JP2001352411A - Dial-up connection system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a dial-up connection system for providing an information service via a public network that enhances the security of the information service and the convenience of users. SOLUTION: In the dial-up connection system, consisting of a data terminal a12 of a user connected to a public network 10 and making a connection request a specific information service providing device 50 with dial information and an information service providing device 50, including a user connection unit 51 having a connection means with the public network 10 and a user authenticating means which authenticates the user of the interconnected data terminal a12, an external connection unit, having a user authentication means, is connected to a fixed position of the public network 10, the external connection unit 20 in dial-up connection to the data terminal a12 authenticates the user and makes dial-up connection to the user connection unit 51, so as to interconnect the data terminal a12 and the information service providing device 50.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a dial-up connection system used when an information service is provided between information devices interconnected via a public network. And a dial-up connection system with high user convenience and improved portability.

[0002]

2. Description of the Related Art In general, when a user's data terminal device (information terminal) is connected to the Internet, a user connection device having a function such as an Internet connection via a public network and an information processing device for providing various information services are used. An information service providing apparatus, that is, an interconnection system called an Internet service provider (ISP) is often used. As this connection form, there are a so-called constant connection method in which the connection with the ISP is always maintained, and a so-called dial-up connection method (ie, a dial-up connection system) in which the connection with the ISP is intermittently performed as necessary. It is roughly divided into two.

When connecting to an ISP by a dial-up connection method, the data terminal device (information terminal) requesting the connection is a data terminal device (information terminal) permitted to connect, that is, the user of the ISP A user authentication mechanism that authenticates a data terminal device that is permitted to log in to the connection device is used. If the connection is accepted by this user authentication, the ISP user connection device will use the IP required for using the Internet.
An (Internet Protocol) address or the like is assigned to the connected data terminal device to enable use of the Internet.

[0004] As the user authentication technique, a user ID of a user who uses a data terminal device permitting connection in a user connection device of an ISP and a password corresponding to the user ID are registered in advance as user profile information, and dial-up is performed. A user authentication technique of collating a user ID and a password with the user profile information each time a connection is requested is often used. In this case, if the password corresponding to the user ID is registered in the user profile information, the connection is permitted, and if not, the connection is rejected.

Further, as another user authentication technique, for example, Japanese Patent Application Laid-Open No. 10-336345 and Japanese Patent Application Laid-Open
As disclosed in Japanese Patent No. 341151, for example, a technique using a calling telephone number, which is connection information in a public network, has also been proposed. That is, when the public network performs the incoming connection, the public network transfers the calling telephone number of the data terminal device (information terminal) that has made the connection request to the user connection device of the receiving ISP. It is intended to perform user authentication by determining whether the calling telephone number is registered as a calling telephone number of a data terminal device to which connection is permitted. At this time, in addition to performing user authentication only with the calling telephone number,
Checking with the password corresponding to D may be used together.

The above-mentioned user authentication technology using the calling telephone number is based on the fact that the calling telephone number is information unique to the public network, and the user ID and the corresponding password are in a different system. A more reliable user authentication technique can be provided as compared with the case of user authentication using only the corresponding password.

[0007]

However, in the case of performing user authentication using the above-mentioned calling telephone number, there are the following problems. First, the position where the data terminal device making the connection request is connected to the public network is always fixed, or, in the case of a portable information terminal, it is limited to a portable information terminal registered in advance in the public network. It is a point that is done. That is, in order to perform user authentication correctly, it is necessary to be able to reliably assure that the calling telephone number identified by the public network and sent to the user connection device on the receiving side is the user.

[0008] Even if the user requests connection to the user connection device using a data terminal device located in an unusual place such as a business trip, the connection is rejected because the calling telephone number is different. Further, when the mobile information terminal is out of the area of the mobile communication public network that can receive the service as a mobile information terminal and makes a connection request, the mobile information terminal cannot be used as a wireless terminal. Although a TA (terminal adapter) connection has to be used, it cannot be connected to the user connection device in this case as well.

The second problem is related to security when connecting to the user connection device. That is, the right to access information services and information resources provided by the information service providing apparatus including the user connection apparatus cannot be flexibly assigned according to the type of user and the required conditions. In the prior art, even when using a calling telephone number or when using together with a password corresponding to the user ID, when connecting the user's data terminal device, that is, the information terminal, to the user connection device, the user connection device is simply used. You can only select one of the two states of whether to allow the connection to or not.

Therefore, in the case where the access right to the information service or the information resource provided according to the type of the user or the required condition is not restricted, the information service is temporarily stored in the user connection device after the connection to the user connection device. It is necessary to permit / deny access to a specific information service or information resource by using a filter program or a firewall program that can determine the access right to the information resource. However, it cannot be guaranteed that such a filter program or a firewall program does not have any security holes for security. Therefore, in a stage before these programs operate, that is, in a stage before being connected to the user connection device, the If means for judging whether or not access to various information services or information resources can be determined in accordance with the type of data and its required conditions, a very effective means for improving security can be realized.

[0011]

SUMMARY OF THE INVENTION The present invention has been made in view of the above-mentioned problems, and allows connection to be made even if the user's data terminal device, that is, the information terminal, has a different calling telephone number, and has the above-described access method. It is an object of the present invention to provide a dial-up connection system capable of improving the security of user authentication for a right. That is,

A first solution means is an information terminal of a user who is connected to a public network and requests connection to a specific information service providing apparatus by dial information, and a connection means for the public network and an interconnection. In the dial-up connection system comprising the information service providing device including a user connection device having a user authentication device of a user of the information terminal, an external connection device having a further user authentication device at a fixed position of the public network. And a dial-up connection between the information terminal and the user connection device is made via the external connection device.

[0013] The second solution is the first solution, wherein the external connection device comprises a user name for specifying the user and telephone number information of the user connection device with which the user requests connection. Having a connection information registration database, when the information terminal of the user and the external connection device are interconnected, based on the telephone number information that the external connection device is registered in the connection information registration database, The information terminal and the user connection device are interconnected by sending dial-up connection information to the public network and interconnecting with the user connection device.

[0014] A third solution is the first or second solution, wherein the user connection device is provided with outgoing telephone number information of a connection partner and an information service or information permitted corresponding to the outgoing telephone number information. It has a calling number registration database that has registered access rights to resources, and when the user connection device and the external connection device are interconnected, the user connection device is connected to the external connection device based on the transmission telephone number of the external connection device. The user connection device controls an access right to an information service or an information resource permitted to the information terminal by referring to the transmission number registration database.

A fourth solution is the first or the second solution, wherein the user connection device has a plurality of called telephone numbers, and the user connection device includes the called telephone number information and the called telephone number information. It has a called number registration database in which information services or access rights to information resources that are correspondingly permitted are registered, and when the user connection device and the external connection device are interconnected, the user connection device The user connection device controls an access right to an information service or an information resource permitted to the information terminal by referring to the reception number registration database based on a reception telephone number from an external connection device. It was done.

According to a fifth aspect of the present invention, in the first or the second aspect, the user connection device has a plurality of incoming telephone numbers, and the outgoing telephone number information of the connection partner and the outgoing telephone number. A calling number registration database in which information services or information resource access rights allowed corresponding to the information are registered, called telephone number information of the user connection device, and information allowed corresponding to the called telephone number information. A destination number registration database in which access rights to services or information resources are registered, and when the user connection device and the external connection device are interconnected, the user connection device transmits a call to the external connection device. The calling number registration database and the called number registration database are referred to based on the number and the called telephone number from the external connection device, and the respective telephone numbers are referred to. The user connection device controls the access right to the information service or the information resource permitted to the information terminal by a combination of the access right to the information service or the information resource corresponding to each of the numbers. It is what it was.

In a sixth aspect of the present invention, in the first or the second aspect, the user connection device has a plurality of incoming telephone numbers, and information on the outgoing telephone number of a connection partner, and the user connection device. The user connection device and the external connection device, wherein the user connection device and the external connection device have a calling / calling number registration database in which the incoming telephone number information and the access right to the information service or the information resource permitted according to the two phone number information are registered. When the information terminal is connected to the information terminal, the user connection device refers to the calling / calling number registration database based on the calling phone number of the externally connecting device and the incoming phone number from the externally connecting device. The user connection device controls an access right to an information service or an information resource that is permitted to the user.

According to a seventh aspect of the present invention, in any one of the third to the sixth aspects, a user name of a connection requesting user and a corresponding password are added to the respective databases of the user connection device. By registering, when the user connection device and the external connection device are interconnected, the user name and password of the connection request source,
The external connection device is used to collate the data with the user name and the password registered in each database, and the access right to the information service or information resource permitted to the information terminal is determined by the user connection. The apparatus is controlled by the apparatus.

According to an eighth aspect of the present invention, in any one of the second to the seventh aspects, the ISD is used as a public network.
When using the N network, the ISDN is added to each telephone number information registered in each database in each connection device.
It is characterized by including sub-address information used in the network.

According to a ninth solution, in any one of the third or the fifth solution to the eighth solution, the external connection device has a calling telephone number to a plurality of user connection devices, and When the user connection device controls an access right to an information service or information resource permitted to the information terminal by the calling telephone number of the external connection device when the user connection device interconnects with the external connection device, The transmission telephone number from the connection device to the user connection device is determined by the transmission telephone number specified from the information terminal.

According to a tenth solution, in the third or fifth solution to the eighth solution, the external connection device has a calling telephone number to a plurality of user connection devices, and When the user connection device controls an access right to an information service or information resource permitted to the information terminal by the calling telephone number of the external connection device when the user connection device interconnects with the external connection device, The outgoing telephone number from the connection device to the user connection device is based on the terminal access right designation information that specifies the access right to the information service or information resource sent from the information terminal to the external connection device, Is a created telephone number.

An eleventh solution means according to the ninth solution means or the tenth solution means, wherein the information terminal communicates with the external connection device as means for designating the outgoing telephone number or the terminal access right designation information. It is characterized by using any one of terminal emulation based on a type character, menu format or Web browsing.

[0023] A twelfth solution means according to any one of the third or fifth solution means to the eighth solution means, wherein the external connection device has a calling telephone number to a plurality of user connection devices, and When the user connection device controls an access right to an information service or information resource permitted to the information terminal by the calling telephone number of the external connection device when the user connection device interconnects with the external connection device, The connection device has a plurality of incoming telephone numbers to the external connection device corresponding to each of a plurality of outgoing telephone numbers to the user connection device, and the external connection when interconnected with the information terminal. The outgoing telephone number from the external connection device to the user connection device is determined by the incoming telephone number to the device.

According to a thirteenth solution, in any one of the fourth to eighth solutions, the user connection device has a plurality of incoming telephone numbers and is interconnected with the external connection device. When controlling the access right to the information service or the information resource permitted to the information terminal by the called telephone number, the called telephone number from the external connection device to the user connection device is designated from the information terminal. It is characterized by being determined by the incoming telephone number.

According to a fourteenth solution, in any one of the fourth to eighth solutions, the user connection device has a plurality of incoming telephone numbers and is interconnected with the external connection device. When controlling the access right to the information service or the information resource permitted to the information terminal by the incoming telephone number of the information terminal, the incoming telephone number from the external connection device to the user connection device, The incoming telephone number is created by the external connection device based on the terminal access right designation information for designating the access right to the information service or the information resource sent to the connection device.

The fifteenth solution is the thirteenth or fourteenth solution.
Wherein the information terminal provides the external connection device with any one of terminal emulation based on an interactive character base, a menu format, and Web browsing as a unit for designating the incoming telephone number or the terminal access right designation information. It is characterized by being used.

According to a sixteenth aspect of the present invention, in any one of the fourth to eighth aspects, the user connection device has a plurality of incoming telephone numbers and is interconnected with the external connection device. When controlling the access right to the information service or the information resource permitted to the information terminal by the called telephone number, the external connection device corresponds to each of the plurality of called telephone numbers of the user connection device. A plurality of incoming telephone numbers to the external connection device, and an incoming call from the external connection device to the user connection device according to the incoming telephone number to the external connection device when interconnected with the information terminal. The number is determined.

The seventeenth solution means is an information terminal of a user who is connected to a public network and requests connection to a specific information service providing apparatus by dial information, and is interconnected with the information terminal by the dial information. In the dial-up connection system comprising the information service providing device including a user connection device having a connection means for the public network and a user authentication means, the user connection device may include a plurality of incoming telephone numbers. And a destination number registration database for registering an access right to an information service or an information resource permitted to the information terminal corresponding to the plurality of destination telephone numbers. When the information terminal is interconnected, the user connection device refers to the called number registration database based on the called telephone number. , Access to the information services or information resource allowed to the information terminal is obtained by, characterized in that said user connection device controls.

An eighteenth solution means is an information terminal of a user who is connected to a public network and requests connection to a specific information service providing apparatus by dial information, and is interconnected with the information terminal by the dial information. In the dial-up connection system comprising the information service providing device including the user connection device having the connection means for the public network and the user authentication means, the user connection device communicates with the information terminal. A terminal access right registration database for registering a correspondence between a protocol and an access right of an information service or an information resource permitted to the information terminal, and, when interconnected with the information terminal, based on the communication protocol, By referring to the terminal access right registration database, there is an information service allowed for the information terminal. The access to information resources is obtained by, characterized in that said user connection device controls.

[0030]

1 to 4 show a first embodiment of a dial-up connection system according to the present invention.
It will be described according to. Here, FIG. 1 is a network configuration diagram showing connection of each device constituting the dial-up connection system according to the present invention. 2 and 3 are diagrams showing examples of the contents of a calling number registration database and a called number registration database provided in a user connection device according to the present invention, respectively. FIG. 4 is an external connection device according to the present invention. FIG. 4 is a diagram showing an example of the contents of a connection information registration database provided in the system.

In FIG. 1, reference numeral 10 denotes an analog telephone network or I
It is a public network such as an SDN network, and has a function of mutually connecting a telephone 11, a data terminal device a12, a data terminal device b13, and the like. Reference numeral 50 denotes an information service providing device that realizes the dial-up connection function according to the present invention and provides various information services, and includes a user connection device 51 having a function of connecting to a public network. Further, the information service providing device 50 has a local area network LAN 54 for providing various information services, and connects the user connection device 51, the personal computer 56, various servers (not shown), and the like.

The user connection device 51 is an outgoing telephone of an information device (ie, an information terminal such as the data terminal device a12 or various information devices such as the external connection device 20 described later) that is permitted to connect via the public network. A calling number registration database 51a for storing a number and a type of access right to an information service or information resource that is permitted to be provided to the information equipment of the calling telephone number; a called telephone number of the user connection device 51; It has a called number registration database 51b that stores a group name of a user who is permitted to use the number and a type of access right to an information service or information resource permitted to the user group.

The above two databases, that is, the transmission number registration database 51a and the reception number registration database 5
Examples of the contents stored in 1b are shown in FIGS. 2 and 3, respectively, as described above. 2 and 3, the calling telephone number and the receiving telephone number are merely examples, and the number of digits is not limited thereto. The access right to the information service or the information resource includes, for example, a personal computer 56 in the information service providing apparatus.
File Transfer Protocol (FTP: Fi
le Transfer Protocol) and network file system (NFS).
m) or information services such as logging in to a server in the information service providing device using the Telnet service function and using an electronic bulletin board using the Netnews service function. Alternatively, an access right to an information resource is described as an example, but the present invention is not limited to this, and various types of access rights can be registered.

An external connection device 20 having another function for user authentication according to the present invention is connected to the public network 10 and is connected to an information terminal such as the data terminal device a12 and the user connection device 51. It is a connection device for mediating the interconnection with. That is, the data terminal device a1
In the case where 2 or the like is to be connected to the user connection device 51, the data terminal device a12 first makes a dial-up connection with the external connection device 20, and then the external connection device 20 transmits the user requesting the connection. By dial-up connection to the connection device 51, the data terminal device a12 and the like and the user connection device 51 are finally connected via the external connection device 20. Therefore, as in the case where the user connects to the user connection device 51 using the data terminal device of the destination, or connects the portable information terminal via a modem of a public telephone or a TA (terminal adapter), the transmission of the user is performed. Even if the telephone number has been changed, the external connection device 20 of the fixed outgoing telephone number
Since the dial-up connection is established from the user, the user connection device 51 can perform the user authentication technology based on the calling telephone number of the connection partner, and can accept the connection from the destination.

The external connection device 20 is connected to the external connection device 20.
Has a connection information registration database 21 that stores a user name that permits connection to the user and a calling telephone number of the user connection device 51 that permits connection of the user. User I sent
It has a function of confirming D and selecting the user connection device 51 to be connected.

FIG. 4 shows an example of the contents stored in the connection information registration database 21. Here, the user name is a user ID or the like, and the user connection device telephone number is a calling telephone number for connecting to the user connection device.

The contents of the called number registration database shown in FIG. 3 described above show a case where the user connection device 51 has a plurality of called telephone numbers. This indicates that the type of the access right to the information service or the information resource permitted to the information terminal (ie, the data terminal device 12a or the like) of the connection partner is determined. Therefore, the information terminal and the user connection device 51
The external connection device 20 that mediates the connection to the external connection device 20 can authenticate the access right to the information service or the information resource of the user connection device 51 in which the information terminal that requests the connection to the external connection device 20 is permitted. Must have
It is necessary to make a connection request to the called telephone number of the user connection device 51 corresponding to the information service or information resource access right permitted based on the user authentication.

To solve the above problem, FIG. 4 shows an example of the connection information registration database 21 in the case where the external connection device 20 also has a plurality of incoming telephone numbers.
That is, in accordance with the access right to the information service or the information resource of the user connection device 51 permitted for each user of each information terminal, the incoming telephone number information of the external connection device 20 for which the incoming call is permitted is registered. I have.

When an incoming call is received at a certain incoming telephone number, the external connection device 20 uses the user connection device 51 corresponding to the incoming telephone number information registered in the connection information registration database 21 to connect to the user connection device 51. Interconnected with. Therefore, based on the incoming telephone number to the user connection device 51, the user connection device 51 refers to the reception number registration database 51b, and the data terminal mutually connected to the user connection device 51 via the external connection device 20. It is possible to cause the information terminal such as the device a12 or the like to specify the access right to the information service or the information resource permitted.

The means by which the external connection device 20 solves the access right problem is not limited to the above, and various other means can be used. For example, when the data terminal device a12 and the external connection device 20 are dial-up connected, the external connection device 20 requests the data terminal device a12 to transmit a user ID (or a password if necessary). In addition, it requests the user connection device 51 of the connection request destination to transmit terminal access right designation information that specifies the type of access right to the information service or information resource to be allowed. The external connection device 20 determines whether the terminal access right designation information returned from the data terminal device a12 is previously permitted.
Performs user authentication based on the user ID, and if permitted, obtains the telephone number of the user connection device 51 corresponding to the access right, and the external connection device 20 performs the dial-up connection with the user connection device 51. Is possible.

In place of the terminal access right designation information, the external connection device 20 causes the data terminal device a12 to return the incoming telephone number of the user connection device 51 corresponding to the type of the access right. You can also request.

In this case, as means for transmitting and receiving information between the external connection device 20 and the data terminal device a12, means such as terminal emulation using an interactive character base, menu format or Web browsing is used. it can.

The contents of the calling number registration database shown in FIG. 2 are permitted by the user connection device 51 to the information terminal (such as the data terminal device a12) of the connection partner corresponding to the telephone number of the connection partner. The case where the type of access right to the information service or the information resource is determined is shown. Therefore, the external connection device 20 that mediates the connection between the information terminal and the user connection device 51 is
Means for authenticating the access right to the information service or the information resource of the user connection device 51 in which the information terminal making the connection request is permitted is required, and the information service or the information service permitted based on the user authentication is required. It is necessary to make a connection request using the calling telephone number to the user connection device 51 corresponding to the type of access right to the information resource.

Therefore, in order to solve such a problem, a plurality of external connection devices 20 are installed in correspondence with the type of the access right, and each information terminal is connected to the external connection device corresponding to the permitted access right. It is necessary to use a means for making a dial-up connection to 20. However, the present invention is not limited to this means, and various other means can be used.

The contents of the data connection information registration database 21 shown in FIG. 4 show another example of the means for solving the above-mentioned problem, and one external connection device 20 is connected to the user connection device 5.
A case is shown in which a plurality of outgoing telephone numbers and a plurality of incoming telephone numbers are associated with one type of permitted information service or information resource access right. That is, in accordance with the access right to the information service or the information resource of the user connection device 51 permitted for each user of each information terminal, the incoming telephone number information of the external connection device 20 that accepts the incoming call and the corresponding incoming telephone number. User connection device 51
And the outgoing telephone number information of the external connection device 20 when requesting a dial-up connection to the Internet.

When an incoming call arrives at a certain incoming telephone number of the external connection device 20, the user connects using the outgoing telephone number information of the external connection device 20 corresponding to the incoming telephone number information registered in the connection information registration database 21. A dial-up connection with the device 51 is made. Therefore, based on the received calling telephone number, the user connection device 51 provides an information service or information resource permitted to the information terminal such as the data terminal device a12 interconnected with the user connection device 51 via the external connection device 20. Access rights can be specified.

Another means for solving the above problem is the same means as the means used when the type of the access right is determined according to the incoming telephone number of the user connection device 51, that is, the external means. A means for specifying the access right by exchanging information between the connection device 20 and the information terminal can be used. That is, when the data terminal device a12 and the external connection device 20 are dial-up connected, the external connection device 20 is connected to the data terminal device a1.
In addition to requesting transmission of a user ID (or a password if necessary) to terminal 2, terminal access right designation information for designating the type of access right, or external connection for dial-up connection with user connection device 51. Device 20
Requesting the transmission of the outgoing telephone number. In the above-described case, as means for transmitting and receiving information between the external connection device 20 and the data terminal device a12, means such as an interactive character-based terminal emulation, a menu format, or Web browsing can be used.

Further, when the external connection device 20 connects to the user connection device 51, not only the incoming telephone number of the user connection device 51 but also the outgoing telephone number of the external connection device 20 are combined, so that the access right can be controlled. It is also possible to realize more advanced user authentication.

Next, referring to FIGS. 1 to 4, the external connection device 20 is connected from the data terminal device a12 to the user connection device 51.
An operation example in the case where the connection is made via the Internet will be described. Here, the data terminal device a12 is a user 1 of the group 1 which is permitted to access all information services or information resources of the users of the group 1 in the information service providing device 50, that is, the user connection device 51.
It is assumed that the device is a data terminal device (user name user1 shown in FIG. 4). Further, the user connection device 51 has a plurality of incoming telephone numbers, and the external connection device 20 also has a plurality of outgoing telephone numbers and a plurality of incoming telephone numbers, and uses all these telephone numbers. A case in which user authentication with higher security can be realized will be described.

First, of the incoming telephone numbers of the external connection device 20 to which the user “user1” belongs, a number that permits the right to access all information services or information resources of the group 1 by the dialing device in the data terminal device a12. Dial the telephone number (“888-0777” shown in FIG. 4) notified to the user 1
The data terminal device a12 is connected to the receiving terminal corresponding to the telephone number “888-0777” of the external connection device 20.

Next, the external connection device 20 transmits the user ID “u” indicating the user name of the caller from the data terminal device a12.
"ser1", and searches the connection information registration database 21 shown in FIG. It is confirmed that the user is permitted to be connected by the database 21 and has arrived at the called telephone number indicating that all access rights to the information service or information resource of group 1 are permitted. If the connection is not registered in the connection information registration database 21 in the confirmation operation, the subsequent connection is rejected.

When it is confirmed that the request is a legitimate connection request, the external connection device 20 sets the connection information registration database 21
The incoming telephone number "8" of user user1 registered in
88-0777 ", and the telephone number" 888-0011 "of the user connection device and the originating telephone number" 888-7 ".
777 ", and activates the transmission terminal corresponding to the transmission telephone number" 888-7777 "for requesting the right to access all services and resources of group 1 among the transmission terminals of the external connection device 20, and establishes a connection to the public network. A dial-up connection to the user connection device 51 is requested.

When connected to the user connection device 51, the user connection device 51 first receives the calling telephone number "888-7777" of the external connection device 20 that has requested connection from the calling number registration database 51a shown in FIG. After confirming that the user is registered, the user is authenticated as a user who has access to all information services or information resources of group 1. As a result, the user user
The first data terminal device a12 and the user connection device 51 are interconnected via the external connection device 20, and the user terminal
It is confirmed that the service and the resource corresponding to No. 1 can be provided. On the other hand, if the call is from an outgoing telephone number not registered in the outgoing number registration database 51a, the connection is rejected. In this case, as in the related art, if authentication by a user name and a password is also performed at the same time, stronger user authentication can be performed.

Further, the user connection device 51 can perform user authentication with reference to the called number registration database 51b shown in FIG. That is, based on the incoming telephone number “888-0011” to the user connection device 51, the incoming call number registration database 51 b is searched to receive an incoming call from a user belonging to group 1, and all information services of group 1 Alternatively, the user is authenticated as a user who has an access right to the information resource. Based on this, the data terminal device a12 of the user user1 and the user connection device 51 are interconnected via the external connection device 20, and the information service or information resource of the corresponding information service providing device 50 is provided. In this case as well, as in the case of the calling number registration database 51a, stronger authentication can be performed by performing authentication using a user name and a password at the same time. As described above, if user authentication is performed simultaneously using both the calling number registration database 51a and the called number registration database 51b, stronger user authentication can be performed. That is, when there is a mismatch between the access right to the information service or information resource selected by the called telephone number and the access right to the information service or information resource selected by the calling telephone number, control such as restricting the connection is performed. Can be performed.

Further, by creating a calling / calling number registration database in which the calling number registration database 51a and the called number registration database 51b are combined as shown in FIG. 5, a more complex and flexible information service can be provided. It is also possible to set up provision and access to information resources.

In the above-described embodiment, the external connection device 2
0, a case where a plurality of telephone numbers are given to the user connection device 51 by a dial-in service or the like. However, when an ISDN network is used as a public network, transmissions registered in the respective databases are performed. Since the sub-address information can be included as the telephone number information or the incoming telephone number information, it is possible to control the access right to the provided information service and information resource by using the sub-address information.

Further, the connection information registration database 21
Depending on the registration method, when a specific user requests a dial-up connection to the external connection device 20, a specific user may select one of a plurality of access rights to the information service or information resource provided by the user connection device 51. Can be selected using the telephone number of the user. That is, in the example of the connection information registration database 21 shown in FIG. 4, the user name user1 is the telephone number “88” for the two external connection devices.
Users can be authenticated by dialing any one of "8-0777" and "888-0778". When the telephone number “888-0778” is dialed, the external connection device 20 dials the telephone number “888-0001” at the time of the connection request to the user connection device 51, and all the information services or information resources are accessed. It will request access rights. On the other hand, the telephone number "888-777
When dialing "7", the external connection device 20 requests the connection by dialing the telephone number "888-0011" to the user connection device 51 as described in the above embodiment, and belongs to group 1. It will require access to all information services or resources.

As a means for the user user1 to select the access right to the information service or information resource provided by the user connection device 51, the user selects the dial information in the connection operation to the external connection device 20 as described above. By doing so, in addition to the means for automatically designating the access right to the information service and the information resource, the access right to the required information service and the information resource is set to Or a method of making a selection by interacting with each other, or providing a terminal access right registration database corresponding to the communication protocol in the external connection device 20 or the user connection device 51, and reading the user ID by the external connection device 20 or the user connection device 51. Automatically determine the communication protocol used at the time of By transmitting from the terminal, it is also possible to use a method such as identifying the access to information services and resources that are required.

Next, as a second embodiment of the dial-up connection system according to the present invention, an information service providing apparatus to which a user user 10 having a portable information device belongs from a distant place outside the service area of the portable information device. A case where a file of the personal computer 56 belonging to the group 1 in the group 50 is downloaded will be described with reference to FIGS. 2, 4, and 6. FIG.
FIG. 3 is a network configuration diagram showing a second embodiment. FIG.
, 14 is a mobile terminal of the user, and in general,
Mobile phone terminals and PHS (Personal Handy-Phone Syste
m) Terminal. Reference numeral 15 denotes a portable information device such as a notebook personal computer. Also, 16
Is a communication terminal fixedly connected to a public network. In this example, a public telephone is shown. Other symbols are shown in FIG.
Have the same reference numerals as in the network configuration diagram in FIG.

First, as shown in FIG. 6, since the portable terminal 14 is out of the service area and cannot be used, the portable information device 15 is fixed to the public network instead of being connected to the portable terminal 14. Public telephone 1 connected
Connect to 6. The user user 10 performs a dial-up connection from the public telephone 16 to the external connection device 20,
As described in the connection information registration database 21 of FIG. 4, the telephone number “888-0776” is dialed to connect the public telephone 16 and the external connection device 20.

The external connection device 20 receives the user ID “user10” indicating the user name of the caller from the portable information device 15 via the public telephone 16 and searches the connection information registration database 21 shown in FIG. Is a permitted telephone number and has a file transfer service of group 1 and an access right to a personal computer. The received telephone number "888-0776" notified to the user 10 as a received telephone number. Make sure you are receiving a call. If not registered in the connection information registration database 21, the subsequent connection is rejected.

Next, the external connection device 20 extracts “888-0012” from the telephone number of the user connection device registered in the connection information registration database 21 and, among the transmission terminals of the external connection device 20, the file transfer service of group 1 Activate the transmission terminal corresponding to the transmission telephone number “888-7776” requesting the access right to the personal computer, and request dial-up connection to the user connection device 51.

When connected to the user connection device 51, FIG.
It is confirmed whether or not the telephone number of the other party who has requested the connection is registered based on the transmission number registration database 51a. In this case, the user 10 is connected to the public telephone 16.
Instead of connecting directly to the user connection device 51, the user once connects to the external connection device 20 and the external connection device 20 has made a dial-up connection to the user connection device 51. Even if the number is different from the calling telephone number of the public telephone, it does not matter for the user connection device 51. That is,
Since the user connection device 51 has the telephone number “888-7776” of the external connection device 20 registered in the transmission telephone number of the transmission number registration database 51a in FIG. 2, it is determined that the call is received from a user who is permitted to connect. User is authenticated. Then, it authenticates that the permitted access right to the information service or the information resource is the access right to the group 1 file transfer service and the personal computer.

The portable information device 15 of the user 10 is connected to the user connection device 51 via the public telephone 16 and the external connection device 20, and the file transfer service of group 1 and the right to access the personal computer 56 are permitted. Therefore, the user connection device 51
The personal computer 56 can be accessed via the LAN 54 in accordance with the instruction from the portable information device 15 of the server 10, and the file in the designated personal computer 56 can be downloaded to the portable information device 15 of the user 10.

When an ISDN network is used as a public network, the public telephone becomes an ISDN public telephone.
As described above, since a sub-address can be used for a telephone number, a telephone number and a sub-address are used together for each telephone number in each database shown in FIGS. The connection request can be made by taking out the telephone number and subaddress registered as the telephone number in the database.

Next, a third embodiment of the dial-up connection system according to the present invention will be described.
"Web" which is shared only within each group corresponding to two groups, that is, group 1 and group 2.
FIG. 4 shows an example in which a user user11 belonging to group 1 refers to “Web server 1” from outside using a data terminal device when “server 1” and “Web server 2” are included in the information service providing apparatus. This will be described with reference to FIGS.

FIG. 7 is a network configuration diagram for explaining the present embodiment. In FIG. 7, the data terminal device c17 is the data terminal device of the user user 11 belonging to the group 1, and the data terminal device d18 is This is a data terminal device of the user 21 belonging to the group 2. The information service providing apparatus 50 is an information service providing apparatus dedicated to the specific company described above, and includes a corporate LAN.
"Web server 1" 5 shared by group 1 is assigned to 54
7. The “Web server 2” 58 shared by the group 2 is connected.

The “Web server 1” 57 and “Web server 1”
Since the “b server 2” 58 does not permit access to users other than the users belonging to the groups 1 and 2 respectively, the external connection device can be shared only by the users in the respective groups of the group 1 user and the group 2 user. Twenty telephone numbers are separately assigned to each group of users. That is, as shown in FIG. 4, the connection information registration database 21 of the external connection device 20 provides the user 11 belonging to the group 1 to the external connection device incoming telephone number “888-0” shared by all the group 1 users.
773 ”is registered and the user use belonging to group 2
The external connection device incoming telephone number “888-0763” shared by all the members of the group 2 is registered in r21.

The user connection device telephone number in the connection information registration database 21 includes the user 1 of the group 1
r11 and the user 2 of the group 2 have different number information, that is, “888-0016” and “8”.
88-0026 ", and these numbers are managed so that users between groups 1 and 2 do not know each other. In addition, it is possible to prevent even the users in the own group from knowing the user connection device telephone number of the own group. That is, by using the user connection device telephone number as information known only to the network administrator of the company, the security of the network can be improved and the security can be improved.

On the other hand, in the user connection device 51, the transmission number registration database 51a is stored in the same manner as in the above-described embodiments.
And the incoming call number registration database 51b may be separately provided, but in the present embodiment, the case where the outgoing / incoming call number registration database 51c in which the outgoing telephone number and the incoming telephone number are merged into one database is provided. explain. That is, as shown in FIG. 5, the calling / registered number registration database 51 c includes, as shown in FIG. 5, the outgoing telephone number information of the other party who requests connection to the user connection device 51, The incoming telephone number information, the user group name specified by the incoming telephone number information, and the type of access right to the information service or information resource are registered. For example, when the user 11 belonging to the group 1 accesses the “Web server 1” 57 of the group 1, the incoming telephone number to the user connection device 51 is “888-0016” and the outgoing telephone number is “ 888-7777 ".

Next, an operation when the user user 11 who is away from home accesses the “Web server 1” 57 of the group 1 to which the user user 11 in the company belongs will be described. First, the user user 11 dials the telephone number “888-0773” to the external connection device 20 to connect the data terminal device c17 to the external connection device 20.
And connect.

The external connection device 20 assigns the user ID “user11” indicating the user name of the caller to the data terminal device c17.
From the connection information registration database 21 shown in FIG.
Search for. User in the connection information registration database 21
11 is registered and the incoming telephone number “888-0773” indicating that it has an access right to the “Web server 1” 57 of the group 1 is received, so the “Web server 1” of the group 1 Confirm that the user has made a request to access 57. Here, if the connection is not registered in the connection information registration database 21, the subsequent connection is rejected.

Next, the external connection device 21 extracts “888-0016” from the user connection device telephone number registered in the connection information registration data 21 shown in FIG. Calling phone number "888-7773" requesting Web server access right for
Is activated, and a dial-up connection to the user connection device 51 is activated.

When connected to the user connection device 51, FIG.
It is confirmed whether or not the telephone number of the party who has requested the connection is registered based on the outgoing / incoming call registration database 51c. In this case, the outgoing telephone number "8"
88-7773 "and is registered in the outgoing / incoming call registration database 51c of FIG. 5, so that it can be determined that the incoming call is from a user who is permitted to connect. In addition, it can be authenticated that access to the “Web server 1” 57 of the group 1 is requested.

Further, the transmission / reception registration database 51c
"88" registered in the incoming telephone number of the user connection device
Since it is possible to confirm that the call has arrived at “8-0016”, the user can be more strictly authenticated as a user who is permitted to access “Web server 1” 57 of group 1. Also in this case, as described above, stronger authentication can be performed by simultaneously performing the authentication using the user name and the password.

The company L of the user connection device 51 of the specific company
When the connection to the “Web server 1” 57 for group 1 connected to the AN 54 is permitted, the user connection device 5
1 is a hypertext transfer protocol HTTP (Hyper
External connection device 20 based on Text Transfer Protocol)
Via the data terminal device c17 of the user user11
Transfer information between the Web server 1 and the “Web server 1” 57 connected to the intra-company LAN 54. Therefore, the data terminal device c17 of the user 1 of the group 1 can access the "Web server 1" 57 of the group 1 to which the user 11 belongs. At this time, the user connection device 5
1 also operates as a gateway having a proxy function together with a firewall function.

Next, as a fourth embodiment according to the present invention, a case where the home information service providing apparatus is installed in a personal home, and various home appliances are connected to the home LAN,
Furthermore, a voice terminal (for example,
An example of connecting to a home information service providing device in an environment where a telephone (phone) is connected from outside will be described with reference to FIGS.

FIG. 8 is a diagram showing a network configuration for explaining the present embodiment. In FIG. 8, reference numeral 60 denotes a home information service providing apparatus installed in a home, and reference numeral 61 denotes a public network (this embodiment is described as an ISDN network. ), A home user connection device (in this embodiment, IS
A description will be given of a case where a terminal adapter TA (Terminal Adaptor) for a DN network is used, and a home LAN 64, a voice terminal 67 (telephone, etc.) and the like are connected. Also, L
Various home electric appliances 66 (such as a video cassette recorder and a fan heater) in the house are connected to the AN 64. On the other hand, FIG. 9 shows a called number registration database 61b provided in the above-mentioned in-home user connecting device 61, in which the incoming telephone numbers of the in-home user connecting device 61 are registered. In this embodiment, as described above, the ISDN network terminal adapter TA to which two incoming telephone numbers are assigned.
Is shown, and one of the incoming telephone numbers “444-44” is used as the access right to the information service or the information resource.
"41" stores "voice service only" that allows only connection to voice terminals, and "444-0982" stores information "only home appliance control service" that allows connection to various home appliances in the house. Have been.

The user makes a dial-up connection with the home user connection device 61 at home from any one of the above-mentioned telephone numbers from the information terminal 19 at a place where he or she is away, so that the user can listen to a message recorded on the telephone 67. Alternatively, a video cassette recorder can be controlled to make a recording reservation for a television.

Since the user can use the in-home user connection device, that is, the terminal adapter TA61, as a connection device for normal voice communication, the incoming telephone number “444-4441” to the voice terminal 67 is disclosed to the public. It is possible, but the other incoming telephone number "444-0"
"982" is for externally controlling the various home electric appliances 66 in the house, and should be a private secret telephone number that is not disclosed to the public so as not to be misused by others.
As a result, safety when controlling home electric appliances can be ensured.

Further, in addition to the user authentication by the incoming number registration database 61b, the security can be further improved by fixing the destination and confirming the outgoing telephone number. Furthermore, when it is not desired to fix the place to be connected from outside, the connection may be made via the external connection device 20 described above. In the description of the present embodiment, the case where the ISDN network is used as the public network is described. However, the present invention is not limited to this case. It is possible to realize the operation.

[0082]

When the information terminal and the user connection device are interconnected by a dial-up connection via the public network, the information terminal and the user connection device are connected via an external connection device connected to a fixed position of the public network. Adopting a dial-up connection system that interconnects the information terminals, it is possible to improve security security when the information terminal is connected to the user connection device, and to enhance user convenience, that is, portability. Can be.

Further, by assigning a plurality of incoming telephone numbers to the user connection device, it is possible to improve the security for the access right to the information service or information resource provided to the information terminal.

Further, by identifying the calling telephone number of the external connection device with which the user connection device is interconnected, it is possible to improve the security for the access right to the information service or information resource provided to the information terminal. it can.

Further, by combining the incoming telephone number and the outgoing telephone number, it is possible to realize a fine-grained user authentication for an access right to an information service or an information resource provided to an information terminal, and to further improve security. Can be improved.

[Brief description of the drawings]

FIG. 1 is a network configuration diagram for explaining a first embodiment according to the present invention.

FIG. 2 is a diagram showing an example of the contents of a calling number registration database arranged in a user connection device according to the present invention.

FIG. 3 is a diagram showing an example of the contents of a called number registration database arranged in the user connection device according to the present invention.

FIG. 4 is a diagram showing an example of the contents of a connection information registration database arranged in the external connection device according to the present invention.

FIG. 5 is a diagram showing an example of the contents of a call registration database arranged in a user connection device in order to show another embodiment according to the present invention.

FIG. 6 is a network configuration diagram for explaining a second embodiment according to the present invention.

FIG. 7 is a network configuration diagram for explaining a third embodiment according to the present invention.

FIG. 8 is a network configuration diagram for explaining a fourth embodiment according to the present invention.

FIG. 9 is a diagram showing an example of the contents of an in-home called number registration database for explaining a fourth embodiment according to the present invention.

[Explanation of symbols]

10 public network, 11 telephone, 12 data terminal equipment a, 13 data terminal equipment b, 14 mobile terminal, 15
Portable information device, 16: public telephone, 17: data terminal device c, 18: data terminal device d, 19: information terminal, 20
... external connection device, 21 ... connection information registration database, 3
0: ISP, 40: Internet, 50: Information service providing device, 51: User connection device, 51a: Calling number registration database, 51b: Calling number registration database,
51c: Calling and receiving number registration database, 54: LAN,
56 personal computer, 57 web server 1, 58 web server 2, 60 home information service providing device, 61 home user connection device, 61b home incoming call number registration database, 64 home LAN, 66 home electric appliance 67 ... Audio terminal.

Claims (18)

[Claims] 1. An information terminal of a user who is connected to a public network and requests connection to a specific information service providing device by dial information, a connection means for the public network and an information terminal of the information terminal interconnected. A dial-up connection system comprising a user connection device having a user connection device having a user connection device, and an external connection device having a further user connection device at a fixed position of the public network, A dial-up connection system, wherein a dial-up connection between a terminal and the user connection device is made via the external connection device. 2. The dial-up connection system according to claim 1, wherein the external connection device comprises a user name for specifying the user and telephone number information of the user connection device with which the user requests connection. Having a connection information registration database, when the information terminal of the user and the external connection device are interconnected, based on the telephone number information that the external connection device is registered in the connection information registration database, A dial-up connection system, wherein the information terminal and the user connection device are interconnected by sending dial-up connection information to the public network and interconnecting with the user connection device. 3. The dial-up connection system according to claim 1, wherein the user connection device is provided with outgoing telephone number information of a connection partner and an information service or information resource permitted corresponding to the outgoing telephone number information. Has a calling number registration database that has registered access rights to the user connection device and the external connection device are interconnected when the user connection device is connected to the external connection device based on the outgoing telephone number of the external connection device. A dial-up connection system, wherein the user connection device controls an access right to an information service or information resource permitted to the information terminal by referring to a calling number registration database. 4. The dial-up connection system according to claim 1, wherein said user connection device has a plurality of called telephone numbers, and corresponds to said called telephone number information and said called telephone number information. A called number registration database that registers information services or access rights to information resources that are permitted by the user connection device when the user connection device and the external connection device are interconnected. The user connection device controls an access right to an information service or an information resource permitted to the information terminal by referring to the reception number registration database based on a reception telephone number from the connection device. Dial-up connection system. 5. The dial-up connection system according to claim 1, wherein said user connection device has a plurality of incoming telephone numbers, and further includes outgoing telephone number information of a connection partner and said outgoing telephone number information. A calling number registration database in which information services or access rights to information resources permitted according to the above are registered; incoming telephone number information of the user connection device; and information services allowed corresponding to the incoming telephone number information. Alternatively, it has a called number registration database in which access rights to information resources are registered, and when the user connection device and the external connection device are interconnected, the user connection device transmits the outgoing telephone number of the external connection device. And referring to the calling number registration database and the called number registration database based on the called telephone number from the external connection device, The user connection device controls the access right to the information service or information resource permitted to the information terminal by a combination of the access right to the information service or information resource that is respectively permitted corresponding to each telephone number. A dial-up connection system. 6. The dial-up connection system according to claim 1, wherein the user connection device has a plurality of incoming telephone numbers, and further includes outgoing telephone number information of a connection partner, and information of the user connection device. Incoming telephone number information and 2
Having a calling / calling number registration database in which information service or information resource access rights allowed in correspondence with the two telephone number information are registered, and when the user connection device and the external connection device are interconnected, The user connection device refers to the calling / calling number registration database based on the calling phone number of the externally connected device and the called phone number from the externally connected device, thereby allowing an information service or information permitted to the information terminal. A dial-up connection system, wherein the right to access resources is controlled by the user connection device. 7. The dial-up connection system according to claim 3, wherein a user name of a connection requesting user and a corresponding password are additionally registered in the respective databases of the user connection device. Thereby, when the user connection device and the external connection device are interconnected, the connection request source user name and password,
The external connection device is used to collate the data with the user name and the password registered in each database, and the access right to the information service or information resource permitted to the information terminal is determined by the user connection. A dial-up connection system characterized by being controlled by a device. 8. The dial-up connection system according to claim 2, wherein the public network is an ISD.
When using the N network, the ISDN is added to each telephone number information registered in each database in each connection device.
A dial-up connection system comprising sub-address information used in a network. 9. The dial-up connection system according to claim 3, wherein the external connection device has calling telephone numbers to a plurality of user connection devices, and the user connection device. Controlling the access right to an information service or information resource permitted to the information terminal by the calling telephone number of the external connection device when the external connection device is interconnected with the external connection device, A dial-up connection system, wherein a calling telephone number to a connection device is determined by a calling telephone number designated by the information terminal. 10. The dial-up connection system according to claim 3, wherein said external connection device has calling telephone numbers to a plurality of user connection devices, and said user connection device. Controlling the access right to an information service or information resource permitted to the information terminal by the calling telephone number of the external connection device when the external connection device is interconnected with the external connection device, An outgoing telephone number created by the external connection device based on terminal access right designation information for designating an access right to an information service or an information resource sent by the information terminal to the external connection device. A dial-up connection system characterized by being a number. 11. The dial-up connection system according to claim 9, wherein said information terminal uses an interactive character base as means for designating said outgoing telephone number or said terminal access right designation information to said external connection device. A dial-up connection system using any one of terminal emulation, menu format, and Web browsing. 12. The dial-up connection system according to claim 3, wherein the external connection device has outgoing telephone numbers to a plurality of user connection devices, and the user connection device. Controlling the access right to an information service or an information resource permitted to the information terminal by the calling telephone number of the external connection device when the external connection device is interconnected with the external connection device, A plurality of incoming telephone numbers to the external connection device corresponding to each of a plurality of outgoing telephone numbers to the connection device, and incoming calls to the external connection device when being interconnected with the information terminal. A dial-up connection system, wherein a telephone number from the external connection device to the user connection device is determined by a number. 13. The dial-up connection system according to claim 4, wherein said user connection device has a plurality of incoming telephone numbers and is interconnected with said external connection device. When controlling the access right to the information service or the information resource permitted to the information terminal by the incoming telephone number, the incoming telephone number from the external connection device to the user connection device is specified by the information terminal. A dial-up connection system characterized by being determined by an incoming telephone number. 14. The dial-up connection system according to claim 4, wherein the user connection device has a plurality of incoming telephone numbers and is interconnected with the external connection device. When controlling the access right to the information service or the information resource permitted to the information terminal by the incoming telephone number, the incoming telephone number from the external connection device to the user connection device is controlled by the information terminal when the external connection is established. A dial-up connection system, wherein the dial-up connection system is a called telephone number created by the external connection device based on terminal access right designation information for designating an access right to an information service or information resource sent to the device. 15. The dial-up connection system according to claim 13, wherein the information terminal uses the interactive character base as means for designating the incoming telephone number or the terminal access right designation information to the external connection device. A dial-up connection system using any one of terminal emulation, menu format, and Web browsing. 16. The dial-up connection system according to claim 4, wherein said user connection device has a plurality of incoming telephone numbers and is interconnected with said external connection device. When controlling the access right to the information service or information resource permitted to the information terminal by the called telephone number, the external connection device corresponds to each of the plurality of called telephone numbers of the user connection device. Having a plurality of incoming telephone numbers to the external connection device, the incoming telephone number from the external connection device to the user connection device according to the incoming telephone number to the external connection device when interconnected with the information terminal A dial-up connection system characterized by the following. 17. An information terminal of a user who is connected to a public network and requests connection to a specific information service providing device by dial information, and when said information terminal is interconnected with said information terminal by said dial information, In a dial-up connection system comprising the information service providing device including a user connection device having a connection means for a public network and a user authentication means, the user connection device has a plurality of incoming telephone numbers, and And a called number registration database in which information services or information resources permitted to the information terminal are registered corresponding to the plurality of called telephone numbers, so that the user connection device and the information terminal can communicate with each other. When connected, the user connection device refers to the called number registration database based on the called telephone number, so that the information terminal A dial-up connection system, wherein said user connection device controls an allowed access right to an information service or information resource. 18. An information terminal of a user who is connected to a public network and requests connection to a specific information service providing device by dial information, and when said information terminal is interconnected with said information terminal by said dial information, In a dial-up connection system comprising the information service providing device including a user connection device having a connection means for a public network and a user authentication means, the user connection device has a communication protocol of the information terminal and a communication protocol of the information terminal. A terminal access right registration database for registering correspondence between the permitted information services or information resource access rights, and, when interconnected with the information terminal, the terminal access right registration database based on the communication protocol; By reference, access to information services or information resources permitted to the information terminal is provided. A dial-up connection system, wherein the user connection device controls the access right.