JP2006197046A - Radio lan access service system, radio lan access point, and method of authenticating both - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a radio LAN access service system in which an owner and a general user are distincted and a radio LAN access service system which can realize an access service to the Internet. <P>SOLUTION: An access point 2 checks an ESS-ID accessed from a user terminal 1, and the owner or the general user is distinguished. If the ESS-ID of the access point 2 belongs to the general user; a general user flag is set as the data transmitted to a server apparatus 3 of an internet provider, and an authentication request is transmitted. The server apparatus 3 on receipt of the authentication request with the general user flag, sends the screen for the general user authentication back to the access point 2 with the general user flag. The access point 2 deletes the general user flag from the received authentication screen, and it relays to the general user's terminal 1. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a wireless LAN access service system, a wireless LAN access point, an authentication method used therefor, and a program therefor, and more particularly to a method for accessing the Internet using a wireless LAN (Local Area Network).

  In recent years, broadband access using high-speed ADSL (Asymmetric Digital Subscriber Line), an optical network, and the like is progressing in general homes for access to the Internet. At the same time, home LAN is also popular, but since it takes time to construct a wired LAN, construction of a wireless LAN is also progressing in ordinary homes.

  As described above, it is said that access to the Internet from a general household using a wireless LAN by an individual is rapidly expanding. In addition, an end-user access environment based on a constant broadband connection such as high-speed ADSL and optical network has been established, and there is a surplus in Internet access for users in ordinary homes.

  In this wireless LAN, when accessing the Internet from a user terminal, the user terminal wirelessly accesses an access point installed in a general household and connects to the Internet via the access point. Yes.

  In the above-described access point, a technology (for example, refer to Patent Document 1) that incorporates an authentication server function for authenticating a user in the device, or an internal authentication terminal that authenticates in the device is authenticated by an external authentication server. A technique (see, for example, Patent Document 2) that is preferentially connected to an external terminal is proposed.

  On the other hand, the wireless LAN access service using an access point as an entrance to the Internet of the wireless LAN has also expanded its service range. As this wireless LAN access service, a method of providing a service by installing an access point in a conference room in a company has been proposed (for example, see Patent Document 3).

JP 2002-314549 A JP 2003-304254 A JP 2003-318991 A

  When trying to use a general wireless LAN access service as described above, it is necessary to become a member of an Internet service provider in advance and subscribe to a wireless LAN access service that can use the access point. Even if there is an open access point, it cannot be used immediately.

  In addition, since access points for wireless LAN access services are limited to places such as restaurants, hotel lobbies, corporate reception rooms, and conference rooms, wireless LAN is not available in areas such as streets and residential areas with few commercial facilities. There is also a problem that the access service cannot be used.

  Even in the method described in Patent Document 3, when a general user intends to use a hotspot service, he / she becomes a member of an Internet service provider in advance and subscribes to a wireless LAN access service that can use an access point in a conference room. Therefore, even if there is an open access point, it cannot be used immediately. Further, in the method described in Patent Document 3, use of an access point in an in-house facility such as a reception room, a conference room, and a meeting corner is assumed.

  Note that the methods described in Patent Documents 1 and 2 need to be a member of an Internet service provider and subscribe to a wireless LAN access service that can use the access point. Cannot be solved, it merely describes authentication methods and connection restrictions.

  Accordingly, an object of the present invention is to solve the above-mentioned problems and to distinguish between owners and general users to realize an access service to the Internet, a wireless LAN access service system, a wireless LAN access point, and the use thereof It is to provide an authentication method and a program thereof.

A wireless LAN access service system according to the present invention includes a wireless LAN (Local Area Network) access point that performs wireless communication with a user terminal and relays access to the Internet from the user terminal;
A discriminating means provided in the access point and discriminating use by an owner of the access point and use by a general user in an access request to the Internet from the user terminal;
Means for providing the access point and adding the determination result of the determination means to the access request for transmission;
Authentication means for authenticating whether or not to permit the access request to which the discrimination result is added as a regular user.

A wireless LAN access point according to the present invention is an access point of a personally owned wireless LAN (Local Area Network) that performs wireless communication with a user terminal and relays access to the Internet from the user terminal. ,
A discriminating means for discriminating use by an owner of the own device and use by a general user in an access request to the Internet from the user terminal;
Means for adding a determination result of the determination means to the access request and transmitting to the authentication means for authenticating whether or not the access request to which the determination result is added is authorized as a regular user.

The authentication method according to the present invention is used in a system including an access point of a personally owned wireless LAN (Local Area Network) that performs wireless communication with a user terminal and relays access to the Internet from the user terminal. Authentication method,
The access point determines a process for determining use by the owner of its own device and a use by a general user in an access request to the Internet from the user terminal, and a process for determining the use in the access request A process of transmitting a result to an authentication means for authenticating whether or not to permit the access request to which the determination result is added as an authorized user is executed.

  An authentication method program according to the present invention includes a wireless LAN (Local Area Network) access point that performs wireless communication with a user terminal and relays access to the Internet from the user terminal. A program for an authentication method used in the above-mentioned process, wherein the computer determines, in the access request to the Internet from the user terminal, the use by the owner of the own device and the use by the general user, and the access request And a process of transmitting to the authenticating means for authenticating whether or not the access request to which the determination result is added is permitted as a legitimate user is added. .

  That is, in the wireless LAN access service system of the present invention, a person unrelated to the owner of the access point uses the wireless LAN access service via the access point of the personally owned wireless LAN (Local Area Network). It is characterized by providing an environment that can be used to access the Internet without prior registration.

  In order to promote the use expansion of the wireless LAN access service, it can be considered that a method that can be used without prior registration and a method that can use many access points without specifying the use location are effective.

  In the wireless LAN access service system of the present invention, an access point that allows a general user to access a personal wireless LAN access point as an authorized user, and the access point owner's access point in cooperation with the access point. Provider authentication means for distinguishing between usage and general user usage.

  As a result, in the wireless LAN access service system of the present invention, it becomes possible for a general user to use an access point of a personally owned wireless LAN, and an Internet provider is an access point owner or an access by a general user. It is possible to distinguish between the owner and the general user, and it is possible to provide an Internet service.

  In the wireless LAN access service system of the present invention, by using this service, if there is an access point that can be used, it becomes possible to use the access point without performing prior registration. It is possible to open the access point used for others and use the wireless LAN access service even in a residential area where there are few commercial facilities providing general wireless LAN access services. .

  In the future, in the Internet environment, where more and more Internet access by mobile phones is expected, it will be possible to realize high-speed Internet access that enables access to wireless LAN from anywhere while walking with mobile phones. It is thought that there is a big effect on the spread.

  In other words, in the wireless LAN access service system of the present invention, a general wireless LAN can be used to access a personal access environment in a daytime where the individual user does not use the Internet so much, or in a broadband time. By constructing as an environment, a more convenient Internet usage environment can be realized.

  With the configuration and operation as described below, the present invention provides an effect that an Internet access service can be realized by distinguishing between owners and general users.

  Next, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing a configuration of a wireless LAN (Local Area Network) access service system according to an embodiment of the present invention. In FIG. 1, a wireless LAN access service system according to an embodiment of the present invention includes a user terminal 1 for a general user, an access point 2, a server device 3 for an internet provider, and an internet 100.

  The user terminal 1 of a general user can access the access point 2 of the wireless LAN and access the Internet 100 through the server device 3 of the Internet provider. The user terminal 1 is an information processing apparatus such as a personal computer and has a normal Internet access function and a function for accessing a wireless LAN access point 2.

  The access point 2 is a wireless network device that enables a general user terminal 1 to access the network by wireless. The access point 2 has an access control function that allows a general user to access wirelessly. The access point 2 is owned by the authentication function of the Internet provider server device 3 and the access control function of the access point 2. It is possible to make access to the Internet by distinguishing access by a general user and access by a general user.

  The server device 3 of the Internet provider has a function of recognizing that the communication is from a general user via the access point 2, the communication from the access point 2 is performed by this function, and the original possession of the access point 2 The service can be provided by distinguishing the access of the general user from the access of the general user.

  FIG. 2 is a block diagram showing a configuration example of the access point 2 of FIG. In FIG. 2, the access point 2 includes a CPU (central processing unit) 21, a main memory 22 storing a control program 22 a executed by the CPU 21, a storage device 23 used for processing in the CPU 21, and a user terminal 1. A wireless communication control unit 24 that controls wireless communication between the communication device and a communication control unit 25 that controls communication between the server device 3 of the Internet provider.

  The storage device 23 includes an ESS-ID holding unit 231 that holds an ESS-ID for checking an ESS-ID (Extended Service Set-IDentifier) from the user terminal 1, and a user terminal 1 and an Internet provider. An authentication information temporary holding unit 232 that temporarily holds authentication information exchanged with the server device 3 is provided. The CPU 21, main memory 22, storage device 23, wireless communication control unit 24, and communication control unit 25 are each connected to the internal bus 210.

  FIG. 3 is a sequence chart showing the operation of the wireless LAN access service system according to one embodiment of the present invention. The operation of the wireless LAN access service system according to one embodiment of the present invention will be described with reference to FIGS. Note that the processing of the access point 2 in FIG. 3 is realized by the CPU 21 executing the control program 22a.

  When an access request is issued from the user terminal 1 of a general user to the access point 2 (step S1 in FIG. 3), the access point 2 checks the accessed ESS-ID based on the content stored in the ESS-ID storage unit 231. Then, it is determined whether the user is an owner or a general user (step S11 in FIG. 3). It is assumed that the owner of the access point 2 sets the ESS-ID for use by a general user designated by the Internet provider in the ESS-ID holding unit 231 of the access point 2 in advance.

  If the ESS-ID is that of a general user, the access point 2 sets a general user flag in the data to be transmitted to the server device 3 of the Internet provider and transmits an authentication request (steps S12 and S13 in FIG. 3). When receiving the authentication request with the general user flag set, the server device 3 of the internet provider returns a general user authentication screen to the access point 2 with the general user flag set (step S31 in FIG. 3).

  The access point 2 temporarily holds the received authentication screen in the authentication information temporary holding unit 232 and relays it to the user terminal 1 of a general user. At this time, the access point 2 deletes the general user flag from the authentication screen data (step S14 in FIG. 3).

  The general user terminal 1 displays the authentication screen data from the access point 2 on the screen, and the necessary information (for example, the user name and password for logging in to the Internet provider) entered on the authentication screen is displayed on the Internet provider. To the server device 3 (step S2 in FIG. 3).

  The access point 2 temporarily holds the authentication screen received from the user terminal 1 of the general user in the authentication information temporary holding unit 232, adds a general user flag to the authentication data, and sends it to the server device 3 of the Internet provider. Is transmitted (step S15 in FIG. 3).

  When the Internet provider server device 3 receives the authentication data from the general user terminal 1 via the access point 2, it authenticates whether the general user is a legitimate user (step S22 in FIG. 3). The authentication result is returned to the access point 2 with a general user flag set (step S23 in FIG. 3).

  It is assumed that the general user is the same Internet provider as the owner of the access point 2 providing the access point 2 or an Internet provider affiliated with the Internet provider. If the general user is a member of an Internet provider different from the owner of the access point 2, this authentication fails and the Internet cannot be used.

  The access point 2 temporarily holds the authentication result data received from the server device 3 of the Internet provider in the authentication information temporary holding unit 232, deletes the general user flag, and relays it to the user terminal 1 of the general user ( FIG. 3 step S116). When the authentication result data indicates that access is denied, the access point 2 determines that the MAC (Media Access Control) address of the user terminal 1 of the general user is an inaccessible group, and thereafter, from the user terminal 1 of the general user. Access is denied (step S17 in FIG. 3).

  If the authentication result data indicates that the authentication is successful, the user terminal 1 of the general user can transmit and receive data for accessing the Internet 100 via the access point 2 and the server device 3 of the Internet provider (step S3 in FIG. 3). ). Between the access point 2 and the Internet provider 3 that mediate data transmission / reception, a general user flag is set on the transmitted / received data to identify the data transmission / reception of the owner of the access point 2 (FIG. 3). Steps S18 and S24).

As described above, in this embodiment, an environment in which the Internet 100 is used by using the access point 2 of the personally owned wireless LAN without prior registration for using the wireless LAN access service is provided to a third party. Can be made available.
Therefore, the Internet provider can distinguish between access by the owner of the access point 2 or access by a general user, and provides an Internet service by distinguishing between the owner of the access point 2 and a general user. can do.

  In this embodiment, by using the above-described service, if there is an access point 2 that can be used, the access point 2 can be used without pre-registration. The access point 2 can be opened to others, and the use of the wireless LAN access service can be developed even in a residential area where there are few commercial facilities providing a general wireless LAN access service.

  In the present embodiment, high-speed Internet access that can access a wireless LAN from anywhere while walking with a mobile phone can be realized in an Internet environment in which Internet access by a mobile phone is expected to become more frequent in the future. Therefore, the present embodiment is considered to have a great effect on the spread of the wireless LAN access service.

It is a block diagram which shows the structure of the wireless LAN access service system by one Example of this invention. It is a block diagram which shows the structural example of the access point of FIG. It is a sequence chart which shows operation | movement of the wireless LAN access service system by one Example of this invention.

Explanation of symbols

1 User terminal of general user 2 Access point 3 Server device of Internet provider 21 CPU
22 Main memory 22a Control program 23 Storage device 24 Wireless communication control unit 25 Communication control unit 100 Internet 210 Internal bus 231 ESS-ID holding unit 232 Authentication information temporary holding unit

Claims (13)

A wireless LAN (Local Area Network) access point that performs wireless communication with the user terminal and relays access to the Internet from the user terminal;
A discriminating means provided in the access point and discriminating between the use by the owner of the access point and the use by a general user in the access request to the Internet from the user terminal;
Means for providing the access point and adding the determination result of the determination means to the access request for transmission;
A wireless LAN access service system, comprising: an authentication unit that authenticates whether or not to permit the access request to which the determination result is added as a regular user.   The access point adds a general user flag indicating use by the general user to the authentication unit by adding a general user flag indicating use by the general user when the determination unit determines that the user uses the general access point. 2. The wireless LAN access service system according to claim 1, wherein transmission is performed.   2. The determination unit according to claim 1, wherein the determination unit checks an ESS-ID (Extended Service Set-IDentifier) from the user terminal to determine a use by the owner and a use by the general user. The wireless LAN access service system according to claim 2. The authentication means transmits the general user flag added to information related to authentication for the access request when the general user flag is added to the access request from the access point,
The access point deletes the general user flag added to the information from the authentication means and transmits it to the user terminal, adds the general user flag to the information from the user terminal, and 4. The wireless LAN access service system according to claim 2, wherein the wireless LAN access service system transmits to the authentication means. An access point of a personally owned wireless LAN (Local Area Network) that performs wireless communication with a user terminal and relays access to the Internet from the user terminal,
A discriminating means for discriminating use by an owner of the own device and use by a general user in an access request to the Internet from the user terminal;
A means for adding a determination result of the determination means to the access request and transmitting the access request to which the determination result is added to an authentication means for authenticating whether or not to authorize the access request as a regular user. A wireless LAN access point.   When the discrimination means discriminates use by a general user, a general user flag indicating use by the general user is added to an access request to the Internet from the user terminal and transmitted to the authentication means. The wireless LAN access point according to claim 5.   6. The determination unit according to claim 5, wherein the determination unit checks an ESS-ID (Extended Service Set-IDentifier) from the user terminal to determine a use by the owner and a use by the general user. The wireless LAN access point according to claim 6.   When the general user flag is added to the access request from the access point, the authentication unit deletes the general user flag added to the information related to authentication for the access request and transmits it to the user terminal 8. The wireless LAN access point according to claim 6 or 7, wherein the general user flag is added to information from the user terminal and transmitted to the authentication means. An authentication method used in a system including an access point of a personally owned wireless LAN (Local Area Network) that performs wireless communication with a user terminal and relays access to the Internet from the user terminal,
The access point determines a process for determining use by the owner of its own device and a use by a general user in an access request to the Internet from the user terminal, and a process for determining the use in the access request An authentication method, comprising: adding a result and transmitting the access request to which the determination result is added to an authentication unit for authenticating whether or not to permit the access request as a regular user.   When the access point is determined to be used by a general user in the process of determining the use, a general user flag indicating use by the general user is added to the Internet access request from the user terminal. The authentication method according to claim 9, wherein the authentication method is transmitted to the authentication unit.   The access point checks an ESS-ID (Extended Service Set-IDentifier) from the user terminal to determine use by the owner and use by the general user. The authentication method according to claim 10.   The access point deletes the general user flag added to information related to authentication for the access request when the authentication unit adds the general user flag to the access request from the access point. The authentication method according to claim 10 or 11, wherein the authentication method is transmitted to a user terminal, the general user flag is added to information from the user terminal, and the information is transmitted to the authentication unit. An authentication method program used in a system including an access point of a personally owned wireless LAN (Local Area Network) that performs wireless communication with a user terminal and relays access to the Internet from the user terminal. In the computer, a process for determining the use by the owner of the own device and a use by a general user in an access request to the Internet from the user terminal, and a process for determining the use in the access request A program for executing a process of adding a result and transmitting the access request to which the determination result is added to an authentication unit for authenticating whether or not to permit the access request as a regular user.

Images