JP2004040651A - Communication method, communication device, terminal equipment and communication service providing server - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a communication method with which high-grade communication services and security are provided on a wireless LAN. <P>SOLUTION: Terminal equipment 100 and an access server 300 set up a communication based upon a PPPoE protocol. Thus, a communication system performs management while making correspondent a user ID, a password and an IP address allocated to the terminal equipment 100. Therefore, high-grade communication services using the IP address are provided to every user. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention provides a terminal device, a first network including a wireless LAN access point, a second network including an authentication server and a communication service providing server, and a communication device that connects the first and second networks. The present invention relates to a communication method in a configured communication system.
[0002]
[Prior art]
2. Description of the Related Art In recent years, so-called hot spots, which are areas where a public wireless LAN (Local Area Network) can be used, have been installed in various places, and wireless high-speed Internet connection services have been provided.
[0003]
A wireless LAN system that provides such a communication service includes hardware-level authentication by prior registration of an SSID and a MAC (Media Access Control) address of a wireless LAN card, advance distribution of a hardware key, and IEEE802. Authentication is performed using a user ID and a password using 1x, and a communication service is provided to a terminal device such as a mobile phone or a personal computer. The wireless LAN system uses encrypted communication with a code length of 40 bits or 120 bits called WEP (Wired Equivalent Privacy) for security.
[0004]
[Problems to be solved by the invention]
The above-described conventional wireless LAN system can perform authentication using a user ID and a password by using an access point compatible with IEEE 802.1x.
[0005]
However, in IEEE 802.1x, it was difficult to associate a user ID with an IP address assigned to the user. Specifically, in a conventional wireless LAN system, a system in which a DHCP (Dynamic Host Configuration Protocol) server pays out an IP address to a terminal device every time the terminal device is connected is mainstream. That is, since the IP address is not fixedly assigned to the terminal device and changes for each connection, it is difficult to associate the user ID with the IP address assigned to the user. For this reason, it is difficult to realize a service provided to each user using an IP address, for example, a service for charging according to the amount of data received by the terminal device or a push-type service for calling the terminal device. Was. In addition, the WEP encrypted communication has been pointed out to be vulnerable, and has a security problem.
[0006]
The present invention has been made to solve the above problems, and an object of the present invention is to provide a communication method capable of providing advanced communication services and security in a wireless LAN.
[0007]
[Means for Solving the Problems]
To achieve the above object, the present invention provides a terminal device, a wireless LAN access point connected to a first network, and an authentication server connected to a second network. And a communication method in a communication system including a communication service providing server and a communication device connecting the first and second networks, wherein communication between the terminal device and the access point is established based on a first protocol. The communication between the access point and the communication device is established based on a second protocol, and the communication between the terminal device and the communication device is higher than the first and second protocols and the terminal device A third type capable of associating the user identification information and password with the IP address assigned to the terminal device. Protocol, and establishes communication between the terminal device and the second network based on a fourth protocol higher than the third protocol, wherein the communication service providing server includes a user of the terminal device. And providing a communication service to the terminal device based on the correspondence between the identification information and the password and the IP address assigned to the terminal device.
[0008]
Further, according to the present invention as set forth in claim 2, in the communication method, the terminal device and the access point establish communication based on a procedure of IEEE802.11a or IEEE802.11b; And the communication device establish communication with each other based on a procedure of Ethernet (registered trademark). The terminal device and the communication device establish communication with each other based on a PPPoE procedure. The network is characterized in that communication is established based on a TCP / IP procedure.
[0009]
Further, according to the present invention, in the communication method, in the communication method, the authentication server performs authentication of the terminal device, and the terminal device and the communication device determine a result of the authentication by the authentication server. Communication is established accordingly.
[0010]
According to a fourth aspect of the present invention, in the communication method, the communication device establishes communication with the terminal device in response to a request from the terminal device.
[0011]
According to a fifth aspect of the present invention, in the communication method, the communication device establishes communication with the terminal device in response to a request from the communication service providing server. .
[0012]
Further, according to the present invention as set forth in claim 6, in the communication method, the communication device transmits an identifier of a terminal device to the first network, and the terminal device assigns the identifier to itself. If the identifier is a given identifier, communication with the communication device is established.
[0013]
Further, according to the present invention as set forth in claim 7, in the communication method, the communication service providing server requests the communication device to transmit the identifier,
The communication device transmits the identifier in response to a request from the communication service providing server.
[0014]
Further, according to the present invention as set forth in claim 8, in the communication method, the authentication server manages a connection state of the terminal device, and the communication service providing server sends the terminal to the authentication server. It is characterized in that a connection state of the device is inquired, and a communication service is provided when communication between the terminal device and the second network is established.
[0015]
According to the present invention, there is provided a communication system for connecting a first network to which a wireless LAN access point is connected and a second network to which an authentication server and a communication service providing server are connected. The apparatus, wherein communication with the access point is established based on a first protocol, and communication with a terminal device connected to the access point is higher than the first protocol and the user of the terminal device is identified. Establishing a communication between the terminal device and the second network based on a second protocol capable of associating information and a password with an IP address assigned to the terminal device; It is characterized by comprising a communication establishing means for establishing based on a higher third protocol.
[0016]
According to a tenth aspect of the present invention, in the communication device, the communication establishing means establishes communication with the access point based on an Ethernet (registered trademark) procedure, and establishes a PPPoE procedure. The communication with the terminal device is established based on a TCP / IP procedure, and the communication between the terminal device and the second network is established based on a TCP / IP procedure.
[0017]
Further, according to the present invention, in the communication device, in the communication device, the communication establishing means establishes communication based on a PPPoE procedure in accordance with a result of authentication of the terminal device by the authentication server. It is characterized by doing.
[0018]
According to a twelfth aspect of the present invention, in the communication device, the communication establishing means transmits an identifier of a terminal device to the first network.
[0019]
Further, according to the present invention, an access point of a wireless LAN connected to a first network, an authentication server and a communication service providing server connected to a second network, And a communication device including a communication device connecting the second network, wherein a communication with the access point is established based on a first protocol, and a communication with the communication device is established with the first communication device. The second network is established based on a second protocol that is higher than a protocol and is capable of associating identification information and a password of a user of the terminal device with an IP address assigned to the terminal device. Communication establishment means for establishing communication with the third protocol based on a third protocol higher than the second protocol. The features.
[0020]
Further, according to the present invention, in the terminal device, in the terminal device, the communication establishing means establishes communication with the access point based on an IEEE 802.11a or IEEE 802.11b procedure, and establishes PPPoE communication. A communication with the communication device is established based on a procedure, and a communication with the second network is established based on a TCP / IP procedure.
[0021]
Further, according to the present invention as set forth in claim 15, in the terminal device, when the identifier of the terminal device is transmitted from the communication device, the identifier is assigned to itself. When the identifier is an identifier, communication with the communication device is established.
[0022]
According to another aspect of the present invention, there is provided a communication apparatus comprising: a communication device that connects a first network to which an access point of a wireless LAN is connected, and a second network to which an authentication server is connected. In a system, a communication service providing server for providing a communication service from the second network to a terminal device connected to the access point, wherein the communication between the communication device and the terminal device is identification information of a user of the terminal device. And when a password is established based on a first protocol capable of associating a password with an IP address assigned to the terminal device, providing a communication service to the terminal device based on the association. It is characterized by comprising service providing means.
[0023]
Further, according to the present invention, in the communication service providing server, the service providing unit requests the communication device to establish communication with the terminal device. .
[0024]
Further, according to the present invention, in the communication service providing server, the communication service providing unit requests the communication device to transmit the identifier.
[0025]
According to a nineteenth aspect of the present invention, in the communication service providing server, the communication service providing unit inquires of the authentication server about a connection state of the terminal device.
[0026]
According to the present invention, communication between the terminal device and the communication device is established based on a protocol capable of associating the identification information and the password of the user of the terminal device with the IP address assigned to the terminal device. It is possible to provide an advanced communication service using an IP address to each user. In particular, by adopting PPPoE defined by RFC2516 as a connection protocol of Asymmetric Digital Subscriber Line (ADSL) service and Fiber To The Home (FTTH) service, the communication system can provide a user's identification information (user ID) and password, and a terminal. It is possible to manage the IP address assigned to the device in association with the IP address. Since ECP, which is an upper protocol of PPPoE, can be adopted, encrypted communication with higher security than WEP can be performed.
[0027]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a diagram illustrating a configuration example of a communication system according to an embodiment of the present invention. The communication system shown in FIG. 1 is connected to a terminal device 100 such as a mobile phone or a personal computer, which is movable, and connected to the first network 700, and is connected to the terminal device 100 by a wireless link 600 so that the terminal device 100 An access point 200 that provides a wireless interface with the first network 700, an access server 300 that connects the first network 700 and the second network 800, and provides a function of authentication and calling the terminal device 100; An authentication server 400 that is connected to the second network 800 and performs user authentication, and a calling server 500 that is also connected to the second network 800 and serves as a communication service providing server that calls the communication terminal 100 is provided.
[0028]
FIG. 2 is a diagram illustrating a protocol stack of the communication system according to the present embodiment. As shown in the figure, the terminal device 100 and the access point 200 establish communication based on the procedure of IEEE802.11a or IEEE802.11b, and the access point 200 and the access server 300 are connected to the Ethernet (registered trademark). Communication is established based on the procedure of Ethernet (registered trademark). In addition, the terminal device 100 and the access server 300 establish communication based on the PPPoE procedure above IEEE802.11a or IEEE802.11b and Ethernet (registered trademark). The access server 300 and the authentication server 400 and the call server 500 in the second network 800 establish communication based on the Ethernet (registered trademark) procedure. Furthermore, the terminal device 100 and the authentication server 400 and the calling server 500 in the second network 800 establish communication based on a TCP / IP procedure.
[0029]
FIG. 3 is a diagram illustrating a configuration example of the terminal device 100. The terminal device 100 shown in FIG. 1 includes a network interface 105 and a PPPoE processing unit 110. The network interface 105 establishes communication with the access point 200 based on the procedure of IEEE 802.1a or IEEE 802.1b. Specifically, the network interface 105 transmits the SSID to the access point 200. When the SSID matches the SSID set in the access point 200, communication between the terminal device 100 and the access point 200 is established.
[0030]
The PPPoE processing unit 110 establishes communication with the access server 300 based on the procedure of the PPPoE protocol. Specifically, the PPPoE processing unit 110 performs link setting and selection of an authentication method according to LCP which is a link control protocol in PPPoE, and also includes a user ID and a password which are information necessary for authentication according to the authentication method. To the access server 300. When receiving a broadcast packet (call signal) transmitted from access server 300 described later, PPPoE processing section 110 stores an identifier (for example, a telephone number) included in the call signal and its own identifier. Compare. If they match, in the same manner as described above, a link is set by the LCP and an authentication method is selected, and a user ID and a password, which are information necessary for authentication according to the authentication method, are accessed. Send it to server 300.
[0031]
FIG. 4 is a diagram illustrating a configuration example of the access server 300. The access server 300 shown in the figure includes a network interface 305, a call processing unit 310, a PPPoE processing unit 315, a relay processing unit 320, an authentication processing unit 325, and a network interface 330.
[0032]
The network interface 305 establishes communication with the first network 700 and the access point 200 connected to the first network 700 based on the procedure of the Ethernet (registered trademark) protocol. The network interface 330 establishes communication with the second network 800 and the authentication server 400 and the calling server 500 connected to the second network 800 based on the procedure of the Ethernet (registered trademark) protocol.
[0033]
When receiving a call request including the identifier of the terminal device 100 transmitted from the call server 500, the call processing unit 310 transmits a broadcast packet (call signal) including the identifier, and After the device 100 is called up and an IP address is paid out by the authentication processing unit 325 described later, a notification (calling completion notification) indicating that communication between the terminal device 100 and the second network 800 has been established is returned to the calling server 500. .
[0034]
The PPPoE processing unit 315 establishes communication with the terminal device 100 based on the procedure of the PPPoE protocol. The relay processing unit 320 performs a relay process of an IP datagram exchanged between the terminal device 100 and the second network 800.
[0035]
The authentication processing unit 325 transmits the authentication information including the user ID and the password transmitted from the terminal device 100 to the authentication server 400. When the authentication server 400 has transmitted a notification to the effect that establishment of communication with the terminal device 100 is permitted as a response to the authentication information, the authentication processing unit 325 transmits the notification of the communication with the terminal device 100 by the PPPoE processing unit 315. The establishment is permitted, and the IP address is paid out to the terminal device 100 after the communication is established by the PPPoE processing unit 315. By issuing the IP address, communication between the terminal device 100 and the second network 800 is established based on the TCP / IP procedure. After that, the authentication processing unit 325 transmits, to the authentication server 400, accounting information in which the paid out IP address is associated with the user ID and the password of the payout destination terminal device 100.
[0036]
FIG. 5 is a diagram illustrating a configuration example of the authentication server 400. The authentication server 400 shown in the figure includes a RADIUS protocol processing unit 405, a user information management unit 410, and a network interface 415.
[0037]
The network interface 415 establishes communication with the second network 800 and the access server 300 and the calling server 500 connected to the second network 800 based on the procedure of the Ethernet (registered trademark) protocol.
[0038]
The user information management unit 410 stores the user ID, the password, and the identifier of the terminal device 100 in association with each other. In addition, every time the accounting information is transmitted from the access server 300, the user information management unit 410 determines, from the stored user ID and password, a user ID and password that match the user ID and password included in the accounting information. The search is performed, and the matching user ID, password, and identifier are associated with the IP address included in the accounting information and stored.
[0039]
Further, when the connection status request including the identifier of the terminal device 100 is transmitted from the calling server 500, the user information management unit 410 determines whether or not the identifier is associated with the IP address and stored, in other words, For example, the access server 300 determines whether an IP address has been issued to the terminal device 100 corresponding to the identifier. If the identifier is associated with the IP address and stored, the user information management unit 410 returns a response indicating that communication between the terminal device 100 and the second network 800 has been established based on the TCP / IP procedure. return it. On the other hand, if the identifier included in the connection status request is not stored in association with the IP address, the user information management unit 410 performs communication between the terminal device 100 and the second network 800 based on the TCP / IP procedure. Returns a response indicating that is not established.
[0040]
When the authentication information is transmitted from the access server 300, the RADIUS protocol processing unit 405 determines the combination of the user ID and the password included in the authentication information and the combination of the user ID and the password stored in the user information management unit 410. Are compared, and if there is a matching combination, a response to the effect that the establishment of communication is permitted is returned to the access server 300.
[0041]
FIG. 6 is a diagram illustrating a configuration example of the calling server 500. The call server 500 shown in the figure includes a call processing unit 505 and a network interface 510.
[0042]
The network interface 510 establishes communication with the second network 800 and the access server 300 and the authentication server 400 connected to the second network 800 based on the procedure of the Ethernet (registered trademark) protocol.
[0043]
The call processing unit 505 transmits a connection status request including the identifier of the terminal device 100 to the authentication server 400. If the response to the connection state request is a response indicating that communication between the terminal device 100 and the second network 800 based on the TCP / IP procedure has not been established, the call processing unit 505 Then, a call request including the identifier of the terminal device 100 is transmitted to the access server 300. Further, the call processing unit 505 receives a call completion notification transmitted from the access server 300 as a response to the call request.
[0044]
Next, the operation of the communication system according to the present embodiment will be described. FIG. 7 is a sequence diagram illustrating an operation of the communication system when the terminal device 100 requests a connection.
[0045]
The terminal device 100 and the access point 200 establish communication based on the IEEE 802.1a or IEEE 802.1b procedure (step 101). Specifically, when the terminal device 100 enters the hot spot, the terminal device 100 transmits the SSID to the access point 200. When the SSID matches the SSID set in the access point 200, communication between the terminal device 100 and the access point 200 is established.
[0046]
Next, the terminal device 100 and the access server 300 perform setting of a link using LCP, which is a link control protocol in PPPoE, and selection of an authentication method (step 102). The terminal device 100 transmits a user ID and a password, which are information necessary for authentication according to the selected authentication method, and the access server 300 receives the user ID and the password (Step 103).
[0047]
The access server 300 transmits the received authentication information including the user ID and the password. The authentication server 400 determines whether to allow the establishment of the communication based on the user ID and the password in the authentication information, and if so, returns a notification to that effect to the access server 300 (step 104). ).
[0048]
The access server 300 pays out the IP address to the terminal device 100 when the establishment of communication is permitted by the authentication server 400 (step 105). Further, the access server 300 transmits, to the authentication server 400, accounting information in which the paid out IP address is associated with the user ID and password of the payout destination terminal device 100 (step 106).
[0049]
FIG. 8 is a sequence diagram showing the operation of the communication system when the calling server 500 requests a connection.
[0050]
The terminal device 100 and the access point 200 establish communication based on the procedure of IEEE 802.1a or IEEE 802.1b (step 201). Specifically, similarly to step 101 in FIG. 7 described above, when the terminal device 100 enters the hot spot, the terminal device 100 transmits the SSID to the access point 200. When the SSID matches the SSID set in the access point 200, communication between the terminal device 100 and the access point 200 is established.
[0051]
On the other hand, the calling server 500 transmits a connection state request including the identifier of the terminal device 100 to the authentication server 400. The authentication server 400 specifies the terminal device 100 based on the identifier included in the connection status request, and determines the connection status of the terminal device 100 (the connection between the terminal device 100 and the second network 800 based on the TCP / IP procedure). Is returned to the calling server 500 (step 202).
[0052]
If the call server 500 is notified by the authentication server 400 that communication between the terminal device 100 and the second network 800 based on the TCP / IP procedure has not been established, the call server 500 includes the identifier of the terminal device 100. An outgoing call request is transmitted to access server 300 (step 203).
[0053]
Access server 300 transmits a broadcast packet (call signal) including the identifier in the received call request via access point 200 (steps 204 and 205).
[0054]
When receiving the call signal, the terminal device 100 compares an identifier (for example, a telephone number) included in the call signal with its own identifier. If they match, the terminal device 100 and the access server 300 set up a link and select an authentication method using LCP, which is a link control protocol in PPPoE (step 206).
[0055]
The operations of Steps 207 to 210 are the same as the operations of Steps 103 to 106 in FIG.
[0056]
Next, the access server 300 returns to the calling server 500 a notification that the communication between the terminal device 100 and the second network 800 has been established (calling completion notification) (step 211). Thereafter, the calling server 500 transmits a connection state request including the identifier of the terminal device 100 to the authentication server 400. The authentication server 400 specifies the terminal device 100 based on the identifier included in the connection status request, and returns the connection status of the terminal device 100 to the calling server 500 (Step 212).
[0057]
After the operation shown in FIG. 7 or FIG. 8 ends, the calling server 500 can perform information distribution to the terminal device 100 using TCP / IP.
[0058]
As described above, in the present embodiment, by employing PPPoE for communication between the terminal device 100 and the access server 300, the communication system can determine the user ID and password of the terminal device 100 and the IP address assigned to the terminal device 100. The associated management becomes possible. In addition, since ECP, which is a higher-level protocol of PPPoE, can be employed, encrypted communication with higher security than WEP can be performed.
【The invention's effect】
As described above, according to the present invention, communication between a terminal device and a communication device is performed based on a protocol capable of associating identification information and a password of a user of the terminal device with an IP address assigned to the terminal device. Because it is established, it is possible to provide an advanced communication service using an IP address to each user. In particular, by adopting PPPoE defined by RFC2516 as a connection protocol of the ADSL service and the FTTH service, the communication system manages the user's identification information (user ID) and password in association with the IP address assigned to the terminal device. Becomes possible. Since ECP, which is an upper protocol of PPPoE, can be adopted, encrypted communication with higher security than WEP can be performed.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating a configuration example of a communication system.
FIG. 2 is a diagram illustrating a protocol stack of the communication system.
FIG. 3 is a diagram illustrating a configuration example of a terminal device.
FIG. 4 is a diagram illustrating a configuration example of an access server.
FIG. 5 is a diagram illustrating a configuration example of an authentication server.
FIG. 6 is a diagram illustrating a configuration example of a calling server.
FIG. 7 is a sequence diagram showing an operation of the communication system when a terminal device requests a connection.
FIG. 8 is a sequence diagram showing an operation of the communication system when a calling server requests a connection.
[Explanation of symbols]
100 terminal device
105, 305, 330, 415, 510 Network interface
110,315 PPPoE processing unit
200 access points
300 access server
310, 505 Call processing unit
320 Relay processing unit
325 Authentication processing unit
400 Authentication server
405 RADIUS protocol processing unit
410 User information management unit
500 calling server
600 wireless links
700 First Network
800 Second Network

Claims (19)

A terminal device, a wireless LAN access point connected to a first network, an authentication server and a communication service providing server connected to a second network, and a communication device connecting the first and second networks. In a communication method in a configured communication system,
Establishing communication between the terminal device and the access point based on a first protocol;
Establishing communication between the access point and the communication device based on a second protocol;
Making the communication between the terminal device and the communication device higher than the first and second protocols and associating the identification information and the password of the user of the terminal device with the IP address assigned to the terminal device; Is established based on a third protocol capable of
Establishing communication between the terminal device and the second network based on a fourth protocol higher than the third protocol;
The communication method, wherein the communication service providing server provides a communication service to the terminal device based on an association between identification information and a password of a user of the terminal device and an IP address assigned to the terminal device. . The communication method according to claim 1,
The terminal device and the access point establish communication based on a procedure of IEEE802.11a or IEEE802.11b,
The access point and the communication device establish communication based on an Ethernet (registered trademark) procedure,
The terminal device and the communication device establish communication based on a PPPoE procedure,
A communication method, wherein communication is established between the terminal device and the second network based on a TCP / IP procedure. The communication method according to claim 2,
The authentication server performs authentication of the terminal device,
A communication method, wherein the terminal device and the communication device establish communication according to a result of authentication by the authentication server. The communication method according to any one of claims 1 to 3,
The communication method, wherein the communication device establishes communication with the terminal device in response to a request from the terminal device. The communication method according to any one of claims 1 to 4,
The communication method, wherein the communication device establishes communication with the terminal device in response to a request from the communication service providing server. The communication method according to any one of claims 1 to 5,
The communication device transmits an identifier of a terminal device to the first network,
The communication method, wherein the terminal device establishes communication with the communication device when the identifier is an identifier assigned to the terminal device. The communication method according to claim 6,
The communication service providing server requests the communication device to transmit the identifier,
The communication method, wherein the communication device transmits the identifier in response to a request from the communication service providing server. The communication method according to any one of claims 1 to 7,
The authentication server manages a connection state of the terminal device,
The communication service providing server inquires of the authentication server about a connection state of the terminal device, and provides a communication service when communication between the terminal device and the second network is established. Communication method. In a communication apparatus for connecting a first network to which an access point of a wireless LAN is connected and a second network to which an authentication server and a communication service providing server are connected,
Establish communication with the access point based on a first protocol, and establish communication with a terminal device connected to the access point higher than the first protocol, and identification information and a password of a user of the terminal device And a second protocol capable of associating the terminal device with an IP address assigned to the terminal device, and establishes communication between the terminal device and the second network at a higher level than the second protocol. A communication device, comprising: a communication establishing unit that establishes the communication based on a third protocol. The communication device according to claim 9,
The communication establishing means establishes communication with the access point based on a procedure of Ethernet (registered trademark), establishes communication with the terminal apparatus based on a procedure of PPPoE, and establishes a communication based on a procedure of TCP / IP. A communication device for establishing communication between the terminal device and the second network. The communication device according to claim 10,
The communication device, wherein the communication establishing means establishes communication based on a PPPoE procedure in accordance with a result of authentication of the terminal device by the authentication server. The communication device according to any one of claims 9 to 11,
The communication device, wherein the communication establishing means transmits an identifier of a terminal device to the first network. A communication system comprising: a wireless LAN access point connected to a first network; an authentication server and a communication service providing server connected to a second network; and a communication device connecting the first and second networks. Terminal device connected to
Establishing communication with the access point based on a first protocol, and allocating communication with the communication device to the terminal device at a higher level than the first protocol and identifying the user's identification information and password of the terminal device; Communication that establishes based on a second protocol capable of associating with a given IP address, and establishes communication with the second network based on a third protocol higher than the second protocol. Means of establishment;
A terminal device comprising: The terminal device according to claim 13,
The communication establishing means establishes communication with the access point based on an IEEE 802.11a or IEEE 802.11b procedure, establishes communication with the communication device based on a PPPoE procedure, and establishes a TCP / IP procedure. A terminal device for establishing communication with the second network based on the terminal device. The terminal device according to claim 13 or 14,
The communication establishing means, when an identifier of a terminal device is transmitted from the communication device, if the identifier is an identifier assigned to the terminal device, establishes communication with the communication device. Terminal device. In a communication system including a first network to which an access point of a wireless LAN is connected and a communication device for connecting to a second network to which an authentication server is connected, a connection is made from the second network to the access point. Communication service providing server for providing a communication service to the terminal device to be
Communication between the communication device and the terminal device is established based on a first protocol capable of associating identification information and a password of a user of the terminal device with an IP address assigned to the terminal device. A communication service providing server, comprising: a service providing unit that provides a communication service to the terminal device based on the association. The communication service providing server according to claim 16,
The communication service providing server, wherein the service providing unit requests the communication device to establish communication with the terminal device. The communication service providing server according to claim 17,
The communication service providing server, wherein the communication service providing unit requests the communication device to transmit the identifier. The communication service providing server according to claim 16, wherein:
The communication service providing server, wherein the communication service providing unit inquires the authentication server about a connection state of the terminal device.

Images