JP5241426B2 - Mobile body and communication method - Google Patents

Description

  The present invention relates to a mobile object and a communication method, and is particularly suitable for a mobile object that moves outdoors to perform wireless communication with the outside.

  At the steelworks, carrier pallets run outside the steelworks for the purpose of transporting steel materials. In this carrier pallet, various information related to the command room and the transfer work are communicated using wireless communication. The worker on the carrier pallet performs various operations according to the communication result. For example, when the command room informs the worker on the carrier pallet that the steel material loaded on the carrier pallet is conveyed to the yard A, the worker operates the carrier pallet to the yard A. Going down and carrying out the work of lowering the steel loaded on the carrier pallet to Yard A.

If the carrier pallet and the command room perform wireless communication in this way, the contents of the communication may be intercepted by a third party. Therefore, it is necessary to ensure communication security (information confidentiality) in wireless communication.
Therefore, in the technique described in Patent Document 1, when a wireless LAN terminal, which is one of wireless communications, accesses an access point, the wireless LAN access server performs processing for authenticating the wireless LAN terminal.
In the technique disclosed in Patent Document 2, when a wireless terminal that can access both the mobile communication network and the wireless LAN is authenticated by the wireless LAN, the wireless LAN side and the mobile communication network side cooperate in authentication. Like to do.

Japanese Patent Laid-Open No. 2006-41962 JP 2004-88148 A

By the way, portable terminals such as PDA (Personal Digital Assistants) used in the manufacturing industry have a rugged structure compared to PDAs provided to general consumers. There are low-function devices with a narrow communication area.
However, in the techniques described in Patent Documents 1 and 2 described above, the communication area of the mobile terminal needs to be included in the wireless LAN. Therefore, when using a low-functional portable terminal as described above, it is necessary to provide a large number of access points (terrestrial wireless devices), which increases the cost of the system. In the mobile terminal, the security algorithm may be at a low level. In such a case, it is difficult to ensure the security of communication between the mobile terminal and the access point (terrestrial wireless device). become. Furthermore, if the communication area of the mobile terminal is expanded, the possibility of unauthorized access to the wireless LAN increases.
As described above, in the conventional technology, there is a problem that it is difficult to ensure communication security when a mobile terminal performs wireless communication with the outside in a mobile object such as a carrier pallet.

  The present invention has been made in view of such problems, and enables security when wireless communication is performed between a portable terminal possessed by a worker on a moving body and the outside of the moving body. It aims to be able to raise as much as possible.

A mobile body of the present invention is a mobile body that a user drives and moves outdoors, and a first mobile wireless communication device that performs wireless communication with a mobile terminal in a predetermined area in the mobile body, A second mobile wireless communication device that is communicably connected to the first mobile wireless communication device and performs wireless communication with an outdoor wireless communication device located outdoors, and the first mobile wireless communication The apparatus has first wireless communication means for performing wireless communication of data encrypted by applying the first encryption technology with the portable terminal, and the second mobile wireless communication apparatus includes An outdoor wireless communication device and second wireless communication means for performing wireless communication of data encrypted by applying a second encryption technique having higher data confidentiality than the first encryption technique. The second wireless communication means is wired with the outdoor wireless communication device. Data for making an authentication request to an authentication device that is communicatively connected, and encrypted data that is encrypted by applying the second encryption technology is transmitted to the outdoor wireless communication device Transmitting means for receiving, and receiving means for receiving, from the outdoor wireless communication apparatus, data indicating that authentication has been performed by the authentication apparatus, the data being encrypted by applying the second encryption technique has the door, characterized in that after the encrypted data is received by the receiving means is adapted to initiate communication with the outdoor wireless communication device and a wired communicatively connected has been that the communication device And

  The communication method of the present invention includes a mobile terminal in a predetermined area in a moving body that a user drives and moves outdoors, a first in-mobile wireless communication device that performs wireless communication in the moving body, and the first A communication method for performing communication using a second mobile wireless communication device that is communicably connected to one mobile wireless communication device and performs wireless communication with an outdoor wireless communication device that is outdoors. A first wireless communication step in which the mobile wireless communication apparatus and the mobile terminal perform wireless communication of data encrypted by applying a first encryption technique; and the second mobile wireless communication A second wireless device that performs wireless communication between the device and the outdoor wireless communication device by applying a second encryption technology having higher data confidentiality than the first encryption technology. Communication step, and the second wireless communication step. Is data for making an authentication request to an authentication device connected to the outdoor wireless communication device in a wired manner, and is encrypted by applying the second encryption technology. A transmission step of transmitting encrypted data to the outdoor wireless communication device; and data indicating that authentication has been performed by the authentication device, the encrypted data being encrypted by applying the second encryption technology Receiving from the outdoor wireless communication device, and after the encrypted data is received by the receiving step, the communication device connected to the outdoor wireless communication device in a wired communication manner Communication is started.

  According to the present invention, the mobile terminal in a predetermined area in the moving body and the first in-mobile wireless communication device in the moving body are encrypted by applying a relatively low level encryption technique. Wireless data communication. In addition, a second mobile wireless communication device that is in a mobile body and is communicably connected to the first mobile wireless communication device, and an outdoor wireless communication device that is outdoors are relatively high-level encryption technology. Is used for wireless communication of encrypted data. Therefore, it is possible to limit the communication area of the mobile terminal and expand the communication area of the second mobile wireless communication device. Therefore, even when a portable terminal incorporating a low-level communication security algorithm is used, security is ensured as much as possible when wireless communication is performed between the portable terminal and the outside of the mobile object. And the number of outdoor wireless communication devices installed can be prevented from becoming large.

Hereinafter, an example in which an embodiment of the present invention is applied to a steel mill will be described with reference to the drawings.
FIG. 1 is a diagram illustrating an example of a configuration of a wireless LAN system.
In FIG. 1, the wireless LAN system enables access points 11a to 11c, edge switches 12a and 12b, access switches 13a and 13b, a core switch 14, an authentication server 15, and a communication server 16 to communicate with each other. And a wired LAN 17 to be connected. These are provided, for example, on the premises of an ironworks. In the following description, the side on which these are installed is referred to as the ground side as necessary. The wireless LAN system includes a carrier pallet 18 that is an example of a moving body, and a wireless LAN for establishing wireless communication between the carrier pallet 18 and the ground side is constructed.

  The access points 11a to 11c are for performing wireless communication with the carrier pallet 18 that travels on the premises (outdoors) of the steelworks, and are provided near the travel route of the carrier pallet 18, for example. In FIG. 1, three access points 11 are shown, but in reality, a larger number of access points 11 are provided on the premises of the steelworks.

The edge switches 12a and 12b, the access switches 13a and 13b, and the core switch 14 have a function as a hub (Hub), and relay data passing through the wired LAN 17.
The authentication server 15 is for performing authentication for communication between the communication server 16 and a later-described PDA 25 in the cabs 18a and 18b of the carrier pallet 18.
The communication server 16 is for performing various communications with the PDA 25 after successful authentication by the authentication server 15.
The carrier pallet 18 is an example of a moving body, and travels on the premises of a steelworks in order to transport steel materials and the like. The carrier pallet 18 is provided with cabs 18a and 18b on the front and rear sides, respectively. In the following description, the carrier pallet 18 side is referred to as the vehicle upper side as necessary.

  FIG. 2 is a diagram illustrating an example of a configuration of communication hardware provided in the cab 18 a of the carrier pallet 18. Since the hardware provided in the cabs 18a and 18b of the carrier pallet 18 is the same, only the inside of the cab 18a will be described here, and the description inside the cab 18b will be omitted.

In FIG. 2, an in-vehicle access point 21, an in-vehicle POE (Power over Ethernet (registered trademark)) switch 22, and an out-of-vehicle wireless LAN unit 23 are provided in the cab 18 a.
The in-vehicle access point 21 is an access point in the driver's cab 18a, performs wireless communication with the PDA 25 possessed by the worker 24 in the driver's cab 18a, and is wired to the in-vehicle wireless LAN unit 23 via the in-vehicle POE switch 22. Communicate.
The PDA 25 inputs and processes data transmitted from the in-vehicle access point 21. Specifically, for example, the PDA 25 displays an image based on work instruction data transmitted from the in-vehicle access point 21 on a display screen provided in the PDA 25. The PDA 25 records work performance data transmitted from the in-vehicle access point 21 on a recording medium provided in the PDA 25. The communication area of the PDA 25 is, for example, about 20 to 30 m at the maximum.

  The in-vehicle POE switch 22 is connected to the in-vehicle access point 21 and the external wireless LAN unit 23 via a communication cable. The in-vehicle POE switch 22 relays communication performed between the in-vehicle access point 21 and the external wireless LAN unit 23. The in-vehicle POE switch 22 monitors the status of communication performed via the in-vehicle POE switch 22, or between a communication device (not shown) other than the PDA 25 and another communication device (for example, the external wireless LAN unit 23). Relay the communication that takes place. The in-vehicle POE switch 22 is connected to a monitoring camera, a sound generator, and the like provided in the cab 18a via a cable. The in-vehicle POE switch 22 transmits image data captured by the monitoring camera to the outside of the carrier pallet 18 via the out-of-vehicle wireless LAN unit 23, or from the outside of the carrier pallet 18 based on the image data. Audio data received via the LAN unit 23 can be transmitted to the audio generator. Thereby, it is possible to give a voice instruction to the worker 24.

The outside wireless LAN unit 23 performs wireless communication with the access point 11 on the ground side and performs wired communication with the in-vehicle access point 21 via the in-vehicle POE switch 22. Note that the communication area of the external wireless LAN unit 23 is, for example, on the order of 100 m.
As described above, in the present embodiment, wireless communication is performed between the PDA 25 and the in-vehicle access point 21, and between the in-vehicle wireless LAN unit 23 and the access point 11, and between the in-vehicle access point 21 and the out-of-vehicle wireless LAN unit 23. Wired communication is performed between them. The wireless communication performed here can be performed, for example, according to IEEE802.11b / g.

  In this embodiment, when wireless communication is performed, the data to be transmitted is encrypted, and the encrypted data is decrypted to decrypt the contents of the data. Furthermore, in this embodiment, when performing wireless communication between the external wireless LAN unit 23 and the access point 11 rather than encryption performed when performing wireless communication between the PDA 25 and the in-vehicle access point 21. The encryption to be executed is performed using a high-level encryption technique (a method in which confidentiality of data to be communicated is increased, that is, a method having a high security level).

FIG. 3 is a diagram illustrating an example of a communication mode performed among the PDA 25, the in-vehicle access point 21, the in-vehicle POE switch 22, the out-of-vehicle wireless LAN unit 23, and the access point 11.
As shown in FIG. 3, in this embodiment, when wireless communication is performed between the PDA 25 and the in-vehicle access point 21, data to be transmitted is encrypted using WEP (IEEE802.11). . In contrast, when wireless communication is performed between the external wireless LAN unit 23 and the access point 11, data to be transmitted is encrypted using WPA (IEEE802.11i).

  In addition, radio wave shielding materials are attached to the inner walls (entire or partial areas) of the cabs 18a and 18b. This is to prevent the radio waves transmitted from the PDA 25 from leaking outside the cabs 18a and 18b as much as possible. Specifically, for example, a grid-like radio wave shielding material having a side length shorter than the wavelength of radio waves used in wireless communication or a radio wave shielding material made of a conductive sheet is used in the cab 18a. , 18b.

  FIG. 4 is a diagram illustrating an example of main functional configurations of the PDA 25, the in-vehicle access point 21, the out-of-vehicle wireless LAN unit 23, the access point 11a, and the authentication server 15. Since the functional configuration of the communication hardware in the cabs 18a and 18b of the carrier pallet 18 is the same, the cab 18a will be described here, and the description of the cab 18b will be omitted. Further, since the functional configurations of the access points 11a to 11c are the same, the access point 11a will be described here, and the description of the access points 11b and 11c will be omitted.

<PDA25>
The processing unit 25a is for controlling various processes executed by the PDA 25, and is realized by using, for example, a microcomputer including a CPU, a RAM, and a ROM (including an EEPROM and the like).
The display unit 25b displays an image for the user to input and refer to various types of information. The display unit 25b displays, for example, an image based on work instruction data transmitted from the ground side. The display unit 25b is realized by using, for example, a liquid crystal display. The display unit 25b includes a touch panel and has a function as a user interface.

The communication power setting unit 25c sets communication power for wireless communication performed with the in-vehicle access point 21 based on an operation by an operator or the like. In the present embodiment, communication power such that the communication area of the PDA 25 is limited to the cab 18a is set in the communication power setting unit 25c. Note that the communication power may be set by default. The communication setting unit 25c is realized by using, for example, a RAM, a register, or a ROM.
The EESID registration unit 25d stores an ESSID that identifies a wireless LAN constructed between the PDA 25 and the in-vehicle access point 21. The EESID registration unit 25d is realized by using, for example, a ROM.
The wireless communication unit 25e is for performing wireless communication with the in-vehicle access point 21. The wireless communication unit 25e is realized by using, for example, a wireless communication interface.

<In-car access point 21>
The processing unit 21a is for controlling various processes executed by the in-vehicle access point 21, and is realized, for example, by using a microcomputer including a CPU, a RAM, and a ROM (including an EEPROM and the like). The
The wireless communication unit 21b is for performing wireless communication with the PDA 25. The wireless communication unit 21b is realized by using a wireless communication interface, for example.

The communication power setting unit 21c sets communication power for wireless communication performed with the PDA 25 based on an operation by an operator or the like. In the present embodiment, communication power such that the communication area of the in-vehicle access point 21 is limited to the cab 18a is set in the communication power setting unit 21c. Note that the communication power may be set by default. The communication setting unit 21c is realized by using, for example, an HDD.
The EESID registration unit 21d stores an ESSID that identifies a wireless LAN constructed between the PDA 25 and the in-vehicle access point 21. The EESID registration unit 21d is realized by using, for example, an HDD.
The wired communication unit 21 e is for performing wired communication with the external wireless LAN unit 23 via the in-vehicle POE switch 22. The wired communication unit 21e is realized by using, for example, a wired communication interface.

<External wireless LAN unit 23>
The processing unit 23a is for controlling various processes executed by the wireless LAN unit 23 outside the vehicle. For example, the processing unit 23a is realized by using a microcomputer including a CPU, a RAM, and a ROM (including an EEPROM and the like). Is done.
The wired communication unit 23 b is for performing wired communication with the in-vehicle access point 21 via the in-vehicle POE switch 22. The wired communication unit 23a is realized by using, for example, a wired communication interface.

The EESID registration unit 23 c stores an ESSID that identifies a wireless LAN constructed between the outside-vehicle wireless LAN unit 23 and the access point 11. The EESID registration unit 23c is realized by using, for example, an HDD.
The MAC address registration unit 23 c stores a MAC address unique to the outside-vehicle wireless LAN unit 23. The MAC address registration unit 23c is realized by using, for example, a ROM.
The password / ID registration unit 23 e stores “password and ID” transmitted from the out-of-vehicle wireless LAN unit 23 toward the authentication server 15 when the authentication server 15 performs client authentication. The password / ID registration unit 23e is realized by using, for example, an HDD.

The certificate registration unit 23f stores a CA / server certificate for the server wireless LAN unit 23 to perform server authentication. The certificate registration unit 23f is realized by using, for example, an HDD.
The wireless communication unit 23g is for performing wireless communication with the access point 11. The wireless communication unit 23g is realized by using a wireless communication interface, for example.

<Access point 11a>
The processing unit 41a is for controlling various processes executed by the access point 11a, and is realized, for example, by using a microcomputer including a CPU, a RAM, and a ROM (including an EEPROM and the like). .
The wireless communication unit 41 b is for performing wireless communication with the external wireless LAN unit 23. The wireless communication unit 41b is realized by using a wireless communication interface, for example.
The MAC address registration unit 41c stores the MAC address of an external communication device that is permitted to communicate with the access point 11a. The MAC address registration unit 41c is realized by using, for example, an HDD.

The EESID registration unit 41 d stores an ESSID that identifies a wireless LAN constructed between the outside-vehicle wireless LAN unit 23 and the access point 11. The EESID registration unit 41d is realized by using, for example, an HDD.
In this embodiment, the EESID registered in the EESID registration units 21e and 25d is different from the EESID registered in the EESID registration units 23c and 41d.
The wired communication unit 41e is for performing wired communication with the authentication server 15, the communication server 16, and the like via the edge switch 12, the access switch 13, and the core switch 1414. The wired communication unit 41e is realized by using, for example, a wired communication interface.

<Authentication server 15>
The processing unit 15a is for controlling various processes executed by the authentication server 15, and is realized, for example, by using a microcomputer including a CPU, a RAM, and a ROM (including an EEPROM and the like). .
The wired communication unit 15b is for performing wired communication with the access point 11 and the like via the edge switch 12, the access switch 13, and the core switch 1414. The wired communication unit 15b is realized by using, for example, a wired communication interface.
The password / ID registration unit 15c stores a password and an ID (a password and an ID of a partner permitted to communicate) that are used by the authentication server 15 for client authentication in association with each other. The password / ID registration unit 15c is realized by using, for example, an HDD.

The certificate issuing unit 15d has a function as a CA station, and issues a CA / server certificate based on a certificate light emission request generated in the authentication server 15. The certificate issuing unit 15d is realized by using, for example, a microcomputer including a CPU, a RAM, and a ROM (including an EEPROM and the like). The CA station may be outside the authentication server 15.
The certificate registration unit 15e stores the CA / server certificate issued by the certificate issuing unit 15d. The certificate registration unit 15e is realized by using, for example, an HDD.
In this embodiment, server authentication and client authentication are performed using the EAP-PEAP authentication method.

  As described above, in this embodiment, for example, the in-vehicle access point 21 realizes an example of the first mobile wireless communication device, the wireless communication unit 21b realizes an example of the first wireless communication unit, and communication power setting. An example of the limiting unit is realized by the unit 21c. Moreover, an example of the second mobile wireless communication device is realized by the wireless LAN unit 23 outside the vehicle, and an example of the second wireless communication unit is realized by the wireless communication unit 23g. Also, encryption by WEP is an example of the first encryption technique, and encryption by WPA is an example of the second encryption technique. An example of an authentication device is realized by the authentication server 15.

Next, an example of processing in the wireless LAN system will be described with reference to the flowchart of FIG.
First, in step S1, when the power of the PDA 25 is turned on in the cabs 18a and 18b, a communication session is established between the PDA 25 and the in-vehicle access point 21.

  Next, in step S2, the processing unit 25a of the PDA 25 extracts the ESSID from the ESSID registration unit 25d, and encrypts the data including the extracted ESSID according to WEP. The wireless communication unit 25e transmits the encrypted encrypted data to the in-vehicle access point 21 wirelessly with the communication power set in the communication power setting unit 25c.

  Next, in step S <b> 3, the wireless communication unit 21 b of the in-vehicle access point 21 receives encrypted data from the PDA 25. The processing unit 21a decrypts the encrypted data and determines whether or not the ESSID included in the decrypted decrypted data matches the ESSID registered in the ESSID registration unit 21d. As a result of this determination, if the ESSIDs do not match, the process proceeds to step S4, and processing for terminating communication is executed in both the PDA 25 and the in-vehicle access point 21. At this time, the in-vehicle access point 21 hides its own ESSID so as not to transmit the ESSID registered in the ESSID registration unit 21d to the PDA 25 (performs ANY connection rejection). And the process by the flowchart of FIG. 5 is complete | finished.

On the other hand, if the ESSIDs match, the process proceeds to step S5. In step S5, a communication session is established between the in-vehicle access point 21 and the external wireless LAN unit 23. Thereafter, the processing unit 23a of the external wireless LAN unit 23 extracts the ESSID from the ESSID registration unit 23c and the MAC address from the MAC address registration unit 23d, and encrypts the data including the extracted “ESSID and MAC address” according to WPA. To do.
When a communication session is established between the external wireless LAN unit 23 and one of the access points 11 in the communication area of the external wireless LAN unit 23, the wireless communication unit 23g of the external wireless LAN unit 23 is as described above. The encrypted data thus encrypted is transmitted to the access point 11.

  Next, in step S <b> 6, the wireless communication unit 41 b of the access point 11 receives the encrypted data transmitted from the outside-vehicle wireless LAN unit 23. The processing unit 41a decrypts the encrypted data, and determines whether the ESSID included in the decrypted decrypted data matches the ESSID registered in the ESSID registration unit 41d. As a result of the determination, if the ESSIDs do not match, the process proceeds to step S4, and processing for ending communication is performed in each of the outside wireless LAN unit 23, the access point 11, the PDA 25, and the in-vehicle access point 21. The At this time, the access point 11 hides its own ESSID so as not to transmit the ESSID registered in the ESSID registration unit 41d to the wireless LAN unit 23 outside the vehicle (performs ANY connection rejection). And the process by the flowchart of FIG. 5 is complete | finished.

  On the other hand, if the ESSIDs match, the process proceeds to step S7. In step S7, the processing unit 41a of the access point 11 determines whether or not the MAC address included in the decrypted data obtained in step S6 matches the MAC address registered in the MAC address registration unit 41c. judge. As a result of this determination, if the MAC addresses do not match, the process proceeds to step S4, and processing for terminating communication is executed in each of the outside wireless LAN unit 23, the access point 11, the PDA 25, and the in-vehicle access point 21. . And the process by the flowchart of FIG. 5 is complete | finished.

  On the other hand, if the MAC addresses match, the process proceeds to step S8. In step S8, authentication processing according to EAP-PEAP is executed between the external wireless LAN unit 23 and the authentication server 15. In EAP-PEAP, client authentication is performed after server authentication. In server authentication, whether the CA / server certificate registered in the certificate registration unit 15e of the authentication server 15 matches the CA / server certificate registered in the certificate registration unit 23f of the external wireless LAN unit 23. A determination is made whether or not. On the other hand, in the client authentication, “password and ID” registered in the password / ID registration unit 23e of the wireless LAN unit 23 outside the vehicle is registered in the password / ID registration unit 15c of the authentication server 15. A determination is made as to whether or not it matches.

  As described above, in the present embodiment, an example of data for making an authentication request to the authentication device is realized by “data including a password and an ID” transmitted from the wireless LAN unit 23 outside the vehicle to the authentication server 15. . In addition, an example of data indicating authentication is realized by “data indicating that the password and ID match” transmitted from the authentication server 15 to the wireless LAN unit 23 outside the vehicle.

Next, in step S9, it is determined whether or not authentication by EAP-PEAP is successful. Specifically, it is determined whether or not the processing unit 23a of the outside wireless LAN unit 23 determines that the server authentication is successful and the processing unit 15a of the authentication server 15 determines that the client authentication is successful. The
As a result of this determination, if the authentication fails, the process proceeds to step S4, and processing for terminating communication is performed in each of the authentication server 15, the outside wireless LAN unit 23, the access point 11, the PDA 25, and the in-vehicle access point 21. Executed. And the process by the flowchart of FIG. 5 is complete | finished.

On the other hand, if the authentication is successful, the process proceeds to step S10. In step S10, communication between the PDA 25 and the communication server 16 is executed.
Thus, in this embodiment, for example, an example of a communication device is realized by the communication server 16.
Next, in step S11, the processing unit 23a of the external wireless LAN unit 23 determines whether or not to shift to communication with another access point 11 based on the data received by the wireless communication unit 23g. As a result of this determination, when the communication is transferred to another access point 11, the process returns to step S <b> 5, and the in-vehicle wireless LAN unit 23 shifts to communication with the other access point 11.

  On the other hand, when it does not shift to communication with another access point 11, the process proceeds to step S12. In step S12, the processing unit 23a of the external wireless LAN unit 23 determines whether or not to end communication between the PDA 25 and the communication server 16 based on data transmitted from the PDA 25 or the like. If the communication between the PDA 25 and the communication server 16 is not terminated as a result of this determination, the process returns to step S10 and the communication between the PDA 25 and the communication server 16 is continued. On the other hand, when the communication between the PDA 25 and the communication server 16 is terminated, the authentication server 15, the communication server 16, the outside wireless LAN unit 23, the access point 11, the PDA 25, and the in-vehicle access point 21 are terminated. The process is executed. And the process by the flowchart of FIG. 5 is complete | finished.

  As described above, in the present embodiment, the communication area of the PDA 25 is limited to the cabs 18a and 18b, and the wireless LAN unit outside the vehicle is used rather than the encryption of data for performing wireless communication between the PDA 25 and the vehicle access point 21. Data encryption for wireless communication between the access point 11 and the access point 11 is advanced. Therefore, even when an inexpensive portable terminal excellent in portability that does not have high communication security performance, such as the PDA 25, is used, communication security in the wireless LAN system can be protected as reliably as possible. Further, since the communication area of the outside wireless LAN unit 23 is on the order of 100 m and larger than the communication area of the PDA 25, it is not necessary to install a large number of access points 11. Thereby, the capital investment to the access point 11 can be suppressed.

In the present embodiment, the carrier pallet is shown as an example of the moving body, but the moving body is not limited to the carrier pallet. Further, the moving body is not limited to a vehicle, and may be a ship or the like. Also, the portable terminal is not limited to the PDA. Further, the wireless LAN method, the encryption method, and the authentication method are not limited to the specific examples described in this embodiment.
Further, as in the present embodiment, if the in-vehicle access point 21 and the outside wireless LAN unit 23 are connected by wire, the security of communication between the in-vehicle access point 21 and the outside wireless LAN unit 23 is easily ensured. can do. However, since an advanced encryption algorithm can be introduced into the in-vehicle access point 21 and the out-of-vehicle wireless LAN unit 23, if the communication security between them is ensured, the in-vehicle access point 21 and the wireless LAN unit 23 outside the vehicle may perform wireless communication.

The embodiment of the present invention described above can be realized by a computer executing a program. Further, a means for supplying the program to the computer, for example, a computer-readable recording medium such as a CD-ROM recording such a program, or a transmission medium for transmitting such a program may be applied as an embodiment of the present invention. it can. A program product such as a computer-readable recording medium that records the program can also be applied as an embodiment of the present invention. The programs, computer-readable recording media, transmission media, and program products are included in the scope of the present invention.
In addition, the embodiments of the present invention described above are merely examples of implementation in carrying out the present invention, and the technical scope of the present invention should not be construed as being limited thereto. Is. That is, the present invention can be implemented in various forms without departing from the technical idea or the main features thereof.

It is a figure which shows embodiment of this invention and shows an example of a structure of a wireless LAN system. It is a figure which shows embodiment of this invention and shows an example of a structure of the hardware for communication provided in the cab of a carrier pallet. It is a figure which shows embodiment of this invention and shows an example of the communication form performed between PDA, in-vehicle access point, in-vehicle POE switch, in-vehicle wireless LAN unit, and access point. It is a figure which shows embodiment of this invention and shows an example of main functional structures of PDA, in-vehicle access point, in-vehicle wireless LAN unit, access point, and authentication server. 5 is a flowchart illustrating an example of processing in the wireless LAN system according to the embodiment of this invention.

Explanation of symbols

11 Access Point 15 Authentication Server 16 Communication Server 17 Wired LAN
19 Carrier pallets 18a, 18b Driver's cab 21 In-car access point 22 In-car POE switch 23 Out-of-car wireless LAN unit 25 PDA

Claims (5)

A moving body that a user drives and moves outdoors,
A first mobile wireless communication device that performs wireless communication with a mobile terminal in a predetermined area within the mobile body;
A second mobile wireless communication device that is communicably connected to the first mobile wireless communication device and performs wireless communication with an outdoor wireless communication device located outdoors;
The first mobile wireless communication device includes first wireless communication means for performing wireless communication of data encrypted by applying the first encryption technology with the portable terminal,
The second mobile wireless communication device is a wireless device for data encrypted by applying the outdoor wireless communication device and a second encryption technology having higher data confidentiality than the first encryption technology. A second wireless communication means for performing communication;
The second wireless communication means is data for making an authentication request to an authentication device connected to the outdoor wireless communication device so as to be able to communicate by wire, and applies the second encryption technology. Transmitting means for transmitting the encrypted data encrypted to the outdoor wireless communication device;
Receiving means for receiving from the outdoor wireless communication device data indicating that the authentication device has been authenticated and encrypted data applied by applying the second encryption technology;
After the encrypted data is received by the receiving means, and wherein said outdoor wireless communication device and the wired by <br/> that is adapted to initiate communication with the communication device that is communicatively connected Moving body.   The communication area between the second mobile radio communication device and the outdoor radio communication device is wider than the communication area between the mobile terminal and the first mobile radio communication device. The moving body described.   The mobile terminal and the first mobile radio communication apparatus include a limiting unit that limits communication power by the first radio communication unit so that a communication area of the mobile terminal and the first mobile radio communication device is limited to the predetermined area. The moving body according to claim 1 or 2.   The first mobile wireless communication apparatus and the second mobile wireless communication apparatus are connected to be communicable with each other by wire. Moving body. A portable terminal in a predetermined area in a moving body that a user drives and moves outdoors; a first moving body wireless communication device that performs wireless communication in the moving body;
A communication method for communicating with a second mobile wireless communication device that is connected to the first mobile wireless communication device in a communicable manner and performs wireless communication with an outdoor wireless communication device that is outdoors.
A first wireless communication step in which the first mobile wireless communication device and the mobile terminal perform wireless communication of data encrypted by applying a first encryption technique;
The second mobile wireless communication device and the outdoor wireless communication device apply a second encryption technology that has higher data confidentiality than the first encryption technology. A second wireless communication step for performing wireless communication,
The second wireless communication step is data for making an authentication request to an authentication device connected to the outdoor wireless communication device so as to be able to communicate with a wire, and applying the second encryption technique. Sending the encrypted data encrypted to the outdoor wireless communication device,
Receiving the authentication data from the outdoor wireless communication device, the data indicating that the authentication device has been authenticated and encrypted data applied by applying the second encryption technology;
After the encrypted data is received by the receiving step, communication with a communication device connected to the outdoor wireless communication device so as to be communicable by wire is started.

Images