JP2009159408A - Radio communication method and radio communication system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To secure high reliability by completing the authentication of time information in an early stage. <P>SOLUTION: In the radio communication method of this invention, a mobile station acquires the time information from a base station 120, sets it as the time information of itself, the mobile station requests the acquisition of a certificate including the identifier of a time authentication server 140 to an authentication destination specifying server 150, and the authentication destination specifying server transmits the certificate to the mobile station. The mobile station transmits the time information of itself and the identifier of the time authentication server to the base station, and the base station requests the time authentication server specified by the identifier to authenticate the time information of the mobile station. When the time authentication server is incapable of authentication, the base station transmits the identifier of the time authentication server to the authentication destination specifying server, and the authentication destination specifying server selects the server other than the time authentication server specified by the identifier transmitted from the base station as an authentication destination and transmits it for certification acquisition requests thereafter from the mobile station. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a wireless communication method and a wireless communication system that allow a time authentication server to authenticate time information of a mobile station.

  A mobile station such as a PHS (Personal Handy phone System) or a mobile phone performs wireless communication with a base station using a time division multiple access (TDMA) system. In order to synchronize the time-divided frames in this way, the mobile station and the base station attach time information indicating the time relationship between the frames to the communication data. The mobile station obtains time information as a reference from the base station.

  Further, in a wireless communication system including a mobile station and a base station, in order to establish a session, the mobile station must confirm whether or not the time information that the mobile station has is correct. The validity confirmation of the time information is performed by the mobile station transmitting time information that the mobile station itself has to the time authentication server, and the time authentication server compares the time information with the time information that the time authentication server has. An objective time information authentication method by such another apparatus is disclosed in, for example, Patent Document 1. In the wireless communication system, when the validity of the time information in the mobile station is confirmed by the time authentication server, the mobile station can connect the session and start communication in the wireless communication system.

  Here, even if a failure occurs in the time authentication server and the time authentication server falls into a state in which time information cannot be authenticated, the base station retries an authentication request to the time authentication server multiple times. Under such circumstances, time information authentication will never succeed. The mobile station has a timer counter in itself, and times out if there is no authentication success response from the base station even after a predetermined time has elapsed. The mobile station then requests the base station to authenticate time information again.

  However, since the time authentication server that is the authentication destination is specified by the authentication destination specification server, the mobile station will again perform the same time authentication unless the authentication destination specification server changes the time authentication server specified by grasping the failure of the time authentication server. An authentication request for time information is made to the server. Here, if the failure of the time authentication server is not removed, the mobile station repeatedly times out and falls into a state where the session cannot be connected indefinitely.

In order to avoid such a server failure, there is a technique in which the same processing request is made to a plurality of servers, the difference is detected, and only a valid response is returned to the client. For example, in Patent Document 2, when the responses from the servers do not match, the intermediary device connected to the server positions the server with a different response as the “failure” server, and thereafter does not forward the request from the client to that server. ing. In this way, the entire system is prevented from going down and the reliability of the system is improved.
JP 2003-273866 A JP 2004-227534 A

  When the above-described technique for always making the same processing request to a plurality of servers is applied to the wireless communication system, the mediation device corresponds to a base station and the server corresponds to a time authentication server. And a base station will perform the time authentication request | requirement from a mobile station (client) with respect to several time authentication server.

  However, the base station is originally intended to establish wireless communication with the mobile station, and the normal operation of the base station is subject to constant load requests for all time authentication servers and confirmation of their correctness. It may cause trouble. In order to apply the above technique, the base station must be able to connect to all of the time authentication servers, which means that the base station has destination information (identifier) of the time authentication server. Security problems may also arise.

  In view of such a problem, the present invention quickly extracts a time authentication server in which a failure has occurred, and completes the authentication of time information at an early stage to ensure high reliability and wireless communication. The purpose is to provide a system.

  In order to solve the above-described problems, a typical configuration of the present invention includes a base station, a mobile station that performs radio communication with the base station, and a time at which the mobile station can communicate with the base station and authenticate time information. A wireless communication method for performing wireless communication using an authentication server and an authentication destination designation server that designates a time authentication server that can communicate with a mobile station via a base station and is an authentication destination of time information, The mobile station obtains time information from the base station and sets it as its own time information, the mobile station requests the authentication destination designation server to obtain a certificate including the identifier of the time authentication server, and the authentication destination designation server asks the mobile station The certificate is transmitted, the mobile station transmits its own time information and the identifier of the time authentication server to the base station, and the base station authenticates the time information of the mobile station to the time authentication server specified by the identifier. Request and time authentication service If the authentication is impossible, the base station sends the time authentication server identifier to the authentication destination designation server, and the authentication destination designation server specifies the identifier sent from the base station for subsequent certificate acquisition requests from the mobile station. A time authentication server other than the time authentication server to be used is selected as an authentication destination and transmitted.

  The base station can grasp that the time authentication server has failed because there is no response from the time authentication server, and directly transmits an identifier for specifying the time authentication server to the authentication destination designation server. In this way, the authentication destination designation server can exclude the time authentication server in which the failure has occurred from the choices, thereby preventing the mobile station and other mobile stations from repeatedly requesting time information authentication to the time authentication server having the failure. It becomes possible to do. Therefore, authentication of time information can be completed at an early stage, and high reliability of the entire wireless communication system can be ensured.

  In the above configuration, since the selection and inquiry of the time authentication server and the selection exclusion of the time management server in which the adverse effect has occurred are all completed only by the authentication destination designation server, the time authentication is performed in addition to the authentication destination designation server. High reliability can be maintained without leakage of server information.

  When the time authentication server cannot be authenticated, the base station may further notify the mobile station of an abnormality. With this configuration, the mobile station can receive a new time authentication server inquiry again without waiting for its own timeout. In addition, since the time authentication server in which the failure has occurred is excluded from the selection, early time authentication and session connection are possible.

  The above certificate also includes issuer certificate information that proves that the certificate issuer is the authentication destination designation server. The mobile station adds the issuer certificate in addition to its own time information and time authentication server identifier. The information may also be transmitted to the base station, and the base station may request the time authentication server to authenticate the time information of the mobile station only when determining that the issuer certification information is correct.

  With this configuration, the base station can confirm that the time-authentication server of the authentication destination is valid, and can avoid the adverse effects caused by an inappropriate time-authentication request.

  Another configuration of the present invention includes a base station, a mobile station that performs radio communication with the base station, a time authentication server that can communicate with the mobile station via the base station and authenticates time information, and a base station. A wireless communication system comprising: an authentication destination designation server that is capable of communicating with a mobile station and designates a time authentication server that is an authentication destination of time information, wherein the mobile station acquires time information from a base station and A time setting unit that is set as information, a certificate requesting unit that requests the authentication destination designation server to obtain a certificate including the identifier of the time authentication server, and the base station from its own time information and the authentication destination designation server An information transmission unit that transmits the acquired identifier of the time authentication server, and the base station supplies the time information to the mobile station, and the time information of the mobile station to the time authentication server specified by the identifier To authenticate An authentication requesting unit for requesting, and an identifier transmitting unit for transmitting the identifier of the time authentication server to the authentication destination specifying server when the time authentication server is not authenticated. The authentication destination specifying server is a mobile station. An authentication destination selection unit that selects and transmits a time authentication server other than the time authentication server specified by the identifier transmitted from the base station as an authentication destination in response to a certificate acquisition request from the base station.

  The component corresponding to the technical idea in the said radio | wireless communication method and its description are applicable also to the said radio | wireless communications system.

  As described above, according to the present invention, it is possible to quickly extract a time authentication server in which a failure has occurred and to complete authentication of time information at an early stage to ensure high reliability.

  Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. The dimensions, materials, and other specific numerical values shown in the embodiment are merely examples for facilitating understanding of the invention, and do not limit the present invention unless otherwise specified. In the present specification and drawings, elements having substantially the same function and configuration are denoted by the same reference numerals, and redundant description is omitted, and elements not directly related to the present invention are not illustrated. To do.

(Wireless communication system 100)
In the present embodiment, even when a failure occurs in the time authentication server and the time information cannot be authenticated in the time authentication server, the time information authentication can be completed early and high reliability can be ensured. Here, for easy understanding, the configuration of the entire wireless communication system will be described, and then individual components will be described in detail.

  FIG. 1 is an explanatory diagram showing a connection relationship between devices in the wireless communication system 100. The wireless communication system 100 includes a PHS terminal 110 as a mobile station, a plurality of base stations 120, a communication network 130 including an ISDN (Integrated Services Digital Network) line, the Internet, a dedicated line, and the like, and a plurality of time authentications. The server 140 and the authentication destination designation server 150 are configured. Here, the PHS terminal 110 is cited as a mobile station, but the present invention is not limited to such a case. A mobile phone, a notebook personal computer, a PDA (Personal Digital Assistant), a digital camera, a music player, a car navigation system, a portable TV, a game device. Various electronic devices having time information such as DVD players and remote controllers can also be used as mobile stations.

  FIG. 2 is a block diagram illustrating a schematic configuration of the PHS terminal 110. The PHS terminal 110 includes a terminal control unit 112, a terminal memory 114, and a terminal wireless communication unit 116, and has various functions such as a call function, a mail transmission / reception function, an imaging function, a music playback function, and a TV viewing function. Carry out.

  The terminal control unit 112 manages and controls the entire PHS terminal 110 using a semiconductor integrated circuit including a central processing unit (CPU). The terminal memory 114 includes a ROM, RAM, EEPROM, nonvolatile RAM, flash memory, HDD (Hard Disk Drive), and the like, and stores programs processed by the terminal control unit 112, audio data, and the like. The terminal wireless communication unit 116 performs wireless communication with the base station 120. As such wireless communication, a time division multiple access method is employed in which a plurality of time slots obtained by time division of frames in the base station 120 are assigned to the channels of the PHS terminal 110 for communication.

  Further, the terminal control unit 112 according to the present embodiment also functions as a time setting unit 160, a certificate request unit 162, and an information transmission unit 164.

  The time setting unit 160 acquires time information (AFN: Absolute Frame Number) from the control channel transmitted by the base station 120, particularly the broadcast information BCCH, and sets the acquired time information as its own time information. Since the PHS terminal 110 does not necessarily have a means for grasping the absolute time, the PHS terminal 110 acquires time information generated based on GPS (Global Positioning System) from the base station 120.

  If such time information is not set correctly, frame synchronization between the PHS terminal 110 and the base station 120 cannot be achieved, and problems such as inability to communicate at normal timing occur. As a problem here, for example, the PHS terminal 110 determines the certificate expiration date of the base station 120 based on its own time information. For example, a connection may be established, or a valid certificate expiration date may be determined to be invalid and a session cannot be connected. Therefore, in this embodiment, time information is transmitted to the time authentication server 140 described later, and the time information is authenticated. At this time, if the time authentication server 140 determines that the time information is not valid, the PHS terminal 110 acquires the time information again from the other base station 120.

  The certificate request unit 162 provides the authentication destination designation server 150 with the identifier of the time authentication server 140 that authenticates its own time information, issuer certification information that certifies that the issuer is the authentication destination designation server, and the like. Request acquisition of the certificate that contains it. With this identifier, the PHS terminal 110 can specify the authentication destination of the time information. The information transmission unit 164 transmits the time information of itself, the identifier of the time authentication server, and the issuer certification information to the base station 120.

  FIG. 3 is a block diagram illustrating a schematic configuration of the base station 120. The base station 120 includes a base station control unit 122, a base station memory 124, a base station wireless communication unit 126, and a base station wired communication unit 128.

  The base station control unit 122 manages and controls the entire base station 120 by a semiconductor integrated circuit including a central processing unit (CPU). Further, the base station control unit 122 controls communication connection of the PHS terminal 110 to the communication network 130 and other PHS terminals 110 using the program in the base station memory 124. The base station memory 124 is composed of ROM, RAM, EEPROM, nonvolatile RAM, flash memory, HDD, and the like, and stores programs processed by the base station control unit 122, time information, and the like. The base station wireless communication unit 126 establishes communication with the PHS terminal 110. The base station wired communication unit 128 can be connected to various servers via the communication network 130. In this embodiment, the base station wired communication unit 128 particularly connects to the time authentication server 140 and the authentication destination designation server 150.

  The base station control unit 122 of this embodiment also functions as a time providing unit 170, an issuer confirmation unit 172, an authentication request unit 174, an identifier transmission unit 176, and an abnormality notification unit 178.

  The time providing unit 170 provides time information to each PHS terminal 110 through the control channel. Such time information is generated based on the absolute time acquired from the GPS. The issuer confirmation unit 172 determines whether the issuer certification information received from the information transmission unit 164 of the PHS terminal 110 is correct, and causes the authentication request unit 174 to function only when it is correct. The authentication request unit 174 requests the time authentication server 140 specified by the identifier received from the PHS terminal 110 to authenticate the time information of the PHS terminal 110. When the time authentication server 140 cannot authenticate despite the request for authentication, the identifier transmission unit 176 sends the identifier of the time authentication server 140 that could not be authenticated directly to the authentication destination designation server 150 (via the PHS terminal 110). (Without sending). The abnormality notification unit 178 notifies the PHS terminal 110 of an abnormality when the time authentication server 140 cannot be authenticated.

  FIG. 4 is a block diagram showing a schematic configuration of the time authentication server 140. The time authentication server (TTS: Time Trust Server) 140 includes an authentication control unit 142, an authentication memory 144, and an authentication wired communication unit 146.

  The authentication control unit 142 manages and controls the time authentication server 140 as a whole by a semiconductor integrated circuit including a central processing unit (CPU). The authentication memory 144 stores a program processed by the authentication control unit 142, time information serving as a comparison reference, and the like. The authentication wired communication unit 146 can be connected to various servers via the communication network 130. In the present embodiment, the authentication wired communication unit 146 particularly connects to the base station 120 and the authentication destination designation server 150.

  In addition, the authentication control unit 142 according to the present embodiment compares the time information of the PHS terminal 110 with the time information that the PHS terminal 110 has, and as the time comparison unit 180 that determines whether there is a difference of a predetermined time or more between the two information Function. Here, the predetermined time or more is set to allow an error corresponding to the time required for the session connection sequence.

  FIG. 5 is a block diagram showing a schematic configuration of the authentication destination designation server 150. The authentication destination designation server (CA) 150 includes a designation control unit 152, a designation memory 154, and a designated wired communication unit 156.

  The designation control unit 152 manages and controls the entire authentication destination designation server 150 by a semiconductor integrated circuit including a central processing unit (CPU). The designation memory 154 stores a program processed by the designation control unit 152, a server list in which a plurality of time authentication servers capable of time authentication are listed, and the like. The designated wired communication unit 156 can be connected to various servers via the communication network 130. In the present embodiment, the designated wired communication unit 156 particularly connects to the base station 120 and the time authentication server 140.

  In response to the certificate acquisition request from the PHS terminal 110, the designation control unit 152 extracts an appropriate time authentication server 140 from the server list, describes it in the certificate, and sends it back to the PHS terminal 110. Function as. The authentication destination selection unit 190 in the present embodiment excludes the time authentication server 140 specified by the identifier transmitted from the base station 120 from the server list, and when the certificate acquisition request is received next, the remaining time An appropriate time authentication server 140 is selected from the authentication server 140 and written on the certificate. The certificate includes issuer certification information that certifies that the certificate issuer is the authentication destination designation server, in addition to the time authentication server identifier.

  With the wireless communication system 100 described above, it is possible to quickly extract the time authentication server 140 in which a failure has occurred and to complete the authentication of time information at an early stage to ensure high reliability. A wireless communication method for promptly authenticating the time information of the PHS terminal 110 using the wireless communication system 100 will be described in detail below.

  FIG. 6 is a sequence diagram illustrating a processing flow of the wireless communication method. In the sequence diagram, the processing operation when the time information is normally authenticated is shown.

  When the PHS terminal 110 initializes itself (S200), it acquires time information from the base station 120 (S202). This is to synchronize communication data, particularly frame numbers. The PHS terminal 110 acquires time information from the base station 120 and sets it as its own time information (S204).

  The PHS terminal 110 further requests the authentication destination designation server 150 to obtain a certificate through the base station 120 (S206), and the authentication destination designation server 150 transmits the certificate to the PHS terminal 110 (S208).

  Then, when a session connection request is generated in the PHS terminal 110 (S210), the PHS terminal 110 confirms its own time information with respect to the base station 120 and the identifier of the time authentication server 140. And the issuer certification information (S212). When the base station 120 determines that the issuer certification information is correct (S214), the base station 120 sends the time information of the PHS terminal 110 to the time authentication server 140 specified by the identifier. A request is made to authenticate (S216). With this configuration for determining the issuer certificate, the base station 120 can confirm that the authentication destination time authentication server 140 is valid, and can avoid the adverse effects caused by an inappropriate time authentication request. Subsequently, the base station 120 notifies the PHS terminal 110 that it has received time authentication processing (S218).

  The time authentication server 140 compares the time information received from the base station 120 with the time information included in the time authentication server 140, and confirms its validity (S220). If it is determined that the time information is valid, the time authentication server 140 responds to that effect to the base station (S222), and the base station 120 notifies the PHS terminal 110 that the time information has been authenticated (S224). . Thus, the PHS terminal can connect a session (S226), and can start data communication or a telephone call.

  FIG. 7 is a sequence diagram illustrating a processing flow of a wireless communication method as a comparative example. Here, a processing operation when a failure occurs in the time authentication server 140 in a state where the present embodiment is not applied is described. In the sequence diagram of FIG. 7, the processes from S200 to S214 are substantially the same as those in FIG.

  After determining that the issuer certification information is correct (S214), the base station 120 requests the time authentication server 140 specified by the identifier to authenticate the time information of the PHS terminal 110 (S216), and at the same time, the PHS terminal 110 Is notified that the time authentication process has been received (S218). However, since there is a failure in the time authentication server 140, there is no response, and the base station 120 repeats the time information authentication request until there is a response (S250, S252).

  The PHS terminal 110 has a timer counter in itself, and when the base station 120 keeps retrying the authentication request and does not receive a response from the base station 120 even after a predetermined time has elapsed, the PHS terminal 110 times out (S254). Then, the PHS terminal 110 requests the base station 120 to authenticate time information again. However, if the reason for the failure of time authentication is due to the time authentication server 140, the time authentication server 140 acquired by retry is likely to be the same as the previous time, and the same authentication operation is performed forever. It will be repeated.

  At this time, the PHS terminal 110 and the base station 120 do not have information on the time authentication server 140 because of security. Therefore, even if the specific time authentication server 140 goes down, the PHS terminal 110 or the base station 120 cannot select the time authentication server 140 as an alternative.

  FIG. 8 is a sequence diagram illustrating a processing flow of the wireless communication method. In this sequence diagram, a processing operation when a failure occurs in the time authentication server 140A in a state where the present embodiment is applied will be described. Here, the processes from S200 to S252 are substantially the same as those in FIG. 7, and thus detailed description thereof is omitted here. Here, the time authentication server 140A in which a failure has occurred and the normal time authentication server 140B are used for the description.

  When the base station 120 grasps that a problem has occurred in the time authentication server 140A through a plurality of retries (S216, S250, S252) to the time authentication server 140A, as a part of the return procedure, the authentication destination designation server The identifier of the time authentication server 140A is transmitted to 150 (S260), and the abnormality is notified. The authentication destination designation server 150 temporarily deletes the time authentication server 140A from the server list of the time authentication server 140 based on the abnormality report (S262).

  At this time, the base station 120 also notifies the PHS terminal 110 of the abnormality (S264). Based on the abnormality, the PHS terminal 110 forcibly terminates the time authentication process without waiting for a timeout, and requests the certificate to the authentication destination designation server 150 again (S266). With this configuration, the PHS terminal 110 can receive a new time authentication server inquiry again without waiting for its own timeout.

  Since the identifier of the time authentication server 140A is already sent from the base station 120 to the authentication destination designation server 150, the time authentication server 140A notified of the abnormality is discarded from the list and an appropriate time authentication server is selected. An available time authentication server 140B is inquired instead of the unavailable time authentication server 140A. Also, the time authentication server 140A is excluded from selection for all PHS terminals 110 because there is a high possibility that time information cannot be authenticated not only for individual PHS terminals 110 but also for all PHS terminals 110. . Here, if a predetermined time, for example, 1 hour elapses and the failure of the time authentication server 140A is removed, the server list can be restored.

  The PHS terminal 110 receives the certificate from the authentication destination designation server 150 (S268), and performs time authentication processing on the new time authentication server 140B indicated in the certificate. Since the subsequent time authentication process is substantially the same as the process shown in FIG. 6 except that the target is the time authentication server 140B, description of the process will be omitted by giving the same reference numerals.

  With this configuration, the base station 120 can grasp that a failure has occurred in the time authentication server 140A due to the absence of a response from the time authentication server 140A, and an identifier for identifying the time authentication server 140A is stored in the authentication destination designation server 150. Send directly. In this way, the authentication destination designation server 150 can exclude the time authentication server 140A where the failure has occurred from the options, so that the PHS terminal 110 and the other PHS terminals 110 repeat the time information authentication to the time authentication server 140 having the failure. It becomes possible to prevent the request in advance. Therefore, authentication of time information can be completed at an early stage, and high reliability of the entire wireless communication system 100 can be ensured.

  In the above configuration, since the selection and inquiry of the time authentication server 140 and the selection exclusion of the time management server in which the adverse effect has occurred are all completed by the authentication destination designation server 150 alone, Thus, high reliability can be maintained without leaking information of the time authentication server 140.

  As mentioned above, although preferred embodiment of this invention was described referring an accompanying drawing, it cannot be overemphasized that this invention is not limited to this embodiment. It will be apparent to those skilled in the art that various changes and modifications can be made within the scope of the claims, and these are naturally within the technical scope of the present invention. Understood.

  Note that the steps in the wireless communication method of the present specification do not necessarily have to be processed in time series in the order described in the sequence diagram, but are performed in parallel or individually (for example, parallel processing or object processing). May be included.

  INDUSTRIAL APPLICABILITY The present invention can be used in a wireless communication method and a wireless communication system that allow a time authentication server to authenticate time information of a mobile station.

It is explanatory drawing which showed the connection relation of each apparatus in the radio | wireless communications system in this embodiment. It is the block diagram which showed the schematic structure of the PHS terminal. It is the block diagram which showed the schematic structure of the base station. It is the block diagram which showed the schematic structure of the time authentication server. It is the block diagram which showed the schematic structure of the authentication destination designation | designated server. It is the sequence diagram which showed the flow of the process of the radio | wireless communication method. It is the sequence diagram which showed the flow of the process of the radio | wireless communication method as a comparative example. It is the sequence diagram which showed the flow of the process of the radio | wireless communication method.

Explanation of symbols

100 ... Wireless communication system 110 ... PHS terminal (mobile station, client)
140 ... time authentication server 150 ... authentication destination designation server 160 ... time setting part 162 ... certificate requesting part 164 ... information sending part 170 ... time providing part 172 ... issuer confirmation part 174 ... authentication requesting part 176 ... identifier sending part 178 ... Abnormality notification unit 180 ... time comparison unit 190 ... authentication destination selection unit

Claims (4)

A base station, a mobile station that performs wireless communication with the base station, a time authentication server that is communicable with the mobile station via the base station and authenticates time information, and the mobile station via the base station A wireless communication method for performing wireless communication using an authentication destination designation server that designates a time authentication server that is communicable and is an authentication destination of time information,
The mobile station acquires time information from the base station and sets it as its own time information,
The mobile station requests the authentication destination designation server to obtain a certificate including an identifier of a time authentication server,
The authentication destination designation server sends the certificate to the mobile station,
The mobile station transmits its time information and the identifier of the time authentication server to the base station,
The base station requests the time authentication server specified by the identifier to authenticate the time information of the mobile station,
When the time authentication server cannot be authenticated, the base station transmits the time authentication server identifier to the authentication destination designation server,
The authentication destination designation server selects and transmits a time authentication server other than the time authentication server specified by the identifier transmitted from the base station as an authentication destination in response to a subsequent certificate acquisition request from the mobile station. A wireless communication method.   The radio communication method according to claim 1, wherein, when the time authentication server cannot be authenticated, the base station further notifies the mobile station of an abnormality. The certificate also includes issuer certification information that proves that the issuer of the certificate is the authentication destination designation server,
The mobile station transmits its issuer certification information to the base station in addition to its own time information and the identifier of the time authentication server,
3. The wireless communication according to claim 1, wherein the base station requests the time authentication server to authenticate the time information of the mobile station only when the issuer certification information is determined to be correct. Method. A base station, a mobile station that performs wireless communication with the base station, a time authentication server that is communicable with the mobile station via the base station and authenticates time information, and the mobile station via the base station An authentication destination designation server that designates a time authentication server that is communicable and serves as an authentication destination of time information,
The mobile station
A time setting unit that acquires time information from the base station and sets the time information as its own time information;
A certificate request unit that requests the authentication destination designation server to obtain a certificate including an identifier of a time authentication server;
An information transmission unit that transmits its own time information and the identifier of the time authentication server acquired from the authentication destination designation server to the base station;
With
The base station
A time providing unit for supplying time information to the mobile station;
An authentication requesting unit that requests the time authentication server specified by the identifier to authenticate the time information of the mobile station;
If the time authentication server cannot be authenticated, an identifier transmission unit that transmits the identifier of the time authentication server to the authentication destination designation server;
With
The authentication destination designation server is
Authentication destination selection in which the authentication destination designation server selects and transmits a time authentication server other than the time authentication server specified by the identifier transmitted from the base station as an authentication destination in response to a certificate acquisition request from a mobile station A wireless communication system comprising a unit.

Images