JP2015080098A - Relay device, communication system, communication method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a relay device for enabling even a communication terminal whose identification information has not been registered in a database to perform radio connection to an own device until predetermined conditions are satisfied, and for, when a predetermined instruction is made before the predetermined conditions are satisfied, registering the identification information of the communication terminal in the database.SOLUTION: A reception section of a relay device is configured to receive a connection request from a communication terminal. A connection establishment section is configured to, when the MAC address of the communication terminal received by the reception section is not registered in a MAC address DB, permit radio connection between the communication terminal and the relay device until a predetermined time passes. A connection management section is configured to, when an instruction to register the MAC address of the communication terminal in the MAC address DB is made before the predetermined time passes, register the MAC address in the MAC address DB. Also, the connection management section is configured to, when the instruction is not made before the predetermined time passes, disconnect the radio connection between the communication terminal and the relay device.

Description

  The present invention relates to a relay device.

  In recent years, a technique for connecting to the Internet via a wireless network such as a wireless local area network (LAN) has become widespread. For example, Patent Literature 1 discloses a wireless router that connects a mobile terminal to the Internet via a wireless network.

JP 2013-106332 A

  As a technique for restricting connection to a wireless LAN router, MAC (Media Access Control) address filtering is known. According to this MAC address filtering, the wireless LAN router can reject a connection from a communication terminal whose MAC address is not registered in its own device. However, when MAC address filtering is used, communication terminals whose MAC addresses are not registered in the wireless LAN router are uniformly refused to connect to the wireless LAN router.

  On the other hand, the present invention enables wireless connection with the own device until the predetermined condition is satisfied even if the identification information is not registered in the database, and the predetermined condition is satisfied. It is an object of the present invention to provide a relay device that registers the identification information of the communication terminal in a database when a predetermined instruction is given until the communication is performed.

  In order to solve the above-mentioned problem, the present invention relates to a communication device whose identification information is registered in a database, and is a relay device that permanently permits wireless connection with its own device. A receiving unit that receives a connection request including identification information of the first communication terminal from the first communication terminal, and when the identification information of the first communication terminal received by the receiving unit is not registered in the database, Connection establishment that permits wireless connection between one communication terminal and its own device until a predetermined time elapses or until a predetermined amount of data is transmitted and received between the first communication terminal and its own device When an instruction for registering the identification information of the first communication terminal in the database is issued until the predetermined time elapses or until the predetermined amount of data is transmitted / received , The first communication While the terminal identification information is registered in the database, the first communication terminal identification information is registered in the database until the predetermined time elapses or until the predetermined amount of data is transmitted and received. If no instruction is issued, a relay device is provided that includes a connection management unit that disconnects the wireless connection between the first communication terminal and the device itself.

  In a preferred aspect, the relay device performs second communication different from the first communication terminal when the identification information of the first communication terminal received by the receiving unit is not registered in the database. The terminal may further include a transmission unit that transmits a message prompting an instruction to register the identification information of the first communication terminal in the database.

  In a further preferred aspect, the connection management unit instructs the second communication terminal to register the identification information of the first communication terminal in the database in response to the message transmitted by the transmission unit. When the message to be returned is returned, the identification information of the first communication terminal may be registered in the database.

  In another preferable aspect, the predetermined time or the predetermined amount may be set based on a position of the relay device, a current date and time, or a connection history of the relay device.

  In another preferred embodiment, the communication device to which the first communication terminal can be connected via the relay device may be limited based on the position of the relay device, the current date and time, or the connection history of the relay device. Good.

  In another preferable aspect, the second communication terminal to which the message is transmitted by the transmission unit may be specified based on a position of the relay device or a current date and time.

  Moreover, this invention is a communication system which has a 1st communication terminal and a relay apparatus, Comprising: The said 1st communication terminal transmits the connection request containing the identification information of the said 1st communication terminal to the said relay apparatus. The relay device is a relay device that permanently permits wireless connection with its own device for the communication terminal whose identification information is registered in the database, wherein the relay device is the first communication terminal. A receiving unit that receives the connection request transmitted from the transmitting unit, and the first communication when the identification information of the first communication terminal received by the receiving unit is not registered in the database. A connection establishment unit that permits wireless connection between the terminal and the own device until a predetermined time elapses or until a predetermined amount of data is transmitted and received between the first communication terminal and the own device; The predetermined time elapses Or when the instruction for registering the identification information of the first communication terminal in the database is given before the predetermined amount of data is transmitted and received, the identification of the first communication terminal An instruction for registering identification information of the first communication terminal in the database until the predetermined time elapses or until the predetermined amount of data is transmitted / received while registering information in the database When the communication is not performed, a communication system is provided that includes a connection management unit that disconnects a wireless connection between the first communication terminal and the device itself.

The present invention also relates to a communication method executed by a relay device that permanently permits wireless connection with its own device for a communication terminal whose identification information is registered in a database, wherein the first communication terminal Receiving the connection request including the identification information of the first communication terminal from the first communication terminal, and the first communication terminal when the received identification information of the first communication terminal is not registered in the database. A wireless connection between the first communication terminal and the own apparatus until a predetermined time elapses or a predetermined amount of data is transmitted and received between the first communication terminal and the own apparatus; and the predetermined time If an instruction for registering the identification information of the first communication terminal in the database is issued until the predetermined amount of data is transmitted or received until the predetermined amount of data is transmitted / received, the first communication Terminal And registering the another information in the database,
If the instruction for registering the identification information of the first communication terminal in the database is not performed until the predetermined time has elapsed or the predetermined amount of data has been transmitted and received, A communication method comprising: disconnecting a wireless connection between the first communication terminal and the device itself.

  Further, according to the present invention, for a communication terminal whose identification information is registered in the database, the first communication terminal identifies the first communication terminal from a first communication terminal to a computer that permanently permits wireless connection with the own device. A step of receiving a connection request including information, and a wireless connection between the first communication terminal and the own device when the received identification information of the first communication terminal is not registered in the database. For a predetermined period of time or until a predetermined amount of data is transmitted and received between the first communication terminal and the own device, and until the predetermined time has elapsed, or If an instruction for registering the identification information of the first communication terminal in the database is given before the quantitative data is transmitted / received, the identification information of the first communication terminal is registered in the database. And when the instruction for registering the identification information of the first communication terminal in the database is not performed until the predetermined time elapses or until the predetermined amount of data is transmitted and received. Provides a program for executing the step of disconnecting the wireless connection between the first communication terminal and the own device.

  According to the present invention, even if a communication terminal whose identification information is not registered in the database, wireless connection with the own device is possible until the predetermined condition is satisfied, and the predetermined condition is satisfied. When a predetermined instruction is issued in the meantime, a relay device is provided that registers the identification information of the communication terminal in the database.

1 is a diagram illustrating a configuration of a communication system 1. FIG. 3 is a block diagram illustrating a hardware configuration of the relay device 10. FIG. It is a figure which shows an example of a data structure of MAC address DB121. It is a figure which shows an example of a data structure of the temporary permission list | wrist 122. It is a figure which shows the structure of the function implement | achieved by CPU11. 2 is a block diagram showing a hardware configuration of a communication terminal 20. FIG. It is a flowchart which shows a communication control process.

1. Embodiment 1-1. Configuration 1-1-1. Communication system 1
FIG. 1 is a diagram illustrating a configuration of a communication system 1 according to the present embodiment. The communication system 1 is a system for connecting the communication terminal 20 to the Internet 40 via the relay device 10. As shown in FIG. 1, the communication system 1 includes a relay device 10, communication terminals 20 </ b> A and 20 </ b> B (hereinafter simply referred to as “communication terminal 20” unless otherwise required), a wireless LAN 30, It is comprised with the internet 40. Although only two communication terminals 20 are shown in FIG. 1, three or more communication terminals 20 may be included in the communication system 1.

1-1-2. Relay device 10
The relay device 10 is a communication device that relays data between the wireless LAN 30 and the Internet 40. Specifically, it is a wireless LAN router. The relay device 10 may be a portable type or a stationary type. FIG. 2 is a block diagram illustrating a hardware configuration of the relay apparatus 10. As shown in FIG. 2, the relay device 10 includes a CPU (Central Processing Unit) 11, a memory 12, a touch panel 13, a LAN side I / F (Interface) 14, and a WAN (Wide Area Network) side I / O. F15.

  The CPU 11 controls each component of the relay device 10 by executing a program stored in the memory 12. The memory 12 is a flash memory, for example, and stores a program executed by the CPU 11. Further, the memory 12 stores an SSID (Service Set Identifier) and a password that are used in an authentication process described later. The SSID is identification information of the relay device 10 (or the wireless LAN 30 provided by the relay device 10). In addition, the memory 12 stores a mail address used in a communication control process to be described later. The mail address stored here is, for example, the mail address of the communication terminal 20 used by the user of the relay device 10. The memory 12 stores a MAC address DB (Database) 121 and a temporary permission list 122.

  The touch panel 13 includes a liquid crystal display and a touch pad arranged on the liquid crystal display, displays a screen, and accepts an input operation from a user. The LAN side I / F 14 performs wireless communication with the communication terminal 20 via the wireless LAN 30. In wireless communication on the wireless LAN 30, an encryption technique such as WEP (Wired Equivalent Privacy) or WPA (Wi-Fi (registered trademark) Protected Access) 2 may be used. The WAN-side I / F 15 connects to the Internet 40 by wire or wireless. For example, the WAN-side I / F 15 connects to the Internet 40 via a mobile phone mobile communication network.

  FIG. 3 is a diagram illustrating an example of the data configuration of the MAC address DB 121. The MAC address DB 121 is a database for registering the MAC address of the communication terminal 20 that is permanently permitted for wireless connection with the relay device 10. Here, the MAC address is a physical address assigned to the communication terminal 20 and is an example of “identification information” according to the present invention.

  As shown in FIG. 3, each record constituting the MAC address DB 121 is composed of two fields of “MAC address” and “device name”. Here, the device name is the name of the communication terminal 20 (specifically, the model name). The device name may be specified based on the MAC address and automatically registered in the MAC address DB 121, or may be one selected by the user from a plurality of names specified based on the MAC address. The name may be registered in the MAC address DB 121. The “device name” field may be omitted in the MAC address DB 121. The MAC address DB 121 is an example of a “database” according to the present invention.

  FIG. 4 is a diagram illustrating an example of a data configuration of the temporary permission list 122. The temporary permission list 122 is a list of MAC addresses of the communication terminals 20 that are temporarily permitted to wirelessly connect to the relay device 10. When a MAC address is registered in the temporary permission list 122, a timer starts from the time of the registration, and the registered MAC address is deleted from the temporary permission list 122 when a predetermined time (for example, 30 minutes) elapses. The While the MAC address is registered in the temporary permission list 122, the communication terminal 20 is permitted to wirelessly connect to the relay device 10 even if the MAC address is not registered in the MAC address DB 121.

  FIG. 5 is a diagram illustrating a configuration of functions realized by the CPU 11. When a predetermined program stored in the memory 12 is executed by the CPU 11, the functions of the reception unit 111, the connection establishment unit 112, the transmission unit 113, and the connection management unit 114 are realized as shown in FIG. . These functions particularly relate to a communication control process to be described later.

  The receiving unit 111 receives a connection request from the communication terminal 20A via the LAN side I / F 14. This connection request includes the MAC address of the communication terminal 20A.

  When the MAC address of the communication terminal 20A received by the reception unit 111 is not registered in the MAC address DB 121, the connection establishment unit 112 establishes a wireless connection between the communication terminal 20A and the relay device 10 for a predetermined time. Allow until. Specifically, the connection establishment unit 112 registers the MAC address of the communication terminal 20 </ b> A in the temporary permission list 122.

  When the MAC address of the communication terminal 20A received by the reception unit 111 is not registered in the MAC address DB 121, the transmission unit 113 registers the MAC address of the communication terminal 20A in the MAC address DB 121 in the communication terminal 20B. Send a message prompting instructions. Here, the message is e-mail or short mail, for example. The instruction for registering the MAC address of the communication terminal 20A in the MAC address DB 121 may be performed by the following operation, for example.

(1) Reply to the message.
(2) Operation for the relay device 10. Specifically, a predetermined button displayed on the touch panel 13 of the relay device 10 is pressed.
(3) Operation for the communication terminal 20A. Specifically, an operation of inputting the one-time password included in the message using the touch panel 23 of the communication terminal 20 </ b> A and transmitting the one-time password to the relay device 10. In this case, the one-time password is generated by the relay device 10 and included in the message.
(4) Operation for a communication terminal different from the communication terminal 20A and the communication terminal 20B. Specifically, pressing a predetermined button displayed on the browser of the different communication terminal.
The above operations are generally referred to as “additional authentication operations” below.

  The connection management unit 114 registers the MAC address in the MAC address DB 121 when an instruction for registering the MAC address of the communication terminal 20 </ b> A in the MAC address DB 121 is given before the predetermined time elapses.

  If the instruction for registering the MAC address of the communication terminal 20A in the MAC address DB 121 is not given before the predetermined time elapses, the connection management unit 114 establishes a connection between the communication terminal 20A and the relay device 10. Disconnect the wireless connection between. In other words, the connection management unit 114 deletes the MAC address of the communication terminal 20A from the temporary permission list 122.

  Further, the connection management unit 114 responds to the message transmitted by the transmission unit 113 when a message instructing to register the MAC address of the communication terminal 20A in the MAC address DB 121 is returned from the communication terminal 20B. The MAC address of the communication terminal 20A is registered in the MAC address DB 121.

1-1-3. Communication terminal 20
The communication terminal 20 is a portable computer that is connected to the Internet 40 via the relay device 10. Specifically, it is a tablet terminal, a laptop PC (Personal Computer), or a smartphone. Further, it may be a mobile phone or a PDA (Personal Digital Assistant). FIG. 6 is a block diagram illustrating a hardware configuration of the communication terminal 20. As illustrated in FIG. 6, the communication terminal 20 includes a CPU 21, a memory 22, a touch panel 23, and a communication I / F 24.

  The CPU 21 controls each component of the communication terminal 20 by executing a program stored in the memory 22. The memory 22 is, for example, a flash memory or an HDD (Hard Disk Drive), and stores a program executed by the CPU 21. The memory 22 stores the MAC address of the communication terminal 20. The touch panel 23 includes a liquid crystal display and a touch pad arranged on the liquid crystal display, displays a screen, and accepts an input operation from a user. The communication I / F 24 performs wireless communication with the relay device 10 via the wireless LAN 30.

1-2. Operation Next, the operation of the communication system 1 according to the present embodiment will be described. Specifically, a communication control process executed by the relay device 10 will be described. In the following description, it is assumed that the MAC address of the communication terminal 20B is registered in the MAC address DB 121, and the mail address of the communication terminal 20B is stored in the memory 12 of the relay device 10.

  FIG. 7 is a flowchart showing a communication control process executed by the relay device 10. In this communication control process, when the CPU 11 of the relay device 10 receives a connection request from the communication terminal 20A (step S1), it executes an authentication process (step S2). This connection request includes the SSID and password input at the communication terminal 20A, and the MAC address of the communication terminal 20A. The CPU 11 sets the SSID and password, and the SSID stored in the memory 12. It is determined whether or not the password pair matches.

  As a result of this determination, if the SSID and password pairs do not match (that is, if the authentication process has failed) (step S2; NO), the CPU 11 ends the communication control process. On the other hand, when the set of SSID and password match (that is, when the authentication process is successful) (step S2; YES), the CPU 11 establishes a wireless connection between the communication terminal 20A and the relay device 10. Is established (step S3). When the authentication process is successful, the combination of the SSID and password used in the authentication process is stored in the memory 12 of the communication terminal 20A as correct authentication information.

  Next, the CPU 11 determines whether or not the MAC address of the communication terminal 20A is registered in the MAC address DB 121 (step S4). As a result of this determination, if the MAC address of the communication terminal 20A is registered in the MAC address DB 121 (step S4; YES), the CPU 11 permanently establishes a wireless connection between the communication terminal 20A and the relay device 10. Allow (step S5). On the other hand, as a result of this determination, when the MAC address of the communication terminal 20A is not registered in the MAC address DB 121 (step S4; NO), the CPU 11 uses the mail address stored in the memory 12 to communicate with the communication terminal 20B. A mail is transmitted to (step S6). Specifically, the CPU 11 sends an inquiry to the communication terminal 20B as to whether the wireless connection between the communication terminal 20A and the relay device 10 should be permanently permitted, temporarily permitted, or rejected. Send.

  CPU11 waits until the reply with respect to the transmitted mail arrives (step S7), and if the reply is received (step S7; YES), it analyzes the content of the received reply (step S8). As a result of this analysis, when the content of the reply indicates that the wireless connection between the communication terminal 20A and the relay device 10 is permanently permitted (step S8; permanent permission), the CPU 11 Then, the MAC address of the communication terminal 20A is registered in the MAC address DB 121, and the wireless connection between the communication terminal 20A and the relay device 10 is permanently permitted (step S9). Note that after this processing, the communication terminal 20B may be notified that the MAC address of the communication terminal 20A has been registered.

  As a result of the above analysis, when the content of the reply indicates that the wireless connection between the communication terminal 20A and the relay device 10 is temporarily permitted (step S8; temporary permission), the CPU 11 Then, the MAC address of the communication terminal 20A is registered in the temporary permission list 122, and the wireless connection between the communication terminal 20A and the relay device 10 is temporarily permitted (step S10). Further, the CPU 11 activates a timer to measure a predetermined time (step S11).

  As a result of the above analysis, when the content of the reply indicates that the wireless connection between the communication terminal 20A and the relay device 10 is rejected (step S8; rejection), the CPU 11 determines that the communication terminal 20A And the relay device 10 are disconnected (step S12). Then, the CPU 11 ends this communication control process.

  When the timer is activated in step S11, the CPU 11 determines whether or not an additional authentication operation has been performed (step S13). As a result of this determination, for example, when an operation of pressing a predetermined button displayed on the touch panel 13 of the relay device 10 is performed (that is, when an additional authentication operation is performed) (step S13). YES), the CPU 11 registers the MAC address of the communication terminal 20A in the MAC address DB 121, and permanently permits the wireless connection between the communication terminal 20A and the relay device 10 (step S14).

On the other hand, if the result of this determination is that an additional authentication operation has not been performed (step S13; NO), the CPU 11 determines whether or not a predetermined time set in the timer has elapsed (step S15). As a result of this determination, when the predetermined time has not elapsed (step S15; NO), the CPU 11 executes the process of step S13 again. On the other hand, when the predetermined time has elapsed (step S15; YES), the CPU 11 deletes the MAC address of the communication terminal 20A from the temporary permission list 122, and wirelessly communicates between the communication terminal 20A and the relay device 10. The connection is disconnected (step S16). Then, the CPU 11 ends this communication control process.
The above is the description of the communication control process.

  According to the communication system 1 according to the present embodiment described above, a wireless connection with the relay device 10 is established for a predetermined time even for the communication terminal 20 whose MAC address is not registered in the MAC address DB 121. Can be allowed. Therefore, convenience on the user side of the communication terminal 20 can be improved. Further, since it is possible to instruct the registration of the MAC address by a simple operation such as replying to an e-mail or pressing a button displayed on the touch panel 13 of the relay apparatus 10, the MAC address registration process for the relay apparatus 10 is facilitated.

  In addition, the connection with the communication terminal 20 whose MAC address is not registered in the MAC address DB 121 is notified to the notification destination registered in the relay device 10, and whether or not the connection should be continued by the notification destination. Therefore, security is improved. Further, even if the communication terminal 20 does not have the MAC address registered in the MAC address DB 121, if the authentication process is successful, the pair of the SSID and password used in the authentication process is stored as correct authentication information. 12 is stored. Therefore, even if the SSID / password pair is correct, the authentication process fails because the MAC address is not registered, and the SSID / password pair is not stored in the memory 12 as authentication information. Thus, convenience for the user is improved.

2. Modifications The above embodiment may be modified as follows. Further, two or more modifications shown below may be combined with each other.

2-1. Modification 1
In the above embodiment, the predetermined time during which wireless connection is permitted between the communication terminal 20 and the relay device 10 may be set based on a predetermined condition. For example, it may be set based on the position of the relay device 10, the current date and time, the connection history of the relay device 10, and the position of the communication terminal 20. When the predetermined time is set based on the position of the relay device 10, for example, the relay device 10 is provided with a GPS (Global Positioning System) receiver, and the specified position corresponds to the table stored in advance. You may make it employ | adopt time as predetermined time. For example, when the position of the relay device 10 belongs to the preset site of the user of the user of the relay device 10, the predetermined time may be set longer than the normal predetermined time.

  When the predetermined time is set based on the current date and time, for example, the current date and time measured in the relay device 10 and the corresponding time in the table stored in advance may be adopted as the predetermined time. . For example, when the current date and time belongs to the preset working hours of the user of the relay device 10, the predetermined time may be set longer than the normal predetermined time.

  In addition to the current date and time, a predetermined time may be set based on the position of the relay device 10 described above. For example, when the position of the relay device 10 belongs to a predetermined geographical range and the current date / time belongs to a predetermined time range, the predetermined time may be set to a value different from the normal time. Specifically, when the position of the relay device 10 belongs to the pre-set site of the user of the user of the device, and the current date and time belongs to the preset work time of the user of the device Alternatively, it is estimated that the user of the relay device 10 is working, and the difference between the preset work end time and the current time may be adopted as the predetermined time. At this time, based on the current number of connections of the communication terminal 20 registered in the MAC address DB 121, it may be more accurately estimated whether or not the user of the relay device 10 is working. In addition to satisfying the above geographical and temporal conditions, if the number of connections of the communication terminal 20 exceeds a predetermined threshold, the user of the relay device 10 is estimated to be on duty and set in advance. The difference between the work end time and the current time may be adopted as the predetermined time.

  When the predetermined time is set based on the connection history of the relay device 10, for example, the MAC address of the communication terminal 20 wirelessly connected to the device is stored in the relay device 10, and the MAC address registration status The predetermined time may be set based on the above. For example, the communication terminal 20 that has transmitted the connection request is a communication terminal whose MAC address is not registered in the MAC address DB 121, and communication in which wireless connection with the relay device 10 for a predetermined time has been permitted in the past. When the terminal is a terminal (that is, when the MAC address is registered in the connection history), the predetermined time allowed for the communication terminal 20 is shorter than the normal predetermined time. You may make it do. Further, if the number of times wireless connection with the relay device 10 for a predetermined time is permitted in the past is equal to or greater than the predetermined number, the predetermined time permitted for the communication terminal 20 is zero (that is, connection for a predetermined time). May not be permitted).

  When the predetermined time is set based on the connection history of the relay device 10, the predetermined time may be set based on the position of the communication terminal 20 in addition to the connection history. For example, the communication terminal 20 that has transmitted the connection request is a communication terminal that is not registered in the MAC address DB 121 and has been permitted to connect to the relay device 10 for a predetermined time in the past. Even in this case, when the position of the communication terminal 20 belongs to a predetermined geographical range, the predetermined time allowed for the communication terminal 20 may be set as a normal predetermined time. Specifically, when the position of the communication terminal 20 belongs to the preset work site of the user of the relay device 10, the predetermined time permitted for the communication terminal 20 is set as a normal predetermined time. Also good. Further, instead of the position of the communication terminal 20, the predetermined time may be set based on the connection history while considering the position of the relay device 10 and the current date and time.

  When the predetermined time is set based on the position of the communication terminal 20, for example, the communication terminal 20 is provided with a GPS receiver, and both terminals specified based on position information transmitted from the communication terminal 20A and the communication terminal 20B are used. Based on the distance, the relay device 10 may set a predetermined time. In this case, when the distance between both terminals is shorter than a predetermined threshold, the predetermined time may be set shorter than the normal predetermined time. Alternatively, when the distance between both terminals is longer than a predetermined threshold, the predetermined time may be set longer than the normal predetermined time. Note that the distance between both terminals may be estimated based on the strength of radio waves received from each communication terminal by the relay device 10.

  According to this modified example described above, the predetermined time during which wireless connection is permitted between the communication terminal 20 and the relay device 10 is determined based on the position of the relay device 10, the current date and time, the connection history of the relay device 10, It can be automatically changed based on a predetermined condition such as the position of the communication terminal 20. Therefore, the convenience of the user of the relay device 10 and the user of the communication terminal 20 can be improved as compared with the case where these conditions are not considered.

2-2. Modification 2
In the above embodiment, it is possible to permit the communication terminal 20 whose MAC address is not registered in the MAC address DB 121 to permit wireless connection with the relay device 10 for a predetermined time (step in FIG. 7). Alternatively, the wireless connection with the relay device 10 having a predetermined data amount may be permitted. When this modification is adopted, the connection establishment unit 112 realized by the CPU 11 of the relay device 10 is configured so that the MAC address of the communication terminal 20A received by the reception unit 111 is not registered in the MAC address DB 121. The wireless connection between the communication terminal 20A and the relay device 10 is permitted until a predetermined amount of data is transmitted and received between the communication terminal 20 and the relay device 10.

  In addition, when an instruction for registering the MAC address of the communication terminal 20A in the MAC address DB 121 is given before a predetermined amount of data is transmitted and received, the connection management unit 114 stores the MAC address in the MAC address DB 121. Register with. If the instruction for registering the MAC address of the communication terminal 20A in the MAC address DB 121 is not given until a predetermined amount of data is transmitted and received, the connection management unit 114 and the communication terminal 20A and the relay device 10 disconnects the wireless connection.

  The predetermined amount may also be set based on the position of the relay device 10, the current date and time, and the connection history of the relay device 10, as described in the first modification, similarly to the predetermined time.

2-3. Modification 3
In the above embodiment, when wireless connection with the relay device 10 for a predetermined time is permitted, the communication destinations to which the communication terminal 20 can be connected may be limited. Specifically, the communication destination may be limited to only the other communication terminal 20 in the wireless LAN 30 so that it cannot be connected to the Internet 40. Conversely, the communication destination may be limited only to the Internet 40 and may not be connected to other communication terminals 20 in the wireless LAN 30.

  When the communication destination to which the communication terminal 20 can be connected is restricted, the restriction may be imposed based on a predetermined condition. Specifically, the communication devices to which the communication terminal 20 can be connected via the relay device 10 may be limited based on the position of the relay device 10, the current date and time, or the connection history of the relay device 10. In the case of restricting the communication destination based on the position of the relay device 10, for example, the relay device 10 is provided with a GPS receiver, and the specified position and the corresponding communication destination in the table stored in advance are connected. You may make it exclude from a possible communication destination. When restricting communication destinations based on the current date and time, for example, the current date and time counted in the relay device 10 and the corresponding communication destinations in a table stored in advance are excluded from connectable communication destinations. It may be.

  When restricting the communication destination based on the connection history of the relay device 10, for example, the MAC address of the communication terminal 20 that is wirelessly connected to the device is stored in the memory 12 of the relay device 10. You may make it restrict | limit a communication destination based on the registration condition. For example, the communication terminal 20 that has transmitted the connection request is a communication terminal whose MAC address is not registered in the MAC address DB 121, and communication in which wireless connection with the relay device 10 for a predetermined time has been permitted in the past. If it is a terminal (that is, if it is a communication terminal whose MAC address is registered in the connection history), the communication destination permitted for the communication terminal 20 is higher than the communication destination normally permitted. You may make it restrict | limit.

  According to this modification described above, communication destinations to which the communication terminal 20 can be connected are automatically limited based on predetermined conditions such as the position of the relay device 10, the current date and time, or the connection history of the relay device 10. Can do. Therefore, the security of the communication system 1 is improved, and the convenience of the user of the relay device 10 on the side that restricts the connection destination can be improved.

2-4. Modification 4
In the above embodiment, the MAC address once registered in the MAC address DB 121 may be deleted by any of the following operations.
(1) Reply to a message transmitted from the relay device 10.
(2) Operation for the relay device 10. Specifically, a predetermined button displayed on the touch panel 13 of the relay device 10 is pressed.
(3) Operation for a communication terminal different from the communication terminal 20A and the communication terminal 20B. Specifically, pressing a predetermined button displayed on the browser of the different communication terminal.

2-5. Modification 5
In the above embodiment, the communication terminal 20 to which mail is transmitted from the relay device 10 (see step 6 in FIG. 7) may be specified based on a predetermined condition. Specifically, it may be specified based on the position of the relay device 10 or the current date and time. When specifying the mail transmission destination based on the position of the relay apparatus 10, for example, the relay apparatus 10 is provided with a GPS receiver, and the specified position and the corresponding mail address in the table stored in advance are set. Alternatively, it may be specified as a mail transmission destination. When specifying the mail transmission destination based on the current date and time, for example, the current date and time counted in the relay device 10, the corresponding mail address and the mail transmission destination in the table stored in advance are specified. It may be. Further, the communication terminal 20 to which mail is transmitted from the relay device 10 may be specified based on the positional relationship (specifically, distance) between the relay device 10 and the communication terminal 20.

  Further, in the above embodiment, mail may not be transmitted from the relay device 10 to the communication terminal 20. (See step S6 in FIG. 7). Then, for the communication terminal 20 whose MAC address is not registered in the MAC address DB 121, wireless connection for a predetermined time with the relay device 10 may be permitted uniformly. That is, in the communication control process described above, if the determination result in step S4 in FIG. 7 is negative, the processes after step S10 may be performed.

2-6. Modification 6
In the above embodiment, a mail (specifically, an electronic mail) is transmitted from the relay apparatus 10 to the communication terminal 20 (see step S6 in FIG. 7), but a short mail is transmitted instead of the electronic mail. May be. In this case, the telephone number of the notification destination is stored in the memory 12 of the relay apparatus 10.

  In the above embodiment, both the MAC address DB 121 and the temporary permission list 122 are stored in the memory 12 of the relay device 10, but both are stored in a device other than the relay device 10, and the relay device 10. May access the device.

  In the above-described embodiment, the MAC address is used as identification information of the communication terminal 20, but identification information other than the MAC address may be used as long as the communication terminal 20 can be uniquely identified.

2-7. Modification 7
In the above-described embodiment or modification, the program executed by the CPU 11 of the relay device 10 may be provided via a recording medium readable by the computer device. Here, the recording medium is, for example, a magnetic recording medium such as a magnetic tape or a magnetic disk, an optical recording medium such as an optical disk, a magneto-optical recording medium, or a semiconductor memory. The program may be provided via a network such as the Internet.

DESCRIPTION OF SYMBOLS 1 ... Communication system, 10 ... Relay apparatus, 11 ... CPU, 12 ... Memory, 13 ... Touch panel, 14 ... LAN side I / F, 15 ... WAN side I / F, 20 ... Communication terminal, 21 ... CPU, 22 ... Memory , 23 ... touch panel, 24 ... communication I / F, 30 ... wireless LAN, 40 ... internet, 111 ... reception unit, 112 ... connection establishment unit, 113 ... transmission unit, 114 ... connection management unit, 121 ... MAC address DB, 122 … Temporary allow list

Claims (9)

For a communication terminal whose identification information is registered in the database, it is a relay device that permanently permits wireless connection with its own device,
A receiving unit that receives a connection request including identification information of the first communication terminal from the first communication terminal;
When the identification information of the first communication terminal received by the receiving unit is not registered in the database, a wireless connection between the first communication terminal and the own device is made until a predetermined time elapses. Or a connection establishment unit that permits until a predetermined amount of data is transmitted and received between the first communication terminal and the own device;
If an instruction for registering the identification information of the first communication terminal in the database is given until the predetermined time elapses or until the predetermined amount of data is transmitted and received, While the identification information of one communication terminal is registered in the database, the identification information of the first communication terminal is stored in the database until the predetermined time elapses or until the predetermined amount of data is transmitted / received. A relay device comprising: a connection management unit that disconnects a wireless connection between the first communication terminal and the own device when an instruction for registration in is not performed.   When the identification information of the first communication terminal received by the receiving unit is not registered in the database, the second communication terminal different from the first communication terminal is connected to the first communication terminal. The relay apparatus according to claim 1, further comprising: a transmission unit that transmits a message that prompts an instruction to register identification information in the database.   In response to the message transmitted by the transmission unit, the connection management unit returns a message instructing to register the identification information of the first communication terminal in the database from the second communication terminal. 3. The relay apparatus according to claim 2, wherein the identification information of the first communication terminal is registered in the database.   The relay apparatus according to any one of claims 1 to 3, wherein the predetermined time or the predetermined amount is set based on a position of the relay apparatus, a current date and time, or a connection history of the relay apparatus. .   The communication apparatus to which the first communication terminal can be connected via the relay apparatus is limited based on the position of the relay apparatus, the current date and time, or the connection history of the relay apparatus. 5. The relay device according to any one of 4.   The relay apparatus according to claim 2, wherein the second communication terminal to which the message is transmitted by the transmission unit is specified based on a position of the relay apparatus or a current date and time. A communication system having a first communication terminal and a relay device,
The first communication terminal includes a transmission unit that transmits a connection request including identification information of the first communication terminal to the relay device;
The relay device is a relay device that permanently permits wireless connection with its own device for a communication terminal whose identification information is registered in the database,
A receiving unit that receives the connection request transmitted from the transmitting unit of the first communication terminal;
When the identification information of the first communication terminal received by the receiving unit is not registered in the database, a wireless connection between the first communication terminal and the own device is made until a predetermined time elapses. Or a connection establishment unit that permits until a predetermined amount of data is transmitted and received between the first communication terminal and the own device;
If an instruction for registering the identification information of the first communication terminal in the database is given until the predetermined time elapses or until the predetermined amount of data is transmitted and received, While the identification information of one communication terminal is registered in the database, the identification information of the first communication terminal is stored in the database until the predetermined time elapses or until the predetermined amount of data is transmitted / received. And a connection management unit that disconnects a wireless connection between the first communication terminal and the own device when an instruction for registration is not performed. For a communication terminal whose identification information is registered in the database, it is a communication method executed by a relay device that permanently permits wireless connection with its own device,
Receiving a connection request including identification information of the first communication terminal from the first communication terminal;
When the received identification information of the first communication terminal is not registered in the database, a wireless connection between the first communication terminal and the own device is made until a predetermined time elapses, or Allowing until a predetermined amount of data is transmitted and received between the first communication terminal and the device;
If an instruction for registering the identification information of the first communication terminal in the database is given until the predetermined time elapses or until the predetermined amount of data is transmitted and received, Registering identification information of one communication terminal in the database;
If the instruction for registering the identification information of the first communication terminal in the database is not performed until the predetermined time has elapsed or the predetermined amount of data has been transmitted and received, A communication method comprising: disconnecting a wireless connection between the first communication terminal and the device itself. For communication terminals whose identification information is registered in the database, a computer that permanently permits wireless connection with its own device,
Receiving a connection request including identification information of the first communication terminal from the first communication terminal;
When the received identification information of the first communication terminal is not registered in the database, the wireless connection between the first communication terminal and the own device until a predetermined time elapses, or Allowing until a predetermined amount of data is transmitted and received between the first communication terminal and the device;
If an instruction for registering the identification information of the first communication terminal in the database is given until the predetermined time elapses or until the predetermined amount of data is transmitted and received, Registering identification information of one communication terminal in the database;
If the instruction for registering the identification information of the first communication terminal in the database is not performed until the predetermined time has elapsed or the predetermined amount of data has been transmitted and received, A program for executing the step of disconnecting the wireless connection between the first communication terminal and the own device.

Images