JP2009247018A - Radio apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a radio apparatus which allows achievement at a low cost of a flexible adaptation and a proper charging system for contents and attributes of diverse transmission information, and for diverse transmission types of these transmission information. <P>SOLUTION: The radio apparatus includes: a receiving means that receives a train of packets which come via a radio transmission path, wherein all or part of information disposed in a payload is ciphered, and which can contain additional information applied for decoding of the information; and an inter-network interface means that decodes transmission information contained in the train of these packets from the train of packets, along with the transmission information, transfers charging information which is over a product sum of a factor of the ciphered information and an extra of a charging rate adapted to an applied ciphering method to a core network. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention is a wireless communication system that performs encryption processing on transmission information transmitted wirelessly or decrypts transmission information received via a wireless transmission path in a wireless communication system or a wireless station constituting the wireless transmission system. Relates to the device.

In recent years, research and development of a wide-band CDMA (Code Division Multiple Access) system (hereinafter referred to as “W-CDMA”) capable of realizing wireless transmission of not only voice but also images and other various information at low cost has been active. In addition, it is being advanced in many ways.
FIG. 1 is a diagram illustrating a configuration example of a mobile communication system to which W-CDMA is applied.
In the figure, a mobile station 12 is located in an area corresponding to all or part of the radio zones 11Z-1 to 11Z-3 individually formed by the radio base stations 11-1 to 11-3, and these radio base stations 11-1 to 11-3 are connected to a radio network controller (RNC) 14 via communication links 13-1 to 13-3, respectively. The wireless network control device 14 is connected to the multimedia processing device 16 via the communication link 15, and is connected to “the exchange 19 arranged as a node in the core network 18” via the communication link 17.
Hereinafter, basic operations of each unit in such a mobile communication system will be described.
The mobile station 12, for example, via the radio channel assigned to the own station under channel control (here, it is assumed that it is a single radio channel for the sake of simplicity) The desired transmission information is wirelessly transmitted to all or part of 11-3.
These radio base stations 11-1 to 11-3 convert the above-described transmission information into a sequence of ATM (Asynchronous Transer Mode) cells of a predetermined format, and wirelessly communicate via communication links 13-1 to 13-3. A sequence of these ATM cells is transmitted to the network control device 14.

The wireless network control device 14 has the following functions, and delivers the above-described row of ATM cells to the exchange 19 via the communication link 17 in cooperation with the multimedia processing device 16.
・ ATM switching ・ Control signal processing ・ O & M
Common channel demultiplexing / diversity handover The radio network controller 14 performs a charging process related to a completed call generated in the mobile station 12 based on a “connection time charging method” or a “bucket charging method” described later.
(Connection time charge method)
Regardless of the presence or absence of transmission information actually transmitted, the charge amount is calculated as the product of the connection time of the corresponding completed call and the “charge per unit time” determined according to the type of the completed call.
(Bucket billing method)
Regardless of the “connection time” described above, “a fee per packet that is uniformly set by a vendor or the like and includes some valid transmission information (hereinafter referred to as a“ packet charging rate ”)”, “ The billing amount is calculated as a product of the number of packets that contain valid transmission information and are included and are actually transmitted.

Japanese Patent Laid-Open No. 11-177732 (Claim 1, FIG. 3) Japanese Patent Laid-Open No. 7-312655 (Claim 2) JP 2000-152337 A (Claim 1) JP-A-8-149317 (Claim 2) JP 2003-161996 A (Claims 1 and 4) JP 2001-245127 A (Claim 2) Japanese Patent Laid-Open No. 2001-223585 (Claim 1)

By the way, in the above-described conventional example, when the “connection time charging method” is applied, the following points are not always appropriate and sufficient service quality is not ensured.
-Since charging is performed uniformly even during periods when transmission information (packets) is not transmitted, for example, even during periods where the transmission rate is temporarily or regularly reduced due to lack of radio resources or other factors, Billing is performed at the same rate as the period when the transmission rate is not limited.
・ The ratio of mobile stations accessing the Internet has increased, and the content and size of transmission information transmitted by such mobile stations cannot be adequately adapted. Is limited.

As prior art documents related to the above-mentioned fee, there are Patent Documents 2, 3, 6, etc. described later.
Also, secret information that the mobile station intends to transmit / receive may include secret information that is not desired to be known by others. In this case, encrypted communication can be performed by providing the mobile station with an encryption function (see Patent Document 7 described later).
However, if advanced encryption processing is performed on all information received and transmitted, transmission / reception will be delayed due to the influence of encryption processing time, etc., and the load on the terminal will increase. Even if the encrypted communication is switched by performing on / off control, there is a problem that information that is originally intended to be encrypted is inadvertently transmitted due to a user operation error.

SUMMARY OF THE INVENTION An object of the present invention is to reliably perform encryption processing when transmitting information including information to be encrypted.
In addition, the present invention provides a wireless device that can flexibly adapt to various contents and attributes of transmission information and various transmission forms of these transmission information and an appropriate charging system at low cost. With the goal.
Further, the object of the present invention is that hardware and other resources provided at the receiving end for decryption adapted to the encryption method are not allocated over a long period of time to a specific call or communication session unit, It is allocated and shared as appropriate for a plurality of calls and communication sessions.

Furthermore, an object of the present invention is to simplify the configuration and shorten the transmission delay compared to the case where information that is not subject to encryption is transmitted wirelessly separately from the decryption result.
In addition, an object of the present invention is to provide desired confidentiality, transmission quality, and transmission speed as compared with the case where such an encryption method is determined regardless of the content and attributes of information to be encrypted. Is to achieve with high accuracy.
Furthermore, an object of the present invention is to simplify the encryption process without impairing confidentiality.
Another object of the present invention is to enable flexible adaptation to various contents and attributes of transmission information and to maintain high transmission quality.

Furthermore, an object of the present invention is to automatically maintain the increase in the billing amount associated with such encryption even when most of the transmission information can be encrypted and transmitted wirelessly.
In addition, the object of the present invention is to appropriately prevent the increase in the amount of charge due to encryption even when most of transmission information having various contents and attributes is encrypted and transmitted wirelessly. Is to maintain.
Further, an object of the present invention is to set the above-described charging amount stop at the transmission end and the reception end of transmission information under function distribution and load distribution in various forms.
In addition, an object of the present invention is to provide an encryption method only in a wireless transmission section and a change of a charging system suitable for the encryption method and form. The change is to avoid the ripple effect on the configuration of the access network.
Furthermore, an object of the present invention is to ensure compatibility with the core network without changing the basic configuration.
In addition, an object of the present invention is to realize an appropriate setting of a charge amount according to encryption specific to a wireless transmission section under various function distribution and load distribution between a transmission end and a reception end. is there.

Furthermore, an object of the present invention is to improve the service quality together with the cost reduction of the radio communication system and the radio transmission system to which these inventions are applied.
The purpose described above is to identify the parts of the transmission information and / or the attributes of the transmission information that satisfy the predetermined conditions, and specify the specified parts or information including these parts. This is achieved by a wireless device characterized by encrypting and wirelessly transmitting the result of the encryption. The other information portions are not encrypted.
In such a wireless device, the transmission information is transmitted by wirelessly encrypting a part satisfying the above-described condition or information including the above-described information.
In addition, the above-described object is characterized in that it is achieved by a wireless device characterized in that transmission information that does not correspond to the above-described part or information including this part is wirelessly transmitted together with the result of encryption. Achieved by a wireless device.
In such a wireless device, information that is not subject to encryption is transmitted wirelessly together with the result of the encryption.

Furthermore, the above-described object is achieved by a wireless device characterized in that an encryption method adapted for each condition described above is applied.
In such a wireless device, each piece of information to be encrypted is achieved by a wireless device characterized in that it is encrypted based on an encryption method adapted for each condition established for the information. The
Further, the above-described object is achieved by a wireless device characterized in that a common encryption method is applied to encryption for each predetermined condition and a maximum confidentiality is achieved.
In such a wireless device, even if there is a large amount of information to be encrypted, encryption is performed in a single manner in which desired confidentiality is ensured regardless of the contents and attributes of the information. This is achieved based on the encryption method.
Furthermore, the above-described object is achieved by a wireless device characterized in that the result of encryption is wirelessly transmitted as a sequence of packets including information used for specifying a decryption method suitable for the encryption method. The
In such a wireless device, the receiving end that receives a sequence of packets can accurately transmit transmission information from the sequence of packets even if there are various encryption methods that can be applied to the encryption described above. Highly recoverable.
Further, the above-described object is achieved by a wireless device characterized in that it has a man-machine interface related to setting of a predetermined condition.
In such a wireless device, information to be included in transmission information and to be encrypted is specified in a form consistent with the intention of the operator of the wireless device according to the present invention.

Further, the above-described object is that a portion of the transmission information that is wirelessly transmitted from the receiving end that receives the result of the encryption and that the transmission information content and / or attribute satisfies a predetermined condition or these Either a set of information that individually includes these parts, or a charging method for transmission of transmission information, and an additional part of the charging rate applied to wireless transmission of these parts or sets under the charging method When obtaining and calculating the charge amount for wireless transmission based on the charge method or premium and / or the contents and / or attributes of the transmission information, and the charge amount exceeds the preset upper limit In addition, this is achieved by a wireless device characterized in that transmission information is wirelessly transmitted instead of the encryption result.
In such a wireless device, the transmission information is encrypted when the charge amount when the information to be encrypted is encrypted and transmitted wirelessly exceeds the upper limit value described above. Without being transmitted.
In addition, the above-mentioned purpose is to provide a man-machine interface related to notification of the billing amount and designation of whether or not to permit encryption in the billing amount, and when the encryption is not allowed, the transmission information Is achieved by a wireless device characterized in that it wirelessly transmits.
In such a wireless device, the upper limit of the charge amount when the information to be encrypted is encrypted and transmitted wirelessly is within the limit given based on the judgment of the operator. Set as appropriate.

Furthermore, the above-described object is achieved by a wireless device characterized in that when a charge amount exceeds a predetermined upper limit value, a response indicating that fact is transmitted to the wireless transmission path.
In such a wireless device, at the receiving end that receives transmission information that is partly or entirely encrypted and transmitted wirelessly, the above-described processing related to the setting of the billing amount check is linked to the wireless device according to the present invention. Can be realized.
Further, the above-described object is achieved by a wireless device characterized in that when encryption is not permitted, a response indicating that is transmitted to the wireless transmission path.
In such a wireless device, at the receiving end that receives transmission information that is partly or entirely encrypted and transmitted wirelessly, the above-described processing related to the setting of the billing amount check is linked to the wireless device according to the present invention. Can be realized.

Further, the above-mentioned object is that a packet that arrives via a wireless transmission path and that includes all or part of the information arranged in the payload and that may include additional information applied to the decryption of the information. The transmission information included in these packet sequences is restored, and the rate of the encrypted information is combined with the transmission information, and the charging rate conforms to the applied encryption method. This is achieved by a wireless device that is characterized in that charging information that is higher than the product sum of the additional charges is delivered to the core network.
In such a wireless device, even if the transmission information to be received is encrypted in various forms from the transmission end of the transmission information and can be wirelessly transmitted, the additional charge rate described above is not included in the core network. As long as the charging system is adapted, it is possible to avoid a change in the network interface with the core network.
Further, the above-described object is achieved by a wireless device that is characterized in that it acquires charging information and a charging rate under a charging method adapted to the core network.
In such a wireless device, even when all or part of the transmission information is encrypted and transmitted wirelessly, charging related to such wireless transmission is realized in conformity with the core network. .

Further, the above-described object is to wirelessly transmit an additional charging method or charging rate to the transmitting end of the packet sequence, and transmitted from the transmitting end to the additional charging method or charging rate and delivered. This is achieved by a wireless device characterized by invalidating the premium based on the received response.
In such a wireless device, encryption of transmission information and an increase in the billing amount corresponding to the wireless transmission are appropriately avoided in cooperation with the transmission end described above.

The summary of the present invention is as follows.
In the first wireless device according to the present invention, the encryption target specifying means captures a trigger at which transmission is started in the transmission information and / or at least one of the attributes of the transmission information, and registers The encryption part is specified based on the predetermined condition held in the above and whether or not encryption is possible is determined. The transmission means encrypts the specified and encrypted portions of the transmission information, or information including these portions, and wirelessly transmits the result of the encryption.
That is, a part of the transmission information that satisfies the above-described condition or information including the part is encrypted and transmitted wirelessly.
Therefore, if confidential information is included in the transmission information, it is identified and the encryption process is performed reliably.
In addition, as another advantage, hardware and other resources used for decryption suitable for such an encryption method are not allocated to a specific call or communication session unit over a long period of time. Are allocated and shared as appropriate for other calls and communication sessions.

In the second radio apparatus according to the present invention, the transmission means converts the transmission information into a part in which the content and / or attribute of the transmission information satisfies a predetermined condition, or information including these parts. The remaining information that is not applicable is transmitted wirelessly together with the encryption result.
That is, of the transmission information, information that is not subject to encryption is also wirelessly transmitted along with the result of the encryption.
Therefore, the configuration can be simplified and the transmission delay can be shortened compared to the case where such information that is not subject to encryption is wirelessly transmitted separately from the above-described decryption result.

In the third wireless apparatus according to the present invention, the transmission means applies an encryption method adapted to each condition for encryption.
That is, each piece of information to be encrypted is encrypted based on an encryption method adapted for each condition established for the information.
Therefore, the desired confidentiality, transmission quality, and transmission speed can be achieved with high accuracy compared to the case where such an encryption method is determined regardless of the contents and attributes of the information to be encrypted. .

In the fourth radio apparatus according to the present invention, the transmission means applies a common encryption method that is adapted to encryption for each predetermined condition and that achieves maximum secrecy.
In other words, encryption is a single encryption method that ensures the desired confidentiality regardless of the content and attributes of the information even when there is a lot of information to be encrypted. Achieved on the basis of
Therefore, the encryption process can be simplified without impairing confidentiality.

In the fifth wireless apparatus according to the present invention, the transmission means wirelessly transmits the result of the encryption as a sequence of packets including information used for specifying a decryption method suitable for the encryption method.
That is, at the receiving end that receives such a packet sequence, even if there are various encryption schemes that can be applied to the above-described encryption, the transmission information is accurately restored from these packet sequences. be able to.
Therefore, flexible adaptation to various contents and attributes of transmission information is possible, and transmission quality is maintained high.

In the sixth wireless device according to the present invention, the man-machine interface means adopts a man-machine interface related to setting of a predetermined condition.
That is, the information included in the transmission information and to be encrypted is specified in a form consistent with the intention of the operator of the wireless device according to the present invention.
Therefore, flexible adaptation to various contents and attributes of transmission information is possible, and transmission quality is maintained high.

In the seventh wireless device according to the present invention, the charging information acquisition means is wirelessly transmitted from the receiving end that receives the encrypted result, and is related to transmission of the above-described portion or information including this portion or transmission information. Either one of the charging method and an additional portion of the charging rate applied to the wireless transmission of these parts or sets under the charging method is acquired. The billing amount calculation means calculates a billing amount for wireless transmission based on the billing method or premium and / or the content and / or attribute of the transmission information. The transmission means wirelessly transmits the transmission information instead of the encryption result when the billing amount exceeds a predetermined upper limit value.
That is, the transmission information is not encrypted when the charge amount when the information to be encrypted is encrypted and transmitted wirelessly exceeds the upper limit value described above. Is transmitted.
Therefore, even if most of the transmission information can be encrypted and transmitted wirelessly, as long as the above-mentioned upper limit is set appropriately, the increase in the charge amount due to such encryption is automatically stopped. Maintained.

In the eighth radio apparatus according to the present invention, the encryption permission / refusal designation means has a man-machine interface related to the notification of the billing amount and the designation of the permission / denial of encryption in the billing amount. The transmission means wirelessly transmits the transmission information instead of the encryption result when the encryption is not allowed.
That is, in the transmission information, the upper limit value of the charge amount when the information to be encrypted is encrypted and wirelessly transmitted is appropriately set within the range of the limit given under the judgment of the operator.
Therefore, even if most of the transmission information with various contents and attributes is encrypted and wirelessly transmitted, the increase in the billing amount accompanying such encryption is properly maintained.

In the ninth radio apparatus according to the present invention, when the billing amount exceeds a predetermined upper limit value, the transmission unit transmits a response indicating the fact to the radio transmission path.
That is, at the receiving end that receives transmission information that is partly or entirely encrypted and transmitted wirelessly, the above-described processing related to the setting of the billing amount stopping can be realized in cooperation with the wireless device according to the present invention. .
Therefore, the transmission end and the reception end of the transmission information can be set to the above-described charging amount suspension under function distribution and load distribution in various forms.

In the tenth radio apparatus according to the present invention, when the encryption is not permitted, the transmission means transmits a response indicating the fact to the radio transmission path.
That is, at the receiving end that receives transmission information that is partly or entirely encrypted and transmitted wirelessly, the above-described processing related to the setting of the billing amount stopping can be realized in cooperation with the wireless device according to the present invention. .
Therefore, the transmission end and the reception end of the transmission information can be set to the above-described charging amount suspension under function distribution and load distribution in various forms.

In the eleventh radio apparatus according to the present invention, the receiving means encrypts all or a part of the information that arrives through the radio transmission path and is arranged in the payload, and decrypts the information. Receive a sequence of packets that may include additional information to be applied. The inter-network interface means restores the transmission information included in the packet sequence from the packet sequence, and conforms to the transmission information and the ratio of the encrypted information and the applied encryption method. Charge information that is higher than the product sum of the charge rate surcharge is delivered to the core network.
That is, even if the transmission information to be received is encrypted in various forms from the transmission end of the transmission information and can be wirelessly transmitted, the above-described additional charge rate is compatible with the core network billing system. As long as the network interface with the core network is not changed, it is avoided.
Therefore, even if the encryption method only in the wireless transmission section and the change of the charging system conforming to the encryption method and form are performed, the change of the encryption method and the charging system is Ripple in the configuration is avoided.

In the twelfth radio apparatus according to the present invention, the inter-network interface means obtains charging information and a charging rate under a charging scheme adapted to the core network.
That is, even when all or part of the transmission information is encrypted and transmitted wirelessly, such charging related to wireless transmission is realized in conformity with the core network.
Therefore, as long as the above-described charging method is specified, compatibility with the core network is ensured without changing the basic configuration.

In the thirteenth wireless apparatus according to the present invention, the notifying means wirelessly transmits an additional charge system or charge rate to the transmission end of the packet string. The inter-network interface means invalidates the extra amount based on the response transmitted from the transmitting end and delivered via the receiving means with respect to the extra charge system or charge rate transmitted wirelessly.
That is, an increase in the billing amount according to encryption of transmission information and wireless transmission is appropriately avoided in cooperation with the transmission end described above.
Therefore, an appropriate setting of the billing amount according to the encryption unique to the wireless transmission section is realized under various function distributions and load distributions between the wireless device according to the present invention and the transmission end described above.

  As described above, in the first invention according to the present invention, the hardware and other resources provided at the receiving end for decryption suitable for the encryption method are used for a specific call or communication session unit for a long time. Without being assigned, the call is appropriately assigned to a plurality of calls and communication sessions and shared.

In the second invention according to the present invention, the configuration can be simplified and the transmission delay can be shortened as compared with the case where information not to be encrypted is wirelessly transmitted separately from the decryption result.
In the third invention according to the present invention, the desired confidentiality, transmission quality, and quality are compared with the case where such an encryption method is determined regardless of the contents and attributes of the information to be encrypted. The transmission speed is achieved with high accuracy.

In the fourth invention according to the present invention, encryption processing can be simplified without impairing confidentiality.
In the fifth and sixth inventions according to the present invention, flexible adaptation to various contents and attributes of transmission information is possible, and transmission quality is maintained high.
In the seventh invention according to the present invention, even if most of the transmission information can be encrypted and transmitted wirelessly, as long as the upper limit of the charge amount is set appropriately, there is a burden associated with such encryption. An increase in the amount is automatically maintained.

In the eighth invention according to the present invention, even if the majority of transmission information with various contents and attributes is encrypted and transmitted wirelessly, the increase in billing amount due to such encryption is stopped. Maintained properly.
In the ninth and tenth inventions according to the present invention, the transmission information transmission end and reception end can be set to the above-mentioned billing amount suspension under functional distribution and load distribution in various forms.
In the eleventh invention according to the present invention, even if the encryption method only in the wireless transmission section and the change of the charging system suitable for the encryption method and form are performed, these encryption methods and It is avoided that the change of the billing system spills over to the access network configuration.

In the twelfth aspect of the present invention, as long as the billing method applied to the core network is specified, compatibility with the core network is ensured without changing the basic configuration.
In the thirteenth invention according to the present invention, an appropriate setting of the billing amount corresponding to the encryption specific to the wireless transmission section is realized under various function distribution and load distribution between the transmission end and the reception end. Is done.
Therefore, in the wireless communication system and the wireless transmission system to which these inventions are applied, service quality is improved along with cost reduction.

The figure which shows the structural example of the mobile communication system to which W-CDMA was applied. The figure explaining operation | movement of 1st and 2nd embodiment of this invention Operation flow chart of mobile station in first embodiment of the present invention Operation flowchart of radio network control apparatus and multimedia processing apparatus in first embodiment of the present invention The figure which shows the form of the man machine interface performed in the mobile station Diagram showing the protocol stack of each part The figure which shows the structure of the packet transmitted wirelessly

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
FIG. 2 is a diagram for explaining the operation of the first and second embodiments of the present invention.
FIG. 3 is an operation flowchart of the mobile station in the first embodiment of the present invention.
FIG. 4 is an operation flowchart of the radio network controller according to the first embodiment of the present invention.

[First embodiment]
The operation of the first embodiment of the present invention will be described below with reference to FIGS.
The feature of this embodiment is the following processing procedure performed by the mobile station 12, the radio network control device 14, and the multimedia processing device 16.

The mobile station 12 has a register in which the following information is set in advance or is set under a “first man-machine interface” described later.
(1) About the content of the email to be sent (not limited to the body text, but excluding the content of the attached file described later) ・ Keywords indicating information that it is desirable to ensure confidentiality based on encryption (for example, (It is also possible to use a "wild card" that is a string of characters and symbols, and indicates an arbitrary character or symbol, and a "regular expression" based on a default format.) KW_mail
-The upper limit UL_mail and / or the lower limit LL_mail of the total amount of information that should be secured based on encryption among the information contained in the text-Based on encryption E-mail address ADRS_mail indicating the destination of the e-mail that should be kept confidential
・ P_mail when the corresponding mail should be encrypted
・ URL_mail address of the website where it is desirable to encrypt the mail because it is accessed at the time of sending
(2) Files that can be attached to emails to be sent • All types of files (extensions) TYP_file that should be secured based on encryption
・ For each of these formats, it is desirable that “encryption-based confidentiality” be ensured for the entire corresponding file. Either the upper limit UL_file and / or the lower limit LL_file should be used. • Based on encryption Use keywords that indicate information that is desirable to ensure confidentiality (for example, a string of characters and symbols, and a “wild card” indicating an arbitrary character or symbol, and a “regular expression” based on a default format. It is also possible.) KW_file
-The upper limit value UL_e_file and / or the lower limit value LL_e_file of the amount of information of which it is desirable to ensure confidentiality based on encryption among the information included in the corresponding file. , Having a function of “first man-machine interface” related to encryption of transmission information transmitted by the own station.

In such a process of “first man-machine interface”, the mobile station 12 appropriately sets the following items (1) to (3) set based on a GUI (Graphical User Interface) of the format shown in FIG. Identify and store these items in the registers described above.
(1) Selection of one of “automatic mode”, “manual mode” and “automatic / manual mode” which is a specific method of transmission information to be encrypted (FIG. 5 (a))
(2) Specification of permission / inhibition of encryption in “automatic mode” and “automatic / manual mode” (FIG. 5B)
(3) The following items related to the items of extension of attached file, mail address, URL of accessed web page, keyword, amount of information, number of mail addresses and time zone ・ "Automatic mode", " Specification relating to “encryption permission / denial” and “holding of the permission / refusal” in “manual mode” and “automatic / manual mode” (FIG. 5 (c)),
-“Conditions that must be satisfied in order to be automatically identified as the object of encryption (for items given as numerical values, specify“ the upper limit value or lower limit value of the range to which the numerical value should belong ”(FIG. ), And for items that fall under the time zone, "Specify the time zone or a time zone other than this time zone" (Fig. 5 (e)) is included. "(Fig. 5 (f)))
-Orders identified as encryption targets (Fig. 5 (g))
The operation of each part when the above-described “automatic mode”, “manual mode”, and “automatic / manual mode” are selected is as follows.

[When "Automatic mode" is selected]
Since the mobile station 12 terminates all layers, generally, for example, based on a protocol such as SMTP (Simple Mail Transfer Protocol), transmission information (here, for simplicity, it is combined with the contents of “mail”). , It is assumed that the content of the attached file is included). For example, when a mail transmission operation is detected, the stored mail may be processed in advance.

When such an opportunity is identified, the mobile station 12 performs the following processes (a) to (d) in the RLC layer shown in FIG.
(A) Processing related to the destination, title, and body of the corresponding mail-Among these destinations, title, and body, identify all the parts that contain the keyword KW_mail, and identify the part that was identified in this way. The total amount of information Σ_mail is obtained (FIG. 3 (1)).

-It is determined whether or not the sum Σ_mail belongs to the range given by either or both of the upper limit value UL_mail and the lower limit value LL_mail. It is called "one discrimination.")
It is determined whether or not the corresponding destination corresponds to the above-described ADRS_mail (hereinafter, such determination is referred to as “second determination” for simplicity).
It is determined whether or not the time at this point belongs to the above-described time zone P_mail (hereinafter, such determination is referred to as “third determination” for simplicity).
-At that time, some website is accessed, and it is determined whether or not the address of the website corresponds to the address URL_mail described above. Discrimination ").

-Predetermined logical operations for the results of these first to fourth determinations (here, for the sake of simplicity, assume that they are "logical operations of the results of the first to fourth determinations" (Hereinafter referred to as “first logical product operation”) (FIG. 3 (2)), and only when the result of the first logical operation is true, Among them, pointers individually indicating all the above-specified specified locations and the storage areas where the above destinations are held are held (FIG. 3 (3)).
(B) Processing related to attached file (performed only when an attached file is included in the corresponding mail)
Of the contents of the attached file, all the locations including the keyword KW_file described above are specified, and the total amount σ_file of the information amount of the specified locations is obtained (FIG. 3 (4)).
-It is determined whether or not the sum σ_file belongs to the range given by either or both of the upper limit value UL_e_file and the lower limit value LL_e_file described above. It is called "fifth discrimination").

It is determined whether or not the format of the corresponding attached file corresponds to any of the above-described formats TYP_file (hereinafter, such determination is referred to as “sixth determination” for simplicity).
-It is determined whether or not the size of the attached file belongs to the range given by either or both of the upper limit value UL_file and the lower limit value LL_file. Therefore, it is called “seventh discrimination”).

-Predetermined logical operations for the results of these fifth to seventh discriminations (here, for the sake of simplicity, assume that they are "logical operations of the results of the fifth to seventh discriminations" Hereinafter, it is referred to as “second logical product operation”) (FIG. 3 (5)), and only if the result of the logical operation is true, A pointer that individually indicates a storage area in which all the specified locations are held is held (FIG. 3 (6)).
(C) Generation of packet sequence corresponding to destination, title, and body ・ If the result of the first AND operation is false, the destination, title, and body of the corresponding mail are classified without being encrypted. And a “C / I” field whose logical value is fixed to “0” as shown in FIG. 7B in comparison with the packet of the conventional format shown in FIG. These destinations, titles, and texts are converted into “unencrypted packet” columns that differ in format in this respect (FIG. 3 (7)).

However, if the result of the first logical product operation is true, among these “non-encrypted packets”, “corresponds to any pointer held in advance and is encrypted. Only in the case of “non-encrypted packet configured to include target information”, the logical value of the aforementioned “C / I” field is set to “1”, and the payload is under a predetermined encryption method. The corresponding destination, title, and body are converted into a packet sequence generated by replacing with an “encrypted packet” that is different from the above-mentioned “non-encrypted packet” in the point generated in FIG. 8)).
(D) Generation of a sequence of packets corresponding to the contents of the attached file-If the result of the second AND operation is false, the contents of the corresponding attached file are separated and arranged without being encrypted. In addition, the content of the attached file is converted into a column of “non-encrypted packet” in which the logical value of the “C / I” field is fixed to “0” (FIG. 3 (9)).

  -However, if the result of the second logical product operation is true, among these "unencrypted packets", "corresponding to any one of the pointers held in advance and being encrypted. Only in the case of “non-encrypted packet including target information”, the logical value of the above-mentioned “C / I” field is set to “1”, and the payload is under a predetermined encryption method. The content of the corresponding attached file is converted into a packet sequence generated by replacing the “encrypted packet” with the “encrypted packet” that is different from the previously described “non-encrypted packet” (FIG. 3 (10)). ).

Here, for the sake of simplicity, the word lengths of the above-mentioned “non-encrypted packet” and “encrypted packet” are adjusted by adjusting the word length of the “padding” field arranged in the last field, Assume that they are set to a common value.
Further, in the mobile station 12, the RLC layer described above delivers the sequence of packets generated in this way to the physical layer. The physical layer transmits the sequence of these packets to the radio base stations 11-1 to 11-3 (FIG. 2 (a), FIG. 3 (11), FIG. 6 (2)).

  On the other hand, all or a part of the radio base stations 11-1 to 11-3 receives the sequence of packets transmitted in this way (FIG. 2 (b)), and the sequence of these packets as in the conventional example. Are transferred to the wireless network control device 14 as a row of ATM cells (FIG. 2 (c), FIG. 6 (3)). Further, the radio network controller 14 re-assembles the row of ATM cells to generate a row of different ATM cells (FIG. 4 (1)), and the thus generated row of different ATM cells is processed by multimedia processing. It is handed over to the device 16 (FIG. 2 (d), FIG. 6 (4)).

When such a row of ATM cells is delivered, the multimedia processing device 16 performs the following processing.
The corresponding ATM cell sequence is converted into “packet sequence in the RLC layer (configured as a permutation of“ unencrypted packet ”or“ encrypted packet ”)” (FIG. 2 (e), Fig. 4 (2)).
-All “encrypted packets” in which the logical value of the “C / I” field is set to “1” among the packets included in the sequence of the packets are identified, and these identified “encrypted packets” "Is individually decrypted (conforms to the above-described encryption method) to be converted into" unencrypted packet "(FIG. 4 (3)).
After all of these “encrypted packets” are converted to “unencrypted packets”, further packets that conform to the desired layer (here, for the sake of simplicity, it is assumed that they are “IP packets”). (FIG. 4 (4)), and the IP packet sequence is transferred to the core network 18 (switch 19) (FIG. 2 (f), FIG. 4 (5)).

  That is, the mobile station 12 automatically identifies a portion (or all) of transmission information to be transmitted that satisfies a predetermined condition related to the content, attribute, background, etc. of the transmission information. The information packet including such a portion is encrypted and transmitted in units of packets (appropriately transmitted in a period during which the corresponding call exists or in a period shorter than the length of the communication session). When such a part exists across two packets, both packets are encrypted.

Further, the wireless network control device 14 and the multimedia processing device 16 associated with the wireless base station that has received such transmission information basically change the method of the network interface with the core network 18 (switch 19). Instead, the decrypted transmission information is delivered to the core network 18 (switch 19).
Therefore, according to the present embodiment, the information to be encrypted is specified without significantly complicating the operation performed by the user who receives the communication service via the mobile station 12.

  Furthermore, according to the present embodiment, the hardware, processing amount, and other resources applied to realize the above-described decoding in the multimedia processing device 16 are long for a specific call or communication session. Since it is appropriately shared for many calls without being allocated unnecessarily, service quality can be improved along with cost reduction.

[When "Manual mode" is selected]
In the “manual mode”, the mobile station 12 does not refer to the information stored in the register under the “first man-machine interface” described above, and performs the above-described processing performed in the “automatic mode”. The following processing is performed in place of (a) and (b).
In accordance with the operation performed by the user, the part selected by the user is appropriately displayed in the contents of the mail as the transmission information (including the contents of the attached file).
・ In the process of “Second Man-Machine Interface” that enables such display, when a “location to be encrypted” is specified by the user, a unique pointer indicating the location is appropriately held. To do.

Further, when the mobile station 12 recognizes the completion of the “second man-machine interface” in accordance with the user's instruction, the mobile station 12 refers to these stored pointers, as described below. “Generate packet sequence including divided contents” and “Generate packet sequence including attached file contents”.
(A) Generating a sequence of packets corresponding to the destination, title, and body ・ Generate the above-mentioned “unencrypted packet” in which the destination, title, and body of the corresponding mail are arranged without being encrypted. To do.
・ Of these “non-encrypted packets”, only the “non-encrypted packets that correspond to each stored pointer and include the information to be encrypted” Replace with "encrypted packet".

(B) Generation of a sequence of packets corresponding to the contents of the attached file-The above-mentioned "non-encrypted packet" is generated in which the contents of the corresponding attached file are divided and arranged without being encrypted.
・ Of these “non-encrypted packets”, only the “non-encrypted packets that correspond to each stored pointer and include the information to be encrypted” Replace with "encrypted packet".
In the mobile station 12, the RLC layer described above delivers the sequence of packets generated in this way to the physical layer. The physical layer transmits the sequence of these packets to the radio base stations 11-1 to 11-3 (FIG. 2 (a) and FIG. 6 (2)).
That is, of the transmission information, the information to be encrypted is the above-mentioned “second man-machine” even if the condition is not preset for each item based on the aforementioned “first man-machine interface”. It is specified in a form that is flexibly adapted to the various requirements of the user under "Interface".
Therefore, the operability and added value of the mobile station 12 are improved, and the service quality is improved.

[When "Auto / Manual mode" is selected]
In the “automatic / manual mode”, the mobile station 12 appropriately performs both the “first man-machine interface” and the “second man-machine interface” described above according to the operation performed by the user. The pointer determined in the process of “first man-machine interface” and the pointer determined in the process of “second man-machine interface” are individually held.

  Furthermore, the mobile station 12 determines that “both these“ first man-machine interface ”and“ second man-machine interface ”are completed, or that these man-machine interfaces are started, depending on the operation performed by the user. When “unnecessary” is identified, “generation of a packet sequence corresponding to a destination, a title, and a body” is performed by performing the processes (c), (d), (A), and (B) described above, and “ Generate a packet sequence corresponding to the contents of the attached file ”.

In the mobile station 12, the RLC layer described above delivers the sequence of packets generated in this way to the physical layer. The physical layer transmits the sequence of these packets to the radio base stations 11-1 to 11-3 (FIG. 2 (a) and FIG. 6 (2)).
That is, the information to be encrypted among the transmission information is flexibly specified based on the above described “first man-machine interface” and “second man-machine interface”.

As described above, in the “automatic / manual mode”, among the pieces of information to be encrypted, information that satisfies the above-described conditions can be easily and reliably set under the “first man-machine interface”. In addition, information that does not satisfy such a condition or is difficult to set is also specified under the “second man-machine interface”.
Therefore, the operability and added value of the mobile station 12 are further enhanced, the service quality is improved, and the confidentiality of the transmission information is ensured in a form adapted to various user requirements.

[Second Embodiment]
Hereinafter, the operation of the second embodiment of the present invention will be described with reference to FIG. 1, FIG. 2, and FIG.
The feature of this embodiment is the following processing procedure performed by the mobile station 12, the radio network controller 14, and the multimedia processor 16 in cooperation.

As described above, the mobile station 12 identifies an opportunity for starting transmission of transmission information.
In such an opportunity (FIG. 2 (1)), the mobile station 12 is assumed to be connected to the radio base stations 11-1 to 11-1 through a predetermined radio channel (here, it is assumed to be determined under channel control). A “billing rate request” is sent to all or part of 11-3 (FIG. 2 (2)).

The multimedia processing device 16 identifies such a “billing rate request” delivered via the wireless network control device 14 (FIG. 2 (3)) and performs the following processing.
Sends “billing rate request” to the core network 18 (exchange 19) (FIG. 2 (4)).
• Delivered by the core network 18 (switch 19) in response to the request (FIG. 2 (5)) “Billing rate r” (here, for simplicity, when the transmission information is not encrypted) , It is assumed that the charge is charged according to the transmission per “unencrypted packet” described above).
“Extra rate” known as station information or the like (here, “charging rate R” which is set more when “encrypted packet” is to be transmitted instead of “non-encrypted packet”; “Charging rate R” is calculated as the product of the above “charging rate r” and the “charging rate r” (FIG. 2 (6)).
Notifying the “charging rate r” and “charging rate R” to the mobile station 12 via the wireless network control device 14 (FIG. 2 (7)).

When the mobile station 12 acquires the notified “charging rate r” and “charging rate R” (FIG. 2 (8)), the mobile station 12 performs the following processing (FIG. 2 (9)).
Obtain the total number t of “unencrypted packets” when all of the transmission information is transmitted as a sequence of “unencrypted packets”.
Obtain the total number T and t ′ of “encrypted packet” and “unencrypted packet” when the transmission information is transmitted as a sequence of packets including some “encrypted packet”.
Calculate two billing amounts c and C, which are expressed by the following formula and are the charges of the transmission service of the transmission information.

c = r * t (1)
C = R * T + r * t '(2)
Present these billing amounts c and C to the user and request an instruction as to whether transmission information needs to be concealed.
Depending on the necessity of “concealment of transmission information” based on such an instruction, the processes (a) to (d) described in the first embodiment described above, or processes equivalent to these processes ( By conforming to the mode that is applied), all of the transmission information (which may include attached files) is separated and included in a sequence of packets (“encrypted packet” and “unencrypted”). And / or “packet”).
In the RLC layer described above, a packet sequence that can include the “encrypted packet” generated in this way is delivered to the physical layer.

The physical layer transmits these packet sequences to the radio base stations 11-1 to 11-3 (FIGS. 2 (10) and 6 (2)).
On the other hand, all or a part of the radio base stations 11-1 to 11-3 receives the packet sequence (FIG. 2 (11)) transmitted in this way, and the sequence of these packets is transferred to a predetermined ATM cell. As a sequence (FIG. 2 (12)). Further, the radio network controller 14 delivers the ATM cell sequence to the multimedia processing device 16 as a sequence of different ATM cells generated by reassembling the ATM cell sequence (FIG. 2 (13)).

The multimedia processing device 16 performs the following processing when such a row of ATM cells is delivered (FIG. 2 (14)).
The corresponding ATM cell string is converted into the above-described packet string in the RLC layer (configured as a permutation of both “non-encrypted packet” and “encrypted packet”). .
・ Individually identify all “encrypted packets” in which the logical value of the “C / I” field is set to “1” among the packets included in the sequence of the packets, and specify the specified “encryption” By decrypting “packet” (conforming to the encryption method described above), it is converted into “unencrypted packet” (FIG. 2 (15)).
Convert all these “unencrypted packet” columns into a sequence of packets that conform to the desired layer (for simplicity we will assume “IP packets” here) The IP packet sequence is delivered to the core network 18 (switch 19) (FIG. 2 (16)).
Check the numbers t_a and T_a of the “unencrypted packet” and “encrypted packet” included in the packet sequence in the RLC layer described above, and determine the numbers t_a and T_a and the “billing rate” described above. The charging amount C_a represented by the following equation (3) is calculated for “r” and “charging rate R” (FIG. 2 (17)).

C_a = R * T_a + r * t_a (3)
-Deliver billing information including the billing amount C_a to the core network 18 (exchange 19) (FIG. 2 (18)).
In other words, the above-mentioned charging amount is “the charging amount acquired in cooperation with the core network 18 without changing the form of the network interface with the core network 18 and notified to the mobile station 12” It is obtained with high accuracy based on “rate r” and “billing rate R” and “contents and attributes of transmission information actually transmitted”. Furthermore, the confidentiality of the transmission information in the wireless transmission section is guaranteed in the form desired by the user only when such a charge amount is permitted by the user.

As described above, according to the present embodiment, the encryption of the “part designated in advance by the user” or the “part satisfying the condition preset by the user” in the transmission information is performed for the user. Compared to the case where the fee amount is taken into consideration and the opportunity to determine whether the encryption is permitted or not based on the fee amount is given, flexible adaptation to the needs of various users can be achieved.
In the present embodiment, the billing rate is inquired to the core network 18.
However, such a billing rate may be given as station information in advance to the multimedia processing device 16 or the wireless network control device 14, for example, and the station information is linked to the core network 18 and the exchange 19 at the time of startup. May be obtained under

Furthermore, in this embodiment, the mobile station 12 is notified of the charge rate, and the mobile station 12 calculates the charge amount based on the charge rate.
However, the present invention is not limited to such a configuration, and may be configured as follows, for example.
Based on the number of “unencrypted packets” and “encrypted packets” notified when charging information is requested from the mobile station 12, a charging amount is calculated by the wireless network control device 14 or the multimedia processing device 16, The charged amount is notified to the mobile station 12.
The billing amount calculated by the mobile station 12 is directly notified to the core network 18 (switch 19) via the wireless network control device 14 or the multimedia processing device 16.

Further, in this embodiment, the determination of whether to permit encryption is made by the user considering the charge amount.
However, such determination of whether or not to permit encryption may be automatically performed based on, for example, a magnitude relationship between a charge amount and an upper limit value set in advance for the charge amount.
Based on the decision on whether or not to allow encryption,
Further, the determination may be realized by any form of linkage between the mobile station 12 and the radio network control device 14 and the multimedia processing device 16.

Further, in the wireless communication system according to each of the above-described embodiments, for example, various services can be provided as described below.
-Not only the name and name of the user who operates the mobile station 12, but also data including private information such as bank and credit card numbers, telephone numbers, and addresses are subject to encryption.
-Digital data, snapshots and other image information with a substantial amount of information even if the data size is larger than text information are excluded from encryption.

Accordingly, a communication provider that provides a communication service under the application of the present invention is advantageous in the following points.
・ Service quality can be improved.
-The acquisition of users who can provide such communication services is promoted.
-Since the resources used for encryption and decryption can be efficiently shared, the running cost can be reduced.

Further, in each of the above-described embodiments, encryption based on a common encryption method is performed regardless of the attributes and contents of information included in transmission information and to be encrypted.
However, such encryption may be performed based on any of the following encryption methods, for example.
・ Different individual encryption methods adapted to the contents, attributes and other conditions of the individual information identified as the object of encryption ・ Selected based on the contents, attributes and other conditions of the information identified as the object of encryption A single encryption method that conforms to the items that ensure maximum confidentiality

In each of the above-described embodiments, binary information indicating whether or not the corresponding packet is an “encrypted packet” is arranged in both “encrypted packet” and “non-encrypted packet”. A “C / I” field is provided.
However, these packets are not provided with the “C / I” field, and the decoding method applied based on the information format of the payload and whether or not the decoding is performed are surely determined. It may be configured in the form to be performed.

Furthermore, in each of the above-described embodiments, the present invention is applied to a UTRAN (UMTS (Universal Mobile Telecommunication System) Terrestrial Radio Access Network) that can provide a mobile communication service as an access network connected to the core network 18. ing.
However, the present invention is not limited to such an access network, and as long as transmission information confidentiality is required, regardless of the applied multiple access method, zone configuration, frequency allocation, channel configuration, The present invention can be applied to various wireless communication systems and wireless transmission systems.

Further, in each of the above-described embodiments, the present invention is applied to wireless transmission of desired transmission information via an uplink from the mobile station 12 to the wireless base stations 11-1 to 11-3.
However, the present invention is not limited to such an uplink link and can be similarly applied to a downlink link.
Furthermore, the present invention is not limited to the above-described embodiments, and various embodiments are possible within the scope of the present invention, and any improvement may be applied to some or all of the constituent devices.

Claims (3)

Receiving means for receiving a sequence of packets that arrives via a wireless transmission path and that includes all or part of the information placed in the payload and that may include additional information applied to decrypt the information When,
The transmission information contained in the packet sequence is restored from the packet sequence, and the rate of the encrypted information is combined with the transmission information and the charge rate is increased according to the applied encryption method. An inter-network interface means for delivering billing information higher than the product sum to the core network to the core network. The wireless device according to claim 1, wherein
The network interface means includes:
The wireless apparatus, wherein the charging information and the charging rate are acquired under a charging method adapted to the core network. The wireless device according to claim 2, wherein
A notification means for wirelessly transmitting an additional portion of the charging method or the charging rate to the transmission end of the packet sequence;
The network interface means includes:
The wireless transmission is invalidated based on a response transmitted from the transmitting end and delivered via the receiving means with respect to the wireless transmission fee or charging rate. apparatus.

Images