JPH1188534A - Security communication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide the service desired by a caller terminal adaptor by collating whether or not an information format is a predetermined format among a plural variety of formats so as to attain security check with higher security. SOLUTION: A caller side TA (client) 10 adds UUI information denoting desired service reception to a setup message and sends the resulting message. The setup message is received by a called party TA (server) 20. A line control section 21 extracts the UUI information added to the setup message received at a specific address and gives the UUI information to a discrimination section 22. A discrimination section 22 discriminates whether or not the UUI information has a predetermined format, analyzes the UUI information when the format of the message is the predetermined format so that whether all the UUI information is finished by only the 1st UUI information or the 2nd UUI information is transmitted is discriminated. Furthermore, when a password is included, the password is collated.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a security communication system, and more particularly to a security communication system between two interconnected connecting devices for connecting an ISDN line termination device and a terminal adapter at an S / T point.

[0002]

2. Description of the Related Art Integrated Services Digital Network (ISDN)
In recent years, many terminal adapters (TA) equipped with a callback function and the like have been commercialized.
When the callback function has become popular, security awareness has been increasing, and a countermeasure is required as a manufacturer.

At present, as a security measure, when a party who first receives a call from a communication partner provides some service to the other party (for example, a callback service or the like), a call is received in advance. The telephone number of the other party is registered in the calling party, and the telephone number of the other party is compared with the calling address of the other party in the call setup message, thereby permitting the provision of a predetermined service to the calling address. It is to judge whether or not.

[0004]

However, in the above-mentioned conventional security communication method, the other party is confirmed only by the originating address. Therefore, if a further advanced communication application is used in the future, The above-mentioned conventional security communication method does not have sufficient security.

[0005] The present invention has been made in view of the above points,
It is an object of the present invention to provide a more secure security communication method.

[0006]

SUMMARY OF THE INVENTION In order to achieve the above object, the present invention provides a communication system between a plurality of terminal adapters connected via an ISDN network, wherein a predetermined service among a plurality of terminal adapters is provided. A specific address for message transmission / reception at the time of a service provision request is previously determined between the receiving side transmitting terminal adapter and the receiving side receiving terminal adapter providing a predetermined service, and the transmitting side terminal adapter performs a call setting message. To the destination terminal adapter at a specific address by adding user / user information including at least data to receive a predetermined service and an end number, and the destination terminal adapter receives a call setup message at a specific address. The user / user information in the call setup message Then, the transmitting / receiving operation for collating with the pre-registered data is repeated one or more times indicated by the end number included in the user / user information. Is provided.

According to the present invention, only when the terminating terminal adapter receives a call setup message at a specific address, it extracts the user / user information added to the call setup message and checks it against its own data. Since the operation is repeated the number of times indicated in the user / user information, a more secure security check can be performed.

Here, a plurality of types of the above-mentioned user / user information in the present invention are prepared in advance, and the format of the user / user information is transmitted between the transmitting terminal adapter and the receiving terminal adapter before transmission / reception. Are determined in advance by communication, and the receiving-side terminal adapter collates the format of the user / user information.

[0009]

Next, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing an embodiment of a security communication system according to the present invention. In FIG. 1, a terminal adapter (TA) 10 of a client (originating side) that receives a service and a TA 20 of a server (receiving side) that provides a service are each a line termination unit (DSU) of ISDN. It is connected to an ISDN network (for example, INS64) 33 via 31 and 32. In this embodiment, a callback service will be described as an example of the above service.

The TA 10 comprises a line control unit 11, a UUI information input unit 12, a protocol control unit 13, a security data input unit 14, an information storage unit 15, and the like. The UUI information input unit 12 inputs user / user information (UUI information) having a maximum length of 128 bytes to the line control unit 11. The information storage unit 15 stores security data and the like input from the security data input unit 14.

The TA 20 includes a line control unit 21 and a judgment unit 2
2, a protocol control unit 23, a security data input unit 24, an information storage unit 25, and the like. The determination unit 22 analyzes and determines the UUI information input from the line control unit 21. The information storage unit 25 stores security data and the like input from the security data input unit 24.

Next, the operation of this embodiment will be described with reference to the sequence diagram of FIG. Caller TA
The (client) 10 transmits a callback from the UUI information input unit 12 in the line control unit 11 under the control of the protocol control unit 13 based on a transmission command from a personal computer (PC) (not shown) connected thereto. UU with command to receive service
I information is added to the call setup message (SETUP) and transmitted (steps 41 and 42).

Here, the above UUI information has a maximum of 12
Eight bytes, for example, a protocol number in which the first two bytes are a specific character string (in a communication procedure, here, for example, 1
2) The next two bytes are a sequence number (a numerical value indicating the number of times this UUI information has been transmitted), and the next two bytes are an end number (notify the called side that this is the last UUI information). The remaining 124 bytes are in a format consisting of actual arbitrary raw data. Here, the raw data includes a password and the like registered in the receiving-side TA 20 in advance. In addition, an area other than the data area of the UUI information includes a command indicating a requested service type.

In this embodiment, a plurality of formats of such UUI information are prepared. In order to confirm in advance which format of the UUI information to use with the receiving side TA 20 before transmission / reception, The security data read from the information storage unit 15 is transmitted from the line control unit 11 and stored in the information storage unit 25 in the receiving side TA 20. Thereby, the transmitting side TA10 and the receiving side TA20 determine which format of the UUI information to transmit and receive.
Arranged in advance. As a result, a more secure communication method can be realized.

The line control unit 11 in the calling side TA 10 transmits the call setup message to which the above-mentioned UUI information is added at a specific address which has been previously agreed with the called side TA 20. In the case of ISDN, this address is usually composed of a combination of a line address and a sub-address individually designated by the end user for the line address.

This call setup message is transmitted to the DSU 31, I
SDN network 33 (hereinafter referred to as INS64) and DS
It is received by the receiving-side TA (server) 20 via U32 (step 44). Also, a call setting acceptance message (CALL PROC) is sent from the INS 64 to the calling side TA 10.
(Step 43).

The line control unit 21 in the receiving side TA 20 only receives the call setting message received at the specific address,
The UUI information added thereto is separated and extracted, and the UUI information is supplied to the determination unit 22. The determination unit 22 determines whether the UUI information is in a predetermined format, and analyzes the UUI information if the UUI information is in the predetermined format.
It is determined whether all the UUI information is completed only with the I information or whether the second UUI information is also sent. Furthermore,
If a password is included, the password is also checked. The above is the operation of the first phase.

If the receiving-side TA 20 determines that all the UUI information is completed only with the first UUI information,
The calling message (ALE) is sent to the calling side TA10.
RT) (step 45), and the caller TA10 receives the signal via the INS 64 (step 46).
Send a disconnect message (DISC) (step 4)
7) The transmission side TA 10 receives the signal via the INS 64 (step 48). As a result, a release message (REL) is transmitted from the INS 64 to the receiving side TA 20 (step 49), and a release message (REL) is transmitted from the transmitting side TA 10 to the INS 64 (step 5).
0).

Thereafter, a release completion message (REL C
OMP) is transmitted to the calling side TA 10 via the INS 64 (steps 51 and 52). This allows the originating TA
10 sends a callback service confirmation message to the personal computer connected to it (step 53). As described above, the operation in the case where it is determined that only the first transmission of the UUI information ends all the UUI information is completed. Thus, when the UUI information requests a callback service, the receiving TA 20 subsequently sends a call to the calling TA 10 to perform communication and provides a callback service.

In this embodiment, the receiving side TA
The determination result of the first phase by 20 determines whether or not the subsequent second phase occurs. The receiving side TA20,
It is determined whether or not the second UUI information is transmitted from the first UUI information in a predetermined format (determined from the sequence number and the end number, etc.). This is the first SETU with a limited number of bits
This is performed, for example, when it is not possible to transmit all necessary information only with the UUI information added to P. As a preventive measure for avoiding inadvertent entry into the second phase, as described above, there is a method of confirming a specific address including a sub-address in the TAs 10 and 20 of the transmitting side and the receiving side.

When the second phase occurs, the first phase
After the end of the phase, the transmitting side TA 10 transmits a second call setup message to which UUI information is added. Accordingly, in accordance with the same sequence as that of FIG. 2, the receiving side TA 20 determines whether the call setting message has been received at the above-described specific address and the UUI information extracted therefrom has a predetermined format determined in advance in the same manner as described above. Check if it matches. The second UUI information includes the first UU
Based on the I information, it can include data of contents expected by the receiving side TA 20. When the second UUI information is the last UUI information, the terminating-side TA 20 transmits the call to the calling-side TA 10 in order to provide the above-described callback service after disconnecting the line.

As described above, according to this embodiment, the UUI information expected by the receiving side TA 20 at the time of receiving a call is added to the call setup message (SETUP) and the specific address previously determined between the two is determined. And the transmitting side TA10 transmits in a specific format, and the receiving side TA2
Since 0 is this specific address and the UUI information in a specific format is separated and collated, the receiving side TA 20 can provide the callback service to the transmitting side TA 10 more safely than in the past.

Further, according to this embodiment, even large data can be transmitted after being divided into 128-byte UUI information, without investing in a special contract or a special packet communication facility. With the existing ISDN circuit switching contract, it can be used like a 128-byte packet communication that is not time charging.

The present invention is not limited to the above embodiment, and the service provided by the server to the client is applicable to services other than the callback service.

[0025]

As described above, according to the present invention,
The above information indicates that only when the receiving terminal adapter receives the call setup message at a specific address, the information added to the call setup message is extracted and collated with its own data. The security check can be performed with higher security because the number of times is repeated, and the security check can be performed with higher security by checking whether the format of the above information is also a predetermined format among a plurality of types. The calling terminal adapter can provide the desired service.

Further, according to the present invention, even large data can be divided into 128-byte UUI information and transmitted, so that existing equipment can be used without investing in special contracts or special packet communication equipment. With ISDN circuit switching contract, it can be used like 128-byte packet communication, which is not time charging.

[Brief description of the drawings]

FIG. 1 is a block diagram of an embodiment of the method of the present invention.

FIG. 2 is a sequence diagram for explaining the operation of FIG. 1;

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 10 Outgoing terminal adapter (TA) (client) 11, 21 Line control part 12 User / user information (UUI information) input part 13, 23 Protocol control part 14, 24 Security data input part 15, 25 Information storage part 20 Receiving side Terminal adapter (TA) (server) 22 Judgment unit 31, 32 Line termination unit (DSU)

──────────────────────────────────────────────────の Continued on front page (51) Int.Cl. ⁶ Identification code FI H04M 3/42 H04L 11/02 Z

Claims (3)

[Claims] 1. A communication system between a plurality of terminal adapters connected via an ISDN line network, wherein, among the plurality of terminal adapters, an originating terminal adapter receiving a predetermined service and providing the predetermined service. A specific address for message transmission / reception at the time of service provision request is determined in advance between the receiving side terminal adapter and the calling side terminal adapter. Attach user information including at least a number, and transmit to the destination terminal adapter at the specific address. The destination terminal adapter, when receiving the call setup message at the specific address, The user and user information in the setting message are separated and The transmission / reception operation for collating with the data registered in advance by the user is indicated by the end number included in the user information.
The security communication method, wherein the receiving terminal adapter provides the predetermined service when the collation results match each other more than once. 2. A plurality of formats of the user / user information are prepared in advance, and the format of the user / user information between the transmitting terminal adapter and the receiving terminal adapter is determined before transmitting / receiving. 2. The security communication system according to claim 1, wherein the terminal adapter on the receiving side collates the format of the user / user information beforehand by communication. 3. The security communication system according to claim 1, wherein the specific address includes a line address of an ISDN line and a subaddress individually designated by an end user for the line address.