JP4397712B2 - Distributed authentication method, distributed authentication system, and authentication server - Google Patents

Description

  The present invention relates to a technique for authenticating a connection from a mobile body provided with wireless communication means to a system interior via a wireless base station.

  As an authentication technology associated with communication, every time authentication is requested, the current authentication information and the next authentication information are created and sent to the authentication side at the same time, and the authentication side receives the authentication request. A technology has been proposed in which authentication is performed by comparing the current authentication information received and held during the previous authentication process with the current authentication information sent from the authenticated side. (See, for example, Patent Document 1).

In mobile IP, each time a base station with which a mobile unit performs wireless communication is changed as the mobile unit moves, a round trip is performed between the mobile station and the authentication server via a base station that performs new wireless communication. Authentication, key exchange, and care-of IP address acquisition (for example, see Non-Patent Document 1).
JP 2003-152716 A IETF, RFC2002 “IP Mobility Support”

  In the above prior art, every time an authentication request from an external mobile unit is generated, authentication information is transmitted to and received from an authentication server via a wireless base station or the like as an access point. This authentication server is a server installed inside the system, to which a plurality of information processing apparatuses are connected via a network such as a LAN. For example, when a large number of authentication requests from mobile units occur (including cases where a large number of accesses from unauthorized mobile units occur due to Dos attacks, etc.), the radio base station and authentication server are accompanied by these many authentication requests. There is also a large amount of data communication related to the exchange of authentication information with. Therefore, there is a concern that an increase in the load on the network inside the system may occur under the situation where the conventional technology as described above is employed.

  In addition, the mobile body also moves during a period from when the mobile body that is to be authenticated sends the authentication request to when the authentication result is received. Therefore, a delay in processing in the mobile body may occur due to such a reception delay of the authentication result.

  Accordingly, an object of the present invention is to reduce the communication processing efficiency in a system in which connection to various servers installed in the system by wireless communication by multicast from an external mobile body via a wireless base station or the like occurs. It is intended to protect the security against connection from the outside on the condition that the occurrence of abnormal processing is prevented.

A distributed authentication method of the present invention that solves the above-described problem is a method for authenticating a connection from a mobile body equipped with wireless communication means to the inside of a system via a wireless base station, and is connected to the mobile body through a network. An authentication server that performs pre-authentication of the mobile object performs a pre-authentication process of the mobile object in response to an authentication request for the mobile object, and identifies the mobile object when the pre-authentication of the mobile object is established. One or more pieces of information are generated, and foreseeing information relating to the moving path of the moving body and the passage time of a predetermined point is obtained from the foreseeing information providing apparatus for monitoring the moving body or the operation status of the moving body, and the foreseeing based on the information, a plurality of radio base stations which can serve as an access point be on the moving path of the moving body, and to the mobile body, wherein the one or more identified was developed for the mobile Perform the step of distributing information regarding information and the validity period of the identification information, wherein the moving body, upon connection of the to internal system, by adding the identification information and the time stamp to the transmission data to the radio base station perform the step of performing radio communication, the radio base station, and collated with previously held by the identification information in said added to the received data received from the mobile identification information and the radio base station, the received data Determining whether the added time stamp is within the validity period of the identification information, and executing the step of determining whether the received data can be transferred into the system. .

The distributed authentication system of the present invention is a system for authenticating a connection from a mobile body provided with a wireless communication means to the inside of the system via a radio base station, wherein the mobile body responds to an authentication request of the mobile body. When pre-authentication processing for performing body pre-authentication processing and pre-authentication of the mobile body is established, one or a plurality of identification information of the mobile body is generated, and the operation state of the mobile body or the mobile body is monitored. A plurality of radio bases that obtain foreseeing information related to the moving route of the mobile body and the passage time of a predetermined point from the provisioning information providing device, and can be access points on the moving route of the mobile body based on the foreseeing information station, and to the mobile member, provided with an identification information distribution unit for distributing information about the validity period of the one or more identification information and the identification information was developed for the mobile An authentication server that is connected by serial mobile and the network, upon connection of the to internal system, comprising a communication data creation unit that performs wireless communication to the wireless base station by adding the identification information and the time stamp to transmission data a moving body, wherein the collation identification information previously held by added to the received data received from the mobile identification information and the radio base station, effective add timestamp to the received data is the identification information And a radio base station including a data determination unit that determines whether or not the received data can be transferred to the inside of the system by determining whether or not it is within a period .

The authentication server of the present invention constitutes a system for authenticating connection from a mobile body provided with wireless communication means to the inside of the system via a radio base station, and is an authentication server connected to the mobile body via a network A pre-authentication unit that performs pre-authentication processing of the mobile body in response to an authentication request of the mobile body, and if the mobile body pre-authentication is established, generates one or a plurality of identification information of the mobile body Then, foreseeing information relating to the moving route of the moving body and the passage time of the predetermined point is obtained from the moving body or a foreseeing information providing device for monitoring the operation status of the moving body, and based on the foreseeing information, the moving body a plurality of radio base stations which can serve as an access point be on the movement path, and to the mobile body, the effective of the information was developed for the moving body 1 or more identification information and identification information An identification information distribution unit for distributing information about between, characterized in that it comprises a.

  In addition, the problems disclosed by the present application and the solutions thereof will be clarified by the embodiments of the present invention and the drawings.

  According to the present invention, in a system in which connection to various servers installed in the system by multicast wireless communication from an external mobile body via a wireless base station or the like occurs, communication processing efficiency is reduced. It is possible to prevent the occurrence of abnormal processing and protect the security against the connection from the outside.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 shows a mobile object 0107 that moves a predetermined route, to which the present invention is applied, and a plurality of information processing devices installed on the movement route of the mobile object 0107 are connected via a communication network 0104. 1 is a diagram illustrating an overview of a communication system 10 that performs wireless communication with a wireless base station 0106 that is an access point to a system 100. FIG.

  The main components of the communication system 10 are connected to the communication network 0104 and an authentication server 0101 for issuing pre-authentication of the mobile unit 0107 to be accessed and issuing and distributing identification information, and to the communication network 0104. The application server 0102 (information processing apparatus) that provides services to the mobile body 0107 that is connected by wireless communication is provided inside the system, and the movement path of the mobile body 0107 and a predetermined point on the movement path. A foreseeing information provider 0103 for providing foreseeing information related to the passage time is connected to a communication network 0104 via a network 0105 on the route, and accesses various servers 0101 and 0102 in the system 100 by wireless communication. A wireless base station 0106 serving as an access point for the incoming mobile unit 0107; Accessing the system 100 inside the various servers 0101,0102 et a communication, it is a mobile 0,107 like to receive a service provision of the information distribution or the like.

  The main hardware configuration of the radio base station 0106 includes a storage device 0111, a processing device 0112, and a communication device 0113. The storage device 0111 includes identification information corresponding to the mobile unit 0107, information on the validity period of the identification information, encryption keys used for communication, software for managing these information and encryption keys, and software for communication. Stored and processed by the processing unit 0112. The communication processing device 0113 transmits / receives data to / from the authentication server 0101 and the application server 0103 connected to the communication network 0104 via the wireless communication by multicast with the mobile unit 0107 and the network 0105 on the route. Do. Note that a plurality of wireless base stations 0106 are installed at regular intervals on the travel route of the moving body 0107.

  The main hardware configuration of the moving body 0107 includes a storage device 0121, a processing device 0122, a communication device 0123, and a wireless device 0124. The storage device 0121 includes identification information corresponding to the mobile object 0107 distributed from the authentication server 0101, information on the validity period of the identification information, encryption keys used for communication, and software for managing these information and encryption keys , Software for performing communication is stored, and processing is performed by the processing device 0122. The communication processing device 0123 uses the wireless device 0124 to perform multicast communication with the wireless base station 0106 serving as an access point in order to communicate with the authentication server 0101 and the application server 0102 connected to the communication network 0104. Send and receive data via wireless communication. The wireless communication performed here assumes short-distance communication as an example.

  The authentication server 0101 is used for pre-authentication of the mobile unit 0107, which constitutes the system 100 that authenticates the connection from the mobile unit 0107 provided with the wireless communication means to the application server 0102 via the radio base station 0106. It is a server.

  The authentication server 0101 includes the processing device 110 and the storage device 111 as hardware configurations as described above, and, for example, a pre-authentication unit 112 that performs pre-authentication processing of the mobile body 0107 in response to an authentication request of the mobile body 0107. If the mobile body 0107 is pre-authenticated, one or more identification information of the mobile body 0107 is generated, and the mobile body 0107 and the radio base station 0106 are identified and identified with respect to the mobile body 0107. An identification information distribution unit 113 that distributes information related to the validity period of the information can be provided in the storage device 111 as a software configuration (may be realized as hardware).

  The foreseeing information provider 0103 constitutes the communication system 10 that authenticates the connection from the mobile unit 0107 to the application server 0102 via the radio base station 0106. For example, a navigation device provided in a mobile body 0107 that performs wireless communication with the wireless base station 0106 can be used. Alternatively, when the moving body 0107 is a public transportation such as a train, an operation management system that monitors the operation status of the moving body 0107 can be employed.

  The foreseeing information provider 0103 includes the processing device 130 and the storage device 131 as hardware configurations in the same manner as described above, and obtains current position information for detecting the current position information of the moving body 0107 such as a GPS (Global Positioning Systems) device. The part 132 and the designation of the starting point and destination of the moving body 0107 are received from the input interface 133, and this is applied to the current position information and the route information, and the movement between the starting point and the destination is performed. A route search unit 134 that searches for a route and calculates a passing time of a predetermined point on the moving route, and foreseeing information including information on the moving route and the passing time are used as the authentication server 0101 or the wireless base station. A foreseeing information notification unit 135 that notifies at least one of 0106 as a software configuration It shall include in 31 (may be implemented as hardware). In addition, the storage device 131 includes a route information storage unit 136 that stores route information such as railroad tracks or roads.

  FIG. 2 is a diagram showing an overview of the distributed authentication method in the present embodiment. As main components, there are an authentication server 0101 connected to the communication network 0104 in FIG. 1, a mobile unit 0107, and a radio base station 0106 serving as an access point installed on the path of the mobile unit 0107.

  The mobile unit 0107 transmits a pre-authentication request to the authentication server 0101 in advance, such as during a stop before starting communication (0201), and receives pre-authentication by the authentication server 0101 (0202). The pre-authentication here is a general authentication process using an electronic signature or the like. When the pre-authentication of the moving body 0107 is successful, the authentication server 0101 issues identification information corresponding to the moving body 0107, and foreseeing information regarding the moving path of the moving body 0107, the passing time of a predetermined point on the moving path, and the like. Based on the above, identification information is distributed in advance to each of the radio base stations 0106 and the mobile unit 0107 that are on the moving path of the mobile unit 0107 and will receive communication from the mobile unit 0107 (0203). . The foreseeing information is acquired by the authentication server 0101 from the foreseeing information provider 0103 or the like.

  When the mobile unit 0107 is traveling and transmits a message to communicate with the application server 0102 and the like inside the system 100 (0204), the radio base station 0106, which is the access point that received the message, sends a message from the mobile unit 0107. The identification information contained in is extracted and collated with the identification information distributed from the authentication server 0101 in step 0203 (0205).

  Here, if the identification information does not match, the message from the moving body 0107 is immediately discarded. If the identification information matches, the message is transferred into the system 100. In order to prevent the security level from being lowered by continuing to use the same identification information, an identification information validity period is provided as a period during which the identification information can be used in each radio base station 0106 (0206). .

  FIG. 3 shows a module configuration on the mobile unit 0107 side connected via an access point to the system 100 to which a plurality of information processing apparatuses are connected via the communication network 0104 by multicast wireless communication in the present invention. FIG. The module configuration of the mobile unit 0107 communicates with the application 0301 for requesting and receiving various contents and the servers 0101 and 0102 in the system 100 via the communication medium 0303, and creating data for passing through the access point. Middleware 0302 to be executed.

  The main component of the middleware 0302 is created by adding data for transmitting data from the application 0301 to the radio base station 0106 serving as an access point to the system 100 by adding the identification information to the transmission data. Communication data creation unit 0311, identification information distributed from the authentication server 0101 and identification information management unit 0312 that manages information related to the validity period of the identification information, and a wireless base that serves as an access point to the system 100 via the communication medium 0303 A data communication unit 0313 that performs communication with the station 0106, an encryption / decryption unit 0314 that performs encryption and decryption of communication data, an identification information storage buffer 0315 that stores identification information distributed from the authentication server 0101, Encryption key storage buffer for storing encryption keys used for communication 316 there is.

  In the communication data creation unit 0311, the identification information corresponding to the mobile object 0107 acquired from the identification information management unit 0312 is added to the data from the application 0301, and then the data is transferred to the data communication unit 0313. In the identification information management unit 0312, a plurality of pieces of identification information corresponding to the mobile object 0107 distributed from the authentication server 0101 and stored in the identification information storage buffer 0315 are used to identify the mobile object 0107 in the movement route. A process of selecting one piece of identification information based on conditions such as position or time is performed. In this case, only the same identification information is not continuously used.

  FIG. 4 shows a wireless base station 0106 side that performs wireless communication by multicast with a mobile unit 0107, which is an access point on the system 100 side where a plurality of information processing apparatuses are connected via a communication network 0104 in the present invention. It is a figure which shows a module structure. When the wireless base station 0106 receives communication data from the mobile unit 0107 via the communication medium 0402 and enables transfer of data by collating the identification information, the various servers 0101 connected to the communication network 0104 , 0102 and the like, and middleware 0401 for performing processing to relay the communication data from the various servers 0101 and 0102 to the mobile unit 0107 is introduced.

  The main components of the middleware 0401 are transmission data to which the identification information is added by communicating with various servers 0101 and 0102 connected to the mobile unit 0107 or the communication network 0104 via the communication medium 0402. A data communication unit 0411 that performs transmission / reception of data, an encryption / decryption unit 0412 that performs encryption / decryption of communication data, a data determination unit 0413 that determines whether transfer of received data from the mobile unit 0107 is possible by collating identification information, Creates identification information management unit 0414 for managing the identification information distributed from the authentication server 0101 and the validity period of the identification information, communication data addressed to various servers 0101 and 0102 in the system 100, or communication data addressed to the mobile unit 0107 ID information distributed from the communication data creation unit 0415 and the authentication server 0101 Storing identification information storage buffer 0416, there is a key storage buffer 0417 for storing an encryption key used for communication.

  In the data determination unit 0413, identification information is extracted from the received data from the moving body 0107, and processing for inquiring to the identification information management unit 0414 whether matching identification information is held is performed. If there is no matching identification information, the received data is immediately discarded. On the other hand, if the matching identification information is held, the received data is transferred to the communication data creation unit 0415 as transferable.

  The communication data creation unit 0415 removes the identification information, time stamp, and serial number added at the time of transmission by the mobile unit 0107 from the received data matching the identification information received from the data determination unit 0413, Header information for transfer to the various servers 0101 and 0102. Then, the received data processed so far is transferred to the data communication unit 0411 and transferred to various servers 0101 and 0102 in the system 100.

  The communication data creation unit 0415 removes the header information for communication in the communication network 0104 from the transmission data from the various servers 0101 and 0102 in the system 100 to the mobile unit 0107, while the mobile unit 0107. Is added to the data creation unit 0411. The data creation unit 0411 transmits the data encrypted by the encryption / decryption unit 0412 to the mobile unit 0107 via the communication medium 0402.

  FIG. 5 is a flowchart showing the flow of processing for creating transmission data for wireless multicast data communication in the mobile unit 0107 in the present invention.

  In step 0501, the identification information used for the current communication is selected from a plurality of identification information corresponding to the mobile object 0107 distributed from the authentication server 0101 based on a predetermined condition. Here, the predetermined condition for selecting the identification information is set by the moving body 0107, and is determined based on, for example, the time during which the moving body 0107 is moving or the current position of the moving body 0107. The same identification information is not used repeatedly.

  In step 0502, the current time is acquired as a time stamp. Subsequently, in step 0503, a serial number is generated. Further, in step 0504, the serial number issued for each transmission data in the mobile body 0107 is encrypted together with the identification information and the time stamp. In step 0505, the data encrypted in step 0504 by combining the identification information, time stamp, and serial number data is added to the transmission data. In step 0506, the data is transmitted to the radio base station 0106.

  FIG. 6 is a flowchart showing a flow of processing for determining whether or not transfer of received data is possible in the radio base station 0106 on the data receiving side in the present invention. First, in step 0600, transmission data from mobile unit 0107 is received. In step 0601, it is determined whether the wireless base station 0106 holds the serial number generated by the corresponding mobile unit 0107. When the serial number generated by the mobile unit 0107 is not held, in step 0602, foreseeing information regarding the passing time of the mobile unit 0107 sent from the authentication server 0101 is referred to.

  Subsequently, in Step 0603, when it is determined as a result of Step 0602 that the mobile unit 0107 has not yet approached the wireless base station 0106 (No: 0603), in Step 0615, the data is discarded and the process is terminated. . On the other hand, if it is determined in step 0603 that the mobile unit 0107 is approaching the radio base station 0106 as a result of step 0602 (0603: Yes), in step 0604, foreseeing information regarding the route and the passage time of the mobile unit 0107 Based on the above, an inquiry is made to an adjacent radio base station that is communicating with the mobile unit 0107 first to obtain a serial number.

  In step 0605, the encrypted portion of the data received from the mobile unit 0107 is decrypted by combining the identification information, time stamp, and serial number. In step 0606, the acquired serial number is compared with the serial number decrypted from the received data. In step 0607, the serial number continuity is determined. That is, if the decrypted serial number is a numerical value equal to or less than the acquired serial number, it is determined that the received data is inappropriate data having no continuity of received data (0607: No), and the process proceeds to step 0614 to execute the corresponding received data. Is discarded, and the process ends. On the other hand, if it is determined in step 0607 that there is continuity (0607: Yes), in step 0608, a time stamp is extracted from the data decoded in step 0605 and compared with the current time.

  In step 0609, if the result of step 0608 indicates that the difference between the time stamp and the current time is outside the set allowable range (0606: No), the received data is discarded in step 0614 and the process is terminated. On the other hand, if it is determined in step 0609 that the difference between the time stamp and the current time is within the set allowable range as a result of step 0608 (0609: Yes), identification information is obtained from the data decoded in step 0605 in step 0610. Are extracted and collated for a match among a plurality of identification information corresponding to the mobile object 0107 held by the radio base station 0106.

  Further, in step 0611, if there is no matching identification information as a result of step 0610 (0611: No), the received data is discarded in step 0614 and the processing is terminated. On the other hand, if there is matching identification information as a result of step 0610 in step 0611 (0611: Yes), it is determined in step 0612 whether the time stamp is within the validity period of the identification information in the radio base station 0106. I do.

  If the time stamp is outside the valid range of the identification information (0612: No), the received data is discarded in step 0614 and the process is terminated. On the other hand, if the time stamp is within the valid period of the identification information at step 0612 (0612: Yes), the received data is transferred to the communication network 0104 at step 0613 and the process is terminated.

  The serial number is generated only in the moving body 0107. In the radio base station 0106, this serial number is extracted from the received data from the mobile unit 0107, or acquired from an adjacent radio base station based on the foreseeing information regarding the route and the passage time of the mobile unit 0107, and held.

  FIG. 7 is a diagram showing an effective period management table 0700 related to identification information issued to the mobile unit 0107, which is created in the authentication server 0101 according to the present invention. The main components of this table 0700 are an access point 0701 that lists the names of radio base stations that are on the moving path of the moving body 0107 and communicate with the moving body 0107, the moving path of the moving body 0107, and the moving Distribution time 0702, which is the time at which the identification information corresponding to the mobile unit 0107 is distributed from the authentication server 0101 to each wireless base station 0106 based on foreseeing information regarding the passage time of a predetermined point on the route, each wireless base station In 0106, identification information use start time 0703, which is the time at which use of the identification information corresponding to the mobile unit 0107 is started, and identification, which is the time at which each radio base station 0106 ends use of the identification information corresponding to the mobile unit 0107. Information use start time 0704, each wireless base station 0106 is assigned by the authentication server 0101 Identification information of the movable body 0107 includes the status information 0705 is one of the states not yet distributed or is already distributed.

  This table 0700 is created and managed for each moving object 0107 in the authentication server 0101. Further, when a change occurs in the moving route of the moving body 0107, each value in the table 0700 is updated based on the changed route and the foreseeing information regarding the passage time.

  FIG. 8 is a flowchart showing the flow of processing for pre-authentication of mobile unit 0107 and issuance of identification information in authentication server 0101 according to the present invention.

  In step 0801, a pre-authentication request from the mobile unit 0107 is received. In subsequent step 0802, the mobile body 0107 is pre-authenticated. Unlike the authentication process in which the wireless base station 0106 determines whether or not the transmission data from the mobile unit 0107 can be transferred to the application server 0102 or the like, this pre-authentication is a process that is performed prior to the transfer permission determination. In addition, as an authentication method, various authentication methods that exist in the past can be assumed, such as an ID and password verification process sent in advance, or a process using various electronic certificates.

  In step 0803, if the result of step 0802 indicates that the pre-authentication of the mobile object 0107 has not been established (0803: No), the processing is terminated. On the other hand, if the pre-authentication of the moving body 0107 is established as a result of 0802 in Step 0803 (0803: Yes), foreseeing information regarding the moving route and the passage time of the moving body 0107 is acquired in the subsequent Step 0804.

  The foreseeing information is acquired by the authentication server 0101 from the foreseeing information providing source 0103. The foreseeing information provider 0103 can be a navigation device provided in a mobile unit 0107 that performs radio communication with the radio base station 0106. Alternatively, when the moving body 0107 is a public transportation such as a train, an operation management system that monitors the operation status of the moving body 0107 can be employed.

  The foreseeing information provider 0103 includes the processing device 130 and the storage device 131 as hardware configurations as shown in FIG. 1, and detects current position information of the moving body 0107 such as a GPS (Global Positioning Systems) device. The current location information acquisition unit 132 and the designation of the departure point and destination of the moving body 0107 are received from the input interface 133, and this is applied to the current location information and the route information. A route search unit 134 that searches for a moving route between them and calculates a passing time of a predetermined point on the moving route, and foreseeing information including information on the moving route and the passing time, the authentication server 0101 or The foreseeing information notification unit 135 that notifies at least one of the radio base stations 0106 has a software configuration. It shall include in 憶 device 131 (may be implemented as hardware). In addition, the storage device 131 includes a route information storage unit 136 that stores route information such as railroad tracks or roads.

  Subsequently, in step 0805, the number or type of identification information to be issued corresponding to the mobile object 0107 is determined. This determination processing is performed by, for example, identifying information according to the attribute of the service desired to be provided by the application server 0102 or the function of the mobile unit 0107 or the attribute of the owner included in the pre-authentication request received from the mobile unit 0107. The number of issues and the type of issue can be determined.

  Next, in step 0806, the radio base station 0106 that distributes the identification information corresponding to the mobile unit 0107 is selected based on the prediction information acquired in step 0804. In step 0807, for the radio base station 0106 selected in step 0806, an identification information effective period management table 700 (see FIG. 7) corresponding to the mobile unit 0107 is created. In step 0808, based on the identification information validity period management table 700 created in step 0807, the identification information is distributed to each radio base station 0106, and the process ends.

  FIG. 9 is a flowchart showing a flow of processing for changing the validity period of the identification information of the moving body 0107 in the authentication server 0101 when the route of the moving moving body 0107 is changed in the present invention.

  In step 0901, it is detected that the route of the moving body 0107 has been changed from the route based on the initial prediction information. In this detection process, for example, the foreseeing information is provided to the authentication server 0101 from the foreseeing information provider 0103 periodically or when the route is changed, and the newly obtained foreseeing information is compared with the previous foreseeing information. To detect a path change. Next, in Step 0902, the radio base station 0106 used for communication with the mobile unit 0107 is selected again based on the new route of the mobile unit 0107 detected in Step 0901. Further, in step 0903, the information of the radio base station 0106 in each row in the identification information validity period management table 700 corresponding to the mobile body 0107 is referred to in order.

  In step 0904, if it is necessary to change only the information of the radio base station 0106 in each row in the identification information validity period management table 700 as a result of step 0903, in step 0905, each row in the identification information validity period management table 700 is changed. Refer to the "Status" section. Only when this state is “distributed”, in step 0906, information about the updated effective period is transmitted to the radio base station 0106 corresponding to each row of the identification information effective period management table 700. In step 0907, the relevant part such as the validity period is corrected for the radio base station 0106 in each row in the identification information validity period management table 700.

  In step 0908, when all the changes related to the radio base station 0106 due to the route change of the mobile unit 0107 have been reflected in the identification information validity period management table 700 (0908: Yes), the process ends. On the other hand, if the reflection to the identification information validity period management table 700 has not been completely completed (0908: No), the processing returns to step 0903. In step 0904, if it is not necessary to change only the information of the radio base station 0106 of each row in the identification information validity period management table 700 as a result of step 0903 (0904: No), the identification information validity period management table in step 0909 When it is necessary to delete the radio base station 0106 corresponding to each row of 700 (0909: Yes), in step 0910, the “state” section of each row in the identification information validity period management table 700 is referred to.

  Here, only when the status is “distributed” (0910: distributed), in step 0911, an identification information deletion request is sent to the radio base station 0106 corresponding to each row of the identification information validity period management table 700. Send. In step 0912, information regarding the corresponding radio base station 0106 is deleted from each row of the identification information validity period management table 700. Subsequently, in the same way as described above, in step 0908, when it is finished reflecting all the changes related to the radio base station 0106 in the route change of the mobile unit 0107 in the identification information validity period management table 700, the process is ended. If all the reflections to the identification information validity period management table 700 are not completed, the process returns to step 0903.

  If it is not necessary to delete the radio base station 0106 corresponding to each row of the identification information validity period management table 700 in step 0909 (0909: No), information on a new radio base station 0106 is newly added in step 0913. Determine whether it is necessary. Here, when information on the radio base station 0106 is newly added (0913: Yes), information on the radio base station 0106 corresponding to the identification information validity period management table 700 is newly added in Step 0914. In step 0915, the identification information corresponding to the mobile unit 0107 and the validity period information of the identification information are transmitted to the newly added radio base station 0106. Subsequently, in the same way as described above, in step 0908, when it is finished reflecting all the changes related to the radio base station 0106 in the route change of the mobile unit 0107 in the identification information validity period management table 700, the process is ended. If all the reflections to the identification information validity period management table 700 are not completed, the process returns to step 0903.

  FIG. 10 is a diagram showing an identification information management table 1000 for managing identification information corresponding to the mobile unit 0107 distributed from the authentication server 0101, which is created in the radio base station 0106 according to the present invention. The main components of the identification information management table 1000 are identification information 1001 for storing identification information corresponding to the mobile object 0107 distributed from the authentication server 0101, and for classifying the identification information 1001 for each corresponding mobile object 0107. Mobile station number 1002, identification information utilization start time 1003 which is the time at which each wireless base station 0106 starts using identification information corresponding to the mobile object 0107, and identification corresponding to the mobile object 0107 at each wireless base station 0106 There are an identification information utilization end time 1004 that is a time when the use of information is terminated, and a state 1005 that indicates whether communication with the mobile unit 0107 using the identification information 1001 is terminated.

  The table 1000 is created and managed by each radio base station 0106. Further, it is updated according to a request from the authentication server 0101, data distribution, or a communication state with the mobile unit 0107.

  When the wireless base station 0106 receives data from the mobile unit 0107, it refers to the items of the identification information 1001 in this table 1000 in order to search for identification information that matches the identification information included in the received data. If there is matching identification information, the time stamp included in the received data is compared with the identification information utilization start time 1003 and the identification information utilization end time 1004 to determine whether the identification information is within the valid period. When the communication with the moving body 0107 using the identification information is completed, the state 1005 in the table 1000 is set to “communication completed”. It should be noted that the status 1005 of this table 1000 is periodically checked by middleware installed in the radio base station 0106, and the value of the mobile unit number 1002 is related to the identification information 1001 in which the status 1005 is “communication end”. All the same identification information is deleted. Here, the mobile unit number 1002 is used to group identification information 1001 corresponding to the same mobile unit 0107, and is added when the identification information is distributed from the authentication server 0101.

  FIG. 11 is a flowchart showing a processing flow when the identification information is deleted in the radio base station 0106 to which the identification information corresponding to the mobile unit 0107 is distributed from the authentication server 0101 in the present invention.

  In step 1101, the radio base station 0106 acquires the current time using, for example, its own clock function. In step 1102, the current time acquired in step 1101 is compared with the effective period of the identification information corresponding to the mobile unit 0107 distributed from the authentication server 0101. If the effective period has not yet ended (1102: No) In step 1103, it is determined whether or not the communication with the mobile unit 0107 using the identification information has already been completed.

  If the communication with the mobile unit 0107 has already been completed (1103: Yes), in step 1104, the identification information is deleted and the process is terminated. On the other hand, if it is determined in step 1103 that the communication with the moving body 0107 has not been completed yet (1103: No), the processing returns to step 1101.

  On the other hand, if the validity period of the identification information corresponding to the mobile object 0107 has expired in step 1102 (1102: Yes), communication with the mobile object 0107 corresponding to the identification information has already been performed in step 1105. It is determined whether or not. If communication with the mobile unit 0107 corresponding to the identification information has already been performed (1105: Yes), the identification information is deleted in step 1106, and the process ends. On the other hand, if communication with the mobile unit 0107 corresponding to the identification information has not been performed in step 1105 (1105: No), an inquiry is made to the authentication server 0101 in step 1107. Here, based on the response from the authentication server 0101, it is determined whether the identification information is to be deleted or updated to information on a new valid period sent from the authentication server 0101.

  FIG. 12 shows an authentication server in the case where communication from the mobile unit 0107 does not occur within the validity period of the identification information in the radio base station 0106 to which the identification information corresponding to the mobile unit 0107 is distributed in the present invention. 10 is a flowchart showing a flow of processing in 0101.

  In step 1201, an inquiry from the radio base station 0106 when communication from the mobile unit 0107 does not occur within the validity period of the identification information in the radio base station 0106 to which the identification information corresponding to the mobile unit 0107 is distributed Receive. In step 1202, the mobile unit 0107 is inquired about its current position and obtained. In step 1203, the foreseeing information regarding the moving route and the passage time of the moving body 0107 is acquired again. In step 1204, the information acquired in steps 1202 and 1203 is collated with the effective period management table 700 of the identification information corresponding to the moving body 0107.

Subsequently, in step 1205, as a result of step 1204, it is necessary to correct the use start time and use end time of the identification information in the radio base station 0106 due to route change of the mobile body 0107, travel delay, etc. (1205) In step 1206, the identification information validity period management table 700 is modified. In step 1207, information related to the validity period of the identification information after modification is transmitted to the wireless base station 0106.
On the other hand, in step 1205, if it is not necessary to modify the information in the identification information validity period management table 700 as a result of step 1204 (1205: No), a request to delete the identification information is transmitted to the radio base station 0106 in step 1208. To do.

  FIG. 13 shows a case where the distributed authentication method according to the present invention is applied to an on-vehicle communication system 1300 that performs wireless communication between a train 1307 that specifically travels and a wireless base station 1306 installed along the track. It is a figure which shows an outline. The main components in this system 1300 are an authentication server 1301 for issuing pre-authentication of train 1307 and issuing and distributing identification information connected to a railway company communication network 1304, a business server for managing business information for passengers, and passengers. Are connected to the communication network 1304 via a content distribution server 1302 for managing the content to be provided to the user (for example, both servers are integrated), an operation management server 1303 for managing the operation schedule of the train 1307, and the network 1305 on the track. A wireless base station 1306 installed at regular intervals along the track, which serves as an access point for the train 1307 accessing the servers 1301 and 1302 in the system connected to the communication network 1304 by wireless communication While using wireless communication, railway company communication network There is a train 1307 and the like to access the various servers to connect to the 304.

  On the train 1307, an on-board LAN 1313 is constructed, and an on-board server 1311 that relays wireless communication to the on-board LAN 1313 and the radio base station 1306 via the wireless device 1312, and a passenger terminal connected to the on-board LAN 1313 1321, a crew terminal 1322, and the like.

  The authentication server 1301 distributes the identification information to the wireless base stations 1306 installed along the track and the identification information in each wireless base station 1306 based on the train schedule information of the train 1307 provided from the operation management server 1303. Set the validity period of. In the processing here, the route information table 1331 is created based on the operation schedule information provided from the operation management server 1303. In this route information table 1331, stations that pass during the operation of the train and the passage time are listed.

  The authentication server 1301 refers to the route information table 1331 and selects the radio base station 1306 on the track that is an access point for the train 1307. Further, by comparing and referring to the information of “passing station” and “passing time” in the route information table 1331 and the information regarding the position of the radio base station 1306 extracted from the radio base station management database 1332 managed by the authentication server 1301, The distribution time of the identification information to the radio base station 1306 and the valid period in each radio base station are set.

  If there is a delay in the operation of the train 1307, information on the current position of the train 1307 is acquired from the operation management server 1303, and the validity period of the identification information in each wireless base station 1306 is changed by the authentication server 1301. Do. Further, the authentication performed by the authentication server 1301 in advance before the start of communication can be performed here when the train 1307 is stopped at the station.

  In the present system 1300, the content distribution servers 1302 provide applications such as content distribution and Internet connection based on requests from the passenger terminal 1321 in the train 1307. The crew terminal 1322 exchanges business information such as seat information, reservation information, and operation information with the business server 1302 connected to the communication network 1304 of the railway company.

  Here, when the on-board server 1311 is installed for each train vehicle and the identification information issued by the authentication server 1301 is issued for each train vehicle, the vehicle is cut off at a station on the way and the destination is divided into two hands. Can also respond.

  FIG. 14 shows a case in which the distributed authentication method according to the present invention is applied to a road-vehicle communication system 1400 that performs wireless communication between a vehicle 1406 traveling on a road and a wireless base station 1405 installed on the road. It is a figure which shows an outline. The main component of the system 1400 is an authentication server that is installed in a communication network 1403 such as an administrative organization that manages roads, a local government, or a service provider, and that issues pre-authentication of cars 1406 and issues and distributes identification information. 1401, a content distribution server 1402 that distributes content information to a car 1406, and a road network 1404, and is connected to a communication network 1403 such as an administrative agency, a local government, or a service provider, and is connected to the communication network 1403. The wireless base station 1405 installed at regular intervals along the road, which serves as an access point for the vehicle 1406 accessing the servers 1401, 1402 and the like through the access point by wireless communication However, various services connected to the communication network 1403 via wireless communication There is a car 1406, such as access to the server 1401, 1402, et al.

  Assuming that the car 1406 includes a car navigation device, when the destination is set in the car navigation device or periodically, the route information and the current position information 1411 of the car navigation device are transmitted via the communication network 1403 or the like to the authentication server 1411. Sent to. Here, the authentication server 1411 creates a route information table 1421 based on the route information 1411 of the car navigation device acquired from the car 1406. In the route information table 1421, points that are passed while the vehicle 1406 is traveling and the estimated passage time are listed.

  The authentication server 1401 refers to the route information table 1421 and selects a radio base station 1405 that is an access point for the vehicle 1406 and is installed on a road on the route. Further, by comparing and referring to the information of “passage point” and “expected time of passage” in the route information table 1421 and the information on the position of the radio base station 1405 extracted from the radio base station management database 1422 managed by the server 1401, The distribution time of identification information to the radio base station 1405 and the validity period in each radio base station are set.

It is assumed that the authentication server 1401 periodically inquires the car 1406 about the route information of the car navigation device and the current position information 1411. Alternatively, it is assumed that the car 1406 transmits the car navigation route information and the current position information 1411 to the authentication server 1401 when the route is changed by the car navigation device.
The authentication server 1401 updates the distribution time of the identification information corresponding to the vehicle 1406 to each radio base station 1405 or the validity period of the identification information based on the transmitted data. This corresponds to a route change of the traveling car 1406.
Note that regarding pre-authentication performed in advance by the authentication server 1401 before the start of communication, if there is no wireless base station 1405 serving as an access point near the departure point of the vehicle 1406, the authentication server 1401 is connected from the vehicle 1406 via a public line or the like. Can be implemented by accessing

  In the system 1400, the content distribution server 1402 and the like provide applications such as content distribution, Internet connection, and driving support information provision in response to a request from the vehicle 1406.

  An outline of a data format used for communication between the vehicle 1406 and the radio base station 1405 in the system 1400 is shown in 1423. As main components of this data format, a communication header 1431 related to multicast communication, identification information 1432 corresponding to the transmission source car 1406, a time stamp 1433 which is managed by the transmission source car 1406 and is a time at the time of data transmission, There are a serial number 1434 added to the transmission data and user data 1435 used for the application. Here, it is preferable that the data of the identification information 1432, the time stamp 1433, and the serial number 1434 is encrypted (1436) by the vehicle 1406 (wireless communication means) together to prevent eavesdropping. In this case, the wireless base station 1405 that has received the encrypted transmission data performs decryption for data reference.

  The data format 1423 can be used not only in the system 1400 but also in any system to which the distributed authentication method according to the present invention is applied, such as the system 1300 shown in FIG. 13 and the system 1500 described later based on FIG. is there.

  FIG. 15 is a diagram showing an outline when the distributed authentication method according to the present invention is applied to a maintenance / preventive maintenance support system 1500 for maintenance personnel of utility poles that are facilities of an electric power company. The main components of the system 1500 are facilities for power distribution to customers, which are a large number of utility poles 1501 installed in the streets, etc., and maintenance that is used when maintenance personnel patrol as part of maintenance work for the utility poles 1501. There is a work vehicle 1502 and the like. The power pole 1501 is equipped with a data transmission device 1511 for transmitting various sensor data and the like by wireless communication. The maintenance work vehicle 1502 stores data on the vehicle base server 1521 for analyzing and storing transmission data from the power pole 1501, the radio base station 1522 for transmitting and receiving data to and from the power pole 1501, and data on the power pole 1501. There is a telephone pole database 1523 or the like.

  In this system 1500, when a maintenance worker patrols the power pole 1501 in the city with the maintenance work vehicle 1502 for inspection of the power pole, and visually inspects the power pole 1501, each maintenance work vehicle 1502 is stopped without stopping. It is assumed that data is acquired from each power pole 1501 when passing through the power pole 1501. Here, there is no need to stop and work for each power pole 1501 in order to acquire data, which leads to reduction in load and efficiency of maintenance work. The acquired data is utilized for preventive maintenance of the utility pole 1501.

  Note that identification information corresponding to each of the utility poles 1501 is assigned, and the identification information is added when sensor data or the like is transmitted. In the maintenance work vehicle 1502, identification information corresponding to each power pole 1501 is held in the power pole database 1523. The on-board server 1521 calculates the passing time of each power pole 1501 on the route based on the inspection route plan of the power pole 1501 and the route information of the car navigation device, and the identification information corresponding to each power pole 1501 is calculated based on the calculation result. Determine the validity period. Here, the identification information is set to be valid only while the maintenance work vehicle passes in the vicinity of each power pole 1501.

  If the approach to the utility pole 1501 is detected from the route information and current position information of the car navigation device while the maintenance work vehicle 1502 is patrol based on the patrol route plan, a beacon is transmitted from the radio base station 1522 on the vehicle. To send. The utility pole 1501 that has received the beacon adds the identification information corresponding to the utility pole 1501 to the various sensor data by the multicast communication 1531 using the data transmission device 1511 and transmits it for a certain period of time.

  Alternatively, a time period during which the utility pole 1501 transmits sensor data or the like by multicast is set in advance for each utility pole 1501 or for each area. When the wireless base station 1522 of the maintenance work vehicle 1502 receives the data from the utility pole 1501, it collates the identification information extracted from the data. As a result, only the data from the utility pole 1501 within the effective period is transferred to the on-board server 1521 and other data is discarded. The on-board server 1521 analyzes or stores the data transferred from the radio base station 1522. The data transmitted from the utility pole 1501 includes a transformer voltage value, temperature, strain sensor value, gas insulator gas concentration, pressure value, and the like.

According to the present invention, in a system in which connection by wireless communication from an external mobile unit occurs to various servers installed inside a system to which a plurality of information processing devices are connected via a communication network, Maintain security and speed up the authentication process to reduce system downtime. In addition, since a fraudulent request is rejected not by an authentication server in the system but by a wireless base station or the like serving as an access point for a mobile object, the occurrence of a high load on the network in the system is prevented.
Therefore, in a system in which various servers installed in the system are connected by wireless communication by multicast from an external mobile body via a wireless base station or the like, communication processing efficiency decreases or abnormal processing is performed. It is possible to prevent the occurrence and protect the security against the connection from the outside.

  As mentioned above, although embodiment of this invention was described concretely based on the embodiment, it is not limited to this and can be variously changed in the range which does not deviate from the summary.

A mobile object to which the present invention is applied, and a radio base station that is an access point to a system in which a plurality of information processing apparatuses are connected via a communication network, installed on the route of the mobile object It is a figure which shows the outline | summary of the communication system which performs radio | wireless communication between. It is a figure which shows the outline | summary of the authentication method of the moving body in this invention. It is a figure which shows the module structure by the side of the mobile body connected via an access point by the radio | wireless communication by multicast with respect to the system which the some information processing apparatus is connected via the communication network in this invention. It is a figure which shows the module structure by the side of the radio | wireless base station which performs the radio | wireless communication by a multicasting with a mobile body used as the system side access point which the some information processing apparatus is connected via the communication network in this invention. It is a flowchart which shows the flow of the process which produces the transmission data of the multicast data communication by radio | wireless in the mobile body in this invention. It is a flowchart which shows the flow of a process which performs the propriety of transfer of reception data in the radio base station by the side of data reception in this invention. It is a figure which shows the effective period management table regarding the identification information issued to a mobile body produced in the authentication server in this invention. It is a flowchart which shows the flow of a process of authentication of a moving body and issuing of identification information in the authentication server in this invention. It is a flowchart which shows the flow of the process which changes the effective period of the identification information of a moving body in the authentication server when the path | route of the moving mobile body in this invention is changed. It is a figure which shows the identification information management table which manages the identification information corresponding to the mobile body created from the authentication server which the radio base station produces in this invention. It is a flowchart which shows the flow of a process in the case of deleting the said identification information in the radio base station to which the identification information corresponding to a mobile body was distributed from the authentication server in this invention. The flowchart which shows the flow of the process in an authentication server when the communication from the said mobile body does not generate | occur | produce in the effective period of the said identification information in the radio base station to which the identification information corresponding to a mobile body is distributed in this invention. It is. It is a figure which shows the outline | summary at the time of applying the distributed authentication method in this invention to the vehicle-to-ground communication system which performs radio | wireless communication between the running train and the radio station installed along the track. It is a figure which shows the outline | summary in the case of applying the distributed authentication method in this invention to the road-vehicle communication system which performs radio | wireless communication between the vehicle which drive | works on a road, and the radio station installed on the road. It is a figure which shows the outline | summary in the case of applying the distributed authentication method in this invention to the maintenance and preventive maintenance support system for the maintenance workers of the utility pole which are the facilities of an electric power company.

Explanation of symbols

0101 Authentication server 0102 Application server (inside system)
0103 Foreseeing information provider 0104 Communication network 0105 Route network 0106 Radio base station 0107 Mobile

Claims (10)

A method of authenticating a connection from a mobile body equipped with a wireless communication means to the inside of a system via a wireless base station,
An authentication server that is connected to the mobile body via a network and performs pre-authentication of the mobile body,
Performing a pre-authentication process of the mobile body in response to the mobile body authentication request;
When pre-authentication of the mobile object is established, one or a plurality of identification information of the mobile object is generated, and the mobile object is moved from the mobile object or a foreseeing information providing apparatus that monitors the operation status of the mobile object. Obtaining foreseeing information related to the route and the passage time of a predetermined point, and based on the foreseeing information, the plurality of radio base stations that can be access points on the moving path of the moving body and the moving body Distributing the information regarding the validity period of the one or more identification information and identification information created for the body,
The moving body is
When connecting to the inside of the system, adding the identification information and time stamp to transmission data to perform wireless communication to the wireless base station,
The radio base station is
The identification information added to the received data received from the mobile unit is collated with the identification information previously held in the radio base station, and the time stamp added to the received data is within the validity period of the identification information. And determining whether or not the received data can be transferred to the inside of the system.
A distributed authentication method characterized by the above. The distributed authentication method according to claim 1,
A mobile body that has been pre-authenticated by the authentication server selects one piece of identification information based on conditions set by the mobile body from a plurality of pieces of identification information corresponding to the mobile body distributed from the authentication server; The identification information to be used is switched, the transmission information from the mobile body is added with the identification information that has been selected and switched, and transmitted.
The wireless base station that has received the data transmitted with the identification information added by the mobile unit, the identification information extracted from the received data, and a plurality corresponding to the mobile unit distributed in advance from the authentication server If there is identification information that matches each other by this comparison, and the time stamp added to the received data is within the validity period of the identification information, the received data in the system is A distributed authentication method characterized by determining that transfer is possible. The distributed authentication method according to claim 2,
The radio base station performs a process of deleting the identification information whose validity period has expired or the identification information used for the terminated communication among a plurality of identification information corresponding to the mobile body distributed from the authentication server. A distributed authentication method characterized by the above. The distributed authentication method according to claim 2,
When the wireless base station determines whether or not data transfer to the inside of the system can be performed by collating identification information corresponding to the mobile body, the identification information corresponding to the mobile body distributed from the authentication server is valid. A distributed authentication method comprising: inquiring a situation about the mobile object to the authentication server when transmission data from the mobile object has never been received by the end of the period. The distributed authentication method according to claim 2,
The wireless base station generates a data transmission source mobile body and adds it to transmission data in the wireless base station in the determination of whether or not to transfer data into the system by collating identification information corresponding to the mobile body. If the serial number is equal to or smaller than the serial number extracted and held from the previous received data from the mobile unit at the data receiving side radio base station, the received data is discarded. A distributed authentication method characterized by the above. The distributed authentication method according to claim 5, wherein
When the wireless base station compares the serial numbers for determining whether data transfer to the system is possible or not by collating the identification information of the mobile body, the wireless base station predicts the moving path of the mobile body and the passage time of a predetermined point. Information is acquired from the mobile body or the foreseeing information providing apparatus, and based on the foreseeing information, when the mobile body approaches the radio base station, communication with the mobile body is performed before the radio base station. A distributed authentication method, comprising: obtaining a serial number held by an adjacent wireless base station. The distributed authentication method according to claim 1,
The authentication server obtains foreseeing information about the moving path of the mobile body and the passage time of the predetermined point from the mobile body or the foreseeing information providing device, and the identification information to each radio base station determined based on the foreseeing information The distributed authentication method is characterized in that the distribution time and the validity period of the identification information in each radio base station are set in the identification information created by the authentication server and distributed to each radio base station. The distributed authentication method according to claim 7, wherein
The authentication server newly obtains foreseeing information related to the moving path of the moving body in which the moving path has changed and the passage time of the predetermined point from the moving body or the foreseeing information providing device, and re-determination based on the foreseeing information. Reset the validity period of the identification information at each radio base station, and send a request to delete the identification information to the radio base station where the identification information has been distributed but the mobile unit has stopped passing after the route change. A distributed authentication method characterized in that the identification information is distributed to a radio base station to which a mobile object has newly passed after a route change. A system for authenticating a connection from a mobile body equipped with a wireless communication means to the inside of a system via a wireless base station,
A pre-authentication unit that performs pre-authentication processing of the mobile body in response to the mobile body authentication request;
When pre-authentication of the mobile object is established, one or a plurality of identification information of the mobile object is generated, and the mobile object is moved from the mobile object or a foreseeing information providing apparatus that monitors the operation status of the mobile object. Obtaining foreseeing information related to the route and the passage time of a predetermined point, and based on the foreseeing information, the plurality of radio base stations that can be access points on the moving route of the moving body and the moving body An identification information distribution unit that distributes information regarding the validity period of the identification information and the identification information created for the body, and an authentication server that is connected to the mobile body via a network;
When connecting to the inside of the system, a mobile unit including a communication data creation unit that adds the identification information and a time stamp to transmission data and performs wireless communication to the wireless base station;
The identification information added to the received data received from the mobile unit is collated with the identification information held in advance in the radio base station, and the time stamp added to the received data is within the validity period of the identification information. A radio base station including a data determination unit that determines whether or not the received data can be transferred to the inside of the system,
A distributed authentication system comprising: A system for authenticating a connection from a mobile body equipped with a wireless communication means to a system inside via a radio base station is an authentication server connected to the mobile body via a network,
A pre-authentication unit that performs pre-authentication processing of the mobile body in response to the mobile body authentication request;
When pre-authentication of the mobile body is established, one or a plurality of identification information of the mobile body is generated, and the mobile body is moved from the mobile body or the foreseeing information providing apparatus that monitors the operation status of the mobile body. Obtaining foreseeing information related to the route and the passage time of a predetermined point, and based on the foreseeing information, the plurality of radio base stations that can be access points on the moving route of the moving body and the moving body An identification information distribution unit that distributes information about the validity period of the identification information and the identification information created for the body;
An authentication server comprising:

Images