JP2008103858A - Wireless communication relay apparatus, wireless terminal, wireless communication unit for disaster, wireless communication relay method, wireless communication method, wireless communication relay program, and wireless communication program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To expand a communication network of wireless communication by a secure means in case of a disaster. <P>SOLUTION: A wireless communication unit for disaster includes wireless terminals 101 and access points 110, and can be mounted on a moving body. A access points 110 relays transfer of information between wireless terminals 101 and the transfer between access points 110 is carried out to expand the communication network. The one-time password is used and the authentication password is changed each time communication is performed, so secure communication can be achieved. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a wireless communication relay device, a wireless terminal, a disaster wireless communication unit, a wireless communication relay method, a wireless communication method, a wireless communication relay program, and a wireless communication program that perform wireless communication by performing mutual authentication in a disaster.

  In the event of a disaster, damage will increase over time, so it is necessary to take action at the earliest possible stage. For example, when carrying out rescue activities, it is difficult to respond at an early stage without accurate information on the affected areas. Furthermore, immediately after a disaster occurs, a normal communication line (such as a public telephone network) is congested due to concentration of access, and communication is difficult to connect. Also, if the cable is broken or the base station collapses, communication is interrupted and the state of the disaster area is unknown.

  An invention for constructing a disaster information network using a mobile phone during such a disaster is disclosed (for example, see Patent Document 1 below). According to the present invention, by providing the mobile phone with the wireless LAN interface, it is possible to construct a communication network other than the public telephone network in the event of a disaster.

JP 2004-56730 A

  However, with the technology described in Patent Document 1 described above, a communication network that is not normally used in the event of a disaster can be newly constructed, but the configuration of the mobile phone possessed by each individual must be changed. An example is the problem that it is difficult to implement. Moreover, since information is not transmitted / received using a secure means, there is a problem that confidential information may be stolen.

  In order to solve the above-described problems caused by the conventional technology, the present invention relays information wirelessly while performing mutual authentication in the event of a disaster, and can wirelessly transmit / receive information securely, a wireless terminal, and a wireless communication relay method An object of the present invention is to provide a wireless communication method, a wireless communication relay program, and a wireless communication program.

  In order to solve the above-described problems and achieve the object, the wireless communication relay device according to the invention of claim 1 authenticates information transmitted from a transmission source wireless terminal to a transmission destination wireless terminal at the time of a disaster. A wireless communication relay device that relays authenticated information, a supply unit that supplies power for operation by a power source acquired at the time of the disaster, and the subordinates based on the power source supplied from the supply unit A communication unit that secures a wireless communication area for a terminal with a wireless terminal and secures a wireless communication area for relaying with another wireless communication relay device for relaying to the wireless terminal that is a transmission destination, Mutual authentication is performed with the source or destination wireless terminal located in the terminal wireless communication area secured by the communication means and with the other wireless communication relay device of the relay destination. Cormorant authentication means, characterized in that it comprises a.

  According to the first aspect of the present invention, the wireless communication relay device secures a wireless communication area for a terminal with a wireless terminal under its control in the event of a disaster, and another wireless device for relaying to a wireless terminal as a transmission destination A secure communication network can be constructed by securing a wireless communication area for relaying with a communication relay device and performing mutual authentication between a subordinate wireless terminal and another wireless communication relay device. .

  According to a second aspect of the present invention, there is provided a wireless communication relay device according to the first aspect of the present invention, wherein the authentication means performs mutual authentication every time information is relayed.

  According to the second aspect of the present invention, since the wireless communication relay device performs mutual authentication every time information is relayed, spoofing by a third party can be prevented.

  According to a third aspect of the present invention, in the wireless communication relay device according to the first or second aspect of the present invention, the judging means for judging whether or not the subordinate radio terminal includes the destination radio terminal. And when the determination unit determines that the wireless terminal under control does not include the transmission destination wireless terminal, information transmitted from the transmission source wireless terminal to the transmission destination wireless terminal is transmitted. And a transmission means for transmitting to another wireless communication relay device in which the wireless communication area for relay is secured.

  According to the third aspect of the present invention, the wireless communication relay device transmits the information transmitted from the transmission source wireless terminal to the transmission destination wireless terminal to another wireless communication relay in which a wireless communication area for relay is secured. It can be sent to the device to connect the information.

  A wireless communication relay device according to a fourth aspect of the present invention is the wireless communication relay device according to any one of the first to third aspects, wherein the communication means is a relay between a plurality of the other wireless communication relay devices. A wireless communication area is secured.

  According to the fourth aspect of the present invention, the wireless communication relay device can secure a wireless communication area for relaying with a plurality of other wireless communication relay devices and expand the communication network.

  According to a fifth aspect of the present invention, in the wireless communication relay device according to any one of the first to fourth aspects of the present invention, the supply means supplies the power for operation with the power obtained from the mobile body. The communication means secures a wireless communication area for the terminal with the wireless terminal under control according to the point moved by the mobile object, and with one or a plurality of the other wireless communication relay devices. It is characterized by securing a wireless communication area for relaying between them.

  According to the invention of claim 5, the wireless communication relay device is mounted on the mobile body, secures the wireless communication area for the terminal according to the point moved by the mobile body, and one or more other wireless communication devices. A wireless communication area for relaying with the communication relay device can be secured, and the communication network can be expanded at the point moved by the mobile body.

  According to a sixth aspect of the present invention, there is provided a wireless terminal that performs transmission / reception of information with another wireless terminal in a disaster by relaying a wireless communication relay device, and is a terminal of the wireless communication relay device in the disaster. Determining means for determining whether or not the mobile communication area is within the wireless communication area, and when the determination means determines that the mobile communication area for the terminal is in the wireless communication area for the terminal And a communication unit for ensuring mutual authentication, and an authentication unit for performing mutual authentication between the wireless communication relay device in the wireless communication area for terminals secured by the communication unit.

  According to the invention of claim 6, when the wireless terminal is in the terminal wireless communication area of the wireless communication relay device, it performs mutual authentication with the wireless communication relay device in the terminal wireless communication area, Since information is transmitted and received, confidential information can be transmitted and received.

  The wireless terminal according to the invention of claim 7 is characterized in that, in the invention of claim 6, the authentication means performs mutual authentication each time information is transmitted and received.

  According to the seventh aspect of the present invention, the wireless terminal performs mutual authentication each time information is transmitted and received, and can prevent spoofing by a third party.

  Further, the disaster wireless communication unit according to the invention of claim 8 is based on supply means for supplying power for operation to the wireless communication relay device by the power acquired at the time of the disaster, based on the power supplied from the supply means, A first communication unit that secures a terminal wireless communication area with a subordinate wireless terminal and a relay wireless communication area with another wireless communication relay device, and is secured by the first communication unit. 1st authentication means for performing mutual authentication between the subordinate radio terminal located in the terminal radio communication area and the other radio communication relay device of the relay destination And one or a plurality of wireless terminals that are attached to the wireless communication relay device and relay information through the wireless communication relay device in the event of a disaster.

  According to the invention of claim 8, the disaster radio communication unit can perform mutual authentication between the provided radio communication relay device and the radio terminal to construct a communication network that keeps confidentiality.

  A disaster radio communication unit according to the invention of claim 9 is the invention according to claim 8, wherein the disaster radio communication unit determines whether or not the radio terminal has been removed from the disaster radio communication unit. Detection means for detecting is provided, and when the detection means detects that the wireless terminal has been removed, mutual authentication is performed between the wireless communication relay device and the wireless terminal.

  According to the invention of claim 9, when it is detected that the equipped wireless terminal is removed, the disaster wireless communication unit performs mutual authentication between the wireless communication relay device and the wireless terminal, and immediately It can be in a communicable state.

  Further, the disaster radio communication unit according to the invention of claim 10 is the invention according to claim 8 or 9, wherein when the radio terminal leaves the radio communication area for the terminal with the radio communication relay device, A determination unit that determines whether or not the wireless communication relay device is in a terminal wireless communication area; and the determination device determines that the wireless communication relay device is in a terminal wireless communication area , A second communication means for securing a terminal wireless communication area with the other wireless communication relay device, and the other wireless communication of a relay destination in the terminal wireless communication area secured by the second communication means And a second authentication means for performing mutual authentication with the relay device.

  According to the invention of claim 10, when the disaster wireless communication unit is included in the wireless communication area for a terminal of the wireless communication relay device provided in another disaster wireless communication unit, Information can be relayed to a radio communication relay device provided in another disaster radio communication unit.

  The disaster wireless communication unit according to the invention of claim 11 is the invention according to any one of claims 8 to 10, wherein the disaster wireless communication unit can be mounted on a mobile body. The wireless communication relay device secures a relay wireless communication area with each of one or a plurality of other wireless communication relay devices at the point of movement.

  According to the invention of claim 11, the disaster radio communication unit can be mounted on the mobile body and can be moved together with the mobile body. A wireless communication area for relay can be secured during this period, and the communication network can be expanded.

  The wireless communication relay method according to the invention of claim 12 authenticates information transmitted from a transmission source wireless terminal to a transmission destination wireless terminal in a disaster and relays the authenticated information. A wireless communication relay method in a relay device, wherein a supply step of supplying power for operation with a power source acquired at the time of a disaster, and between the wireless terminals under the control based on the power supply supplied from the supply step A communication process for securing a wireless communication area for a terminal and a wireless communication area for relaying with another wireless communication relay device for relaying to the wireless terminal as a transmission destination, and secured by the communication process An authentication process for performing mutual authentication with the source or destination wireless terminal located in the terminal wireless communication area and with the other wireless communication relay device of the relay destination Characterized in that it comprises a and.

  According to the twelfth aspect of the present invention, in the wireless communication relay device, the terminal wireless communication area with the wireless terminal under its control is ensured in the event of a disaster, and other relays are performed to relay to the transmission destination wireless terminal. A secure communication network can be constructed by securing a wireless communication area for relaying with a wireless communication relay device and performing mutual authentication between the subordinate wireless terminal and another wireless communication relay device. it can.

  A radio communication method according to a thirteenth aspect of the invention is a radio communication method in a radio terminal that performs transmission / reception of information with another radio terminal in a disaster by relaying a radio communication relay device. A determination step for determining whether or not the communication relay device is in the terminal wireless communication area, and if the determination step determines that the communication relay device is in the terminal wireless communication area, A communication step for securing a wireless communication area for the terminal, and an authentication step for performing mutual authentication between the wireless communication relay devices in the wireless communication area for the terminal secured by the communication step. .

  According to the invention of claim 13, when the wireless terminal is in the wireless communication area for the terminal of the wireless communication relay device, mutual authentication is performed with the wireless communication relay device in the wireless communication area for the terminal. In order to send and receive information, confidential information can be sent and received.

  According to a fourteenth aspect of the present invention, a wireless communication relay program causes a computer to execute the wireless communication relay method according to the twelfth aspect.

  According to the invention of claim 14, it is possible to cause a computer to execute the wireless communication relay method according to claim 12.

  According to a fifteenth aspect of the present invention, a wireless communication program causes a computer to execute the wireless communication method according to the thirteenth aspect.

  According to the fifteenth aspect of the present invention, it is possible to cause a computer to execute the wireless communication method according to the thirteenth aspect.

  According to the wireless communication relay device, the wireless terminal, the disaster wireless communication unit, the wireless communication relay method, the wireless communication method, the wireless communication relay program, and the wireless communication program according to the present invention, secure and comfortable wireless communication in the event of a disaster, There is an effect that the communication network can be arbitrarily expanded.

  Exemplary embodiments of a wireless communication relay device, a wireless terminal, a disaster wireless communication unit, a wireless communication relay method, a wireless communication method, a wireless communication relay program, and a wireless communication program according to the present invention are described below with reference to the accompanying drawings. Will be described in detail.

(Embodiment 1)
(Configuration of wireless communication system)
First, the configuration of the wireless communication system according to the first embodiment will be described with reference to FIG. FIG. 1 is an explanatory diagram of the configuration of the wireless communication system according to the first embodiment. In FIG. 1, a wireless communication system 100 includes wireless terminals 101 (101a and 101b) and access points 110 (110a to 110g). Here, the access point 110 implements the function of a wireless communication relay device. Further, in FIG. 1, it is assumed that the wireless terminal 101 has a transmission source wireless terminal A 101a held by a sender and a transmission destination wireless terminal B 101b held by a receiver.

  The access point (AP) 110 is installed in a public facility or the like. Specifically, for example, it is installed in a facility such as a school 110a, a library 110b, a fire department 110c, a corporate building 110d, and a hospital 110e, a public object such as a telegraph pole 110f, and a moving body such as a vehicle 110g. The moving body is, for example, an ambulance, a fire truck, a bus, a taxi, a private car, a motorcycle, or the like. Here, the access point 110 can communicate with other access points 110 in each wireless communication area. Therefore, the information transmitted from the wireless terminal A 101a can be relayed between the access points 110. As a result, a network (mesh) communication network is constructed as shown in FIG.

  As a wireless LAN mode, an infrastructure mode in which communication is performed via the access point 110 is used. In the ad hoc mode in which the wireless terminals 101 communicate directly with each other without using the access point 110, there are restrictions such as being unable to communicate with two or more wireless terminals 101 at the same time. However, in the infrastructure mode, two or more wireless devices are connected. It can communicate with the terminal 101.

  In FIG. 1, it is assumed that the wireless terminal A 101a is in the wireless communication area of the school 110a and the wireless terminal B 101b is in the wireless communication area of the hospital 110e. Therefore, when data is transmitted from the wireless terminal A 101a by the sender, the data is first received by the school 110a, and further relayed through the plurality of access points 110 and transferred to the hospital 110e. Then, the wireless terminal B 101b held by the recipient receives the data transmitted from the hospital 110e.

  Here, when both the wireless terminal A 101 a and the wireless terminal B 101 b exist within the wireless communication area of one access point 110, communication can be performed only through this one access point 110. On the other hand, if either one or both are not within the wireless communication area of one access point 110, data can be exchanged between the wireless terminals 101 by relaying the other access point 110. Specifically, for example, only the fire station 110c may be relayed between the school 110a and the hospital 110e, or may be relayed in the order of the library 110b and the fire station 110c. The data route may be selected arbitrarily, or a route that is not congested may be automatically selected.

  A communication protocol capable of wirelessly communicating between the access points 110 in this way is referred to as a WDS (Wireless Distribution System). Data transmitted from the wireless terminal A 101a to the wireless terminal B 101b can be connected to the wireless terminal B 101b by relaying the data between the access points 110 by WDS and repeating this process. When communication is repeated in this way, the communication network spreads in a mesh shape, so that redundant communication can be performed.

  In the present invention, wireless communication is performed by WiFi (Wireless Fidelity) compliant with IEEE802.11. However, wireless communication may be performed by WiMAX (Worldwide Interoperability Access) compliant with IEEE802.16.

  In wireless communication using WDS, unlike wired communication, the risk of eavesdropping on a flowing radio wave increases. Therefore, in the present invention, communication is performed by a secure means using IPN (Identified Private Network or the Intelligent Packet Network).

  The IPN can perform mutual authentication without going through a certificate authority or an authentication server. The setting is very simple because it is completed only by registering the authentication ID and the authentication password. Furthermore, in the authentication method in which the authentication password is fixed, there is a problem if the authentication password is stolen, but in the case of IPN, the authentication password dynamically changes with a one-time password. Further, since the update frequency of the authentication password is every packet, eavesdropping cannot be performed. The authentication password does not flow on the network, and only flows a one-way hash value. Furthermore, since it has a data tampering detection function and the tampered data is automatically discarded, communication between the two parties can only allow tamper-free communication between trusted and mutually authenticated devices.

  Accordingly, the IPN eliminates the impersonation of the wireless terminal 101 and the access point 110, performs mutual authentication for each TCP session, and dynamically changes the authentication password for each packet, thereby allowing the wireless terminal 101 and the access point 110 to be Data can be transmitted and received between the two access points 110 by a secure means.

  The data to be transmitted in the present invention is voice information, character information, image information, and the like. The voice information is transmitted / received using, for example, a TCP / IP network. Specifically, for example, voice information is exchanged by VoIP (Voice over Internet Protocol).

  In addition, as shown in FIG. 1, by installing the access point 110 from the normal time, it is possible to immediately establish a wireless communication network in the event of a disaster. In addition, the wireless communication network is a unique communication network that is different from the public telephone network, even when the public telephone network of regular telephones and mobile phones becomes disconnected or difficult to connect due to congestion or traffic restrictions. Not receive. Here, congestion is a state in which access to the public network is concentrated and communication is difficult to connect. In addition, the traffic regulation is that communication is restricted in order to prevent the system from being stopped due to congestion.

  And since it is wireless, the line is not severed. In addition, since there is no need for a base station or an authentication server and it is only necessary to have an access point 110 that can be easily increased, a failure due to the facility is unlikely to occur. Furthermore, since power can be supplied from a vehicle or the like, the system will not stop even if a power failure occurs. For this reason, this invention can ensure a communication network reliably at the time of a disaster. In addition, since data can be exchanged by IPN using secure means, data can not be stolen by eavesdropping or the like, and communication can be performed safely.

(Access point configuration)
Next, the configuration of the access point will be described with reference to FIG. FIG. 2 is a block diagram showing the configuration of the access point. Access point 110 implements the function of a wireless communication relay device. In FIG. 2, the access point 110 includes a supply unit 201, a communication unit 210, an authentication unit 220, and a determination unit 230. In addition, the communication unit 210 includes a reception unit 211 and a transmission unit 212.

  The supply unit 201 supplies power for operation with the power acquired in the event of a disaster. Specifically, for example, power is acquired from a facility outlet or an emergency power source using an outlet plug or the like and supplied to the access point 110. In addition, the supply unit 201 may acquire a power supply for operation using a power supply obtained from a moving object. Specifically, for example, a power source may be acquired from a cigar socket of a moving body using a cigar plug or the like.

  The communication unit 210 secures a terminal wireless communication area with the subordinate wireless terminal 101 based on the power supplied from the supply unit 201 and performs other access for relaying to the destination wireless terminal 101. A wireless communication area for relaying with the point 110 is secured. The subordinate wireless terminal 101 is a wireless terminal 101 in the wireless communication area of the access point 110. For example, when the subordinate radio terminal 101 is the source and destination radio terminal 101, information is directly transmitted and received.

  In addition, the communication unit 210 secures a relay wireless communication area with a plurality of other access points 110. The access points 110 can communicate with each other and can relay information. Therefore, for example, when there is another access point 110 in the wireless communication area of the access point 110, the wireless terminals 101 can communicate with each other from anywhere in the wireless communication area for both terminals, so the communication network can be expanded.

  Further, the communication unit 210 secures a terminal wireless communication area with a subordinate wireless terminal according to a point moved by the mobile object, and relays with one or more other access points 110. Secure a wireless communication area. The access point 110 can expand the communication network at any point moved by the user, and can construct an efficient communication network.

  The receiving unit 211 receives information transmitted from the transmission-source wireless terminal A 101 a toward the transmission-destination wireless terminal B 101 b from the transmission-source wireless terminal A 101 a or another access point 110. Specifically, for example, when there is a source wireless terminal A 101a in the subordinate wireless terminal 101, information is received from the source wireless terminal A 101a, and when there is no source wireless terminal A 101a, Information is received from another access point 110.

  When the determination unit 230 described later determines that the subordinate wireless terminal 101 does not include the transmission destination wireless terminal B 101b, the transmission unit 212 proceeds from the transmission source wireless terminal A 101a to the transmission destination wireless terminal B 101b. Information to be transmitted is transmitted to another access point 110 in which a wireless communication area for relay is secured. In addition, when the determination unit 230 described later determines that the subordinate wireless terminal 101 includes the transmission destination wireless terminal B 101b, the transmission unit 212 transmits the transmission destination wireless terminal in which the terminal wireless communication area is secured. To B101b.

  The authentication unit 220 communicates with the transmission-source wireless terminal A 101a or the transmission-destination wireless terminal B 101b located within the terminal wireless communication area secured by the communication unit 210, and with the other relay-destination access point 110. Perform mutual authentication. Further, the authentication unit 220 performs mutual authentication every time information is relayed. Specifically, for example, mutual authentication is performed by changing the authentication password for each communication using a one-time password.

  The determination unit 230 determines whether the subordinate wireless terminal 101 includes the transmission destination wireless terminal B 101b. The determination unit 230 detects, for example, the wireless terminal 101 included in the terminal wireless communication area by a detection unit (not shown), and determines whether or not the transmission destination wireless terminal B 101b is included.

(Configuration of source wireless terminal A)
Next, the configuration of the source wireless terminal A 101a will be described with reference to FIG. FIG. 3 is a block diagram illustrating a configuration of the wireless terminal A that is a transmission source. In FIG. 3, the wireless terminal A 101 a includes a detection unit 301, an input unit 302, a determination unit 303, a communication unit 304, and an authentication unit 305. Here, it is assumed that the wireless terminal A 101a transmits and receives information to and from other wireless terminals 101 in a disaster and relays the access point. The access point may be the same as or separate from the access point 110 shown in FIG. Further, the wireless terminal A 101a may include a configuration of a wireless terminal B 101b described later.

  The detection unit 301 detects the terminal wireless communication area of the access point. Specifically, for example, it is detected whether or not the wireless terminal A 101a is in the terminal wireless communication area of an arbitrary access point.

  The input unit 302 inputs information to be transmitted to the transmission destination wireless terminal B 101b. Specifically, for example, voice information is input using a microphone. Further, the input unit 302 may input information for specifying the transmission destination wireless terminal B 101b. Specifically, for example, information specifying the transmission destination wireless terminal B 101b is input using a remote controller, a keyboard, a mouse, a touch panel, or the like that includes a plurality of keys for inputting characters, numerical values, various instructions, and the like.

  The determination unit 303 determines whether or not the wireless terminal A 101a is in the access point wireless communication area at the time of a disaster. Based on the detection result detected by the detection unit 301, the determination unit 303 may determine whether or not the wireless terminal A 101a is in the terminal wireless communication area of the access point.

  When the determination unit 303 determines that the wireless terminal A 101a is in the terminal wireless communication area, the communication unit 304 secures a terminal wireless communication area between the wireless terminal A 101a and the access point.

  The authentication unit 305 performs mutual authentication with an access point in the terminal wireless communication area secured by the communication unit 304. The authentication unit 305 performs mutual authentication every time information is transmitted and received. Specifically, for example, mutual authentication is performed by changing the authentication password for each communication using a one-time password.

(Configuration of destination wireless terminal B)
Next, the configuration of the destination wireless terminal B 101b will be described with reference to FIG. FIG. 4 is a block diagram illustrating the configuration of the wireless terminal B that is the transmission destination. In FIG. 4, the wireless terminal B 101 b includes a communication unit 401, an authentication unit 402, a determination unit 403, and an output unit 404. Here, the wireless terminal B 101b may include the configuration of the wireless terminal A 101a. Further, the wireless terminal A 101a and the wireless terminal B 101b may be the same body or separate bodies.

  When the determination unit 403, which will be described later, determines that the wireless terminal B 101b is in the terminal wireless communication area, the communication unit 401 secures a terminal wireless communication area between the wireless terminal B 101b and the access point. The communication unit 401 receives information transmitted from the wireless terminal A 101a that is the transmission source from the access point.

  The authentication unit 402 performs mutual authentication with an access point in the terminal wireless communication area secured by the communication unit 401. There may be one or more access points in the terminal wireless communication area secured by the communication unit 401. The authentication unit 402 performs mutual authentication every time information is transmitted to and received from the access point. Specifically, for example, mutual authentication is performed by changing the authentication password for each communication using a one-time password.

  The determination unit 403 determines whether or not the wireless terminal B 101b is in the access point wireless communication area at the time of a disaster. The determination unit 403 may determine whether or not the wireless terminal B 101b is within the terminal wireless communication area of the access point based on the detection result detected by the detection unit (not shown).

  The output unit 404 outputs information transmitted from the transmission-source wireless terminal A 101a. Specifically, for example, voice information, a ringing tone, a warning tone, and the like are output from a speaker or the like. The output unit 404 may display image information and character information on the display screen.

(Outline of wireless communication processing of wireless communication system)
Next, an outline of processing of the wireless communication system will be described with reference to FIG. FIG. 5 is a sequence diagram showing an outline of wireless communication processing of the wireless communication system. FIG. 5 shows an example in which information is transmitted and received by relaying between access point a (APa) 500a and access point b (APb) 500b, which are arbitrary two points of access point 110 shown in FIG. In FIG. 5, first, the wireless terminal A 101a performs mutual authentication with the access point a 500a in the wireless communication area of the wireless terminal A 101a (step S501). If mutual authentication with the access point a 500a is not performed in step S501, the wireless communication process is terminated as it is. On the other hand, when mutual authentication with the access point a 500a is performed, a connection request to the wireless terminal B 101b is transmitted to the access point a 500a (step S502).

  Next, when the connection request to the wireless terminal B 101b is received in step S502, the access point a 500a detects whether or not the wireless terminal B 101b is within the wireless communication area (step S503). If it is determined that the wireless terminal B 101b is not in the wireless communication area based on the detection result detected in step S503 (step S504), the wireless terminal B 101b is connected to the access point b 500b in the wireless communication area of the access point a 500a. Mutual authentication is performed (step S505). If mutual authentication with the access point b500b is not performed in step S505, the wireless communication process is terminated as it is. On the other hand, when mutual authentication is performed with the access point b500b, a connection request to the wireless terminal B101b is transferred to the access point b500b.

  When the access point b500b receives a connection request from the access point a500a, the access point b500b detects whether or not the wireless terminal B101b is within the wireless communication area (step S506). If the wireless terminal B 101b is determined to be within the wireless communication area based on the detection result detected in step S506 (step S507), mutual authentication with the wireless terminal B 101b is performed (step S508). If mutual authentication with the wireless terminal B 101b is not performed in step S508, the wireless communication process is terminated as it is. On the other hand, when mutual authentication is performed with the wireless terminal B 101b, a connection request from the wireless terminal A 101a is transmitted to the wireless terminal B 101b.

  Next, when the wireless terminal B 101b receives the connection request from the wireless terminal A 101a and accepts the connection establishment, the wireless terminal B 101b transmits a connection response to the wireless terminal A 101a to the access point b 500b (step S509). Then, the connection response transmitted in step S509 is transferred from the access point b500b to the access point a500a and passed to the wireless terminal A101a.

  Thus, when the wireless terminal A 101a receives the connection response, the connection between the wireless terminal A 101a and the wireless terminal B 101b is established. When the connection is established, data can be exchanged. The wireless terminal A 101a communicates with the wireless terminal B 101b (step S510). Here, also in the exchange of data after the connection is established, the access point 110 is relayed.

  In the sequence diagram of FIG. 5, the data transmitted from the wireless terminal A 101a is relayed to the access point a 500a and the access point b 500b and transferred to the wireless terminal B 101b. Further, the data transmitted from the wireless terminal B 101b is relayed to the wireless terminal A 101a via the access point b 500b and the access point a 500a. In addition, authentication is performed every time data is transferred. Further, the authentication password is changed for each authentication using a one-time password.

  In the sequence diagram of FIG. 5, when it is determined in step S507 that the wireless terminal B 101b is in the wireless communication area, a connection request from the wireless terminal A 101a is transmitted to the wireless terminal B 101b. Absent. For example, when it is determined that the wireless terminal B 101b is not within the wireless communication area of the access point b 500b, the connection request from the wireless terminal A 101a may be transferred to another access point 110.

  Further, in the sequence diagram of FIG. 5, although it is assumed in step S503 and step S506 whether or not the wireless terminal B 101b is within the wireless communication area, the present invention is not limited to this. For example, when the connection request is transmitted from the wireless terminal A 101a, the relay access point 110 may be determined.

(Contents of mutual authentication processing)
Next, contents of mutual authentication processing performed when data is transferred between the wireless terminal 101 and the access point 110 in FIG. 5 or between the two access points 110 will be described with reference to FIG. FIG. 6 is a sequence diagram showing the contents of the mutual authentication process. In FIG. 6, first, the wireless terminal 101 adds an IPN-WLAN (Wireless LAN) WDS Request (IPN-WLAN request) to the 802.11 Probe Request (probe request), and transmits it to the access point 110 (step S601). .

  Next, the access point 110 confirms the IPN-WLAN request added to the probe request transmitted in step S601. Then, IPN-WLAN Authentication data (IPN-WLAN authentication data) is added to the probe request transmitted to the wireless terminal 101 (source address) and sent (step S602). Further, the access point 110 adds the IPN-WLAN request to the probe request and transmits it to the wireless terminal 101 (step S603).

  Then, the wireless terminal 101 authenticates the access point 110 using the IPN-WLAN authentication data of the probe request transmitted in step S602. Furthermore, the IPN-WLAN request added to the probe request transmitted in step S603 is confirmed. Further, IPN-WLAN authentication data is added to the 802.11 probe response (probe response) transmitted to the access point 110 (source address) and transmitted (step S604).

  Next, the access point 110 authenticates the wireless terminal 101 using the IPN-WLAN authentication data of the probe response transmitted in step S604. Thus, mutual authentication of the wireless terminal 101 and the access point 110 is performed, and a communication connection is established. After the connection is established, between the wireless terminal 101 and the access point 110, 802.11 WDS Data frame (data frame) and IPN-WLAN Authentication data with AES 128bit (IPN-WLAN authentication data for AES encryption processing) Are transmitted and received (step S605).

  After step S605, the wireless terminal 101 authenticates the access point 110 with IPN-WLAN authentication data every time a data frame is received. Then, AES encryption processing using IPN-WLAN authentication data as an encryption key is performed. The IPN-WLAN authentication data is updated every time the access point 110 is authenticated. A method of updating the IPN-WLAN authentication data every time the access point 110 is authenticated in this way is called a one-time password. Further, the encryption key is updated every time the access point 110 is authenticated by updating the IPN-WLAN authentication data.

  Similarly, after step S605, the access point 110 authenticates the wireless terminal 101 with the IPN-WLAN authentication data every time a data frame is received. Then, AES encryption processing using IPN-WLAN authentication data as an encryption key is performed. The IPN-WLAN authentication data is updated every time the wireless terminal 101 is authenticated. Similarly, every time the wireless terminal 101 is authenticated, the IPN-WLAN authentication data is updated. Further, the encryption key is updated every time the wireless terminal 101 is authenticated.

(Example of the configuration of the disaster radio communication unit)
Next, the configuration of the disaster radio communication unit 701 will be described with reference to FIG. FIG. 7 is an explanatory diagram showing an example of the configuration of the disaster radio communication unit. In FIG. 7, the disaster wireless communication unit 701 includes a wireless terminal 101, an access point 110, and a power supply unit 702. The number of wireless terminals 101 in the disaster wireless communication unit 701 is arbitrary. In FIG. 7, six wireless terminals 101 are installed.

  The disaster wireless communication unit 701 is installed in public facilities, telephone poles, and vehicles. When installed in a vehicle, it may be mounted on the vehicle at all times, or a unit installed in a public facility or telephone pole may be taken out as necessary and installed in the vehicle. Specifically, for example, you may always have emergency vehicles, such as an ambulance, a fire engine, and a police car. By always keeping the emergency vehicle, it is possible to connect the communication network of the wireless terminal 101 held by the disaster victim to the destination when the emergency vehicle is rescued. The disaster wireless communication unit 701 may be installed together with other disaster supplies and connected to an emergency power source. For example, it may be installed together with a disaster helmet, a disaster flashlight or a digestive organ.

  In addition, when the facility is turned off due to a power failure or the like, the disaster-time wireless communication unit 701 may be detached from a public facility and installed in a vehicle or the like. Furthermore, when the wireless communication area of the access point 110 does not overlap with the wireless communication area of the other access points 110 and a communication network cannot be secured, the disaster wireless communication unit 701 is removed from the facility and installed in a vehicle or the like, You may move to a place where a communication network can be secured.

  The power supply unit 702 is connected to a vehicle such as a general vehicle 710, a taxi 711, a bus 712, or an outlet of a public facility, and supplies power to the radio communication unit 701 at the time of a disaster. Specifically, the power supply unit 702 supplies power to the access point 110 by, for example, being inserted into an outlet or a cigar socket. Further, the wireless terminal 101 may be charged. Further, the shape of the power supply unit 702 may be an outlet plug or a cigar plug, or a shape that can be supplied with power from a solar cell, a motorcycle, or the like. Further, the power supply unit 702 may be plural or may have different shapes.

  The wireless terminal 101 can be detached from the wireless communication unit 701 at the time of disaster. Then, the wireless terminal 101 may be powered on by removing it from the disaster wireless communication unit 701, for example. Further, as soon as the wireless communication unit 701 is removed from the disaster, mutual authentication with the access point 110 may be performed and communication may be established. The wireless terminal 101 can also communicate with an access point 110 other than the access point 110 provided in the disaster wireless communication unit 701. When the wireless terminal 101 enters the wireless communication area of another access point 110, the other access point 110, mutual authentication can be performed and communication can be performed.

(An example of installing a radio communication unit in a vehicle during a disaster)
Next, an example of installing the disaster wireless communication unit 701 in a vehicle will be described with reference to FIG. FIG. 8 is an explanatory diagram showing an example of installing a disaster radio communication unit in a vehicle. FIG. 8 shows a disaster radio communication unit 701, a power supply unit 702, a cigar socket 801, and an engine operation unit 802 in the vehicle. As shown in FIG. 8, the disaster radio communication unit 701 supplies power by inserting the power supply unit 702 into the cigar socket 801. In addition, when power is supplied from the cigar socket 801, the engine of the vehicle must be in operation, so the engine operation unit 802 is turned on.

  The access point 110 included in the disaster wireless communication unit 701 may function by supplying power from the cigar socket 801 at all times. Alternatively, a rechargeable battery or the like may be charged by the power supply unit 702, and power may be supplied from the rechargeable battery even after power from the cigar socket 801 is not supplied. The rechargeable battery may be provided in the access point 110. The wireless terminal 101 includes a rechargeable battery and supplies power from a rechargeable battery charged by the power supply unit 702. Further, the wireless terminal 101 may be charged while being installed in the disaster wireless communication unit 701. Further, the wireless terminal 101 may be configured to receive information even when power is not supplied.

  In FIG. 8, the disaster wireless communication unit 701 is placed on the passenger seat, but there may be a dedicated installation place such as on the dashboard, under the seat, or on the ceiling. Usually, at the time of a disaster, it is necessary to secure a communication network within 72 hours after the disaster occurs. The disaster wireless communication unit 701 can communicate as long as the vehicle engine operates, and can be installed and changed in another vehicle even if the vehicle engine stops operating due to a failure or running out of fuel. Therefore, the communication network can be secured without fail.

(Embodiment 2)
(An example of how to use the wireless communication unit during a disaster when a river is flooded)
Next, an example of a method for securing a communication network when a disaster actually occurs using the disaster wireless communication unit 701 described in the first embodiment will be described. FIG. 9 is an explanatory diagram showing an example of a method of using the disaster radio communication unit when a river is flooded. In FIG. 9, a vehicle 910 and a vehicle 911 are located on both banks of a flooded river 901.

  The vehicle 910 and the vehicle 911 are each equipped with a disaster radio communication unit 701. These disaster wireless communication units 701 may be mounted on the vehicle from the normal time, or may be removed from public facilities and mounted on the vehicles 910 and 911 at the time of a disaster. In FIG. 9, it is assumed that the river 901 is flooded and the wired communication network is cut off. Also, the mobile phone base station may collapse. Even when the river 901 is flooded in this way and the normal communication network is interrupted, for example, after the flooding of the river 901 has subsided, the vehicle 910, 911 is moved to an optimal position, so that a communication network can be easily constructed. can do.

  Specifically, for example, the vehicle is located at a position where the access point 110 of the disaster wireless communication unit 701 mounted on the vehicle 911 enters the wireless communication area of the access point 110 of the disaster wireless communication unit 701 mounted on the vehicle 910. 910 and 911 are moved. And the communication cut off by the flooding of the river 901 is connected. Therefore, since the communication network on the vehicle 911 side and the communication network on the vehicle 911 side can be connected, the safety of the person can be confirmed and the rescue operation can be performed smoothly.

(Embodiment 3)
(An example of how to use the wireless communication unit during a disaster when a landslide or avalanche occurs)
Next, another example of a method for securing a communication network when a disaster actually occurs using the disaster wireless communication unit 701 described in Embodiment 1 will be described with reference to FIG. FIG. 10 is an explanatory diagram showing an example of a method of using the wireless communication unit 701 at the time of disaster when a landslide or avalanche occurs.

  In FIG. 10, a landslide has occurred due to a disaster such as an earthquake, and a village 1001 near the summit is isolated from the surroundings. If the mountain road cannot pass due to the landslide, and if the wired communication network is broken or the base station of the mobile phone collapses, communication to the village 1001 will be interrupted. If information cannot be obtained due to the lack of communication, rescue activities will be hindered, and the safety of people in the village 1001 will not be known. Here, within the wireless communication area of the access point 110 of the disaster wireless communication unit 701 mounted on the vehicle 1002 on the village 1001 side, the access point 110 of the disaster wireless communication unit 701 mounted on the vehicle 1003 on the shore side is located. By moving the vehicles 1002 and 1003 to the entry position, communication with the village 1001 becomes possible, and it is possible to smoothly confirm the safety of people and to carry out rescue activities.

  Further, although the vehicles 1002 and 1003 have been described with reference to FIG. 10, for example, when the vehicles 1002 and 1003 cannot be located in a communicable range due to a wide range of landslides, a disaster radio communication unit 701 is mounted on a helicopter or the like. Also good. The access point 110 mounted in the disaster wireless communication unit 701 can communicate even while moving if the access point 110 is below a predetermined speed.

(Embodiment 4)
(Method of expanding the communication network by moving the wireless communication area)
Next, a method for expanding the communication network by moving the wireless communication area will be described with reference to FIG. FIG. 11 is an explanatory diagram showing an example of a method for expanding a communication network by moving a wireless communication area. In FIG. 11, one access point 1101, a wireless communication area 1102 of one access point 1101, a communication network 1103 formed by a plurality of access points, another access point 1104, and wireless of other access points. A communication area 1105, an access point 1106a outside the communication network 1103, and a wireless communication area 1107a of the access point 1106a are shown. Here, one access point 1101, another access point 1104, and an access point 1106a that is removed from the communication network 1103 perform the same functions as the access point 110 shown in FIG.

  When the wireless communication area 1102 of one access point 1101 is represented by the radius R, if there is another access point 1104 within the radius R from the access point 1101, the wireless communication area 1102 of the two access points 1101 and 1104, A combination of 1105 is a communication network. In this way, by connecting the respective access points, the communication network 1103 shown in FIG. 11 is formed.

  Here, when trying to communicate from the wireless terminal 1110 in the wireless communication area 1102 of the access point 1101 to the wireless terminal 1111, communication cannot be performed because the wireless terminal 1111 is disconnected from the communication network 1103. Therefore, by mounting the access point 1106a that is out of the communication network 1103 on a vehicle or the like and moving it to the position of the access point 1106b, the communication network 1103 is expanded by the wireless communication area 1107b, and the wireless terminal 1111 enters the communication network 1103 . As a result, communication between the wireless terminal 1110 and the wireless terminal 1111 becomes possible.

  For example, even if a disaster-time wireless communication unit 701 is installed in a facility so as to cover the entire region, it may be destroyed due to a disaster, or power may not be supplied. In this case, the disaster wireless communication unit 701 installed in the facility can be replaced with a moving body, or the disaster wireless communication unit 701 already installed in the vehicle can be supplied with power from the vehicle and moved. The communication network 1103 can be secured in any direction and any size.

  As described above, according to the wireless communication relay device, the wireless terminal, the disaster wireless communication unit, the wireless communication relay method, the wireless communication method, the wireless communication relay program, and the wireless communication program according to the present embodiment, the disaster wireless The communication unit 701 can perform communication in a secure manner even when the cable is disconnected during a disaster. In addition, the communication network can be expanded in an arbitrary direction and an arbitrary size by being mounted on a mobile body.

  The wireless communication relay method or wireless communication method described in this embodiment can be realized by executing a program prepared in advance on a computer such as a personal computer or a workstation. This program is recorded on a computer-readable recording medium such as a hard disk, a flexible disk, a CD-ROM, an MO, and a DVD, and is executed by being read from the recording medium by the computer. The program may be a transmission medium that can be distributed via a network such as the Internet.

  As described above, the wireless communication relay device, the wireless terminal, the disaster wireless communication unit, the wireless communication relay method, the wireless communication method, the wireless communication relay program, and the wireless communication program according to the present invention are useful for disaster wireless communication. In particular, it is suitable for transmitting / receiving information that needs to be kept secret when the cable is disconnected.

1 is an explanatory diagram showing a configuration of a wireless communication system according to a first exemplary embodiment; It is the block diagram shown about the structure of the access point. It is the block diagram shown about the structure of the radio | wireless terminal A of the transmission origin. It is the block diagram shown about the structure of the radio | wireless terminal B of a transmission destination. It is the sequence diagram which showed the outline | summary of the radio | wireless communication process of a radio | wireless communications system. It is the sequence diagram shown about the content of the process of mutual authentication. It is explanatory drawing shown about an example of a structure of the radio | wireless communication unit at the time of a disaster. It is explanatory drawing shown about an example which installs the radio | wireless communication unit at the time of a disaster in a vehicle. It is explanatory drawing shown about an example of the utilization method of the radio communication unit at the time of a disaster when the river overflows. It is explanatory drawing shown about an example of the utilization method of the radio | wireless communication unit at the time of a disaster when the cliff collapse and the avalanche occurred. It is explanatory drawing shown about an example of the method of expanding a communication network by moving a wireless communication area.

Explanation of symbols

110 access point 101a wireless terminal A
101b Wireless terminal B
DESCRIPTION OF SYMBOLS 201 Supply part 210 Communication part 220 Authentication part 230 Determination part 301 Detection part 302 Input part 303 Determination part 304 Communication part 305 Authentication part 401 Communication part 402 Authentication part 403 Determination part 404 Output part

Claims (15)

A wireless communication relay device that performs authentication of information transmitted from a transmission source wireless terminal to a transmission destination wireless terminal at the time of a disaster, and relays the authenticated information,
Supply means for supplying power for operation with the power acquired at the time of the disaster;
Based on the power supplied from the supply means, a terminal wireless communication area with the subordinate wireless terminal is secured, and another wireless communication relay device for relaying to the destination wireless terminal A communication means for securing a wireless communication area for relaying between,
Authentication means for performing mutual authentication with the source or destination wireless terminal located within the terminal wireless communication area secured by the communication means and with the other wireless communication relay device at the relay destination When,
A wireless communication relay device comprising:   The wireless communication relay device according to claim 1, wherein the authentication unit performs mutual authentication each time information is relayed. Determining means for determining whether or not the wireless terminal under control includes the wireless terminal as a transmission destination;
When it is determined by the determination means that the wireless terminal under transmission does not include the wireless terminal as a transmission destination, information transmitted from the wireless terminal as a transmission source to the wireless terminal as a transmission destination is The wireless communication relay device according to claim 1, further comprising a transmission unit configured to transmit to another wireless communication relay device in which a relay wireless communication area is secured.   The wireless communication relay device according to claim 1, wherein the communication unit secures a wireless communication area for relaying between the plurality of other wireless communication relay devices. The supply means supplies a power source for operation by a power source earned from a mobile object,
The communication means secures a terminal wireless communication area with the subordinate wireless terminal according to a point moved by the mobile body, and between one or a plurality of the other wireless communication relay devices. The wireless communication relay device according to claim 1, wherein a wireless communication area for relay is secured. In a wireless terminal that relays information with other wireless terminals during a disaster by relaying a wireless communication relay device,
A determination means for determining whether or not the wireless communication relay device is in a terminal wireless communication area at the time of the disaster;
If it is determined by the determination means that the wireless communication area for the terminal is entered, the communication means for securing the wireless communication area for the terminal with the wireless communication relay device;
Authentication means for performing mutual authentication with the wireless communication relay device in the terminal wireless communication area secured by the communication means;
A wireless terminal comprising:   The wireless terminal according to claim 6, wherein the authentication unit performs mutual authentication each time information is transmitted and received. Supply means for supplying power for operation to the wireless communication relay device by the power acquired at the time of disaster;
A first wireless communication area for a terminal and another wireless communication relay device is secured while a terminal wireless communication area is secured with a subordinate wireless terminal based on the power supplied from the supply means. Communication means;
First authentication means for performing mutual authentication with the subordinate wireless terminal located in the terminal wireless communication area secured by the communication means, and with the other wireless communication relay device of the relay destination;
A wireless communication relay device having:
One or more wireless terminals that are attached to the wireless communication relay device and relay information through the wireless communication relay device in the event of a disaster, and
A disaster radio communication unit comprising: The disaster wireless communication unit includes detection means for detecting whether or not the wireless terminal has been removed from the disaster wireless communication unit,
9. The disaster radio communication unit according to claim 8, wherein when the detection unit detects that the radio terminal is removed, mutual authentication is performed between the radio communication relay device and the radio terminal. . When the wireless terminal leaves the wireless communication area for terminals with the wireless communication relay device, a determination means for determining whether or not the wireless terminal is in the wireless communication area for terminals of another wireless communication relay device;
Second communication means for securing a terminal wireless communication area with the other wireless communication relay device when the determination means determines that the wireless communication relay device is in a terminal wireless communication area of the other wireless communication relay device; ,
Second authentication means for performing mutual authentication with the other wireless communication relay device as a relay destination in the terminal wireless communication area secured by the second communication means;
The disaster radio communication unit according to claim 8 or 9, further comprising: The disaster wireless communication unit can be mounted on a mobile body and can be moved together with the mobile body.
The wireless communication relay device secures a wireless communication area for relay with each of one or a plurality of other wireless communication relay devices at a moved point. Disaster radio communication unit described in 1. A wireless communication relay method in a wireless communication relay device that authenticates information transmitted from a transmission source wireless terminal to a transmission destination wireless terminal in a disaster and relays the authenticated information,
A supply step of supplying power for operation with the power acquired at the time of the disaster;
Based on the power supplied from the supply step, secure a terminal wireless communication area with the subordinate wireless terminal, and with another wireless communication relay device for relaying to the destination wireless terminal A communication process to secure a wireless communication area for relaying between,
An authentication step of performing mutual authentication with the source or destination wireless terminal located in the terminal wireless communication area secured by the communication step and with the other wireless communication relay device of the relay destination When,
A wireless communication relay method comprising: In a wireless communication method in a wireless terminal that performs transmission and reception of information with other wireless terminals at the time of a disaster by relaying a wireless communication relay device,
A determination step of determining whether or not the wireless communication relay device is in a terminal wireless communication area at the time of the disaster;
If it is determined by the determination step that the wireless communication area for the terminal is entered, a communication step for securing the wireless communication area for the terminal with the wireless communication relay device;
An authentication step of performing mutual authentication with the wireless communication relay device in the wireless communication area for the terminal secured by the communication step;
A wireless communication method comprising:   A wireless communication relay program that causes a computer to execute the wireless communication relay method according to claim 12.   A wireless communication program causing a computer to execute the wireless communication method according to claim 13.

Images