JP4268020B2 - Communication terminal - Google Patents

Description

  The present invention relates to a communication terminal for communicating with a desired network or a server connected to the desired network via a plurality of networks.

  As a conventional communication system, as shown in FIG. 20, a communication terminal 71 connected to a LAN, a conversion table for converting a local address and a global address, and a correspondence table having a correspondence between a terminal identifier and a connection identifier , An LAC (L2TP Access Concentrator) 73 to which the proxy 72 is connected via an access line, an LNS (L2TP Network Server) 75 to which the proxy 72 is connected via a relay IP network 74, and an LNS 75 And the server 77 connected via the network 76. When the communication terminal 71 remotely accesses the server 77 via a plurality of networks, the proxy 72 uses the conversion table and the correspondence table to transfer the frame. Is known (for example, see Patent Document 1).

  However, in recent years, there have been increasing opportunities to use communication terminals not only in the office, but also in homes, shops, public facilities such as airports and stations, and the like. Once connected, you can communicate with the server via multiple networks, but at various locations where the communication terminal can be used, you cannot communicate with the host unless you change the network connection settings. Has been.

In order to solve the above problem, the conventional communication terminal stores a plurality of pieces of connection information 9 for connecting via a plurality of networks in advance so that the network connection can be made at various places as shown in FIG. ing. The connection information 9 is information regarding the end-to-end between the communication terminal and the server, and includes authentication information 8 representing a user identifier, a password, and the like corresponding to each network. A conventional communication terminal selects from a plurality of stored pieces of connection information 9 having a higher priority in response to a user's network connection request, and tries authentication information 8 included in the selected connection information 9 in order. If the trial result is an error, the next highest priority is selected, and the authentication information 8 included in the selected connection information 9 is tried in order. For example, in FIG. 21, the conventional communication terminal tries the connection information 9a, the authentication information 8A and the authentication information 8B are successful, the result of the authentication information 8C is a failure, the connection information 9b is tried, and the authentication information 8A and authentication information 8B are successful, the result of trial with authentication information 8E is failure, connection information 9c is tried, authentication information 8A is successful, and the result of trial with authentication information 8G is failure, finally connection information An image for selecting 9d is shown.
JP-A-2001-237898 (20th to 23rd paragraphs, FIG. 1)

  However, in the above-described conventional communication terminal, when the connection information 9a fails, the authentication information 8A and the authentication information 8B are tried again using the connection information 9b including the authentication information 8A and the authentication information 8B that have been successful. Since the authentication information 8A is tried again using the connection information 9c, and the authentication information 8A is tried again using the connection information 9d, the authentication information that has succeeded is repeatedly tried. The problem that it takes time to connect to the network was left.

  The present invention has been made to solve the conventional problems, and an object of the present invention is to provide a communication terminal capable of shortening the time for network connection when the place where the communication terminal is used is changed. To do.

  According to a first aspect of the present invention, there is provided connection information storage means for storing connection information for a communication terminal to connect to a plurality of networks, and the connection information when a connection request for connection to the desired network is made. Connection information acquisition means for acquiring connection information from a storage means, connection information selection means for selecting connection information corresponding to the desired network in the connection information acquired by the connection information acquisition means, and the connection information selection Connection means for connecting to the desired network according to the connection information selected by the means, the connection information selection means is configured to connect connection information corresponding to the desired network from the connection information acquired by the connection information acquisition means. A combination is selected, and the connection means follows a combination of connection information selected by the connection information selection means. Connected to said desired network.

  According to the present invention, since a combination of connection information is selected from a plurality of pieces of connection information corresponding to the network in response to a connection request, it is possible to reduce the time for connecting to the network when the place where the communication terminal is used is changed. it can.

  According to a second aspect of the present invention, the communication terminal includes connection information input means for inputting the connection information, and the connection information storage means is a directed graph in which the connection information input by the connection information input means is expressed by a directed graph. There is a directed graph data structure storage unit for storing in the data structure, and the connection information selection means selects a combination of the connection information based on the directed graph data structure.

  According to the present invention, since connection information is stored in advance in a directed graph data structure and a combination of connection information is selected based on the directed graph data structure, a combination of connection information can be selected efficiently.

  According to a third aspect of the present invention, the connection information storage unit stores a plurality of alternative connection information, which are connection information that can be substituted for each other, and the connection unit is based on a combination of connection information including the one alternative connection information. When the connection with the desired network fails, the connection information selection unit selects a combination of connection information including the other alternative connection information.

  According to the present invention, even if the connection with the desired network fails based on the combination of the connection information, the connection information including the alternative connection information is combined, so that communication failure in the connection with the desired network can be prevented.

  According to a fourth aspect of the present invention, the connection information selection means extracts the connection information candidates based on the desired network and the attributes relating to the alternative connection information, and selects usable connection information from the extracted candidates. To do.

  According to the present invention, connection information candidates are extracted on the basis of a desired network and attributes relating to each of the alternative connection information, and connection information can be selected more efficiently in order to select usable connection information from the extracted candidates. A combination of connection information can be selected.

  According to a fifth aspect of the present invention, the connection information selection unit acquires network environment information obtained from the network from the network, and when the next connection request is made, the connection information selection unit acquires the network environment information acquired. The combination of the connection information is selected based on the information.

  According to the present invention, since connection information is selected based on the acquired network environment information, a connection information selection method is learned every time a desired network is connected, and further time reduction in network connection is achieved by learning. Can do. According to a sixth aspect of the present invention, when the connection information selection unit cannot select the connection information from the candidates, the connection information selection unit selects a combination of the connection information based on connection information combined with the connection information. To do.

  According to the present invention, since connection information is selected based on connection information combined with connection information even if connection information cannot be selected, it is possible to prevent communication failure in connection with a desired network.

  According to a seventh aspect of the present invention, when the connection information includes network characteristic information indicating network characteristics, and the connection information selection unit includes the plurality of alternative connection information capable of communication corresponding to the desired network, Connection information is extracted based on the network characteristic information.

  According to the present invention, when there are a plurality of communicable alternative connection information corresponding to a desired network, appropriate connection information is extracted based on the network characteristic information. Can communicate with the network.

  According to an eighth aspect of the present invention, the communication terminal includes network characteristic condition information input means for inputting network characteristic condition information representing a condition relating to the network characteristic, and the connection information selection means is configured to be connected to the network characteristic condition information input means. Connection information is extracted based on the inputted network characteristic condition information.

  According to the present invention, since the appropriate connection information of the connection information is extracted according to the network characteristic condition information input by the user or the like, it is possible to communicate with the desired network according to the route on the network according to the user's request.

  ADVANTAGE OF THE INVENTION According to this invention, the communication terminal which has the effect that the time for network connection when the place which uses a communication terminal is changed etc. can be shortened can be provided.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a system configuration diagram of a communication system according to the first embodiment of the present invention. As shown in FIG. 1, the communication system 1000 includes a communication terminal 100, a server 12, a network 11a, a network 11b, a network 11c, a network 11d, an AP (AccessPoint) 13a, an AP 13b, and an AP 13c. Have. For example, the AP 13a is installed in a company, the AP 13b is installed in a home, and the AP 13c is installed in a store.

  The communication terminal 100 may be a personal computer, a mobile phone, or a PDA, and may be any device that can communicate with the server 12 via the network 11. The server 12 is a file server, a Web server, a mail server, or the like, and the type of server is not limited.

  In the present embodiment, for convenience of explanation, the server 12 is connected only to the network 11c. However, in the present invention, the server 12 may be connected to another network 11. The network 11c may be a LAN, the network 11a and the network 11d may be a network or intranet managed by an ISP, and the network 11b may be configured to be the Internet. The numbers of servers 12 and networks 11 are not particularly limited.

  FIG. 2 is a block configuration diagram of the communication terminal according to the first embodiment of the present invention. As shown in FIG. 2, the communication terminal 100 is configured to include an input / output unit 101, an application processing unit 102, a setting procedure execution unit 103, a connection information storage unit 110, and a connection unit 140.

  The input / output means 101 includes a display device such as a display and an input device such as a keyboard. The application processing means 102 processes an application program including a browser for browsing the contents of a Web site. Further, the application processing means 102 is not limited to a browser, and processes a program for communicating with a desired network 11 or a program for browsing the contents of a site connected to the desired network 11. . The setting procedure execution means 103 is configured to include a connection information acquisition means 120 and a connection information selection means 130.

  The connection information storage means 110 is configured by a database or the like, and stores connection information for connecting to a desired network among the plurality of networks 11 in advance. The connection information is information relating to various protocols, and includes authentication information compliant with each protocol, setting information for each protocol, information relating to a connection procedure compliant with each protocol, and the like. Hereinafter, the connection information is referred to as a profile. The profile is created by a network administrator who manages each network 11. An example of the profile is shown in FIG.

  FIG. 3A shows an image of a profile a for connecting to the network 11a via the AP 13a. The profile a includes information for performing open authentication in conformity with IEEE802.11b, information for communicating in conformity with IEEE802.11b and IEEE802.1x, and an NW 11a serving as a network identifier for identifying the network 11a. included.

  FIG. 3B is an image of a profile b for connecting to the network 11b via the AP 13b. Profile b includes information for performing open authentication in conformity with IEEE802.11b, information for communicating in conformity with IEEE802.11b and IEEE802.1x, certificate A and certificate A used in IEEE802.1x Information for communicating in accordance with PPPoE, such as an accompanying secret key, and an NW 11b serving as a network identifier for identifying the network 11b are included.

  FIG. 3C is an image of a profile c for connecting to the network 11d via the AP 13c. Profile c includes information for performing open authentication in conformity with IEEE 802.11b, information for communicating in conformity with IEEE 802.11b, IEEE 802.1x, and DHCP, certificate B and certificate used in IEEE 802.1x NW 11d which is a network identifier for identifying the network 11d and a secret key attached to the document B is included.

  FIG. 3D is an image of a profile d for connecting to the network 11a and the network 11b. The profile d includes information for communicating according to PPPoE and PPP, and NW 11a and NW 11b.

  FIG. 3E is an image of a profile e for connecting to the network 11b and the network 11c. The profile e includes information for communicating in compliance with IPSec, L2TP, and PPP, and NW 11c serving as an identifier for identifying the NW 11b and the network 11c.

  FIG. 3F is an image of a profile f for connecting to the network 11d and the network 11b. The profile f includes information for communicating according to PPP, NW11d, and NW11b.

  The connection information acquisition unit 120 acquires a profile from the connection information storage unit 110 in response to a connection request for connecting to a desired network or server 12. For example, when a user using the communication terminal 100 makes a connection request for connecting to each network 11 or server 12 via the application processing unit 102, the connection information acquisition unit 120 stores each profile in the connection information. Each profile acquired from the means 110 is output to the connection information selection means 130.

  For example, the connection information selection unit 130 selects any one of the profile a to the profile c as information for performing communication in conformity with IEEE802.11b, and uses the selected profile to immediately connect to the connection unit 140. By communicating with the AP 13 and trying whether communication is possible, one of the APs 13 is specified.

  For example, when the AP 13 closest to the communication terminal 100 is the AP 13b, the connection information selection unit 130 selects the profile a from the profile a to the profile c, and uses the selected profile a to connect the AP 13b to the connection unit 140. Communicate with. Since communication is not possible at this time, the connection information selection unit 130 next excludes the profile a from the profile a to the profile c, selects the profile b, and uses the selected profile b to connect to the connection unit 140. Communicate with the AP 13b. As described above, the AP 13 that can communicate is searched by trying whether or not the profile a to the profile c can be communicated in order.

  Further, when the AP 13 closest to the communication terminal 100 is the AP 13a and the desired network is the network 11c, the connection information selection unit 130 identifies the profile a that can be communicated and matches the NW 11a of the identified profile a. Further, as shown in FIG. 4A, by selecting a profile e that matches the NW 11b of the profile d, a plurality of profiles for connecting to the network 11c are selected. ing. FIG. 4B is an image diagram of a combination of profiles between end to end finally used selected by the connection information selection unit 130.

  The connection unit 140 includes a communication device including a wireless LAN card capable of communicating with the AP 13 or the network 11 and can communicate with the AP 13 or the network 11 via the communication device. Further, the connection unit 140 may include a wired communication device capable of wired communication, and may communicate with the AP 13 or the network 11 via the wired communication device.

  The connection unit 140 is connected to a desired network via the plurality of networks 11 based on the combination of network connection information selected by the connection information selection unit 130, and communicates with the server 12 and the like. . Here, FIG. 5 shows an image in which the connection unit 140 communicates based on the combination of the end-to-end profiles shown in FIG. 4B. It is assumed that GW (GateWay) 31 and GW 32 are installed at both ends of the network 11a, and GW 32 and GW 33 are installed at both ends of the network 11b.

  As shown in FIG. 5, the connection unit 140 performs a communication procedure conforming to IEEE802.1x with the AP 13, then performs a communication procedure conforming to PPPoE with the GW 31, and further communicates with the GW 32. A communication procedure compliant with PPP is executed between the GW 33 and a communication procedure compliant with IPSec and L2TP.

  Note that the connection information storage unit 110 stores in advance the end-to-end profile up to the terminal network 11 as shown in FIG. 4B, and the connection information selection unit 130 stores the desired information in the end-to-end profile. The end-to-end profile corresponding to this network may be selected.

  Hereinafter, the operation of the communication terminal according to the first embodiment of the present invention will be described with reference to the drawings. FIG. 6 is a flowchart showing an operation flow of the communication terminal according to the first embodiment of the present invention.

  First, a connection request for connecting to a desired network or server 12 is made to the connection information acquisition means 120 by the application processing means 102 (S101). In response to this connection request, each profile is acquired from the connection information storage unit 110 by the connection information acquisition unit 120 (S102).

  Next, one of profile a to profile c, which is information for performing communication in conformity with IEEE802.11b, is selected by the connection information selection unit 130 (S103). At this time, an attempt is made as to whether or not communication is possible based on the selected profile (S104), and any of the nearest APs 13 from the communication terminal 100 is specified. Further, in accordance with the connection request, a combination with another profile that matches the specified profile is selected by the connection information selection unit 130 (S105).

  Based on the selected combination of network connection information, the connection unit 140 performs communication with the desired network or the server 12 via the network 11 (S106).

  As described above, the communication terminal according to the first embodiment of the present invention supports a desired network in response to a connection request without repeatedly trying authentication information that has been successful. (For example, the identifier is included. The same applies hereinafter) Since a combination of profiles is selected from a plurality of profiles, it is possible to reduce the time for network connection when the location where the communication terminal 100 is used is changed.

  Further, since the combination of profiles is selected, the total size of profiles to be stored can be reduced. Therefore, the problem of storing a profile in a storage area with a small capacity can be solved in the communication terminal.

  FIG. 7 is a system configuration diagram of a communication system according to the second embodiment of the present invention. As shown in FIG. 7, the communication system 2000 includes a communication terminal 200, a server 12a and a server 12b, a network 11a to a network 11h, and an AP (AccessPoint) 13a to AP 13f. . The communication terminal 200 may be a personal computer, a mobile phone, or a PDA, and may be any device that can communicate with the server 12 via the network 11.

  Of the elements constituting the communication system according to the second embodiment of the present invention, the same elements as those constituting the communication system according to the first embodiment of the present invention are denoted by the same reference numerals. A description thereof will be omitted.

  FIG. 8 is a block diagram of a communication terminal according to the second embodiment of the present invention. As shown in FIG. 8, the communication terminal 200 is configured to include an input / output unit 101, an application processing unit 202, a setting procedure execution unit 203, a connection information storage unit 210, and a connection unit 140.

  Of the means constituting the communication terminal according to the second embodiment of the present invention, the same means as those constituting the communication terminal according to the first embodiment of the present invention are designated by the same reference numerals. A description thereof will be omitted.

  The application processing unit 202 processes an application program including a browser for browsing a Web site. The setting procedure execution unit 203 is configured to include a connection information acquisition unit 120 and a connection information selection unit 230.

  The application processing unit 202 includes a connection information input unit 205 for inputting a profile.

  A user who uses the communication terminal 200 may download a profile from a specific server via the input / output unit 101. At that time, the user inputs the downloaded profile to the communication terminal 200, and the connection information input unit 205 outputs the input profile to the connection information storage unit 210.

  The connection information storage unit 210 includes a directed graph data structure storage unit 211, is configured by a database or the like, and stores a profile for each network 11 in advance. The directed graph data structure storage unit 211 has a directed graph data structure that is a data structure represented by a directed graph, and stores the profile input by the connection information input unit 205 in the directed graph data structure. Hereinafter, the connection information that is first selected by the connection information selection unit 230 is referred to as a first profile. There is no difference in the data structure between the profile and the first profile. Here, an example of the directed graph data structure related to the profile is shown in FIG.

  For example, as shown in FIG. 9, the first profile is a profile for connecting via the AP 13, and is a profile a, profile b, profile c, profile g, profile j, and profile k. The first profile includes a network identifier for identifying the network 11, information for connecting to the AP 13, and the like. Note that the identifier NW0 included in the first profile illustrated in FIG. 9 indicates a logical network identifier of only the communication terminal 200.

  For example, when the connection information input unit 205 inputs the profile d, the connection information storage unit 210 associates it with the profile a having a common network identifier included in the profile d. Further, when the connection information input unit 205 inputs the profile f, the connection information storage unit 210 associates the profile c with the common network identifier included in the profile f. Further, when the connection information input unit 205 inputs the profile e, the connection information storage unit 210 associates the profile d, the profile b, and the profile f with common network identifiers included in the profile e.

  The connection information selection unit 230 includes a first connection information selection unit 231 and selects a profile corresponding to a desired network among the profiles acquired by the connection information acquisition unit 120.

  The first connection information selection unit 231 selects a combination of profiles including the first profile based on the directed graph data structure shown in FIG. For example, the first connection information selection unit 231 selects any one of the profile a, the profile b, the profile c, the profile g, the profile j, and the profile k to be the first profile, and uses the selected profile to connect. 140 is made to communicate with the nearest AP 13 from the communication terminal 100, and it is determined whether any of the APs 13 can be identified by trying whether or not communication is possible.

  For example, when the AP 13 nearest to the communication terminal 200 is the AP 13b, the first connection information selection unit 231 selects the profile a in the first profile, and performs a connection procedure in accordance with each protocol of the selected profile a. Sequentially executed, the connection unit 140 communicates with the AP 13b. Since communication is not possible at this time, the first connection information selection unit 231 next excludes the profile a in the first profile, selects the profile b, and connects in accordance with each protocol of the selected profile b. Are sequentially executed to cause the connection means 140 to communicate with the AP 13b. As described above, the AP 13 that can communicate is searched by trying whether or not the profile a to the profile c can be communicated in order.

  When the AP 13 closest to the communication terminal 200 is the AP 13a and the desired network is the network 11c, the first connection information selection unit 231 determines the profile a, the profile d, and the profile based on the directed graph data structure shown in FIG. The combination of e is selected.

  Further, the directed graph data structure included in the directed graph data structure storage unit 211 has a plurality of alternative connection information (connection information that can be substituted for each other) corresponding to a specific network other than the first profile. Good. For example, as shown in FIG. 10, a corresponding profile h and profile m may exist between the network 11e and the network 11f. The alternative profiles that are the alternative connection information in FIG. 10 are profile h and profile m.

  When the AP 13 closest to the communication terminal 200 is the AP 13d and the desired network is the network 11g, the first connection information selection unit 231 determines the profile g, the profile h, and the profile based on the directed graph data structure shown in FIG. The combination of i is selected, and the connection unit 140 is made to communicate with the AP 13b using the selected combination of profiles. At this time, when communication is not possible due to a profile failure or a gateway failure in the network 11f, the connection information selection unit 230 is connected to the network 11e in the connection unit 140 while using the profile g. A combination of the profile g, the profile m, and the profile i is selected, and the connection unit 140 is made to communicate with the AP 13b using the selected combination of profiles.

  The operation of the communication terminal according to the second embodiment of the present invention will be described below with reference to the drawings. FIG. 11 is a flowchart showing a flow of operations of the communication terminal according to the second embodiment of the present invention.

  FIG. 11A is a flowchart showing the flow of operations when inputting a profile. FIG. 11B is a flowchart showing the flow of operations when selecting a combination of profiles. In addition, the same code | symbol is attached | subjected about the thing same as the operation | movement of the communication terminal which concerns on the 1st Embodiment of this invention in the operation | movement of the communication terminal which concerns on the 2nd Embodiment of this invention.

  As shown in FIG. 11A, the profile is input from the user who uses the communication terminal 200 by the connection information input means 205 (S201). The profile input by the connection information input unit 205 is stored in the directed graph data structure by the directed graph data structure storage unit 211 (S202).

  Further, as shown in FIG. 11B, a connection request for connecting to a desired network or server 12 is made to the connection information acquisition unit 120 by the application processing unit 102 (S101). In response to this connection request, each profile is acquired from the connection information storage unit 110 by the connection information acquisition unit 120 (S102).

  Next, one of the first profiles is selected by the first connection information selection unit 231 (S203). At this time, an attempt is made as to whether or not communication is possible based on the selected first profile (S204), and any of the nearest APs 13 from the communication terminal 200 is specified. Further, in accordance with the connection request, a combination of profiles including the first profile specified based on the directed graph data structure is selected by the first connection information selection unit 231 (S205).

  Based on the selected combination of network connection information, the connection unit 140 performs communication with the desired network or the server 12 via the network 11 (S106). At this time, it is tried whether or not communication is possible based on the selected combination of profiles (S206). If there is an alternative profile, a combination of profiles including other alternative profiles instead of the attempted alternative profile is connected information. It is selected by the selection means 230 (S206).

  As described above, the communication terminal according to the second embodiment of the present invention stores profiles in advance in a directed graph data structure, and selects a combination of profiles based on the directed graph data structure. Can be selected.

  In addition, even if connection with a desired network fails based on the combination of profiles, since a profile including an alternative profile is combined, communication failure in connection with the desired network can be prevented.

  FIG. 12 is a system configuration diagram of a communication system according to the third embodiment of the present invention. As shown in FIG. 12, the communication system 3000 includes a communication terminal 300, a server 12a and a server 12c, a network 11b, a network 11c, a network 11f, and a network 11h, and APs (AccessPoint) 13a to AP13f (excluding AP13d). It has the composition provided with. The communication terminal 300 may be a personal computer, a mobile phone, or a PDA, and may be any device that can communicate with the server 12 via the network 11.

  Of the elements constituting the communication system according to the third embodiment of the present invention, the same elements as those constituting the communication system according to the second embodiment of the present invention are designated by the same reference numerals. A description thereof will be omitted.

  FIG. 13 is a block configuration diagram of a communication terminal according to the third embodiment of the present invention. As shown in FIG. 13, the communication terminal 300 is configured to include an input / output unit 101, an application processing unit 202, a setting procedure execution unit 303, a connection information storage unit 310, and a connection unit 140.

  Of the means constituting the communication terminal according to the third embodiment of the present invention, the same means as those constituting the communication terminal according to the second embodiment of the present invention are designated by the same reference numerals. A description thereof will be omitted.

  The connection information storage unit 310 includes a directed graph data structure storage unit 311 and is configured by a database or the like, and stores a profile in advance. The directed graph data structure storage unit 311 has the directed graph data structure described in the second embodiment of the present invention.

  FIG. 14 shows an image of the directed graph data structure that the directed graph data structure storage unit 311 has. In the directed graph data structure according to the embodiment of the present invention, a network identifier is represented as a node, and a connection direction between nodes is represented as a link, and a profile corresponding to the link exists. The directed graph data structure includes a network identifier NW0 associated with the profiles p, b, q, j, and k.

  The profile p includes information for performing open authentication compliant with IEEE802.11b, information for communicating according to IEEE802.11b and IEEE802.1x, and NW11b serving as a network identifier for identifying the network 11b It is. Profile q communicates in accordance with DHCP, such as information for performing open authentication in conformity with IEEE 802.11b, certificate A used in IEEE 802.11b and IEEE 802.1x, and a private key attached to certificate A And NW 11b that is a network identifier for identifying the network 11b.

  The setting procedure execution unit 303 is configured to include a connection information acquisition unit 120 and a connection information selection unit 330.

  The connection information selection unit 330 extracts profile candidates based on a desired network in the profile acquired by the connection information acquisition unit 120. For example, when the desired network is the network 11c, the connection information selection unit 330 extracts profiles p, b, q, j, e, and r related to the network 11c as candidates using graph theory or the like, and extracts them. Among the candidates, profiles p, b, q, and j starting from NW0 are extracted as alternative profile candidates.

  The connection information selection means 330 is configured to extract profile candidates based on attributes related to the alternative profile. For example, when the connection information selection unit 330 extracts the profiles p, b, q, and j as alternative profile candidates as described above, the connection information selection unit 330 sets the ESSID that is an IEEE 802.11b attribute of the profiles p, b, q, and j. Profile candidates are narrowed down, and when the connection unit 140 fails using the profile j whose ESSID is “NSPj”, the profiles p, b, and q are narrowed down as alternative profile candidates. It has become.

  Further, when the connection information selection unit 330 extracts the profiles p, b, and q as alternative profile candidates, the connection information selection unit 330 is temporarily connected to the AP 13 in conformity with IEEE 802.11b, and is connected to the IEEE 802.1x and TLS (Tunneled Transport). When the connection unit 140 tries using a password or the like in accordance with Layer Security) or PEAP (Protected PPP Extensible Authentication Protocol) and fails, the profiles b and q are narrowed down as alternative profile candidates. Thereafter, the connection information selection means 330 determines the profile b when the connection means 140 tries using the certificate A in accordance with IEEE802.1x and succeeds, and the profile b and the profile including the determined profile b are determined. The combination of e is selected.

  The connection information selection unit 330 stores network environment information obtained from the network 11. For example, the network environment information includes ESSID, BSSID, and AC name (Access Concentrator Name) required for communication conforming to IEEE 802.11 and communication conforming to Wi-Fi Protected Access (WPA). CipherSuite and the like necessary for.

  For example, when it is assumed that the connection unit 140 succeeded by using the certificate A in conformity with IEEE802.1x and the candidate profile (profile b, j) has been narrowed down and extracted, the connection information selection unit 330 Compares the AC name included in the PADI packet in response to the PADO packet compliant with PPPoE and the AC name included in the stored network environment information to determine whether or not they match, and profiles b, j Both candidates are finally extracted.

  Here, when the connection information selection unit 330 does not have the network environment information, the connection information selection unit 330, in the process of extracting candidates, for example, when performing communication based on PPPoE, Network environment information may be acquired from the network 11. When the next connection request is made, the connection information selection unit 330 may select a profile based on the acquired network environment information.

  Further, even if profile candidates for a desired network are further narrowed down and extracted, profile candidates may not be finally extracted only with network environment information. Here, an image diagram of a profile combined with a profile in which a desired network is the network 11c is shown in FIG.

  As shown in FIG. 15, the desired network is the network 11c, candidate profiles (profiles b, j) are narrowed down and extracted, and the connection information selection means 330 is a profile combined with the profiles b, j, that is, The profile b and the profile e or the profile j and the profile i are selected based on the profiles e and i. In addition, the connection information selection unit 330 causes the connection unit 140 to communicate with the nearest AP 13 from the communication terminal 300 using the selected profile, and specifies whether one of the APs 13 by trying whether or not communication is possible. It has become.

  For example, when the connection unit 140 communicates with the nearest AP 13 from the communication terminal 300 using the profile j and the profile i and communication fails, the connection information selection unit 330 identifies the profile as the profile b and selects the profile b. It is supposed to be.

  The operation of the communication terminal according to the third embodiment of the present invention will be described below with reference to the drawings. FIG. 16 is a flowchart showing an operation flow of the communication terminal according to the third embodiment of the present invention.

  Of the operations of the communication terminal according to the third embodiment of the present invention, the same operations as those of the communication terminal according to the second embodiment of the present invention are denoted by the same reference numerals.

  First, a connection request for connecting to a desired network or server 12 is made to the connection information acquisition means 120 by the application processing means 102 (S101). In response to this connection request, each profile is acquired from the connection information storage unit 110 by the connection information acquisition unit 120 (S102).

  Next, profile candidates are extracted by the connection information selection means 330 based on the desired network (S301). For example, when the desired network is the network 11c, profiles p, b, q, j, e, and r related to the network 11c are extracted as candidates, and the profile starting from NW0 among the extracted candidates p, b, q, and j are extracted as alternative profile candidates.

  Further, whether or not a profile candidate is selected by the connection information selection unit 330 based on the attribute regarding the alternative profile (S302), and the connection procedure conforming to each protocol of the selected profile is sequentially executed. It is determined whether or not (S303). For example, when profiles p, b, q, and j related to the network 11c are extracted as candidates, a profile that matches the regular expression “NSP *” in the ESSID that is an attribute of IEEE 802.11b is searched and searched. It is determined whether communication is possible by making the connection means 140 try using the profile j.

  If communication is not possible, a profile in the candidate profiles not yet selected is selected and tried by the connection information selection means 330 (S304). For example, when the connection unit 140 is tried using the profile j and communication is not possible, the profile p among the profiles p, b, and q is selected.

  If communication is possible, the connection information selection unit 330 determines whether or not the connection to the desired network has been completed (S305). If the connection is completed, the operation ends. If the connection is not completed, the operation proceeds to S302. Further, when the operation proceeds to S302, there is a branch point in the direction of the profiles p, b, and q of the valid graph data structure shown in FIG.

  As described above, the communication terminal according to the third embodiment of the present invention extracts profile candidates based on a desired network and attributes relating to each alternative profile, and uses usable profiles from the extracted candidates. Therefore, a combination of connection information can be selected by selecting a profile more efficiently.

  In addition, when the next connection request is made, the profile is selected based on the network environment information acquired once. Therefore, the method for selecting the profile is learned every time when connecting to a desired network. Further time reduction can be achieved.

  Furthermore, since the profile is selected based on the profile combined with the profile even if the profile cannot be selected, it is possible to prevent communication failure in connection with a desired network.

  FIG. 17 is a block diagram of a communication terminal according to the fourth embodiment of the present invention. As shown in FIG. 17, the communication terminal 400 is configured to include an input / output unit 101, an application processing unit 402, a setting procedure execution unit 403, a connection information storage unit 410, and a connection unit 140.

  Of the means constituting the communication terminal according to the fourth embodiment of the present invention, the same means as those constituting the communication terminal according to the third embodiment of the present invention are designated by the same reference numerals. A description thereof will be omitted.

  The connection information storage unit 410 includes a directed graph data structure storage unit 411, is configured by a database or the like, and stores a profile in advance. The directed graph data structure storage unit 411 has the directed graph data structure described in the third embodiment of the present invention. The profile stored in the directed graph data structure includes network characteristic information representing the strength of security and network characteristics related to the network.

  Here, the security strength and network characteristics related to the network will be described in detail with reference to FIG. The network characteristics include security characteristics related to security, band characteristics related to bandwidth, delay characteristics related to transmission delay, or communication cost characteristics related to communication costs. A network manager or a telecommunications carrier or the like represents these characteristics numerically.

  The network characteristics include network characteristics relating to each network 11 and inter-network characteristics when connecting via the network 11. For example, as shown in FIG. 18, the network characteristic of the network 11a has a security characteristic value of 1, a band characteristic value of 11, and a delay characteristic value of 1. Hereinafter, the network characteristics are represented as characteristics (1, 11, 1) in the order of security characteristic values, band characteristic values, and delay characteristic values.

  For example, the network characteristic of the network 11a is the characteristic (1, 100, 1), the network characteristic of the network 11b is the characteristic (1, 3, 20), and the network characteristic of the network 11c is the characteristic (7, 100). 1). As the security characteristic value is larger, the confidentiality is higher. As the band characteristic value is larger, the amount of information transmission increases. As the delay characteristic value is larger, the information transmission time is longer. The communication cost characteristic value increases as the value increases.

Further, a security characteristic value representing from the communication terminal 400 to the entrance of the network 11 may be determined. For example, in FIG. 18, the security characteristic value from the communication terminal 400 to the entrance of the network 11a is set to 1, and the security characteristic value from the communication terminal 400 to the entrance of the network 11c is set to 10. In addition,
The security characteristic value may be determined according to the protocol used by the network 11.

  Further, the minimum value of the security characteristic value representing the communication terminal 400 to the inside of the network may be determined based on the network characteristic. For example, in FIG. 18, the minimum security characteristic value from the communication terminal 400 to the network 11a is set to 1 based on the network characteristics of the network 11a, and from the communication terminal 400 to the network 11c based on the network characteristics of the network 11c. The minimum security characteristic value is 7.

  Furthermore, a band characteristic value and a delay characteristic value that are generated by using a protocol that represent the communication terminal 400 to the entrance of the network 11 may be determined. For example, in FIG. 18, the band characteristic value and the delay characteristic value from the communication terminal 400 to the entrance of the network 11a are 11 and 6, respectively, and the band characteristic value and the delay characteristic value from the communication terminal 400 to the entrance of the network 11c are 2 respectively. 38.

  Further, the minimum value of the band characteristic value and the delay characteristic value representing from the communication terminal 400 to the inside of the network may be determined based on the network characteristic. For example, in FIG. 18, the minimum values of the band characteristic value and the delay characteristic value from the communication terminal 400 to the network 11a based on the network characteristics of the network 11a are 11 and 7, respectively, and the communication terminal is based on the network characteristics of the network 11c. The minimum value of the band characteristic value and the delay characteristic value from 400 to the network 11c is set to 2 and 39, respectively.

  A network administrator, a communication carrier, or the like determines network characteristic information included in a profile based on the above-described determined security characteristic value and a band characteristic value and a delay characteristic value generated by using the protocol. For example, the profile for connecting the communication terminal 400 and the network 11a includes characteristics (1, 11, 5). The profile for connecting the network 11b and the network 11c includes characteristics (10, 2, 5).

  The setting procedure execution unit 403 is configured to include a connection information acquisition unit 120 and a connection information selection unit 430.

  As described in the third embodiment of the present invention, the connection information selection unit 430 extracts profile candidates from the profiles acquired by the connection information acquisition unit 120 based on a desired network. Yes. In addition, the connection information selection unit 430 extracts profile candidates based on attributes related to the alternative profile.

  The connection information selection means 430 extracts an appropriate profile based on network characteristic information when there are a plurality of communicable alternative profiles corresponding to a desired network. For example, as shown in FIG. 10, when there are a plurality of alternative profiles such as profile h and profile m, an appropriate profile is extracted based on the network characteristic information included in each profile.

  For example, an evaluation function for evaluating network characteristics is input to the connection information selection unit 430 in advance, and an appropriate profile is extracted based on network characteristic information included in each alternative profile. Here, when the security characteristic value is A, the band characteristic value is B, the delay characteristic value is C, and the communication cost characteristic value is D, the evaluation function f (A, B, C, D) = evaluation value Z It is represented by The security characteristic value A, the band characteristic value B, the delay characteristic value C, and the communication cost characteristic value D are not limited to four, and the evaluation function f (A) = Z is used. Good.

  More specifically, the evaluation function f may be expressed as (1 / A) + (1 / B) + C + D. The connection information selection unit 430 selects a profile having the smallest evaluation value Z in order to select a highly evaluated profile based on the network characteristic information included in each alternative profile. Note that weight a, weight b, weight c, and weight d, which are weight values, are added to the evaluation function so that the user of the communication terminal 400 can adjust the evaluation function f, and the evaluation function f is (1 / A ) × a + (1 / B) × b + C × c + D × d.

  The application processing unit 402 is configured to process an application program including a browser that browses a Web site, and includes a connection information input unit 205 and a network characteristic condition information input unit 406.

  The network characteristic condition information input means 406 receives network characteristic condition information representing conditions relating to network characteristics from the user of the communication terminal 400 and outputs the input network characteristic condition information to the connection information selection means 430. .

  For example, the network characteristic condition information includes information indicating a condition where the security characteristic value A is 3 or more, or information indicating a condition where the security characteristic value A is 5 or more and the band characteristic value B is 3 or more. . Further, the network characteristic condition information input unit 406 may input information representing the above-described weights a to d, and outputs the inputted information representing the weights a to d to the connection information selection unit 430. It is supposed to be.

  The connection information selection unit 430 determines the condition represented by the network characteristic condition information according to the network characteristic condition information output by the network characteristic condition information input unit 406 when there are a plurality of communicable alternative profiles corresponding to the desired network. The profile to satisfy is extracted. The connection information selection unit 430 may extract a profile by combining the network characteristic condition information and the evaluation function f.

  The operation of the communication terminal according to the fourth embodiment of the present invention will be described below with reference to the drawings. FIG. 19 is a flowchart showing an operation flow of the communication terminal according to the fourth embodiment of the present invention. Of the operations of the communication terminal according to the fourth embodiment of the present invention, the same operations as those of the communication terminal according to the third embodiment of the present invention are denoted by the same reference numerals. Also, S101 and S102 which are operations of the communication terminal according to the third embodiment are omitted.

  Profile candidates are extracted by the connection information selection means 430 based on the desired network (S301). Further, profile candidates are selected by the connection information selection unit 430 based on the attribute relating to the alternative profile (S302), and it is determined whether or not there are a plurality of selected profiles and the plurality of profiles are communicable. (S401).

  When a plurality of communication is possible, the connection information selection unit 430 extracts a profile that satisfies the evaluation value or the network characteristic information based on the network characteristic information included in the profile (S402). As a result of using the extracted profile, the connection information selection unit 430 determines whether or not the connection to the desired network is completed (S305). If the connection is completed, the operation ends. If the connection is not completed, the operation proceeds to S302.

  As described above, the communication terminal according to the fourth embodiment of the present invention extracts an appropriate profile based on network characteristic information when there are a plurality of communicable alternative profiles corresponding to a desired network. Therefore, it is possible to communicate with a desired network according to a route on the network having excellent network characteristics.

  Further, since an appropriate profile is extracted according to the network characteristic condition information input by the user or the like, it is possible to communicate with a desired network according to a route on the network according to the user's request.

  A communication program that causes the communication terminal to execute the communication method described above is stored in a recording medium such as a semiconductor memory, a magnetic disk, an optical disk, a magneto-optical disk, or a magnetic tape. The communication program may be read from the recording medium into the communication terminal.

1 is a system configuration diagram of a communication system according to a first embodiment of the present invention. The block block diagram of the communication terminal which concerns on the 1st Embodiment of this invention The figure which shows an example of the profile which concerns on the 1st Embodiment of this invention The image figure of the combination of the profile which concerns on the 1st Embodiment of this invention The image figure which communicates based on the combination of the profile which concerns on the 1st Embodiment of this invention The flowchart which shows the flow of operation | movement of the communication terminal which concerns on the 1st Embodiment of this invention. The system block diagram of the communication system which concerns on the 2nd Embodiment of this invention. The block block diagram of the communication terminal which concerns on the 2nd Embodiment of this invention. The figure which shows an example of the directed graph data structure which concerns on the profile which concerns on the 2nd Embodiment of this invention The figure which shows the alternative connection information which concerns on the 2nd Embodiment of this invention The flowchart which shows the flow of operation | movement of the communication terminal which concerns on the 2nd Embodiment of this invention. System configuration diagram of a communication system according to a third embodiment of the present invention The block block diagram of the communication terminal which concerns on the 3rd Embodiment of this invention. The figure which shows an example of the directed graph data structure which concerns on the profile which concerns on the 3rd Embodiment of this invention The image figure of the profile combined with the profile which concerns on the 3rd Embodiment of this invention The flowchart which shows the flow of operation | movement of the communication terminal which concerns on the 3rd Embodiment of this invention. The block block diagram of the communication terminal which concerns on the 4th Embodiment of this invention Detailed illustration of network characteristics The flowchart which shows the flow of operation | movement of the communication terminal which concerns on the 4th Embodiment of this invention. System configuration diagram of conventional communication system The figure which shows the connection information for connecting via the some network which the conventional communication terminal stores

Explanation of symbols

8 Authentication information 9, 9a, 9b, 9c, 9d Connection information 11, 11a, 11a, 11b, 11c, 11d, 11e, 11f, 11g, 11h, 76 Network 12, 12a, 12b, 77 Servers 13, 13a, 11b, 13c, 13d, 13e, 13f AP
72 Proxy 73 LAC
74 Relay IP network 75 LNS
100, 200, 300, 400, 71 Communication terminal 101 Input / output means 102, 202, 402 Application processing means 103, 203, 303, 403 Setting procedure execution means 110, 210, 310, 410 Connection information storage means 120 Connection information acquisition means 130, 230, 330, 430 Connection information selection unit 140 Connection unit 205 Connection information input unit 211, 311, 411 Directed graph data structure storage unit 231 First connection information selection unit 406 Network characteristic condition information input unit 1000, 2000, 3000 Communication system

Claims (16)

Connection information input means for inputting connection information for connecting to a plurality of networks ;
Connection information storage means having a directed graph data structure storage unit for storing connection information input by the connection information input means in a directed graph data structure represented by a directed graph ;
Connection information acquisition means for acquiring connection information from the connection information storage means when a connection request for connecting to a desired network is made;
Connection information selection means for selecting a combination of connection information corresponding to the desired network based on the directed graph data structure from the connection information acquired by the connection information acquisition means;
Communication terminal, wherein the obtaining Bei and connection means for connecting to the desired network according to the combination of the connection information selected by the connection information selection means. The connection information storage means stores a plurality of alternative connection information, which are connection information that can be substituted for each other, and the connection means connects to the desired network based on a combination of connection information including the one alternative connection information. when failed, the connection information selection means, the communication terminal according to claim 1, characterized in that selecting a combination of connection information including the other of said alternative connection information. The connection information selection unit extracts the connection information candidates based on the desired network and attributes relating to each of the alternative connection information, and selects usable connection information from the extracted candidates. Item 3. The communication terminal according to Item 2 . The connection information selection means acquires network environment information obtained from the network from the network,
The next time the connection request is made, the connection information selection means any of claims 1, characterized in that selecting a combination of the connection information based on the acquired network environment information to Claim 3 The communication terminal described in 1. The connection information selection unit selects a combination of the connection information based on connection information combined with the connection information when the connection information selection unit cannot select the connection information from the candidates. The communication terminal according to claim 3 or claim 4 . The connection information includes network characteristic information representing network characteristics,
The connection information selection means, when the desired plurality of alternative connection information communicable corresponding to the network exists, according claim 2, characterized in that to extract the connection information based on the network characteristic information Item 6. The communication terminal according to any one of Items 5 to 5 . The communication terminal comprises network characteristic condition information input means for inputting network characteristic condition information representing a condition relating to the network characteristic,
The communication terminal according to claim 6 , wherein the connection information selection unit extracts connection information based on the network characteristic condition information input by the network characteristic condition information input unit. Connection information input means for inputting connection information for connecting to a plurality of networks ;
Connection information storage means having a directed graph data structure storage unit for storing connection information input by the connection information input means in a directed graph data structure represented by a directed graph ;
Connection information acquisition means for acquiring connection information from the connection information storage means when a connection request for connecting to a desired network is made;
Connection information selection means for selecting connection information corresponding to the desired network from the connection information acquired by the connection information acquisition means;
In a communication terminal comprising connection means for connecting to the desired network according to connection information selected by the connection information selection means,
The connection information selection means selects a combination of connection information corresponding to the desired network based on the directed graph data structure from the connection information acquired by the connection information acquisition means,
The communication method is characterized in that the connection means connects to the desired network according to a combination of connection information selected by the connection information selection means. The connection information storage means stores a plurality of alternative connection information, which are connection information that can be substituted for each other, and the connection means connects to the desired network based on a combination of connection information including the one alternative connection information. 9. The communication method according to claim 8 , wherein when the connection information is unsuccessful, the connection information selection unit selects a combination of connection information including the other alternative connection information. The connection information selection unit extracts the connection information candidates based on the desired network and attributes relating to each of the alternative connection information, and selects usable connection information from the extracted candidates. Item 10. The communication method according to Item 9 . The connection information selection means acquires network environment information obtained from the network from the network,
The next time the connection request is made, the connection information selection means any of claim 8, wherein selecting a combination of the connection information based on the acquired network environment information to Claim 10 The communication method described in 1. The connection information selection unit selects a combination of the connection information based on connection information combined with the connection information when the connection information selection unit cannot select the connection information from the candidates. Item 12. The communication method according to item 10 or item 11 . The connection information includes network characteristic information representing network characteristics,
The connection information selection means, when the desired plurality of alternative connection information communicable corresponding to the network exists, according claim 9, characterized in that to extract the connection information based on the network characteristic information Item 13. The communication method according to any one of Items 12 to 12 . The communication terminal comprises network characteristic condition information input means for inputting network characteristic condition information representing a condition relating to the network characteristic,
14. The communication method according to claim 13 , wherein the connection information selection unit extracts connection information based on the network characteristic condition information input by the network characteristic condition information input unit. The communication program which makes a communication terminal perform the communication method in any one of Claim 8 to 14 . Recording medium on which a communication program is stored for executing the method of communication according to the communication terminal to any one of claims 8 to claim 14.

Images