JP2003263412A - Method of merging confidential information and general- purpose information, and device for connection between closed area network and wide area network - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To avoid the risk of a third person intercepting confidential information without needing to hold general-purpose information or to merge confidential information with the general-purpose information on the side of a terminal connected with a closed area network. <P>SOLUTION: When a merging request 71 is transmitted to a terminal X from a terminal A on the closed area network, the terminal X transmits a confidential information request 72 to a terminal G on the closed area network specified by the request. The terminal X receives a response 73 of confidential information including the terminal identification data of the terminal A and personal information related to the terminal A other than the identification data returned from the terminal A in response to the request 72. The terminal X takes out the personal information from the response 73 and transmits a general-purpose information request 74 including the personal information, to a terminal M on a wide area network. When the terminal X receives a response 75 of general-purpose information (map contents) returned to the terminal X from the terminal M in response to the general-purpose information request 74 and acquired using the personal information as a key, the terminal X merges the previously received confidential information with the general-purpose information received this time, and transmits the merged information to the terminal A via the closed area network. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a closed area network in which a plurality of terminals including a general information providing terminal for providing general information are connected and a closed network in which a plurality of predetermined terminals are connected. It relates to a network system connected by a network-wide area network connection terminal, and particularly merges confidential information of another terminal on the closed network requested by a terminal on the closed network and general information corresponding to the confidential information. The present invention relates to a confidential information-general-purpose information merging method and a closed area network-wide area network connection apparatus suitable for returning the created information to the requesting terminal.

[0002]

2. Description of the Related Art In some cases, it is necessary to merge and refer to confidential information such as personal information held by a communication partner that the third party does not want to be known to a third party. As such an example, there is a case where the map content (that is, general-purpose information) is referred to by using the position information of a mobile radio communication terminal with GPS function (hereinafter, referred to as a GPS terminal) owned by a friend as a key.

In this case, in the conventional method of merging and referring to confidential information and general-purpose information, the following procedure is used. First, the GP that targets its own terminal (communication terminal)
The S terminal is connected via, for example, a wide area network, and the own terminal requests the GPS terminal for position information. The requesting GPS terminal authenticates the requesting terminal. When the request-destination GPS terminal succeeds in the authentication, the request-destination terminal receives the GPS including the latitude / longitude received from the GPS satellites.
Information (that is, position information related to the requested GPS terminal) and the terminal identifier of the requested GPS terminal (that is, requested GP)
Confidential information including information relating to the S terminal and specifying the GPS terminal). The requesting terminal is the requesting GPS
When the confidential information sent from the terminal is received, the GPS information in the confidential information is used as a key to refer to, for example, the map content (that is, general-purpose information) held by the requesting terminal itself. As another method, if the requested GPS terminal holds the map content, the GPS terminal succeeds in authenticating the requesting terminal, and then the GPS terminal uses the GPS information as a key to hold it. It is also possible to refer to the displayed map content, merge the confidential information including the GPS information and the terminal identifier of the GPS terminal with the map content, and respond to the requesting terminal.

However, no matter which method is applied, when the request source terminal and the request destination GPS terminal are connected via the wide area network, the third party can obtain the position information and the terminal identifier of the request destination GPS terminal. There is a risk that confidential information including will be intercepted and the confidential information will be known by unauthorized access by impersonation.

Therefore, conventionally, in order to avoid the above-mentioned danger, it is necessary to encrypt the communication path and perform complicated authentication processing at the request destination GPS terminal, which causes an increase in cost. In addition, the map content must be held by the request source terminal or the request destination GPS terminal, which requires a cost. Furthermore, it takes time and effort to merge the GPS information and the map content at the request source terminal or the request destination GPS terminal.

[0006]

As described above, according to the conventional technique, the cost for holding general-purpose information when merging confidential information and general-purpose information held by the communication partner that the third party does not want to know is There are problems such as the trouble of merging confidential information and general-purpose information, the risk of interception by a third party through a wide area network, and the cost related to authentication.

On the other hand, there are many cases where general-purpose information can be acquired at low cost in a wide area network, as there are terminals that open map contents on the Internet.
In recent years, services have also been provided in which only a limited number of terminals can be connected and a closed network that cannot be accessed from terminals connected to a wide area network can be used at low cost.

The present invention has been made in consideration of the above circumstances, and an object thereof is to provide a closed network in which only a plurality of predetermined terminals can be connected and a wide area network in which a plurality of arbitrary terminals are connected. -Connect by a wide area network connection terminal, communicate confidential information that should not be known to a third party within the closed network, and merge the confidential information with general information held by a specific terminal connected to the wide area network. By performing the connection between the closed network and the wide area network, the terminal connected to the closed network does not need to hold the general information, and there is no need to merge the confidential information and the general information. Confidential information-general-purpose information merging method and closed area network-wide area network, in which information merged with information does not propagate through the wide area network, cost can be reduced, and the risk of intercepting confidential information by a third party can be avoided To provide inter-connection terminals .

[0009]

According to one aspect of the present invention, a wide area network to which a plurality of terminals including a general-purpose information providing terminal for providing general-purpose information are connected, and a plurality of predetermined terminals are connected. In the network system in which the closed network is connected by a closed network-wide area network connection terminal, confidential information given to the closed network-wide area network connection terminal from any terminal connected to the closed network-general purpose Provided is a confidential information-general information merging method in which the confidential information designated by the request and the general information corresponding to the confidential information are acquired and merged by the closed network-wide area network connection terminal in response to the information merge request. To be done. This merging method includes a terminal identifier of another terminal connected to the closed network, which is a request destination of confidential information, from any terminal connected to the closed network to the closed network-wide area network connection terminal. When a confidential information-general information merge request is sent, the confidential network request terminal of the confidential information specified by the terminal identifier included in the request is transmitted from the closed network-wide area network connection terminal to the closed network. A step of transmitting a confidential information request with the exception of the first personal information which is the terminal identifier of the request destination terminal and is transmitted from the request destination terminal in response to the confidential information request, and the terminal identifier other than the terminal identifier of the request destination terminal. A step of receiving confidential information including second personal information related to the request destination terminal, a step of extracting the second personal information from the received confidential information, and issuing a general information request including the second personal information. The step of transmitting from the connection terminal between the closed area network and the wide area network to the general purpose information providing terminal via the wide area network, and the connection between the closed area network and the wide area network from the general purpose information providing terminal in response to the general purpose information request. Receiving general information acquired using the second personal information as a key, which is transmitted to the terminal; confidential information received from the confidential information request destination terminal; and general information received from the general information providing terminal Merging information with the closed network-wide area network connecting terminal, and the merged information from the closed network-wide area network connecting terminal to the requesting terminal of the confidential information-general information merge request. And transmitting via the closed network.

As described above, according to the present invention, general-purpose information corresponding to the confidential information of another terminal (secret information request destination terminal) on the closed network required by the terminal (request source terminal) on the closed network. A request for information in which and are merged (confidential information-general-purpose information merge request) is sent to the connection terminal between the closed network and the wide area network, and is accepted by the connection terminal.

In response to the confidential information-general information merge request, the connection terminal is a terminal on the closed network designated by the request, that is, the confidential information request destination terminal, which is the terminal identifier of the confidential information request destination terminal. The confidential information including the personal information and the second personal information related to the request destination terminal other than this terminal identifier is acquired. Here, since the confidential information is communicated within the closed network, there is no possibility that the confidential information will be intercepted by a third party.

Further, the connection terminal extracts the second personal information from the acquired confidential information and transmits a general information request including the second personal information to the general information providing terminal on the wide area network, thereby General purpose information corresponding to the second personal information is acquired from the information providing terminal. Here, a part of the confidential information, that is, the second personal information is communicated in the wide area network, but the first personal information is not communicated in the wide area network. Therefore, the confidential information request destination terminal (owner) cannot be specified only by the second personal information. Further, the request source terminal and the request destination terminal connected to the closed network do not need to hold general-purpose information. The connection terminal X merges the acquired confidential information and general information and returns the merged information to the request source terminal on the closed network. Here, the request source terminal and the confidential information request destination terminal do not need to merge the confidential information and the general information, and the information obtained by merging the confidential information and the general information does not propagate through the wide area network. Therefore, in the present invention, it is possible to reduce the cost and avoid the risk of intercepting confidential information by a third party.

Here, when the confidential information-general information merge request is transmitted to the connection terminal, it is checked whether the request source terminal of the request and the confidential information request destination terminal belong to the same group. By determining in the connection terminal based on a group table that manages all terminals or some terminals connected to the network in a predetermined group unit,
A step of authenticating the request source terminal may be added, and the confidential information request transmitting step may be executed when it is determined that the terminals belong to the same group. With this configuration, the authentication process of the request source terminal can be easily performed only by referring to the group table.

A transaction including a terminal identifier of the request source terminal, an identifier of a session established for communication between the request source terminal and the connection terminal, and a terminal identifier of the confidential information request destination terminal. A step of generating an entry in the table is added, and in the step of transmitting the merged information, the confidential information corresponding to the terminal identifier of the request source terminal that is the transmission destination of the merged information and the merged information. It is preferable that the merged information is transmitted using the session designated by the session identifier registered in the transaction table entry including the terminal identifier of the request destination terminal.

In this way, the connecting terminal can correctly process the confidential information-general information merging request from each terminal on the closed network in parallel, so that the processing efficiency is improved.

[0016]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram showing the configuration of a network system according to an embodiment of the present invention.

In FIG. 1, closed network PAN and wide area network WA
N is connected by a connection terminal X between the closed area network and the wide area network. Only a limited number of terminals, that is, a specific number of terminals can be connected to the closed network PAN. In the present embodiment, only a predetermined specific terminal including a communication terminal A and a mobile wireless communication terminal with GPS function (GPS terminal) G is connected (accommodated) to the closed network PAN. Here, it is assumed that the communication terminal A is also a mobile radio communication terminal with GPS function. On the other hand, the wide area network WAN is connected (accommodated) with a plurality of arbitrary terminals including the map content providing terminal M, that is, an unspecified number of terminals.

All or some of the terminals on the closed network PAN are managed in group units as terminals that can acquire mutual personal information (here, GPS information). In the present embodiment, it is assumed that the communication terminal A and the mobile radio communication terminal G with GPS function belong to the same group.

In the network system of FIG. 1, each terminal connected to the closed network PAN, that is, the communication terminals A and G.
Each terminal including the mobile wireless communication terminal G with PS function can communicate with other terminals connected to the closed network PAN and the closed network-wide area network connection terminal X, but provides map content connected to the wide area network WAN. It cannot communicate with terminals such as the terminal M.
On the other hand, terminals such as the map content providing terminal M connected to the wide area network WAN can communicate with other terminals connected to the wide area network WAN and the closed area network-wide area network connection terminal X, but are connected to the closed area network PAN. The communication cannot be performed with the communication terminal A and the mobile communication terminal G with GPS function.

The communication terminal A, the mobile wireless communication terminal G with GPS function, the map content providing terminal M, and the closed network-wide area network connection terminal X are the communication terminal A, the mobile wireless communication terminal G with GPS function, and the map, respectively. Programs 11, 12, 13, and 14 provided for processing in the content providing terminal M and the closed area network-wide area network connection terminal X are installed.

FIG. 2 is a block diagram showing the functional arrangement of the communication terminal A in FIG. The communication terminal A is a transmission / reception unit 21 that transmits and receives information to and from the closed network PAN, and a terminal connected to the closed network PAN with respect to the closed network-wide area network connection terminal X, such as a mobile radio with a GPS function. Confidentiality requesting to merge confidential information of the communication terminal G (of its owner) and general-purpose information (here, map content corresponding to the GPS information of the terminal G) corresponding to the confidential information (GPS information therein). Information-general information merge request unit 22.
The confidential information-general-purpose information merge request unit 22 uses the communication terminal A.
(A CPU (not shown) therein is a functional block realized by executing the program 11.

The confidential information in this embodiment means the terminal G.
It is the information including the GPS information which is the position information of and the terminal identifier of the terminal G. Both the GPS information and the terminal identifier are information (personal information) related to (the owner of) the terminal G. Here, GPS information of the terminal G (second personal information)
And the terminal identifier (first personal information) is not known to the third party at the same time, that is, the GPS information or the terminal identifier is individually known to the third party, the terminal G (owner)
Note that the location is not known to a third party, and thus sensitive information is not known to the third party.

FIG. 3 is a block diagram showing the functional arrangement of the mobile radio communication terminal G with GPS function shown in FIG. The mobile radio communication terminal G with GPS function transmits / receives information to / from the closed network PAN, and a confidential information request reception unit 32 that receives a confidential information request given from the closed network-wide area network connection terminal X. And receive the radio wave from the GPS satellite
Latitude, which is the position information of the mobile radio communication terminal G with PS function
It is composed of a GPS function unit 33 for acquiring GPS information including longitude and the like. The confidential information request receiving unit 32 and the GPS function unit 33 are functional blocks realized by the mobile radio communication terminal G with GPS function (CPU (not shown)) executing the program 12.

FIG. 4 is a map contents providing terminal M in FIG.
3 is a block diagram showing the functional configuration of FIG. The map content providing terminal M transmits / receives information to / from the wide area network WAN, a map content storage unit 42 in which map contents are stored, and a general information request including GPS information in the transmitter / receiver 41. When received, a GPS information analysis unit 43 that analyzes the GPS information, and a corresponding map content based on the GPS information analyzed by the GPS information analysis unit 43 is read from the map content storage unit 42 and a general-purpose information request is made. And a general-purpose information providing unit 44 to be transmitted by the transmission / reception unit 41 to the request source. The GPS information analysis unit 43 and the general-purpose information providing unit 44 are functional blocks implemented by the map content providing terminal M (internal CPU (not shown)) executing the program 13.

FIG. 5 is a block diagram showing a functional configuration of the closed area network-wide area network connection terminal X in FIG. The closed area network-wide area network connection terminal X is connected to the closed area network PAN, and a transmission / reception section 51 that sends and receives information to and from the closed area network PAN, a send and receive section 52 that sends and receives information to and from the wide area network WAN. Confidential information given from another terminal (for example, communication terminal A)
Connected to the confidential information-general-purpose information merge request accepting unit 53 that accepts the general-purpose information merge request and causes the transmitting / receiving unit 51 to transmit the confidential information request to the terminal designated by the request, and the closed network-wide area network connection terminal X. A group management unit 54 that manages a group table 58 in which the terminal identifiers of all or some of the terminals on the closed network PAN are registered for each group and performs authentication.

The closed area network-wide area network connection terminal X also responds to the GPS information in the confidential information based on the confidential information-general information merging request accepting unit 53's confidential information-general information merging request. The transaction management unit 56 includes a general-purpose information request unit 55 that causes the transmission / reception unit 52 to transmit a general-purpose information request to the map content providing terminal M. The transaction management unit 56 uses confidential information-
It is composed of an entry including a terminal identifier of a request source terminal of a general information merge request, a session identifier, confidential information composed of a terminal identifier of a request destination terminal of a confidential information request and GPS information, and general information (map contents). The closed network-wide area network connection terminal X that manages the transaction table 59 to be merged further merges confidential information (GPS information) and general-purpose information (map content), and the merged information is classified as confidential information-general-purpose information. It is provided with a merging unit 57 that is transmitted by the transmitting / receiving unit 51 to the request source terminal of the merge request, and a storage unit 60 for storing the group table 58 and the transaction table 59.

Confidential information-general-purpose information merge request acceptance unit 5
3, the group management unit 54, the general-purpose information request unit 55, the transaction management unit 56, and the merge unit 57 are realized by the closed network-to-wide area network connection terminal X (CPU (not shown)) executing the program 14. It is a functional block.

FIG. 6 shows an example of the data structure of the group table 58 and the transaction table 59. The group table 58 includes entries for the number of groups assigned to the closed network PAN. The entry of the group table 58 includes a group of terminal identifiers of all terminals belonging to the corresponding group, that is, a corresponding closed network PAN.
A group of terminal identifiers of all terminals connected to is registered in advance.

In the entry of the transaction table 59, a confidential information-general information merge request is transmitted from the terminal on the closed network PAN to the closed network-wide area network connection terminal X, and the group management section 54 succeeds in the authentication. In this case, it is generated by the transaction management unit 56. Confidential information is included in the entry of the transaction table 59.
The terminal identifier of the request source terminal of the general information merge request (merge request source terminal identifier) and the identifier of the session set between the confidential information-general information merge request source terminal and the closed network-wide area network connection terminal X ( A session identifier), confidential information, and map content as general-purpose information that is a response value from a request destination for a general-purpose information request are registered. The confidential information includes a terminal identifier of a confidential information request destination terminal (confidential information request destination terminal identifier) and GPS information which is a response value from the request destination to the confidential information request.

Next, the operation of this embodiment will be described with reference to FIGS. 7 and 8 as appropriate. It should be noted that FIG. 7 is a sequence chart for explaining the operation in the same embodiment,
FIG. 8 is a flowchart showing the processing procedure executed by the closed area network-wide area network connection terminal X.

First, an owner of an arbitrary terminal connected to the closed network PAN, for example, the communication terminal A attaches the map contents of the mobile wireless communication terminal with GPS function (GPS terminal) G connected to the same closed network PAN. A predetermined operation is performed in order to know the location information thus obtained. Then, the confidential information-general-purpose information merge request unit 22 in the communication terminal A establishes a session with the transmission / reception unit 21 for the closed network-wide area network connection terminal X, and the terminal identifier of the GPS-equipped mobile wireless communication terminal G. A confidential information-general-purpose information merge request 71 including the information is transmitted to the connection terminal X via the closed network PAN. In addition, communication terminal A
It is assumed that the terminal identifier of the mobile radio communication terminal G with GPS function is set in advance. In addition to this, closed network PA
The terminal identifier of a predetermined terminal including the mobile wireless communication terminal G with GPS function belonging to the same group as the communication terminal A on N, that is, the registered content of the entry in the group table 58 corresponding to the group is the communication terminal A. It is also possible to adopt a configuration in which it is given from the connection terminal X between the closed network and the wide area network in response to a request from

The confidential information-general-purpose information merge request 71 from the communication terminal A (transmission / reception section 21 therein) is received by the transmission / reception section 51 in the closed network-wide area network connection terminal X, and the confidential information in the terminal X concerned. -It is passed to the general-purpose information merge request reception unit 53 (step 801).

Upon receipt of the confidential information-general-purpose information merge request 71 from the communication terminal A, the confidential information-general-purpose information merge request acceptance unit 53 in the closed network-wide-area network connection terminal X receives the request 71. The group management unit 54 includes the terminal A, that is, the terminal identifier of the request source terminal A of the request 71 and the terminal identifier of the GPS function-equipped mobile wireless communication terminal G that is the request destination of the confidential information, which is included in the request 71. To perform the authentication described below.

The group management unit 54 starts an operation (table scanning) of sequentially referring to each entry of the group table 58 stored in the storage unit 60 in the closed area network-wide area network connection terminal X from the head entry. (Step 80
2). Then, the group management unit 54 registers both the terminal identifier of the communication terminal A and the terminal identifier of the mobile radio communication terminal G with GPS function, which are passed from the confidential information-general information merge request reception unit 53, in the referred entry. Whether or not
That is, by checking whether or not the communication terminal A and the mobile radio communication terminal G with GPS function are in the same group,
The communication terminal A is authenticated (step 803). If the reference entry is not an entry including both terminal identifiers, the group management unit 54 causes the group table 58.
The above step 803 is executed again with reference to the next entry.

When the group management unit 54 cannot detect an entry including both terminal identifiers even after repeating the above step 803 until the last entry in the group table 58 (step 814), the group management unit 54. Judges the authentication failure, and notifies the confidential information-general-purpose information merge request reception unit 53 of that fact. Then, the confidential information-general-purpose information merge request reception unit 53 causes the transmission / reception unit 51 to transmit the confidential information-general-purpose information merge error response 76 'to the communication terminal A (step 815), terminates the process after disconnecting the session. .

As described above, in this embodiment, the closed network PAN is
Confidential information from the terminal connected to the general-purpose information merge request 71, the terminal to which confidential information is requested is the same closed network PA.
Even if connected to N, if both terminals do not belong to the same group, authentication of the request source terminal fails and the confidential information-general information merge request 71 is treated as an error and rejected. Moreover, in the present embodiment, the authentication processing of the request source terminal for the confidential information-general information merge request 71 can be executed very simply by referring to the group table 58, and it is not the confidential information request destination terminal but the closed network- Since the connection is performed by the wide area network connection terminal X, the cost associated with the complicated authentication processing that has been conventionally required can be reduced.

On the other hand, if the reference entry is an entry that includes both of the above terminal identifiers, the group management unit 54 determines that the authentication has succeeded, and notifies the confidential information-general-purpose information merge request reception unit 53 to that effect. Then, the confidential information-general-purpose information merge request reception unit 53 causes the above-mentioned identifiers, that is, the terminal identifier of the communication terminal A and the terminal identifier of the mobile wireless communication terminal G with the GPS function, and the communication terminal A and the connection terminal between the closed network and the wide area network. The identifier of the session established with X (session identifier) is passed to the transaction management unit 56 to activate the transaction management unit 56.

Then, the transaction management unit 56 communicates between the confidential information-general-purpose information merge request reception unit 53, the terminal identifier of the communication terminal A, the terminal identifier of the mobile radio communication terminal G with the GPS function, and the communication terminal A. A new entry including the session identifier of the session established in the transaction table 59 on the storage unit 60.
(Step 804). At this time, the GPS information column and the map contents column of the entry added to the transaction table 59 are blank because nothing is set.

Next, the confidential information-general-purpose information merge request acceptance section 53 uses the terminal identifier of the mobile radio communication terminal G with GPS function to establish a session with the mobile radio communication terminal G with GPS function by the transmitting / receiving section 51. The confidential information request 72 is established and transmitted to the terminal G through the closed network PAN (step 805).

A confidential information request 72 from the closed area network-wide area network connection terminal X (the transmitting / receiving section 51 therein) is received by the transmitting / receiving section 31 in the mobile radio communication terminal G with GPS function, and the confidential inside the terminal G. It is passed to the information request receiving unit 32.

When the confidential information request receiving unit 32 in the mobile radio communication terminal G with GPS function receives the confidential information request 72 from the closed network-wide area network connecting terminal X, the GPS function unit 33.
The GPS function unit 33 acquires GPS information including latitude and longitude received from the GPS satellite. Then, the confidential information request receiving unit 32 sends a confidential information response 73 including (the confidential information composed of the acquired GPS information and the terminal identifier of the mobile radio communication terminal G with GPS function) by the transmitting / receiving unit 31 to the closed network-wide area. It is transmitted to the inter-network connection terminal X via the closed network PAN.

The confidential information response 73 from the mobile radio communication terminal G with GPS function (the transmitting / receiving section 31 therein) is received by the transmitting / receiving section 51 in the closed network-wide area network connecting terminal X, and in the connecting terminal X. The confidential information-general-purpose information merge request is passed to the acceptance unit 53 (step 806).

Upon receipt of the confidential information response 73 from the mobile radio communication terminal G with GPS function, the confidential information-general information merge request receiving section 53 in the closed area network-wide area network connecting terminal X,
The transmitter / receiver 51 disconnects the session with the terminal G. Next, the confidential information-general information merge request reception unit 53
From the confidential information response 73 to the mobile radio communication terminal G with GPS function
The GPS information that is the position information of the transaction table 5 is extracted by the transaction management unit 56.
9 is additionally registered in the corresponding entry in 9 (step 80).
7). Then, the confidential information-general information merge request reception unit 53
Passes the GPS information to the general-purpose information requesting unit 55 and activates the general-purpose information requesting unit 55.

Then, the general-purpose information requesting unit 55 uses the preset terminal identifier of the map content providing terminal M to establish a session from the transmitting / receiving unit 52 to the map content providing terminal M, and returns the confidential information response 73. General information request 74 including the GPS information extracted from the GPS information, that is, the GPS information acquired from the mobile radio communication terminal G with GPS function,
The transmitting / receiving unit 52 causes the map content providing terminal M to transmit via the wide area network WAN (step 808). This general-purpose information request 74 includes a mobile radio communication terminal G with a GPS function.
Although the GPS information acquired from the mobile station and the terminal identifier of the closed network-wide area network connection terminal X that is the request source (transmission source) of the request 74 are included, the mobile wireless communication terminal G with GPS function is included.
The terminal identifier of is not included. Therefore, wide area network WAN
Even if the third party intercepts the general-purpose information request 74, it only knows the position information of a certain terminal, and
The position of the mobile radio communication terminal with function G cannot be specified.

The general-purpose information request 74 from the closed network-wide area network connection terminal X (transmission / reception section 52 therein) is received by the transmission / reception section 41 in the map content providing terminal M, and the GPS information analysis section in the terminal M concerned. Handed over to 43.

The GPS information analysis unit 43 in the map content providing terminal M analyzes the GPS information contained in the general information request 74 from the closed network-wide area network connection terminal X and uses the analyzed GPS information for general purposes. It is passed to the information providing unit 44. Then, the general-purpose information providing unit 44 determines the corresponding map content by using the GPS information analyzed by the GPS information analysis unit 43 as a key and reads the map content from the map content storage unit 42. And general-purpose information providing unit 4
4 is a general-purpose information response including the read map content 7
5 is transmitted by the transmitting / receiving unit 41 to the connection terminal X between the closed network and the wide area network via the wide area network WAN.

The general information response 75 from the map content providing terminal M (the transmitting / receiving unit 41 therein) is received by the transmitting / receiving unit 52 in the closed network-wide area network connecting terminal X, and the connecting terminal X concerned.
To the general-purpose information requesting unit 55 (step 80).
9).

Upon receiving the general information response 75 from the map content providing terminal M, the general information requesting unit 55 in the closed area network-wide area network connecting terminal X disconnects the session with the terminal M by the transmitting / receiving section 52. Next, the general-purpose information request unit 55
Causes the transaction management unit 56 to additionally register the map content included in the general-purpose information response 75 in the corresponding entry in the transaction table 59 as general-purpose information (step 810). Then, the general-purpose information requesting unit 55 notifies the merging unit 57 of the entry number and activates the merging unit 57.

Then, the merging unit 57 makes the general-purpose information requesting unit 5
The entry in the transaction table 59 of the entry number notified by 5 is referred to. The merging unit 57
The confidential information composed of the terminal identifier (secret information request destination terminal identifier) of the mobile wireless communication terminal G with GPS function and the GPS information registered in the entry in the referred transaction table 59, and the general information (map contents). , A confidential information-general-purpose information merge response 76 including the merged information and the merged information is generated. Then, the merging unit 57 sends the generated confidential information-general-purpose information merge response 76 to the communication terminal A indicated by the merge request source terminal identifier registered in the entry referred to above, and the session identifier registered in the entry. Using the session being established, the transmission / reception unit 51 causes the transmission via the closed network PAN (step 81).
2). After that, the merge unit 57 causes the transaction management unit 56 to delete the reference entry from the transaction table 59 (step 813).

As described above, in this embodiment, for the communication terminal A indicated by the merge request source terminal identifier registered in the entry in the transaction table 59, the establishment of the session identifier registered in the entry is being established. Using the session, the connection terminal X between the closed network and the wide area network
Confidential information-general information merge response 7 from merge unit 57 in
It is for sending 6. As a result, in the closed network-wide area network connection terminal X, even if the confidential information-general-purpose information merge request from each terminal on the closed network PAN is processed in parallel, the correct processing is possible, so that the processing efficiency is improved. .

The confidential information-general-purpose information merge response 76 from the closed network-wide area network connection terminal X (the transmitting / receiving section 51 therein) is
It is received by the transmission / reception unit 21 in the communication terminal A and passed to the confidential information / general-purpose information merge request unit 22 in the terminal A. When the confidential information-general-purpose information merge request unit 22 receives the confidential information-general-purpose information merge response 76 from the closed network-wide area network connection terminal X, the transmission / reception unit 21 transmits the confidential information-general-purpose information merge response 76 between the closed network-wide area network connection terminal X. Disconnect the session.

As described above, in the present embodiment, the communication terminal A sends the confidential information-general-purpose information merge request 71 in which the terminal identifier of the mobile radio communication terminal G with the GPS function is described to the closed network-wide area network connection terminal X. Simply, the terminal identifier (first personal information) of the mobile radio communication terminal G with GPS function and G
Confidential information including PS information (second personal information) and the GP
The information in which the map content (general-purpose information) corresponding to the S information is merged, that is, the position information with the map content can be acquired from the closed network-wide area network connection terminal X.
Moreover, in this embodiment, the set of the terminal identifier of the mobile radio communication terminal G with GPS function and the GPS information, which is confidential information, is not transmitted to the wide area network. Therefore, according to the present embodiment, it is necessary for the terminal on the closed network PAN to hold the cost of holding the map content which is general-purpose information and the trouble of merging the GPS information and the map content, and further for the wide area network. It is possible to solve the problem that the confidential information is leaked and there is a cost for avoiding it.

In this embodiment, between the request source A of the confidential information-general information merge request 71 and the closed network-wide area network connection terminal X, the confidential information-general information merge request 71 from the communication terminal A is sent. Connection terminal X between closed network and wide area network from the start of transmission
During the period from when the confidential information-general information merge response 76 is returned to the communication terminal A, the session indicated by the session identifier registered in the corresponding entry in the transaction table 59 is established. However, when this session is disconnected after receiving the confidential information-general information merge request 71, and the confidential information-general information merge response 76 is returned from the closed network-wide area network connection terminal X, the session identifier in the corresponding entry is returned. May be used to reestablish the session.

In the present embodiment, the terminal G is a mobile radio communication terminal with GPS function, and the terminal A sends the terminal identifier of the terminal G to which the confidential information is requested to the closed network-wide area network connection terminal X. When the confidential information-general information merge request 71 containing is transmitted, the connection terminal X transmits a confidential information request 72 to the request destination terminal G of this confidential information, so that the connection terminal X receives this request destination terminal G. Directly obtains the confidential information of the request destination terminal G. However, even if the terminal to which the confidential information is requested is a mobile radio communication terminal having no GPS function, the connection terminal X can obtain the confidential information of the confidential information requesting terminal by configuring as follows. Is possible.

First, it is assumed that the mobile radio communication terminal having no GPS function is the terminal G '. In the closed network PAN, in addition to the terminal group including the communication terminal A and the mobile radio communication terminal G ′,
It is assumed that the position information providing terminal (confidential information providing terminal) D is connected. The position information providing terminal D manages the position of a wireless base station that covers communication in a certain communication area where each mobile wireless communication terminal is currently located. The position information providing terminal D includes, for each wireless base station, a group of position information of the base station and a terminal identifier (first personal information) of a mobile wireless communication terminal located within the communication area of the base station. Holding a pair of. Here, it can be said that the position information of the base station is the position information (second personal information) of the mobile radio communication terminal located in the communication area of the base station.

Here, if the communication terminal A sends the confidential information-general information merge request 71 including the terminal identifier of the terminal G'which is the request destination of the confidential information, the connecting terminal X requests the confidential information. Not to G ′ but to the position information providing terminal D (the confidential information request 72 in the above embodiment).
A confidential information request (corresponding to the above) via the closed network PAN. For this confidential information request, the confidential information request destination terminal G '
The terminal identifier of is included. The position information providing terminal D is
When the confidential information request from the connection terminal X is received, the wireless terminal corresponding to the communication area in which the terminal G ′ is currently located is set by using the terminal identifier of the confidential information request destination terminal G ′ included in the request as a key. Confidential by searching the position information of the base station and including the position information (second personal information) and the terminal identifier (first personal information) of the terminal G ′ (corresponding to the confidential information response 73 in the above embodiment). The information response is returned to the connection terminal X. In this case, the location information of the wireless base station returned from the location information providing terminal D is registered as the location information of the confidential information request destination terminal G ′ in the column of confidential information (inside GPS information) of the transaction table 59. It

After that, the connection terminal X transmits a general-purpose information request including the above-mentioned position information (corresponding to the general-purpose information request 74 in the above embodiment) from the connection terminal X to the map content providing terminal M, so that the position information concerned. The map content (general information) corresponding to is acquired. Subsequent operations are the same as in the above embodiment.

Here, the location information providing terminal D is the closed network PA.
It may be configured to be connected to another closed network (second closed network) different from N (first closed network).

The present invention is not limited to the above-described embodiment, and can be variously modified in an implementation stage without departing from the scope of the invention. Furthermore, the embodiments include inventions at various stages, and various inventions can be extracted by appropriately combining a plurality of disclosed constituent elements. For example, even if some constituent elements are deleted from all the constituent elements shown in the embodiment, the problem described in the section of the problem to be solved by the invention can be solved, and the effect described in the section of the effect of the invention can be solved. If you get
A configuration in which this component is deleted can be extracted as an invention.

[0061]

As described above in detail, according to the present invention, a closed network capable of connecting only a plurality of predetermined terminals and a wide area network to which a plurality of arbitrary terminals are connected are closed network-wide area network. Confidential information that is connected by an inter-connection terminal and does not want to be known to a third party is communicated in the closed network, and the confidential information is merged with general information held by a specific terminal connected to the wide area network. It was done at the terminal connected to the wide area network. Therefore, according to the present invention, the terminal connected to the closed network does not need to hold the general information, and there is no need to merge the confidential information and the general information, and the confidential information and the general information are merged. Information does not propagate over wide area networks. Therefore, according to the present invention, the cost can be reduced and the confidential information can be
Avoid the risk of interception

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of a network system according to an embodiment of the present invention.

2 is a block diagram showing a functional configuration of a communication terminal A in FIG.

FIG. 3 is a block diagram showing a functional configuration of a mobile radio communication terminal G with GPS function in FIG.

FIG. 4 is a block diagram showing a functional configuration of a map content providing terminal M in FIG.

5 is a block diagram showing a functional configuration of a closed area network-wide area network connection terminal X in FIG.

FIG. 6 is a diagram showing an example of the data structure of a group table 58 and a transaction table 59.

FIG. 7 is a sequence chart for explaining an operation in the same embodiment.

FIG. 8 is a flowchart showing a processing procedure executed by a closed area network-wide area network connection terminal X.

[Explanation of symbols] A ... communication terminal G ... Mobile wireless communication terminal with GPS function M: Map content providing terminal X: Connection terminal between closed network and wide area network PAN ... Closed network WAN ... Wide area network 11-14 ... Program 21, 31, 41, 51, 52 ... Transceiver 22 ... Confidential information-general information merge request section 32 ... GPS function unit 33 ... GPS function unit 42 ... Map content storage unit 43 ... GPS information analysis unit 44 ... General information providing section 53 ... Confidential information-General information merge request reception unit 54 ... Group management department 55 ... General information request unit 56 ... Transaction management unit 57 ... Merge section 58 ... Group table 59 ... Transaction table 60 ... Storage unit

   ─────────────────────────────────────────────────── ─── Continued front page    (72) Inventor Kotaro Ise             No. 1 Toshiba-cho, Fuchu-shi, Tokyo Toshiba Corporation             Fuchu Office (72) Inventor Tatsuyoshi Goto             No. 1 Toshiba-cho, Fuchu-shi, Tokyo Toshiba Corporation             Fuchu Office F-term (reference) 5B085 AA08 AE02 AE06 AE23 AE29                       BG01 BG07

Claims (9)

[Claims] 1. A connection between a wide area network and a wide area network, to which a plurality of terminals including a general information providing terminal for providing general information are connected, and a closed area network to which a plurality of predetermined terminals are connected. In a network system connected by terminals, in response to a confidential information-general information merge request given to the closed network-wide area network connection terminal from any terminal connected to the closed network, the confidential information designated by the request A secret information-general information merging method in which the closed network-wide area network connection terminal acquires and merges information and general information corresponding to the confidential information, from the arbitrary terminal connected to the closed network When a confidential information-general information merge request including a terminal identifier of another terminal connected to the closed network to which the confidential information is requested is transmitted to the connection terminal between the closed network and the wide area network, the request is sent. Transmitting a confidential information request from the closed network-wide area network connection terminal to the confidential information request destination terminal designated by the terminal identifier via the closed network; Confidential information transmitted from the request destination terminal, the first personal information being the terminal identifier of the request destination terminal and the second personal information related to the request destination terminal other than the terminal identifier of the request destination terminal Receiving the second personal information from the received confidential information, and issuing a general information request including the second personal information from the closed network-wide area network connection terminal to the general information providing terminal. And the second personal information transmitted from the general-purpose information providing terminal to the closed-area network-wide-area network connection terminal in response to the general-purpose information request. In the closed network-wide area network connection terminal, the step of receiving general information acquired using the key as a key, the confidential information received from the confidential information request terminal and the general information received from the general information providing terminal A step of merging, and a step of transmitting the merged information from the closed area network-wide area network connection terminal to a terminal that is a request source of the confidential information-general information merge request via the closed area network. A confidential information-general information merging method characterized in that 2. When the confidential information-general-purpose information merge request is transmitted to the closed network-wide area network connection terminal, the confidentiality specified by the request source terminal of the request and the terminal identifier included in the request. The closed network based on a group table that manages whether all terminals or some terminals connected to the closed network belong to the same group as the information requested terminal based on a group table The method further comprises a step of authenticating the request source terminal by making a determination by a wide area network connection terminal, and the confidential information request transmitting step is executed when it is determined that the request source terminal belongs to the same group. The confidential information-general information merging method according to claim 1. 3. The confidential information-terminal identifier of a request source terminal of a general information merge request, the request source terminal and the closed network-
The method further comprises the step of generating an entry of a transaction table including an identifier of a session established for communication with a wide area network connection terminal, and a terminal identifier of a terminal to which the confidential information is requested, the merged In the transaction table including the terminal identifier of the request source terminal that is the destination of the merged information and the terminal identifier of the request destination terminal of the confidential information that corresponds to the merged information. The confidential information-general information merging method according to claim 1, wherein the merged information is transmitted using a session designated by the session identifier registered in an entry. 4. A wide area network to which a plurality of terminals including a general-purpose information providing terminal for providing general-purpose information are connected, a plurality of predetermined terminals, and a confidential-information providing terminal for managing and providing confidential information of the terminals. In a network system in which the connected closed network is connected by a closed network-wide area network connection terminal, confidential information given to the closed network-wide area network connection terminal from any terminal connected to the closed network- In response to a general-purpose information merge request, the confidential information specified by the request and the general-purpose information corresponding to the confidential information are acquired and merged by the closed network-wide area network connection terminal. A terminal including a terminal identifier of another terminal connected to the closed network, which is a request destination of confidential information, from any terminal connected to the closed network to the connection terminal between the closed network and the wide area network. When an information-general information merge request is sent, a confidential information request for requesting confidential information of a terminal to which confidential information specified by the terminal identifier included in the request is requested is transmitted to the closed network-wide area network connection. Transmitting from the terminal to the confidential information providing terminal via the closed network; and, from the confidential information providing terminal in response to the confidential information request, the terminal identifier of the request destination terminal specified in the request. Receiving confidential information including certain first personal information and second personal information related to the request destination terminal other than the terminal identifier of the request destination terminal; and the second personal information from the received confidential information. And sending a general information request including the second personal information from the closed network-wide area network connection terminal to the general information providing terminal via the wide area network, Receiving general information acquired from the general-purpose information providing terminal in response to the general-purpose information request to the closed-area network-wide-area network connection terminal, using the second personal information as a key. A step of merging the confidential information received from the requesting terminal of confidential information and the general information received from the general information providing terminal at the closed network-wide area network connection terminal; and the merged information in the closed network- A method for merging confidential information-general information, comprising the step of transmitting the confidential information-general information merging request from the terminal connected to the wide area network to the terminal which is the source of the request for merging the confidential information-general information. 5. A wide area network to which a plurality of terminals including a general information providing terminal for providing general information is connected, a first closed network to which a plurality of predetermined terminals are connected, and the first closed area. Manages confidential information of terminals including terminals connected to the network
In a network system in which a second closed network to which a confidential information providing terminal to be provided is connected is connected by a closed network-wide area network connecting terminal, from any terminal connected to the first closed network to the closed area In response to the confidential information-general-purpose information merge request given to the network-wide area network connection terminal, the closed area network-wide area network connection terminal transmits the confidential information designated by the request and the general information corresponding to the confidential information. A confidential information-general information merging method for acquiring and merging, which is a request destination of confidential information from an arbitrary terminal connected to the first closed network to the closed network-wide area network connection terminal. When a confidential information-general information merge request including the terminal identifiers of other terminals connected to the first closed network is transmitted,
A confidential information request for requesting confidential information of a terminal to which confidential information requested by the terminal identifier included in the request is sent, from the closed network-wide area network connecting terminal via the second closed network. Transmitting to the confidential information providing terminal, the first personal information which is the terminal identifier of the request destination terminal specified by the request and transmitted from the confidential information providing terminal in response to the confidential information request, and the request. A step of receiving confidential information including second personal information related to the request destination terminal other than the terminal identifier of the destination terminal; and extracting the second personal information from the received confidential information to obtain the second personal information. Transmitting a general information request including the general network information from the closed network-wide area network connection terminal to the general information providing terminal via the wide area network, and the general information in response to the general information request. A step of receiving general information acquired from the shared terminal to the closed area network-wide area network connection terminal by using the second personal information as a key, and the confidential information received from the confidential information request destination terminal. Merging information and general-purpose information received from the general-purpose information providing terminal at the closed network-wide area network connection terminal, and the merged information from the closed network-wide area network connection terminal to the confidential information- A method of merging confidential information-general information, comprising the step of transmitting to the request source terminal of the general information merging request via the first closed network. 6. A connection between a wide area network and a wide area network, to which a plurality of terminals including general purpose information providing terminals for providing general purpose information are connected, and a closed area network to which a plurality of predetermined terminals are connected. In a network system connected by terminals, in response to a confidential information-general information merge request given to the closed network-wide area network connection terminal from any terminal connected to the closed network, the confidential information designated by the request A program for the closed network-wide area network connection terminal to obtain and merge information and general-purpose information corresponding to the confidential information, wherein the closed network-wide area network connection terminal connects to the closed network. A confidential information-general information merge request including a terminal identifier of another terminal connected to the closed network to which the confidential information is requested is transmitted from the arbitrary terminal to the closed network-wide area network connection terminal. In the case of transmitting the confidential information request from the closed network-wide area network connecting terminal to the request destination terminal of the confidential information specified by the terminal identifier included in the request, the confidential information request is transmitted through the closed network. A second personal information which is transmitted from the request destination terminal in response to the confidential information request and is the terminal identifier of the request destination terminal and a second personal information other than the terminal identifier of the request destination terminal. Receiving the confidential information including the personal information, extracting the second personal information from the received confidential information, and issuing a general information request including the second personal information to the closed network-wide area network connection terminal. From the general-purpose information providing terminal to the general-purpose information providing terminal via the wide area network, and from the general-purpose information providing terminal to the closed network-wide area network connecting terminal in response to the general-purpose information request. Receiving the general information obtained using the second personal information as a key, the confidential information received from the confidential information requesting terminal and the general information received from the general information providing terminal, A step of merging at the wide area network connecting terminal, and the merged information from the closed area network-wide area network connecting terminal to the request source terminal of the confidential information-general information merge request via the closed area network. A program for executing the sending step and. 7. A closed network-wide area network that connects a wide area network to which a plurality of terminals including a general information providing terminal that provides general information is connected and a closed network to which a plurality of predetermined terminals are connected. A connection terminal which is connected to the closed network; a first transmission / reception means for transmitting / receiving information to / from the closed network; a second transmission / reception means for transmitting / receiving information to / from the wide area network; A confidential information-general information merge request including a terminal identifier of another terminal connected to the closed network to which confidential information is requested is transmitted from the arbitrary terminal to the closed network-wide area network connection terminal. When received by the first transmission / reception means, the request is accepted, and the confidential information request is sent to the request destination terminal of the confidential information designated by the terminal identifier included in the request. Confidential information transmitted by means- General-purpose information merge request reception means, and first personal information, which is a terminal identifier of the request destination terminal, transmitted from the request destination terminal to the closed network-wide area network connection terminal in response to the confidential information request. And a second related to the requested terminal other than the terminal identifier of the requested terminal
When the confidential information including the personal information is received by the first transmitting / receiving means, the second personal information is extracted from the confidential information, and the general information request including the second personal information is issued to the second personal information request. General-purpose information requesting means for transmitting and receiving to the general-purpose information providing terminal by transmitting and receiving means; and transmitting from the general-purpose information providing terminal to the closed network-wide area network connecting terminal in response to the general-purpose information request, When general information acquired using the second personal information as a key is received by the second transmitting / receiving unit, the confidential information received from the confidential information request destination terminal and the general information received from the general information providing terminal are combined. Merging means for merging and transmitting the merged information to the request source terminal of the confidential information-general information merging request by the first transmitting / receiving means. Characteristic closed network-wide area network connection terminal. 8. A group table in which terminal identifiers of all terminals or some terminals connected to the closed network are registered in advance in units of groups to which the terminals to which the terminals belong can mutually obtain personal information about the terminals. And a group management unit that manages the group table, the request source terminal of the confidential information-general information merge request accepted by the confidential information-general information merge request accepting unit, and the request included in the request. And a group management unit that authenticates the request source terminal by determining whether or not the requested terminal of the confidential information specified by the terminal identifier belongs to the same group based on the group table. The confidential information / general-purpose information merge request reception means receives the confidential information request when the authentication by the group management means is successful. The first private network according to claim 7, characterized in that transmitted by the transmitting means - wide area networks connecting terminals. 9. The confidential information-terminal identifier of a request source terminal of a general information merge request, the request source terminal and the closed network-
Storage means for storing a transaction table composed of an entry including an identifier of a session established for communication with a wide area network connection terminal and a terminal identifier of a terminal to which the confidential information is requested, and the transaction table Transaction management means for managing the confidential information, wherein when the confidential information transmitted from the request destination terminal in response to the confidential information request is received by the first transmission / reception means, the corresponding confidential information-general information merge request Further comprising transaction management means for generating a new entry including a terminal identifier of a request source terminal, a session identifier, and a terminal identifier of a request destination terminal for the confidential information, and adding the new entry to the transaction table, The terminal identifier of the request source terminal, which is the destination of the merged information, and the Using the session specified by the session identifier registered in the transaction table entry including the terminal identifier of the requested terminal of the confidential information corresponding to the merged information, the merged information is 8. The closed area network-wide area network connection terminal according to claim 7, wherein the terminal is transmitted by the first transmitting / receiving means.