JP6009242B2 - Authentication method, access point, and program for connecting third-party wireless terminal to user-owned access point - Google Patents

Description

  The present invention relates to a technology for controlling whether or not a plurality of wireless terminals can connect to the Internet via an access point (wireless router, mobile router).

  A terminal generally communicates with a partner server via the Internet by connecting to an access network via a router. Even when a plurality of terminals are connected to one router, only one global IP address for communication on the access network side of the router is required.

  In recent years, small wireless terminals equipped with a wireless local area network (LAN) function have become widespread as terminals. The wireless LAN function has been mounted on a wireless terminal such as a mobile phone or a smartphone. In order to connect to these wireless terminals, wireless routers equipped with a wireless LAN function for terminal-side communication have become common.

Wireless routers (access points) are roughly divided into the following two.
(1) As a communication interface on the access network side, a home router connected by wire such as optical fiber or ADSL (Asymmetric Digital Subscriber Line). (2) As a communication interface on the access network side, WiMAX (Worldwide Interoperability for Microwave Access), Mobile routers that connect wirelessly to wireless base stations such as 3G (3rd Generation) and LTE (Long Term Evolution (Super3G or 3.9G))

  As mobile routers, those that are small enough to be carried by individuals are becoming widespread. The mobile router is driven by a battery and has a wireless communication interface such as a wireless LAN, WiMAX, 3G, and LTE for access network side communication. By using one mobile router, a plurality of wireless terminals located around the mobile router can be simultaneously connected to the Internet.

  As a conventional technique, when a first terminal (personal computer) is connected to a wireless LAN access point router, a second terminal (Internet radio) is connected to the first terminal ad hoc, and the second terminal However, there is a technique for acquiring and setting an SSID (Service Set Identifier) and a WEP (Wired Equivalent Privacy) key for connecting to a router from a first terminal (see, for example, Patent Document 1). According to this technology, the second terminal can automatically connect the wireless LAN to the router without separately setting connection information for the router.

  In addition, the wireless LAN station receives the SSIDs and received radio field strengths of a plurality of access points, thereby simplifying the connection setting to an access point with the highest possible received radio field strength and a technique for improving security. (For example, refer to Patent Document 2).

JP 2005-142792 A JP 2007-135146 A EP2252115A1

  Usually, when a wireless terminal connects to the Internet via a wireless router, the owner of the wireless router and the owner of the wireless terminal are the same. That is, a user usually moves while possessing both a wireless router and a wireless terminal. In addition, an access point (home router) terminated by, for example, an optical fiber cable is installed in the home, and the wireless terminal communicates with the access point via radio. Also in this case, the owner of the access point and the owner of the wireless terminal are the same.

  FIG. 1 is a system configuration diagram in the prior art.

  According to FIG. 1, the wireless router 1 and the wireless terminal 2A are owned by the user A. The wireless terminal 2A connects to the wireless router 1 via a wireless LAN (narrow area wireless network). One of the wireless routers 1 is connected to a communication carrier network via a wide area wireless network, and the other is connected to the wireless terminal 2 via a wireless LAN. An authentication server 4 is further connected to the communication carrier network. The authentication server 4 authenticates whether or not the wireless router 1 has a contract with the user A for the communication carrier network.

  Here, normally, the wireless terminal 2B owned by the third party user B cannot connect to the wireless router 1 owned by the user A. The wireless terminal 2 and the wireless router 1 are authenticated by the WEP key that the user A can know, and the third-party wireless terminal 2B cannot connect to the wireless router 1.

  However, according to the above-described conventional technology, the connection from the wireless terminal to the wireless router is automated as much as possible, and does not permit access by a third-party wireless terminal. When the wireless router permits access from a specific wireless terminal, the MAC (Media Access Control) address of the wireless terminal must be set and registered in advance (MAC filtering).

  In recent years, especially for cellular phone network operators, due to the increase in data traffic, a shortage of radio communication bands and a decrease in the capacity of communication business facilities have become a problem. The main factor that increases data traffic is based on the increase in the number of smartphones that can always activate various applications and receive high-quality moving images. In order to solve such a problem, data offload that can divert data traffic to a network other than the cellular phone network has been attracting attention. For example, data traffic of a smartphone can be transmitted via a wireless LAN instead of a cellular phone network. As much as possible, mobile phone network operators want to release user data to other networks than the mobile phone network.

  Therefore, the present invention provides simple data by connecting a wireless terminal managed by a second user of a third party to an access point (wireless router, mobile router) managed by the first user. It is an object to provide an authentication method, an access point, and a program that can realize offloading.

According to the present invention, an authentication server connected to a telecommunications carrier network, a plurality of wireless terminals connectable to the narrow area wireless network, one of them connected to the telecommunications carrier network, and the other connected to the narrow area wireless network. In an authentication method in a system having an access point connected to a wireless terminal via
The access point and the first wireless terminal are managed by a first user who contracts with a carrier network, and the second wireless terminal is managed by a second user who contracts with a carrier network,
The access point and the second wireless terminal store in advance a character string authentication key based on a contract with the same carrier network,
A first step in which a second wireless terminal transmits an authentication request including an authentication key to an access point;
The access point determines whether or not the authentication key included in the authentication request matches the authentication key stored in advance, and if it is determined to be true, returns an authentication success response to the second wireless terminal. A second step of:
The access point includes a third step of relaying user data between the second wireless terminal and the communication carrier network.

According to another embodiment of the authentication method of the present invention,
The access point is a wireless router,
The narrow area wireless network is based on a wireless LAN (Local Area Network),
The wireless router is preferably connected to the carrier network via a wide area wireless network.

According to another embodiment of the authentication method of the present invention,
The access point and the second wireless terminal store a third party connection network identifier (SSID (Service Set Identifier)) in advance,
Regarding the previous stage of the first step,
An access point broadcasts a beacon signal including a network identifier for third party connection;
It is also preferable that the second wireless terminal further includes a step of detecting an access point that notifies the third party connection network identifier when the beacon signal is received.

According to another embodiment of the authentication method of the present invention,
For the third step,
The access point counts the amount of user data between the second wireless terminal and the carrier network,
It is also preferable that the access point transmits information on the amount of user data to the point server of the carrier network when the communication link with the second wireless terminal is disconnected.

According to another embodiment of the authentication method of the present invention,
The second wireless terminal is equipped with a USIM (Universal Subscriber Identity Module) card,
The USIM card stores an authentication key and holds an IMSI (International Mobile Subscriber Identity).
Regarding the first step and the second step, the authentication sequence between the second wireless terminal and the access point is preferably based on EAP (Extensible Authentication Protocol).

According to the present invention, between the authentication server connected to the telecommunications carrier network and a plurality of wireless terminals connectable to the narrow area wireless network, the wide area communication means for connecting one to the telecommunications carrier network, the other In an access point having a narrow area wireless communication means for connecting a wireless terminal to a wireless terminal via a narrow area wireless network,
The access point and the first wireless terminal are managed by a first user who contracts with a carrier network, and the second wireless terminal is managed by a second user who contracts with a carrier network ,
The access point and the second wireless terminal store in advance a character string authentication key based on a contract with the same carrier network,
An authentication request receiving means for receiving an authentication request including an authentication key from the second wireless terminal;
Authentication key determination means for determining whether or not the authentication key included in the authentication request matches the authentication key stored in advance;
An authentication response return means for returning an authentication success response to the second wireless terminal when the authentication key determination means determines true;
It has a user data relay means for relaying user data between the second wireless terminal and the communication carrier network.

According to another embodiment of the access point of the present invention,
The access point is a wireless router,
The narrow area wireless network is based on a wireless LAN,
The wide area communication means is preferably connected to the communication carrier network via a wide area wireless network.

According to another embodiment of the access point of the present invention,
Network identifier storage means for storing in advance a third party connection network identifier (SSID);
A beacon signal notifying means for notifying a beacon signal including a network identifier for third party connection;
It is also preferable for the second wireless terminal that has received the beacon signal to function so as to detect the access point.

According to another embodiment of the access point of the present invention,
Data amount counting means for counting the amount of user data between the second wireless terminal and the carrier network;
It is also preferable to have a data amount transmitting means for transmitting user data amount information to a point server of the carrier network when the communication link with the second wireless terminal is disconnected.

According to another embodiment of the access point of the present invention,
The authentication sequence between the second wireless terminals is preferably based on EAP.

According to the present invention, between the authentication server connected to the telecommunications carrier network and a plurality of wireless terminals connectable to the narrow area wireless network, the wide area communication means for connecting one to the telecommunications carrier network, the other In a program for functioning a computer mounted on an access point having a narrow area wireless communication means for connecting a wireless terminal to a wireless terminal via a narrow area wireless network,
The access point and the first wireless terminal are managed by a first user who contracts with a carrier network, and the second wireless terminal is managed by a second user who contracts with a carrier network ,
The access point and the second wireless terminal store in advance a character string authentication key based on a contract with the same carrier network,
An authentication request receiving means for receiving an authentication request including an authentication key from the second wireless terminal;
Authentication key determination means for determining whether or not the authentication key included in the authentication request matches the authentication key stored in advance;
An authentication response return means for returning an authentication success response to the second wireless terminal when the authentication key determination means determines true;
The computer is caused to function as user data relay means for relaying user data between the second wireless terminal and the communication carrier network.

  According to the authentication method, the access point, and the program of the present invention, the wireless terminal managed by the second user of the third party is connected to the access point (wireless router, mobile router) managed by the first user. By connecting, a simple data offload can be realized.

It is a system block diagram in a prior art. It is a system configuration diagram in the present invention. It is a sequence diagram in the present invention. It is a functional block diagram of the wireless router (access point) in this invention.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 2 is a system configuration diagram according to the present invention.

  According to FIG. 2, as compared with FIG. 1, the communication carrier X operates and manages both the mobile phone network and the provider access network. The wireless terminal 2B is owned by the user B and is a user different from the user A who owns the wireless router (access point or mobile router) 1. The wireless terminal 2B can connect to the wireless router 1 via the wireless LAN even though the wireless router 1 is owned by a different user.

  The wireless terminal 2B is also a mobile phone or a smartphone, and has both a mobile phone communication function and a wireless LAN communication function. The user B can perform high-speed data communication by connecting to the access network via the wireless LAN rather than the cellular phone network. In general, wireless routers are connected to the Internet by simultaneously connecting a plurality of wireless terminals (the number of units that can be accommodated varies depending on the function of the wireless router, but generally 5 or 8) under the wireless router. Can (tethering). The wireless terminal 2B has a contract with the communication carrier X for the mobile phone communication function, and can make a call connection via the mobile phone network.

  Here, according to the present invention, when the wireless router 1 of the user A and the wireless terminal 2B of the user B are contracted with the communication carrier X, the wireless terminal 2B of the user B is connected to the wireless router 1 of the user A. It is intended to be able to connect to the Internet via. Here, the user A and the user B are not limited to acquaintances, and may be strangers who do not know at all. That is, the wireless terminal 2B can connect to the Internet via the wireless router 1 owned by another person located in the vicinity. However, the authentication server 4 is connected to the communication carrier network, and only a wireless router or a wireless terminal contracted with the communication carrier X can connect to the communication carrier network.

  According to FIG. 2, the first authentication server 4 is operated and managed by a first communication operator (Home Operator), and the second authentication server 6 is operated by a second communication operator (Visiting Operator). It may be managed. For example, the first communication carrier may be a communication carrier in the home country, and the second communication carrier may be a communication carrier in another country or another region. Here, the wireless terminal contracted with the second communication carrier can be connected to the Internet via the wireless router contracted with the first communication carrier. By exchanging authentication server information between different communication carriers, roaming connection of wireless terminals is also possible.

  FIG. 3 is a sequence diagram in the present invention.

  According to FIG. 3, similarly to FIG. 2, the wireless router 1 and the wireless terminal 2A are owned by the user A, and the wireless terminal 2B is owned by the user B different from the user A. The wireless router 1 is contracted with the communication carrier X for the wide area communication network, and the wireless terminal 2B is also contracted with the communication carrier X for the mobile phone network. For this purpose, the wireless router 1 and the wireless terminal 2B store in advance a common authentication key based on the communication carrier X. In the case of a mobile phone or a smartphone, a USIM (Universal Subscriber Identity Module) card that holds an IMSI (International Mobile Subscriber Identity) is mounted. An authentication key is stored in the USIM card. The authentication key here may be an arbitrary character string that identifies the carrier X.

(S301) The wireless router 1 executes an authentication sequence in advance with respect to an authentication server of a communication carrier network (access network). The wireless router 1 can be connected to the Internet through the carrier network when the authentication is successful.

(S302) The wireless router 1 includes an SSID-A (Service Set Identifier) (network identifier) 1 for the owner's wireless terminal 2A and an SSID-B (third party connection network identifier) for the third-party wireless terminal 2B. ) Is stored in advance. The wireless terminal 2A stores SSID-A according to user settings. In addition, the wireless terminal 2B also stores SSID-B in a fixed manner in advance based on a contract with the communication carrier X.

  The wireless router 1 broadcasts a beacon signal including a preset specific network identifier SSID-A to the wireless terminal 2A owned by the user A. At the same time, the wireless router 1 also notifies a beacon signal including the third party connection SSID-B.

(S303) The wireless terminal 2B owned by the user B detects the wireless router 1 when receiving the beacon signal. Specifically, the wireless terminal 2 </ b> B transmits a detection request (Probe Request) message to the wireless router 1.

  On the other hand, the wireless router 1 returns a detection response (Probe Response) message to the wireless terminal 2B. The detection response message includes the BSSID (Basic Service Set Identifier) (or MAC (Media Access Control) address) of the wireless router 1. The BSSID is a network identifier in the infrastructure mode of the wireless LAN, and is represented by 48 bits that is the same as the MAC address of the access point.

(S311) Next, the wireless terminal 2B transmits an authentication request including an authentication key to the wireless router 1. Here, the user of the wireless terminal 2B does not need to input authentication information such as a user identifier and a password. That is, the wireless terminal 2B automatically executes an authentication sequence for the wireless router 1.

(S312) The wireless router 1 determines whether or not the authentication key included in the authentication request matches the authentication key stored in advance. If it is determined to be true, an authentication success response is returned to the wireless terminal 2B.

  The authentication sequence in S311 and S312 is based on EAP (Extensible Authentication Protocol), and may be, for example, EAP-AKA / SIM (EAP Method for 3rd Generation Authentication and Key Agreement / Subscriber Identity Module Card). The wireless router 1 acts as an authentication server for the wireless terminal 2B. This is an extensible authentication protocol that operates in a UMTS (Universal Mobile Telecommunications System) SIM card using a symmetric key. This protocol performs authentication using IMSI (International Mobile Subscriber Identity) in a USIM (Universal Subscriber Identity Module) card mounted on a wireless terminal such as a mobile phone. Therefore, this authentication server is installed differently for each telecommunications carrier.

  As another embodiment in S312, the wireless router 1 may transmit an inquiry request including a user identifier (MAC address or telephone number) and an authentication key to the authentication server 4 of the communication carrier network. The authentication server 4 determines whether or not the user identifier and the authentication key included in the inquiry request are connectable to the carrier network, and if it is determined to be true, returns a connection permission response to the access point. To do. Further, the first authentication server 4 may further inquire to the second authentication server 6.

(S313) After the authentication is successful, the wireless terminal 2B transmits a connection request based on the SSID-B to the wireless router 1. On the other hand, the wireless router 1 returns a connection response to the wireless terminal 2B.
(S314) When the wireless router 1 has a DHCP (Dynamic Host Configuration Protocol) function, the wireless router 1 notifies the wireless terminal 2B of the IP address. DHCP refers to a protocol that automatically assigns necessary setting information such as an IP address to a terminal that is temporarily connected to a network. The setting information includes a DNS (Domain Name Server) IP address, a subnet mask, and the like. Further, after the communication from the terminal is disconnected, the IP address assigned to the terminal is automatically collected, and the IP address is assigned to another newly connected terminal.

  According to S302 to S314, the wireless terminal 2B owned by the user B executes the authentication sequence for the wireless router 1 without communicating with the authentication server, and passes through the wireless router 1 owned by the user A. And automatically connect to the Internet.

(S32) The wireless router 1 relays user data between the wireless terminal 2B and the communication carrier network. Here, the wireless router 1 counts the amount of user data between the wireless terminal 2B and the communication carrier network.

(S33) When the communication link with the wireless terminal 2B is disconnected, the wireless router 1 transmits user data amount information to the point server 7 of the communication carrier network. The user data amount information is associated with the user identifier (for example, MAC address or telephone number) of the wireless router 1 and the user identifier (for example, MAC address or telephone number) of the wireless terminal 2B.

  FIG. 4 is a functional configuration diagram of the wireless router (access point) in the present invention.

  According to FIG. 4, the wireless router 1 includes a wide area communication unit 101 and a narrow area wireless communication unit 102. The wide area communication unit 101 is connected to a wide area network of a communication carrier X such as WiMAX or LTE. The narrow area wireless communication unit 102 connects to a network such as a wireless LAN in order to communicate with a wireless terminal.

  The wireless router 1 also includes an SSID storage unit 111, an authentication key storage unit 112, a beacon signal notification unit 121, a detection response unit 122, an authentication request reception unit 123, an authentication key determination unit 124, and an authentication response reply. Unit 125, connection response unit 126, user data relay unit 131, data amount count unit 132, and data amount transmission unit 133. These functional components are realized by executing a program that causes a computer mounted on the wireless router to function.

  The SSID storage unit 111 stores in advance an owner connection SSID-A and a third party connection SSID-B.

  The authentication key storage unit 112 stores in advance an authentication key that can be connected to the network of the communication carrier X.

  The beacon signal notifying unit 121 notifies the beacon signal including the owner connection SSID-A and also the beacon signal including the third party connection SSID-B.

  The detection response unit 122 returns a detection response message when receiving the detection request message from the wireless terminal 2B.

  The authentication request receiving unit 123 receives an authentication request including an authentication key from the wireless terminal 2B. The authentication key is output to the authentication key determination unit 113.

  The authentication key determination unit 124 determines whether or not the authentication key included in the authentication request matches the authentication key stored in advance in the authentication key storage unit 112.

  If the authentication key determination unit 123 determines that the authentication response reply unit 125 is true, the authentication response reply unit 125 returns an authentication success response to the wireless terminal 2B.

  The connection response unit 126 returns a connection response message when receiving the connection request message from the wireless terminal 2B. The connection response unit 126 also has a DHCP function and notifies the wireless terminal 2B of the IP address.

  The user data relay unit 131 relays user data between the wireless terminal 2B and the communication carrier network.

  The data amount counting unit 132 counts the user data amount between the wireless terminal 2B and the communication carrier network.

  The data amount transmission unit 133 transmits user data amount information to the point server 7 of the communication carrier network when the communication link with the wireless terminal 2B is disconnected.

The point server 7 gives points according to the amount of data in the third-party wireless terminal 2B to the user A of the wireless terminal 2A that has accepted the communication. The point represents a virtual amount, and means a reward for the user A. Specifically, this point is as follows.
(1) For the user A, charging of the wireless router in a charging station that is operated and managed by the communication carrier X is made available according to the number of points.
(2) For user A, the wireless LAN flat-rate charge is reduced according to the number of points.
(3) A wide wireless band is used for the wireless router of user A according to the number of points.
(4) A favorable wireless environment is provided to the wireless router of user A according to the number of points.
(5) The telecommunications carrier collects billing according to the data amount of the user B, and automatically transfers the amount to the account of the user A.
By such a point system, as a result, the owner of the wireless router can provide a wireless LAN communication environment to a third party in order to enjoy the benefits.

  As described above in detail, according to the authentication method, the access point, and the program of the present invention, the access point (wireless router, mobile router) managed by the first user can receive the second information from a third party. A simple data offload can be realized by connecting a wireless terminal managed by the user.

  Various changes, modifications, and omissions of the above-described various embodiments of the present invention can be easily made by those skilled in the art. The above description is merely an example, and is not intended to be restrictive. The invention is limited only as defined in the following claims and the equivalents thereto.

DESCRIPTION OF SYMBOLS 1 Wireless router, access point, mobile router 101 Wide area communication part 102 Narrow area wireless communication part 111 SSID memory | storage part 112 Authentication key memory | storage part 121 Beacon signal alerting | reporting part 122 Detection response part 123 Authentication request receiving part 124 Authentication key determination part 125 Authentication response Reply unit 126 Connection response unit 131 User data relay unit 132 Data amount count unit 133 Data amount transmission unit 2 Wireless terminal 3 Base station 4 Authentication server 5 Destination server 6 Authentication server 7 Point server

Claims (11)

An authentication server connected to a telecommunications carrier network, a plurality of wireless terminals connectable to a narrow area wireless network, and one of the wireless terminals connected to the telecommunications carrier network and the other via the narrow area wireless network In an authentication method in a system having an access point connected to a terminal,
The access point and the first wireless terminal are managed by a first user who contracts with the carrier network, and the second wireless terminal is managed by a second user who contracts with the carrier network. And
The access point and the second wireless terminal store in advance a character string authentication key based on a contract with the same carrier network,
A first step in which a second wireless terminal transmits an authentication request including the authentication key to the access point;
The access point determines whether or not an authentication key included in the authentication request matches a previously stored authentication key, and if it is determined to be true, an authentication success response is sent to the second wireless terminal. A second step to reply to,
An authentication method, wherein the access point includes a third step of relaying user data between a second wireless terminal and the communication carrier network. The access point is a wireless router;
The narrow area wireless network is based on a wireless LAN (Local Area Network),
The authentication method according to claim 1, wherein the wireless router is connected to the communication carrier network via a wide area wireless network. The access point and the second wireless terminal store a third party connection network identifier (SSID (Service Set Identifier)) in advance,
Regarding the previous stage of the first step,
The access point notifying a beacon signal including the network identifier for third party connection;
The second wireless terminal further includes a step of detecting the access point that notifies the third party connection network identifier when the beacon signal is received. Authentication method. For the third step,
The access point counts the amount of user data between the second wireless terminal and the carrier network,
The access point transmits the information on the amount of user data to a point server of the carrier network when a communication link with a second wireless terminal is disconnected. 4. The authentication method according to any one of items 1 to 3. The second wireless terminal is equipped with a USIM (Universal Subscriber Identity Module) card,
The USIM card stores the authentication key and holds an IMSI (International Mobile Subscriber Identity).
The first step and the second step are characterized in that an authentication sequence between a second wireless terminal and the access point is based on EAP (Extensible Authentication Protocol). The authentication method according to any one of the above. Wide area communication means for connecting one to the telecommunications carrier network between the authentication server connected to the telecommunications carrier network and a plurality of wireless terminals connectable to the narrow area wireless network, and the other being the narrow area wireless In an access point having narrow area wireless communication means for connecting to the wireless terminal via a network,
The access point and the first wireless terminal are managed by a first user who contracts with the carrier network, and the second wireless terminal is managed by a second user who contracts with the carrier network. And
The access point and the second wireless terminal store in advance a character string authentication key based on a contract with the same carrier network,
An authentication request receiving means for receiving an authentication request including an authentication key from the second wireless terminal;
Authentication key determination means for determining whether or not an authentication key included in the authentication request matches an authentication key stored in advance;
An authentication response reply means for returning an authentication success response to the second wireless terminal when the authentication key judgment means determines that the authentication is true;
An access point comprising user data relay means for relaying user data between a second wireless terminal and the carrier network. The access point is a wireless router,
The narrow area wireless network is based on a wireless LAN,
The access point according to claim 6, wherein the wide area communication means connects to the communication carrier network via a wide area wireless network. Network identifier storage means for storing in advance a third party connection network identifier (SSID);
A beacon signal notifying means for notifying a beacon signal including the third party connection network identifier;
8. The access point according to claim 6 or 7 , wherein the second wireless terminal that has received the beacon signal functions to detect the access point. Data amount counting means for counting the amount of user data between the second wireless terminal and the carrier network;
And a data amount transmitting means for transmitting the information on the user data amount to a point server of the communication carrier network when a communication link with the second wireless terminal is disconnected. Item 9. The access point according to any one of Items 6 to 8 . The access point according to any one of claims 6 to 9 , wherein an authentication sequence between the second wireless terminals is based on EAP (Extensible Authentication Protocol). Wide area communication means for connecting one to the telecommunications carrier network between the authentication server connected to the telecommunications carrier network and a plurality of wireless terminals connectable to the narrow area wireless network, and the other being the narrow area wireless In a program for causing a computer mounted on an access point having a narrow area wireless communication means to connect to the wireless terminal via a network,
The access point and the first wireless terminal are managed by a first user who contracts with the carrier network, and the second wireless terminal is managed by a second user who contracts with the carrier network. And
The access point and the second wireless terminal store in advance a character string authentication key based on a contract with the same carrier network,
An authentication request receiving means for receiving an authentication request including an authentication key from the second wireless terminal;
Authentication key determination means for determining whether or not an authentication key included in the authentication request matches an authentication key stored in advance;
An authentication response reply means for returning an authentication success response to the second wireless terminal when the authentication key judgment means determines that the authentication is true;
A program for an access point, which causes a computer to function as user data relay means for relaying user data between a second wireless terminal and the carrier network.

Images