored, the IP packet is sent.
A first GPS-SA authentication server for discarding the P packet; and a second GPS-SA authentication server unit, the second GPS-SA authentication server unit includes a position of the satellite transmitted from the GPS satellite every moment, the GPS-Time, and A second SA error value generating unit for obtaining the SA error value from time to time from the satellite information including the GPS-Time and storing the SA error value corresponding to the GPS-Time. Upon receiving the IP packet, the GPS-Time and the SA error value recorded in the IP header of the IP packet are the GPS-Time and the SA error stored in the second SA error value creation unit. Check whether the value is within the stored value. If the stored value is stored, an authentication result indicating that the IP packet is authenticated is output. Second G for outputting an authentication result indicating that no authenticating the IP packet
A third PS-SA authentication server, wherein the third GPS-SA authentication server unit obtains the SA based on the satellite information including the position of the satellite and the GPS-Time transmitted from the GPS satellite every moment. A third SA error value creation unit that obtains an error value momentarily and stores the GPS-Time and the SA error value corresponding to the GPS-Time, and transfers the second firewall or the intranet server. When the IP packet is received from the second firewall, the GPS-Time and the SA error value recorded in the IP header of the IP packet are equal to the third S value.
The GPS-Time stored by the A error value creation unit
And the SA error value is checked to see if they are in the storage, and if they are stored, the IP packet is passed through,
When the IP packet is not stored, the IP packet is discarded, and when the IP packet is received from the intranet server, the intranet server
The third S corresponding to the time when the packet was transferred
The GPS-Time stored by the A error value creation unit
And a third GPS-SA authentication server that records the SA error value corresponding to the GPS-Time in the IP header of the IP packet and transfers the same. Internet authentication system as described. 9. The first SA error value creating section receives a carrier via a first GPS antenna, extracts a coded signal from the carrier, and divides the signal by SA to determine the positioning accuracy in advance. The G is degraded
The distance between the first GPS antenna and the GPS satellite is determined from the satellite information and the time when the satellite information including the position of the PS satellite and the GPS-Time is decoded and a signal including the satellite information is received. , Respectively, corresponding to the plurality of GPS satellites, and from the obtained plurality of distances and the positions of the plurality of GPS satellites, the absolute position of the first GPS antenna including an error corresponding to the deterioration of the positioning accuracy is obtained. Determined as independent positioning information, determine the phase of the carrier from the received carrier, determine the absolute position of the first GPS antenna without error from the phase of the carrier, determine the kinematic positioning information as kinematic positioning information, The SA-error value indicating an error corresponding to the deterioration of the positioning accuracy is obtained from the GPS information and the kinematic positioning information.
and a first GPS receiver for outputting the SA error value corresponding to the GPS-Time, and a GPS-Time output by the first GPS receiver.
The Internet authentication system according to claim 5, further comprising: a first GPS data storage unit that stores e and the SA error value. 10. The second SA error value generator receives a carrier via a second GPS antenna, extracts a CDMA-coded signal from the carrier, and uses the SA to determine the positioning accuracy in advance by SA. G that has deteriorated
The distance between the second GPS antenna and the GPS satellite is determined from the satellite information and the time when the satellite information including the position of the PS satellite and the GPS-Time is decoded and a signal including the satellite information is received. , Respectively, corresponding to the plurality of GPS satellites, and from the obtained plurality of distances and the positions of the plurality of GPS satellites, the absolute position of the second GPS antenna including an error corresponding to the deterioration of the positioning accuracy is obtained. Determined as independent positioning information, determine the phase of the carrier from the received carrier, determine the absolute position of the second GPS antenna without error from the phase of the carrier, determine the kinematic positioning information as kinematic positioning information, The SA-error value indicating an error corresponding to the deterioration of the positioning accuracy is obtained from the GPS information and the kinematic positioning information.
and a second GPS receiver that outputs the SA error value corresponding to the GPS-Time, and the GPS-Time that is output by the second GPS receiver.
The Internet authentication system according to claim 6, further comprising: a second GPS data storage unit that stores e and the SA error value. 11. The third SA error value generator receives a carrier via a third GPS antenna, extracts a CDMA-coded signal from the carrier, and uses the signal to determine the positioning accuracy in advance by SA. The G is degraded
The distance between the third GPS antenna and the GPS satellite is determined from the satellite information and the time when the satellite information including the position of the PS satellite and the GPS-Time is decoded and a signal including the satellite information is received. , Respectively, corresponding to the plurality of GPS satellites, and from the obtained plurality of distances and the positions of the plurality of GPS satellites, the absolute position of the third GPS antenna including an error corresponding to the deterioration of the positioning accuracy is obtained. Determined as independent positioning information, determine the phase of the carrier from the received carrier, determine the absolute position of the third GPS antenna that does not include an error from the phase of the carrier, determine the kinematic positioning information as kinematic positioning information, The SA-error value indicating an error corresponding to the deterioration of the positioning accuracy is obtained from the GPS information and the kinematic positioning information.
and a third GPS receiver that outputs the SA error value corresponding to the GPS-Time and the GPS-Time output by the third GPS receiver.
The Internet authentication system according to claim 7, further comprising: a third GPS data storage unit that stores e and the SA error value. 12. The first SA error value generating section receives a carrier through a first GPS antenna, extracts a coded signal from the carrier, and divides the signal into a signal having a positioning accuracy based on SA. G that has deteriorated
The distance between the first GPS antenna and the GPS satellite is determined from the satellite information and the time when the satellite information including the position of the PS satellite and the GPS-Time is decoded and a signal including the satellite information is received. , Respectively, corresponding to the plurality of GPS satellites, and from the obtained plurality of distances and the positions of the plurality of GPS satellites, the absolute position of the first GPS antenna including an error corresponding to the deterioration of the positioning accuracy is obtained. Determined as independent positioning information, determine the phase of the carrier from the received carrier, determine the absolute position of the first GPS antenna without error from the phase of the carrier, determine the kinematic positioning information as kinematic positioning information, The SA-error value indicating an error corresponding to the deterioration of the positioning accuracy is obtained from the GPS information and the kinematic positioning information.
and a first GPS receiver for outputting the SA error value corresponding to the GPS-Time, and a GPS-Time output by the first GPS receiver.
e and a first GPS data storage unit for storing the SA error value. The second SA error value generation unit receives a carrier via a second GPS antenna, and uses this carrier for CDMA. The signal coded by the system is taken out, and this signal is referred to as the G signal whose positioning accuracy has been previously degraded by SA.
The distance between the second GPS antenna and the GPS satellite is determined from the satellite information and the time when the satellite information including the position of the PS satellite and the GPS-Time is decoded and a signal including the satellite information is received. , Respectively, corresponding to the plurality of GPS satellites, and from the obtained plurality of distances and the positions of the plurality of GPS satellites, the absolute position of the second GPS antenna including an error corresponding to the deterioration of the positioning accuracy is obtained. Determined as independent positioning information, determine the phase of the carrier from the received carrier, determine the absolute position of the second GPS antenna without error from the phase of the carrier, determine the kinematic positioning information as kinematic positioning information, The SA-error value indicating an error corresponding to the deterioration of the positioning accuracy is obtained from the GPS information and the kinematic positioning information.
and a second GPS receiver that outputs the SA error value corresponding to the GPS-Time, and the GPS-Time that is output by the second GPS receiver.
e and a second GPS data storage unit for storing the SA error value; the third SA error value generating unit receives a carrier via a third GPS antenna, and performs CDMA from the carrier. The signal coded by the system is taken out, and this signal is referred to as the G signal whose positioning accuracy has been previously degraded by SA.
The distance between the third GPS antenna and the GPS satellite is determined from the satellite information and the time when the satellite information including the position of the PS satellite and the GPS-Time is decoded and a signal including the satellite information is received. , Respectively, corresponding to the plurality of GPS satellites, and from the obtained plurality of distances and the positions of the plurality of GPS satellites, the absolute position of the third GPS antenna including an error corresponding to the deterioration of the positioning accuracy is obtained. Determined as independent positioning information, determine the phase of the carrier from the received carrier, determine the absolute position of the third GPS antenna that does not include an error from the phase of the carrier, determine the kinematic positioning information as kinematic positioning information, The SA-error value indicating an error corresponding to the deterioration of the positioning accuracy is obtained from the GPS information and the kinematic positioning information.
and a third GPS receiver that outputs the SA error value corresponding to the GPS-Time and the GPS-Time output by the third GPS receiver.
The Internet authentication system according to claim 8, further comprising: a third GPS data storage unit that stores e and the SA error value. 13. A selective availability (hereinafter, referred to as “GPS”) function transmitted from a global positioning system (hereinafter referred to as GPS) satellite from time to time to deliberately degrade the positioning accuracy of a satellite navigation system.
Described as SA. )) Indicates its own position including an error corresponding to the deterioration of the positioning accuracy from the satellite information including the position of the satellite whose positioning accuracy has deteriorated and the time in the satellite (hereinafter, referred to as GPS-Time). The GPS-Tim is determined from time to time by independent positioning information, kinematic positioning information indicating an own position that does not include an error corresponding to the deterioration of the positioning accuracy, and SA error value indicating an error corresponding to the deterioration of the positioning accuracy.
e, the single positioning information, the kinematic positioning information, and the SA error value corresponding to the GPS-Time are stored together with the first IP address, which is an own IP address, and the kinematic positioning information obtained from time to time is stored. The GPS-Tim corresponding to the kinematic positioning information
e and said first IP address, and
To receive and store the IP address of the transfer source transferred from time to time, the kinematic positioning information obtained by the transfer source, and the GPS-Time corresponding to the kinematic positioning information, to connect to the intranet server. When transferring an IP packet at a predetermined transfer destination IP address, the GPS-Ti stored together with the first IP address corresponding to the time of the transfer.
me and the single positioning information corresponding to this GPS-Time are recorded in the IP header of the IP packet and transferred, a connection base unit, the position of the satellite transmitted from the GPS satellite every moment and the GPS -Time information and the kinematic positioning information and the S
A error value is obtained from time to time, and the GPS-Time, the single positioning information corresponding to the GPS-Time, the kinematic positioning information, and the SA error value are stored.
Receiving the kinematic positioning information and the GPS-Time corresponding to the kinematic positioning information and the first IP address corresponding to the kinematic positioning information transferred momentarily from the connection base unit; The GPS-Time and the first IP address are transferred and stored every moment, and the IP address of the transfer source transferred every moment, the kinematic positioning information obtained by the transfer source, and this kinematic positioning information Receiving the GPS-Time corresponding to the above, transferring and storing the received kinematic positioning information, the GPS-Time and the IP address of the transfer source to the connection base unit, and storing the same. Said IP transferred by
When a packet is received, the IP packet
The IP address of the transfer destination of the P packet, the GPS-Time and the single positioning information recorded in the IP header of the IP packet are obtained, and the obtained IP address matches the GPS-Time. The IP address of the stored first and second IP addresses transferred from time to time and the IP address of the transfer source, and the GPS-Ti corresponding to the IP address.
The SA error value is obtained from the stored kinematic positioning information corresponding to the “me” and the obtained single positioning information, and the obtained SA error value and the GP
The GPS-Time sent from S satellite every moment
A highway internet backbone for checking whether or not the SA error value obtained and stored in accordance with the above is coincident, and when the SA error value is coincident, passes the IP packet, and when not coincident, discards the IP packet; The single positioning information, the kinematic positioning information and the S are obtained from the satellite information including the position of the satellite transmitted from time to time and the GPS-Time.
An A error value is obtained from time to time, and the GPS-Time, the single positioning information corresponding to the GPS-Time, the kinematic positioning information, and the SA error value are stored together with a second IP address that is an own IP address. Then, the kinematic positioning information obtained from time to time is transferred to the highway Internet backbone from time to time together with the GPS-Time corresponding to the kinematic positioning information and the second IP address as the transfer source IP address, The first IP address, the GPS-Time, and the kinematic positioning information corresponding to the GPS-Time, which are transferred momentarily from the highway Internet backbone, are received and stored. Said IP When the IP packet is received, the IP address of the transfer destination of the IP packet is identified. When the IP address is not registered in advance, the IP packet is discarded. When the IP address is registered in advance, The IP address and the I of the IP packet
The GPS-Time and the single positioning information recorded in a P header are obtained, and the obtained first IP address and the stored first IP address, where the obtained IP address matches the GPS-Time, are obtained. The stored kinematic positioning information corresponding to the IP address of the second IP address and the GPS-Time corresponding to the IP address, the acquired single positioning information, The SA error value is determined from S
The SA value obtained and stored in correspondence with the A error value and the GPS-Time transmitted from the GPS satellite at every moment.
It is checked whether or not the error value matches. If the error value does not match, the IP packet is discarded.
An Internet authentication system, comprising: an intranet server unit that receives a packet; 14. An IP packet to be transferred to the connection base unit is generated, and when the IP packet is transferred, the intranet server unit is transmitted from the GPS satellite every moment corresponding to the time of the transfer. The intranet server unit that records the stored GPS-Time and the single positioning information obtained by the intranet server unit corresponding to the GPS-Time in the IP header of the IP packet and transfers the IP packet; When the unit receives the transferred IP packet, it obtains the transfer destination IP address of the IP packet, the GPS-Time recorded in the IP header of the IP packet, and the single positioning information from the IP packet. The obtained IP address matches the GPS-Time That the GPS over Time corresponding to the IP address and the IP address of said first IP address that has been momentarily transferred had been the storage and the transfer source IP address,
From the stored kinematic positioning information and the obtained single positioning information corresponding to
An A error value is obtained, and it is checked whether or not the obtained SA error value matches the SA error value obtained and stored corresponding to the GPS-Time transmitted from the GPS satellite at every moment. The highway internet backbone, which sometimes passes the IP packet and discards the IP packet when the IP packet does not match, When the IP address is not registered in advance, the IP packet is discarded. When the IP address is registered in advance, the IP address and the GPS-Time recorded in the IP header of the IP packet are discarded. And the single positioning information, and the obtained The IP address of the stored first IP address and the transfer source IP address that matches the IP address and the GPS-Time, and the GPS-Time corresponding to the IP address. , The SA error value is obtained from the stored kinematic positioning information and the obtained single positioning information, and the obtained SA is calculated.
It is checked whether or not the error value matches the SA error value obtained and stored in correspondence with the GPS-Time sent from the GPS satellite every moment. If the SA error value does not match, the IP packet is discarded. The Internet authentication system according to claim 13, further comprising: the connection base unit that stores the IP packet when performing the authentication. 15. A computer for transferring an IP packet with a predetermined transfer destination IP address for connecting to an intranet server, and a global positioning system (hereinafter referred to as GPS).
It is described. ) The position of the satellite whose positioning accuracy has been degraded due to "Selective Availability (hereinafter, referred to as SA), which is a function that intentionally degrades the positioning accuracy of the satellite navigation system" sent from time to time, and the satellite's position From the satellite information including the time (hereinafter, referred to as GPS-Time), the single positioning information indicating the own position including the error corresponding to the deterioration of the positioning accuracy and the error corresponding to the deterioration of the positioning accuracy are included. Kinematic positioning information indicating the own position and an SA error value indicating an error corresponding to the deterioration of the positioning accuracy are obtained every moment, and the GPS-Time and this GP
The single positioning information, the kinematic positioning information, and the SA error value corresponding to the S-Time are stored together with the first IP address, which is an own IP address, and the kinematic positioning information obtained momentarily is stored in the kinematic positioning information. The kinematic positioning information, which is transferred from time to time together with the GPS-Time and the first IP address corresponding to the positioning information, the transfer source IP address transferred from time to time, and the kinematic positioning information obtained from the transfer source, and the kinematic positioning information And received and stored the GPS-Time corresponding to the above, and received and stored the IP packet transferred by the computer together with the first IP address corresponding to the time when the computer transferred the IP packet. The GPS-Time and the single positioning corresponding to the GPS-Time The I of the IP packet and a broadcast
A first GPS-SA authentication server unit which records and transfers the P-header in the P header;
The kinematic positioning information received and transferred by the first GPS-SA authentication server unit at every moment while receiving and transferring the P packet via the first firewall, and the GPS corresponding to the kinematic positioning information
Receiving the Time and the first IP address, transmitting the IP address of the transfer source from time to time, the kinematic positioning information obtained by the transfer source, and the kinematic positioning information corresponding to the kinematic positioning information. GPS-Tim
e, a first router that receives e and forwards the packet via the first firewall; and a connection base unit having the following; and receives and transfers the IP packet transferred by the first router of the connection base unit. Receiving the kinematic positioning information transferred by the first router from time to time, the GPS-Time corresponding to the kinematic positioning information and the first IP address, transferring the information from time to time, and transferring the information from time to time. The IP address of the incoming transfer source, the kinematic positioning information obtained by the transfer source, and the G corresponding to the kinematic positioning information.
A second router that receives the PS-Time and transfers the same to the first router at the connection point; the IP packet or kinematic positioning information transferred by the second router; the GPS-Time;
Receiving the IP packet, transferring the IP packet to authenticate when receiving the IP packet, receiving the authentication result, and passing the IP packet when the authentication result indicates that the IP packet is authenticated, When the authentication result indicates that the IP packet is not authenticated, the IP packet is discarded, and when the kinematic positioning information, the GPS-Time, and the first IP address are received, these are transferred as they are, An access server for receiving and transferring the IP address of the transfer source transferred from time to time, the kinematic positioning information obtained by the transfer source, and the GPS-Time corresponding to the kinematic positioning information, and from time to time from the GPS satellites The satellite information including the position of the satellite transmitted and the GPS-Time. The single positioning information, the kinematic positioning information and the S
A error value is obtained from time to time, and the GPS-Time, the single positioning information corresponding to the GPS-Time, the kinematic positioning information, and the SA error value are stored.
The kinematic positioning information transferred from time to time from the access server, the GPS-Time corresponding to the kinematic positioning information and the first IP address are received and stored, and the kinematic positioning information is sometimes transmitted from the access server. Receiving and storing the IP address of the transfer source transferred every moment, the kinematic positioning information obtained by the transfer source, and the GPS-Time corresponding to the kinematic positioning information, and storing the IP packet in the access server From the IP packet, the IP address of the transfer destination of the IP packet from the IP packet and the GPS-Time recorded in the IP header of the IP packet.
And the single positioning information, and the obtained IP
The IP address of the stored first IP address and the IP address of the transfer source, wherein the IP address and the GPS-Time coincide with each other.
Address and the GPS-T corresponding to this IP address
, the SA error value is obtained from the stored kinematic positioning information corresponding to the stored kinematic positioning information and the obtained single positioning information, and the obtained SA error value and the G
The GPS-Tim sent from the PS satellite every moment
e, and checks whether or not the SA error value obtained and stored in correspondence with e is matched. If the SA error value matches, an authentication result indicating that the IP packet is authenticated is output to the access server. A second GPS-SA authentication server unit that outputs an authentication result indicating that a packet is not authenticated to the access server; and the IP packet passed by the access server or the kinematic positioning information transferred by the access server; A GPS-Time and the first IP address are received and transferred, and the IP address of the transfer source transferred from time to time, the kinematic positioning information obtained by the transfer source, and the GPS corresponding to the kinematic positioning informationー T
a highway internet backbone having the following: an IP packet or kinematic positioning information transferred by the third router of the highway internet backbone and the GPS; -Time and the first IP address are transferred, and the IP address of the transfer source transferred from time to time, the kinematic positioning information obtained by the transfer source, and the G corresponding to the kinematic positioning information are transferred.
A fourth router that receives a PS-Time and transfers it from time to time to the third router; an IP packet or kinematic positioning information transferred by the fourth router, the GPS-Time, and the first
When the IP packet is received, the IP address of the IP packet is identified, only the IP packet in which the IP address is registered in advance is transferred, and the kinematic positioning information and the G
When the PS-Time and the first IP address are received, these are transferred as they are, and the IP address of the transfer source transferred from time to time, the kinematic positioning information obtained by the transfer source, and the kinematic positioning information A second firewall that receives the GPS-Time corresponding to the GPS router and transfers the GPS-Time to the fourth router from time to time; From the satellite information, the single positioning information, the kinematic positioning information, and the S
An A error value is obtained from time to time, and the GPS-Time, the single positioning information corresponding to the GPS-Time, the kinematic positioning information, and the SA error value are stored together with a second IP address that is an own IP address. Then, the kinematic positioning information obtained from time to time is transferred from time to time to the second firewall together with the GPS-Time corresponding to the kinematic positioning information and the second IP address as the transfer source IP address. And the IP transferred by the second firewall
Packet or kinematic positioning information and the GPS-T
im and the first IP address, and when the first IP address, the GPS-Time and the kinematic positioning information are received, these are stored. From the IP packet, the IP address of the transfer destination of the IP packet and the GP recorded in the IP header of the IP packet
S-Time and the single positioning information are acquired, and the acquired first IP address and the second IP address are the same as the acquired IP address and the GPS-Time. And the IP address of
The SA error value obtained from the stored kinematic positioning information corresponding to the GPS-Time corresponding to the P address and the obtained single positioning information, and the obtained SA error value, It checks whether or not the SA error value obtained and stored in correspondence with the GPS-Time sent from the GPS satellite every moment matches, and if the SA error value matches, the IP packet is passed. Third G that discards IP packets
A PS-SA authentication server unit, and the I-passed by the third GPS-SA authentication server unit.
An Internet authentication system, comprising: an intranet server that receives a P packet and executes a predetermined application; and an intranet server unit having: 16. An intranet server which forwards the IP packet with an IP address of the connection base when an IP packet to be transferred to the connection base occurs, and receives the IP packet transferred by the intranet server. The GPS-Time that the intranet server unit transmits and stores from time to time from the GPS satellite, corresponding to the time when the intranet server transfers the IP packet, and the intranet server unit that corresponds to the GPS-Time. The third GPS-SA authentication server unit, which records and transfers the single positioning information obtained in the IP header of the IP packet, and the I-data transferred by the third GPS-SA authentication server unit.
The fourth router for receiving and transferring the P packet via the second firewall; and the intranet server unit having the following: the IP transferred by the fourth router of the intranet server unit
The third router for receiving and transferring the packet; receiving the IP packet transferred by the third router, transferring the IP packet for authentication, receiving the authentication result, and authenticating the IP packet based on the authentication result. The access server that passes the IP packet when the access server indicates that the IP packet is to be transmitted, and discards the IP packet when the authentication result indicates that the IP packet is not authenticated. The IP address of the transfer destination of the IP packet, the GPS-Time and the single positioning information recorded in the IP header of the IP packet are obtained from the IP packet, and the obtained IP address and the G
The IP address of the stored first IP address and the transfer source IP address that match the PS-Time,
The SA error value obtained from the stored kinematic positioning information corresponding to the GPS-Time corresponding to the P address and the obtained single positioning information, and the obtained SA error value, An authentication result indicating whether the SA error value obtained and stored corresponding to the GPS-Time sent from the GPS satellite at every moment matches and stored, and when the SA error value matches, indicates that the IP packet is authenticated. A second GPS that outputs to the access server an authentication result indicating that the IP packet is not authenticated when the two do not match.
A high-speed internet backbone having: a SA authentication server unit; and a second router for receiving and transferring the IP packet passed by the access server; and a second router of the highway internet backbone for forwarding. The first router that receives and transfers the IP packet; and receives the IP packet transferred by the first router, identifies the IP address of a transfer destination of the IP packet,
The first firewall for transferring only the IP packet in which the IP address is registered in advance, the IP address of the transfer destination of the IP packet receiving the IP packet transferred by the first firewall, and The GPS-Time and the single positioning information recorded in the IP header of the IP packet are acquired, and the acquired IP address matches the GPS-Time, and the stored first data is matched. The IP address of the IP address and the transfer source IP address and the GPS-Tim corresponding to the IP address
e, the SA error value is obtained from the stored kinematic positioning information and the obtained single positioning information, and the obtained SA error value and the GPS
It checks whether or not the SA error value obtained and stored corresponding to the GPS-Time sent from the satellite from time to time matches, and discards the IP packet if it does not match, and discards the IP packet if it matches. The first GPS-SA authentication server unit that allows the first GPS-SA authentication server unit to pass through, and the computer that receives and stores the IP packet that has been passed by the first GPS-SA authentication server unit. The Internet authentication system according to claim 15, further comprising: 17. The first GPS-SA authentication server unit, the single positioning information and the kinematics information are obtained from the satellite information including the position of the satellite and the GPS-Time transmitted from time to time from the GPS satellite. Tick positioning information and the S
A error value is obtained from time to time, and the GPS-Time, the single positioning information corresponding to the GPS-Time, the kinematic positioning information, and the SA error value are stored together with the first IP address which is an own IP address. A first SA error value that receives and stores the IP address of the transfer source transmitted from time to time, the kinematic positioning information obtained by the transfer source, and the GPS-Time corresponding to the kinematic positioning information; And a GPS-Time corresponding to the kinematic positioning information and the first IP, the kinematic positioning information obtained and stored by the first SA error value generating unit every moment.
The IP address of the transfer source, which is transferred from time to time to the first firewall together with the address, and the kinematic positioning information obtained from the transfer source, and the kinematic positioning information obtained from the transfer source. Receiving the GPS-Time corresponding to the above, and transferring the received GPS-Time to the first SA error value creating unit, and transferring the I-Time transferred by the computer or the first firewall.
Receiving the P packet and receiving the IP packet from the computer, the first SA corresponding to the time when the computer forwarded the IP packet.
The error value creation unit stores the GPS-Time stored together with the first IP address and the single positioning information corresponding to the GPS-Time in the I-packet of the IP packet.
When the IP packet is received from the first firewall, the IP address of the transfer destination of the IP packet and the GPS-Time recorded in the IP header of the IP packet are transmitted when the IP packet is received from the first firewall. The single positioning information is acquired, and the acquired first IP address and the IP address of the transfer source, where the acquired IP address matches the GPS-Time, are acquired.
The SA error from the stored kinematic positioning information corresponding to the IP address and the GPS-Time corresponding to the IP address, and the obtained single positioning information. The first S value corresponding to the obtained SA error value and the GPS-Time transmitted from the GPS satellite at every moment.
It is checked whether the SA error value obtained and stored by the A error value creation unit matches, and if the SA error value does not match, the I error
17. The Internet authentication system according to claim 15, further comprising: a first GPS-SA authentication server that discards a P packet and passes the IP packet when a match is found. 18. The second GPS-SA authentication server unit, based on the satellite information including the GPS-Time and the position of the satellite transmitted from the GPS satellite from time to time, the single positioning information and the kinematics information. Tick positioning information and the S
A error value is obtained from time to time, and the GPS-Time, the single positioning information corresponding to the GPS-Time, the kinematic positioning information, and the SA error value are stored.
The kinematic positioning information transferred from time to time and the GPS-T corresponding to the kinematic positioning information
receiving the IP address and the first IP address, storing the IP address of the transfer source, the kinematic positioning information obtained at the transfer source, and the GPS corresponding to the kinematic positioning information.ー Ti
a second SA error value creating unit that receives and stores the kinematic positioning information transmitted from the access server from time to time, the GPS-Time corresponding to the kinematic positioning information, and the first SA error value generation unit. An IP address is received and transferred to the second SA error value creating unit, and the IP address of the transfer source transmitted from the access server from time to time, the kinematic positioning information obtained by the transfer source, and the kinematic Receiving the GPS-Time corresponding to the tick positioning information, transferring the received GPS-Time to the second SA error value creating unit, and receiving the IP packet from the access server;
The IP address of a packet transfer destination, the GPS-Time and the single positioning information recorded in the IP header of the IP packet are obtained, and the obtained IP address matches the GPS-Time. The IP address of the first and second IP addresses stored and transferred from time to time and the GPS-Tim corresponding to the IP address.
e, the SA error value is obtained from the stored kinematic positioning information and the obtained single positioning information, and the obtained SA error value and the GPS
The second SA error value creation unit determines whether or not the SA error value matches and is stored in correspondence with the GPS-Time sent from the satellite every moment. A second GPS-SA authentication server, which outputs an authentication result indicating that the IP packet is authenticated to the access server, and outputs an authentication result indicating that the IP packet is not authenticated to the access server when they do not match, The Internet authentication system according to claim 15, 16 or 17, further comprising: 19. The third GPS-SA authentication server unit, based on the satellite information including the position of the satellite and the GPS-Time transmitted from time to time from the GPS satellite, the single positioning information and the kinematics information. Tick positioning information and the S
A error value is obtained from time to time, and the GPS-Time, the independent positioning information corresponding to the GPS-Time, the kinematic positioning information, and the SA error value are stored together with the second IP address which is an own IP address. A third SA error value creating unit that receives and stores the first IP address, the kinematic positioning information, and the GPS-Time corresponding to the kinematic positioning information, which are transmitted from time to time; The kinematic positioning information obtained and stored by the third SA error value creation unit from time to time is stored in the GPS-Time and the second IP corresponding to the kinematic positioning information.
The first IP address, the kinematic positioning information, and the GPS corresponding to the kinematic positioning information, which are transferred from time to time to the second firewall together with the address. -Time is transferred to the third SA error value creation unit, and the IP packet transferred by the intranet server or the second firewall is received. When the IP packet is received from the intranet server, The GPS-Time stored by the third SA error value creation unit together with the second IP address, the GPS-Time corresponding to the time when the intranet server forwards the IP packet;
The single positioning information corresponding to the “me” is recorded in the IP header of the IP packet and transferred, and when the IP packet is received from the second firewall, the transfer destination IP address of the IP packet and the IP address IP
The GPS-T recorded in the IP header of a packet
i and the single positioning information, and the obtained IP address matches the GPS-Time.
The stored first IP address and the second
And the IP address of the IP address
The kinematic positioning information stored corresponding to the GPS-Time corresponding to the address,
The third SA error value generation unit calculates the SA error value from the obtained single positioning information and corresponds to the obtained SA error value and the GPS-Time transmitted from the GPS satellite every moment. Said SA stored and found
It is checked whether or not the error value matches. If the error value does not match, the IP packet is discarded.
19. The Internet authentication system according to claim 15, further comprising: a third GPS-SA authentication server that passes a packet. 20. The first GPS-SA authentication server unit, based on the satellite information including the position of the satellite and the GPS-Time transmitted from the GPS satellite every moment, the single positioning information and the kinematics information. Tick positioning information and the S
A error value is obtained from time to time, and the GPS-Time, the single positioning information corresponding to the GPS-Time, the kinematic positioning information, and the SA error value are stored together with the first IP address which is an own IP address. A first SA error value that receives and stores the IP address of the transfer source transmitted from time to time, the kinematic positioning information obtained by the transfer source, and the GPS-Time corresponding to the kinematic positioning information; And a GPS-Time corresponding to the kinematic positioning information and the first IP, the kinematic positioning information obtained and stored by the first SA error value generating unit every moment.
The IP address of the transfer source, which is transferred from time to time to the first firewall together with the IP address, and the kinematic positioning information obtained by the transfer source, and the kinematic positioning information obtained from the transfer source. Receiving the GPS-Time corresponding to the above, and transferring the received GPS-Time to the first SA error value creating unit, and transferring the I-Time transferred by the computer or the first firewall.
Receiving the P packet and receiving the IP packet from the computer, the first SA corresponding to the time when the computer forwarded the IP packet.
The error value creation unit stores the GPS-Time stored together with the first IP address and the single positioning information corresponding to the GPS-Time in the I-packet of the IP packet.
When the IP packet is received from the first firewall, the IP address of the transfer destination of the IP packet and the GPS-Time recorded in the IP header of the IP packet are transmitted when the IP packet is received from the first firewall. The single positioning information is acquired, and the acquired first IP address and the IP address of the transfer source, where the acquired IP address matches the GPS-Time, are acquired.
The SA error from the stored kinematic positioning information corresponding to the IP address and the GPS-Time corresponding to the IP address, and the obtained single positioning information. The first S value corresponding to the obtained SA error value and the GPS-Time transmitted from the GPS satellite at every moment.
It is checked whether the SA error value obtained and stored by the A error value creation unit matches, and if the SA error value does not match, the I error
And a first GPS-SA authentication server that discards the P packet and passes the IP packet when a match occurs. The second GPS-SA authentication server unit is transmitted from the GPS satellite every moment. From the satellite information including the position of the satellite and the GPS-Time, the single positioning information, the kinematic positioning information, and the S
A error value is obtained from time to time, and the GPS-Time, the single positioning information corresponding to the GPS-Time, the kinematic positioning information, and the SA error value are stored.
The kinematic positioning information transferred from time to time and the GPS-T corresponding to the kinematic positioning information
receiving the IP address and the first IP address, storing the IP address of the transfer source, the kinematic positioning information obtained at the transfer source, and the GPS corresponding to the kinematic positioning information.ー Ti
a second SA error value creating unit that receives and stores the kinematic positioning information transmitted from the access server from time to time, the GPS-Time corresponding to the kinematic positioning information, and the first SA error value generation unit. An IP address is received and transferred to the second SA error value creating unit, and the IP address of the transfer source transmitted from the access server from time to time, the kinematic positioning information obtained by the transfer source, and the kinematic Receiving the GPS-Time corresponding to the tick positioning information, transferring the received GPS-Time to the second SA error value creating unit, and receiving the IP packet from the access server;
The IP address of a packet transfer destination, the GPS-Time and the single positioning information recorded in the IP header of the IP packet are obtained, and the obtained IP address matches the GPS-Time. The IP address of the first and second IP addresses stored and transferred from time to time and the GPS-Tim corresponding to the IP address.
e, the SA error value is obtained from the stored kinematic positioning information and the obtained single positioning information, and the obtained SA error value and the GPS
The second SA error value creation unit determines whether or not the SA error value matches and is stored in correspondence with the GPS-Time sent from the satellite every moment. A second GPS-SA authentication server, which outputs an authentication result indicating that the IP packet is authenticated to the access server, and outputs an authentication result indicating that the IP packet is not authenticated to the access server when they do not match, The third GPS-SA authentication server unit comprises: the single positioning information and the kinematic positioning based on the satellite information including the position of the satellite transmitted from the GPS satellite from time to time and the GPS-Time. Information and S
A error value is obtained from time to time, and the GPS-Time, the independent positioning information corresponding to the GPS-Time, the kinematic positioning information, and the SA error value are stored together with the second IP address which is an own IP address. A third SA error value creating unit that receives and stores the first IP address, the kinematic positioning information, and the GPS-Time corresponding to the kinematic positioning information, which are transmitted from time to time; The kinematic positioning information obtained and stored by the third SA error value creation unit from time to time is stored in the GPS-Time and the second IP corresponding to the kinematic positioning information.
The first IP address, the kinematic positioning information, and the GPS corresponding to the kinematic positioning information, which are transferred from time to time to the second firewall together with the address. -Time is transferred to the third SA error value creation unit, and the IP packet transferred by the intranet server or the second firewall is received. When the IP packet is received from the intranet server, The GPS-Time stored by the third SA error value creation unit together with the second IP address, the GPS-Time corresponding to the time when the intranet server forwards the IP packet;
The single positioning information corresponding to the “me” is recorded in the IP header of the IP packet and transferred, and when the IP packet is received from the second firewall, the transfer destination IP address of the IP packet and the IP address IP
The GPS-T recorded in the IP header of a packet
i and the single positioning information, and the obtained IP address matches the GPS-Time.
The stored first IP address and the second
And the IP address of the IP address
The kinematic positioning information stored corresponding to the GPS-Time corresponding to the address,
The third SA error value generation unit calculates the SA error value from the obtained single positioning information and corresponds to the obtained SA error value and the GPS-Time transmitted from the GPS satellite every moment. Said SA stored and found
It is checked whether or not the error value matches. If the error value does not match, the IP packet is discarded.
17. The Internet authentication system according to claim 15, further comprising: a third GPS-SA authentication server that passes a packet. 21. The first SA error value generating section receives a carrier via a first GPS antenna, extracts a signal coded by a CDMA method from the carrier, and uses the SA to determine a positioning accuracy in advance by SA. The G is degraded
The distance between the first GPS antenna and the GPS satellite is determined from the satellite information and the time when the satellite information including the position of the PS satellite and the GPS-Time is decoded and a signal including the satellite information is received. , Respectively, corresponding to the plurality of GPS satellites, and from the obtained plurality of distances and the positions of the plurality of GPS satellites, the absolute position of the first GPS antenna including an error corresponding to the deterioration of the positioning accuracy is obtained. Determined as independent positioning information, determine the phase of the carrier from the received carrier, determine the absolute position of the first GPS antenna without error from the phase of the carrier, determine the kinematic positioning information as kinematic positioning information, The SA-error value indicating an error corresponding to the deterioration of the positioning accuracy is obtained from the GPS information and the kinematic positioning information.
and a first GPS receiver that outputs the single positioning information, the kinematic positioning information, the SA error value, and the first IP address, which is an own IP address, corresponding to the GPS-Time and the GPS-Time; The GPS-Tim output from the GPS receiver 1
e, the single positioning information, the kinematic positioning information, the SA error value, and the first IP address, and the IP address of the transfer source transmitted from time to time and the kinematic obtained by the transfer source. Positioning information and the GPS-Tim corresponding to the kinematic positioning information
21. The Internet authentication system according to claim 17, further comprising: a first GPS data storage unit that receives and stores e. 22. The second SA error value generating section receives a carrier through a second GPS antenna, extracts a coded signal from the carrier, and divides the signal by SA to determine the positioning accuracy in advance. The G is degraded
The distance between the second GPS antenna and the GPS satellite is determined from the satellite information and the time when the satellite information including the position of the PS satellite and the GPS-Time is decoded and a signal including the satellite information is received. , Respectively, corresponding to the plurality of GPS satellites, and from the obtained plurality of distances and the positions of the plurality of GPS satellites, the absolute position of the second GPS antenna including an error corresponding to the deterioration of the positioning accuracy is obtained. Determined as independent positioning information, determine the phase of the carrier from the received carrier, determine the absolute position of the second GPS antenna without error from the phase of the carrier, determine the kinematic positioning information as kinematic positioning information, The SA-error value indicating an error corresponding to the deterioration of the positioning accuracy is obtained from the GPS information and the kinematic positioning information.
and a second GPS receiver that outputs the single positioning information, the kinematic positioning information, and the SA error value corresponding to the GPS-Time, and the GPS-Time output by the second GPS receiver.
e, the single positioning information, the kinematic positioning information, and the SA error value, and the kinematic positioning information transferred momentarily and the GPS-Time and the GPS-Time corresponding to the kinematic positioning information. 1 and receives and stores the IP address of the transfer source, the kinematic positioning information obtained at the transfer source, and the GPS-Time corresponding to the kinematic positioning information. 21. The Internet authentication system according to claim 18, further comprising: a second GPS data storage unit that stores the data. 23. The third SA error value generating section receives a carrier via a third GPS antenna, extracts a coded signal from the carrier, and derives the signal by SA to determine the positioning accuracy in advance. The G is degraded
The distance between the third GPS antenna and the GPS satellite is determined from the satellite information and the time when the satellite information including the position of the PS satellite and the GPS-Time is decoded and a signal including the satellite information is received. , Respectively, corresponding to the plurality of GPS satellites, and from the obtained plurality of distances and the positions of the plurality of GPS satellites, the absolute position of the third GPS antenna including an error corresponding to the deterioration of the positioning accuracy is obtained. Determined as independent positioning information, determine the phase of the carrier from the received carrier, determine the absolute position of the third GPS antenna that does not include an error from the phase of the carrier, determine the kinematic positioning information as kinematic positioning information, The SA-error value indicating an error corresponding to the deterioration of the positioning accuracy is obtained from the GPS information and the kinematic positioning information.
and a third GPS receiver that outputs the single positioning information, the kinematic positioning information, the SA error value, and the second IP address that is an own IP address corresponding to the GPS-Time and the GPS-Time; The GPS-Tim output from the GPS receiver No. 3
e, the single positioning information, the kinematic positioning information, the SA error value, and the second IP address, and the first IP address, the kinematic positioning information, and the kinematics transmitted from time to time. 21. The Internet authentication system according to claim 19, further comprising: a third GPS data storage unit that receives and stores the GPS-Time corresponding to tick positioning information. 24. The first SA error value generator receives a carrier via a first GPS antenna, extracts a CDMA-coded signal from the carrier, and uses the SA to determine the positioning accuracy in advance by SA. The G is degraded
The distance between the first GPS antenna and the GPS satellite is determined from the satellite information and the time when the satellite information including the position of the PS satellite and the GPS-Time is decoded and a signal including the satellite information is received. , Respectively, corresponding to the plurality of GPS satellites, and from the obtained plurality of distances and the positions of the plurality of GPS satellites, the absolute position of the first GPS antenna including an error corresponding to the deterioration of the positioning accuracy is obtained. Determined as independent positioning information, determine the phase of the carrier from the received carrier, determine the absolute position of the first GPS antenna without error from the phase of the carrier, determine the kinematic positioning information as kinematic positioning information, The SA-error value indicating an error corresponding to the deterioration of the positioning accuracy is obtained from the GPS information and the kinematic positioning information.
and a first GPS receiver that outputs the single positioning information, the kinematic positioning information, the SA error value, and the first IP address, which is an own IP address, corresponding to the GPS-Time and the GPS-Time; The GPS-Tim output from the GPS receiver 1
e, the single positioning information, the kinematic positioning information, the SA error value, and the first IP address, and the IP address of the transfer source transmitted from time to time and the kinematic obtained by the transfer source. Positioning information and the GPS-Tim corresponding to the kinematic positioning information
e. a first GPS data storage unit for receiving and storing the received e.g .; and a second SA error value generating unit for receiving a carrier wave via a second GPS antenna, The signal obtained by the above-mentioned G whose positioning accuracy has been previously degraded by SA is taken out.
The distance between the second GPS antenna and the GPS satellite is determined from the satellite information and the time when the satellite information including the position of the PS satellite and the GPS-Time is decoded and a signal including the satellite information is received. , Respectively, corresponding to the plurality of GPS satellites, and from the obtained plurality of distances and the positions of the plurality of GPS satellites, the absolute position of the second GPS antenna including an error corresponding to the deterioration of the positioning accuracy is obtained. Determined as independent positioning information, determine the phase of the carrier from the received carrier, determine the absolute position of the second GPS antenna without error from the phase of the carrier, determine the kinematic positioning information as kinematic positioning information, The SA-error value indicating an error corresponding to the deterioration of the positioning accuracy is obtained from the GPS information and the kinematic positioning information.
and a second GPS receiver that outputs the single positioning information, the kinematic positioning information, and the SA error value corresponding to the GPS-Time, and the GPS-Time output by the second GPS receiver.
e, the single positioning information, the kinematic positioning information, and the SA error value, and the kinematic positioning information transferred momentarily and the GPS-Time and the GPS-Time corresponding to the kinematic positioning information. 1 and receives and stores the IP address of the transfer source, the kinematic positioning information obtained at the transfer source, and the GPS-Time corresponding to the kinematic positioning information. A third GPS error storage unit for receiving a carrier via a third GPS antenna, and a CDMA-coded signal from the carrier. And this signal is used as the signal for the G whose positioning accuracy has been previously degraded by SA.
The distance between the third GPS antenna and the GPS satellite is determined from the satellite information and the time when the satellite information including the position of the PS satellite and the GPS-Time is decoded and a signal including the satellite information is received. , Respectively, corresponding to the plurality of GPS satellites, and from the obtained plurality of distances and the positions of the plurality of GPS satellites, the absolute position of the third GPS antenna including an error corresponding to the deterioration of the positioning accuracy is obtained. Determined as independent positioning information, determine the phase of the carrier from the received carrier, determine the absolute position of the third GPS antenna that does not include an error from the phase of the carrier, determine the kinematic positioning information as kinematic positioning information, The SA-error value indicating an error corresponding to the deterioration of the positioning accuracy is obtained from the GPS information and the kinematic positioning information.
and a third GPS receiver that outputs the single positioning information, the kinematic positioning information, the SA error value, and the second IP address that is an own IP address corresponding to the GPS-Time and the GPS-Time; The GPS-Tim output from the GPS receiver No. 3
e, the single positioning information, the kinematic positioning information, the SA error value, and the second IP address, and the first IP address, the kinematic positioning information, and the kinematics transmitted from time to time. 21. The Internet authentication system according to claim 20, further comprising: a third GPS data storage unit that receives and stores the GPS-Time corresponding to the tick positioning information.