JP4805035B2 - Communication system and communication method - Google Patents

Description

  The present invention relates to a communication system and a communication method in which a terminal is connected to a network via a connection mediating apparatus.

  2. Description of the Related Art Conventionally, wireless LAN using wireless communication as a connection means has been rapidly spread. For example, an access point (connection for connection with a network (communication network formed by a public network, the Internet, an intranet, etc.)) A wireless LAN is formed between an intermediary device) and a terminal (a terminal device such as a personal computer, a mobile phone, a PHS, or a PDA), and is used as a means for accessing the network from the terminal.

  By the way, since there are problems such as leakage of personal information of terminal users and unauthorized access to access points over this wireless LAN, various techniques have been disclosed to counter these problems.

  For example, in Non-Patent Document 1, it is assumed that common secret information is held in advance between an access point and a terminal that is permitted to connect to the access point, and this secret information is held at the start of communication. A method of authenticating the communication partner by checking (PSK authentication), or a terminal authentication server having a role of authenticating the terminal authenticates the terminal, and the access point receives the notification of the authentication result, and this authentication result A method of performing terminal access control based on the above (EAP authentication) is disclosed as a terminal authentication method applied to a wireless LAN. Non-Patent Document 2 discloses the principle and specific procedure of the EAP authentication method, and is referred to in Non-Patent Document 1.

  Since the former does not require the installation of a terminal authentication server, it is mainly used in homes as a home use. On the other hand, the latter requires the construction and operation of a terminal authentication server, but is robust such as PKI. It is possible to adopt a simple authentication method and to identify and authenticate individual terminals, so that a higher security function can be realized compared to the former, and it is mainly used in companies.

IEEE 802.11i “Local and metropolitan area networks, Specific requirements Part11: Wireless LAN Medium Access Control (MAC) Security Enhancements”, IEEE Computer Society, 2004 IEEE 802.11x “Local and metropolitan area networks, Port-Based Network Access Control”, IEEE Computer Society, 2004

  However, since the above-described conventional technique provides a method for an access point to authenticate and identify a terminal, and does not provide a method for a terminal to reliably authenticate and identify an access point, a terminal user However, it is impossible to completely prevent problems such as personal information being leaked and unauthorized access. That is, there is a problem that if the terminal is erroneously connected to an unauthorized access point, personal information is leaked, and unauthorized access cannot be completely prevented. .

  In addition, it is conceivable that the terminal itself adopts a method of directly identifying and authenticating the access point. However, in a portable terminal (terminal device such as a mobile phone, PHS, or PDA), a storage area or Implementation is difficult due to severe restrictions on computer resources such as computing capacity, and there is a problem that convenience is impaired in terms of processing performance.

  In addition, it is conceivable to adopt a method that directly identifies and authenticates access points in terminals that do not have restrictions on computer resources such as storage areas and computing power, but the same user owns multiple terminals. If each terminal is connected to a wireless LAN and used, access point authentication conditions and authorization conditions must be set and operated on each terminal, so that the security level is kept uniform. There is a problem that the management cost becomes enormous.

  Note that the above-described problems are potentially present not only in wireless LANs that use wireless communication but also in networks that use wired communication, and can be considered similarly.

  Accordingly, the present invention has been made to solve the above-described problems of the prior art, and a communication system capable of completely preventing leakage of personal information of a terminal user and unauthorized access to the terminal, and An object is to provide a communication method.

In order to solve the above-described problems and achieve the object, the present invention provides a communication system in which a terminal device is connected to a predetermined network via a connection mediation device, and the connection mediation device is a connection mediation that is itself. An authentication instruction receiving unit that receives an authentication instruction regarding the device itself from the terminal device, and a self-authentication device that authenticates the connection mediating device when the authentication instruction is received by the authentication instruction receiving unit. Mediating device certification information transmitting means for transmitting mediating device certification information that proves the validity of the mediating device, and when the verification result of the mediating device certification information is received from the mediating device authentication device, the verification result is transferred to the terminal device A verification result transfer means for performing the authentication instruction when the mediation device authentication device receives the mediation device certification information from the connection mediation device. Based on authentication information that is managed in association with information that uniquely identifies a device, an intermediary device certification information verification unit that verifies the mediation device certification information, and the integrity of the verification result by the mediation device certification information verification unit And a verification result transmitting means for transmitting the verification result to the connection mediating apparatus after protection.

Further, according to the present invention , a terminal device is connected to a network via a connection mediating device, and the connection mediating device and a terminal authentication device that authenticates the terminal device are connected via the network or a network different from the network. In the communication system to be connected, the connection mediating apparatus receives the authentication instruction from the terminal apparatus and an authentication instruction receiving means for receiving an authentication instruction regarding the connection mediating apparatus itself, and the authentication instruction receiving means. The mediation device certification information transmitting means for transmitting the mediation device certification information certifying its own validity to the terminal authentication device, and when the verification result of the mediation device certification information is received from the terminal authentication device, Verification result transfer means for transferring a verification result to the terminal device, the terminal authentication device from the connection mediating device to the mediation Mediation device certification information relay means for relaying the mediation device certification information to the mediation device authentication device that authenticates the connection mediation device when receiving the certification information, and the mediation device certification information from the mediation device authentication device Verification result relay means for relaying the mediation device certification information to the connection mediation device when a verification result is received, the mediation device authentication device relaying the mediation device certification information relayed from the terminal authentication device And receiving the intermediary device certification information verification means for verifying the intermediary device certification information based on the authentication information managed in association with the information that uniquely identifies the terminal device that issues the authentication instruction, and the intermediary A verification result transmission unit that transmits the verification result to the terminal authentication device after protecting the integrity of the verification result by the device certification information verification unit, That.

Further, the present invention is the terminal device according to the above-mentioned invention, wherein the connection mediating device includes terminal certification information that proves the validity of the terminal device together with an authentication instruction regarding the connection mediating device itself that is the authentication command receiving means. The terminal certification information and the mediation device certification information are transmitted to the terminal authentication device by the mediation device certification information transmission means, and based on the verification result of the terminal certification information received from the terminal authentication device, the It further comprises a connection permission / non-permission determining unit that determines whether or not to permit a connection request from the terminal device, and permits the verification result of the mediation device certification information received from the terminal authentication device and the connection request by the verification result transfer unit. Whether or not the terminal authentication device receives the terminal certificate received from the connection mediating device. Terminal certification information verification means for verifying information, and when the terminal certification information is normally verified by the terminal certification information verification means, the mediation apparatus certification information is obtained by the mediation apparatus certification information relay means. Relay to the mediation device authentication device, and the verification result relay means relays the verification result of the terminal certification information and the verification result of the mediation device certification information received from the mediation device authentication device to the connection mediation device at the same time. And

The mediation device authentication device according to the present invention further includes means for verifying whether the mediation device certification information received from the connection mediation device is based on an authentication instruction of the terminal device. It is characterized by that.

Further, the present invention is characterized in that, in the above invention, the mediation device authentication device further comprises means for preventing reuse of the verification result of the mediation device certification information by the mediation device certification information verification means. .

Further, the present invention provides the mediation device authentication device according to the above invention, wherein the mediation device authentication device applies the verification result of the mediation device certification information by the mediation device certification information verification means to a predetermined rule, and applies the mediation device certification information to the mediation device certification information. The connection mediating device further includes a connection availability determination unit that determines whether the terminal device is a partner to be connected, and the verification result transmission unit transmits the verification result and a determination result by the connection availability determination unit. And

Further, the present invention is the above invention, wherein the mediation device authentication device includes means for selecting the predetermined rule according to information for uniquely specifying the terminal device that instructs authentication of the connection mediation device It is characterized by that.

Further, the present invention provides the mediation apparatus authentication apparatus according to the above-mentioned invention, wherein the mediation apparatus authentication information verifying means is concerned only when the mediation apparatus certification information verification means receives the mediation apparatus certification information relayed from a specific terminal authentication apparatus. The apparatus certification information is verified.

The present invention is also a communication method applied to a communication system in which a terminal device is connected to a predetermined network via a connection mediating device, wherein the connection mediating device is an authentication instruction relating to the connection mediating device itself that is itself Authentication instruction receiving step of receiving the authentication information from the terminal device, and when the authentication instruction is received by the authentication instruction receiving step, proves its authenticity to the mediation device authentication device that authenticates the connection mediation device An intermediary device certification information transmitting step for transmitting the intermediary device certification information, and a verification result transfer step for transferring the verification result to the terminal device when the verification result of the intermediary device certification information is received from the intermediary device authentication device. The intermediary device authentication device verifies the intermediary device certification information when the intermediary device certification information is received from the connection mediation device. And a verification result transmitting step for transmitting the verification result to the connection mediating device after protecting the integrity of the verification result by the mediating device certification information verification step. .

Further, according to the present invention , a terminal device is connected to a network via a connection mediating device, and the connection mediating device and a terminal authentication device that authenticates the terminal device are connected via the network or a network different from the network. A communication method applied to a communication system to be connected, wherein the connection mediating device includes an authentication instruction receiving step of receiving an authentication instruction regarding the connection mediating device itself, from the terminal device, and an authentication instruction receiving step. When the authentication instruction is received, an intermediary device certification information transmission step of transmitting intermediary device certification information certifying its validity to the terminal authentication device to an intermediary device authentication device that authenticates the connection mediation device When the verification result of the mediation device certification information is received from the terminal authentication device, the verification result is transferred to the terminal device. A result transfer step, and when the terminal authentication device receives the mediation device certification information from the connection mediation device, the mediation device certification information relay step of relaying the mediation device certification information to the mediation device authentication device And a verification result relaying step of relaying the mediation device certification information to the connection mediation device when a verification result of the mediation device certification information is received from the mediation device authentication device, the mediation device authentication device comprising: When the mediation device certification information relayed from the terminal authentication device is received, the mediation device certification information verification step for verifying the mediation device certification information, and the integrity of the verification result by the mediation device certification information verification step And a verification result transmission step of transmitting the verification result to the terminal authentication device after protection.

According to the present invention , the present invention is applied to a communication system in which a terminal device is connected to a predetermined network (for example, a communication network formed by a public line network, the Internet, an intranet, etc.) via a connection mediating device, or applied to this communication system. In the communication method, when the connection mediating apparatus (access point) receives an authentication instruction regarding the connection mediating apparatus itself, from the terminal device, the mediating apparatus authenticating device responsible for authenticating the connection mediating apparatus, Mediation device certification information that proves its validity (for example, information that certifies an identifier or attribute uniquely assigned to an access point) is transmitted, and the mediation device authentication device receives it from the connection mediation device Verifies the mediation device certification information and protects the integrity of the verification results (access point identifiers, attribute information, etc.) The connection intermediary device that received the verification result of the mediation device certification information after transmitting the verification result to the terminal device is transmitted to the terminal device. If the connection mediating apparatus is authenticated, it is possible to suppress an increase in the function and processing load that must be provided, and the terminal device can connect the connection mediating apparatus related to the verification result based on the verification result transferred. As a result, it is possible to determine whether or not to connect to the network via the network, and to prevent erroneous connection to other connection mediating devices disguised as legitimate connection mediating devices. It is possible to completely prevent spillage and unauthorized access to the terminal.

Further, according to the present invention , the terminal device is connected to the network via the connection mediating device, and the connection mediating device and the terminal authentication device for authenticating the terminal device are connected via this network or a network different from this network. In a communication system to be connected, or a communication method applied to this communication system, the terminal authentication device receives mediation device certification information (for example, certifying validity of the connection mediation device itself received from the connection mediation device (access point)). Relays the information uniquely identifying the access point to the mediation device authentication device responsible for executing the authentication of the connection mediation device, and receives the mediation device from the mediation device authentication device Relay verification results (access point identifier, attribute information, etc.) to the connection mediation device The connection mediation device and the mediation device authentication device can cope with the case where they cannot communicate with each other, and the mediation device authentication device can only communicate with the terminal authentication device so that the regular connection is established. As a result, the terminal device can be prevented from receiving a DoS (Denial of Service) attack or unauthorized access from another malicious connection mediating device disguised as an intermediary device. It is possible to securely acquire the verification result of the mediation device certification information, which is the authentication result of the device, and to more securely determine whether or not to connect to the network via the connection mediation device, and personal information of the terminal user It is possible to completely prevent spillage and unauthorized access to the terminal.

Further, according to the present invention , the terminal device is connected to a predetermined network via the connection mediating device, authenticates the terminal device, and the connection mediating device is connected via the terminal authentication device arranged on the predetermined network. In a communication system connected to a network different from the predetermined network, the connection mediating apparatus receives terminal certification information that proves the validity of the terminal apparatus together with an authentication instruction related to the connection mediating apparatus itself, from the terminal apparatus. The terminal certification information and the intermediary device certification information are transmitted to the terminal authentication device, and based on the verification result of the terminal certification information received from the terminal authentication device, it is determined whether or not the connection request from the terminal device is permitted, and the connection request is If it is determined to be permitted, the verification result of the intermediary device certification information received from the terminal authentication device and the notification that the connection request is permitted. While the terminal authentication device verifies the terminal certification information received from the connection mediation device, and mediates the mediation device certification information if the terminal certification information is normally verified. Since it relays to the device authentication device and relays the verification result of the terminal certification information and the verification result of the mediation device certification information received from the mediation device authentication device to the connection mediation device at the same time, it depends on the authentication of the terminal device and the authentication of the connection mediation device It is possible to suppress the number of communications, the amount of communication, the communication cost, etc., and terminal information (personal information of the terminal user) by a malicious terminal authentication device that only performs authentication of the terminal device and blocks communication It is possible to suppress collection attacks.

According to the present invention , the intermediary device authentication apparatus determines whether the intermediary device certification information received from the connection intermediary device is based on an authentication instruction of a terminal device (a terminal device that has a trust relationship with the intermediary device authentication device). Therefore, it is possible to prevent an act such as a DoS attack or the like, an illegal acquisition of the verification result of the intermediary device certification information, an impersonation act due to an illegal use, or an illegal access.

In addition, according to the present invention , the intermediary device authentication apparatus prevents reuse of the verification result of the intermediary device certification information (for example, unauthorized re-transmission or reuse). It is possible to prevent an act in which the mediating device impersonates a regular connection mediating device and illegally accesses the terminal device, or an act in which the connection mediating device itself reuses the previous verification result to illegally access the terminal device.

Further, according to the present invention , the mediation device authentication device accepts and denies connection based on the verification result of the mediation device certification information according to a predetermined rule (for example, the identifier of the connection mediation device, attribute information, or a combination thereof). The connection mediating device related to the mediating device certification information is determined as a partner to be connected to the terminal device, and the verification result and the judgment result of the mediating device certification information are transmitted. Therefore, it is possible to eliminate the burden of holding and managing rules regarding whether or not to connect to the connection mediating device in the terminal device, and the burden of decision processing based on this rule, and to easily implement and maintain the terminal device. Is possible.

According to the present invention , the intermediary device authentication apparatus includes authentication information for verifying intermediary device authentication information according to information that uniquely specifies a terminal device that instructs authentication of the connection intermediary device, and a connection intermediary device. Since a predetermined rule relating to whether or not to connect is selected, a common intermediary device authentication device can act as a proxy for processing based on different guidelines and policies for each terminal device, and possesses a plurality of terminal devices When there is a terminal owner, when the mediation device authentication device acts as a proxy for the connection mediation device authentication, for example, the terminal owner as information that indirectly links the terminal identifier with the verification information for authentication or the connection rule By adopting, it is possible to perform processing based on common guidelines and policies for terminal devices of the same owner. Can be homogenized, and it is possible to centrally update authentication information for verifying the mediation device authentication information, update of predetermined rules regarding whether or not the connection mediation device can be connected, etc. .

In addition, according to the present invention , the mediation device authentication device only receives mediation device certification information relayed from a specific terminal authentication device (a terminal authentication device that is arranged in advance with a limited number being fixed), Since the intermediary device certification information is verified, the intermediary device authentication device is configured to be able to communicate only with a specific terminal authentication device, so that the intermediary device authentication is performed from another malicious connection intermediary device disguised as a legitimate connection intermediary device. It is possible to more effectively prevent the device from receiving a DoS (Denial of Service) attack and unauthorized access.

  Exemplary embodiments of a communication system, a communication method, and an intermediary device authentication apparatus according to the present invention will be described below in detail with reference to the accompanying drawings. In the following, the communication system according to the present invention will be described as a first embodiment, and then another embodiment according to the present invention will be described.

  In the following first embodiment, the outline and features of the communication system according to the first embodiment, the configuration and processing of the communication system will be described in order, and finally the effects of the first embodiment will be described.

[Outline and Features of Communication System (Example 1)]
First, the outline and features of the communication system according to the first embodiment will be described with reference to FIG. FIG. 1 is a diagram for explaining the outline and features of the communication system according to the first embodiment.

  As shown in FIG. 1, the communication system according to the first embodiment includes an access network 1 including a terminal device 10 and a connection mediating device 20, a connection mediating device 20, a connection mediating device authentication device 30, a terminal authentication device 40, and a server 50. It is comprised with the backbone network 2 which consists of.

  The terminal device 10 can communicate with the connection mediating device 20 via the access network 1, and refers to computer resources such as the server 50 via the connection mediating device 20, or use such resources. It is an information terminal device such as a personal computer that functions as a front end for performing information processing.

  The connection mediating device 20 can communicate with the terminal device 10 via the access network 1 and can communicate with the connection mediating device authentication device 30, the terminal authentication device 40 and the server 50 via the backbone network 2. Yes, it is an access point that determines whether or not the terminal device 10 can be connected to the backbone network 2 and enables communication between the terminal device 10 and the server 5. When the access network 1 is a wireless network, wireless access is possible. It corresponds to a point.

  The connection mediating device authentication device 30 is a device that performs authentication of the connection mediating device 20 on behalf of the terminal device 10. The terminal authentication device 40 is a device that authenticates the terminal device 10 on behalf of the connection mediating device 20. The server 50 is various computer resources such as a file server and an application server.

  The access network 1 is a network for realizing communication between the terminal device 10 and the connection mediating device 20. The backbone network 2 is a network for realizing communication between the connection mediating device 20, the connection mediating device authentication device 30, the terminal authentication device 40, and the server 50, and corresponds to the Internet or an intranet.

  This communication system outlines that the terminal device 10 is connected to the backbone network 2 via the connection mediating device 20, but it completely prevents the personal information of the terminal user from being leaked and unauthorized access to the terminal. The main feature is to prevent it. As an initial state, the connection mediating apparatus 20 is in a state where communication between the terminal device 10 and the backbone network 2 is not permitted, and the terminal device 10 mediates communication with the backbone network 2 to the connection mediating apparatus 20. It is the state before determining.

  The main feature will be specifically described. The terminal device 10 that has received the notification that the connection mediating device 20 permits the connection to the backbone network 2 sends a connection mediating device authentication instruction including an authenticator condition to the connection mediating device. 20 (see (1) in FIG. 1).

  Here, the authenticator condition refers to the connection mediator authentication device 30 that the user of the terminal device 10 believes that the identity of the connection mediator 20 can be confirmed and can act as a proxy. This is a condition to be satisfied by a device that performs an authentication procedure for the connection mediating device 20 as a proxy for the terminal device 10 and obtains an identifier or attribute information uniquely assigned to the connection mediating device 20 and notifies the terminal device 10 of the identifier or attribute information.

  The connection mediating device 20 that has received the connection mediating device authentication instruction from the terminal device 10 (see (2) in FIG. 1) selects the connection mediating device authentication device 30 that satisfies the authenticator condition, and then issues a connection mediating device authentication request. Transmit (see (3) in FIG. 1).

  Here, the connection mediating apparatus 20 may try to sequentially communicate with the connection mediating apparatus authenticating apparatus 30 that satisfies the authenticator condition and select one that can communicate first, or a communication capable intermediary apparatus authenticating apparatus. The list of 30 may be generated and held in advance, and the connection mediating apparatus authentication device 30 that satisfies the authenticator condition may be arbitrarily selected from the list.

  The connection mediation device authentication device 30 that has received the connection mediation device authentication request from the connection mediation device 20 (see (4) in FIG. 1) transmits a connection mediation device authentication request to the connection mediation device 20 ((5) in FIG. 1). reference). Specifically, the connection mediating apparatus authentication device 30 requests the connection mediating apparatus 20 to prove its identifier and attribute.

  The connection mediation device 20 that has received the connection mediation device authentication request from the connection mediation device authentication device 30 (see (6) in FIG. 1) generates information (mediation device certification information) that proves its own identifier and attribute, The connection mediating apparatus authentication response is transmitted to the connection mediating apparatus authentication apparatus 30 (see (7) in FIG. 1).

  The connection mediation device authentication device 30 that has received the connection mediation device authentication response from the connection mediation device 20 (see (8) in FIG. 1) manages the connection mediation device 20 in association with the identifier of the terminal device 10 that instructs the authentication of the connection mediation device 20. On the basis of the verification information for authentication of the connection mediating device 20, the verification information of the mediating device received as the connection mediating device authentication response is verified, and the verification result comprising the identifier and various attribute information of the connection mediating device 20 obtained as a result Is transmitted to the connection mediating apparatus 20 as a connection mediating apparatus authentication result (see (9) in FIG. 1). Further, when the connection mediating apparatus 20 cannot be normally authenticated (verification of the mediating apparatus authentication information), the connection mediating apparatus authentication apparatus 30 transmits that fact.

  Here, the authentication method of the connection mediating apparatus 20 shown in (5) to (7) of FIG. 1 is an arbitrary method such as challenge and response authentication based on a shared secret password or challenge and response authentication based on PKI. This method can be adopted. For example, when an authentication method based on a shared secret password is adopted, the connection mediating apparatus authentication device 30 manages and uses the password of the connection mediating apparatus 20 as verification verification information of the connection mediating apparatus 20 in advance. When an authentication method based on PKI is adopted, the connection mediating apparatus authentication device 30 uses the public key certificate or attribute certificate of the connection mediating apparatus 20 or the connection mediating apparatus as verification verification information for the connection mediating apparatus 20. A certificate of a certification authority that issues public key certificates and attribute certificates to 20 is managed in advance and used. In addition, after obtaining the identifier of the connection mediating apparatus 20 from the verification information for authentication, the connection mediating apparatus authentication apparatus 30 uses the identifier as a key to manage the attribute information of the connection mediating apparatus 20 such as a directory system or a repository system. Other attribute information of the connection mediating apparatus 20 may be acquired by inquiring of the system.

  Further, the connection mediating apparatus authentication device 30 protects its integrity (prevents forgery and tampering) when transmitting the connection mediating apparatus authentication result. Specifically, for example, the connection mediator authentication device 30 transmits the digital signature generated for the connection mediator authentication result included in the connection mediator authentication result, and the terminal device 10 receives the received connection mediator authentication. By adopting a method of verifying the digital signature included in the result and confirming that the connection mediation device authentication result is truly generated by the connection mediation device authentication device 30, the complete connection mediation device authentication result Protect the sex (prevent counterfeiting and tampering).

  Further, the connection mediating apparatus authentication device 30 prevents the reuse of the connection mediating apparatus authentication result (for example, retransmission of the authentication result due to unauthorized acquisition) when transmitting the connection mediating apparatus authentication result. Specifically, for example, the connection mediator authentication device 30 transmits the connection mediator authentication result including counter information that monotonously increases or transmission date and time information, and the terminal device 10 receives the received connection mediator authentication. A method that verifies the counter information included in the result and does not indicate that the counter value is already used, or verifies the transmission date and time information and confirms whether the transmission date and time is sufficiently new By adopting, the reuse of the connection mediating apparatus authentication result (for example, retransmission of the authentication result due to unauthorized acquisition) is prevented.

  The connection mediation device 20 that has received the connection mediation device authentication result from the connection mediation device authentication device 30 transfers the connection mediation device authentication result to the terminal device 10 (see (10) in FIG. 1). The terminal device 10 that has received the connection mediating device authentication result from the connection mediating device 20 (see (11) in FIG. 1), the connection mediating device whose connection mediating device authentication result matches the authenticator condition included in the connection mediating device authentication instruction. It is confirmed whether or not the data is generated and transmitted by the authentication device 30, and the connection permission / inhibition decision is made (see (12) in FIG. 1).

  Here, the determination as to whether or not connection is possible determines whether or not the terminal device 10 causes the connection mediating device 20 to mediate communication with the backbone network 2 (whether or not the connection mediating device 20 should be connected to the terminal device 10). For example, a determination is made based on a rule including a conditional expression that determines whether or not to connect according to the identifier of the connection mediating apparatus received as the connection mediating apparatus authentication result, attribute information, or a combination thereof. .

  Then, if it is determined that the connection is made as a result of determining whether or not connection is possible, the terminal device 10 transitions the internal management state to a state in which communication with the backbone network 2 via the connection mediating device 20 is permitted, Communication with the server 50 on the backbone network 2 is started (see (13) in FIG. 1).

  For this reason, the communication system according to the first embodiment can completely prevent the personal information of the terminal user from being leaked and unauthorized access to the terminal, as described above.

[Configuration of Communication System (Example 1)]
Next, the configuration of the communication system according to the first embodiment will be described with reference to FIG. FIG. 2 is a block diagram illustrating the configuration of the communication system according to the first embodiment.

  As shown in the figure, the communication system according to the first embodiment is the same as the communication system according to the first embodiment, the access network 1 including the terminal device 10 and the connection mediating device 20, the connection mediating device 20, and the connection mediating device authentication device. 30, a backbone network 2 including a terminal authentication device 40 and a server 50.

  The terminal device 10 can communicate with the connection mediating device 20 via the access network 1, and refers to computer resources such as the server 50 via the connection mediating device 20, or use such resources. An information terminal device such as a known personal computer, workstation, mobile phone, PHS terminal, mobile communication terminal or PDA that functions as a front end for performing information processing using the communication control unit 11 and a connection request unit 12, a terminal authentication response unit 13, a connection mediating device authentication instruction unit 14, and a connection availability determination unit 15.

  The communication control unit 11 of the terminal device 10 controls communication related to various data exchanged with the connection mediating device 20, and is accepted from, for example, the connection requesting unit 12, the terminal authentication response unit 13, and the connection mediating device authentication instruction unit 14. The transmitted data is transmitted to the connection mediating apparatus 20.

  The connection request unit 12 of the terminal device 10 transmits a connection request to the backbone network 2 to the connection mediating device 20.

  The terminal authentication response unit 13 of the terminal device 10 generates and generates terminal certification information that proves its own identifier and attribute as a terminal authentication response to the terminal authentication request received from the terminal authentication device 40 via the connection mediating device 20. The terminal certification information is transmitted to the connection mediating apparatus 20.

  When the connection mediating apparatus authentication instruction unit 14 of the terminal device 10 receives a notification from the connection mediating apparatus 20 that the connection to the backbone network 2 is permitted, the connection mediating apparatus authentication instruction unit 14 transmits the connection mediating apparatus authentication instruction including the authenticator condition. This is transmitted to the connection mediating apparatus authentication apparatus 30 via the apparatus 20. Here, the authenticator condition refers to the connection mediator authentication device 30 that the user of the terminal device 10 believes that the identity of the connection mediator 20 can be confirmed and can act as a proxy. This is a condition to be satisfied by a device that performs an authentication procedure for the connection mediating device 20 as a proxy for the terminal device 10 and obtains an identifier or attribute information uniquely assigned to the connection mediating device 20 and notifies the terminal device 10 of the identifier or attribute information.

  The connection availability determination unit 15 of the terminal device 10 is generated and transmitted by the connection mediation device authentication device 30 in which the connection mediation device authentication result received from the connection mediation device 20 matches the authenticator condition included in the connection mediation device authentication instruction. And whether or not connection is possible.

  Here, the determination as to whether or not connection is possible determines whether or not the terminal device 10 causes the connection mediating device 20 to mediate communication with the backbone network 2 (whether or not the connection mediating device 20 should be connected to the terminal device 10). For example, a determination is made based on a rule including a conditional expression that determines whether or not to connect according to the identifier of the connection mediating apparatus received as the connection mediating apparatus authentication result, attribute information, or a combination thereof. . If it is determined that the connection mediating device 20 mediates communication with the backbone network 2, the terminal device 10 performs internal management in a state in which communication with the backbone network 2 via the connection mediating device 20 is permitted. The state is changed and communication with the server 5 or the like on the backbone network 2 is started.

  The connection mediating device 20 can communicate with the terminal device 10 via the access network 1 and can communicate with the connection mediating device authentication device 30, the terminal authentication device 40 and the server 50 via the backbone network 2. Yes, it is an access point that determines whether or not the terminal device 10 can be connected to the backbone network 2 and enables communication between the terminal device 10 and the server 5. When the access network 1 is a wireless network, wireless access is possible. It corresponds to a point.

  The communication control unit 21 of the connection mediating apparatus 20 controls communication related to various data exchanged between the terminal device 10, the connection mediating apparatus authentication apparatus 30, and the terminal authentication apparatus 40. For example, the terminal authentication requesting unit 22, the connection mediation apparatus Data received from the device authentication request unit 23 and the connection mediation device authentication response unit 24 is transmitted to the terminal device 10, the connection mediation device 30, and the terminal authentication device 40, respectively. In addition, the connection mediating device authentication result addressed to the terminal device 10 is transferred to the terminal device 10.

  When receiving a connection request from the terminal device 10, the terminal authentication request unit 22 of the connection mediating apparatus 20 transmits an authentication request for the terminal device 10 to the terminal authentication device 40.

  When the connection mediating apparatus authentication request unit 23 of the connection mediating apparatus 20 receives a connection mediating apparatus authentication instruction from the terminal device 10, the connection mediating apparatus authentication requesting unit 23 selects the connection mediating apparatus authenticating apparatus 30 that satisfies the authenticator condition and then requests its own authentication. Send.

  Here, the connection mediating apparatus authentication request unit 23 of the connection mediating apparatus 20 may try to sequentially communicate with the connection mediating apparatus authenticating apparatus 30 that satisfies the authenticator condition and select the one that was able to communicate first, A list of communicable connection mediating device authentication devices 30 may be generated and held in advance, and the connection mediating device authentication device 30 that satisfies the authenticator condition may be arbitrarily selected from the list.

  The connection mediation device authentication response unit 24 of the connection mediation device 20 generates mediation device certification information that proves its own identifier and attribute as a connection mediation device authentication response to the connection mediation device authentication request received from the connection mediation device authentication device 30. Then, the generated mediation device certification information is transmitted to the connection mediation device authentication device 30.

  Based on the terminal authentication result received from the terminal authentication device 40, the connection possibility determination unit 25 of the connection mediating device 20 determines whether or not to permit a connection request for the terminal device 10 to the backbone network 2 (the terminal device 10 is connected to the backbone network). 2), it is determined whether or not connection is possible. Here, the connection permission / inhibition determination is a determination based on a rule including a conditional expression that determines whether or not to permit connection according to the identifier, attribute information, or a combination of the terminal device 10 received as the terminal authentication result. Do. When permitting connection of the terminal device 10 to the backbone network 2, the connection mediating device 20 changes the internal management state to a state of permitting relaying between the terminal device 10 and the backbone network 2, Thereafter, when a communication packet or the like addressed to the backbone network 2 (the server 50 on the backbone network 2) from the terminal device 10 or addressed to the terminal device 10 from the backbone network 2 arrives, this is relayed to communicate between the two. make it happen.

  The connection mediating device authentication device 30 is a device that performs authentication of the connection mediating device 20 on behalf of the terminal device 10.

  The communication control unit 31 of the connection mediating apparatus authentication device 30 controls communication related to various data exchanged with the connection mediating apparatus 20, for example, received from the connection mediating apparatus authentication requesting unit 32 and the connection mediating apparatus authentication unit 33. Data is transmitted to the connection mediating apparatus 20.

  When the connection mediation device authentication request unit 32 of the connection mediation device authentication device 30 receives a connection mediation device authentication request from the terminal device 10 via the connection mediation device 20, the connection mediation device authentication request unit 32 proves its identifier or attribute to the connection mediation device 20. The connection mediating apparatus authentication request for requesting to be transmitted is transmitted to the connection mediating apparatus 20.

  The connection mediating device authentication unit 33 of the connection mediating device authentication device 30 authenticates authentication information (eg, identifier) that is managed in advance in association with information (for example, an identifier) that uniquely identifies the terminal device 10 that instructs authentication of the connection mediating device 20. 4), the mediation device certification information received as the connection mediation device authentication response from the connection mediation device 20 is verified, and the verification result including the identifier and various attribute information of the connection mediation device 20 obtained as a result is connected. It transmits to the terminal device 10 via the mediation device 20. Further, when the connection mediating apparatus 20 cannot be normally authenticated (verification of the mediating apparatus authentication information), the connection mediating apparatus authentication apparatus 30 transmits that fact.

  Here, as the authentication method of the connection mediating device 20 by the connection mediating device authentication unit 33, any method such as challenge and response authentication based on the shared secret password and challenge and response authentication based on PKI is adopted. Can do. For example, when an authentication method based on a shared secret password is adopted, the connection mediating apparatus authentication device 30 manages and uses the password of the connection mediating apparatus 20 as verification verification information of the connection mediating apparatus 20 in advance. When an authentication method based on PKI is adopted, the connection mediating apparatus authentication device 30 uses the public key certificate or attribute certificate of the connection mediating apparatus 20 or the connection mediating apparatus as verification verification information for the connection mediating apparatus 20. A certificate of a certification authority that issues public key certificates and attribute certificates to 20 is managed in advance and used. Further, after obtaining the identifier of the connection mediating apparatus 20 based on the verification information, the connection mediating apparatus authentication apparatus 30 uses the identifier as a key to manage the attribute information of the connection mediating apparatus 20 as an external system such as a directory system or a repository system. To obtain other attribute information possessed by the connection mediating apparatus 20.

  The message may be repeatedly transmitted and received between the connection mediating device authentication unit 33 and the connection mediating device 20 depending on the authentication method employed, and the connection is made from the terminal device 10 as in the first embodiment described above. The connection mediating device 20 that has received the mediating device authentication instruction transmits a connection mediating device authentication request to the connection mediating device authentication device 30 and receives a connection mediating device authentication request from the connection mediating device authentication device 30 that has received the connection mediating device authentication request. Is not limited to the case where the mediation device certification information is transmitted to the connection mediation device authentication device 30, but the connection mediation device 20 that has received the connection mediation device authentication instruction from the terminal device 10 receives the connection mediation device authentication request. The mediation device authentication information may be transmitted from the beginning. Alternatively, the connection mediating apparatus 20 may perform two-way authentication for authenticating the connection mediating apparatus authentication apparatus 30, requesting another connection mediating apparatus authentication apparatus 30 to perform authentication and adopting the verification result. You may make it do.

  Further, the connection mediating device authentication unit 33 protects the integrity of the connection mediating device authentication result (prevents forgery and tampering). Specifically, for example, the connection mediator authentication device 30 transmits the digital signature generated for the connection mediator authentication result included in the connection mediator authentication result, and the terminal device 10 receives the received connection mediator authentication. By adopting a method of verifying the digital signature included in the result and confirming that the connection mediation device authentication result is truly generated by the connection mediation device authentication device 30, the complete connection mediation device authentication result Protect the sex (prevent counterfeiting and tampering).

  Further, the connection mediating apparatus authentication unit 33 prevents reuse of the connection mediating apparatus authentication result (for example, retransmission of the authentication result due to unauthorized acquisition). Specifically, for example, the connection mediator authentication device 30 transmits the connection mediator authentication result including counter information that monotonously increases or transmission date and time information, and the terminal device 10 receives the received connection mediator authentication. A method that verifies the counter information included in the result and does not indicate that the counter value is already used, or verifies the transmission date and time information and confirms whether the transmission date and time is sufficiently new By adopting, the reuse of the connection mediating apparatus authentication result (for example, retransmission of the authentication result due to unauthorized acquisition) is prevented.

  The terminal authentication device 40 is a device that authenticates the terminal device 10 on behalf of the connection mediating device 20.

  The communication control unit 41 of the terminal authentication device 40 controls communication related to various data exchanged with the connection mediating device 20. For example, the data received from the terminal device authentication requesting unit 42 and the terminal device authentication unit 43 is used as connection mediation. Transmit to device 20.

  When the terminal authentication request unit 42 of the terminal authentication device 40 receives a terminal authentication request from the connection mediating device 20, the terminal authentication requesting unit 42 sends a terminal authentication request that requests the terminal device 10 to prove its identifier or attribute to the connection mediating device 20. Via the terminal device 10.

  The terminal authentication unit 43 of the terminal authentication device 40 verifies the terminal certification information received as a terminal authentication response from the terminal device 10 via the connection mediating device 20, and uses the identifier and various attribute information of the terminal device 10 obtained as a result. The verification result is transmitted to the connection mediating apparatus 20.

  Here, as the authentication method of the terminal device 10 by the terminal authentication unit 43, the challenge and response authentication based on the shared secret password and the challenge and response based on the PKI, as in the authentication method of the connection mediating device authentication unit 33 described above. -Arbitrary methods such as response authentication can be adopted.

  The server 50 is various computer resources such as a file server and an application server, and corresponds to a known personal computer, workstation or the like.

[Processing by Communication System (Example 1)]
Next, processing performed by the communication system according to the first embodiment will be described with reference to FIG. FIG. 3 is a sequence diagram illustrating the processing flow of the communication system according to the first embodiment.

  As shown in the figure, when a connection request is received from the terminal device 10 (step S301), the connection mediating device 20 transmits a terminal authentication request to the terminal authentication device 40 (step S302). The terminal authentication device 40 that has received the terminal authentication request from the connection mediating device 20 transmits a terminal authentication request to the connection mediating device 20, and the connection mediating device 20 that has received the terminal authentication request from the terminal authentication device 40 sends the terminal authentication request. It transfers to the terminal device 10 (step S303).

  Next, the terminal device 10 generates terminal certification information for certifying its own identifier and attribute as a terminal authentication response to the terminal authentication request received from the connection mediating device 20, and sends the generated terminal certification information to the connection mediating device 20. The connection mediating apparatus 20 that has transmitted and received the terminal certification information as the terminal authentication response from the terminal apparatus 10 transfers the terminal certification information to the terminal authentication apparatus 40 (step S304).

  Subsequently, the terminal authentication device 40 verifies the terminal certification information received from the connection mediating device 20, and transmits a terminal authentication result including the identifier of the terminal device 10 and various attribute information obtained as a result to the connection mediating device 20. (Step S305). The connection mediating apparatus 20 that has received the terminal authentication result from the terminal authentication apparatus 40 performs a connection feasibility determination that determines whether or not to connect the terminal apparatus 10 to the backbone network 2 based on the terminal authentication result. It transmits to the terminal device 10 (step S306).

  The terminal device 10 that has received a notification that the connection to the backbone network 2 is permitted from the connection mediating device 20 transmits a connection mediating device authentication instruction including an authenticator condition to the connection mediating device 20 (step S307). The connection mediating device 20 that has received the connection mediating device authentication instruction from the terminal device 10 selects the connection mediating device authentication device 30 that satisfies the authenticator condition, and then forwards the connection mediating device authentication request (step S308).

  The connection mediation device authentication device 30 that has received the connection mediation device authentication request from the connection mediation device 20 transmits a connection mediation device authentication request to the connection mediation device 20. Specifically, the connection mediating device authentication device 30 requests the connection mediating device 20 to prove its own identifier and attribute (step S309).

  The connection mediation device 20 that has received the connection mediation device authentication request from the connection mediation device authentication device 30 generates information (mediation device certification information) for certifying its own identifier or attribute and transmits it as a connection mediation device authentication response ( Step S310).

  The connection mediation device authentication device 30 that has received the connection mediation device authentication response from the connection mediation device 20 connects based on the authentication verification information of the connection mediation device 20 that is managed in advance in association with the identifier of the connection mediation device 20. The mediation device certification information received as the mediation device authentication response is verified, and the verification result including the identifier and various attribute information of the connection mediation device 20 obtained as a result is transmitted as the connection mediation device authentication result (step S311).

  Further, the connection mediating apparatus authentication device 30 protects its integrity (prevents forgery and tampering) when transmitting the connection mediating apparatus authentication result. Specifically, for example, the connection mediator authentication device 30 transmits the digital signature generated for the connection mediator authentication result included in the connection mediator authentication result, and the terminal device 10 receives the received connection mediator authentication. By adopting a method of verifying the digital signature included in the result and confirming that the connection mediation device authentication result is truly generated by the connection mediation device authentication device 30, the complete connection mediation device authentication result Protect the sex (prevent counterfeiting and tampering).

  Further, the connection mediating apparatus authentication device 30 prevents the reuse of the connection mediating apparatus authentication result (for example, retransmission of the authentication result due to unauthorized acquisition) when transmitting the connection mediating apparatus authentication result. Specifically, for example, the connection mediator authentication device 30 transmits the connection mediator authentication result including counter information that monotonously increases or transmission date and time information, and the terminal device 10 receives the received connection mediator authentication. A method that verifies the counter information included in the result and does not indicate that the counter value is already used, or verifies the transmission date and time information and confirms whether the transmission date and time is sufficiently new By adopting, the reuse of the connection mediating apparatus authentication result (for example, retransmission of the authentication result due to unauthorized acquisition) is prevented.

  The connection mediation device 20 that has received the connection mediation device authentication result from the connection mediation device authentication device 30 transfers the connection mediation device authentication result to the terminal device 10 (step S312). The terminal device 10 that has received the connection mediation device authentication result from the connection mediation device 20 is generated and transmitted by the connection mediation device authentication device 30 whose connection mediation device authentication result matches the authenticator condition included in the connection mediation device authentication instruction. If it is determined that the connection is established as a result of the determination of whether or not the connection is permitted, the communication with the backbone network 2 via the connection mediating device 20 is permitted to be performed. The management state is changed, and communication with the server 50 and the like on the backbone network 2 is started (step S313).

[Effect of Example 1]
As described above, according to the first embodiment, in the communication system in which the terminal device 10 is connected to the backbone network 2 via the connection mediating device 20, the connection mediating device 20 authenticates itself as the connection mediating device itself. When the instruction is received from the terminal device 10, the mediation device certification information (for example, identifier or attribute) is proved to the connection mediation device authentication device 30 responsible for authenticating the connection mediation device 20. The connection mediating apparatus authenticating device 30 verifies the mediating apparatus certification information received from the connection mediating apparatus 20 and protects the integrity of the verification result (verification result including identifiers and attribute information). The connection intermediary device 20 that received the verification result of the mediation device certification information after transmitting the verification result to the connection mediation device 20 Since the data is transferred to the terminal device 10, it is possible to suppress an increase in functions and processing load that the terminal device 10 must have if the connection mediating device 20 is authenticated, and the terminal device 10 has been transferred. Based on the verification result, whether or not the connection to the backbone network 2 via the connection mediating device 20 according to the verification result can be determined, and other connection mediating devices 20 disguised as the regular connection mediating device 20 As a result of preventing erroneous connection, it is possible to completely prevent leakage of personal information of terminal users and unauthorized access to terminals.

  Further, according to the first embodiment, the connection mediating device authentication device 30 prevents reuse of the verification result of the mediating device certification information (for example, unauthorized re-transmission or reuse). Preventing an act in which a certain connection mediating device 20 impersonates the legitimate connection mediating device 20 and illegally accesses the terminal device 10 or an activity in which the connection mediating device 20 itself reuses the previous verification result to illegally access the terminal device 10. Is possible.

  In the first embodiment, the connection mediation device authentication device 30 that has received the connection mediation device authentication request from the connection mediation device 20 is based on the connection mediation device authentication instruction of the terminal device 10. After confirming whether or not, a connection mediating apparatus authentication request may be transmitted to the connection mediating apparatus 20.

  Specifically, the terminal device 10 transmits a connection mediating apparatus authentication instruction including a digital signature to the connection mediating apparatus 20, and the connection mediating apparatus 20 connects the digital signature included in the received connection mediating apparatus authentication instruction. The connection mediating apparatus authentication device 30 that is included in the mediation apparatus authentication request and transmitted to the connection mediation apparatus authentication apparatus 30 and receives the connection mediation apparatus authentication request verifies the digital signature included in the connection mediation apparatus authentication request, and connects. It is confirmed whether the mediation device authentication request is based on the connection mediation device authentication instruction of the terminal device 10. The connection mediating apparatus 20 that has received the connection mediating apparatus authentication instruction from the terminal apparatus 10 transmits the mediating apparatus authentication information including the digital signature as a connection mediating apparatus authentication request from the beginning, so that the connection mediating apparatus authentication apparatus 30 verifies the digital signature included in the mediation device certification information, and confirms whether the connection mediation device authentication request is based on the connection mediation device authentication instruction of the terminal device 10.

  In the first embodiment, the connection mediating apparatus authentication device 30 that has received the connection mediating apparatus authentication request from the connection mediating apparatus 20 is that the connection mediating apparatus authentication instruction has not been illegally reused, or It is possible to verify whether the mediation device authentication request has been retransmitted illegally, and if the verification results in unauthorized reuse, etc., the connection mediation device authentication request may be discarded. .

  Specifically, for example, the terminal device 10 transmits the counter information that increases monotonously or the transmission date / time information in the connection mediating device authentication instruction, and the connection mediating device authentication device 30 receives from the connection mediating device 20. The counter information included in the received connection mediation authentication request is verified and the counter value is not a value indicating that the counter has already been used, or the transmission date / time information is already verified and the transmission date / time is sufficiently new. By adopting a method for confirming whether or not there exists, it is verified whether or not the connection mediation apparatus authentication request has been illegally reused.

  For this reason, it is possible to prevent an interfering action such as a DoS attack that the connection mediating apparatus authentication device 30 suffers due to unauthorized reuse of the connection mediating apparatus authentication instruction.

  For this reason, in the communication system according to the first embodiment, the connection mediating apparatus authentication device 30 determines that the connection mediating apparatus authentication request received from the connection mediating apparatus 20 is in a trust relationship with the terminal device 10 (the connection mediating apparatus authentication device). Terminal device) is confirmed based on the authentication instruction (or verifies whether the intermediary device certification information is based on the authentication instruction of the terminal device 10). It is possible to prevent acts such as fraudulent acquisition and unauthorized access of the verification result of the intermediary device certification information, and unauthorized access.

  In the first embodiment, the connection mediating apparatus authentication apparatus 30 manages the connection result (for example, an identifier) that uniquely identifies the verification result of the mediating apparatus certification information in advance in association with information (for example, an identifier). For example, the connection mediation according to the mediation device certification information is applied to a rule including a conditional expression that determines whether connection is permitted or not according to the identifier, attribute information of the connection mediation device 20, or a combination thereof (see FIG. 5). It may be determined whether the device 20 is a partner to be connected to the terminal device 10, and the verification result and determination result of the mediation device certification information may be transmitted. Note that the present invention is not limited to managing connection rules in advance in association with information (for example, identifiers) that uniquely identify the terminal device 10, and managing common connection rules for all terminal devices 10 in advance. You may keep it.

  For this reason, it is possible to eliminate the burden of holding and managing rules relating to whether or not the connection with the connection mediating device 20 can be performed in the terminal device 10, and the burden of authorization processing based on these rules. Management can be performed easily.

  In the first embodiment, the connection mediator authentication device 30 receives the mediation device certification information received from the connection mediator 20 according to the information that uniquely identifies the terminal device 10 that instructs the authentication of the connection mediator 20. It is also possible to select a connection rule for determining whether or not the connection intermediary device 20 related to the authentication information for verifying the information and the intermediary device certification information should be connected to the terminal device 10.

  Specifically, as illustrated in FIG. 4 and FIG. 5, the terminal device 10 that manages authentication verification information and connection rules in association with the terminal identifier of the terminal device 10 and instructs the authentication of the connection mediating device 20. Depending on the terminal identifier, authentication verification information and connection rules may be selected, and as exemplified in FIGS. 6 and 7, there is a terminal owner who owns a plurality of terminal devices 10. In addition, when the connection mediating device authentication device 30 acts as a proxy for the terminal device 10 for authentication of the connection mediating device 20, the terminal owner is identified from the terminal identifier of the terminal device 10 instructing the authentication of the connection mediating device 20, and the terminal ownership Authentication verification information and connection rules may be selected according to the person. Note that the information that indirectly links the terminal identifier with the verification information for authentication and the connection rule is not limited to the terminal owner, and attribute values such as the model and position of the terminal device 10 may be adopted. Good.

  Therefore, the common connection mediating apparatus authentication device 30 can act as a proxy for processing based on different guidelines and policies for each terminal device 10, and the terminal owner who owns the plurality of terminal devices 10 When the connection mediating apparatus authentication device 30 acts as a proxy for the terminal mediating device 10 for the authentication of the connection mediating device 20, for example, the terminal possession is information that indirectly links the terminal identifier with the verification information for authentication or the connection rule. As a result of being able to perform processing based on common guidelines and policies for the terminal device 10 of the same owner, it is possible to homogenize the security level for each terminal owner, Centrally update authentication information for verifying the mediation device authentication information, update of a predetermined rule relating to whether or not the connection mediation device 20 can be connected, etc. Ukoto is possible.

  In the first embodiment, the access network 1 includes the terminal device 10 and the connection mediating device 20, and the backbone network 2 includes the connection mediating device 20, the connection mediating device authentication device 30, the terminal authentication device 40, and the server 50. Although the communication system has been described, the present invention is not limited to this, and another system configuration may be used. Therefore, a communication system according to the second embodiment will be described below.

  In the second embodiment, the outline and features of the communication system according to the second embodiment, the configuration and processing of the communication system will be described in order, and finally the effects of the second embodiment will be described.

[Outline and Features of Communication System (Example 2)]
First, the outline and characteristics of the communication system according to the second embodiment will be described with reference to FIG. FIG. 8 is a diagram for explaining the outline and features of the communication system according to the second embodiment.

  As shown in the figure, the communication system according to the second embodiment includes an access network 1 including a terminal device 10 and a connection mediating device 20, a backbone network 2 including a connection mediating device 20, a terminal authentication device 40, and a server 50, The management network 3 includes a connection mediating device authentication device 30 and a terminal authentication device 40. The backbone network 2 and the management network 3 are not limited to being configured as physically separate networks, and direct communication between the connection mediating device 20 and the connection mediating device authentication device 30 is not permitted. It may be configured as a configured physically single network.

  The terminal device 10 can communicate with the connection mediating device 20 via the access network 1. The connection mediating device 20 can communicate with the terminal authentication device 40 and the server 50 via the backbone network 2. The terminal authentication device 40 can communicate with the connection mediating device authentication device 30 via the management network 3. It should be noted that a limited number of terminal authentication devices 40 may be fixed in advance and placed on the management network 3 so that the connection mediating device authentication device 30 can communicate only with these terminal authentication devices 40. .

  In the communication system according to the second embodiment, the terminal device 10 is connected to the backbone network 2 via the connection mediating device 20 to authenticate the terminal device 10, and the terminal authentication device 40 disposed on the backbone network 2. The connection mediating apparatus 20 is connected to the management network 3 via the network, and the leakage of personal information of the terminal user and unauthorized access to the terminal are completely prevented as in the communication system according to the first embodiment. The point has the main feature.

  As an initial state, the connection mediating apparatus 20 is in a state where communication between the terminal device 10 and the backbone network 2 is not permitted, and the terminal device 10 mediates communication with the backbone network 2 to the connection mediating apparatus 20. It is the state before determining. In addition, the processes (1), (2), (14) to (17) shown in FIG. 8, and the specific processes in the terminal device 10, the connection mediating device 20, and the connection mediating device authentication device 30 are as described above. Since the communication system according to the first embodiment is the same as the communication system according to the first embodiment, the difference between the communication system according to the second embodiment and the communication system according to the first embodiment will be specifically described.

  In the communication system according to the second embodiment, the connection mediating apparatus 20 that has received the connection mediating apparatus authentication instruction from the terminal apparatus 10 transfers the connection mediating apparatus authentication instruction to the terminal authentication apparatus 40 (see (3) in FIG. 8). When the terminal authentication device 40 receives the connection mediation device authentication instruction from the connection mediation device 20, the terminal authentication device 40 selects the connection mediation device authentication device 30 that satisfies the authenticator condition included in the connection mediation device authentication instruction, and then requests the connection mediation device authentication. Is transmitted to the connection mediating apparatus authentication apparatus 30 ((4) in FIG. 8). The connection mediation device authentication device 30 that has received the connection mediation device authentication request from the terminal authentication device 40 (see (5) in FIG. 8) transmits a connection mediation device authentication request to the terminal authentication device 40 ((6) in FIG. 8). reference). The terminal authentication device 40 relays the connection mediation device authentication request received from the connection mediation device authentication device 30 to the connection mediation device 20 ((7) in FIG. 8).

  The connection mediating device 20 that has received the connection mediating device authentication request from the terminal authentication device 40 (see (8) in FIG. 8) generates information (mediating device certification information) that proves its own identifier and attribute, and connects the connection mediation device. It transmits to the terminal authentication device 40 as a device authentication response (see (9) in FIG. 8). The terminal authentication device 40 relays the connection mediation device authentication response received from the connection mediation device 20 to the connection mediation device authentication device 30 ((10) in FIG. 8).

  The connection mediation device authentication device 30 that has received the connection mediation device authentication response from the terminal authentication device 40 (see (11) in FIG. 8) manages it in association with the identifier of the terminal device 10 that instructs authentication of the connection mediation device 20. On the basis of the verification information for authentication of the connection mediating device 20, the verification information of the mediating device received as the connection mediating device authentication response is verified, and the verification result comprising the identifier and various attribute information of the connection mediating device 20 obtained as a result Is transmitted as a connection mediating apparatus authentication result (see (12) in FIG. 1). The terminal authentication device 40 relays the connection mediation device authentication result received from the connection mediation device authentication device 30 to the connection mediation device 20 ((13) in FIG. 8).

  For this reason, the communication system according to the second embodiment can cope with the case where the connection mediating apparatus 20 and the connection mediating apparatus authentication apparatus 30 cannot communicate with each other, and the connection mediating apparatus authentication apparatus. The system configuration in which the communication intermediary device 30 can communicate only with the terminal authentication device 40 allows the connection mediation device authentication device 30 to perform a DoS (Denial of Service: As a result of being able to prevent attacks and unauthorized access, the terminal device 10 reliably acquires the verification result of the mediation device certification information, which is the authentication result of the connection mediation device 20, and the connection mediation device 20 It is possible to more securely decide whether to connect to the backbone network 2 via the network, and to leak personal information of terminal users and Unauthorized access to the terminal can be completely prevented.

[Configuration of Communication System (Example 2)]
Next, the configuration of the communication system according to the second embodiment will be described with reference to FIG. FIG. 9 is a block diagram illustrating a configuration of a communication system according to the second embodiment. The communication system according to the second embodiment has basically the same configuration as the communication system according to the first embodiment, but differs in the points described below.

  The connection mediation device authentication request unit 44 of the terminal authentication device 40 receives the connection mediation device authentication instruction from the connection mediation device 20 and selects the connection mediation device authentication device 30 that satisfies the authenticator condition included in the connection mediation device authentication instruction. The connection mediation apparatus authentication request is transmitted above.

  The connection mediating device authentication related information relay unit 45 relays the connection mediating device authentication response received from the connection mediating device 20 to the connection mediating device authentication device 30 and also displays the connection mediating device authentication result received from the connection mediating device authentication device 30. Relay to the connection mediator 20.

[Communication System Processing (Example 2)]
Subsequently, processing of the communication system according to the second embodiment will be described with reference to FIG. FIG. 10 is a sequence diagram illustrating the processing flow of the communication system according to the second embodiment. Step S1001 to step S1007, step S1016, and step S1017 are the same as the processing of the communication system according to the first embodiment described with reference to FIG. 3 (step S301 to step S307, step S312 and step S313). Hereinafter, Step S1008 to Step S1015, which are different parts of the communication system according to the second embodiment from the communication system according to the first embodiment, will be described.

  The connection mediating apparatus 20 that has received the connection mediating apparatus authentication instruction from the terminal apparatus 10 transfers the connection mediating apparatus authentication instruction to the terminal authentication apparatus 40 (step S1008). When the terminal authentication device 40 receives the connection mediation device authentication instruction from the connection mediation device 20, the terminal authentication device 40 selects the connection mediation device authentication device 30 that satisfies the authenticator condition included in the connection mediation device authentication instruction, and then requests the connection mediation device authentication. Is transmitted to the connection mediating apparatus authentication apparatus 30 (step S1009). The connection mediation device authentication device 30 that has received the connection mediation device authentication request from the terminal authentication device 40 transmits a connection mediation device authentication request to the terminal authentication device 40 (step S1010). The terminal authentication device 40 relays the connection mediation device authentication request received from the connection mediation device authentication device 30 to the connection mediation device 20 (step S1011).

  The connection mediating apparatus 20 that has received the connection mediating apparatus authentication request from the terminal authenticating apparatus 40 generates information (mediating apparatus certification information) that proves its own identifier or attribute, and sends it to the terminal authenticating apparatus 40 as a connection mediating apparatus authentication response. Transmit (step S1012). The terminal authentication device 40 relays the connection mediation device authentication response received from the connection mediation device 20 to the connection mediation device authentication device 30 (step S1013).

  The connection mediation device authentication device 30 that has received the connection mediation device authentication response from the terminal authentication device 40 is for authenticating the connection mediation device 20 managed in association with the identifier of the terminal device 10 that instructs authentication of the connection mediation device 20. Based on the verification information, the mediation device certification information received as the connection mediation device authentication response is verified, and the verification result including the identifier and various attribute information of the connection mediation device 20 obtained as a result is transmitted as the connection mediation device authentication result. (Step S1014). The terminal authentication device 40 relays the connection mediation device authentication result received from the connection mediation device authentication device 30 to the connection mediation device 20 (step S1015).

[Effect of Example 2]
As described above, according to the second embodiment, the terminal device 10 is connected to the backbone network 2 via the connection mediating device 20, and the connection mediating device 20 is connected via the terminal authentication device 40 that authenticates the terminal device 10. In the communication system connected to the management network 3, the terminal authentication device 40 is uniquely assigned to the mediation device certification information (for example, an access point) that proves the validity of the connection mediation device itself received from the connection mediation device 20. Relaying information to the connection mediating apparatus authenticating device 30 responsible for executing the authentication of the connection mediating apparatus 20 and verifying the mediating apparatus certification information received from the connection mediating apparatus authenticating apparatus 30 Since the result is relayed to the connection mediating device 20, the connection mediating device 20 and the connection mediating device authentication device 30 cannot communicate with each other. The connection intermediary device authentication device 30 can communicate only with the terminal authentication device 40, so that connection can be made from another malicious connection mediation device 20 disguised as a legitimate connection mediation device 20. As a result of preventing the mediation device authentication device 30 from receiving a DoS (Denial of Service) attack and unauthorized access, the terminal device 10 verifies the mediation device certification information that is the authentication result of the connection mediation device 20. It is possible to securely acquire the result, and more safely determine whether or not to connect to the backbone network 2 via the connection mediating apparatus 20, and to leak personal information of the terminal user and illegal to the terminal Access can be completely prevented.

  In the second embodiment, the terminal authentication device 40 requests the connection mediation device authentication request to the connection mediation device authentication device 30 and the connection mediation device authentication when the authentication of the terminal device 10 is normally completed. The result and the terminal authentication result are simultaneously transmitted to the connection mediating apparatus 20, and the connection mediating apparatus 20 may simultaneously transmit the connection propriety determination result based on the terminal authentication result and the authentication result of the connection mediating apparatus 20 to the terminal device 10. Good. Therefore, hereinafter, the flow of processing of the communication system according to the third embodiment will be described with reference to FIG. FIG. 11 is a sequence diagram illustrating the processing flow of the communication system according to the third embodiment.

  As an initial state, the connection mediating device 20 is in a state where communication between the terminal device 10 and the backbone network 2 is not permitted, and the terminal device 10 determines that the connection mediating device 20 mediates communication with the backbone network 2. It is the state before doing. In addition, the processes of Step S1101 to Step S1103, Step S1107 to Step S1111, and Step S1114 shown in FIG. 11 are the processes of the communication system according to the second embodiment described with reference to FIG. Steps S1014 and S1017) are the same, and the difference between the communication system according to the third embodiment and the communication system according to the second embodiment will be specifically described.

  The terminal device 10 generates terminal certification information for certifying its own identifier and attribute as a terminal authentication response to the terminal authentication request received from the connection mediating device 20, and sends a connection mediating device authentication instruction together with the generated terminal certification information to the connection mediator The connection mediating device 20 transmits the terminal certification information and the connection mediating device authentication instruction, which are terminal authentication responses received from the terminal device 10, to the terminal authenticating device 40 (step S1104).

  First, the terminal authentication device 40 verifies the terminal certification information received from the connection mediating device 20, and if the authentication of the terminal device 10 does not end normally, discards the connection mediating device authentication instruction, The fact that the authentication of the device 10 has failed is transmitted to the connection mediating device 20, and the connection mediating device 20 transfers the fact that the authentication has failed to the terminal device 10 (step S1105). On the other hand, when the authentication of the terminal device 10 is normally completed, the terminal authentication device 40 selects the connection mediation device authentication device 30 that satisfies the authenticator condition included in the connection mediation device authentication instruction, and then selects the connection mediation device. A connection mediation device authentication request is transmitted to the authentication device 30 (step S1106). After the processing of step S1107 to step S1111, the terminal authentication device 40 simultaneously transmits the connection mediation device authentication result and the terminal authentication result received from the connection mediation device authentication device 30 to the connection mediation device 20 (step S1112).

  First, the connection mediating apparatus 20 determines whether to permit a connection request to the backbone network 2 of the terminal device 10 based on the terminal authentication result received from the terminal authentication device 40 (the terminal device 10 is connected to the backbone network 2). A connection permission / inhibition response and a connection mediating apparatus authentication result made up of the determination result are transmitted to the terminal device 10 (step S1113).

[Effect of Example 3]
As described above, according to the third embodiment, the terminal device 10 is connected to the backbone network 2 via the connection mediating device 20, authenticates the terminal device 10, and is located on the backbone network 2. In the communication system in which the connection mediating device 20 is connected to the management network 3 via 40, the connection mediating device 20 provides terminal certification information that proves the validity of the terminal device 10 together with an authentication instruction regarding the connection mediating device itself. When received from the terminal device 10, the terminal certification information and the mediation device certification information are transmitted to the terminal authentication device 40, and the connection request from the terminal device 10 is permitted based on the verification result of the terminal certification information received from the terminal authentication device 40. Whether or not to accept the verification result of the mediation device certification information received from the terminal authentication device 40 and the connection request. The terminal authentication apparatus 40 verifies the terminal certification information received from the connection mediating apparatus 20 and, if the terminal certification information is normally verified, the terminal authentication apparatus 40 transmits the intermediate result to the terminal apparatus 10 at the same time. Since the device certification information is relayed to the connection mediating device authentication device 30 and the verification result of the terminal certification information and the verification result of the mediation device certification information received from the connection mediating device authentication device 30 are relayed simultaneously to the connection mediating device 20, the terminal device It is possible to suppress the number of times of communication and the amount of communication required for authentication of the authentication 10 and the connection mediating device 20, the communication cost, and the like, and a malicious terminal that performs only authentication of the terminal device 10 and blocks communication It is possible to suppress terminal information (terminal user personal information) collection attacks by the authentication device 40.

  Further, according to the third embodiment, the mediation device certificate is received only when the mediation device certification information relayed from the specific terminal authentication device 40 (the terminal authentication device 40 that is arranged in advance with a limited number being fixed) is received. Since the information is verified, the connection mediating apparatus authentication device 30 is configured to be able to communicate only with the specific terminal authentication device 40, thereby connecting from another malicious connection mediating apparatus 20 disguised as the regular connection mediating apparatus 20. It is possible to more effectively prevent the mediation device authentication device 30 from receiving a DoS (Denial of Service) attack or unauthorized access.

  Although the embodiments of the present invention have been described so far, the present invention may be implemented in various different forms other than the embodiments described above. Therefore, another embodiment included in the present invention will be described below.

(1) System Configuration, etc. Each component of each device constituting the communication system shown in FIG. 2 or FIG. 9 is functionally conceptual and does not necessarily need to be physically configured as illustrated. That is, the specific form of distribution / integration of each device is not limited to the one shown in the figure, and the connection mediation device authentication request unit 32 and the connection mediation device authentication unit 33 of the connection mediation device authentication device 30 shown in FIG. The whole or a part of the connection mediating apparatus authentication request unit 44 and the connection mediating apparatus authentication related information relay unit 45 shown in FIG. 9 can be integrated or functioned in arbitrary units according to various loads and usage conditions. Can be distributed or integrated physically or physically. Further, each processing function performed in each device (for example, an authentication request and authentication response function of the connection mediating apparatus 20 and an authentication request function and an authentication function of the connection mediating apparatus authentication device 30) is all or any part thereof. Can be realized by a CPU and a program that is analyzed and executed by the CPU, or can be realized as hardware by wired logic.

  The processing method described in this embodiment (see FIGS. 3, 10, and 11) can be realized by executing a program prepared in advance on a computer such as a personal computer or a workstation. This program can be distributed via a network such as the Internet. The program can also be executed by being recorded on a computer-readable recording medium such as a hard disk, a flexible disk (FD), a CD-ROM, an MO, and a DVD and being read from the recording medium by the computer.

  As described above, the communication system and the communication method according to the present invention are useful when the terminal device is connected to a predetermined network via the connection mediating device, and in particular, the leakage of personal information of the terminal user and the terminal Suitable for completely preventing unauthorized access to

1 is a diagram for explaining an overview and characteristics of a communication system according to Embodiment 1. FIG. 1 is a block diagram illustrating a configuration of a communication system according to a first embodiment. FIG. 3 is a sequence diagram illustrating a processing flow of the communication system according to the first embodiment. It is a figure which shows the structural example of the verification information for authentication. It is a figure which shows the structural example of a connection rule. It is a figure which shows the structural example of a connection rule. It is a figure which shows the structural example of the verification information for authentication. FIG. 6 is a diagram for explaining an overview and characteristics of a communication system according to a second embodiment. FIG. 6 is a block diagram illustrating a configuration of a communication system according to a second embodiment. FIG. 10 is a sequence diagram illustrating a processing flow of the communication system according to the second embodiment. FIG. 10 is a sequence diagram illustrating a processing flow of the communication system according to the third embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Access network 2 Core network 3 Management network 10 Terminal device 11 Communication control part 12 Connection request part 13 Terminal authentication response part 14 Connection mediation apparatus authentication instruction | indication part 15 Connection availability determination part 20 Connection mediation apparatus 21 Communication control part 22 Terminal authentication request part DESCRIPTION OF SYMBOLS 23 Connection mediation apparatus authentication request part 24 Connection mediation apparatus authentication response part 25 Connection possibility determination part 30 Connection mediation apparatus authentication apparatus 31 Communication control part 32 Connection mediation apparatus authentication request part 33 Connection mediation apparatus authentication part 40 Terminal authentication apparatus 41 Communication control part 42 Terminal Authentication Request Unit 43 Terminal Authentication Unit 44 Connection Mediation Device Authentication Request Unit 45 Connection Mediation Device Authentication Related Information Relay Unit 50 Server

Claims (9)

A communication system in which a terminal device is connected to a predetermined network via a connection mediating device,
The connection mediating device includes:
Authentication instruction receiving means for receiving from the terminal device an authentication instruction related to the connection mediating apparatus itself,
When the authentication instruction is received by the authentication instruction receiving means, an intermediary device certification information transmission for transmitting intermediary device certification information that proves its validity to an intermediary device authentication device that authenticates the connection intermediary device. Means,
When the verification result of the mediation device certification information is received from the mediation device authentication device, verification result transfer means for transferring the verification result to the terminal device;
With
The intermediary device authentication device includes:
When the mediation device certification information is received from the connection mediation device, the mediation device certification information is verified based on authentication information managed in association with information that uniquely identifies the terminal device that performs the authentication instruction. Mediating device certification information verification means;
A connection for determining whether or not the connection mediating device related to the mediating device certification information is a partner to be connected to the terminal device by applying the verification result of the mediating device certification information by the mediating device certification information verification means to a predetermined rule. Availability determination means;
After protecting the integrity of the verification result by the mediation device certification information verification unit, the verification result transmission unit that transmits the verification result and the determination result by the connection possibility determination unit to the connection mediation device ;
A communication system comprising: A communication system in which a terminal device is connected to a network via a connection mediating device, and the connection mediating device and a terminal authentication device that authenticates the terminal device are connected via the network or a network different from the network. There,
The connection mediating device includes:
Authentication instruction receiving means for receiving from the terminal device an authentication instruction related to the connection mediating apparatus itself,
When the authentication instruction is received by the authentication instruction receiving unit, an intermediary device certification information transmitting unit that transmits mediation device certification information that proves its validity to the terminal authentication device;
When the verification result of the mediation device certification information is received from the terminal authentication device, verification result transfer means for transferring the verification result to the terminal device;
With
The terminal authentication device is
When the mediation device certification information is received from the connection mediation device, the mediation device certification information relay unit relays the mediation device certification information to the mediation device authentication device that authenticates the connection mediation device;
A verification result relay means for relaying the mediation device certification information to the connection mediation device when the verification result of the mediation device certification information is received from the mediation device authentication device;
With
The intermediary device authentication device includes:
When the mediation device certification information relayed from the terminal authentication device is received, the mediation device certification information based on authentication information managed in association with information that uniquely identifies the terminal device that performs the authentication instruction Mediating device certification information verification means for verifying,
After protecting the integrity of the verification result by the intermediary device certification information verification unit, a verification result transmission unit that transmits the verification result to the terminal authentication device;
A communication system comprising: The mediation device authentication apparatus, according to claim 1, characterized in that the mediating apparatus certificate information received from the connection mediating apparatus further comprising means for verifying whether or not based on the authentication instruction of the terminal or 2. The communication system according to 2 . 3. The communication system according to claim 1, wherein the mediation device authentication device further includes means for preventing reuse of the verification result of the mediation device certification information by the mediation device certification information verification unit. The mediation device authentication device comprises means for selecting the authentication information or the predetermined rule according to information for uniquely specifying the terminal device that instructs authentication of the connection mediation device. Item 12. The communication system according to Item 1 . The connection mediating device includes:
Received from the terminal device terminal certification information that proves the validity of the terminal device together with an authentication instruction regarding the connection mediating device itself that is the authentication instruction receiving means;
Transmitting the terminal certification information and the mediation device certification information to the terminal authentication device by the mediation device certification information transmission means;
Based on the verification result of the terminal certification information received from the terminal authentication device, further comprising a connection availability determination means for determining whether to permit a connection request from the terminal device,
A verification result of the intermediary device certification information received from the terminal authentication device by the verification result transfer means and a determination result as to whether to permit the connection request are simultaneously transmitted to the terminal device;
The terminal authentication device is
Terminal certification information verification means for verifying the terminal certification information received from the connection mediating apparatus,
When the verification of the terminal certification information is normally performed by the terminal certification information verification unit, the mediation device certification information is relayed to the mediation device authentication device by the mediation device certification information relay unit,
3. The communication according to claim 2, wherein the verification result relay unit relays the verification result of the terminal certification information and the verification result of the mediation device certification information received from the mediation device authentication device to the connection mediation device at the same time. system. The intermediary device authentication device is characterized in that the intermediary device certification information verification means verifies the intermediary device certification information only when the mediation device certification information relayed from a specific terminal authentication device is received. The communication system according to claim 2 . A communication method applied to a communication system in which a terminal device is connected to a predetermined network via a connection mediating device,
The connection mediating device includes:
An authentication instruction receiving step of receiving from the terminal device an authentication instruction related to the connection mediating apparatus itself,
When the authentication instruction is received in the authentication instruction receiving step, an intermediary device certification information transmission for transmitting intermediary device certification information that proves its validity to an intermediary device authentication device that authenticates the connection intermediary device. Process,
When the verification result of the mediation device certification information is received from the mediation device authentication device, a verification result transfer step of transferring the verification result to the terminal device;
Including
The intermediary device authentication device includes:
When the mediation device certification information is received from the connection mediation device, the mediation device certification information verification step for verifying the mediation device certification information;
A connection that determines whether or not the connection mediating device related to the mediating device certification information is a partner to be connected to the terminal device by applying the verification result of the mediating device certification information in the mediating device certification information verification step to a predetermined rule. A decision process;
After protecting the integrity of the verification result by the intermediary device certification information verification step, a verification result transmission step of transmitting the verification result and the determination result by the connection possibility determination step to the connection intermediary device;
The communication method characterized by including. Communication in which a terminal device is connected to a predetermined network via a connection mediating device, and the connection mediating device and a terminal authentication device that authenticates the terminal device are connected via the network or a network different from the network A system,
The connection mediating device includes:
An authentication instruction receiving step of receiving from the terminal device an authentication instruction related to the connection mediating apparatus itself,
When the authentication instruction is received in the authentication instruction receiving step, mediation device certification information that proves its validity is transmitted to the terminal authentication device to the mediation device authentication device that authenticates the connection mediation device. An intermediary device certification information transmission step;
A verification result transfer step of transferring the verification result to the terminal device when the verification result of the mediation device certification information is received from the terminal authentication device;
Including
The terminal authentication device is
When the mediation device certification information is received from the connection mediation device, the mediation device certification information relaying step of relaying the mediation device certification information to the mediation device authentication device;
A verification result relaying step for relaying the mediation device certification information to the connection mediation device when the verification result of the mediation device certification information is received from the mediation device authentication device;
Including
The intermediary device authentication device includes:
When the mediation device certification information relayed from the terminal authentication device is received, the mediation device certification information verification step for verifying the mediation device certification information;
After protecting the integrity of the verification result by the mediation device certification information verification step, a verification result transmission step of transmitting the verification result to the terminal authentication device;
The communication method characterized by including.

Images