JP2014127975A - Radio terminal and radio communication device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a technique actualizing radio communication by a radio terminal without disclosing an identifier proper to the radio terminal, irrespective of whether or not the radio terminal includes a telephone function.SOLUTION: A radio terminal 100A includes: an identifier acquisition unit 111 for acquiring an identifier from a radio communication device 200A through short-range radio communication; and a connection request provision unit 112 for providing a connection request to the radio communication device 200A using the identifier acquired by the identifier acquisition unit 111.

Description

  The present invention relates to a wireless terminal and a wireless communication apparatus.

  In recent years, with the spread of wireless terminals capable of wireless communication (hereinafter referred to as “wireless terminals”) such as smartphones and tablet PCs (Personal Computers), the amount of communication for data transmission / reception on telephone lines has increased explosively, There is a situation where communication failures are likely to occur. In order to reduce the amount of communication on the telephone line, the telephone company provides a wireless hot spot for each predetermined site, and performs data transmission / reception by wireless communication in the hot spot, thereby reducing the amount of data communication on the telephone line. We are trying to reduce it.

  In addition, when such wireless communication is used, the communication speed is often higher and stable than when a telephone line is used, and it is also possible to reduce the telephone line usage fee. Therefore, the use of wireless communication can give a great advantage to users of wireless terminals, and hot spots are often set up by service providers to attract customers.

  On the other hand, there is also a movement to collect and analyze user behavior histories with wireless terminals and use the analysis results for marketing. As the user's action history, information on the location of the hot spot can be used in addition to the position information by the GPS (Global Positioning System) of the wireless terminal. Here, when wireless communication is performed via a hot spot, an identifier unique to a wireless terminal is often used for wireless communication. In such a case, it is possible for the management side to collect when and in what area the user with the wireless terminal is in what area or what service is being used.

  However, it is not pleasant for users to collect excessive information even for the purpose of marketing activities, and if the communication in the hotspot is intercepted, the user is against the will of the user. Information such as when and in what area can be collected. Therefore, a technique is disclosed in which wireless communication is performed using a temporary identifier acquired via a telephone line instead of an identifier unique to the wireless terminal when the wireless terminal can use the telephone line (for example, Patent Document 1). reference.). According to such a technique, it is possible to avoid the interception of information such as when and in which area the user of the wireless terminal is located.

Japanese Patent No. 04292884

  However, in such a technique, it is essential to use a telephone line, so this technique cannot be applied to a wireless terminal that cannot use a telephone line. Furthermore, the possibility that the service provider or the system provider can specify the identifier for using the wireless communication of the wireless terminal based on the identifier for using the telephone line of the wireless terminal cannot be excluded.

  Accordingly, the present invention has been made in view of the above problems, and an object of the present invention is to disclose an identifier unique to a wireless terminal regardless of whether or not the wireless terminal has a telephone function. It is an object of the present invention to provide a technique for realizing wireless communication by a wireless terminal without doing so.

  In order to solve the above problem, according to an aspect of the present invention, an identifier acquisition unit that acquires an identifier from a wireless communication device by short-range wireless communication, and the wireless communication using the identifier acquired by the identifier acquisition unit. A wireless terminal is provided that includes a request providing unit that provides a connection request to a communication device.

  The identifier acquisition unit may acquire a MAC address as the identifier from the wireless communication device.

  The wireless terminal may include a service request providing unit that provides a service request to the wireless communication device when a connection response indicating permission of connection is provided for the connection request.

  In addition, according to an aspect of the present invention, when an identifier providing unit that provides an identifier to a wireless terminal by short-range wireless communication and a connection request using the identifier are provided from the wireless terminal, the wireless terminal And a connection response providing unit for providing a connection response indicating that the connection is permitted.

  The identifier providing unit may provide a MAC address as the identifier to the wireless terminal.

  The wireless communication apparatus further includes a MAC filter processing unit that performs authentication based on the MAC address before the connection response indicating that the connection is permitted to the wireless terminal is provided by the connection response providing unit. May be.

  The MAC filter processing unit may determine that the connection to the wireless terminal is not permitted when the destination of the connection request is an AP server and the MAC address is not within a predetermined range.

  The wireless communication apparatus may include a service response providing unit that provides a service to the wireless terminal when a service request is provided from the wireless terminal.

  As described above, according to the present invention, wireless communication by a wireless terminal can be realized without disclosing an identifier unique to the wireless terminal regardless of whether the wireless terminal has a telephone function. is there.

It is a figure which shows the structural example of the radio | wireless communications system which concerns on embodiment of this invention. It is a figure which shows the structural example of the radio | wireless terminal which concerns on the 1st Embodiment of this invention. It is a figure which shows the structural example of the radio | wireless communication apparatus which concerns on the 1st Embodiment of this invention. It is a sequence diagram which shows an example of the flow of operation | movement of the radio | wireless communications system which concerns on the 1st Embodiment of this invention. It is a figure which shows the structural example of the identifier used by the radio | wireless communications system which concerns on the 1st Embodiment of this invention. It is a figure for demonstrating the case where AP server is included in the radio | wireless communications system which concerns on the 1st Embodiment of this invention. It is a figure for demonstrating the case where AP server and Web server are included in the radio | wireless communications system which concerns on the 1st Embodiment of this invention. It is a figure for demonstrating the communication between several radio | wireless terminals in the radio | wireless communications system which concerns on the 1st Embodiment of this invention. It is a flowchart which shows the example of operation | movement of a MAC filter process part. It is a figure which shows the structural example of the radio | wireless terminal which concerns on the 2nd Embodiment of this invention. It is a figure which shows the structural example of the radio | wireless communication apparatus which concerns on the 2nd Embodiment of this invention. It is a sequence diagram which shows an example of the flow of operation | movement of the radio | wireless communications system which concerns on the 2nd Embodiment of this invention. It is a figure which shows the structural example of the identifier used by the radio | wireless communications system which concerns on the 2nd Embodiment of this invention.

  Exemplary embodiments of the present invention will be described below in detail with reference to the accompanying drawings. In the present specification and drawings, components having substantially the same functional configuration are denoted by the same reference numerals, and redundant description is omitted.

  In the present specification and drawings, a plurality of constituent elements having substantially the same functional configuration may be distinguished by attaching different alphabets or numbers after the same reference numeral. However, when it is not necessary to particularly distinguish each of a plurality of constituent elements having substantially the same functional configuration, only the same reference numerals are given.

[Description of this embodiment]
First, a configuration example of the wireless communication system 10 that is a premise of each embodiment of the present invention will be described. FIG. 1 is a diagram illustrating a configuration example of a wireless communication system 10 according to an embodiment of the present invention. As shown in FIG. 1, the wireless communication system 10 includes a wireless terminal 100 and a wireless communication device 200. The wireless terminal 100 and the wireless communication device 200 can communicate with each other by a wireless signal. For example, the wireless communication device 200 functions as an AP (Access Point) of a wireless LAN (Local Area Network), and the wireless terminal 100 can access the wireless communication device 200 as an AP by a wireless signal.

  The wireless terminal 100 and the wireless communication apparatus 200 can communicate via the network 300. A predetermined server (for example, a web server) is connected to the network 300, and the wireless communication apparatus 200 can provide a service in response to a request from the wireless terminal 100 to the wireless terminal 100. Specifically, the service is provided by the wireless communication apparatus 200 acquiring content corresponding to a request from the wireless terminal 100 from a predetermined server (for example, a web server) and providing the acquired content to the wireless terminal 100. Is realized.

  In FIG. 1, a case where one wireless terminal 100 performs wireless communication with one wireless communication apparatus 200 is illustrated as an example, but the wireless terminal 100 capable of performing wireless communication with the wireless communication apparatus 200 is illustrated. The number is not limited to one. Therefore, for example, a plurality of wireless terminals 100 may be able to perform wireless communication with the wireless communication device 200.

  The configuration example of the wireless communication system 10 that is the premise of each embodiment of the present invention has been described above.

[Description of First Embodiment]
Subsequently, a first embodiment of the present invention will be described.

  First, a configuration example of the wireless terminal 100A according to the first embodiment of the present invention will be described. FIG. 2 is a diagram illustrating a configuration example of the wireless terminal 100A according to the first embodiment of the present invention. As illustrated in FIG. 2, the wireless terminal 100A includes a control unit 110A, an input unit 120, a reading unit 130, a storage unit 140, an output unit 150, and a communication unit 160.

  The control unit 110A has a function of controlling the overall operation of the wireless terminal 100A. The input unit 120 has a function of inputting an operation from a user and providing the operation to the control unit 110A. The reading unit 130 has a function of reading data by short-range wireless communication. For example, the reading unit 130 can read data in the same manner as a card reader of NFC (Near Field Communication). The storage unit 140 can store a program and data for operating the control unit 110A. In addition, the storage unit 140 can temporarily store various data required in the course of the operation of the control unit 110A.

  The output unit 150 has a function of outputting data according to control by the control unit 110A. For example, the output unit 150 may have a function of performing display on the screen or a function of outputting sound in accordance with control by the control unit 110A. The communication unit 160 has a function of performing wireless communication with other devices according to control by the control unit 110A. For example, the communication unit 160 can perform wireless communication with the wireless communication device 200 by Wi-Fi (registered trademark).

  In the example illustrated in FIG. 2, the input unit 120, the reading unit 130, the storage unit 140, the output unit 150, and the communication unit 160 exist inside the wireless terminal 100 </ b> A, but the input unit 120, the reading unit 130, the storage unit Unit 140, output unit 150, and communication unit 160 may exist outside radio terminal 100A. In addition, the control unit 110A includes an identifier acquisition unit 111, a connection request providing unit 112, a service request providing unit 113, and a termination processing unit 114.

  When the wireless terminal 100A approaches within a distance that allows wireless communication with the wireless communication device 200A, the identifier acquisition unit 111 acquires an identifier from the wireless communication device 200A by short-range wireless communication. Here, the short-range wireless communication is performed with the wireless communication device 200 </ b> A via the reading unit 130. Further, the identifier acquired by the identifier acquisition unit 111 may be a MAC address, as will be described later.

  The connection request providing unit 112 provides a connection request to the wireless communication device 200A using the identifier acquired by the identifier acquiring unit 111. The provision of the connection request is performed by wireless communication via the communication unit 160, for example. The service request providing unit 113 provides a service request to the wireless communication apparatus 200 </ b> A when a connection response indicating permission of connection is provided for the connection request. The termination processing unit 114 performs a predetermined termination process when the use of the service is terminated.

  Heretofore, the configuration example of the wireless terminal 100A according to the first embodiment of the present invention has been described.

  Next, a configuration example of the wireless communication device 200B according to the first embodiment of the present invention will be described. FIG. 3 is a diagram illustrating a configuration example of the wireless communication device 200A according to the first embodiment of the present invention. As illustrated in FIG. 3, the wireless communication device 200 </ b> A includes a control unit 210 </ b> A, an output unit 220, a communication unit 230, and a storage unit 240.

  The control unit 210A has a function of controlling the entire operation of the wireless communication device 200A. The output unit 220 has a function of outputting data according to control by the control unit 210A. For example, the output unit 220 can output data in the same manner as an NFC RFID (Radio Frequency IDentification) card. The communication unit 230 has a function of performing wireless communication with other devices in accordance with control by the control unit 210A. For example, the communication unit 230 can perform wireless communication with the wireless terminal 100A by Wi-Fi (registered trademark). For example, the communication unit 230 can perform wired communication with various servers via the network 300.

  The storage unit 240 can store a program and data for operating the control unit 210A. In addition, the storage unit 240 can temporarily store various data necessary in the course of the operation of the control unit 210A.

  In the example illustrated in FIG. 3, the output unit 220, the communication unit 230, and the storage unit 240 exist inside the wireless communication device 200 </ b> A, but the output unit 220, the communication unit 230, and the storage unit 240 are included in the wireless communication device. It may exist outside of 200A. For example, any of the output unit 220, the communication unit 230, and the storage unit 240 may be connected to the wireless communication device 200 </ b> A via the network 300. The control unit 210 </ b> A includes an identifier providing unit 211, a connection response providing unit 212, a service response providing unit 213, and a termination processing unit 214.

  The identifier providing unit 211 provides an identifier to the wireless terminal 100A through short-range wireless communication. Here, short-range wireless communication is performed with the wireless communication device 200 </ b> A via the output unit 220. Further, the identifier provided by the identifier providing unit 211 may be a MAC address as described above. The identifier providing unit 211 updates the identifier to be returned as a response to the next identifier request, and records “in use” in the storage unit 240 as the availability of the provided identifier. A wireless communication session between the wireless terminal 100A and the wireless communication device 200A is managed by the control unit 210A.

  When the connection request using the identifier is provided from the wireless terminal 100A, the connection response providing unit 212 provides a connection response indicating that the connection is permitted to the wireless terminal 100A. However, as described later, authentication may be performed based on the identifier before the connection response providing unit 212 provides a connection response indicating that the connection is permitted to the wireless terminal 100A. In such a case, the connection response providing unit 212 provides a connection response indicating that the connection is permitted if the authentication is successful, but if the authentication fails, a connection response indicating that the connection is not permitted. May be provided.

  Alternatively, as will be described later, even if the authentication is successful, if the destination of the connection request is the AP server and the identifier is not within a predetermined range, the connection is not permitted to the wireless terminal 100A. May be determined. An example of the case where the identifier is within a predetermined range includes a case where the vendor ID included in the identifier matches the vendor ID of the wireless communication device 200A, as will be described later.

  When the service request is provided from the wireless terminal 100A, the service response providing unit 213 provides a service to the wireless terminal 100A. Specifically, as described above, the service is provided by the wireless communication device 200A acquiring content according to a request from the wireless terminal 100A from a predetermined server (for example, a web server), and wirelessly acquiring the acquired content. This is realized by providing the terminal 100A.

  Heretofore, the configuration example of the wireless communication apparatus 200A according to the first embodiment of the present invention has been described.

  Then, an example of the flow of operation | movement of 10 A of radio | wireless communications systems which concern on the 1st Embodiment of this invention is demonstrated. FIG. 4 is a sequence diagram showing an example of an operation flow of the wireless communication system 10A according to the first embodiment of the present invention.

  First, the control unit 110A of the wireless communication device 200A prepares an identifier to be given to the wireless terminal 100A (step S101). In the preparation of the identifier, specifically, the control unit 110A writes the identifier in the output unit 220 so that the identifier can be returned in response to the identifier request from the wireless terminal 100A. The identifier acquisition unit 111 makes an identifier request to the wireless communication device 200 via the reading unit 130 (step S102). The identifier providing unit 211 gives an identifier to the wireless terminal 100A through the output unit 220 as a response to the identifier request (step S103). Thereby, the identifier acquisition unit 111 can acquire the identifier from the wireless communication apparatus 200 </ b> A by the short-range wireless communication via the reading unit 130.

  Note that a series of operations (R101) from step S101 to step S102 is realized by reading data of the output unit 220 by the reading unit 130, and an identifier unique to the wireless terminal 100A is not used. The identifier acquisition unit 111 stores the identifier in the storage unit 140 (step S104), and the identifier providing unit 211 ensures that the identifier assigned to the wireless terminal 100A is not assigned to another wireless terminal (step S105). The identifier to be returned as a response to the identifier request is updated (step S106) and prepared for the next reading.

  Subsequently, the connection request providing unit 112 provides a connection request to the wireless communication apparatus 200 via the communication unit 160 using the identifier stored in the storage unit 140 (step S107). The connection response providing unit 212 authenticates the connection request (step S108). If the authentication is successful, the connection response providing unit 212 provides a connection response indicating that the connection is permitted to the wireless terminal 100A via the communication unit 230. (Step S109). When such a connection response is acquired by the connection request providing unit 112 via the communication unit 160 and a wireless communication session is established between the wireless terminal 100A and the wireless communication device 200A, the wireless terminal 100A passes through the wireless communication device 200A. Network service.

  Specifically, when the service request providing unit 113 provides a service request to the wireless communication apparatus 200 via the communication unit 160 (step S110), the service response providing unit 213 receives the service request via the communication unit 230. To get. Subsequently, the communication unit 230 acquires content from a predetermined server via the network 300, and the service response providing unit 213 provides the content to the wireless terminal 100A as a service response via the communication unit 230 ( Step S112). A series of operations (R103) from step S110 to step S112 are repeated until use of the network service is completed.

  When the wireless terminal 100A finishes using the network service, the termination processing unit 114 performs termination processing (step S113), and the termination processing unit 214 assigns the identifier assigned to the wireless terminal 100A to another wireless terminal. (Step S114), the end processing unit 114 deletes the identifier stored in the storage unit 140 (step S115).

  Note that the timing at which the termination processing unit 114 and the termination processing unit 214 perform the termination processing is not particularly limited. For example, an operation performed on the power supply of the wireless terminal 100A or an operation accepted by a network service application may be used as a trigger for starting the end process. Further, when a predetermined time has elapsed after the wireless terminal 100A and the wireless communication device 200A cannot reference each other, a trigger for starting identifier release (step S114) and identifier deletion (step S115) may be used. .

  A series of operations R102 is performed by wireless communication, and an identifier used for communication from the connection request (step S107) to the termination process (step S113) is provided from the wireless communication apparatus 200A to the wireless terminal 100A. It is only an identifier. Further, in the series of operations R101, in addition to the identifier, connection information from the wireless terminal 100A to the wireless communication device 200A may be read from the wireless communication device 200A by the wireless terminal 100A. Examples of the connection information include an SSID (Service Set Identifier) and a passphrase.

  Heretofore, an example of the operation flow of the wireless communication system 10A according to the first embodiment of the present invention has been described.

  Subsequently, a configuration example of an identifier used by the wireless communication system 10A according to the first embodiment of the present invention will be described. FIG. 5 is a diagram illustrating a configuration example of an identifier used by the wireless communication system 10A according to the first embodiment of the present invention.

  For example, when the identifier is expressed by a MAC (Media Access Control address) address of Ethernet (registered trademark), the size of the identifier is 48 bits. As shown in FIG. 5, the first 24 bits of the MAC address are defined as a vendor ID, and the value is managed by IEEE (The Institute of Electrical and Electronics Engineers, Inc.). Although it cannot be generated and used without permission, the remaining 24 bits can be arbitrarily given so as to be unique within each vendor.

  Here, the vendor ID may be the vendor ID of the wireless communication device 200A. More specifically, the vendor ID of the wireless communication device 200A corresponds to the ID assigned to the manufacturer of the wireless communication device 200A. Note that the communication unit 230 of the wireless communication apparatus 200 </ b> A includes a wireless communication unit (mainly a wireless communication unit that performs communication with the communication unit 160 of the wireless terminal 100 </ b> A) and a wired communication unit (mainly between the network 300). Therefore, the MAC address vendor ID used in the communication of the wireless communication means and the wired communication means may be common.

  Next, details of authentication performed by the connection response providing unit 212 of the wireless communication apparatus 200A will be described. As described above, the connection response providing unit 212 authenticates the wireless terminal 100A based on the connection request from the wireless terminal 100A. For this authentication, for example, MAC filter authentication performed by a wireless LAN AP can be applied.

  When the wireless communication device 200A supports MAC filter authentication, the communication unit 230 includes a MAC filter processing unit, and the MAC filter processing unit manages the filtering table. For example, the wireless communication unit of the communication unit 230 of the wireless communication device 200A performs MAC filter authentication that enables authentication of a signal that flows from the wireless network and that includes a source MAC address in the filtering table. , Continue communication of the signal. On the other hand, among signals flowing in from the wireless network, for a signal whose source MAC address is not included in the filtering table, MAC filter authentication for which authentication is not performed is performed and the signal is discarded.

  The communication unit 230 of the wireless communication apparatus 200A can perform processing for relaying communication with the wireless terminal 100A that has made authentication possible, when authentication has been made possible. Furthermore, the communication unit 230 of the wireless communication apparatus 200A can perform a process of relaying communication between the wireless terminal 100A and the network 300 that have been authenticated. Note that the filtering table may be set in advance by the administrator of the wireless communication apparatus 200A.

  Further, the MAC filter processing unit may update the filtering table in accordance with the record of the availability of the identifier. For example, when the identifier providing unit 211 assigns the MAC address “AAAGGG” as an identifier, “in use” is recorded as the availability (usage state) of the MAC address “AAAGGG”. Subsequently, the MAC filter processing unit may perform an update to add the MAC address “AAAGGG”, which is recorded as “in use”, to the filtering table. On the other hand, when “use end” is recorded as the availability (usage state) of the MAC address “AAAGGG”, the MAC filter processing unit updates the MAC address “AAAGGG” recorded as “use end” from the filtering table. Can be done.

  Next, a case where the AP server 400 is included in the wireless communication system 10A will be described. FIG. 6 is a diagram for explaining a case where the AP server 400 is included in the wireless communication system 10A according to the first embodiment of the present invention. The AP server 400 is a server that gives the wireless terminal 100A an application and an ID used when communication is performed with the application.

  More specifically, for example, the AP server 400 provides an application service (AP service) that enables the wireless terminal 100 to communicate while maintaining anonymity of the user within a predetermined area. Server. The AP server 400 wirelessly uses an application for an AP service (a service in which a user can communicate while maintaining anonymity) provided in a predetermined area and an ID (one-time ID) used when communicating with the application. It is given to the terminal 100. An example of the predetermined area is a radio wave propagation area of the wireless communication apparatus 200 (an area in which the communication unit 230 performs wireless communication using Wi-Fi (registered trademark) (wireless LAN)). Call service.

  With the AP service, a call can be made between the wireless terminals 100 in a predetermined area. If the one-time ID is issued, the wireless terminal 100 uses its AP identification information (eg, telephone number, mail address, etc.) (OSI reference model (Open Systems Interconnection reference model)) when using the AP service. There is no need to provide information used in layer 7 connection.

  Further, the identifier providing unit 211 assigns an identifier (MAC address) to the wireless terminal 100, the MAC filter processing unit updates the filtering table according to the usage state of the identifier, and the wireless terminal 100 passes through the wireless communication device 200. Since it is connected to the AP server 400, the wireless terminal 100 does not need to provide identification information (information used for layer 2 connection of the OSI reference model) of its own device. Therefore, the wireless terminal 100 can communicate while maintaining the anonymity of the user of the wireless terminal 100.

  Furthermore, when the MAC filter processing unit updates the filtering table according to the usage state of the identifier, the AP server 400 can provide the AP service to the wireless terminal 100 that is surely present in the predetermined area.

  In such a configuration, the wireless terminal 100A can connect to the AP server 400 via the wireless communication device 200A, acquire the application and ID, and obtain the benefits of the AP service.

  In this case, the communication unit 230 of the wireless communication device 200A may not allow the connection with the AP server 400 to all of the wireless terminals 100A that can be authenticated. For example, as illustrated in FIG. 6, the communication unit 230 of the wireless communication device 200 </ b> A includes a wireless terminal having a MAC address that includes a vendor ID similar to the vendor ID of the wireless communication device 200 </ b> A among the wireless terminals 100 </ b> A that have been authenticated. Connection to the AP server 400 may be permitted only for 100A.

  FIG. 7 is a diagram for explaining a case where the AP server 400 and the Web server 500 are included in the wireless communication system 10A according to the first embodiment of the present invention. FIG. 8 is a diagram for explaining communication between a plurality of wireless terminals 100A in the wireless communication system 10A according to the first embodiment of the present invention.

  For example, in the filtering tables illustrated in FIGS. 6 to 8, the communication unit 230 of the wireless communication device 200 </ b> A has the transmission source MAC address “BBBAAA”, “CCCCEEEE”, or “DDDFFF” (that is, the transmission source MAC address). The vendor ID of the MAC address used in the communication by the wireless communication means of the communication unit 230 of the wireless communication device 200A), the communication between the plurality of wireless terminals 100A that can be authenticated, and the network 300 Communication (communication with a server other than the AP server 400 (for example, the Web server 500)) may be permitted.

  Further, the communication unit 230 of the wireless communication device 200 </ b> A has the transmission source MAC address “AAADDD”, “AAAEEE”, or “AAAFFF” (that is, the vendor ID of the transmission source MAC address is “AAA”, and wireless communication) Communication between a plurality of wireless terminals 100A that can be authenticated, communication via the network 300 (AP server). Communication with the AP server 400 (for example, communication with other servers (for example, communication with the Web server 500)) may be permitted.

  FIG. 9 is a flowchart illustrating an example of the operation of the MAC filter processing unit. First, the MAC filter processing unit performs MAC filter authentication of the wireless terminal 100A (step S901). If the authentication result is “non-authentication”, the MAC filter processing unit discards the signal from the wireless terminal 100A (step S906) and ends the operation. On the other hand, if the authentication result is “authentication possible”, the MAC filter processing unit determines the destination of the signal from the wireless terminal 100A (step S902).

  If the destination of the signal from the wireless terminal 100A is the AP server 400, the MAC filter processing unit determines the vendor ID of the source MAC address of the signal (step S903), and the vendor ID of the source MAC address If the vendor ID of the wireless communication device 200A is different, the signal is discarded (step S906), and the operation is terminated. On the other hand, if the vendor ID of the transmission source MAC address matches the vendor ID of the wireless communication device 200A, the signal is relayed from the wireless communication unit of the communication unit 230 to the wired communication unit (step S905), and the operation ends. .

  The MAC filter processing unit relays the signal from the wireless communication unit of the communication unit 230 to the wired communication unit when the destination of the signal from the wireless terminal 100A is a device other than the AP server 400 (for example, the Web server 500). (Step S905), and the operation ends. If the destination of the signal from the wireless terminal 100A is another wireless terminal 100A, the MAC filter processing unit relays the signal from the wireless communication unit of the communication unit 230 to the wireless communication unit (step S904), and performs the operation. finish.

  As described above, according to the first embodiment of the present invention, the wireless terminal 100A can acquire an identifier necessary for wireless communication from the wireless communication apparatus 200A. Thereby, wireless communication can be realized without disclosing an identifier unique to the wireless terminal 100A. Therefore, the service provider or system provider using the wireless communication device 200A can prove to the user that the wireless terminal 100A cannot be tracked, and uses the system with peace of mind to the user. Can be received. Further, in the first embodiment of the present invention, since no telephone line is required, the wireless terminal 100A may not have a telephone function.

  The first embodiment of the present invention has been described above.

[Description of Second Embodiment]
Subsequently, a second embodiment of the present invention will be described.

  First, a configuration example of the wireless terminal 100B according to the second embodiment of the present invention will be described. FIG. 10 is a diagram illustrating a configuration example of a radio terminal 100B according to the second embodiment of the present invention. As illustrated in FIG. 10, the wireless terminal 100B includes a control unit 110B, an input unit 120, a storage unit 140, an output unit 150, and a communication unit 160.

  The control unit 110B has a function of controlling the overall operation of the wireless terminal 100B. The functions of the input unit 120, the storage unit 140, the output unit 150, and the communication unit 160 according to the second embodiment of the present invention are the same as those of the input unit 120, the storage unit 140, according to the first embodiment of the present invention. Since the function is the same as that of the output unit 150 and the communication unit 160, description thereof is omitted. The control unit 110B includes an encryption key generation unit 115, an encrypted data acquisition unit 116, a decryption unit 117, a connection request provision unit 112, a service request provision unit 113, and a termination processing unit 114.

  When the encryption key generation unit 115 generates a pair of a public key and a secret key, the encryption key generation unit 115 stores the secret key in the storage unit 140. When a temporary identifier is provided from the wireless terminal 100A to the wireless communication device 200B, the encrypted data acquisition unit 116 acquires from the wireless communication device 200B encrypted data in which the identifier is encrypted with the public key. For example, the encrypted data acquisition unit 116 generates a temporary identifier and provides a connection request to the wireless communication device 200B using the temporary identifier. If the encrypted data acquisition unit 116 includes the public key in the connection request, the wireless communication device 200B can extract the public key from the connection request and use it for encryption of the identifier.

  The decryption unit 117 acquires this identifier by decrypting the encrypted data with the secret key. The connection request providing unit 112 provides a connection request to the wireless communication device 200B using the identifier acquired by the decoding unit 117. The provision of the connection request is performed by wireless communication via the communication unit 160, for example. The service request providing unit 113 provides a service request to the wireless communication apparatus 200 </ b> A when a connection response indicating permission of connection is provided for the connection request. The termination processing unit 114 performs a predetermined termination process when the use of the service is terminated.

  Heretofore, the configuration example of the wireless terminal 100B according to the second embodiment of the present invention has been described.

  Next, a configuration example of the wireless communication device 200B according to the second embodiment of the present invention will be described. FIG. 11 is a diagram illustrating a configuration example of a wireless communication device 200B according to the second embodiment of the present invention. As illustrated in FIG. 11, the wireless communication device 200B includes a control unit 210B, a communication unit 230, and a storage unit 240.

  The control unit 210B has a function of controlling the overall operation of the wireless communication device 200B. The functions of the communication unit 230 and the storage unit 240 according to the second embodiment of the present invention are the same as the functions of the communication unit 230 and the storage unit 240 according to the first embodiment of the present invention. Description is omitted. The control unit 210B includes a determination unit 215, an encryption unit 216, an encrypted data providing unit 217, a connection response providing unit 212, a service response providing unit 213, and a termination processing unit 214.

  The determination unit 215 determines whether or not a temporary identifier is provided from the wireless terminal 100B. More specifically, the determination unit 215 determines whether the identifier provided from the wireless terminal 100B is a temporary identifier, a real identifier, or another identifier. The identifier is set in, for example, a connection request provided from the wireless terminal 100B.

  When the temporary identifier is provided from the wireless terminal 100B, the encryption unit 216 encrypts this identifier with the public key and generates encrypted data. The public key is included in the connection request using the temporary identifier from the wireless terminal 100B, for example. The identifier encrypted by the encryption unit 216 may be a MAC address. The encrypted data providing unit 217 provides the encrypted data to the wireless terminal 100B. The encrypted data providing unit 217 updates the identifier to be returned as a response to the next connection request, and records “in use” in the storage unit 240 as the availability of the provided identifier. A wireless communication session between the wireless terminal 100B and the wireless communication device 200B is managed by the control unit 210B.

  When a connection request using this identifier is provided from the wireless terminal 100B, the connection response providing unit 212 provides a connection response indicating that the connection is permitted to the wireless terminal 100B. However, authentication may be performed based on the identifier before the response providing unit 212 provides a connection response indicating that connection is permitted to the wireless terminal 100B. In such a case, the connection response providing unit 212 provides a connection response indicating that the connection is permitted if the authentication is successful, but if the authentication fails, a connection response indicating that the connection is not permitted. May be provided.

  Alternatively, even if the authentication is successful, if the destination of the connection request is the AP server and the identifier is not within a predetermined range, it may be determined not to permit the connection to the wireless terminal 100B. . As an example of the case where the identifier is within a predetermined range, as described above, there is a case where the vendor ID included in the identifier matches the vendor ID of the wireless communication device 200A.

  When a service request is provided from the wireless terminal 100B, the service response providing unit 213 provides a service to the wireless terminal 100B. Specifically, as described above, the service is provided by the wireless communication device 200B acquiring content according to a request from the wireless terminal 100B from a predetermined server (for example, a web server), and wirelessly acquiring the acquired content. This is realized by providing the terminal 100B.

  Heretofore, the configuration example of the wireless communication apparatus 200B according to the second embodiment of the present invention has been described.

  Then, an example of the flow of operation | movement of the radio | wireless communications system 10B which concerns on the 2nd Embodiment of this invention is demonstrated. FIG. 12 is a sequence diagram showing an example of an operation flow of the wireless communication system 10B according to the second embodiment of the present invention.

  First, the encryption key generation unit 115 generates an encryption key pair (step S201). Next, the encrypted data acquisition unit 116 generates a temporary identifier (step S202). The encrypted data acquisition unit 116 includes the public key in the generated encryption key pair in the connection request, and makes a connection request to the wireless communication device 200B using the temporary identifier (step S203). The determination unit 215 determines whether or not the identifier of the wireless terminal 100B that has made the connection request is a temporary identifier (step S204), and determines that the identifier of the wireless terminal 100B that has made the connection request is not the temporary identifier Branches to step S205.

  On the other hand, when the determination unit 215 determines that the identifier of the wireless terminal 100B that has made the connection request is a temporary identifier, the encryption unit 216 stores the public key included in the connection request in the storage unit 140 (step S206). ), One of the assignable real identifiers is secured (step S207), and the public identifier is used to encrypt the real identifier (step S208). The encrypted data providing unit 217 gives the identifier to the wireless terminal 100A (Step S209). In the assignment of this identifier, the encrypted data providing unit 217 provides the encrypted data to the wireless terminal 100B.

  The decryption unit 117 decrypts the encrypted data using the secret key paired with the public key (step S210), and stores the obtained main identifier in the storage unit 140 as its own identifier (step S211). The connection request providing unit 112 makes a connection request using the identifier thus obtained (step S212).

  The connection response providing unit 212 performs authentication when a connection request using this identifier is made (step S212) and when a connection request using something other than the temporary identifier is made (step S205), and authentication is performed (step S213). Connection is permitted to the wireless terminal 100B (step S214). Thereafter, the network service is exchanged, the service is terminated, and the identifier is released. Since these operations can be performed in the same manner as the operations in the first embodiment of the present invention, detailed description thereof is omitted. .

  The example of the operation flow of the wireless communication system 10B according to the second embodiment of the present invention has been described above.

  Subsequently, a configuration example of an identifier used by the wireless communication system 10A according to the second embodiment of the present invention will be described. FIG. 13 is a diagram illustrating a configuration example of identifiers used by the wireless communication system 10B according to the second embodiment of the present invention. As shown in FIG. 13, the identifier includes, for example, a vendor ID and a terminal ID. Here, when a MAC address is used for the temporary identifier and the main identifier, as shown in FIG. 13, an attribute bit capable of discriminating the temporary identifier and the main identifier is provided in the remaining 24-bit area, and a lower-order area is set. It may be assigned to a unique ID.

  Further, when attribute bits are used to discriminate between the temporary identifier and the real identifier, the number of attribute bits may be one bit. However, the number of attribute bits may be increased so that the wireless terminal according to the embodiment of the present invention can be distinguished from other wireless terminals by the increased number of bits. The temporary identifier may be generated by hardware or an application.

  For example, when the temporary identifier is expressed by a MAC address, the temporary identifier may be automatically generated randomly with a bit width excluding the vendor ID and the attribute bit. However, when there are a plurality of wireless terminals 100, a plurality of wireless terminals are provided. There is a possibility that the same MAC address is generated between 100B and the MAC addresses collide with each other. However, since the encryption key generated by each wireless terminal 100B is almost the same, the wireless communication device 200B encrypts this identifier with the public key received from the wireless terminal 100B and transmits the encrypted identifier. It is possible to avoid collision between each other.

  In this case, the wireless terminal 100B that has been able to decrypt the identifier received from the wireless communication device 200B may discard the temporary identifier. Then, the wireless terminal 100B that makes a connection request to the wireless communication device 200B after this wireless terminal 100B reuses the same temporary identifier until it can decipher the main identification from the wireless communication device 200B. Alternatively, the temporary identifier may be regenerated every time a connection request is made.

  As described above, according to the second embodiment of the present invention, the wireless terminal 100B generates a temporary identifier, receives the identifier by making a connection request to the wireless communication device 200B using the temporary identifier, and receives the identifier. Can be used to receive a wireless connection service. Thereby, wireless communication can be realized without disclosing an identifier unique to the wireless terminal 100B. Therefore, similarly to the second embodiment of the present invention, the service provider or system provider using the wireless communication device 200A can prove to the user that the wireless terminal 100A cannot be tracked. Yes, users can use the system with peace of mind.

  Similarly to the first embodiment of the present invention, since no telephone line is required, the wireless terminal 100B may not have a telephone function. Furthermore, unlike the first embodiment of the present invention, the short-range wireless communication function is not required, so that the range of available terminals can be expanded.

[Description of modification]
The preferred embodiments of the present invention have been described in detail above with reference to the accompanying drawings, but the present invention is not limited to such examples. It is obvious that a person having ordinary knowledge in the technical field to which the present invention pertains can come up with various changes or modifications within the scope of the technical idea described in the claims. Of course, it is understood that these also belong to the technical scope of the present invention.

  For example, the first embodiment of the present invention and the second embodiment of the present invention may be independent of each other, but one embodiment has a part or all of the functions of the other embodiment. You may do it. For example, you may comprise so that the application for producing | generating the temporary identifier which concerns on 2nd Embodiment can be installed using the short-distance wireless communication which concerns on 1st Embodiment.

  In addition, the wireless communication apparatus 200 according to the embodiment of the present invention can perform connection authentication for the wireless terminal 100 using the identifier at the time of the connection request from the wireless terminal 100. In connection authentication, the type of wireless terminal 100 that makes a connection request (for example, a wireless terminal 100 of a user who does not want to disclose an identifier unique to the terminal, or an identifier unique to the terminal is disclosed. It is also possible to specify from the identifier at the time of the connection request) the type indicating whether the wireless terminal 100 is a user who is considered to be acceptable. Further, the wireless communication apparatus 200 can determine a service provided to the wireless terminal 100 according to the type of the wireless terminal 100.

  Each block constituting the control unit is configured by, for example, a CPU (Central Processing Unit), a RAM (Random Access Memory), and the like, and a program stored in the storage unit is expanded on the RAM and executed by the CPU. The function can be realized. Or each block which comprises a control part may be comprised by the hardware for exclusive use, and may be comprised by the combination of several hardware.

  In the present specification, the steps described in the sequence diagrams and flowcharts are not necessarily processed in time series, but are performed in parallel or individually, as well as processes performed in time series in the described order. It also includes processing that is executed automatically. Further, it goes without saying that the order can be appropriately changed even in the steps processed in time series.

  In addition, regarding the second embodiment of the present invention, the claims can be described as follows.

(1)
When a temporary identifier is provided to the wireless communication device, an encrypted data acquisition unit that acquires, from the wireless communication device, encrypted data in which the identifier is encrypted with a public key;
A decryption unit for decrypting the encrypted data with a secret key to obtain the main identifier;
A request providing unit that provides a connection request to the wireless communication device using the identifier;
A wireless terminal comprising:
(2)
The encrypted data acquisition unit provides the temporary identifier to the wireless communication device by providing a connection request using the temporary identifier to the wireless communication device.
The wireless terminal according to (1).
(3)
The wireless terminal is
An encryption key generation unit for generating the public key and the secret key;
The encrypted data acquisition unit provides the wireless communication device with the public key in the connection request using the temporary identifier.
The wireless terminal according to (2).
(4)
The encrypted data acquisition unit acquires, from the wireless communication device, the encrypted data in which a MAC address is encrypted with the public key as the main identifier.
The wireless terminal according to (1).
(5)
The wireless terminal is
A service request providing unit that provides a service request to the wireless communication device when a connection response indicating permission of connection is provided in response to the connection request;
The wireless terminal according to (1).
(6)
An encryption unit that encrypts the identifier with a public key and generates encrypted data when a temporary identifier is provided from the wireless terminal;
An encrypted data providing unit for providing the encrypted data to the wireless terminal;
Providing a connection response indicating that the wireless terminal is permitted to connect when the connection request is acquired from the wireless terminal using the identifier obtained by decrypting the encrypted data with a secret key. And
A wireless communication device.
(7)
The wireless communication device
A determination unit for determining whether or not the temporary identifier is provided from the wireless terminal;
The wireless communication device according to (6).
(8)
The encryption unit encrypts a MAC address as the main identifier.
The wireless communication device according to (6).
(9)
The wireless communication apparatus further includes a MAC filter processing unit that performs authentication based on the MAC address before a connection response indicating that connection is permitted to the wireless terminal is provided by the response providing unit.
The wireless communication device according to (8).
(10)
The MAC filter processing unit determines that the connection to the wireless terminal is not permitted when the destination of the connection request is an AP server and the MAC address is not within a predetermined range.
The wireless communication device according to (9).
(11)
The wireless communication device
A service response providing unit for providing a service to the wireless terminal when a service request is provided from the wireless terminal;
The wireless communication device according to (6).

10 (10A, 10B) Wireless communication system 100 (100A, 100B) Wireless terminal 110A, 110B Control unit 111 Identifier acquisition unit 112 Connection request provision unit 113 Service request provision unit 114 Termination processing unit 115 Encryption key generation unit 116 Encrypted data acquisition Unit 117 decoding unit 120 input unit 130 reading unit 140 storage unit 150 output unit 160 communication unit 200 (200A, 200B) wireless communication device 210A, 210B control unit 211 identifier providing unit 212 connection response providing unit 213 service response providing unit 214 end processing Unit 215 determination unit 216 encryption unit 217 encrypted data providing unit 220 output unit 230 communication unit 240 storage unit 300 network 400 AP server 500 web server

Claims (8)

An identifier acquisition unit that acquires an identifier from a wireless communication device by short-range wireless communication;
A request providing unit that provides a connection request to the wireless communication device using the identifier acquired by the identifier acquiring unit;
A wireless terminal comprising: The identifier acquisition unit acquires a MAC address as the identifier from the wireless communication device;
The wireless terminal according to claim 1. The wireless terminal is
A service request providing unit that provides a service request to the wireless communication device when a connection response indicating permission of connection is provided in response to the connection request;
The wireless terminal according to claim 1. An identifier providing unit that provides an identifier to a wireless terminal by short-range wireless communication;
When a connection request using the identifier is provided from the wireless terminal, a connection response providing unit that provides a connection response indicating permission to connect to the wireless terminal;
A wireless communication device. The identifier providing unit provides the wireless terminal with a MAC address as the identifier;
The wireless communication apparatus according to claim 4. The wireless communication apparatus further includes a MAC filter processing unit that performs authentication based on the MAC address before a connection response indicating that connection is permitted to the wireless terminal is provided by the connection response providing unit. ,
The wireless communication apparatus according to claim 5. The MAC filter processing unit determines that the connection to the wireless terminal is not permitted when the destination of the connection request is an AP server and the MAC address is not within a predetermined range.
The wireless communication apparatus according to claim 6. The wireless communication device
A service response providing unit for providing a service to the wireless terminal when a service request is provided from the wireless terminal;
The wireless communication apparatus according to claim 4.

Images