JP2006293639A - Repeating device and communication system equipped with repeating device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a repeating device for sufficiently protecting significant information and a communication system equipped with the repeating device. <P>SOLUTION: This repeating device 20a configured to relay transmission/reception data to be transmitted/received between a terminal 10a and a terminal 10b, and to communicate with a service management server 30 and a traffic information acquisition server 40 is provided with an authentication part 22a for authenticating whether or not the service management server 30 and the traffic information acquisition server 40 are valid and a transmission/reception part 21a for, when it is authenticated that the service management server 30 and the traffic information acquisition server 40 are valid by the authentication part 22a, transmitting reproduced transmission/reception data to the traffic information acquisition server 40, and for transmitting a monitoring report to the service management server 30. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  A relay device that relays transmission / reception data transmitted and received between the first terminal and the second terminal, and a communication system including the relay device.

  2. Description of the Related Art Conventionally, a relay device such as a gateway transmits a mobile terminal ID or password to an authentication server, and when the mobile server is authenticated by the authentication server, the relay device transmits charging information to the charging server. Known (for example, Patent Document 1).

  Here, since the billing information is important information that must be strictly protected, the transmission source device (relay device) is a destination of the important information when transmitting the important information such as billing information. It is necessary to authenticate whether or not the destination device (for example, a billing server) is valid. Similarly, the transmission destination apparatus needs to authenticate whether or not the transmission source apparatus is valid.

  As described above, IPsec (Security Protocol) or the like is known as a method in which the transmission source device and the transmission destination device mutually authenticate whether or not the other party is valid.

Specifically, in IPsec, a transmission source device and a transmission destination device mutually authenticate whether or not the other party is legitimate by using a pre-share key, a digital signature, a public key, and the like.
JP 2004-48157 A (paragraph, FIG. 1)

  However, in the prior art, since the transmission source device and the transmission destination device only authenticate whether the other party is legitimate on a one-to-one basis, important information may not be sufficiently protected.

  For example, if the destination device has the authority to receive important information only within the range of the predetermined authority, the destination device receives the important information beyond the predetermined authority due to the occurrence of a bug or the like. Important information may not be adequately protected.

  Therefore, the present invention has been made to solve the above-described problem, and an object thereof is to provide a relay device capable of sufficiently protecting important information, and a communication system including the relay device. To do.

  The first feature of the present invention is to relay transmission / reception data transmitted / received between the first terminal and the second terminal, and to receive traffic information, which is information related to the transmission / reception data, within a predetermined authority range. A relay device that communicates with a second server that monitors whether or not the traffic information is received by the first server beyond an allowable first server and the predetermined authority range, An authentication unit that authenticates whether the server and the second server are valid, and the traffic information when the authentication unit authenticates that the first server and the second server are valid When the authenticating unit authenticates the first transmitting unit that transmits to the first server and the first server and the second server, the first server determines the range of the predetermined authority. Monitoring information for monitoring whether the e and a second transmission unit that transmits to the second server.

  According to such a feature, after the first server and the second server are authenticated by the authentication unit, the first transmission unit transmits the traffic information to the first server, and the first server and the second server After the authenticity is authenticated by the authenticating unit, the second transmitting unit transmits the monitoring information to the second server, so that the relay device sufficiently receives the first user information and the second user information (important information). Can be protected.

  In the first aspect of the present invention, the traffic information is preferably a copy of the transmitted / received data.

  In the second aspect of the present invention, the traffic information includes information indicating a data amount of the transmission / reception data, information indicating an address of the first terminal, information indicating an address of the second terminal, and the first terminal and the second It is preferable that at least one of the information indicating the number of channels set with the terminal is included.

  According to a fourth aspect of the present invention, a relay device that relays transmission / reception data transmitted / received between the first terminal and the second terminal, and traffic information that is information related to the transmission / reception data is received within a predetermined authority. A communication system comprising: a first server that is allowed to perform; and a second server that monitors whether the first server receives the transmission / reception data beyond the range of the predetermined authority, The relay device has been authenticated by the authentication unit authenticating whether the first server and the second server are valid, and the authentication unit authenticating the first server and the second server. In this case, the transmission / reception data is copied, and the first transmission unit that transmits the copied transmission / reception data to the first server, and that the first server and the second server are valid. A second transmission unit that transmits, to the second server, monitoring information indicating whether or not the range of the predetermined authority is exceeded when authenticated by the unit, the second server from the relay device Based on the received monitoring information, a determination unit that determines whether or not the range of the predetermined authority is exceeded, and a copy when the determination unit determines that the range of the predetermined authority is exceeded. And a transmission cancellation request unit that requests the relay device to cancel transmission of the transmission / reception data.

  According to the present invention, it is possible to provide a relay device capable of sufficiently protecting important information, and a communication system including the relay device.

(Outline of communication system)
Hereinafter, an outline of a communication system according to an embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a schematic diagram showing a communication system 1 according to an embodiment of the present invention.

  As shown in FIG. 1, the communication system 1 includes a plurality of terminals 10 (terminals 10a and 10b), a plurality of relay devices 20 (relay devices 20a and 20b), a service management server 30, and traffic information acquisition. A server 40 and a communication network 50 are provided. Since the terminal 10a and the terminal 10b have the same configuration, they are collectively referred to as the terminal 10. Similarly, since the relay device 20a and the relay device 20b have the same configuration, they are collectively referred to as the relay device 20.

  The terminal 10 is a terminal having a function of transmitting / receiving voice data via the communication network 50 and a function of transmitting / receiving packet data via the communication network 50. Specifically, the terminal 10 is a mobile phone, a PDA, a PC, or the like.

  The relay device 20 is a relay device that relays audio data, video data, packet data, and the like (hereinafter collectively referred to as transmission / reception data) transmitted / received between the terminal 10a and the terminal 10b.

  The service management server 30 is a server that provides a service for transmitting / receiving data to the terminal 10. The service management server 30 is also a server that monitors whether the traffic information acquisition server 40 exceeds the range of authority given to the traffic information acquisition server 40.

  The traffic information acquisition server 40 is a server to which an authority to acquire traffic information that is information related to transmission / reception data transmitted and received between the terminal 10a and the terminal 10b is given.

  Here, the traffic information is a copy of transmitted / received data or summary information of communication contents. The communication content summary information includes, for example, the amount of transmission / reception data (including the number of packets), the address information of the terminal 10 (for example, IP address), the number of channels set between the terminals 10 (number of connections), The information includes at least one of the port number of the terminal 10, the communication start time, the communication end time, and the like.

(Configuration of communication system)
The configuration of a communication system according to an embodiment of the present invention will be described below with reference to the drawings. FIG. 2 is a block diagram showing a configuration of the communication system 1 according to the embodiment of the present invention.

  As shown in FIG. 2, the relay device 20a includes a transmission / reception unit 21a, an authentication unit 22a, a monitoring report generation unit 23a, and a traffic information generation unit 24a.

  The transmission / reception unit 21a relays transmission / reception data transmitted from the terminal 10a to the terminal 10b, and relays transmission / reception data transmitted from the terminal 10b to the terminal 10a. In addition, the transmission / reception unit 21a transmits a monitoring report generated by the monitoring report generation unit 23a and a connection request for requesting that the terminal 10a connect to the terminal 10b to the service management server 30. Further, the transmission / reception unit 21a transmits the traffic information generated by the traffic information generation unit 24a to the traffic information acquisition server 40.

  The authentication unit 22a authenticates whether the service management server 30 and the traffic information acquisition server 40 are valid. Specifically, the authentication unit 22a authenticates whether the service management server 30 and the traffic information acquisition server 40 are valid according to IPsec (Security Protocol) or the like. Note that the authentication method is not limited to the method according to IPsec, and may be another authentication method.

  The monitoring report generation unit 23a generates a monitoring report (monitoring information) for monitoring whether the traffic information acquisition server 40 has acquired traffic information beyond the range of authority given to the traffic information acquisition server 40. To do. As described above, the monitoring report generated by the monitoring report generation unit 23a is transmitted to the service management server 30 by the transmission / reception unit 21a.

  Here, the monitoring report refers to the time when the traffic information acquisition server 40 starts acquiring transmission / reception data, the time elapsed after the traffic information acquisition server 40 starts acquiring transmission / reception data, and the traffic information acquisition server 40 acquired This is information indicating the data amount of transmitted / received data.

  When the authentication unit 22a determines that the service management server 30 and the traffic information acquisition server 40 are valid, the traffic information generation unit 24a generates traffic information that is information related to transmission / reception data. Further, when the traffic information generation unit 24 a receives a transmission stop request from the service management server 30, the traffic information generation unit 24 a stops generating traffic information. As described above, the traffic information generated by the traffic information generation unit 24a is transmitted to the traffic information acquisition server 40 by the transmission / reception unit 21a.

  Similar to the relay device 20a, the relay device 20b includes a transmission / reception unit 21b, an authentication unit 22b, a monitoring report generation unit 23b, and a traffic information generation unit 24b. The transmission / reception unit 21b, the authentication unit 22b, the monitoring report generation unit 23b, and the traffic information generation unit 24b have the same configuration as the transmission / reception unit 21a, the authentication unit 22a, the monitoring report generation unit 23a, and the traffic information generation unit 24a. These descriptions are omitted.

  In the present embodiment, the relay device 20 that transmits the monitoring report and traffic information to the service management server 30 and the traffic information acquisition server 40 is, for example, a gateway or a wireless control device.

  The service management server 30 includes a transmission / reception unit 31, an authentication unit 32, a monitoring unit 33, and a monitoring information DB 34.

  The transmission / reception unit 31 transmits a monitoring report request for requesting a monitoring report to each relay device 20. Further, the transmission / reception unit 31 receives a monitoring report and a connection request from the relay device 20. In addition, the transmission / reception unit 31 transmits a connection request notification indicating that there is a connection request from the terminal 10 to the traffic information acquisition server 40.

  The authentication unit 32 authenticates whether or not the relay device 20 is valid. Specifically, the authentication unit 32 authenticates whether the relay device 20 is valid according to IPsec or the like.

  The monitoring unit 33 monitors whether the traffic information acquisition server 40 exceeds the range of authority given to the traffic information acquisition server 40 based on the monitoring report received from each relay device 20.

  Specifically, the monitoring unit 33 refers to the monitoring information DB 34 to determine whether the traffic information acquisition server 40 is authorized to acquire traffic information transmitted / received between the terminal 10a and the terminal 10b. Determine. Further, the monitoring unit 33 instructs the transmission / reception unit 31 to transmit a monitoring report request when the traffic information acquisition server 40 is authorized to acquire the traffic information.

  Further, the monitoring unit 33 refers to the monitoring information DB 34 to acquire the contents of the authority given to the traffic information acquisition server 40, and compares the acquired authority contents with the monitoring report to obtain the traffic information. It is determined whether or not the acquisition server 40 exceeds the authority range.

  When the monitoring unit 33 determines that the traffic information acquisition server 40 exceeds the authority range, the transmission / reception unit 31 transmits a transmission stop request for requesting the relay device 20 to stop transmission of traffic information. To instruct. The transmission stop request is transmitted to each relay device 20 by the transmission / reception unit 31.

  The monitoring information DB 34 stores the contents of authority given to the traffic information acquisition server 40. Specifically, the monitoring information DB 34 stores the ID of the terminal 10, the contents of the authority given to the traffic information acquisition server 40, and the timing at which the traffic information acquisition server 40 acquires the traffic information in association with each other.

  Here, the content of the authority given to the traffic information acquisition server 40 is a time during which the traffic information acquisition server 40 is allowed to acquire transmission / reception data (eg, 10 minutes), and the traffic information acquisition server 40 acquires transmission / reception data. Is the amount of data allowed.

  The traffic information acquisition server 40 includes a transmission / reception unit 41, an authentication unit 42, and a traffic information DB 43.

  The transmission / reception unit 41 receives a connection request notification from the service management server 30. The transmission / reception unit 41 transmits a transmission / reception data request for requesting traffic information to each relay device 20. Further, the transmission / reception unit 41 receives traffic information (for example, a copy of transmission / reception data) from each relay device 20.

  The authentication unit 42 authenticates whether or not the relay device 20 is valid. Specifically, the authentication unit 32 authenticates whether the relay device 20 is valid according to IPsec or the like.

  The traffic information DB 43 stores traffic information received from each relay device 20. Specifically, the traffic information DB 43 stores the ID of the terminal 10 and the traffic information transmitted / received between the terminals 10 in association with each other.

(Communication method)
Hereinafter, a communication method according to an embodiment of the present invention will be described with reference to the drawings. FIG. 3 is a sequence diagram showing a communication method according to an embodiment of the present invention. In FIG. 3, the case where the terminal 10a is connected to the terminal 10b will be described as an example. In FIG. 3, the traffic information acquisition server 40 has an authority to acquire traffic information that is information related to transmission / reception data transmitted / received between the terminal 10 a and the terminal 10 b.

  As illustrated in FIG. 3, in step S <b> 101, the relay device 20 a transmits a connection request for requesting that the terminal 10 a connects to the terminal 10 b to the service management server 30. Note that the connection request includes at least the ID of the terminal 10a and the ID of the terminal 10b.

  In step S102, the service management server 30 transmits a connection request notification indicating that the terminal 10a has received a connection request to connect to the terminal 10b to the traffic information acquisition server 40.

  In step S103a, the relay device 20a and the service management server 30 mutually authenticate whether or not the other party is legitimate according to IPsec or the like. Similarly, in step S103b, the relay device 20b and the service management server 30 authenticate each other according to IPsec or the like as to whether or not the other party is valid.

  In step S104a, the relay device 20a and the traffic information acquisition server 40 mutually authenticate whether or not the other party is valid according to IPsec or the like. Similarly, in step S104b, the relay device 20b and the traffic information acquisition server 40 mutually authenticate whether or not the other party is valid according to IPsec or the like.

  In step S105a and step S105b, the service management server 30 establishes a connection between the terminal 10a and the terminal 10b in accordance with SIP (Session Initiation Protocol) or the like.

  In step S106, the relay device 20a and the relay device 20b start relaying transmission / reception data transmitted / received between the terminal 10a and the terminal 10b.

  In step S107a, the traffic information acquisition server 40 transmits a traffic information request for requesting traffic information to the relay device 20a. Similarly, in step S107b, the traffic information acquisition server 40 transmits a traffic information request for requesting traffic information to the relay device 20b.

  Here, the traffic information acquisition server 40 transmits a traffic information request to each relay device 20 at a predetermined timing. The predetermined timing is a timing set in the service management server 30 and the traffic information acquisition server 40. The timing at which the terminal 10a and the terminal 10b start communication and the terminal 10a and the terminal 10b start communication. It is the timing when a predetermined time (for example, 5 minutes) has elapsed since then.

  In step S108a, the service management server 30 transmits a monitoring report request for requesting a monitoring report to the relay device 20a. Similarly, in step S108b, the service management server 30 transmits a monitoring report request for requesting a monitoring report to the relay device 20b.

  Here, the service management server 30 transmits a monitoring report request to each relay device 20 at a predetermined timing. The timing at which the monitoring report request is transmitted is the same as the timing at which the traffic information acquisition server 40 transmits the traffic information request.

  In step S109a, the relay device 20a generates traffic information and transmits the generated traffic information to the traffic information acquisition server 40. Similarly, in step S109b, the relay device 20b generates traffic information and transmits the generated traffic information to the traffic information acquisition server 40.

  In step S110a, the relay device 20a generates a monitoring report and transmits the generated monitoring report to the service management server 30. Similarly, in step S110b, the relay device 20b generates a monitoring report and transmits the generated monitoring report to the service management server 30.

  Here, in general, a control channel for transmitting / receiving control information for monitoring whether or not each relay device 20 is operating normally is set between the service management server 30 and each relay device 20. ing. Therefore, each relay apparatus 20 may transmit a monitoring report to the service management server 30 using this control channel.

  In step S <b> 111, the service management server 30 determines whether the traffic information acquisition server 40 exceeds the range of authority given to the traffic information acquisition server 40 based on the monitoring report received from each relay device 20. . If the traffic information acquisition server 40 exceeds the authority range, the service management server 30 proceeds to the process of step S112. When the traffic information acquisition server 40 does not exceed the authority range, each relay device 20 continues to transmit traffic information.

  In step S112a, the service management server 30 transmits a transmission stop request for requesting to stop transmission of traffic information to the relay device 20a. Similarly, in step S112b, the service management server 30 transmits a transmission stop request for requesting the transmission stop of the traffic information to the relay device 20b.

  When each relay device 20 receives a transmission stop request from the service management server 30, the relay device 20 stops generating traffic information (or transmission thereof).

(Action and effect)
According to the communication system 1 according to the embodiment of the present invention, each relay device 20 is valid for the traffic information acquisition server 40 and the service management server 30 having a function of monitoring the traffic information acquisition server 40. The communication system 1 can sufficiently protect the traffic information (important information) by transmitting the traffic information to the traffic information acquisition server 40 after authenticating the fact.

  Further, each relay device 20 transmits a monitoring report to the service management server 30, and the service management server 30 monitors whether the traffic information acquisition server 40 exceeds the range of authority given to the communication system. 1 can further strengthen the protection of traffic information (important information).

(Other changes)
In the embodiment described above, the relay device 20a and the relay device 20b transmit the traffic information to the traffic information acquisition server 40 and the monitoring report to the service management server 30, but the present invention is not limited to this. Only one of the device 20a and the relay device 20b may transmit the traffic information and the monitoring report.

1 is a schematic diagram showing a communication system 1 according to an embodiment of the present invention. 1 is a block diagram showing a configuration of a communication system 1 according to an embodiment of the present invention. It is a sequence diagram which shows the communication method which concerns on one Embodiment of this invention.

Explanation of symbols

1 ... communication system,
10 ... terminal,
20: Relay device,
21: Transmitter / receiver,
22: Authentication unit,
23: Monitoring report generator,
24 ... Traffic information generation unit,
25... Quality information generator,
30: Service management server,
31: Transmitter / receiver,
32 ... Authentication part,
33 ... monitoring unit,
34 ... monitoring information DB,
40: Traffic information acquisition server,
41 ... transmission / reception unit,
42 ... authentication part,
43 ... Traffic information DB,
50: Communication network,

Claims (4)

A first server that relays transmission / reception data transmitted / received between the first terminal and the second terminal and is allowed to receive traffic information, which is information related to the transmission / reception data, within a predetermined authority and the predetermined A relay device that communicates with a second server that monitors whether the first server has received the traffic information beyond the scope of authority of
An authentication unit for authenticating whether the first server and the second server are valid;
A first transmission unit that transmits the traffic information to the first server when the authentication unit authenticates the first server and the second server;
Monitoring information for monitoring whether or not the first server exceeds the predetermined authority range when the authentication unit authenticates that the first server and the second server are valid. A relay apparatus comprising: a second transmission unit that transmits to the second server.   The relay apparatus according to claim 1, wherein the traffic information is a copy of the transmission / reception data.   The traffic information includes information indicating a data amount of the transmission / reception data, information indicating an address of the first terminal, information indicating an address of the second terminal, and between the first terminal and the second terminal. The relay apparatus according to claim 1, wherein the relay apparatus includes at least one of information indicating the set number of channels. A relay device that relays transmission / reception data transmitted / received between the first terminal and the second terminal, and a first server that is allowed to receive traffic information that is information related to the transmission / reception data within a predetermined authority range And a second server that monitors whether the first server receives the traffic information beyond the range of the predetermined authority,
The relay device is
An authentication unit for authenticating whether the first server and the second server are valid;
A first transmission unit that transmits the traffic information to the first server when the authentication unit authenticates the first server and the second server;
When the authentication unit authenticates that the first server and the second server are valid, monitoring information for monitoring whether or not the predetermined authority range is exceeded is sent to the second server. A second transmitter for transmitting,
The second server is
A determination unit that determines whether or not the first server exceeds a range of the predetermined authority based on the monitoring information received from the relay device;
The communication system, comprising: a transmission cancellation request unit that requests the relay device to cancel transmission of the traffic information when the determination unit determines that the predetermined authority range is exceeded.

Images