JP2014233014A - Computer program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a technique in which a possibility of connection to an unauthorized AP can be reduced.SOLUTION: A computer program allows a mobile terminal to achieve a function to acquire a list of an access point selected in accordance with a predetermined standard, and a function to determine whether or not connection to a found access point can be made by comparing the access point which is found from a search result of a connectable access point with an acquired list.

Description

  The present invention relates to a computer program executed by a mobile terminal.

  Non-Patent Document 1 discloses that a smartphone detects an access point of a public wireless LAN service (Wi-Fi spot) and automatically connects to the access point while going out. Although this document mainly deals with communication speed, the present inventor is rather concerned about automatically connecting to a malicious Wi-Fi spot (for example, see Non-Patent Document 2).

  Regarding malicious Wi-Fi spots, for example, Patent Document 1 describes the following invention. In a wireless LAN system, an authorized (managed) wireless LAN client executes a scanning process to extract a wireless LAN identifier (SSID: Service Set ID) from a packet of a surrounding access point (hereinafter referred to as AP). , An AP detection list composed of SSIDs is created. Next, when there is an unregistered SSID compared with the AP permission list registered in advance, it is determined that there is an unauthorized AP, and the position where the unauthorized AP exists is determined from the signal strength, and the unauthorized It becomes possible to remove a new AP. Further, when an unauthorized AP is detected, the router is operated to prohibit data transmission / reception with the unauthorized AP.

JP 2003-198571 A

10th Wi-Fi spot truncation setting method for iPhone users (1/2), [online], Internet <URL: http://www.atmarkit.co.jp/ait/articles/1206/21/news115 .html> Free Wi-Fi spots are dangerous!?, [Online], Internet <URL: http://blog.eset-smart-security.jp/2012/08/eset-magazine-120824.html>

  The solution described in Patent Document 1 provides a mechanism for the Wi-Fi service provider to actively discover and eliminate unauthorized APs. However, Patent Document 1 does not propose a measure for a Wi-Fi service user to avoid access to an unauthorized AP.

  The present invention has been made in view of these problems, and an object thereof is to provide a technique capable of reducing the possibility of connection to an unauthorized AP.

  One embodiment of the present invention relates to a computer program. This computer program compares the function of acquiring a list of selected access points according to a predetermined criterion with the acquired list of access points discovered as a result of searching for connectable access points. The mobile terminal is made to realize a function of determining whether or not to connect to the discovered access point.

  It should be noted that any combination of the above-described constituent elements, or the constituent elements and expressions of the present invention replaced with each other among methods, systems, computer programs, recording media storing computer programs, etc. are also aspects of the present invention. It is effective as

It is a flowchart which shows an example of a series of processes in the portable terminal which performs the program for wireless LAN connection control which concerns on 1st Embodiment. It is a flowchart which shows an example of a series of processes in the portable terminal which performs the program for wireless LAN connection control which concerns on 2nd Embodiment. It is a flowchart which shows an example of a series of processes in the portable terminal which performs the program for wireless LAN connection control which concerns on 3rd Embodiment. It is a representative screen figure of a 1st error notification screen. It is a representative screen figure of a 2nd error notification screen. It is a flowchart which shows an example of a series of processes in the portable terminal which performs the program for wireless LAN connection control which concerns on 4th Embodiment. It is a typical screen figure of the warning screen displayed on the display of a portable terminal, when it determines with it being in the cell of unauthorized AP.

  Hereinafter, the same or equivalent components, members, and processes shown in the drawings are denoted by the same reference numerals, and repeated description is appropriately omitted.

  The computer program according to the embodiment is a wireless LAN connection control program preinstalled in a mobile terminal such as a smartphone. The portable terminal implements the following various functions by executing the wireless LAN connection control program. The portable terminal has a touch panel, a telephone call function, and a web communication function, and may have a web browser. A multitasking operating system such as iPhone (registered trademark) OS4 has been introduced to mobile phones.

  A computer program according to another embodiment is a computer program that is downloaded from a server via a network such as the Internet to a mobile terminal, that is, a mobile phone, and executed by the mobile phone.

  Further, the computer program according to another embodiment may be a smart phone application program downloaded from a smart phone application download site on the Internet, or may be a network from a server to a web browser of a mobile terminal. It may be a computer program written in a programming language such as HTML (HyperText Markup Language) that is transmitted via the web browser and executed by the web browser.

  FIG. 1 is a flowchart illustrating an example of a series of processes in a portable terminal that executes a wireless LAN connection control program according to the first embodiment. The mobile terminal receives an AP white list from a reliable source (for example, a Wi-Fi service provider or an AP authentication organization) via a network in a wired or wireless network connection environment (S202). If the mobile terminal already has a white list, it is updated with the received one. The white list associates and holds the ID (for example, BSSID) of the trusted AP selected by the trusted source on its own criteria and the location information of the AP.

  The portable terminal measures the current position using positioning means such as GPS (S204). The mobile terminal narrows down or filters the white list based on the acquired current position (S206). That is, before the AP scan, the mobile terminal extracts APs that are within a predetermined position range based on the measured current position of the mobile terminal from the APs registered in the white list and extracted. An extraction list including information about the APs is generated.

  When the mobile terminal receives a connection request to the network from another program, that is, an application, a browser, or the like when the network is not connected, the mobile terminal searches (scans) for a connectable AP (S208). The portable terminal determines whether or not it is possible to connect to the discovered connectable AP by comparing the connectable AP discovered as a result of the search and the extraction list (S210). That is, the portable terminal determines whether or not the ID of the discovered connectable AP is registered in the extraction list, and if it is registered (Y in S210), performs automatic connection processing to the connectable AP. (S212). If it is not registered (N in S210), the mobile terminal does not attempt to connect to the connectable AP and waits for a certain period and searches for a connectable AP again (S214). Thereafter, the process returns to step S210.

  Note that the same processing is executed when a black list is provided in which an unreliable AP and the position of the AP are held in association with each other instead of or in addition to the white list.

  According to the wireless LAN connection control program according to the present embodiment, when a whitelist is used, since it is not connected to an AP other than the AP registered in the list, the user side (terminal side) is changed to an unauthorized AP. Connection can be suppressed or eliminated. Further, when using the black list, since it is not connected to the AP registered in the list, it is possible to suppress or eliminate connection to an unauthorized AP on the user side (terminal side).

  Especially when the automatic connection setting is ON, it is possible to avoid connecting to an unauthorized AP without knowing it.

  Further, in the wireless LAN connection control program according to the present embodiment, when the data amount of the white list / black list is large or when the comparison processing with the list is heavy, by filtering the list at the current position, Reduces throughput and speeds up response.

  FIG. 2 is a flowchart illustrating an example of a series of processes in the mobile terminal that executes the wireless LAN connection control program according to the second embodiment. The mobile terminal receives the white list of the AP from the reliable source in advance under the network connection environment via the network (S302). The mobile terminal receives a network connection request from an application, a browser, or the like when the network is not connected (S304). Upon receiving such a request, the portable terminal measures the current position using GPS (S306). The portable terminal searches for a connectable AP (S308).

  The portable terminal compares the set of the connectable AP ID found as a result of the search and the current position with the set of the ID and position of the AP registered in the white list (S310). When the pair of the connectable AP ID and the current position discovered as a result of the search corresponds to the pair of the AP ID and the position registered in the white list (Y in S310), the portable terminal An automatic connection process to a possible AP is executed (S312). When the set of the ID of the connectable AP discovered as a result of the search and the current position does not correspond to any set registered in the white list (N in S310), the mobile terminal is connected to the connectable AP. Waits for a certain period without trying and performs GPS positioning and AP search again (S314). Thereafter, the process returns to step S310.

The combination of the ID of the connectable AP and the current position corresponds to the pair of the ID and the position of the AP registered in the white list means that the ID of the connectable AP and the ID of the reliable AP match. Further, the position of the connectable AP may be within a predetermined position range based on the position of the reliable AP.
Note that the same processing is executed when a black list is provided in which an unreliable AP and the position of the AP are held in association with each other instead of or in addition to the white list.

  According to the wireless LAN connection control program according to the present embodiment, the same operational effects as the operational effects exhibited by the wireless LAN connection control program according to the first embodiment are exhibited. In addition, in the wireless LAN connection control program according to the present embodiment, whether or not both the ID and position of the connectable AP are registered in the white list is a condition for starting the automatic connection process. The possibility of connection to an unauthorized AP can be further reduced compared to the case where only the ID is a condition. For example, even if a malicious third party who obtains a BSSID list of legitimate APs installs an unauthorized AP pretending to be a legitimate AP using an arbitrary BSSID in the list, in the present invention, due to location mismatch, Connection to such an unauthorized AP is prevented.

  In the first and second embodiments, the case where the automatic connection setting of the mobile terminal is ON has been described, but the present invention is not limited to this. For example, in the case of manual connection, the comparison result between the connectable AP and the list may be notified to the user to inquire whether to connect. For example, “AP that is registered in the white list. Do you want to connect?” Or “AP that is not registered in the white list. Do you want to connect?” Or “AP that is registered in the black list. A message such as “Connection is not recommended.” May be displayed on the display of the mobile terminal.

  FIG. 3 is a flowchart illustrating an example of a series of processes in the mobile terminal that executes the wireless LAN connection control program according to the third embodiment. The portable terminal receives the white list of the AP from the source that can be trusted in advance under the network connection environment via the network (S402). If the mobile terminal already has a white list, it is updated with the received one. The white list holds the ID of the regular AP and the position and size of the cell of the regular AP in association with each other. When the user goes out with the portable terminal, the connection with the authorized AP is disconnected (S404).

  The portable terminal periodically measures the current position using GPS (S406). The mobile terminal refers to the white list and determines whether or not the measured current position is within the cell of the regular AP (S408). If it is determined that the cell is not in any cell of any regular AP registered in the white list (N in S408), the mobile terminal waits for a predetermined period and performs position measurement again (S410). When it is determined that the cell is in a cell of a regular AP registered in the white list (Y in S408), the mobile terminal starts searching for a connectable AP (S412). If at least one connectable AP obtained as a result of the search includes a regular AP registered in the white list (Y in S414), the portable terminal starts an automatic connection process to the regular AP ( S416). That is, when at least one connectable AP obtained as a result of the search includes a regular AP registered in the white list, the mobile terminal preferentially selects the regular AP as a connection destination.

  If at least one connectable AP obtained as a result of the search does not include a regular AP registered in the white list (N in S414), the mobile terminal waits for a predetermined period without executing the connection process. Then, position measurement is executed again (S410).

  In the example shown in FIG. 3, the position is periodically measured, and AP search and automatic connection processing are executed when the current position enters the cell. In addition, it is conceivable to receive a connection request to the AP at an arbitrary timing from an application, a browser, or the like. When the mobile terminal accepts such a connection request, the mobile terminal measures the current position using GPS, and then executes the process in the same flow as described above.

  According to the wireless LAN connection control program according to the present embodiment, since the AP search is started when the current position of the mobile terminal enters the cell of the normal AP, the normal AP can be more reliably captured in the search. The connection to the regular AP can be made more reliable. Thereby, the connection to an unauthorized AP can be suppressed or eliminated on the user side (terminal side).

  In addition, in the wireless LAN connection control program according to the present embodiment, if the current position of the mobile terminal is not within the cell of the regular AP, the AP search is not executed even if there is a connection request from an application or a browser. Therefore, the risk of connecting to an unauthorized AP outside the cell of the regular AP can be reduced or eliminated.

  In addition, in the wireless LAN connection control program according to the present embodiment, if an authorized AP is not detected as a result of AP search, automatic connection processing is not executed even if there is a connection request from an application or browser. Therefore, the risk of connecting to an unauthorized AP in the vicinity of the cell of the regular AP can be reduced or eliminated.

  Further, in the wireless LAN connection control program according to the present embodiment, it is possible to avoid connecting to an unauthorized AP without knowing when the automatic connection setting is ON.

  In the wireless LAN connection control program according to the present embodiment, since it is determined whether to connect to a connectable AP using both the ID and location information of the regular AP registered in the white list, The possibility of connecting to an unauthorized AP can be further reduced. For example, even if a malicious third party who obtains a BSSID list of legitimate APs installs an unauthorized AP pretending to be a legitimate AP using an arbitrary BSSID in the list, in the present invention, due to location mismatch, Connection to such an unauthorized AP is prevented.

  Corresponding to “NO” in the flow of FIG. 3 “Does the connectable AP obtained as a result of the scan include a regular AP?” (S414) (that is, the legitimate AP should be detected but could not be detected). And a portable terminal may notify a user of an error by displaying the 1st error notification screen 10 on a display.

  FIG. 4 is a representative screen diagram of the first error notification screen 10. When “Yes” is tapped on the first error notification screen 10, the mobile terminal starts connection processing to the non-regular AP (AP not registered in the white list) displayed on the first error notification screen 10. To do. When “No” is tapped, the mobile terminal waits for a predetermined period and then performs position measurement again. Normally, the user is expected to tap “No” and wait until a regular AP appears. However, “Yes” may be selected when an urgent connection is desired.

  Corresponding to “NO” in the flow of FIG. 3 “is the current position within the cell of the regular AP?” (S408) (that is, when the mobile terminal is not within the cell of the regular AP), the mobile terminal displays a second error on the display. An error may be notified to the user by displaying the notification screen 20.

  FIG. 5 is a representative screen diagram of the second error notification screen 20. The second error notification screen 20 displays a map around the current position, and displays the position of the regular AP in the map (this position is extracted from the white list) with a marker or the like. In this case, the user can know that there is no regular AP around him and the position of a nearby regular AP. Therefore, it is possible to prompt the user to connect with a regular AP.

  FIG. 6 is a flowchart illustrating an example of a series of processes in the mobile terminal that executes the wireless LAN connection control program according to the fourth embodiment. The portable terminal receives the AP blacklist from a reliable source in advance under the network connection environment via the network (S502). If the mobile terminal already has a black list, it is updated with the received one. The black list holds an ID of an unreliable AP, particularly an unauthorized AP, and a cell position and size of the unauthorized AP in association with each other. When the user goes out with the portable terminal, the connection with the authorized AP is disconnected (S504).

  The mobile terminal accepts a network connection request from an application, a browser, or the like at an arbitrary timing (S506). When the portable terminal accepts the connection request, it measures the current position using GPS (S508). The mobile terminal refers to the black list and determines whether or not the measured current position is within the cell of the unauthorized AP (S510). If it is determined that it is not in the cell of any unauthorized AP registered in the black list (N in S510), the mobile terminal searches for a connectable AP (S512), and automatically detects the detected AP. Connection processing is started (S514). When it is determined that the mobile terminal is in the cell of a certain unauthorized AP registered in the black list (Y in S510), the AP search is prohibited, an error is notified to the user, and the connection request is discarded ( S516).

  FIG. 7 is a representative screen diagram of the warning screen 30 displayed on the display of the mobile terminal when it is determined that the mobile phone is within the cell of the unauthorized AP.

  According to the wireless LAN connection control program according to the present embodiment, since the AP search is not executed as long as the current position of the mobile terminal is within the cell of the unauthorized AP, the connection to the unauthorized AP is suppressed on the user side (terminal side). Or it can be eliminated.

  The computer program according to the embodiment has been described above. These embodiments are exemplifications, and it is understood by those skilled in the art that various modifications can be made to combinations of the respective constituent elements and processes, and such modifications are also within the scope of the present invention. is there.

Claims (10)

A function for obtaining a list of access points selected according to predetermined criteria;
The mobile terminal realizes a function of determining whether or not to connect to the discovered access point by comparing the access point discovered as a result of searching for a connectable access point and the acquired list. A computer program characterized by the above.   The computer program according to claim 1, further causing the portable terminal to realize a function of updating the list via a network. The list holds an ID for identifying an access point in association with the position of the access point,
The determination function compares a set of an ID for identifying a discovered access point with a current position acquired by a predetermined positioning means, and a set of an ID and a position of an access point held in the list. The computer program according to claim 1, comprising a function. The list holds an ID for identifying an access point in association with the position of the access point,
The computer program further includes
The mobile terminal realizes the function of filtering the acquired list based on the current position acquired by a predetermined positioning means,
4. The function according to claim 1, wherein the determining function includes a function of comparing an access point discovered as a result of a search for connectable access points with a filtered list. 5. Computer program. A function for acquiring a white list that holds a trusted access point and the location of the access point in association with each other;
A function of referring to the acquired white list and determining whether or not the current position acquired by a predetermined positioning means is within a predetermined position range based on the position of a reliable access point;
A computer program for causing a portable terminal to realize a function of starting a search for an access point when it is determined to be within a position range.   When a plurality of access points including a reliable access point are found as a result of searching for an access point, the portable terminal is further realized with a function of preferentially selecting a reliable access point as a connection destination. Item 6. The computer program according to Item 5.   If at least one access point is found as a result of the search for an access point but no reliable access point is included, the positioning process by the positioning means is started again without executing the connection process, or an error occurs. The computer program according to claim 5, further comprising realizing a function of notifying a user of a mobile terminal. The determination function includes a function of performing a determination process in response to a connection request to the network from another computer program being executed on the mobile terminal,
The computer program further causes the portable terminal to realize a function of notifying a user of an error without executing a connection process when it is determined that the current position is not included in any position range. The computer program according to any one of 5 to 7.   9. The computer program according to claim 8, further causing the portable terminal to realize a function of notifying a position of a reliable access point in the vicinity of the current position in accordance with an error notification. A function for acquiring a blacklist that holds an untrusted access point and the position of the access point in association with each other;
A function of referring to the acquired blacklist and determining whether or not the current position acquired by a predetermined positioning means is within a predetermined position range based on the position of an unreliable access point;
A computer program for causing a mobile terminal to realize a function of limiting search for an access point when it is determined to be within a position range.

Images