JP2006246359A - Temporary vpn service offering method, vpn system, vpn apparatus, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system in which a VPN service can be utilized at low cost as desired. <P>SOLUTION: The VPN apparatus accepts a temporary utilization application for utilization of a VPN service from a user terminal connected via an IP network. Based on the utilization application, the VPN apparatus appropriately performs charging processing and furthermore, performs setting registration of a user ID and user ID validity. Continuously, the VPN apparatus performs automatic setting so that the user terminal can utilize a VPN. At this stage, an input of the user ID is accepted and authenticated and then, the VPN can offer the VPN service. The VPN apparatus inspects the validity of each user ID at a predetermined time interval and cancels contents set to the user ID whose validity has expired. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a method for providing a virtual private network (VPN) service, a VPN system, a VPN apparatus, and a program, and more particularly, to a technique for providing a VPN service with a deadline.

  With the diversification of additional services provided by Internet service providers, such as acquisition of unique domains and setting of fixed IP addresses, a low-cost WAN (Wide Area Network) that ensures security without having to prepare equipment on its own ), VPN services that enable the construction of intranet environments are widespread. For example, Patent Document 1 introduces a VPN system for connecting a mobile terminal to a specific LAN (Local Area Network) using VPN technology.

JP 2002-111732 A

  However, the use of the above VPN service requires a contract with a provider (ISP) and various procedures in advance, and it is not possible to use it even when wireless LAN hotspots and Internet cafes are widely used. There was an inconvenience.

  In addition, even if it is possible to use the VPN service in practice, an initial cancellation fee may be required in addition to the initial cost, so in the case of temporary use, there is a cost for the period of use. There is another problem that it ends up.

  The present invention has been made in view of the above circumstances, and provides a VPN service providing method, a VPN system, a VPN apparatus, and a program that can be used at a low cost when the VPN service is desired. The purpose is to provide.

  According to a first aspect of the present invention, there is provided a VPN service providing method using a VPN device that provides a VPN service. The VPN service accepts an application for use of the VPN service and can immediately use the VPN service. A providing method is provided. According to this method, first, a VPN device accepts a temporary use application for use of a VPN service from a user terminal connected via an IP network, and the VPN device receives a user based on the use application. A setting processing step including performing setting registration of the expiration date of the ID and the user ID and performing automatic setting so that the user terminal can use the VPN is performed. After that, the VPN apparatus performs a VPN service providing step of providing a VPN service after receiving and authenticating at least a user ID from a user terminal. Then, the VPN apparatus confirms the expiration date of each user ID at a predetermined time interval, and performs a setting cancellation process for canceling the contents set for the user ID whose expiration date has expired.

Further, according to the second aspect of the present invention, there are provided a VPN system, a VPN apparatus, a terminal, and a program mounted thereon for implementing the VPN service providing method.

  According to the present invention, it is possible to quickly provide a VPN environment suitable not only for use by an individual user or SOHO but also for use from a hotel, an Internet cafe, or the like.

  Next, the best mode for carrying out the present invention will be described in detail with reference to the drawings. FIG. 1 is a diagram showing the configuration of a VPN system according to the first embodiment of the present invention. Referring to FIG. 1, the embodiment of the present invention includes user terminals 1 a and 1 b, a VPN device 2 installed by a provider (ISP) or the like, and an IP network 3. The terminals 1a and 1b and the VPN apparatus 2 are connected to each other.

  Each of the user terminals 1a and 1b is equipped with a web browser and can access the VPN use application content of the VPN apparatus 2. In addition, the VPN device 2 is equipped with a program that constitutes a setting processing unit, a VPN service providing unit, and a setting canceling unit, and a user information database or an authentication server (not shown) that stores user information in a provider (ISP) or the like. To the user terminals 1a and 1b, it is possible to set the VPN environment and provide the VPN service.

  FIG. 2 is a diagram showing a detailed configuration of the VPN apparatus 2 according to the first embodiment of the present invention. Referring to FIG. 2, the VPN apparatus 2 includes a setting processing unit 210, a VPN service providing unit 220, and a setting cancellation unit 230.

  The setting processing unit 210 receives an application for accepting temporary use regarding the use of the VPN service from the user terminals 1a and 1b according to the VPN use application content, and issues user registration, issuance of a time-limited ID, and automatic setting of the VPN environment. And an automatic setting unit 212 that performs the above and the like.

  The VPN service providing unit 220 performs authentication by requesting input of a user ID and a password from the user terminals 1a and 1b, and provides the VPN service to the user terminals 1a and 1b that have been successfully authenticated.

  The setting canceling unit 230 executes a regular process, which will be described later, at predetermined time intervals, and executes a process for canceling the contents set for the expired user ID.

  Next, the operation of this embodiment will be described with reference to the flowchart of FIG. First, a user who wants to provide a VPN environment uses user information (user) provided by a provider (ISP) or the like that installs the VPN apparatus 2 using SSL (Secure Sockets Layer) communication or the like in the user terminal 1a (1b). ID, password, etc.) are transmitted (step S101).

  The VPN device 2 inquires about the validity of the user ID and password, refers to the user information database, inquires about the setting state of the additional service of the user ID, and transmits it to the user terminal 1a (1b) (step S201). . If this answer is already set for VPN use (Yes in step S102), a VPN use screen is displayed on the user terminal (step S104).

  On the other hand, when the VPN use setting is not made (No in step S102), the VPN use setting request screen is displayed on the user terminal 1a (1b) from the application reception unit 211 of the VPN device 2, and the user wishes to use it. A period, the number of users (members), a use name (group name) for use by a plurality of members, etc. are transmitted (step S103). Upon receiving these pieces of information, the application receiving unit 211 of the VPN apparatus 2 executes a VPN environment automatic setting process (step S202). This automatic setting process will be described in detail later.

  When the use setting of the VPN has been completed for the corresponding user, information such as the VPN setting status, user ID, password, etc. is displayed on the user terminal 1a (1b) (step S104). Thus, the use of the VPN service is started (step S105).

  Next, the detailed operation of the VPN apparatus 2 in step 202 described above will be described with reference to FIG. First, the automatic setting unit 212 of the VPN apparatus 2 generates a user ID and the like based on a VPN use setting request in which a use group name and the like when using a plurality of members is desired, and stores it in a user information database. Register (step S203). Here, when the user requests to use the VPN environment with a plurality of members, the automatic setting unit 212 associates the plurality of members with the designated group name.

  Subsequently, the automatic setting unit 212 of the VPN apparatus 2 generates setting information for performing automatic setting of the VPN environment (step S204), and uses this setting information to perform a remote setting function via an external interface, for example. The automatic setting is performed so that the VPN can be used (step S205). Here, when the user requests the use of the VPN environment by a plurality of members, the automatic setting unit 212 changes the VPN tunnel between the user terminal (for example, the user terminal 1a) belonging to the same group and the VPN apparatus 2 to the other. The VPN tunnel between the user terminal (for example, the user terminal 1b) and the VPN device 2 is associated, and automatic setting processing is performed so that both end points can be connected to each other via the VPN device 2.

  If there is another network environment to be set (No in step S206), the automatic setting unit 212 of the VPN apparatus 2 continues the automatic setting process, and when all the settings are completed (Yes in step S206), Finish the work.

  Next, the regular process performed in the VPN apparatus 2 will be described in detail with reference to FIG. The setting canceling unit 230 of the VPN apparatus 2 checks whether or not the usage time limit of each user ID has arrived based on the minimum unit of the desired usage period such as every day or every week. First, data is read from the user information database (step S301), and it is confirmed whether or not the usage period of the user ID has expired (step S302). If the usage period of the read data has not expired (No in step S302), the setting cancellation unit 230 proceeds to step S305 to read the next data. On the other hand, when the usage period of the read data has expired (Yes in step S302), the setting cancellation unit 230 issues a notification to that effect to the user terminal in the form of e-mail (step S303), and then Then, the VPN usage setting deletion process for the corresponding user ID is executed (step S304).

  In this way, the VPN apparatus 2 reads data from the user information database at predetermined time intervals and manages the usage period.

  As described above, according to the present embodiment, the VPN environment can be automatically and safely set, and a rapid introduction of the VPN environment is realized. More specifically, the VPN can be used simply by inputting / transmitting a setting registration request including a user, a desired period of use, and a use group name, and thereafter, the VPN service providing unit 220 of the VPN apparatus 2 until the expiration date comes. On the other hand, the VPN service can be used only by inputting authentication information or the like.

  In addition, according to the present embodiment, the end-points (for example, terminals 1a and 1b) are not directly connected end-to-end, but the VPN tunnels 2 are connected to each other with the VPN device 2 interposed therebetween. It is also possible to accumulate communication logs and the like between end points (for example, terminals 1a and 1b).

  Next, a description will be given of a second embodiment of the present invention in which a billing function is introduced into the VPN apparatus 2 and a rental service for providing a VPN environment for a predetermined period of time based on a contract is possible. In the following description, portions common to the first embodiment are omitted as appropriate.

  FIG. 6 is a diagram showing a detailed configuration of the VPN apparatus (rental processing apparatus) 2 according to the second embodiment of the present invention. Referring to FIG. 6, the VPN apparatus (rental processing apparatus) 2 according to the present embodiment performs charging processing based on the contract period in addition to the setting processing unit 210, VPN service providing unit 220, and setting cancellation unit 230. A processing unit 240 is provided.

  Next, the operation of this embodiment will be described with reference to the flowchart of FIG. First, a user who wants to provide a VPN environment is given by a provider (ISP) or the like that installs a VPN device (rental processing device) 2 using SSL (Secure Sockets Layer) communication or the like in the user terminal 1a (1b). User information (user ID, password, etc.) is transmitted (step S401).

  The VPN device (rental processing device) 2 inquires about the validity of the user ID and the password, refers to the user information database, inquires whether or not a VPN rental contract is made for the user ID, and the user terminal 1a (1b) is transmitted (step S501). If the answer content has been rented (Yes in step S402), a VPN usage screen is displayed on the user terminal (step S404).

  On the other hand, if the contract has not been made (No in step S402), a VPN contract content registration screen is displayed on the user terminal 1a (1b) from the application reception unit 211 of the VPN device (rental processing device) 2, and the user receives a credit Number, payment information such as withdrawal account, contract period, usage name when used by multiple members, etc. are transmitted (step S403). If the user and the contractor are different, such as when using a terminal group set up in an Internet cafe or business hotel, etc., the contractor ID is entered instead of the above payment information to centralize billing. You may make it do. Upon receiving these pieces of information, the application receiving unit 211 of the VPN device (rental processing device) 2 executes VPN environment automatic setting processing (step S502). The subsequent processing is the same as in the first embodiment described above.

  Next, the detailed operation of the VPN apparatus (rental processing apparatus) 2 in step 502 described above will be described with reference to FIG. First, the automatic setting unit 212 of the VPN apparatus (rental processing apparatus) 2 registers in the user information database based on the contract period, the contents of the VPN contract in which a use group name or the like for use by a plurality of members is designated (step) S503).

  Subsequently, the billing processing unit 240 of the VPN device (rental processing device) 2 executes billing processing based on the contract period and the number of users (members) to be used (step S504). Here, when a service such as an unauthorized credit number being sent cannot be provided (No in step S505), the contents of the user information database are restored and a message to that effect is sent to the user terminal 1a (1b). Transmit (step S506).

  On the other hand, if the billing process is normally completed (Yes in step S505), control is passed to the automatic setting unit 212 of the VPN apparatus 2 (rental processing apparatus), and setting information for automatically setting the VPN environment is set. Generation (step S507) and then automatic setting are performed (step S508).

  If there is another network environment to be set (No in step S509), the automatic setting unit 212 of the VPN apparatus (rental processing apparatus) 2 continues the automatic setting process and completes the setting (step The work is terminated.

  In addition, the setting cancellation unit 240 of the VPN device (rental processing device) 2 determines whether the user's contract is valid at a timing such as daily or weekly based on the minimum unit of the contract period, as in the first embodiment. Confirmation is performed, and the VPN setting of the user ID whose contract period has expired is deleted.

  As described above, according to the present embodiment, it is possible to obtain a price for temporary provision of the VPN service as compared with the first embodiment, and for many business users in a necessary period. A VPN environment can be provided at a low cost.

  The first and second embodiments of the present invention have been described above, but these show simplified configurations to help understanding of the embodiments of the present invention, and limit the technical scope of the present invention. It is not a thing. For example, it is a matter of course that modifications that can be made by those skilled in the art can be added, for example, the VPN device 2 is configured by a plurality of server devices.

It is a figure showing the system configuration | structure which concerns on the 1st Embodiment of this invention. It is a figure showing the detailed structure of the VPN apparatus which concerns on the 1st Embodiment of this invention. It is a flowchart for demonstrating the operation | movement of the 1st Embodiment of this invention. It is a flowchart for demonstrating the operation | movement of the 1st Embodiment of this invention. It is a flowchart for demonstrating the operation | movement of the 1st Embodiment of this invention. It is a figure showing the detailed structure of the VPN apparatus which concerns on the 2nd Embodiment of this invention. It is a flowchart for demonstrating the operation | movement of the 2nd Embodiment of this invention. It is a flowchart for demonstrating the operation | movement of the 2nd Embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1a, 1b User terminal 2 VPN apparatus 3 IP network 210 Setting process part 211 Application reception part 212 Automatic setting part 220 VPN service provision part 230 Setting cancellation | release part 240 Charge processing part

Claims (13)

A method of providing a VPN service using a VPN device that provides a VPN (Virtual Private Network) service,
The VPN device accepting a temporary use application for use of a VPN service from a user terminal connected via an IP network;
The VPN apparatus performs setting and registration of a user ID and an expiration date of the user ID based on the use application, and performing automatic setting so that the user terminal can use the VPN. Process,
A VPN service providing step of providing a VPN service after the VPN device accepts and authenticates at least an input of a user ID from a user terminal;
A setting cancellation step of checking the expiration date of each user ID at a predetermined time interval and canceling the setting performed in the automatic setting processing step for the user ID whose expiration date has expired. ,
A method of providing a temporary VPN service characterized by the above. In the setting process step, the VPN device accepts a use application designating a number of users of two or more, generates a corresponding number of user IDs, and executes a process of associating as one group,
In the VPN service providing step, the VPN device mutually connects a VPN tunnel between the user terminal belonging to the same group and the own device, and performs connection between end points;
The method for providing a temporary VPN service according to claim 1. Furthermore, the VPN apparatus includes a billing process for executing a billing process according to a usage application period;
The method for providing a temporary VPN service according to claim 1 or 2. An application accepting unit that accepts a temporary use application for use of a VPN service from a user terminal connected via an IP network, and setting and registering a user ID and an expiration date of the user ID based on the use application, An automatic setting unit that performs automatic setting so that the user terminal can use the VPN;
A VPN service providing unit for providing a VPN service after receiving and authenticating at least a user ID from a user terminal;
A setting cancellation unit for confirming the expiration date of each user ID at a predetermined time interval and canceling the setting performed by the automatic setting unit for the user ID whose expiration date has expired,
VPN device characterized by the above. The automatic setting unit generates a corresponding number of user IDs for a use application that specifies the number of users of two or more, and executes a process of associating as one group,
The VPN service providing unit mutually connects a VPN tunnel between a user terminal belonging to the same group and the own device, and performs connection between end points.
The VPN apparatus according to claim 4. And a billing processing unit for executing billing processing according to the usage application period.
The VPN apparatus according to claim 4 or 5, wherein: After receiving and authenticating at least the input of the user ID from the user terminal, the expiration date of each user ID is confirmed at a predetermined time interval with the process of providing the VPN service, and set for the expired user ID. A program for causing a computer connected to the VPN apparatus to execute
A process of accepting a temporary use application for use of a VPN service from a user terminal connected via an IP network;
A process of performing setting registration of the user ID and the expiration date of the user ID based on the use application, and performing automatic setting so that the user terminal can use the VPN;
A program for causing the computer to execute. The program according to claim 7,
For a use application designating two or more users, a corresponding number of user IDs are generated, and a process of associating and storing as a group is executed.
A program for causing a computer connected to the VPN device to execute. A process of accepting a temporary use application for use of a VPN service from a user terminal connected via an IP network, and setting and registering a user ID and an expiration date of the user ID based on the use application, A program for causing a computer constituting a VPN device connected to a computer to execute automatic setting so that a VPN can be used to be executed;
A process of providing a VPN service after receiving and authenticating at least a user ID from a user terminal connected via an IP network;
A process of confirming the expiration date of each user ID at a predetermined time interval, and releasing the contents set for the user ID whose expiration date has expired;
A program that executes The program according to claim 9,
A program for causing a computer constituting a VPN device to execute a process of connecting VPN tunnels between each user terminal and its own device and performing connection between end points between user terminals associated in advance with the same group. Holding the user ID received from the VPN device according to any one of claims 4 to 6, and automatically logging in to the VPN device using the user ID;
A terminal device characterized by the above.   A process for holding at least the user ID received from the VPN apparatus according to any one of claims 4 to 6 and performing automatic login to the VPN apparatus using the user ID is executed in a computer constituting the user terminal. Program to make. Including the VPN device according to any one of claims 4 to 6 and a user terminal accessible to the network environment providing server, and providing a temporary VPN service;
VPN system characterized by

Images