JP3130921B2 - How to skip user authentication - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION (Industrial Application Field) The present invention registers a user's communication number or identifier and an access point desired by the user in a database after the user authentication is completed. The present invention relates to a method of omitting an authentication procedure at the time of access at a registered access point, and performing outgoing call, incoming call, registration procedure and the like.

(Prior Art) For example, in the conventional concept of a personal communication network, authentication is performed every time a communication network is accessed or accessed from a communication network, such as a user sending / receiving a call, registering a personal communication number, etc. I was doing the procedure.

FIG. 2 shows a conventional user encryption authentication method. User 1 terminal 2 ₁ and the signal transfer node 5: between (eg exchange),
An encryption authentication procedure is performed prior to communication (). After the call is completed, the mobile user 1 to the terminal 2 _2, after conducted cryptographic authentication procedure () in which between the terminals 2 ₂ and the signal forwarding node 5 when accessing again, for example, to transfer the calling number () .

(Problems to be Solved by the Invention) For example, when accessing from a home phone using a personal communication number or an identifier, it is complicated that the authentication procedure is activated every time the access is performed from the same access point every time. In addition, the communication network has a disadvantage that traffic increases.

Furthermore, an IC for personal communication with a cryptographic authentication function
Although sufficient security can be ensured for personal communication service access from a card or terminal, sufficient personal communication access from an existing analog telephone that cannot be mounted with the IC card or a terminal that does not have a cryptographic authentication function can be secured. There is a disadvantage that authentication is not possible.

 An object of the present invention is to remedy the above disadvantages.

(Means for Solving the Problems) In order to solve the above problem, according to the present invention, an access point desired by a user is registered in a database together with a communication number or an identifier of the user from an IC card or a terminal supporting an encryption authentication function. Thereafter, by referring to the database when accessing the communication number or identifier of the user, the authentication procedure is omitted for one or a plurality of access points registered as authentication omitted.

(Operation) According to the present invention, the user's cryptographic authentication procedure at an arbitrary access point desired by the user can be omitted, and a terminal that cannot mount an IC card having a cryptographic authentication function or a terminal that does not have a cryptographic authentication function Since a communication service can be provided to a user without performing cryptographic authentication for access, convenience in terminal use, simplification of access, and security for the user can be ensured.

(Example) FIG. 1 shows an example of the present invention. In FIG. 1, 1
Is a user, 2 ₁ , 2 ₂ , 2 ₃ are terminals, 3 ₁ , 3 ₂ , 3 ₃ are access points, 4 is a communication network, 5 is a signal transfer node (example: exchange),
Reference numeral 6 denotes a database, PTN ₁ denotes a personal communication number of the user 1, and AP ₁ , AP ₂ , AP ₃ denote addresses indicating the access points 3 ₁ , 3 ₂ , 3 ₃ . This address is an ISDN number (CCITT recommendation,
E.164) and a routing address for signal transfer in a network.

The user 1 accesses the terminal 2 ₁ performs cryptographic authentication procedure between the signal transfer node 5 (exchange) (). User 1 then the terminal 2 _1, in order to omit an authentication procedure for the access from the terminal 2 _2, terminal 2 _3, personal communication number PTN ₁ of the user 1 via the terminal 2 _1, terminal 2 _1, 2 _2, 2 ₃ of the access points _{3 1 (AP 1), 3} 2 (AP 2), 3 3 (AP 3), or the routing address RA ₁ to perform routing to the access point, RA _2, RA ₃ to need In response, information such as the authentication omission time at those access points is sent to the signal transfer node 5, and the signal transfer node 5 registers the information in the database 6 ().

Thereafter, when the user 1 moves to the terminal 2 _3, transmits (), signal transfer node 5, the database 6,
Access to search for information on cryptographic authentication steps omitted ()
I do. And user 1's PTN ₁ and access point 3
_{Since 3} (AP ₃ ) is registered as encryption authentication procedure information in the database, information indicating that the encryption authentication procedure is omitted (eg, PTN ₁ , AP ₃ , RA ₃ ) is notified to the signal transfer node 5 (). The signal transfer node 5 continues the transmission procedure without performing cryptographic authentication.

FIG. 1 shows an example in which the terminal has a cryptographic authentication function. However, the method of the present invention is also applicable to a method in which the IC card has a cryptographic authentication function and performs cryptographic authentication between the IC card and a communication network. Can achieve the same effect.

In the first figure, the user 1 indicates a transmission procedure after movement to the terminal 2 _3, even if the incoming call to the user 1 can be omitted cryptographic authentication of the user 1.

(Effects of the Invention) As described above, according to the present invention, an authentication procedure for an arbitrary access point desired by a user can be omitted for a period desired by the user, and an IC card having a simplified procedure and an encryption authentication function can be provided. Security of personal communication access from a terminal that cannot be mounted or a terminal that does not have an encryption authentication function can be secured.

[Brief description of the drawings]

FIG. 1 shows a method for omitting user authentication according to the present invention. FIG. 2 shows a conventional user authentication method. 1 user, 2 ₁ , 2 ₂ , 2 ₃ … terminal, 3 ₁ , 3 ₂ , 3 ₃ … access point, 4… communication network, 5… signal transfer node, 6… database.

Claims (2)

(57) [Claims] 1. A communication network for providing a communication service, a communication number or identifier for identifying a user, an IC card or terminal having the communication number or identifier and an encryption authentication function,
An access point indicating a connection position between the terminal and the communication network, a routing address for transferring a signal to the access point, a database for managing the communication number or identifier and information on the access point accessed by a user, In a communication network comprising a signal transfer node for transferring the information sent from the user to the database, when the user accesses the communication network, authentication of the user between the user or an IC card or a terminal and the communication network. After performing the above, in order to omit the authentication procedure at one or more access points desired by the user, cryptographic authentication procedure omission information comprising the one or more access points or routing addresses and the communication number or identifier of the user Is registered in the database, and the subsequent user or When the user accesses the database from the signal transfer node with respect to the user, and when the access is related to the access point registered by the user, the signal transfer node is notified of a signal to omit the encryption authentication procedure. so,
A method for omitting user authentication, wherein the signal transfer node omits an authentication procedure for the user and starts a procedure for providing a communication service desired by the user. 2. The method according to claim 1, wherein the user registers an authentication omission time in a database for each access point, and omit an authentication procedure relating to access at the access point registered by the user only during the authentication omission time. The method for omitting user authentication according to claim 1.