JP4281533B2 - Wireless communication system and base station security method - Google Patents

Description

  The present invention relates to a radio communication system to which a base station security method for ensuring security of a radio base station is applied, and a base station security method.

  A wireless communication system such as a wide area mobile phone system includes a plurality of wireless base stations that perform wireless communication with each wireless terminal such as a mobile phone. In general, a radio base station is firmly fixed to a building or the like when performing installation work, so it is difficult to move the radio base station without permission. However, if the radio base station is further downsized, the radio base station may be stolen and moved to a completely different location.

  In general, a host device such as a control station that controls the radio base stations in a bundle is connected to the radio base station through a dedicated transmission path. Therefore, when the radio base station is moved to another location, it is difficult to secure a transmission path with the host device. However, the wireless base station is connected to the LAN, and connected to the host device 40 via the LAN and the Internet. For example, the transmission path is converted to IP (Internet Protocol), and transmission between the wireless base station and the host device is performed. When the path is not a dedicated transmission path, it is easy to secure a transmission path between the radio base station and the host device. Therefore, when the wireless base station is stolen and moved to another place without permission, the wireless base station can communicate with the host device and operate normally.

  Note that the radio base station is generally installed and operated based on the approved content based on the telecommunication related laws and regulations. Therefore, it is not allowed to move the installation location of the radio base station without permission.

  As a device for preventing device theft, Patent Document 1 describes a theft prevention device for preventing theft of an information terminal such as a personal computer. The anti-theft device described in Patent Document 1 determines whether or not an information terminal has been taken out based on outputs from a distance sensor, an illumination sensor, a gyro sensor, or the like. The anti-theft device issues an alarm when determining that the information terminal has been taken out. The anti-theft device requests input of a password when the power is turned on again, and turns off the information terminal when the correct password is not input. The anti-theft device requests input of a decryption password, and reads and decrypts the encrypted file only when the correct decryption password is input.

  Patent Document 2 describes an anti-theft device that prevents the theft of construction machines. The anti-theft device described in Patent Document 2 requires an input of a personal identification code when an intruder operates a power source of a construction machine. The anti-theft device makes it impossible to start the engine of the construction machine when it detects that the password has been input by a predetermined number of times. In addition, the anti-theft device starts the photographing of the intruder in the cab by operating the camera. The anti-theft device transmits image data and an alarm signal remotely.

JP 2000-155876 A (page 4-8, Fig. 1-3) Japanese Patent Laid-Open No. 2001-98587 (page 2-4, FIG. 1-2)

  If the antitheft device described in Patent Literature 1 or Patent Literature 2 is applied to a radio base station in a radio communication system, it is possible to suppress the theft of the radio base station. In addition, even if the wireless base station is stolen and activated by a third party, it is possible to prevent a third party from activating the wireless base station without permission by requiring a password input. it can. However, if the password is decrypted, the radio base station is activated and the radio base station becomes usable.

  Therefore, an object of the present invention is to provide a radio communication system and a base station security method capable of preventing the radio base station from being usable when the radio base station is stolen and moved without permission.

  A radio communication system according to the present invention is a radio communication system in which a radio base station that performs radio communication with a radio terminal is connected to be able to communicate with a control device via a transmission path, and the radio base station is turned on. A permission request means for transmitting a permission request signal requesting permission of activation to the control device, a permission determination means for determining whether or not a permission signal indicating permission of activation is received from the control device, and a permission determination. Base station activation means for activating the own station when the means determines that the permission signal has been received, and the control device comprises activation permission means for transmitting the permission signal to the radio base station.

  When the wireless base station is reset, the wireless base station has a reset determining means for determining whether the cause of the reset is that the power is turned on, and the permission request means is that the cause of the reset is that the power is turned on If the reset determination means determines, a permission request signal may be transmitted to the control device. According to such a configuration, when the power of the radio base station apparatus is turned on, an activation permission request is made to the control apparatus, so even if the power of the radio base station apparatus is turned on, the permission information is received from the control apparatus. Otherwise, the radio base station device cannot be activated. Therefore, in order to use a radio base station apparatus that has moved without permission, it is necessary to turn on the power again, but even if the power is turned on, a third party is prevented from using the radio base station apparatus. Can do.

  When the transmission path is an IP network including a LAN connecting the radio base station, the radio base station includes an IP address notifying unit that notifies the control device of a private IP address in response to an inquiry from the control device, and is controlled. When the device receives a permission request signal from the wireless base station, the device includes an IP address inquiry unit that inquires the wireless base station about a private IP address, and the activation permission unit stores the private IP address notified from the wireless base station in advance. The permission signal may be transmitted when the private IP address is matched. According to such a configuration, even if the communication network connecting the radio base station apparatus and the control apparatus is IP, a third party connects the radio base station apparatus to the control apparatus and activates it. Can be prevented.

  The wireless base station has a personal information storing means for storing personal information, an external equipment connection detecting means for detecting whether or not an external equipment for outputting personal information is connected, and the external equipment is connected to the external equipment. And a password information comparing means for comparing the password information inputted from the external device with the password information stored in the password information storing means when detected by the connection detecting means, and the base station starting means is the password information comparing means. May be configured to activate the local station when it is determined that the password information matches. According to such a configuration, since an external terminal can be connected to the radio base station apparatus and the activation operation can be performed, a maintenance worker or the like can easily activate the radio base station apparatus during maintenance work. Therefore, misuse of the radio base station apparatus can be prevented and work can be facilitated during maintenance work.

  The permission request means may be configured to transmit a permission request signal to the control device when the external device connection detection means detects that no external device is connected to the radio base station. According to such a configuration, when an external device is not connected to the radio base station apparatus, the radio base station apparatus can be connected to the control apparatus and activated if permission information from the control apparatus is not received. Therefore, it is possible to prevent the wireless base station device from being misused by being connected to the control device.

  The wireless base station includes a personal identification information transmitting means for transmitting personal identification information input from an external device that outputs personal identification information to the control device, and the control device stores in advance the personal identification information received from the wireless base station. A password information determining means for determining whether or not the information matches the information, and the activation permission means determines that the password information received from the wireless base station and the password information stored in advance match the password information determining means The permission information may be configured to be transmitted to the radio base station. According to such a configuration, even when an external terminal is connected to the radio base station device and activated, if the permission information from the control device is not received, the radio base station device is connected to the control device and activated. Therefore, the security of the radio base station apparatus can be enhanced.

  The wireless base station includes individual number transmission means for transmitting the individual number of the own station to the control device together with the personal identification information input from the external device that outputs the personal identification information, and the control device receives the personal identification information received from the wireless base station and Individual number determination means for determining whether or not the individual number matches the pre-stored personal identification information and the individual number, and the activation permitting means stores in advance the personal identification information and the individual number received from the radio base station. When the personal number determination means determines that the personal identification information and the individual number match, the permission information may be transmitted to the radio base station. According to such a configuration, the control device uses the individual number of the radio base station device in addition to the password information to determine whether to permit activation of the radio base station device. Can be strengthened.

  A base station security method according to the present invention provides a base for ensuring the security of a radio base station in a radio communication system in which a radio base station that performs radio communication with a radio terminal is communicably connected to a control device via a transmission path. When the radio base station is turned on, the station security method transmits a permission request signal requesting activation permission to the control device, and the control device transmits the permission request signal to the radio base station according to the permission request signal. A permission signal indicating permission of activation is transmitted to the radio base station, and when the radio base station receives the signal, the own station is activated.

  According to another aspect of the base station security method of the present invention, a wireless base station that performs wireless communication with a wireless terminal is wirelessly connected to a control apparatus via an IP network including a LAN that connects the wireless base stations. A base station security method for ensuring the security of a radio base station in a communication system, when the radio base station is turned on, transmits a permission request signal requesting permission for activation to the control device, When the control device receives the permission request signal from the wireless base station, the wireless base station inquires about the private IP address, the wireless base station notifies the private IP address to the control device in response to the inquiry from the control device, and the control device If the private IP address notified from the wireless base station matches the private IP address stored in advance, the wireless It transmits a permission signal indicating the permission of the activation of the earth station to the radio base station, characterized by starting the own station when the radio base station receives the permission signal.

  According to the present invention, even if the radio base station apparatus is turned on, if the permission information from the control apparatus is not received, the radio base station apparatus cannot be connected to the control apparatus and started. Even if a person moves the radio base station apparatus without permission and turns on the power, it cannot be used. Therefore, when the wireless base station is stolen and moved without permission, it is possible to prevent the wireless base station from being connected to the host device and being usable.

Embodiment 1 FIG.
Hereinafter, a first embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing an example of a configuration of a wireless communication system to which a base station security method according to the present invention is applied. The wireless communication system shown in FIG. 1 includes a plurality of wireless base stations 10 and a host device 40 such as a control station. Further, as shown in FIG. 1, each radio base station 10 and the host device 40 are connected by a transmission path 30. Further, the host device 40 is connected to the public telephone network 60.

  As illustrated in FIG. 1, the radio base station 10 transmits a signal via a transmission path interface unit 11 for communication via a transmission path 30, a baseband unit 12 for processing a baseband signal, and an antenna unit 19. Power is supplied to each unit in the radio base station 10, a radio unit 13 that transmits and receives, a control unit 14 that controls each unit in the radio base station 10, a power-on detection unit 15 that detects whether power is turned on, and the like. A power supply unit 16 and a connector 17 for connecting an external terminal are included.

  The transmission path interface unit 11 receives data transmitted by the host device 40 via the transmission path 30. The transmission path interface unit 11 separates the signal received from the host device 40 into a control signal for controlling each unit in the radio base station 10 and a traffic signal other than the control signal. Further, the transmission path interface unit 11 outputs the separated control signal to the control unit 14. The transmission path interface unit 11 outputs a baseband signal that is a separated traffic signal to the baseband unit 12. Further, the transmission path interface unit 11 transmits the traffic signal from the baseband unit 12 to the higher-level device 40 via the transmission path 30.

  The baseband unit 12 performs signal processing of the baseband signal from the transmission path interface unit 11. Then, the baseband unit 12 outputs the signal after signal processing to the radio unit 13. The baseband unit 12 performs signal processing on the signal from the wireless unit 13. Then, the baseband unit 12 outputs the signal-processed signal to the transmission path interface unit 11 as a baseband signal.

  As shown in FIG. 1, an antenna unit 19 is connected to the wireless unit 13. The radio unit 13 modulates the signal from the baseband unit 12 and converts it to a radio frequency signal. Then, the wireless unit 13 outputs the modulated signal to the antenna unit 19. The antenna unit 19 transmits the input signal as a radio wave. Further, the wireless unit 13 receives a signal as a radio wave from the wireless terminal via the antenna unit 19. The radio unit 13 demodulates the received signal and outputs the demodulated signal to the baseband unit 12.

  The control unit 14 controls each unit in the radio base station 10 such as the baseband unit 12 and the radio unit 13 based on a control signal from the transmission path interface unit 11. A maintenance connector 17 is connected to the control unit 14. Therefore, a maintenance worker of the radio base station 10 can perform maintenance work by connecting a console (external terminal) such as a personal computer to the connector 17.

  The power on detection unit 15 detects whether the radio base station 10 is turned on. In addition, the power-on detection unit 15 outputs a power-on detection signal indicating that power-on has been detected to the control unit 14.

  As shown in FIG. 1, the power supply unit 16 is connected to a power supply unit 18 in the radio base station. The power supply unit 16 converts the power from the power supply unit 18 into a voltage and supplies the power to each unit in the radio base station 10 such as the baseband unit 12 and the radio unit 13.

  For example, the power supply unit 18 is a commercial power outlet in a building where a wireless base station is installed. In this case, the power supply unit 18 supplies 100 V AC power to the power supply unit 16, for example. The power supply unit 16 converts the AC power from the power supply unit 18 into 3.3V DC or 1.5V DC that can be supplied to an IC or the like, and a radio base station such as the baseband unit 12 or the radio unit 13 Supply to each unit in 10.

  The host device (control device) 40 is a radio control device that bundles the radio base stations 10 and controls them via the transmission path 30. In addition, as shown in FIG. 1, a monitoring console 50 used by a supervisor is connected to the host device 40.

  The monitoring console 50 is installed in a maintenance center or the like provided for each region such as a prefecture unit. A maintenance center monitor monitors the radio communication system including the radio base stations 10 for 24 hours by operating the monitor console 50 or checking the display of the monitor console 50. In addition, a maintenance center or the like where the monitoring console 50 is installed is strictly controlled for entering and leaving the building, and third parties cannot enter.

  In this embodiment, the permission request means, permission judgment means, and IP address notification means are realized by the control unit 14 and the transmission path interface unit 11. The base station activation means is realized by the control unit 14. The activation permission unit and the IP address inquiry unit are realized by a control unit (not shown) and a network interface unit (not shown) of the host device 40.

  FIG. 2 is a block diagram illustrating an example of the configuration of the control unit 14 and the power-on detection unit 15. As shown in FIG. 2, the control unit 14 includes an OR circuit 103 that outputs a logical sum of input signals, a memory 115 that stores a program, a CPU 113 that operates according to the program, and a serial interface for connecting external devices. Unit 117, baseband interface unit 118 that inputs / outputs signals to / from baseband unit 12, and radio unit interface unit 119 that inputs / outputs signals to / from radio unit 13.

  Further, as shown in FIG. 2, in the control unit 14, the CPU 113, the memory 115, the serial interface unit 117, the baseband interface unit 118, and the wireless unit interface unit 119 are connected by a CPU bus 116. Yes. A connector 17 is connected to the serial interface unit 117.

  The CPU 113 executes processing for controlling each unit such as the baseband unit 12 and the wireless unit 13 in accordance with a program stored in the memory 115.

  The OR circuit 103 outputs a logical sum (OR) signal of the input signals to the CPU 113 as the reset signal 112. The OR circuit 103 receives a reset pulse signal from the reset pulse generation circuit 102. Further, a reset switch 104 is connected to the OR circuit 103, and the OR circuit 103 receives a signal output from the reset switch 104. For example, when the reset switch 104 is pressed by a maintenance worker, the reset switch 104 outputs a signal.

  Further, the radio base station 10 has a function of detecting an abnormality inside the radio base station 10, and the OR circuit 103 inputs an abnormality detection signal 105 when an abnormality is detected. The monitoring console 50 has a function of remotely resetting each radio base station 10, and the OR circuit 103 inputs a remote reset signal 106 from the monitoring console 50.

  In this embodiment, the reset pulse signal, the output signal of the reset switch 104, the abnormality detection signal 105, and the remote reset signal 106 are signals that become high after being low for a predetermined time.

  As shown in FIG. 2, the power-on detection unit 15 includes a voltage drop detection circuit 101 that detects a voltage drop, a reset pulse generation circuit 102 that generates a reset pulse signal, a delay circuit 111, and a D-type flip-flop. 107.

  The voltage drop detection circuit 101 detects a drop in the power supply voltage from the power supply unit 16 and a power-off from the power supply unit 16. When the power is turned on, the reset pulse generation circuit 102 outputs a reset pulse signal that becomes a low level signal for a predetermined time. The delay circuit 111 delays the reset pulse signal from the reset pulse generation circuit 102 by a predetermined time and outputs it to the D-type flip-flop 107.

  As shown in FIG. 2, the reset pulse signal from the reset pulse generation circuit 102 is input to the D terminal 108 of the D-type flip-flop 107 via the delay circuit 111. A reset signal 112 from the OR circuit 103 is input to the clock terminal 109.

  When the signal input to the clock terminal 109 rises, the D flip-flop 107 latches the signal level of the D terminal 108 and outputs it to the Q terminal 110. An output signal from the Q terminal 110 is input to the input port terminal 114 of the CPU 113. The output signal output from the Q terminal 110 by the D flip-flop 107 corresponds to a power-on detection signal.

  When the reset signal 112 that rises after being low level for a predetermined time is output from the reset pulse generation circuit 102, the signal that is input to the D terminal 108 is high level after the signal that is input to the clock terminal 109 rises. become. Therefore, the output of the Q terminal 110 becomes a low level. When the output signal of the reset switch 104, the abnormality detection signal 105 or the remote reset signal 106 is input, the input signal of the D terminal 108 is at a high level. Therefore, when these signals are input, the output of the Q terminal 110 becomes a high level.

  Next, the operation will be described. FIG. 3 is a flowchart illustrating an example of processing of the radio base station 10. When the CPU 113 is reset (restarted), the CPU 113 executes initial processing of the radio base station 10 (step S11).

  In the initial process of step S11, the CPU 113 loads a program from a nonvolatile memory (not shown) to a memory 115 that is a RAM (Random Access Memory). The CPU 113 starts processing according to the program loaded in the RAM, and confirms the normality of each hardware unit in the radio base station 10 such as a memory test. Further, the CPU 113 performs setting processing of each hardware unit such as parameter setting, and makes each hardware unit operable. Then, the CPU 113 activates each hardware unit in units, and transmits information indicating that each hardware unit has started operation to the higher-level device 40 via the transmission path 30.

  In the initial process, the radio base station 10 establishes a cryptographic association with the host device 40. For example, the radio base station 10 performs encryption key exchange and the like in the initial process so that encrypted data can be transmitted and received with the host device 40.

  When the initial process is executed, the control unit 14 determines whether or not the reset type is a reset at power-on (step S12).

  When the radio base station 10 is powered on, the reset pulse generation circuit 102 generates a reset pulse signal that goes high after a low level period of, for example, about 1 second. The reset pulse signal passes through the OR circuit 103 and becomes the reset signal 112. The delay circuit 111 delays the reset pulse signal from the reset pulse generation circuit 102 by an extremely short time (for example, 1 microsecond) and outputs it to the D terminal 108 of the D-type flip-flop 107. Since the reset signal 112 is input without delay to the clock terminal 109 of the D-type flip-flop 107, the output of the Q-terminal 110 of the D-type flip-flop 107 becomes low level.

  An output signal from the Q terminal 110 is input to the input port terminal 114. Accordingly, in step S12, the CPU 113 can determine that the type of reset is reset at power-on by confirming that the level of the signal input to the input port terminal 114 is low. Note that the input level of the D terminal 108 of the D-type flip-flop 107 becomes a high level after an extremely short time has elapsed since the latch by the reset signal 112 was performed. Therefore, when the output signal of the reset switch 104, the abnormality detection signal 105 or the remote reset signal 106 is output, the output of the Q terminal 110 of the D-type flip-flop 107 is at a high level.

  When determining that the reset is performed when the power is turned on, the control unit 14 sends a request signal (permission request signal) for requesting permission to start the radio base station 10 from the transmission path interface unit 11 via the transmission path 30. It transmits to the host device 40 (step S13).

  When receiving the request signal, the host device 40 causes the monitoring console 50 to display message information indicating that a startup permission request has been made from the radio base station 10. For example, base station identification information such as a base station number and a base station name of a radio base station that has requested for start-up is displayed on the display unit of the monitoring console 50. When the maintenance center monitor confirms the display on the monitoring console 50 and determines that the start-up of the radio base station 10 (call processing control enabled state, that is, activation) may be permitted, An instruction to permit startup is input by operating the monitoring console 50. When the startup permission instruction is input, the higher-level device 40 transmits a permission signal indicating that the startup is permitted to the radio base station 10 via the transmission path 30.

  Even when the radio base station 10 is stolen and moved without permission and the power is turned on again, the message information of the start permission request is displayed on the monitoring console 50. However, in such a case, since the startup request from the radio base station 10 is an unexpected request, the maintenance center monitor does not input the startup permission instruction. Note that the supervisor inputs a startup permission instruction when receiving a notification that a power-off or power-on operation is performed for maintenance work or the like in advance.

  The control unit 14 of the radio base station 10 determines whether a permission signal has been received from the higher-level device 40 (step S14). If it is determined that the permission signal has not been received, the control unit 14 waits without executing the start-up process of the radio base station 10 until the permission signal is received. Accordingly, if the monitoring console 50 is not operated to permit the start-up of the monitor, the control unit 14 is in a waiting state forever.

  If it is determined that the permission signal has been received, the control unit 14 receives signals from the host device 40 and each wireless terminal, and starts executing the call processing (step S15).

  When determining in step S12 that the power-on detection signal input to the input port terminal 114 from the power-on detection unit 15 is at a high level, the CPU 113 determines that the reset type is not a reset at power-on. To do. That is, the control unit 14 determines that the reset is based on the output signal of the reset switch 104, the abnormality detection signal 105 or the remote reset signal 106.

  If it is determined that the reset is not performed when the power is turned on, the control unit 14 immediately proceeds to step S15. If the reset is not performed when the power is turned on, that is, in the case of a reset operation or a remote reset during normal maintenance work, the radio base station 10 starts up without waiting for reception of a permission signal.

  As described above, according to the present embodiment, upon detecting that the radio base station 10 is powered on, the radio base station 10 transmits a request signal for starting up to the higher-level device 40. The radio base station 10 starts call processing that is normal processing of the radio base station 10 only when information indicating that the start-up is permitted is received from the higher-level device 40. If the radio base station 10 does not start the normal process if it does not receive startup permission information from the host device 40 even when the power is turned on, the third party moves the radio base station 10 without permission to However, the wireless base station 10 cannot be used even if it is turned on.

  The radio base station 10 and the host device 40 may be connected by a dedicated transmission line 30, but the radio base station 10 is connected to the LAN and connected to the host device 40 via the LAN and the Internet. Good. When the transmission path between the radio base station 10 and the host device 40 is an IP network, it is preferable that the host device 40 also detects whether the private IP address of the radio base station 10 has changed.

  When the transmission path 30 is converted to IP, when the radio base station 10 is always connected to the IP network, the IP address is generally not changed during the operation of the radio communication system. However, when the wireless base station 10 is connected to the host device 40 via a LAN that is not always connected, the private IP address is changed when the wireless base station 10 is moved and connected to another LAN. There is a high possibility of being.

  Therefore, the host device 40 stores in advance the private IP address of the radio base station 10 in the LAN to which each radio base station 10 is connected. When the host apparatus 40 receives the startup request from the radio base station 10, it inquires the radio base station 10 about the private IP address. The radio base station 10 notifies the higher level apparatus 40 of the private IP address in response to the inquiry. If the notified private IP address matches the pre-stored private IP address, the higher-level device 40 transmits a startup permission signal. If not, the higher-level device 40 determines the installation location of the radio base station 10. It judges that it has moved and does not transmit a permission signal.

  In addition, in order to prevent the wireless base station 10 from being stolen or arbitrarily moved, the wireless base station 10 or the antenna unit 19 is fixed using a special mounting bracket that cannot be removed without using a special tool. Anyway. In addition, a mechanical key may be provided in a facility such as a building where the wireless base station 10 is installed to prevent the wireless base station 10 from being stolen or arbitrarily moved.

Embodiment 2. FIG.
Next, a second embodiment of the present invention will be described with reference to the drawings. FIG. 4 is a block diagram showing another configuration example of the wireless communication system according to the present invention. As shown in FIG. 4, the wireless communication system includes a console 20 that is an external device used by a maintenance worker, in addition to the configuration of the first embodiment.

  The console 20 is a terminal such as a personal computer. The console 20 is connected to a connector 21. That is, a maintenance worker of the radio base station 10 can connect the console 20 to the radio base station 10 by connecting the connector 21 to the connector 17 of the radio base station 10.

  In the present embodiment, the radio base station 10 stores a password in advance in a nonvolatile memory. The configurations and operations of the power supply unit 18, the antenna unit 19, the host device 40, the monitoring console 50, and the public telephone network 60 are the same as in the case of the first embodiment.

  The password information storage means is realized by a nonvolatile memory. The external device connection detection means and the password information comparison means are realized by the control unit 14. The password information transmitting means is realized by the control unit 14 and the transmission path interface unit 11. The password information determination means is realized by the control unit and the network interface unit of the host device 40.

  Next, the operation will be described. FIG. 5 is a flowchart showing another example of processing of the radio base station 10. In FIG. 5, the process of step S21 and step S22 is the same as the process of step S11 and step S12 in the first embodiment.

  If it is determined in step S22 that the reset is performed when the power is turned on, the control unit 14 detects whether or not the console 20 is connected to the radio base station 10 (step S23). When detecting that the console 20 is connected, the control unit 14 requests the console 20 to input a personal identification number.

  When an input from the radio base station 10 is requested, the console 20 displays message information indicating that a password is requested. For example, the console 20 displays a password input screen or the like on a display unit (not shown). The maintenance worker operates the console 20 and inputs a personal identification number. When the password is input by the maintenance worker, the console 20 outputs the input password to the radio base station 10.

  The control unit 14 determines whether or not a correct password has been input from the console 20 (step S24). That is, the control unit 14 determines whether or not the password entered from the console 20 matches the password stored in the nonvolatile memory. If it is determined that the passwords do not match, or if it is determined that the password has not been input from the console 20, the control unit 14 waits without executing the start-up process of the radio base station 10. Therefore, when a correct password is not input from the console 20, the control unit 14 is in a waiting state forever.

  If it is determined that the correct password has been input, the radio base station 10 receives a signal from the host device 40 and each radio terminal, and starts executing the call process (step S27).

  If it is determined in step S23 that the console 20 is not connected, the control unit 14 transmits a request signal for permission to start up the radio base station 10 according to the same process as in step S13 in the first embodiment. The data is transmitted to the host device 40 via the transmission line 30. In this case, the control unit 14 executes the same process as step S14 in the first embodiment. That is, it is determined whether a permission signal has been received (step S26). When the permission signal is received, the call processing is started (step S27).

  As described above, according to the present embodiment, when the console 20 is connected when the power is turned on, the radio base station 10 requests the console 20 to input a personal identification number. Then, the radio base station 10 starts executing the call process only when a correct password is input from the console 20. Since an external terminal can be connected to the radio base station 10 and the activation operation can be performed, a maintenance worker or the like can easily activate the radio base station 10 during maintenance work. Therefore, misuse of the radio base station 10 can be prevented and work can be facilitated during maintenance work.

  When the transmission path between the radio base station 10 and the host apparatus 40 is an IP network, the host apparatus 40 further inputs a password when determining that the installation location of the radio base station 10 has been moved. If the request is made and a proper password is transmitted from the radio base station 10, a start permission signal may be transmitted.

  In the present embodiment, the case where the wireless base station 10 is activated using a personal identification number has been described. However, the wireless base station 10 is started up using personal identification information such as a personal identification code including a symbol and a password. May be. In addition, when not requesting password information only at the time of starting operation from the console 20 but when requesting startup permission to the host apparatus 40 when the console 20 is not connected, the host apparatus 40 is requested to transmit the password information together with the permission request. You may make it do. The radio base station 10 may start the call process only when correct password information is received together with the permission signal from the higher-level device 40.

  In addition, when the password information is used, the password information for verification may be registered in advance on the higher-level device 40 or the monitoring console 50 side instead of being registered in advance on the radio base station 10 side. Then, the password information input from the console 20 may be transmitted to the host device 40, and the password information may be verified on the host device 40 or the monitoring console 50 side.

  Further, in the present embodiment, the same password information for verification can be used for all the radio base stations 10, but different password information may be used for each radio base station 10. In that case, for example, each wireless base station 10 stores an individual number such as a manufacturing number of the wireless base station 10. On the host device 40 or the monitoring console 50 side, the password information is stored in pairs with the individual number. Then, the radio base station 10 transmits the individual number together with the password information input from the console 20 to the higher-level device 40. The host device 40 or the monitoring console 50 side compares the password information and the individual number, and if they match, the activation of the radio base station is permitted.

  Further, the polarity of the signal in each of the above embodiments is an example, and the polarity may be opposite to that in each of the above embodiments. For example, when the reset signal 112 changes from a high level to a low level, the CPU 113 may be reset, and accordingly, the D-type flip-flop 107 may perform a latch operation at the falling edge of the clock signal. .

  The present invention is applicable to a radio communication system including a radio base station, and is particularly useful when the radio base station is downsized.

It is a block diagram which shows an example of a structure of the radio | wireless communications system to which the base station security method by this invention is applied. It is a block diagram which shows an example of a structure of a control part and a power-on detection part. It is a flowchart which shows an example of a process of a wireless base station. It is a block diagram which shows the other structural example of a radio | wireless communications system. It is a flowchart which shows the other example of a process of a wireless base station.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Radio base station 11 Transmission path interface part 12 Baseband part 13 Wireless part 14 Control part 15 Power-on detection part 16 Power supply part 18 Power supply part 19 Antenna part 30 Transmission path 40 Host apparatus 50 Monitoring console 60 Public telephone network 101 Voltage drop Detection circuit 102 Reset pulse generation circuit 103 OR circuit 107 D-type flip-flop 111 Delay circuit 113 CPU
114 Input port terminal 115 Memory 116 CPU bus 117 Serial interface unit 118 Baseband interface unit 119 Radio unit interface unit

Claims (9)

In a wireless communication system in which a wireless base station that performs wireless communication with a wireless terminal is communicably connected to a control device via a transmission path,
The radio base station is
Permission request means for transmitting a permission request signal requesting permission of activation to the control device when the power is turned on;
Permission determining means for determining whether or not a permission signal indicating permission of activation is received from the control device;
When it is determined that the permission determination means has received a permission signal, the base station activation means for activating the own station,
The controller is
A wireless communication system comprising activation permission means for transmitting the permission signal to the wireless base station. The radio base station includes a reset determination unit that determines whether the cause of the reset is that the power is turned on when the radio base station is reset,
The wireless communication system according to claim 1, wherein the permission request means transmits a permission request signal to the control device when the reset determination means determines that the cause of the reset is that the power is turned on. The transmission path is an IP network including a LAN that connects wireless base stations,
The radio base station includes an IP address notification means for notifying the control device of a private IP address in response to an inquiry from the control device,
The control device comprises IP address inquiry means for inquiring a private IP address from the radio base station when receiving a permission request signal from the radio base station,
The wireless communication system according to claim 1 or 2, wherein the activation permission means transmits a permission signal when the private IP address notified from the wireless base station matches a private IP address stored in advance. The radio base station
Password information storage means for storing password information;
An external device connection detection means for detecting whether or not an external device that outputs personal identification information is connected;
When the external device connection detecting means detects that the external device is connected, the password information comparison for comparing the password information input from the external device and the password information stored in the password information storage means Means and
The wireless communication system according to any one of claims 1 to 3, wherein the base station activation unit activates the own station when the personal identification information comparison unit determines that the personal identification information matches. The wireless communication system according to claim 4, wherein the permission request means transmits a permission request signal to the control device when the external device connection detection means detects that no external device is connected to the wireless base station. The wireless base station includes a password information transmitting unit that transmits the password information input from an external device that outputs the password information to the control device,
The control device includes password information determination means for determining whether the password information received from the wireless base station matches the password information stored in advance.
The activation permission means transmits permission information to the radio base station when the password information determination means determines that the password information received from the radio base station matches the password information stored in advance. The wireless communication system according to any one of claims 1 to 3. The radio base station includes individual number transmission means for transmitting the individual number of the own station to the control device together with the personal identification information input from the external device that outputs the personal identification information,
The control device includes individual number determination means for determining whether the password information and the individual number received from the wireless base station match the password information and the individual number stored in advance,
The activation permission means, when the individual number determination means determines that the personal identification information and individual number received from the wireless base station and the personal identification information and individual number stored in advance match, The wireless communication system according to claim 1, wherein the wireless communication system is transmitted to the wireless communication system. A base station security method for ensuring the security of the radio base station in a radio communication system in which a radio base station that performs radio communication with a radio terminal is communicably connected to a control device via a transmission path,
The wireless base station, when power is turned on, transmitting a permission request signal for requesting activation permission to the control device;
The control device transmitting a permission signal indicating permission of activation of the radio base station to the radio base station in response to the permission request signal;
The wireless base station includes a step of activating the own station when receiving a permission signal. In order to ensure the security of the radio base station in a radio communication system in which a radio base station that performs radio communication with a radio terminal is communicably connected to a control apparatus via an IP network including a LAN that connects the radio base stations. A base station security method,
The wireless base station, when power is turned on, transmitting a permission request signal for requesting activation permission to the control device;
When the control device receives a permission request signal from the radio base station, inquires the radio base station for a private IP address;
The wireless base station notifying the control device of a private IP address in response to an inquiry from the control device;
When the private IP address notified from the wireless base station matches a pre-stored private IP address, the control device sends a permission signal indicating permission to start the wireless base station to the wireless base station Sending to
The wireless base station includes a step of activating the own station when receiving a permission signal.

Images