JP3228680B2 - Mobile terminal authentication method - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to the authentication of a mobile terminal (that is, a subscriber terminal) in a wireless communication switching system comprising a mobile terminal and an exchange connecting a wireless base station for communicating with the mobile terminal via a wireless line. More particularly, the present invention relates to a mobile terminal authentication method when the mobile terminal is a subscriber terminal of a plurality of wireless communication switching systems.

[0002]

2. Description of the Related Art A simple portable telephone system (Personal Handy Phone System, hereinafter referred to as PHS) is known as one of wireless communication switching systems. PHS
Adopts "2nd generation cordless telephone system standard" (hereinafter referred to as RCRSTD-28) of the Radio System Development Center as a wireless protocol between a wireless base station and a mobile terminal, and carries the same mobile terminal outdoors. It has been developed with the goal of being used as a cordless phone in homes and businesses as a phone.

[0003] Against this background, Japanese Patent Application Laid-Open No. 6-121370 entitled "Phone with Cordless Handset" uses the same mobile terminal under a plurality of home wireless base stations (base units) or a plurality of private branch exchanges. Japanese Patent Application Laid-Open No. 7-177562, "Cordless Telephone Switching Device",
Japanese Patent Application Laid-Open No. 7-212826 discloses a "mobile terminal accommodating system", in which a subscriber terminal of a public mobile communication network is used under a private branch exchange, and is not a simple extension telephone but a public mobile communication service, that is, a public mobile communication network. It has been proposed to enable location registration, outgoing calls, incoming calls, and the like.

[0004] That is, in Japanese Patent Application Laid-Open No. Hei 6-121370, "Phone with Cordless Handset", a system ID registered in advance in a home base unit or a private branch exchange and a system ID registered in a mobile terminal match. In addition, it is assumed that the mobile terminal is determined to be a subscriber terminal of the home base unit or the private branch exchange and permits communication, and has a system ID corresponding to the home base unit or the private branch exchange. A method for registering a corresponding system ID to a mobile terminal that does not have a mobile terminal is shown. Here, the system ID is a system call code shown in RCRSTD-28.

Further, in Japanese Patent Application Laid-Open No. Hei 7-177562, "Cordless Telephone Switching System", a public subscribing mobile terminal that has moved to a private branch exchange uses terminal identification information necessary for call control in a public network or a private branch exchange. It shows a method of providing a public service to a public subscriber mobile terminal via a private branch exchange by notifying the exchange.

[0006] Furthermore, the first embodiment of Japanese Patent Application Laid-Open No. 7-212826 entitled "Portable terminal accommodation system", in which a public subscribing mobile terminal can receive a public service under its control even if it has not previously registered in a private branch exchange. When the public subscriber mobile terminal makes a location registration request for the first time under the private branch exchange, the terminal identification information is registered in the private branch exchange, and the authentication algorithm and the authentication previously determined between the public network and the public subscriber mobile terminal. Using the key, authentication is performed under the relay of the private branch exchange, and the location information that the public subscriber mobile terminal is located under the private branch exchange is registered in a public network database as position information. Even if the registered public subscriber mobile terminal makes a position registration request again in accordance with the movement between the radio base stations under the private branch exchange, it updates only the subordinate position information managed by the private branch exchange and transmits the information to the public network. No location registration is performed. Authentication at the time of updating the location information under the private branch exchange and making a call to the public network is performed based on whether or not its own terminal identification information transmitted by the public subscriber mobile terminal to the private branch exchange has already been registered in the private branch exchange.

In the second embodiment of Japanese Patent Application Laid-Open No. Hei 7-212826, "Public terminal accommodation system", a system in which a public subscriber mobile terminal registers in advance with a private branch exchange and acquires a private telephone number is used. Unlike the first embodiment, when a public subscriber mobile terminal makes a location registration request for the first time under a private branch exchange, authentication is performed by the private branch exchange based on whether or not the terminal identification information has been registered in the private branch exchange. I have. Subsequent updating of the location information under the private branch exchange and authentication at the time of transmission to the public network are performed in the same manner as in the first embodiment. It is done depending on whether or not it has been registered.

On the other hand, in the current public PHS, the authentication always performed every time the subscriber terminal performs outgoing call, incoming call, location registration, etc., is a method using an encryption algorithm (= authentication algorithm). It has a higher security level than the registered authentication method of whether or not it has been registered, and has the following algorithm.

First, terminal identification information, an authentication key, and an authentication algorithm are registered in advance in each of the subscriber terminal and the public network. Both the terminal identification information and the authentication key are different for each subscribing terminal. In operation, authentication is performed prior to setting up a communication connection between the mobile terminal and the exchange, and the procedure is as follows.

[0010] The public network generates a random number and transmits it to the mobile terminal. The mobile terminal encrypts the received random number using the authentication algorithm and authentication key registered in the mobile terminal, and transmits the encryption result to the public network. The public network obtains an authentication key that the mobile terminal should have from the terminal identification information of the mobile terminal to be authenticated, and uses this to perform encryption of the random number independently of the mobile terminal. The encryption result is compared with the encryption result received from the mobile terminal. If they match, the authentication key is determined to be the same, and the authentication is successful. If they do not match, the authentication fails, and the public service is not provided to the mobile terminal.

[0011]

Therefore, the public PH
From the viewpoint of the high-security authentication algorithm in S, the above-mentioned conventional technique has the following problems. That is, when setting up a connection including a wireless line portion between the mobile terminal and the exchange for performing position registration, calling, receiving, etc., the mobile terminal uses the authentication algorithm and authentication key determined in advance, and In a wireless communication switching system that certifies the existence and guarantees the same security as a public mobile communication service, the same security is provided for mobile terminals that are not originally subscribed (public subscribed mobile terminals, private mobile terminals, etc.). We cannot guarantee.

As a countermeasure, a mobile terminal newly subscribes to a wireless communication switching system to which the mobile terminal has not originally subscribed, and an authentication algorithm for the number of contracted wireless communication switching systems.
A method of registering the authentication key in the mobile terminal is considered. However, this method requires a mobile terminal built-in memory in proportion to the number of wireless communication switching systems that want to make the mobile terminal usable.

As a countermeasure, a method is considered in which an authentication algorithm and an authentication key are shared by a plurality of wireless communication switching systems for each terminal. However, if simply commonized, a subscriber of a wireless communication switching system (for example, a PBX) can use the information as another individual in another wireless communication switching system which is not the manager, from the standpoint of knowing the key of the subscriber terminal. It is possible to falsely perceive that the terminal is a terminal and to illegally receive a communication service.

An object of the present invention is to provide a terminal authentication method for a mobile terminal which subscribes to a plurality of wireless communication switching systems, which requires a small increase in memory of the mobile terminal and has high security.

[0015]

In order to solve the above-mentioned problems, according to the present invention, authentication management means connected so as to be shared by a plurality of wireless communication switching systems is provided. Requesting the authentication of the mobile terminal to the authentication management means of the above, if a report of the authentication success is received, determine independent authentication information for performing terminal authentication separately from the authentication management means, notify the mobile terminal, Authentication when the mobile terminal is in the same system is performed by the wireless communication switching system using the unique authentication information without relying on authentication management means,
When the mobile terminal moves to another wireless communication switching system, the destination wireless communication switching system requests authentication management means to authenticate the mobile terminal, receives a report of successful authentication, determines its own authentication information, and moves. The mobile terminal notifies the terminal and stores the newly notified unique authentication information in place of the previously stored unique authentication information.

[0016] The above-mentioned solution is made by paying attention to the fact that a mobile terminal does not receive services from a plurality of wireless communication switching systems at the same time. As long as the service is continuously or temporally received within the service area of the authentication information, the authentication information is irrelevant to other wireless communication switching systems, and once authenticated authentication information does not need to be changed, Further, when the mobile terminal moves into the service area of another wireless communication switching system, the authentication information used in the original wireless communication switching system is not required, and the attention is paid to this.

A first feature of the above solution is that the authentication management means for performing authentication first is provided separately from the wireless communication switching system and is connectable when authentication is required. . Thus, whenever authentication is required in the wireless communication switching system, it is possible to request authentication from the authentication management means at any time. Further, since the authentication management means is used infrequently, it can be shared by a plurality of wireless communication switching systems.

A second feature of the above solution means is that when the authentication is performed by the authentication management means, unique authentication information between the wireless communication switching system and the mobile terminal is determined, and the authentication information storage means of the mobile terminal is determined. That is, the stored contents are updated. Thus, the authentication information can be dynamically changed according to the movement of the mobile terminal, and the storage capacity of the authentication information storage means of the mobile terminal can be minimized.

[0019]

Embodiments of the present invention will be described below in detail.

FIG. 1 is a schematic diagram of a wireless communication switching system and a general authentication management apparatus to which the present invention is applied. The wireless communication switching system includes an exchange 103, a wireless base station (hereinafter referred to as (CS)) 109, and a mobile terminal (hereinafter referred to as (P
S) 110). The exchange 103 (P) is connected via a plurality of (CS) 109s connected by a telecommunication line.
S) 110 is accommodated, and communication control between (PS) is performed. For this reason, the connection between (PS) and (CS) is made by, for example, a radio line adopting the aforementioned “RCRSTD-28 protocol”, and the connection between (CS) and the exchange is made, for example, by TTC (Th).
e Telecomunication Technology Committee) standard “Simplified mobile phone system public base station digital network interface (JT-Q931-
b, JT-Q932-a). "

The layer 1 (108) of the exchange 103 controls the electrical characteristics of the communication line, and the layer 2 (107) uses the communication means provided in the layer 1 (108) (CS).
A data link is set between the data link and the data link 109. Call control unit 10
6 sets up an end-to-end connection between (PS) using the data link provided in layer 2 (107).

The call control unit 106 also includes a position management function for managing (PS) position information specific to the wireless communication switching system. The authentication processing unit 104 determines that the exchange 103 is (PS) 110
To communicate with (P)
S) An authentication process is performed using the unique authentication key database 111 to determine whether 110 is a subscriber terminal of the wireless communication switching system.
A request for authentication at 110 and an instruction to generate a unique authentication key to the unique authentication key generation unit 113 are issued. The authentication result is transmitted to the call control unit 10
6 and the call control unit 106
S) The connection with the 110 is set or released.

The unique authentication key database 111 manages the unique authentication key assigned to the subscriber terminal by the wireless communication switching system in correspondence with the (PS) 110 terminal identification information. FIG. 9 shows the unique authentication key table 900 stored in the unique authentication key database 111. The unique authentication key table 900 is (P
S) Terminal identification information of 110 (hereinafter referred to as (PSN))
901 and a unique authentication key 902. (PSN) 901
Registers with respect to (PS) which is a subscriber terminal of the wireless communication switching system. The unique authentication key 902 is stored in correspondence with (PSN) 901, but is blank (-) for (PS) which is a subscriber terminal of the wireless communication switching system but has not yet negotiated the unique authentication key.

Returning to FIG. 1, the unique authentication key generation unit 113 generates a unique authentication key for a certain (PS) according to an instruction from the authentication processing unit 104, and generates a unique authentication key database 111.
In addition to registering in the unique authentication key table 900, the above-described unique authentication key is notified to the (PS) 110 via the authentication processing unit 104, the call control unit 106, and the (CS) 109. However, since the unique authentication key may be eavesdropped in the wireless section between (CS) and (PS), when higher security is required, as shown by the broken line in FIG.
3 and (PS) 110 are directly connected by a wired line 114, and the unique authentication key generated by the unique
It is desirable to notify 110. The communication control unit 105
The authentication processing unit 104 is for communicating with the general authentication management device 100, and is connected to the communication control unit 102 of the general authentication management device 100 via an electric communication line such as RS232C. Authentication unit (AP) 10 of general authentication management device 100
1 receives a request from the authentication processing unit 104 of the exchange 103 and authenticates whether (PSN) of (PS) 110 is valid. The authentication key required at that time is obtained from the general authentication key database 112. In the following, the authentication key managed by the general authentication key database 112 is referred to as a general authentication key to distinguish it from the unique authentication key. The general authentication key is determined in advance for each (PS), and the general authentication key database 11
2 and (PS) 110.

FIG. 8 shows a general authentication key table 800 stored in the general authentication key database 112. The general authentication key table 800 includes (PSN) 801 and a general authentication key 802. (PSN) 801 is the general authentication management device 100
Register (PS) of all wireless communication switching systems connected to. If there is only one wireless communication switching system, the contents of (PSN) 901 of the unique authentication key table 900 and (PSN) 801 of the general authentication key table 800 match, but if there are multiple wireless communication switching systems,
(PSN) 901 and (PSN) 801 may not match.

An authentication key corresponding to a different (PSN) for each (PS) is registered in the (PS) 110. FIG.
Terminal information table 1000 to be registered in (PS) 110
Is shown. The terminal information table 1000 includes (PSN) 801 allocated to (PS) 110, a general authentication key 802, and a unique authentication key 902.

Next, FIG. 2 shows that a unique authentication key has not yet been assigned from the wireless communication switching system (PS) 110.
Is a signal sequence for performing location registration with the exchange 103. According to this sequence, a unique authentication key of (PS) 110 is negotiated and registered in (PS) 110.

When the (PS) 110 detects the movement between the wireless communication switching systems by receiving the radio signal periodically notified by the (CS) 109, the information indicating the unique authentication key request and the own (PSN) are detected. Is transmitted to the exchange 103 via the (CS) 109.
The exchange 103 searches the unique authentication key table 900 of the unique authentication key database 111 and finds the (PS)
N) is registered (step 210). If not registered, a location registration rejection message is transmitted to (PS) 110 (FIG. 6). If registered, (PS) 110
It is checked whether or not the information indicating the unique authentication key request is included in the location registration request message received from
1) If included, transmits an identification information authentication start message including (PSN) to the general authentication management device 100.

The general authentication management device 100 receives (PS
N), the general authentication key database 112 is searched, and (P)
S) A general authentication key that the 110 should have is obtained (step 202). Then, a random number used for general authentication is generated, set as an authentication random number message, and transmitted to the exchange 103. The exchange 103 sets the received random number and information indicating the general authentication request in the authentication request message (PS)
Send to 110. (PS) 110 performs encryption (authentication calculation) of the received random number using a general authentication key registered in advance in terminal information table 1000 (step 203), and sets it as an authentication calculation result in an authentication response message. It is transmitted to exchange 103. The exchange 103 sets the received authentication operation result in the operation result message and transmits the result to the general authentication management device 100.

The general authentication management device 100 includes a switch 103
An authentication operation is performed on the same random number transmitted to (PS) 110 through the authentication key using the authentication key obtained in step 202 (step 204).
3 is compared with the authentication calculation result of the (PS) 110 received from Step 3 (Step 205). As a result of the comparison, if they do not match, a comparison result message including information indicating that they do not match is transmitted to the exchange 103, and the exchange 103 sends a location registration reject message to the (PS) 11 via the (CS) 109.
0 (FIG. 6).

In step 205, if the calculation results match, the (PSN) of (PS) 110 is certainly (PN).
S) It can be proved that it has been allocated to 110, and the general authentication management device 100 transmits a comparison result message including information indicating a match to the exchange 103. In the exchange 103, in step 201,
(PSN) of (PS) 110 has been registered as a subscriber terminal, and that (PSN) in step 205
Was indeed of (PS) 110, (P
S) 110 determines that it is a subscriber terminal of the wireless switching system, and responds to the location registration request of (PS) 110,
The position information 110 is registered (step 206).

The exchange 103 further generates a unique authentication key (step 207), registers the unique authentication key in the unique authentication key database 111, sets the unique authentication key in the location registration reception message, and (PS) 109 via (CS) 109. Notify 110. Before executing step 207, the unique authentication key database 111 is searched and (PS) 11
If a unique authentication key of 0 has been registered, the registered unique authentication key is set in the location registration acceptance message (PS)
There is also a method of notifying 110. When the (PS) 110 receives the location registration reception message, it deletes the unique authentication key 902 stored in the terminal information table 1000 and registers the unique authentication key in the message as the unique authentication key 902 again (step 208).

FIG. 3 is similar to FIG. 2 and has not yet been assigned a unique authentication key from the wireless communication switching system (PS) 1
10 is a signal sequence for performing location registration with respect to the exchange 103. The difference from FIG. 2 is that (CS)-(PS) is a means for notifying the (PS) 110 of the unique authentication key determined by the exchange 103. The point is that a wired line 114 temporarily provided between the exchange 103 and the (PS) 110 is used instead of using a wireless line between them. In step 307 of FIG. 3 corresponding to step 207 of FIG. 2, the exchange 103 generates a unique authentication key and registers the unique authentication key in the unique authentication key table 900 of the unique authentication key database 111. On 114, for example, the unique authentication key is notified to the (PS) 110 using the HDLC protocol. (PS) 11 which received original authentication key
0 is registered as the unique authentication key 902 in the terminal information table 1000 as in FIG. 2 (step 308).

FIG. 4 is a signal sequence when the (PS) 110 to which the unique authentication key has been assigned from the wireless communication switching system performs location registration with the exchange 103 in the sequence of FIG. 2 or FIG. The (PS) 110 transmits a location registration message that does not include information indicating the unique authentication key request to the exchange 103 via the (CS) 109.

The exchange 103 determines (PSN) in the message.
Search the unique authentication key table 900 with (PSN) 90
It is checked whether it has already been registered in step 1 (step 410). If not registered, a location registration reject message is sent to (CS) 109
Is transmitted to (PS) 110 through (FIG. 6). If registered in step 410, it is checked whether or not information indicating the unique authentication key request is included in the position registration request message (step 401). Since it is not included in this sequence, the process proceeds to step 409. In step 409, it is checked whether or not the unique authentication key of (PS) 110 has already been registered in the unique authentication key table 900. If not, it is necessary to generate a unique authentication key.

If it has been registered, the registered key is used as a key for performing unique authentication (step 402). The exchange 103 generates a random number for unique authentication, sets the random number and information indicating the unique authentication request in an authentication request message, and transmits the information to the (PS) 110 via the (CS) 109. The (PS) 110 recognizes that the unique authentication has been requested, searches the terminal information table 1000 for the unique authentication key 902, and performs a unique authentication operation on the received random number (step 403). The authentication calculation result is set in an authentication response message and transmitted to the exchange 103 via the (CS) 109. Using the unique authentication key determined in step 402, exchange 103 performs an independent authentication operation on the same random number transmitted to (PS) 110 (step 404). The result is compared with the authentication calculation result received from (PS) 110 in step 405. If they match, step 40
In step 6, the position information of (PS) 110 is registered, and a position registration acceptance message is transmitted to (PS) 110 via (CS) 109. If the calculation results do not match in step 405, a location registration rejection message is transmitted to (PS) 110 via (CS) 109.

FIG. 4 shows the case of location registration of (PS) 110, but authentication for communication services such as outgoing and incoming calls is also performed between (PS) 110 and exchange 103 using a unique authentication key. Do with.

FIG. 5 shows a sequence when the (PS) 110 is also a subscriber terminal of the public mobile communication network and the public mobile communication network 500 is used instead of the general authentication management device 100 in FIGS. 5 is different from FIGS. 2 and 3 in that the public mobile communication network 500 uses (P
S) A public authentication key used when performing the authentication of 110 is used, and the other is the same.

In the above description, a method in which the general authentication management device 100 or the public mobile communication network 500 instead of the general authentication management device 100 manages general authentication keys as authentication management means has been described. Mobile communication network 50
If 0 is also one of the wireless communication switching systems, there is a method in which each wireless communication switching system manages a general authentication key of a terminal having the system as a home network (main subscriber). In this case, the destination to which the exchange 103 requests terminal authentication (the destination of the identification information authentication start message) is the home network of the terminal to be authenticated, and therefore the request destination differs for each terminal. The exchange 103 determines the request destination from the (PSN) of the terminal.

FIG. 11 shows a terminal authentication method according to the present invention.
(PS) when there are multiple wireless communication switching systems
Of the terminal information table 1000 as the user moves. The general authentication key database 112 of the general authentication management device 100 stores the general authentication key K1 of (PS1). First, (PS1) is the exchange 103-a
Moves under the wireless communication switching system configured by
The exchange 103-a requests the general authentication management device 100 to authenticate (PS1), determines k1 as the unique authentication key after successful authentication (PS1), and determines the unique authentication key database 111-a.
And k1 is also notified to (PS1). (PS1)
Thereafter, unless it moves out of the subordinate of the exchange 103-a,
The unique authentication key k1 is stored in the terminal information table 1000. When the need for authentication of (PS1) arises, the exchange 103-a performs authentication using the unique authentication key k1 without relying on the general authentication management device 100. Next, when (PS1) moves under the wireless communication switching system constituted by the exchange 103-b, the exchange 103-b
0 requests (PS1) authentication, and after successful authentication, (PS1)
K1 ′ is determined as the unique authentication key of 1), registered in the unique authentication key database 111-b, and (PS1) is also notified of k1 ′. (PS1) is the terminal information table 10
The unique authentication key k1 stored in 00 is stored in place of k1 ', and thereafter, the key is kept stored unless it moves outside the subordinate of the exchange 103-b. The exchange 103-b is connected to the (PS
If the authentication of 1) is required, the general authentication management device 10
Authentication is performed using the unique authentication key k1 'without relying on 0.

[0041]

As described above, according to the present invention,
When the authentication by the general authentication management means provided outside the wireless communication switching system succeeds, terminal authentication information unique to the wireless communication switching system is negotiated between the wireless communication switching system and the terminal. By performing authentication using the unique terminal authentication information as long as the terminal is located, even if the terminal subscribes to a plurality of wireless communication switching systems, there is an effect that less authentication information needs to be stored.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of a wireless communication switching system and a general authentication management device embodying the present invention.

FIG. 2 is a signal sequence diagram in the case where a mobile terminal to which a unique authentication key has not been assigned in FIG. 1 performs location registration, and receives a unique authentication key from a switch via a wireless line.

FIG. 3 is a signal sequence diagram in a case where a mobile terminal to which a unique authentication key has not been assigned in FIG. 1 performs location registration, and receives a unique authentication key from a switching device through a temporarily set wired line.

FIG. 4 is a signal sequence diagram when a mobile terminal assigned a unique authentication key from the wireless communication switching system in FIG. 1 performs location registration.

FIG. 5 is a signal sequence diagram in a case where a public mobile communication network is used as an authentication management unit in FIG.

FIG. 6 is a signal sequence diagram in a case where authentication has failed in FIGS. 2, 3, and 4;

FIG. 7 is a signal sequence diagram when authentication fails in FIG. 5;

FIG. 8 is a data table diagram of the general authentication key database of FIG. 1;

FIG. 9 is a data table diagram of the unique authentication key database of FIG. 1;

FIG. 10 is a terminal information table diagram in the mobile terminal of FIG. 1;

FIG. 11 is a configuration diagram of a wireless communication switching system and a general authentication management device showing information change in an embodiment in which a plurality of wireless communication switching systems exist.

[Explanation of symbols]

100: General authentication management device, 112: General authentication key database, 103: Exchange, 111: Original authentication key database, 109: CS, 110: Mobile terminal, 800: General authentication key table, 900: Original authentication key table, 100
0: Terminal information table

────────────────────────────────────────────────── ─── Continuation of the front page (72) Inventor Kazutoshi Tanaka 216 Totsuka-cho, Totsuka-ku, Yokohama-shi, Kanagawa Pref. Hitachi, Ltd. Information and Communications Division (56) References JP-A-6-69880 (JP, A) JP-A-5-14271 (JP, A) JP-A-7-59154 (JP, A) (58) Fields investigated (Int. Cl. ⁷ , DB name) G09C 1/00-5/00 H04B 7/24 -7/26 H04L 9/00-9/04 H04Q 7/00-7/38

Claims (4)

(57) [Claims] 1. A wireless communication switching system comprising an exchange connecting at least one wireless base station for communicating with a plurality of mobile terminals via a wireless line, and storing authentication information corresponding to terminal identification information allocated to the mobile terminals. An authentication management device comprising: an authentication information storage unit for performing authentication; a terminal authentication unit for authenticating the legitimacy of the mobile terminal using the authentication information; and an authentication management device including means for communicating with the exchange. However, authentication request means for requesting the authentication management device to authenticate the mobile terminal, unique information storage means for storing unique authentication information for performing authentication of the mobile terminal separately from the authentication management device corresponding to the terminal identification information, Having unique authentication information registration means for registering the unique authentication information in the mobile terminal, and unique terminal authentication means for authenticating the validity of the mobile terminal using the unique authentication information, The wireless communication switching system requests the authentication management device to authenticate the mobile terminal from the authentication management device, and when the authentication management device succeeds in authentication, notifies the mobile terminal of the unique authentication information stored in the unique authentication information storage means. Wherein the mobile terminal is authenticated using the unique authentication information when a subsequent communication request is issued from the mobile terminal. 2. The mobile terminal authentication system according to claim 1, wherein when the mobile terminal is a subscriber terminal of a public mobile communication network, the public mobile communication network is used as the authentication management device. 3. When a mobile terminal to which unique authentication information has not been assigned registers a location, the exchange sends the unique authentication information to the mobile terminal via a temporarily set wired line. The mobile terminal authentication method according to claim 1, wherein the notification is performed. 4. For communicating with a plurality of mobile terminals via a wireless line.
From an exchange connected to at least one wireless base station.
Wireless communication switching system and wireless communication switching system
Authentication management device that authenticates mobile terminals in response to requests from
Consists of a, each of the wireless communication switching system, from the authentication management apparatus
If a mobile terminal authentication success report is received,
Unique authentication information for performing terminal authentication separately from the device
Notify the mobile terminal, and the mobile terminal replaces the authentication information stored so far.
The unique authentication information is stored as
Mobile terminal authentication method.