JP2006285826A - Distribution method, device and system for user peculiar information - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a distribution method, device and system for user peculiar information, capable of safely and easily setting information peculiar to a user to a user terminal. <P>SOLUTION: When reading a public key K from a wireless tag 101 stuck to the terminal 10 by a wireless tag reader 20, a wireless LAN access point 21 encrypts setting information by use of the public key K. The encrypted setting information is stored in a beacon and is wirelessly transmitted. When the terminal 10 receives the beacon, the encrypted setting information stored in the beacon is decrypted by use of a private key and is set. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a technique for distributing user-specific information using wireless communication such as a wireless LAN, and more particularly to a method, apparatus, and system for easily and safely distributing setting information unique to a user to a user terminal.

  In order for a terminal having a wireless communication function to connect to a wireless LAN and receive various services, it is necessary to set necessary information in the terminal. Conventionally, several types of setting information acquisition methods have been proposed.

  In the wireless communication function setting method disclosed in Japanese Patent Laid-Open No. 2003-111123 (Patent Document 1), the wireless LAN access point stores setting information that conforms to the wireless communication standard of the region (country), and is personal. By transmitting to the computer (PC) through the wireless LAN, the setting information of the PC is rewritten so as to conform to the local standard (see paragraphs 0019 to 0024).

  In an authentication method in a communication system disclosed in Japanese Patent Application Laid-Open No. 2004-15725 (Patent Document 2), a user inputs a user name and a password, and transmits the One-way Hash and a public key to an access point. The access point transmits the One-way Hash to the authentication server and receives the WEP key from the authentication server. The access point encrypts the WEP key with the public key and transmits it to the user terminal. The user terminal decrypts with the secret key to obtain the WEP key, and encrypted communication using the WEP is performed with the access point (see paragraphs 0031 to 0042 and FIG. 5).

  IEEE Standard 802.1X-2001 (Non-Patent Document 1) discloses a method for extending EAP-TLS for securely acquiring setting information using only a wireless LAN. In this method, the public key certificates of both the server and the client are exchanged, and the WEP key is exchanged by using the TLS encrypted communication. At this time, not only the WEP key but also other setting information is transmitted from the server to the client, so that the setting information can be distributed.

JP 2003-111123 A (see paragraphs 0019-0024) Japanese Patent Laying-Open No. 2004-15725 (see paragraphs 0031 to 0042 and FIG. 5) IEEE standard 802.1X-2001 (see pages 13-30)

  However, since the wireless communication function setting method disclosed in Patent Document 1 sets setting information conforming to the wireless communication standard of the region (country) in the terminal, the same information is set in different terminals. Therefore, in this prior art, user-specific information that differs from terminal to terminal can not be set.

  In the authentication method disclosed in Patent Document 2, the user himself / herself inputs a user name and a password, which are information unique to the user, and transmits them to the authentication server. That is, since the user name and password are transmitted to the access point and the WEP key is received from the access point, there is a problem that the possibility of eavesdropping by others increases even if the encryption is performed. Furthermore, according to this conventional technique, since the user inputs information specific to the user and is authenticated, a known authentication process is required, and the terminal does not automatically acquire the information specific to the user.

  In the method of extending EAP-TLS described in Non-Patent Document 1, it is necessary to send an authentication identifier (MyID) from the client to the server before the encrypted communication by TLS, and this authentication identifier is set in the client in advance. Must have been. Therefore, a terminal that does not have an authentication identifier cannot use this method.

  SUMMARY OF THE INVENTION The present invention solves the above-described conventional problems, and a user-specific information distribution method, apparatus, and system that can safely and easily set user-specific information such as a user ID in a user terminal. I will provide a.

  In the method for distributing user-specific setting information according to the present invention, the setting information providing apparatus a) receives the public key of the terminal from the terminal, and b) encrypts the setting information using the public key. C) The encrypted setting information is stored in a connection control signal of a wireless communication network and wirelessly transmitted, and the terminal d) the encrypted setting stored in the received connection control signal. The information is decrypted using the secret key of the terminal, and e) the decrypted setting information is stored.

  The terminal can connect to the wireless communication network according to the setting information. In addition, the setting information providing apparatus can change the setting information at an arbitrary timing and restrict the connection of the terminal to the wireless communication network based on the setting information before the change. If the setting information is changed, the terminal cannot connect to the wireless communication network unless it acquires new setting information after the change according to the procedures a) to e).

  The connection control signal is a packet signal (beacon) broadcast from the setting information providing apparatus, and the encrypted setting information is stored in a single packet in c). When the setting information cannot be stored in a single packet, the encrypted setting information is divided and stored into a plurality of packets, and the plurality of setting information received on the terminal side is combined into one setting information.

  In the system according to the present invention, the setting information providing device includes a proximity receiving unit that receives a public key of the terminal from the terminal, an encryption unit that encrypts the setting information using the public key, and the encryption Wireless transmission means for storing the transmitted setting information in a connection control signal of a wireless communication network, and transmitting the proximity information transmission means for transmitting the public key, and the terminal corresponding to the public key Using the secret key storing means for storing the secret key of the terminal, wireless receiving means for receiving the connection control signal, and the encrypted setting information stored in the received connection control signal using the secret key And decoding means for decoding.

  The setting information providing apparatus further includes setting information changing means for changing the setting information at an arbitrary timing, and can restrict the connection of the terminal to the wireless communication network.

  As an example, the setting information providing apparatus includes the proximity receiving unit and an access point of the wireless communication network, and the access point includes the encryption unit and the wireless transmission unit. The proximity receiving means and the access point may be installed in the same wireless communication network spot. The access point may be installed in a wireless communication network spot, and the proximity receiving means may be installed at a point different from the wireless communication network spot.

  Further, the setting information providing device includes the proximity receiving means, setting information managing means, and an access point of the wireless communication network, the setting information managing means includes the encryption means, and the access point is the A configuration including wireless transmission means may also be used. In this case, the access point receives the encrypted setting information and the transmission period designation information from the setting information management means, and transmits the encrypted setting information for the connection control according to the designated transmission period. It can be stored in a signal and transmitted.

  As the proximity transmission and reception means, a wireless tag system, a barcode system, an infrared transmission / reception system, or a human body communication system can be used. Furthermore, the proximity communication can be substantially realized by reducing the transmission power of a normal communication system.

  According to the present invention, it is possible to safely distribute setting information unique to a user to a terminal without distributing and setting an authentication identifier used for user identification in advance. That is, when distributing the setting information, the setting information encrypted with the user's public key is distributed and decrypted with the user's private key in the terminal. As a result, a person other than the user cannot view the setting information and the user can safely acquire the setting information dedicated to the user.

  The distribution of the setting information is performed by storing and transmitting in a beacon (connection control signal) transmitted by the wireless LAN access point, so there is no need to add a special communication means to the wireless terminal again, and the authentication ID The distribution of the setting information including etc. becomes only the route by the beacon, and the safety is improved.

  In addition, the transmission of the public key from the terminal to the wireless LAN access point or the setting information management server uses a proximity communication means such as a wireless tag or a two-dimensional barcode. Therefore, in order to obtain the setting information, the user needs to go to a specific place and transmit the public key. As a result, the use range of the network service can be limited to a temporary use in a specific place such as a railway ticket gate, an event venue, or a conference room.

  Furthermore, since the setting information can be changed on the provider side, it is easy to limit the setting information to temporary use. Service provision to users can also be limited by time.

1. 1. First Embodiment 1.1) System Configuration FIG. 1 is a block diagram showing a configuration of a user specific information distribution system according to a first embodiment of the present invention. When the user carries the terminal 10 and wants to receive a network service, the user brings the terminal 10 close to the wireless tag reader 20. As a result, the public key K recorded in the wireless tag built in the terminal 10 is read and transmitted from the wireless tag reader 20 to the wireless LAN access point 21 through a dedicated cable or a wired / wireless network.

  As will be described later, the wireless LAN access point 21 encrypts the setting information dedicated to the user with the public key K and transmits it to the terminal 10. The terminal 10 can decrypt the received encrypted information with the secret key, access the wireless LAN using the setting information thus obtained, and receive a desired network service. This will be described in more detail below.

(Wireless terminal)
The terminal 10 is a portable wireless terminal provided with proximity communication means, and in this embodiment, a wireless tag 101 is used as the proximity communication means. It is assumed that a public key K is recorded on the wireless tag 101. The wireless tag 101 may be attached to the terminal or may be built in.

  Further, the terminal 10 is provided with a wireless transceiver 102 for performing wireless communication with the wireless LAN access point 21. The wireless transmitter / receiver 102 is controlled by the wireless communication control unit 103 and can receive a connection control signal (here, a beacon) from the wireless LAN access point 21 and transmit / receive a wireless LAN packet.

  As will be described later, when the beacon packet storing the encryption setting information is received from the wireless LAN access point 21, the setting information decryption unit 104 decrypts the encryption setting information using the secret key read from the secret key memory 105. To do. This secret key is paired with the public key K, and information encrypted with the public key K can be decrypted only with the secret key. Therefore, others cannot steal the setting information.

  The decrypted setting information is collected by the terminal control unit 106, stored as one complete setting information in the setting information memory 107, and setting for connection to the wireless LAN is performed.

  The terminal control unit 106 controls the overall function of the terminal 10, and may be implemented by a program control processor such as a CPU, for example. In that case, the functions of the wireless communication control unit 103 and the setting information decoding unit 104 described above can also be realized by executing a program.

(Wireless tag reader)
The wireless tag reader 20 includes a wireless tag information reading unit 201 for reading the public key K from the wireless tag 101 of the terminal 10 and a tag information transmission unit 202 for transmitting the read public key K to the wireless LAN access point 21. It consists of. The tag information transmission unit 202 may transmit through a dedicated cable, or may transmit through a wired or wireless network.

(Wireless LAN access point)
The wireless LAN access point 21 is provided with a tag information receiving unit 203 for receiving the public key K from the wireless tag reader 20 and a setting information encryption unit 204 for encrypting the setting information with the public key K. Yes. The encrypted setting information is stored in a beacon by the wireless communication control unit 205 and transmitted from the wireless transmission / reception unit 206 to the terminal 10. The setting information encryption unit 204 and the wireless communication control unit 205 are controlled by the wireless LAN control unit 207.

  When receiving the public key K from the terminal 10, the wireless LAN control unit 207 reads the setting information dedicated to the terminal from the setting information memory 208 and provides it to the setting information encryption unit 204. The setting information is information unique to the user, and specifically includes an authentication identifier and a service identifier that can be temporarily used in a certain system.

  The wireless LAN access point 21 according to the present embodiment is further provided with a setting change button 209 that can change setting information at any time. The setting change button 209 can be manually operated. As will be described later, when the provider of the wireless LAN spot presses the setting change button 209, the terminal 10 cannot belong to the wireless LAN unless the setting information is received and set again. Accordingly, it is possible to limit the attribution of the user who has acquired the setting information until then to the wireless LAN. Alternatively, it is possible to force a setting change automatically by setting a time limit. Thereby, the provider of the wireless LAN spot can provide a temporary network service to the user. The wireless LAN is connected through the interface 210.

1.2) Operation FIG. 2 is a sequence diagram showing a method for distributing user-specific information according to the first embodiment of the present invention. If the user wants to receive the network service, it is necessary to acquire information necessary for belonging to the wireless LAN access point 21 and setting information of the network service received after connection and set it in the terminal 10. Hereinafter, a method for acquiring the setting information will be described in detail.

  First, the user brings the terminal 10 close to the wireless tag reader 20, and causes the wireless tag information reading unit 201 to read the user's public key K in the terminal 10 (step S1). The wireless tag information reading unit 201 transmits the read public key K to the tag information receiving unit 203 of the wireless LAN access point 21 through the wireless tag information transmitting unit 202 (step S2). The tag information receiving unit 203 outputs the received public key K to the setting information encryption unit 204.

  When the public key K is input, the wireless LAN control unit 207 reads the setting information A as information dedicated to the user from the setting information memory 208 and outputs it to the setting information encryption unit 204. Alternatively, the setting information A may be created each time. The setting information encryption unit 204 encrypts the setting information A using the public key K (step S3). The encrypted setting information is divided as necessary under the control of the wireless LAN control unit 207, stored in a beacon together with the number of divisions and the ordinal number indicating the divided number, and transmitted to the terminal 10. (Step S4). At that time, the wireless LAN control unit 207 can also specify the time (time and / or transmission period) for transmitting the beacon of the encryption setting information. Details of the beacon used in this embodiment will be described later (FIG. 3).

  When receiving the beacon storing the setting information, the wireless communication control unit 103 of the terminal 10 outputs the encrypted information in the beacon to the setting information decrypting unit 104, and the setting information decrypting unit 104 uses the user's private key. This is decoded, and the setting information thus decoded is stored in the setting information memory 107 (step S5). By using this setting information, it becomes possible to connect to a wireless LAN spot and use a network service via the wireless LAN access point 21 (step S6).

  The administrator of the wireless LAN spot can change the setting information read from the setting information memory 208 at random by pressing the setting change button 209 of the wireless LAN access point 21 at an arbitrary timing (step S7). As a result, if the setting information A is changed to the setting information B, the terminal 10 that has acquired and connected to the setting information A so far, belongs to the wireless LAN access point 21 and uses the network service at the wireless LAN spot. It becomes impossible. In this case, the terminal 10 needs to go to the RFID tag reader 20 again to acquire the setting information B. In other words, it is necessary to repeat steps S1 to S5 described above.

1.3) Beacon packet FIG. 3A is a time chart showing beacons transmitted by the wireless LAN access point 21 on the time axis, FIG. 3B is a format diagram of a normal beacon, and FIG. It is a format figure of the beacon containing the setting information used by a form.

  As shown in FIG. 3A, the wireless LAN access point 21 always transmits a beacon, but in this embodiment, instead of the normal beacon, one beacon including encrypted setting information is transmitted. Send.

  As shown in FIG. 3B, a normal beacon includes information BSS-ID (Basic Service Set Identifier) for specifying the wireless LAN access point 21 that is the transmission subject of the beacon and network identification information ESS- of the wireless LAN. ID (Extended Service Set Identifier).

On the other hand, as shown in FIG. 3C, the beacon of setting information used in the present embodiment is a setting made up of an ordinal number N _OR , a division number N _D, and encryption setting information, instead of the ESS-ID. Contains data. The division number N _D indicates how many pieces of one setting information to be transmitted is divided, and the ordinal number N _OR indicates the number of setting information in the divided beacon.

For example, if ordinal number N _OR = number of divisions N _D = 1, it can be seen that the setting information included in the beacon is one complete and not divided. If the ordinal number N _OR = 2 and the division number N _D = 4, it can be seen that one setting information is divided into four, and the setting information included in the beacon is the second of them.

The reason why the ordinal number N _OR and the division number N _D are added to the setting information to be placed on the beacon for identification is as follows. First, since there is a case where all setting information cannot be acquired by one beacon transmission, it is necessary to transmit the same setting information a plurality of times. In that case, if the receiving side does not know what number of beacon setting information is currently received, it may be duplicated and acquired separately from the data that was acquired by mistake. . Furthermore, if it is not known that the setting information is divided, it cannot be determined whether all the setting information has been collected. Such inconvenience can be solved by adding the ordinal number N _OR and the division number N _D to the setting information.

FIG. 4 is a time chart when the setting information is divided into three and transmitted. As described above, the beacon 1,2,3 including setting information, ordinal N _OR and the division number N _D respectively are set. Here, the division number N _D is commonly set to 3, and the ordinal numbers N _OR are set to 1, 2, and 3, respectively.

When the terminal 10 receives a beacon including such setting information, the terminal control unit 106 refers to the ordinal number N _OR and the division number N _D included in the received beacon setting data, and whether the setting information is divided. Or it is judged whether it is a single thing. If the setting information is single, the decoded setting information is stored in the setting information memory 107. If it is divided, a beacon is received until all the setting information is gathered, and when all the setting information is gathered, they are collectively stored in the setting information memory 107.

  Since setting information can be divided and transmitted in this way, even when the amount of setting information transmitted to the terminal 10 exceeds the capacity of the beacon, all necessary information can be transmitted safely and reliably to the terminal. .

1.4) Installation Example FIGS. 5A to 5C are block diagrams illustrating specific installation examples of the system according to the present embodiment. Since the basic operation is as described above, the blocks having the same functions as the blocks shown in FIG.

  In the installation example shown in FIG. 5A, the wireless tag reader 20 and the wireless LAN access point 21 are installed adjacent to each other in the wireless LAN spot 30. In this case, when the terminal 10 approaches the wireless LAN spot 30, the above-described public key K is read, and necessary setting information can be acquired from the wireless LAN access point 21 on the spot by placing it on a beacon.

  In the installation example shown in FIG. 5B, the wireless tag reader 20 is installed at a location away from the wireless LAN access point 21 in the wireless LAN spot 30, and the wireless tag reader 20 and the wireless LAN access point 21 are dedicated. Connected through a cable or network. In this case, when the terminal 10 approaches the place where the wireless tag reader 20 is installed, the public key K described above is read and from the wireless LAN access point 21 of the wireless LAN spot 30 located away from the terminal 10. Necessary setting information can be acquired on a beacon. For example, in a place such as a subway, it is possible to read the public key K with a ticket gate, acquire setting information at a home far from the ticket gate, and use a wireless LAN service.

  In the installation example shown in FIG. 5C, a plurality of RFID tag readers 20a and 20b are installed in a location apart from the wireless LAN access point 21 in the wireless LAN spot 30, and the wireless tag readers 20a and 20b and the wireless LAN are connected. The access point 21 is connected through a dedicated cable or network. For example, when the terminal A approaches the place where the wireless tag reader 20b is installed, the public key K described above is read and placed on a beacon from the wireless LAN access point 21 of the wireless LAN spot 30 located away from the terminal A. Necessary setting information can be acquired. The same applies to the terminal B.

  Another usage form is also conceivable in the installation example shown in FIG. For example, setting information common to a plurality of users is simultaneously distributed to a plurality of user terminals through a beacon. At this time, the setting information to be transmitted is encrypted with the private key of the provider of the wireless LAN spot 30, or is transmitted without encryption. If the received setting information is encrypted, each terminal decrypts it using the public key of the provider of the wireless LAN spot 30 and uses it. Thereby, setting information can be distributed to a plurality of wireless LAN users who use a common setting all at once, and the setting of a plurality of terminals can be finished instantaneously.

2. Second Embodiment FIG. 6 is a block diagram showing a configuration of a user specific information distribution system according to a second embodiment of the present invention. This embodiment is different from the first embodiment in that setting information is managed and encrypted by the setting information management server 40 instead of the wireless LAN access point 21. Since the basic operation is the same as that of the first embodiment, the blocks having the same functions as those shown in FIG.

  In FIG. 6, when the terminal 10 is brought close to the wireless tag reader 20, the public key K recorded in the wireless tag built in the terminal 10 is read, and the data of the public key K is set from the wireless tag reader 20 to the setting information. The data is transmitted to the management server 40 through a dedicated cable or a wired / wireless network.

  The setting information management server 40 includes a tag information receiving unit 203 for receiving the public key K from the RFID tag reader 20, a setting information encryption unit 204 for encrypting the setting information with the public key K, and a memory storing the setting information 209, a setting change button 209 that can change setting information at any time, and a server control unit 401 that controls the overall operation. When the server control unit 401 receives the public key K from the terminal 10, the server control unit 401 reads setting information dedicated to the terminal from the setting information memory 208 and provides the setting information encryption unit 204. The setting information is information unique to the user, and specifically includes an authentication identifier and a service identifier that can be temporarily used in a certain system.

  The server control unit 401 notifies the wireless LAN access point 21 of the setting information encrypted by the setting information encryption unit 204 and the time information for storing and transmitting the setting information in a beacon.

  The wireless LAN access point 21 stores the received encryption setting information in the beacon by the wireless communication control unit 205, and transmits it from the wireless transmission / reception unit 206 to the terminal 10 in the designated transmission period. The terminal 10 can decrypt the received encrypted information with the secret key, and access the wireless LAN using the setting information obtained in this way to receive a desired network service.

3. Modification of Proximity Communication Means In the first and second embodiments, the wireless tag 101 is used as a desirable proximity communication means. However, the present invention is not limited to this, and other communication means can be used. It is.

  For example, the public key K can be more easily transmitted to the wireless LAN access point 21 or the setting information management server 40 using a two-dimensional barcode system instead of the wireless tag 101. In this case, a bar code reader is used instead of the RFID tag reader 20. Specifically, the user's public key K is printed on a two-dimensional barcode and pasted on the terminal 10, and this barcode is read by a barcode reader to the wireless LAN access point 21 or the setting information management server 40. Just send it.

  Also, infrared communication means (IrDA) can be used as the proximity communication means. In this case, the terminal 10 is provided with an infrared transmitter, and is configured to emit infrared light modulated by data of the public key K. The infrared transmission unit may be controlled by the terminal control unit 106, or the user may transmit data by some key operation. Further, an infrared receiver is provided in place of the wireless tag reader 20, and the public key K is demodulated from the received infrared light and transmitted to the wireless LAN access point 21 or the setting information management server 40.

  In addition, a short-range wireless communication system that can transmit the public key K from the terminal 10 to the wireless LAN spot side can be used. As described above, as the proximity communication means, any wireless system using light, radio waves, electromagnetic induction, or the like can be applied. In addition, it is also possible to substantially realize near field communication by using a normal wireless LAN transceiver (transmittable in the range of several hundred meters to several kilometers) and suppressing the output of the transmission radio wave. Furthermore, it is also possible to transmit the public key K by human body communication using a current flowing in the human body. For example, the proximity transmitter and the proximity receiver may be connected by a human body and the public key K may be transmitted through the human body.

4). Effects As described above, according to the embodiment of the present invention, the following various effects can be obtained.

  First, it is possible to acquire user-specific setting information without setting an authentication identifier in the terminal 10 in advance as in the prior art. As described above, the wireless tag reader 20 reads the public key K from the wireless tag 101 of the terminal 10, the setting information is encrypted using the public key K, and the encrypted setting information is stored in the beacon. It is transmitted to the terminal 10. Therefore, even if another person's terminal receives a beacon including setting information, it cannot be decrypted, and only a user having the public key K can decrypt and use the setting information in the beacon.

  Secondly, since the current setting can be changed to a new setting in the wireless LAN access point 21 or the setting information management server 40, it becomes possible to limit the permanent connection of the user. As described above, by pressing the setting change button 209, it is possible to make it impossible for the terminal 10 that has acquired the setting information so far to belong to the wireless LAN. This provides a connection to the wireless LAN spot of the terminal 10 when it is desired to connect the current user only for a certain period of time, such as a conference room or event venue, or when a temporary wireless LAN spot 30 is installed. Can be freely controlled on the part of the person.

  Third, in order to use the network service by acquiring the setting information, the user must go to the place where the RFID tag reader 20 is installed. This is because the transmission of the user's public key K is an indispensable condition for acquiring the setting information, and the proximity communication means is used for the transmission. Thereby, it is possible to prevent the setting information of the network service provided at a certain store from being acquired and used at a location away from the store.

  Fourth, setting information can be acquired without adding another communication means to the terminal 10. This is because the setting information of the terminal 10 is acquired from the wireless LAN access point 221 where the service is provided, and it is not necessary to incorporate communication means other than the wireless LAN into the terminal for acquiring the setting information. Further, the user's public key K can be transmitted to the wireless LAN access point 21 simply by pasting the wireless tag recording the public key K on the terminal 10. The same applies to a two-dimensional barcode system.

  Fifth, since the setting information is managed and encrypted by the wireless LAN access point 21, it is not necessary to install a device such as a special server for managing and distributing the setting information. This is because the setting information is stored in the wireless LAN access point 21 and the setting information can be encrypted in the wireless LAN access point 21. Accordingly, setting information can be distributed by preparing and connecting the wireless LAN access point 21 and the wireless tag reader 20 for reading the public key K.

  INDUSTRIAL APPLICABILITY The present invention can be used for a system for safely and reliably setting setting information used temporarily or for a predetermined period in a terminal. For example, when shopping at a shopping center, setting information that can be used only on that day is acquired and a wireless LAN service is used. The public key K is read simply by holding the terminal over the RFID tag reader when paying a fee at a cash register or the like, and the encrypted “setting information for that day” is set in the terminal. When the shopping center is closed, the user on that day can no longer connect to the wireless LAN by pressing the setting change button on the center side.

It is a block diagram which shows the structure of the distribution system of the user specific information by 1st Embodiment of this invention. It is a sequence diagram which shows the distribution method of the user specific information by 1st Embodiment of this invention. (A) is a time chart showing beacons transmitted by the wireless LAN access point 21 on the time axis, (B) is a format diagram of a normal beacon, (C) is setting information used by this embodiment. It is a format figure of a beacon including. It is a time chart when setting information is divided into three and transmitted. (A)-(C) are block diagrams which respectively show the specific installation example of the system by this embodiment. It is a block diagram which shows the structure of the distribution system of the user specific information by 2nd Embodiment of this invention.

Explanation of symbols

10 terminal 20 wireless tag reader 21 wireless LAN access point 30 wireless LAN spot 40 setting information management server 101 wireless tag 102 wireless transmitter / receiver 103 wireless communication control unit 104 setting information decryption unit 105 secret key memory 106 terminal control unit 107 setting information Memory 201 Wireless tag information reading unit 202 Tag information transmitting unit 203 Tag information receiving unit 204 Setting information encryption unit 205 Wireless communication control unit 206 Wireless transceiver 207 Wireless LAN control unit 208 Setting information memory 209 Setting change button 210 Interface

Claims (26)

In a method for distributing setting information specific to a user of a terminal from the setting information providing apparatus to the terminal,
The setting information providing device includes:
a) receiving the public key of the terminal from the terminal;
b) encrypting the setting information using the public key;
c) storing the encrypted setting information in a wireless communication network connection control signal and wirelessly transmitting it;
The terminal
d) Decrypting the encrypted setting information stored in the received connection control signal using the secret key of the terminal,
e) Set the decrypted setting information,
A method for distributing user-specific setting information characterized by the above.   The method according to claim 1, wherein the terminal connects to the wireless communication network according to the setting information.   The method according to claim 2, wherein the setting information providing apparatus changes the setting information at an arbitrary timing, and restricts connection of the terminal to the wireless communication network based on the setting information before the change.   4. The device according to claim 3, wherein, when the setting information is changed, the terminal acquires new setting information after the change according to the procedures of a) to e) and connects to the wireless communication network. Method.   The connection control signal is a packet signal broadcast from the setting information providing device, and the encrypted setting information is stored in a single packet in the step c). Method. The connection control signal is a packet signal broadcast from the setting information providing device,
The setting information providing device transmits the encrypted setting information divided into a plurality of packets in c),
The method of claim 1, wherein the terminal combines and stores a plurality of setting information received in the step e). In a system for distributing setting information specific to a user of a terminal from the setting information providing device to the terminal,
The setting information providing device includes:
Proximity reception means for receiving the public key of the terminal from the terminal;
An encryption means for encrypting the setting information using the public key;
Wireless transmission means for storing and transmitting the encrypted setting information in a connection control signal of a wireless communication network;
Have
The terminal
Proximity transmission means for transmitting the public key;
Secret key storage means for storing the secret key of the terminal corresponding to the public key;
Wireless receiving means for receiving the connection control signal;
Decryption means for decrypting the encrypted setting information stored in the received connection control signal using the secret key;
Having
A system for distributing user-specific setting information characterized by   8. The system according to claim 7, wherein the setting information providing device further includes setting information changing means for changing the setting information at an arbitrary timing, and restricts connection of the terminal to the wireless communication network. .   8. The system according to claim 7, wherein the setting information providing device includes the proximity receiving unit and an access point of the wireless communication network, and the access point includes the encryption unit and the wireless transmission unit.   The system according to claim 9, wherein the proximity receiving unit and the access point are installed in the same wireless communication network spot.   10. The system according to claim 9, wherein the access point is installed in a wireless communication network spot, and the proximity receiving means is installed at a point different from the wireless communication network spot.   The setting information providing device includes the proximity receiving unit, a setting information managing unit, and an access point of the wireless communication network. The setting information managing unit includes the encryption unit, and the access point includes the wireless transmission. The system of claim 7 including means.   The access point receives the encrypted setting information and its transmission period designation information from the setting information management means, and stores the encrypted setting information in the connection control signal according to the designated transmission period The system according to claim 12, wherein the system transmits the data.   The system according to claim 7, wherein the proximity transmission unit is a wireless tag, and the proximity reception unit is a wireless tag reader.   The system according to claim 7, wherein the proximity transmission unit is a barcode, and the proximity reception unit is a barcode reader.   8. The system according to claim 7, wherein the proximity transmission means is an infrared transmitter, and the proximity reception means is an infrared receiver.   The system according to claim 7, wherein the proximity transmission unit includes a non-proximity transmitter, and substantially reduces proximity transmission by reducing a transmission output of the non-proximity transmitter.   8. The system according to claim 7, wherein the proximity transmission unit is a transmitter based on human body communication, and the proximity reception unit is a receiver based on human body communication.   8. The system according to claim 7, wherein the wireless transmission means stores the encrypted setting information in a beacon packet that is the connection control signal and broadcasts it. The wireless transmission means broadcasts the encrypted setting information divided into a plurality of beacon packets,
The system according to claim 17, wherein the terminal further includes a control unit that generates a single piece of setting information by combining a plurality of pieces of setting information received. In a setting information distribution apparatus that distributes terminal user-specific setting information to the terminal,
Proximity reception means for receiving the public key of the terminal from the terminal;
An encryption means for encrypting the setting information using the public key;
Wireless transmission means for storing and transmitting the encrypted setting information in a connection control signal of a wireless communication network;
A setting information distribution device characterized by comprising: In a wireless terminal that acquires user-specific setting information from an access point of a wireless communication network,
Proximity transmission means for transmitting the public key of the wireless terminal;
Secret key storage means for storing the secret key of the terminal corresponding to the public key;
Wireless receiving means for receiving a connection control signal from the access point;
Decryption means for decrypting encryption setting information stored in the received connection control signal using the secret key;
Control means for connecting to the wireless communication network using the decrypted setting information;
A wireless terminal characterized by comprising: In a method of distributing terminal user-specific setting information to the terminal,
Receiving the public key of the terminal from the terminal;
Encrypt the configuration information using the public key,
The encrypted setting information is stored in a wireless communication network connection control signal and transmitted wirelessly.
Setting information distribution method characterized by the above. In a method for obtaining user-specific setting information from an access point of a wireless communication network,
Read the private key corresponding to the given public key,
Receiving a connection control signal from the access point;
Decrypting the encryption setting information stored in the received connection control signal using the secret key;
The setting information acquisition method characterized by this. In a program for causing a computer to distribute terminal user-specific setting information to the terminal,
A function of receiving the public key of the terminal from the terminal;
A function of encrypting the setting information using the public key;
A function of storing the encrypted setting information in a connection control signal of a wireless communication network and wirelessly transmitting the information;
Is realized by the computer. In a program that causes a computer to acquire user-specific setting information from an access point of a wireless communication network,
A function of reading a secret key corresponding to a predetermined public key;
A function of receiving a connection control signal from the access point;
A function of decrypting the encryption setting information stored in the received connection control signal using the secret key;
Is implemented by the computer.

Images