JP2004320226A - Network phone system and exchange thereof, network phone terminal, and authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a network phone system or the like whereby security on a network can be strengthened in spite of a simple configuration. <P>SOLUTION: At initial installation, a master unit 3 acquires all MAC addresses from IP phone terminals 2-1 to 2-n connected to a LAN 1 and stores them to a storage section therein, and manages the MAC addresses and terminal IDs stored in the storage section in cross-reference with each other and informs the IP phone terminals 2-1 to 2-n about the terminal IDs to allow the IP phone terminals 2-1 to 2-n to register the terminal IDs. Then, when an access request is sent from the IP phone terminals 2-1 to 2-n to the LAN 1, the IP phone terminals 2-1 to 2-n transmit the MAC addresses and the terminal IDs to the master unit 3, and the master unit 3 checks proprieties of the IP phone terminals 2-1 to 2-n by utilizing the terminal IDs and the MAC addresses of the IP phone terminals 2-1 to 2-n stored in the master unit 3. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a network telephone system for connecting a plurality of network telephone terminals to a LAN (Local Area Network), and performing voice communication between the network telephone terminals and between the network telephone terminals and the public network, a switching device thereof, and a network. The present invention relates to a telephone terminal and an authentication method.
[0002]
[Prior art]
In a conventional private network system, for example, a voice communication terminal such as a telephone is accommodated in a private branch exchange (PBX) or a main unit as an extension terminal, and the extension terminal is connected to an external communication network such as a public network and to an extension terminal. A PBX or a main unit exchanges and connects the terminals to enable communication, or a data terminal such as a personal computer is connected to a LAN, and e-mail and data are transmitted between the data terminals via the LAN. Have been. Further, a system has been proposed in which a voice communication system using a PBX or a main device and a data communication system using a LAN are linked by using a gateway.
[0003]
In recent years, a network telephone terminal (IP (Internet Protocol) telephone terminal) having a call processing function and a media information processing function is connected to a LAN, and the LAN is connected to an external communication network such as a public network via a main device. However, a system has been proposed that enables communication between IP telephone terminals and between the IP telephone terminal and an external communication network by performing protocol conversion, data format conversion, and the like in the IP telephone terminal and the main device. (For example, Patent Documents 1 to 3).
[0004]
[Patent Document 1]
JP-A-10-271117.
[0005]
[Patent Document 2]
JP 2001-156846 A.
[0006]
[Patent Document 3]
JP-A-2001-298449.
[0007]
[Problems to be solved by the invention]
By the way, in the above system, wiring is completed by connecting the IP telephone terminal to the LAN connection port, so that there is an advantage that the wiring cost is reduced or the IP telephone terminal is easily moved. There is a problem in terms of security such that the service can be easily used using the Internet. For example, even if there is a connection port to the LAN even in a physically distant place, even if an IP telephone terminal is connected to the service and the service is used, the maintenance person must discover that the fraud has been performed. Is difficult.
[0008]
Therefore, in order to enhance security, it is conceivable to authenticate with a password or the like when connecting an IP telephone terminal or using a service. However, there is a major obstacle to improving convenience and ease of construction when using the service. It becomes.
[0009]
SUMMARY OF THE INVENTION An object of the present invention is to provide a network telephone system, a switching apparatus, and a network telephone system capable of enhancing security on a network with a simple configuration and improving the convenience and ease of construction when using a service. A terminal and an authentication method are provided.
[0010]
[Means for Solving the Problems]
The present invention is configured as follows to achieve the above object.
(1) Connecting a plurality of network telephone terminals assigned different fixed identifiers to a predetermined internal communication network, and connecting a switching device between the internal communication network and an external communication network different from the internal communication network. A network telephone system for selectively communicating between a plurality of network telephone terminals and / or between the network telephone terminal and an external communication network via an internal communication network and the switching device, The apparatus has an identifier acquiring means for acquiring a fixed identifier from a network telephone terminal connected to the internal communication network at the time of initial setting; an identifier recording means for recording the fixed identifier acquired by the identifier acquiring means in a storage device; The fixed identifier recorded in the device is Identifier management for managing a plurality of network telephone terminals to be connected to a work in association with vacant terminal identification information in a plurality of terminal identification information to be assigned, and for notifying the vacant terminal identification information to a corresponding network telephone terminal. Means for authenticating the network telephone terminal by comparing the fixed identifier received from the network telephone terminal at the time of the connection request with the fixed identifier managed on the storage device by the identifier management means; Control means for controlling the connection of the requested network telephone terminal based on the authentication result by the network telephone terminal. The network telephone terminal comprises: terminal identification information storage means for storing terminal identification information notified from the switching device; When an error occurs, the terminal identification information stored in the terminal identification information storage means and It is obtained by so and transmission means for transmitting the fixed identifier to the exchange apparatus.
[0011]
According to the invention of (1), at the time of initial setting, the switching device acquires all fixed identifiers from each network telephone terminal connected to the internal communication network, stores the fixed identifiers in the storage device, and stores the fixed identifiers in the storage device. The fixed identifier and the terminal identification information are managed in association with each other, and the terminal identification information is notified from the switching device to each network telephone terminal to register the terminal identification information. When a connection request is made, the network telephone terminal transmits a fixed identifier and terminal identification information to the switching device, so that each network telephone terminal can use the terminal identification information held by the switching device and the fixed identifier of the network telephone terminal to make it valid. Is checked. Therefore, it is possible to reliably judge the validity without performing the operation of inputting the password on the user side, and even if another user intentionally connects to the internal network to use the service, an unauthorized use of the service is performed. Is not performed.
[0012]
(2) The transmitting means of the network telephone terminal inserts terminal identification information and a fixed identifier into a predetermined information area in a predetermined control signal transmitted on the internal communication network when making a connection request, transmits the signal, and exchanges the information. The authentication means of the device performs authentication of the requesting network telephone terminal only when the terminal identification information and the fixed identifier are inserted in the determined information area in the control signal coming from the network telephone terminal. I do.
[0013]
According to the invention of (2), it is possible to request and execute the connection to the exchange using the existing control signal on the internal communication network. For this reason, there is no need to newly provide a signal line dedicated to connection authentication, and there is an advantage that it can be easily implemented.
[0014]
(3) When the information indicating the request for acquiring the terminal identification information is inserted into the determined information area in the control signal, the identifier management means of the switching device obtains the terminal identification information obtained at the time of acquiring the control signal. The fixed identifier assigned to the requesting network telephone terminal based on the information representing the request is managed in association with the vacant terminal identification information in the plurality of terminal identification information, and the vacant terminal identification information is managed by the requesting network telephone. The terminal is notified.
[0015]
According to the invention of (3), when it is desired to connect the network telephone terminal to the internal communication network, the information indicating the acquisition request of the terminal identification information is inserted into the determined information area in the existing control signal together with the fixed identifier. The network telephone terminal to be connected can be registered as an authorized network telephone terminal in the storage device by transmitting the information to the switching device and acquiring the information indicating the request for acquiring the terminal identification information on the switching device side.
[0016]
(4) When the plurality of network telephone terminals connected to the internal communication network include a specific network telephone terminal permitted to connect to the internal communication network without authentication, the control unit may control the communication from the specific network telephone terminal. When a connection request is issued, stop control is performed on the authentication means to connect the specific network telephone terminal to the internal communication network.
[0017]
(4) According to the present invention, for example, when connecting a maintenance network telephone terminal, it is possible to remove the authentication and connect to the maintenance network telephone terminal. Thereby, maintenance of the exchange device, data change setting, and the like can be easily performed.
[0018]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a schematic configuration diagram showing one embodiment of a network telephone system according to the present invention.
This system has LAN1. A plurality of IP telephone terminals 2-1 to 2-n (n is a natural number) are connected to the LAN 1. The main device 3 is connected to the LAN 1. The main device 3 is for connecting a plurality of IP telephone terminals 2-1 to 2-n connected on the LAN 1 and connecting between the LAN 1 and the public network 4, and connecting the LAN 1 and the public network 4. It has a function of converting communication protocols and signal formats between them. Further, an IP telephone terminal 6 in a remote office RO is connected to the LAN 1 via a private IP network 5.
[0019]
The main device 3 has the following functions as functions according to the present invention. FIG. 2 is a block diagram showing the functional configuration.
That is, the main device 3 includes a public network interface (I / F) unit 31, a LAN interface (I / F) unit 32, a packet relay unit 33, a control unit 34, and a storage unit 35. The public network interface unit 31, LAN interface unit 32, packet relay unit 33, control unit 34, and storage unit 35 are connected to each other via a data highway 36.
[0020]
The public network interface unit 31, the LAN interface unit 32, and the packet relay unit 33 are connected to each other via a PCM highway 37.
[0021]
The public network 4 is connected to the public network interface unit 31 as needed. The public network interface unit 31 performs interface processing between the connected public network 4 and the PCM highway 37. The public network interface unit 31 exchanges various control information related to the interface processing with the control unit 34 via the data highway 36.
[0022]
The LAN 1 is connected to the LAN interface unit 32 as needed. The LAN interface unit 32 performs an interface process between the connected LAN 1 and the PCM highway 37. The LAN interface unit 32 exchanges various control information related to the interface processing with the control unit 34 via the data highway 36.
[0023]
The packet relay unit 33 converts a voice signal received from the public network 4 into a voice packet that can be handled by the LAN 1 and sends it to the LAN 1, and converts a voice packet received from the LAN 1 into a voice signal that can be handled by the public network 4. And has a function of transmitting to the public network 4.
[0024]
The control unit 34 includes a CPU, a ROM, a RAM, and the like, and controls each unit of the main device 3 and controls connection between the LAN 1 and the public network 4 by software processing.
[0025]
The storage unit 35 stores routing information and the like necessary for connection control of the control unit 34, and further stores a terminal ID-MAC address correspondence table 351.
[0026]
The terminal ID-MAC address correspondence table 351 includes a MAC (Media Access Control) address as a fixed network address previously assigned to each of the IP telephone terminals 2-1 to 2-n, and a terminal ID to be assigned to use the LAN1. Data representing the correspondence is stored. FIG. 3 shows an example of the stored contents.
[0027]
On the other hand, the control unit 34 includes a MAC address acquisition function 341, a terminal ID-MAC address management function 342, an authentication function 343, and a connection control function 344.
[0028]
The MAC address acquisition function 341 acquires a MAC address from the IP telephone terminals 2-1 to 2-n connected to the LAN 1 at the time of initial installation, and records the MAC address in the storage unit 35.
[0029]
The terminal ID-MAC address management function 342 is a terminal ID-MAC address correspondence table 351 that associates all MAC addresses recorded in the storage unit 35 with terminal IDs to be assigned to the IP telephone terminals 2-1 to 2-n. And notifies these terminal IDs to the corresponding IP telephone terminals 2-1 to 2-n.
[0030]
The authentication function 343 converts the terminal ID and the MAC address received from each of the IP telephone terminals 2-1 to 2-n into the terminal ID and the MAC address in the terminal ID-MAC address correspondence table 351 at the time of the connection request other than the initial installation. Then, authentication of each of the IP telephone terminals 2-1 to 2-n is performed.
[0031]
The connection control function 344 controls connection of the requested IP telephone terminals 2-1 to 2-n based on the authentication result by the authentication function 343.
[0032]
On the other hand, each of the IP telephone terminals 2-1 to 2-n has the following functions as functions according to the present invention. FIG. 4 is a block diagram showing the functional configuration.
[0033]
The IP telephone terminals 2-1 to 2-n include a LAN interface (I / F) unit 21, an audio packet processing unit 22, an audio input / output interface (I / F) unit 23, a control unit 24, and an operation panel. 25 and a storage unit 26.
[0034]
The LAN interface unit 21 performs an interface operation relating to the LAN1. That is, the LAN interface unit 21 extracts a voice packet and control data from the transmission packet transmitted from the LAN 1, and provides the voice packet to the voice packet processing unit 22 and the control data to the control unit 24. The LAN interface unit 21 multiplexes the data provided from the control unit 24 with the voice packet supplied from the voice packet processing unit 22 and transmits the multiplexed data to the LAN 1.
[0035]
The voice packet processing unit 22 converts a voice packet supplied from the LAN interface unit 21 into an analog received voice signal and supplies the analog voice signal to the voice input / output interface unit 23. The voice packet processing unit 22 converts the transmission voice signal input from the voice input / output interface unit 23 into a voice packet that can be handled by the LAN 1 and provides the voice packet to the LAN interface unit 21.
[0036]
A microphone 26 and a speaker 27 are connected to the audio input / output interface unit 23. The voice input / output interface unit 23 inputs the transmission voice signal input from the microphone 26 to the voice packet processing unit 22, and outputs the reception voice signal output from the voice packet processing unit 22 from the speaker 27.
[0037]
The control unit 24 controls each unit of the IP telephone terminals 2-1 to 2-n by software processing based on various information stored in the storage unit 26, and communicates with the main device 3 via the LAN 1. Perform processing.
[0038]
The operation panel 25 has an input device such as a key switch group and a display device such as an LCD. The operation panel 25 receives various instruction inputs from the user to the control unit 24 and reports various information to the user under the control of the control unit 24. Perform
[0039]
The control unit 24 includes a terminal ID receiving function 241 and a terminal ID / MAC address transmitting function 242.
[0040]
The terminal ID receiving function 241 receives a response message sent from the main device 3 at the time of initial installation, extracts the terminal ID inserted into the payload portion of the received response message, and stores it in the storage unit 26.
[0041]
The terminal ID / MAC address transmission function 242 stores the terminal ID and MAC address stored in the storage unit 26 in a predetermined information area in a control packet to be transmitted to the main device 3 in response to a connection request operation by the user. And sends this control packet to the main device 3.
[0042]
Next, various operations of the system configured as described above will be described.
(Terminal connection operation)
At the time of initial installation, when the IP telephone terminal 2-1 is connected to the LAN 1 as shown in FIG. 5, the IP telephone terminal 2-1 has its own MAC address and terminal ID assigned to the payload portion of the IP packet as control data. An IP packet is transmitted to the main device 3 by inserting a code indicating that the IP packet is not present.
[0043]
Upon receiving the IP packet from IP telephone terminal 2-1, main device 3 receives a code indicating that the MAC address and the terminal ID are inserted in the payload portion of the IP packet or the terminal ID is not assigned. Determine whether it has been inserted. When a code indicating that the terminal ID is not assigned is inserted, the vacant terminal ID (200) stored in the storage unit 35 is searched, and the vacant terminal ID (200) is retrieved. The notification is made by inserting it into a response message to the IP telephone terminal 2-1.
[0044]
The main device 3 stores the MAC address notified from the IP telephone terminal 2-1 in the storage unit 35 and manages the MAC address in association with the idle terminal ID.
[0045]
On the other hand, the IP telephone terminal 2-1 extracts the terminal ID from the response message from the main device 3 and stores it in the storage unit 26.
[0046]
At the time of this initial installation, the control unit 34 of the main device 3 executes a control process shown in FIG. When the control process is started and an IP packet is received from IP telephone terminal 2-1 (step ST6a), control unit 34 determines whether or not a code indicating no MAC address and no terminal ID is inserted in the payload portion of the IP packet. Is determined (step ST6b). Here, if a code indicating no MAC address and no terminal ID is inserted (No), the control unit 34 rejects the connection and notifies the IP telephone terminal 2-1 that the connection cannot be made (step ST6c).
[0047]
On the other hand, if a code indicating that there is no MAC address and no terminal ID is inserted (Yes), the control unit 34 searches the storage unit 35 for a free terminal ID (step ST6d), and determines whether there is a free terminal ID. Is performed (step ST6e). Here, if there is a free terminal ID (Yes), the control unit 34 inserts the free terminal ID into the response message to notify the IP telephone terminal 2-1 (step ST6f), and further, the IP telephone terminal 2- And manages the MAC address of No. 1 and the empty terminal ID in association with each other (step ST6g).
[0048]
On the other hand, when there is no free terminal ID (No), the control unit 34 notifies the IP telephone terminal 2-1 that no connection can be established because there is no free terminal ID (step ST6h).
[0049]
(Terminal authentication operation)
As shown in FIG. 7, it is assumed that the user of the IP telephone terminal 2-1 has performed a connection request operation for connecting to the main device 3. Then, the IP telephone terminal 2-1 inserts the MAC address and the terminal ID (200) stored in the storage unit 26 into the payload portion of the IP packet, and transmits the IP packet to the main device 3.
[0050]
When the MAC address and the terminal ID are inserted in the payload portion, the main device 3 uses the terminal ID as a key and the MAC address and the MAC address stored in the terminal ID-MAC address correspondence table 351 of the storage unit 35. Compare and collate, and if matched, permit connection to IP telephone terminal 2-1.
[0051]
At the time of this connection authentication, the control unit 34 of the main device 3 executes a control process shown in FIG. When the control process is started and an IP packet is received from the IP telephone terminal 2-1 (step ST8a), the control unit 34 determines whether or not the MAC address and the terminal ID are inserted in the payload of the IP packet. (Step ST8b). Here, if the MAC address and the terminal ID are not inserted (No), the control unit 34 rejects the connection and notifies the IP telephone terminal 2-1 that the connection cannot be made (step ST8c).
[0052]
On the other hand, if the MAC address and the terminal ID are inserted (Yes), the control unit 34 compares the received MAC address and the terminal ID with the MAC address and the terminal ID stored in the storage unit 35, and thereby obtains the IP address. It is determined whether the telephone terminal 2-1 is legitimate (step ST8d). Here, if valid, the control unit 34 permits the connection of the IP telephone terminal 2-1 (step ST8e). On the other hand, if the terminal is an unauthorized IP telephone terminal, the control unit 34 refuses the connection of the IP telephone terminal 2-1 and notifies that the connection is not possible by a voice message or the like (step ST8f).
[0053]
(Operation to connect without authentication)
Now, it is assumed that an operation for connecting to the main device 3 is performed on the maintenance IP telephone terminal 6 in the remote office RO. In this case, the IP telephone terminal 6 inserts information indicating that connection is permitted without authentication into the payload portion of the IP packet, and transmits this IP packet to the main device 3 via the private IP network 5 and the LAN 1.
[0054]
Upon receiving the IP packet, the main device 3 first determines whether or not information indicating that connection is permitted without authentication is inserted into the payload portion of the packet. If the information indicating that the connection is permitted without authentication is inserted, the connection is permitted without performing authentication on the IP telephone terminal 6. This makes it possible to easily perform maintenance of the main unit 3 and change data settings.
[0055]
As described above, in the above-described embodiment, at the time of the initial installation, the main device 3 acquires all the MAC addresses from the IP telephone terminals 2-1 to 2-n connected to the LAN 1 and stores them in the storage unit 35. The MAC address and the terminal ID stored in the storage unit are managed in association with each other, and the terminal ID is notified from the main device 3 to each of the IP telephone terminals 2-1 to 2-n so that the terminal ID is registered. I have to. Thus, when the connection request of the IP telephone terminals 2-1 to 2-n to the LAN 1, the MAC address and the terminal ID are transmitted from the IP telephone terminals 2-1 to 2-n to the main device 3, whereby the main device 3 Using the held terminal ID and the MAC address of the IP telephone terminals 2-1 to 2-n, it is checked whether each of the IP telephone terminals 2-1 to 2-n is valid.
[0056]
Therefore, the validity can be reliably determined without performing the operation of inputting the password on the user side, and even if another user intentionally connects to the LAN 1 to use the service, the unauthorized use of the service is prevented. It can be prevented from being performed.
[0057]
Further, in the above embodiment, it is possible to request and execute the connection to the main device 3 using the existing control signal on the LAN 1. For this reason, there is no need to newly provide a signal line dedicated to connection authentication, which can be easily implemented.
[0058]
Further, in the above-described embodiment, at the time of initial installation, information indicating a request for acquiring a terminal ID is inserted into the determined information area in the existing control signal, that is, a payload portion, together with the MAC address, and the information is transmitted to the main device 3. By acquiring information indicating a terminal ID acquisition request on the main device 3 side, the IP telephone terminals 2-1 to 2-n to be connected can be registered in the storage unit 35 as regular IP telephone terminals.
[0059]
Further, in the above embodiment, when connecting the maintenance IP telephone terminal 6 in the remote office RO, the IP telephone terminal 6 can be connected without authentication. This makes it possible to easily perform maintenance of the main unit 3 and change data settings.
[0060]
Note that the present invention is not limited to the above-described embodiment. The system configuration, the type and configuration of the main device, the type and configuration of the IP telephone terminal, the control procedure of terminal connection and terminal authentication, and the contents thereof are described. Various modifications can be made without departing from the scope of the present invention.
[0061]
【The invention's effect】
As described above in detail, according to the present invention, a network telephone system which can enhance security on a network with a simple configuration, and which can improve convenience when using a service and ease of construction, and its exchange. An apparatus, a network telephone terminal, and an authentication method can be provided.
[Brief description of the drawings]
FIG. 1 is a schematic configuration diagram showing an embodiment of a network telephone system according to the present invention.
FIG. 2 is a block diagram showing a specific configuration of a main device shown in FIG.
FIG. 3 is a diagram showing an example of contents stored in a terminal ID-MAC address correspondence table shown in FIG. 2;
FIG. 4 is a block diagram showing a specific configuration of the IP telephone terminal shown in FIG. 1;
FIG. 5 is a sequence diagram for explaining a terminal connection operation at the time of initial installation in the system shown in FIG. 1;
6 is a flowchart illustrating a control procedure and control contents of a main device when performing the terminal connection operation illustrated in FIG. 5;
FIG. 7 is a sequence diagram for explaining a terminal authentication operation in the system shown in FIG. 1;
8 is a flowchart illustrating a control procedure and control contents of a main device when performing the terminal authentication operation illustrated in FIG. 7;
[Explanation of symbols]
1. LAN (Local Area Network),
2-1 to 2-n ... IP (Internet Protocol) telephone terminals,
3. Main device,
4 Public network,
5 Private IP network,
21, 32 ... LAN interface (I / F) part,
22 ... voice packet processing unit,
23 audio input / output interface (I / F) unit
24 ... Control unit,
25 ... Operation panel,
26 ... Microphone,
27 ... Speaker,
31 public network interface (I / F) unit
33 ... Packet relay unit,
34 ... control unit,
35 ... storage unit,
36 data highways,
37 ... PCM Highway,
341, MAC address acquisition function,
342: terminal ID-MAC address management function,
343: authentication function,
344: connection control function
351: Terminal ID-MAC address correspondence table.

Claims (7)

Connecting a plurality of network telephone terminals assigned different fixed identifiers to a predetermined internal communication network, connecting a switching device between the internal communication network and an external communication network different from the internal communication network, A network telephone system for selectively communicating between a plurality of network telephone terminals and / or between the network telephone terminal and the external communication network via the internal communication network and the switching device,
The exchange device,
At the time of initial setting, identifier acquisition means for acquiring the fixed identifier from a network telephone terminal connected to the internal communication network,
Identifier recording means for recording the fixed identifier acquired by the identifier acquisition means in the storage device,
The fixed identifier recorded in the storage device is managed in association with vacant terminal identification information in a plurality of terminal identification information to be respectively assigned to a plurality of network telephone terminals to be connected to the internal communication network. Identifier management means for notifying the identification information to the corresponding network telephone terminal;
By comparing the terminal identification information and the fixed identifier coming from the network telephone terminal at the time of the connection request other than the time of the initial setting with the terminal identification information and the fixed identifier managed on the storage device by the identifier management means, An authentication means for authenticating the network telephone terminal;
Control means for controlling connection of the requested network telephone terminal based on an authentication result by the authentication means,
The network telephone terminal,
Terminal identification information storage means for storing terminal identification information notified from the switching device,
A network telephone system, comprising: transmission means for transmitting terminal identification information stored in the terminal identification information storage means and the fixed identifier to the switching device when a connection request is issued. The transmitting means of the network telephone terminal, when making a connection request, inserts the terminal identification information and the fixed identifier into a predetermined information area in a predetermined control signal to be transmitted on the internal communication network, and transmits the information.
The authentication unit of the switching device performs authentication of the requesting network telephone terminal only when the terminal identification information and the fixed identifier are inserted in a predetermined information area in a control signal coming from the network telephone terminal. 2. The network telephone system according to claim 1, wherein the communication is performed. When information indicating a request to acquire the terminal identification information is inserted in a predetermined information area in the control signal,
The identifier management means of the switching device, the fixed identifier assigned to the requesting network telephone terminal based on the information representing the acquisition request of the terminal identification information obtained at the time of the acquisition of the control signal, in a plurality of terminal identification information 3. The network telephone system according to claim 2, wherein the network telephone system manages the unused terminal identification information in association with the empty terminal identification information and notifies the requesting network telephone terminal of the empty terminal identification information. When a plurality of network telephone terminals connected to the internal communication network include a specific network telephone terminal permitted to connect to the internal communication network without authentication,
The control means of the switching device, when a connection request is issued from the specific network telephone terminal, performs stop control on the authentication means to connect the specific network telephone terminal to the internal communication network. 2. The network telephone system according to claim 1, wherein Connecting a plurality of network telephone terminals assigned different fixed identifiers to a predetermined internal communication network, connecting a switching device between the internal communication network and an external communication network different from the internal communication network, Used in a network telephone system for selectively communicating between a plurality of network telephone terminals and / or between the network telephone terminal and the external communication network via the internal communication network and the switching device. An exchange device,
At the time of initial setting, identifier acquisition means for acquiring the fixed identifier from a network telephone terminal connected to the internal communication network,
Identifier recording means for recording the fixed identifier acquired by the identifier acquisition means in the storage device,
The fixed identifier recorded in the storage device is managed in association with vacant terminal identification information in a plurality of terminal identification information to be respectively assigned to a plurality of network telephone terminals to be connected to the internal communication network. Identifier management means for notifying the identification information to the corresponding network telephone terminal;
Authentication for authenticating the network telephone terminal by checking the fixed identifier received from the network telephone terminal at the time of a connection request other than the time of the initial setting with a fixed identifier managed on a storage device by the identifier management means. Means,
A switching unit for controlling the connection of the requested network telephone terminal based on the authentication result by the authentication unit. Connecting a plurality of network telephone terminals assigned different fixed identifiers to a predetermined internal communication network, connecting a switching device between the internal communication network and an external communication network different from the internal communication network, Used in a network telephone system for selectively communicating between a plurality of network telephone terminals and / or between the network telephone terminal and the external communication network via the internal communication network and the switching device. A network telephone terminal,
At the time of initial setting, terminal identification information storage means for storing terminal identification information notified from the switching device,
When a connection request is generated, the terminal identification information and the fixed identifier stored in the terminal identification information storage means and transmission means for transmitting the fixed identifier to the switching device,
A network telephone terminal, characterized in that the exchange device authenticates the received terminal identification information and the fixed identifier against the received terminal identification information and the fixed identifier held by the switching device. Connecting a plurality of network telephone terminals assigned different fixed identifiers to a predetermined internal communication network, connecting a switching device between the internal communication network and an external communication network different from the internal communication network, An authentication method for a network telephone system that selectively communicates between a plurality of network telephone terminals and / or between the network telephone terminal and the external communication network via the internal communication network and the switching device. So,
A first step of obtaining the fixed identifier from a network telephone terminal connected to the internal communication network in the switching device at the time of initial setting;
A second step of recording the fixed identifier acquired in the first step in a storage device;
The fixed identifier recorded in the storage device is managed in association with the vacant terminal identification information in the plurality of terminal identification information to be respectively assigned to the plurality of network telephone terminals to be connected to the internal communication network. A third step of notifying and storing the identification information in the corresponding network telephone terminal;
A fourth step of transmitting terminal identification information and the fixed identifier from the network telephone terminal to the switching device at the time of a connection request other than at the time of the initial setting;
The fourth step is to authenticate the network telephone terminal by comparing the terminal identification information and the fixed identifier received from the network telephone terminal with the terminal identification information and the fixed identifier managed on the storage device. The fifth process,
And a sixth step of controlling the connection of the requested network telephone terminal based on the result of the authentication in the fifth step.

Images