JP2001211479A - Data communication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent illegal access to a server as much as possible in a data communication system in which a car navigation is connected to a portable telephone set through a data communication adaptor. SOLUTION: In the case of accessing a server 9 from a portable communication network 8 to access the Internet 10 in a configuration where the car navigation 1 is connected to the portable telephone set 4 through the data communication adaptor 2 for protocol conversion, authentications are respectively performed to decide whether or not the access is allowed when hard connection is performed between the navigation 1 and the adaptor, and between the adaptor 2 and the set 4, an authentication is made with the set 4 in the case of connecting to the server 9, an authentication is also performed between the navigation 1 and the server 9, and data communication is started when all of the accesses are allowed. Thus, it is possible to reject an access to the server 9 and to improve security in the case of illegally connecting another device.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a data communication terminal connected to a portable communication device via at least one relay device, and the portable communication device being able to access a server for providing data via a portable communication network. The present invention relates to a data communication system having various communication paths.

[0002]

Conventionally, when connecting to the Internet from a data communication terminal using a mobile phone or the like, a server performs authentication processing with the data communication terminal and uses a regular data communication terminal. The system is configured so that the data communication terminal can perform data communication on the Internet through the server when it is confirmed that the user is the user. In this case, as a method of performing authentication, for example, a user inputs an ID code or a password from a data communication terminal, and access is performed on condition that the ID code and the password are registered in advance on the server side. Generally, a method of permitting is used.

However, in such an authentication method, any data terminal device can access the server as a user of the ID code if the ID code and the password are known.
By connecting an arbitrary terminal using a D code and a password, there is a possibility that the terminal is impersonated and used. In particular, in recent years, since mobile phones themselves have become capable of operating bank deposit information, the value of use is questioned in terms of security if such fraud occurs. There's a problem.

The present invention has been made in view of the above circumstances, and an object of the present invention is to prevent an unauthorized user from accessing an unauthorized terminal other than a data communication terminal as much as possible, thereby suppressing damage to a server and using the same. Another object of the present invention is to provide a data communication system capable of preventing damage to a user and improving the security of the entire system.

[0005]

According to the first aspect of the present invention, when a server is accessed by a data communication terminal, the data is transmitted between a relay device and a portable communication device in a communication path to the server. An authentication operation is performed, and data communication becomes possible on condition that an access permission result is obtained in all of the authentication operations. This allows the data communication terminal to access the server in the configuration of the communication path to which the legitimate device is connected, while any one of the devices constituting the data communication system is replaced with a different one. In this state, the result of the access permission is not obtained in the authentication operation between the replaced device and the adjacent device, and the access from the data communication terminal to the server is denied. Therefore, it is possible to reliably prevent unauthorized access to the server by replacing some of the devices that make up the system, etc.
Security can be improved.

According to the second aspect of the present invention, in the above configuration, since the data communication terminal is a device for use limited to a specific application, it is easy to use, and the server using the data communication terminal is easy and quick. Data communication can be performed by accessing. On the other hand, since it is limited to a specific application, the authentication operation on the communication path tends to be fraudulent, but for example, inputting an ID code or password by replacing it with a general-purpose data communication terminal etc. If unauthorized use is attempted, the access operation is denied by the authentication operation between the replaced data communication terminal and the relay device, and the unauthorized use can be reliably prevented, thereby improving security. Can be achieved.

According to the third aspect of the present invention, in each of the above-described configurations, the data communication terminal is a navigation device, so that the server accesses the server while moving to perform data communication, and obtains various information in addition to the navigation operation. And abundant information can be obtained in real time in the moving space. On the other hand, there are more opportunities for unauthorized use in the absence of a user due to restrictions on use in a moving space, but as described above, unauthorized use can be prevented as much as possible, and security can be improved. become able to.

According to a fourth aspect of the present invention, in each of the above configurations, the relay device is provided as a data communication adapter provided to mutually convert a protocol of a data signal exchanged between the data communication terminal and the portable communication device. Data transmission and reception between the data communication terminal and the portable communication device can be reliably performed with a simple configuration without using a device having a special specification. By performing the authentication operation on both the terminal and the portable communication device, unauthorized use can be prevented as much as possible and security can be enhanced.

According to the sixth aspect of the present invention, in each of the above-described configurations, the data communication terminal performs an authentication operation directly with the server when accessing the server, and performs the data communication when access is permitted. In addition to the above, the authentication operation between each device described above obtains an access permission result, and the direct authentication operation between the data communication terminal and the server also performs data communication. Since the start condition is used, for example, by performing the authentication operation here by another authentication method, unauthorized use can be further prevented and security can be enhanced.

[0010]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment in which the present invention is applied to a car navigation system mounted on an automobile and a data communication system provided therewith will be described with reference to the drawings. FIG. 1 shows the entire communication system in a block configuration. A car navigation device (hereinafter, abbreviated as “car navigation”) 1 as a data communication terminal is connected to a data communication adapter 2 as a relay device according to, for example, RS-232C specifications. The connection is made via a cable 3 of a conforming standard. Between the car navigation system 1 and the data communication adapter 2, serial data communication can be performed by an interface circuit provided in each device using a protocol conforming to the RS-232C protocol.

The data communication adapter 2 is connected to a mobile phone 4 as a mobile communication device via, for example, a 16-core cable 5. Between the mobile phone 4 and the data communication adapter 2, data communication can be performed by a predetermined data communication protocol by an interface circuit provided in each device. In this case, the data communication protocol is set to conform to the packet communication protocol in consideration of, for example, access to the Internet.

[0012] The mobile phone 4 includes well-known base stations 6a and 6b.
For example, it is a PDC system provided so as to be connectable to the control station 7 through the like, and has a system capable of accessing a data providing server 9 via a mobile communication network 8. The server 9 can access sites provided on various servers 11a to 11c via the Internet 10, and is a well-known system for connecting to the Internet.

In the above configuration, the data communication adapter 2
When the car navigation system 1 is connected in a hardware manner via the cable 3, an authentication operation is performed at that time as described later, and it is determined whether or not the connected car navigation system 1 is an accessible data communication terminal. I do. Thereafter, the access request from the car navigation system 1 is accepted only when the authentication result indicates that the access is permitted.

When the data communication adapter 2 is connected in a hardware manner via the cable 5, the portable telephone 4 executes an authentication operation in the same manner as described above and at that time as will be described later. It is determined whether or not the communication adapter 2 is an accessible relay device, and thereafter, an access request from the car navigation 1 is accepted only when the access is possible.

Similarly, in the server 9, when the mobile phone 4 is accessed via the mobile communication network 8, an authentication operation is first performed with the mobile phone 4, and the mobile phone 4 is accessible. It is determined whether or not it is.
The server 9 is configured to accept an access from the car navigation system 1 when the authentication result is an access permission.

In the above-mentioned case, the authentication operation between the devices may employ an authentication method using an ID code and a password, for example, or an authentication method using a random number or the like. The authentication is performed by a predetermined authentication method among various authentication methods. Further, the authentication operation between the devices may employ different authentication methods, or may employ the same method.

Next, the operation of the present embodiment will be described with reference to FIGS. In the present embodiment, as described above, first, when the car navigation system 1 is hardware-connected to the data communication adapter 2 via the cable 3, the data communication adapter 2 performs an authentication operation by the authentication program shown in FIG. I do. When the data communication adapter 2 is connected to the mobile phone 4 via the cable 5 by hardware, the mobile phone 4 performs an authentication operation according to the authentication program shown in FIG.

First, the data communication adapter 2 recognizes that the car navigation system 1 is electrically connected to the connector (not shown) by the cable 3 (step S1), and thereafter executes an authentication process (step S1). S2). In this authentication process, for example, it is determined whether or not the car navigation system 1 is to be originally connected by comparing a preset ID code unique to the device with a password set by a user at the time of installation. .

If the authentication result is OK, that is, if the access is permitted (step S3), the data communication adapter 2 holds the access permission setting state as an internal setting state (step S4). ). When the authentication result is NG, that is, when the access is rejected (step S3), the access rejection is set (step S5). As a result, the setting state is maintained by hardware until the car navigation system 1 or another device is removed from the cable 3 thereafter.

Next, the portable telephone 4 recognizes that the data communication adapter 2 is electrically connected to the connector (not shown) by the cable 5 (step P1).
The authentication process is executed (step P2).
In this authentication process, as described above,
It is determined whether or not the data communication adapter 2 is to be originally connected by comparing a preset ID code unique to the device with a password set by the user at the time of installation.

If the authentication result is OK, that is, if the access is permitted (step P
3) The mobile phone 4 holds the access permission setting state as an internal setting state (step P).
4). If the authentication result is NG, that is, if the access is rejected (step P3), the access rejection is set (step P3).
5). As a result, the setting state is held in hardware thereafter until the data communication adapter 2 or another device is detached from the cable 5.

The car navigation system 1 and the data communication adapter 2
Connection work with the data communication adapter 2 and the mobile phone 4
Regarding the order of the connection work, any order can be performed first. Each of the authentication operations is an authentication operation that is performed independently of each other, so that there is no difference in the authentication operation result.

Now, in the state where the devices are connected by the cables 3 and 5 as described above, any of the authentication operations performed in each of the data communication terminal 2 and the mobile phone 4 is a determination of access permission. In this state, an access operation to the server 9 from the car navigation system 1 through the mobile phone 4, that is, a dial operation is possible.

Next, the process of accessing the server 9 by the car navigation system 1 will be described with reference to the Internet connection flow program shown in FIG. In the server 9, the authentication operation performed when the mobile phone 4 is connected via the mobile communication network 8 is performed by executing substantially the same processing as described above. It is done in the process.

When an access request to the Internet 10 is input by a user, the car navigation system 1 first determines whether the data communication adapter 2 and the mobile phone 4 have permitted access as authentication results (step R).
1, R2), if permitted, the mobile telephone 4 is caused to execute a connection process to the server 9 (step R3). At this time, the mobile phone 4 dials the access telephone number of the server 9 and, specifically,
a, via the control station 7 and the mobile communication network 8

When the mobile phone 4 is connected via the line, the server 9 executes the authentication operation according to the predetermined method as described above to determine whether or not the mobile phone 4 is a mobile phone 4 corresponding to an authorized user. The authentication result is held until the line is disconnected. If the access permission has been determined, the communication route from the car navigation system 1 to the server 9 is recognized as a legitimate one, and the communication path is opened.

If the result of the authentication by the mobile phone 4 indicates that the access is permitted (step R4), the car navigation system 1 executes a process of accessing the server 9 (step R5). The authentication operation performed here is
In addition to the above-described authentication operation for opening a communication path between devices, this operation is directly performed between the car navigation system 1 and the server 9. For example, an authentication operation for access to the server by a general personal computer is performed. In the same manner as the above, processing is performed by collating the ID code and the password.

When an access permission signal is received from the server 9 (step R6), the car navigation system 1 performs data transmission / reception processing between the two (step R7). Here, by starting a connection to the Internet 10 and accessing a number of destination sites such as the other servers 11a to 11c, desired information can be obtained. When the data communication process ends in this way (step R8), the car navigation system 1 performs a line disconnection process on the server 9 and ends the program (step R8).
9).

In the above-described process, the car navigation system 1
If the authentication result indicates that access is denied in any of steps R1, R2, R4 or R6, the subsequent access operation is interrupted and the display unit displays that connection to server 9 is not possible ( Step R10), the program ends. As a result, from the car navigation system 1 to the server 9
The access to the Internet 10 becomes impossible if an unauthorized device is interposed in any of the communication paths leading to or the access result is denied due to a failure of the device.

According to the present embodiment as described above, each device on the communication path from the car navigation system 1 to the server 9 performs the authentication operation, and when all the authentication results permit access, the communication path is set. Is opened to enable data communication. Therefore, when an unauthorized access to the Internet 10 is attempted by connecting a data communication terminal other than the car navigation system 1 or replacing a device on the way, for example. Can reliably suppress this and prevent unauthorized use. As a result, security can be improved, damage to the server 9 can be suppressed, and the user can use it with peace of mind.

In the present embodiment, after all of the above-described authentication operations are accepted as permitting access, the authentication operation is further performed between the car navigation system 1 and the server 9 to permit access. Since data communication is performed, unauthorized use by an unauthorized user can be prevented, and security can be further enhanced.

The present invention is not limited to the above embodiment, but can be modified or expanded as follows. Steps R1 and R2 may be configured as hardware processing that does not perform a substantial determination operation. In this case, for example, since a response from the mobile phone 4 is not obtained even after a predetermined time has elapsed after the execution of step R3, a problem actually occurs in a portion corresponding to steps R1 and R2. It may be determined that the connection is not possible due to the presence of the connection.

When a determination result that the authentication operation with the mobile phone 4 by the server 9 indicates that the access is permitted is obtained, the data communication is started, and the access is permitted by omitting the direct authentication operation with the car navigation system 1. Can also be adopted.

A configuration may be adopted in which a device other than the data communication adapter 2 is interposed as a relay device. Also in this case, by performing the authentication operation between the respective relay devices, it is possible to deny access via this when the relay device is replaced with another relay device.

As the authentication system, various systems other than those described above can be adopted. In this case, car navigation 1
In an apparatus using a specific application whose function is fixed as described above, it is desirable to adopt a method in which authentication data exchanged between the two can be set to different values each time access is made as much as possible. Thus, even if authentication data such as an ID code is intercepted by a third party, unauthorized access can be prevented by changing the authentication data every time.

[Brief description of the drawings]

FIG. 1 is an overall block diagram showing an embodiment of the present invention.

FIG. 2 is a flowchart of an authentication operation program of the data communication adapter.

FIG. 3 is a flowchart of an authentication operation program of the mobile phone.

FIG. 4 is a flowchart of a connection process from a car navigation system to the Internet.

[Explanation of symbols]

1 is a car navigation device (data communication terminal), 2 is a data communication adapter (relay device), 3 is a cable, 4 is a mobile phone (portable communication device), 5 is a cable, 6a, 6
b is a base station, 7 is a control station, 8 is a mobile communication network, 9 is a server, 10 is the Internet, and 11a to 11c are other servers.

 ──────────────────────────────────────────────────続 き Continued on the front page F term (reference) 5B085 AE04 AE23 BG07 5J104 AA07 KA02 NA01 NA05 5K067 AA32 BB21 CC08 DD17 EE02 EE16

Claims (6)

[Claims] 1. A data communication system, comprising: a data communication terminal connected to a portable communication device via at least one relay device, and the portable communication device having a communication path capable of accessing a data providing server via a portable communication network. In the communication system, all devices intervening in the communication path from the data communication terminal to the server are configured to perform an authentication operation between adjacent devices, and the data communication terminal performs the authentication operation as a result of the authentication operation. A data communication system configured to start the data communication on condition that all accesses are permitted. 2. The data communication system according to claim 1, wherein the data communication terminal is a device for use limited to a specific application. 3. The data communication system according to claim 1, wherein the data communication terminal is a navigation device. 4. The data communication system according to claim 1, wherein the relay device mutually converts a protocol of a data signal exchanged between the data communication terminal and the portable communication device. A data communication adapter provided in the data communication system. 5. The data communication system according to claim 1, wherein the data communication terminal is provided so as to be connectable to the Internet via the server. . 6. The data communication system according to claim 1, wherein the data communication terminal performs an authentication operation directly with the server when accessing the server, and the access is permitted. A data communication system configured to start the data communication when the data communication is started.