WO2006016553A1

WO2006016553A1 - Connection control system using terminal device, and connection control method

Info

Publication number: WO2006016553A1
Application number: PCT/JP2005/014514
Authority: WO
Inventors: Naoshi Higuchi
Original assignee: Nec Corporation
Priority date: 2004-08-10
Filing date: 2005-08-08
Publication date: 2006-02-16
Also published as: JPWO2006016553A1; JP4872128B2

Abstract

In a terminal device, a first storage unit stores a plurality of pieces of connection setting information for setting connections with a plurality of connection targets, and a second storage unit stores a plurality of pieces of connection control information for controlling the connections based on the plural pieces of connection setting information. When specific connection setting information of a set corresponding to a specific connection target and at least one piece of specific connection control information individually reside in the plural pieces of connection setting information and the plural pieces of connection control information, a connection agent makes a connection with a specific connection terminal on the basis of the specific connection control information and the specific connection setting information.

Description

Specification

Connection control system and connection control method using terminal device

Technical field

TECHNICAL FIELD [0001] The present invention relates to a connection control system and a connection control method using a terminal device, and more particularly to control when a terminal device is connected to a connection destination.

Background art

[0002] In recent years, wireless LANs that can easily construct networks have been introduced at a wide range of offices and factories, as their prices and speeds have increased. However, wireless LAN can be accessed regardless of inside or outside of the office as long as radio waves can pass through, and security problems have been widely pointed out. For this reason, security measures are implemented by restricting access through authentication and encryption.

[0003] Authentication method power for connecting to a network is disclosed in Japanese Patent Application Laid-Open No. 2004-21666. According to this conventional example, in the center connected to the network, setting items related to the connection to the network are acquired, and whether or not the connection is permitted is determined. This confirms the right to connect. However, in this case, it is assumed that the server to be connected is already connected to the network, and the above system will not function if it is not connected to the network.

[0004] Also, in a system in which a conventional terminal device is connected to a network, the terminal device holds network interface setting information necessary for connection to the network, and the terminal device has a right to connect to the network. Therefore, it is not possible to flexibly change the policy that permits or prohibits connection of the terminal device to the network.

[0005] Further, an example of a conventional system is shown in RFC 2869 (RADIUS Extensions) and IEE E Std 802. IX—2001 Annex D (the combination of these two documents, the 802. IX—RADIUS linkage system). Of the specification). In this conventional example, since the authentication process uses RADIUS (a system that specializes only in authentication), the right confirmation process does not depend on the technical standard. In this case, however, all networks to be managed must be connected to the RADIUS server. Therefore, event When a network that is temporarily installed and is not connected to other networks, such as a network using a wireless LAN installed at a venue or construction site, is managed, the RADIU S server can be installed separately. Must be connected to another network where a RADIUS server is installed.

[0006] In connection with the above description, a closed area connection method is disclosed in Japanese Patent Laid-Open No. Sho 62-147837. In this conventional example, a connection partner is identified using a media access control (MAC) level station address, and whether or not connection is possible is determined.

A network management apparatus is disclosed in Japanese Patent Laid-Open No. 8-23344. In this conventional example, the network management device has a function to collect and hold information related to the connected network, and to reference local network information connected via the network and authenticate a setting request. Yes. The network management device notifies the permitting station of the fact when a request for referencing / setting network information is issued by the other stations than the permitting station.

[0008] Further, a multi-mode dedicated radio communication system is disclosed in JP-T-9-509544. In this conventional example, the transceiver can operate according to two control protocols. When the handset is in the range of the local station, it communicates with the low-power rupico station according to one of the control protocols, and when it moves beyond the range of the local station, it automatically communicates with the ground station according to another control protocol Can be switched to.

[0009] In addition, an Internet time-based charging system is disclosed in Japanese Patent Laid-Open No. 10-27036. In this conventional system, the terminal server provides an Internet connection service to the client. The authentication server confirms whether or not it can be connected to the Internet based on the individual information from the client according to the instruction from the terminal server. The charging server is linked to the extended authentication database, calculates connection charges according to the connection usage time of each client, and updates the connection frequency sequentially. Internet connection services are provided until the number of client connections managed by the extended authentication database is less than zero.

An information terminal device is disclosed in Japanese Patent Laid-Open No. 11-212885. In this conventional example, the connection information storage unit stores in advance connection information for connection to a communication network using a communication line, and the communication network connection unit connects to the communication network based on the connection information. A network connection system is disclosed in Japanese Patent Laid-Open No. 11-259420. In this conventional network connection system, a user is authenticated based on the user identification information and password of a single account transmitted from the user terminal, and a flag for specifying the connection environment designated by the authenticated user is set. The connection environment corresponding to the flag is selected by referring to the table in which the flag and the connection environment are registered, the access source information of the authenticated user is determined, and the access source information and the connection environment are registered. The connection environment corresponding to the access source information is selected by referring to the table, and the user terminal is connected to the network using the connection environment.

A wireless communication system is disclosed in Japanese Patent Laid-Open No. 2000-188644. In this conventional example, network area information is notified as necessary after an authentication check process performed when a wireless line is connected between a network and a wireless terminal device. As a result, the network area information (communication network identification number information, country code information, etc.) of this network is made known to the user of the wireless terminal device newly subordinated to this wireless network due to roaming or the like. Also, when the relay switching network information used for setting the communication line on the terminal side is required at the time of outgoing / incoming call, the network side force V is used for the route of the communication line setting this time. Network information is received as a relay network information request response message.

[0013] A computer system is disclosed in Japanese Patent Laid-Open No. 2001-43165. In this conventional computer system, the server stores communication restriction information for each communication application on the client side, and the client establishes a communication session for one or more communication applications and is stored in the server. Controls communication sessions based on communication restriction information.

A network system is disclosed in Japanese Patent Laid-Open No. 2001-203690. In this conventional network system, each of a plurality of network segments holds and manages network information including network segment and computer identification information and access control information for controlling access between computers when the network is connected 1 There are two segment masters. When a first computer belonging to a network segment is connected to a second computer belonging to another network segment, the first computer also obtains network information from the first segment master of the network segment to which it belongs. Network information related to the second computer is extracted, connection authentication information related to the first segment master and the second computer is acquired based on the extracted network information, and is transmitted to the second computer. . When the second computer passes the connection authentication information to the second segment master of the network segment to which it belongs and asks for authentication, and the second segment master obtains authentication, the second computer validates the network connection with the first computer. To do.

An access control method is disclosed in Japanese Patent Laid-Open No. 2001-326696. In this conventional example, DHCP is used, the client terminal is authenticated for each user by the authentication information database, and the packet sent and received by the client terminal is filtered by the cooperation of the server and the router.

[0016] Further, a LAN that allows access to an authentication-denied terminal under specific conditions is disclosed in Japanese Patent Laid-Open No. 2002-118562. In this conventional example, the base station communicates with the terminal station, extracts the authentication request information and the received packet, and based on the authentication request information! Set in the sorting table. Referring to the registered contents of the packet distribution table, if it is permitted, a packet with the power of the terminal station is delivered to the LAN, and if it is rejected, it is sent to a specific server or network connection device.

[0017] A communication system is disclosed in Japanese Patent Application Laid-Open No. 2002-236631. In this conventional example, the service provider capabilities also limit the Internet sites or pages that can be accessed by the user based on the connection ID assigned to each user.

[0018] A method for distributing computer software is disclosed in Japanese Patent Laid-Open No. 2002-314529. In this conventional example, a software product is encoded with an encrypted data string for playback on a client console having a storage medium removably incorporated therein, and the user ID and user ID data are encoded using the client console. Is received. The first encryption key is transmitted to the user, the ID for the software product is encoded with the first encryption key, the user power is also received the software product purchase information, and the user purchase information and the first encryption key are received. The key key and the data indicating the second encryption key are encoded, and the first encryption key and the second encryption key are transmitted to the user. In this way, the user can Decrypt software products.

A communication device is disclosed in Japanese Patent Laid-Open No. 2002-366512. In this conventional example, the network is provided with a connection point that is connected when the communication apparatus performs initial setting and establishes a communication path with the service provider side. After the telephone number for connecting to the connection point is stored in advance, the communication device is delivered to the user. When connected to the connection point, connection setting information is transmitted from the service provider side to the communication device.

[0020] A host computer is disclosed in the re-published patent WO 02Z001376. In this conventional example, when the inquiry information that requests authentication for the service device is received, request information for information related to authentication is transmitted to the mobile communication device. The authentication information received from the mobile communication device and the stored information are collated, and authentication information for authenticating the principal is transmitted to the service device.

A network management system is disclosed in Japanese Patent Laid-Open No. 2003-152778.

In this conventional example, a policy setting request packet including at least a packet source address, a destination address, and packet priority is also received via the access line, and the user terminal address is received from the policy setting request packet. When the source address included in the policy setting request is the same as the extracted user terminal address, the contents of the policy table are changed based on the contents of the policy setting request.

A network system is disclosed in Japanese Patent Laid-Open No. 2003-249947. In this conventional example, the in-network information management device, when a connection request is received from the communication terminal, is applied to the authentication information notified from the communication terminal and the communication terminal power stored in the access authentication information management database. Compare the authentication information and confirm that the communication terminal is an authorized user. When it is confirmed that the communication terminal is a legitimate user, a free VID is selected based on the network identifier management database, and the selected VID and user ID are registered in the network identifier management database. Registration requirement for registering VID in wireless access point or edge switch Issued to wireless access point or edge switch. The wireless access point or edge switch registers the VID in the data frame from the communication terminal in response to the registration request. In-network identification based on release notification from wireless access point or edge switch Registered in the child management database! The association between the VID and user ID is canceled, and when the communication terminal is disconnected, the VID setting is deleted and the VID release notification is sent to the in-network information management device .

[0023] A network connection management system is disclosed in Japanese Patent Application Laid-Open No. 2004-32336. In this conventional example, when connection to the network is permitted based on a communication network connection request including information and position information, connection permission information is transmitted to the mobile terminal, and the information processing apparatus is thereby connected to the network. Connected to.

A secure communication system is disclosed in Japanese Patent Application Laid-Open No. 2004-48458. In this conventional example, a device that performs secure communication accesses the policy server at any time or periodically to obtain the security policies of a plurality of communication partners, and performs secure communication based on this.

Disclosure of the invention

[0025] An object of the present invention is to provide a connection control system and a connection control method using a terminal device when it is determined whether or not connection is possible in the terminal device before connection to a connection destination.

Another object of the present invention is to provide a connection control system and a connection control method using a terminal device that can flexibly change the number and configuration of connection destinations (such as a network) to which the terminal device can be connected.

Still another object of the present invention is to provide a connection control system and a connection control method using a terminal device that can control connection uniformly to connection destinations having different technical standards.

[0026] In an aspect of the present invention, the terminal device controls a connection based on the first storage unit that stores a plurality of connection setting information for setting connections with a plurality of connection destinations, and the plurality of connection setting information. A second storage unit that stores a plurality of connection control information, a plurality of connection setting information and a plurality of connection control information, a set of specific connection setting information corresponding to a specific connection destination, and at least one specific connection control information When there is each, there is provided a connection agent for connecting to a specific connection destination based on specific connection control information and specific connection setting information.

Here, when the specific connection control information indicates that the connection with the specific connection destination is valid, the connection agent connects the terminal device to the connection destination based on the specific connection setting information. Further, the specific connection control information may be plural with respect to the specific connection setting information. Multiple special When the constant connection control information is ordered and indicates that a connection with a specific connection destination is valid in a different range, the connection agent sequentially determines a terminal based on the specific connection setting information based on a plurality of specific connection control information. Executes connection to the connection destination of the device.

Further, the connection agent determines one of the plurality of connection setting information as the specific connection setting information based on the specific connection destination, and at least one of the plurality of connection control information based on the specific connection control information. Are determined as specific connection control information. Connection agent

When the specific connection destination is detected, the above operation is performed.

Each of the plurality of connection setting information preferably includes first determination information, and each of the plurality of connection control information preferably includes second determination information and a condition. The connection agent performs processing to determine whether or not the first determination information of the specific connection setting information and the second determination information of each of the plurality of connection control information satisfy the condition! Determined as specific connection control information.

Further, the specific connection destination may be a network, and the specific connection destination may be a server connected to the network to which the terminal device is connected.

In another aspect of the present invention, the connection control system includes a connection setting information distribution device that stores a plurality of distribution connection setting information for setting a connection with a plurality of connection destinations, and a plurality of distribution connection setting information. A connection control information distributing device for storing a plurality of distributed connection control information for controlling connection based on the terminal, and a terminal device. The terminal device acquires at least a part of the plurality of distribution connection setting information as the first storage unit, the second storage unit, and the connection setting information distribution device as a plurality of connection setting information, and stores them in the first storage unit. , Connection setting information distribution device power A communication unit that acquires at least a part of a plurality of distribution connection control information as a plurality of connection control information and stores them in the second storage unit, a plurality of connection setting information and a plurality of connection control information When there is a pair of specific connection setting information and at least one specific connection control information corresponding to the specific connection destination, the terminal device is connected to the specific connection destination based on the specific connection control information and the specific connection setting information. And a connection agent for connecting.

Here, when a new connection destination is added, the distribution connection setting information corresponding to the new connection destination is added to the connection setting information distribution apparatus. Each of the plurality of distribution connection control information indicates the validity of the specific connection setting information to be paired out of the plurality of distribution connection setting information. Information.

In another aspect of the present invention, the connection control method includes a specific connection corresponding to a specific connection destination from a plurality of connection setting information stored in the first storage unit when the terminal device is to be connected to the specific connection destination. Extracting the setting information, extracting at least one specific connection control information to be paired with the specific connection setting information from the plurality of connection control information stored in the second storage unit, and the specific connection control information This is achieved by connecting the terminal device to the specific connection destination based on the specific connection setting information.

Here, a plurality of connection setting information may be provided for setting a connection with a plurality of connection destinations. Each of the plurality of connection control information is information indicating the validity of the specific connection setting information to be paired among the plurality of connection setting information.

The step of connecting may be achieved by connecting the terminal device to the connection destination based on the specific connection setting information when the specific connection control information indicates that the specific connection setting information is valid.

There may be a plurality of specific connection control information with respect to the specific connection setting information, and the plurality of specific connection control information may be ordered to show the validity in different ranges.

The connecting step may be achieved by sequentially connecting the terminal device to the connection destination based on the validity of each of the plurality of specific connection control information.

The step of extracting the specific connection setting information may be achieved by determining one of a plurality of connection setting information as the specific connection setting information based on the connection destination when the connection destination is detected. Good.

Each of the plurality of connection setting information may include first determination information, and each of the plurality of connection control information may include second determination information and a condition.

The step of extracting the specific connection control information includes performing a process of determining whether or not the first determination information of the specific connection setting information and the second determination information of each of the plurality of connection control information satisfy a condition, This may be achieved by determining connection control information satisfying the condition as specific connection control information. Further, the specific connection destination may be a network, and the specific connection destination may be a server connected to the network to which the terminal device is connected.

Brief Description of Drawings

FIG. 1 is a configuration diagram of a connection control system according to a first embodiment of the present invention.

FIG. 2 is a diagram showing a specific example of the connection control system according to the first embodiment of the present invention.

FIG. 3 is a block diagram of a terminal device used in the connection control system according to the first embodiment of the present invention.

FIG. 4 is a diagram showing an example of connection control information and connection setting information according to the present invention.

FIG. 5A is a diagram showing an example of a network ID pattern in the first embodiment of the present invention.

FIG. 5B is a diagram showing another example of the network ID pattern in the first embodiment of the present invention.

FIG. 5C is a diagram showing another example of the network ID pattern in the first embodiment of the present invention.

FIG. 5D is a diagram showing another example of the network ID pattern in the first embodiment of the present invention.

FIG. 6A is a diagram showing an example of a network ID in the first embodiment of the present invention.

FIG. 6B is a diagram showing another example of the network ID in the first embodiment of the present invention.

FIG. 6C is a diagram showing another example of the network ID in the first embodiment of the present invention.

FIG. 7 is a flowchart showing the operation of the connection control system according to the first example of the present invention.

FIG. 8 is a flowchart showing an operation for determining whether or not connection between the connection setting information and the connection control information is possible in the first embodiment of the present invention. FIG. 9 is a diagram showing a network ID pattern and a network ID in the connection control system according to the second embodiment of the present invention.

FIG. 10 is a flowchart showing an operation for determining whether or not connection between connection setting information and connection control information is possible in the second embodiment of the present invention.

FIG. 11 is a configuration diagram of a service utilization system according to a third embodiment of the present invention. BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, a network system using a connection control system using a terminal device according to the present invention will be described in detail with reference to the accompanying drawings. The connection control system according to the present invention can be applied to the management of connection to a network that is used only by a specific user such as a corporate network. It can also be applied to applications that manage connections and charge for networks such as wireless LAN hotspots that are used by an unspecified number of users.

[0032] [First embodiment]

FIG. 1 is a block diagram showing the configuration of the network system according to the first embodiment of the present invention. FIG. 2 shows the network system more specifically. The network system of the first embodiment includes a connection control information distribution device 10 managed by a network administrator B, a connection setting information distribution device 20, a terminal device 30 used by user A, and a network to which the terminal device 30 is connected. With 40. Hereinafter, the network system according to the present invention will be described using an example in which the terminal device 30 of the terminal user A is connected to the connection destination. In this example, the connection destination is a network 40 using a wireless LAN that is used in the enterprise and managed by the network administrator B.

[0033] The network 40 (40—1 to 40—n) managed by the network administrator B includes a wireless LAN access point 401 (401-1 to 401—n), a DNS server 402 (402—1 to 402—). n), a Web Sano 403 (403-l to 403-n), and a gateway device 404 (404-l to 404-n). Network 40 is connected to Internet 50.

[0034] The wireless LAN access point 401 periodically transmits an ESS-ID to notify the terminal device 30 within the radio wave coverage area of the existence of the access point. When the terminal device 30 enters the radio wave coverage area and is connected to the network 40, the Web Sano 403 provides a Web page (portal page) related to the network 40. The gateway device 404 is connected to the network The terminal device 30 is connected to the Internet 50 via the network 50. Further, when using the Internet 50, the terminal device 30 can receive a domain name service by the DNS sano 402.

[0035] The connection control information distribution device 10 is a computer device such as a server, and holds connection control information RI input from an input unit such as a keyboard by the network administrator B. The connection control information RI is used to determine whether or not the connection between the terminal device 30 and the network 40 is permitted in combination with the connection setting information SI. The connection control information RI is changed when the acceptance criteria are changed. When connection setting information Si is newly added, connection control information RI is also added. As shown in FIG. 4, a network ID pattern 501 and an expiration date 502 are included as data indicating the validity of the connection. The expiration date 502 indicates a time limit for permitting connection with the network 40.

FIGS. 5A to 5D show four examples of network ID patterns 501 (501-1 to 501-4) included in the connection control information RI. The network ID pattern 501 in this embodiment is described in the form of an XML document. In the network ID pattern 501-1, the top layer tag nwid-pattern> indicates that this XML document describes information about the network ID pattern 501. Processing is started from the tag immediately below. The next level tag indicates the comparison condition when comparing the network ID 602 included in the connection setting information SI and the text described in the next level tag. It is determined that the network ID 601 that satisfies the above conditions can be combined. The next level tags are location> and organizaton>. Each of these describes the location of the network where connection is permitted by the connection control information RI and information about the management organization.

[0037] As shown in FIG. 2, the connection control information distribution device 10 includes a communication device such as an infrared device 110. When the terminal device 30 also includes an infrared communication device, the connection control information distribution device 10 provides the connection control information RI to the terminal device 30 via an infrared line.

[0038] The connection setting information distribution device 20 is a computer device such as a server, and is a device that records connection setting information SI input from an input unit such as a keyboard by the network administrator B. Connection setting information SI is a network interface corresponding to network 40. Setting information of face 307. The connection setting information SI is added to the connection setting information distributing device 20 when the network 40 is newly installed. When the existing network 40 standard is changed, the connection setting information SI is also changed.

[0039] As shown in FIG. 4, the connection setting information SI includes an ESS ID 601 that is a network identifier in a wireless LAN, and a network ID 602 that is an identifier set by the network administrator B to manage the network. WEP key 603, IP address 604 of the terminal device for terminal device 30 to perform IP communication, default gateway IP address 605 necessary for terminal device 30 to use Internet 50, and terminal device 30 It includes the DNS server IP address 606 required to receive the domain name service and the Web server IP address 607 required for the terminal device 30 to display the portal page! As described above, the connection control information RI does not include information depending on the technical standards, and only the connection setting information SI has such information. As a result, even for mixed network configurations, network connection permission / rejection can be set uniformly.

[0040] FIGS. 6A to 6C show examples of the network ID 601 (601-1 force 601-3) included in the connection setting information SI. The network ID 601 in this embodiment is described as an XML document. In the network ID 601-1, the highest level tag nwid> indicates that this XML document describes information about the network ID 601. The tags directly below are location> and organizaton>. Each of these describes information about the location of the network where the connection can be set and the management organization by the connection setting information SI.

[0041] The connection setting information distribution device 20 includes a communication device such as the infrared device 210. In addition, when the terminal device 30 has an infrared communication device, the connection setting information distribution device 20 provides the connection setting information SI to the terminal device 30 via an infrared line.

The terminal device 30 is a portable information processing / communication device used by the terminal user A. FIG. 3 is a block diagram showing the configuration of the terminal device 30. As shown in FIG. Referring to FIG. 3, terminal device 30 includes a connection control information storage unit 301, a connection setting information storage unit 302, a network connection agent 303, a network interface 307, a display screen 309, and an infrared communication device 310. A CPU 311 and a memory 312. Connection control information of terminal device 30 The information storage unit 301 and the connection setting information storage unit 302 may be a storage device fixedly installed in the terminal device 30 such as a ROM, or a portable recording device such as a memory card or an IC chip.

[0043] The infrared communication device 310 establishes an infrared line with each of the infrared communication devices of the connection control information distribution device 10 and the connection setting information distribution device 20, and is connected from the connection control information distribution device 10 to the connection setting information distribution device 20. Control information RI and connection setting information SI are received respectively. The connection control information RI received by the terminal device 30 is stored in the connection control information storage unit 301. In this example, connection control information RI-1, connection control information RI-2, and connection control information RI-3 are stored. Further, the connection setting information SI received by the terminal device 30 is stored in the connection setting information storage unit 302. In this example, connection setting information SI-1, connection setting information SI-2, and connection setting information SI-3 are stored.

The network connection agent 303 is realized as software for connecting the terminal device 30 and the network 40. By being executed by the CPU 311, a wireless LAN access point detection unit 304, a connection control information confirmation unit 305, an interface setting unit 306, and a portal page display unit 308 are realized. When the terminal device 30 enters the wireless LAN connection area of the network 40, the wireless LAN access point detection unit 304 detects the wireless LAN access point 401 and acquires the ESS ID. The connection control information confirmation unit 305 includes a network ID included in the connection setting information SI extracted from the connection setting information storage unit 302 by the network connection agent 303, and a network included in the connection control information RI in the connection control information storage unit 301. Compare with the ID pattern to determine whether a combination is possible. Further, the network connection agent 303 refers to the expiration date included in the connection control information RI extracted from the connection control information storage unit 303, and confirms whether the expiration date has not passed. If the expiration date included in the connection control information RI has not elapsed, the interface setting unit 306 sets the interface 307 using the extracted connection control information RI. After the terminal device 30 is connected to the network 40, the portal page display unit 308 acquires portal page information from the Web sano 03 and displays it on the display screen 309.

[0045] The CPU 311 controls the entire terminal device 30, and the network connection agent 303 The execution process is performed. The memory 312 temporarily records data and signals when the CPU 311 performs various processes.

FIG. 7 shows an operation flow of the connection control system according to the present invention.

[0047] Network administrator B has connection control information related to network 40 that he / she manages.

The RI is registered in the connection control information distribution device 10 (step Sl). Similarly, the connection setting information SI related to the network 40 is registered in the connection setting information distributing apparatus 20 (step S3). When receiving the request from the terminal device 30, the connection control information distributing device 10 selects, for example, the connection control information RI-1 to the connection control information RI registered through the infrared communication line.

RI-3 is provided to the terminal device 30 (step S2). Also, upon receiving a request from the terminal device 30, the connection setting information distribution device 20 sends the connection setting information SI-1 to SI-3 from the held connection setting information SI via the infrared line to the terminal. Provide to device 30 (step S4)

. The connection setting information SI-1 to SI-3 are setting information of the interface 307 corresponding to the networks 40-1 to 40-3, respectively. The terminal device 30 stores the acquired connection control information RI-1 to RI-3 in the connection control information storage unit 301, and stores the connection setting information SI-1 to SI3 in the connection setting information storage unit 302 ( Step S6).

[0048] Thus, since the connection control information RI and the connection setting information SI stored in the terminal device 30 can be acquired whenever necessary, the number of connectable networks 40 can be increased, and the network Even if technical standards are changed, it is possible to respond flexibly.

[0049] If distribution of connection control information RI and connection setting information SI and storage in terminal device 30 are performed using DRM (Digital Right Management) technology, security is improved. By using DRM technology, it becomes possible to limit the browsing and modification of the contents of connection control information RI and connection setting information SI by network administrator B power terminal user A. As a result, for example, the terminal user B can be prohibited from rewriting the expiration date 502 in the network connection control information RI.

[0050] When the terminal device 30 that holds the connection control information RI and the connection setting information SI in advance in steps S2 to S6 enters the connection area of the network 40-1, the wireless LAN access of the network connection agent 303 is performed. The point detection unit 304 detects the wireless LAN access point 401-1, and uses the ESS-ID transmitted from the wireless LAN access point 401-1. Obtain (step S8).

[0051] The network connection agent 303 searches the connection setting information storage unit 302 for connection setting information SI having the ESS-ID that matches the acquired ESS-ID as a key value. In this example, it is assumed that the connection setting information SI-1 is extracted (step S10). In this description, it is assumed that the ESS-IDs of the networks 40-1 to 40-3 correspond to the ESS-IDs of the connection setting information SI-1 to SI-3, respectively.

[0052] The network connection agent 303 sequentially reads the network connection control information RI in the connection control information storage unit 301, and checks whether the connection control information confirmation unit 305 can combine it with the connection setting information SI-1 (Step S12). The connection control information confirmation unit 305 controls the connection setting information SI and the connection control depending on whether or not the network ID pattern 501 in the connection control information RI matches the network ID 602 in the extracted connection setting information SI. Determine possible combinations with information RI.

FIG. 8 shows the operation when determining the combination of the connection setting information SI and the connection control information RI in step S12. The network connection agent 303 reads the connection control information RI-1. The connection control information confirmation unit 305 refers to the tag that is the comparison condition in the network ID pattern 501-1 (step SB1). If the referenced comparison condition tag is a <not> tag (step SB2), the tag immediately under the not> tag is recursively processed and the logical inversion of the processing result is returned (step SB3). If the referenced comparison condition tag is “>” and “>” (step SB4), the tags immediately below “>” and “>” are recursively processed in order, and the logical product of all processing results is returned (step SB5). If the referenced comparison condition tag is an <or> tag (step SB6), the tags immediately under the <or> tag are recursively processed in order, and the logical sum of all the processing results is returned (step SB7).

[0054] The connection control information confirmation unit 305 uses the network ID pattern 501—the text immediately below the tag, for example, the information on the network laying location immediately below the location> tag and the information on the network management organization immediately below the <organization> tag. 1 and network ID602—1 (Step SB8, Step SB9). Next, the extracted texts are compared (step SB10), and if they match! /, A true value is returned (step SB11), and if they do not match, a false value is returned (step SB12). All processing results directly under the comparison condition tag are logically calculated under the conditions described in the tag. If it is a true value, it is determined as connection control information RI that can be combined with the connection setting information SI, and if it is a false value, it is determined as connection control information RI that cannot be combined.

[0055] In this example, the tag is <and> (step SB4), so the conditions of the tags immediately under <and> are compared in order, and the AND of the comparison results of all the conditions in the <and> tag. Is returned (step SB5). The connection control information confirmation unit 305 takes out the information of the network ID pattern 501-1 <location> tag and the information of the location> tag in the network ID 602-1 (step SB8, step SB9) and compares them (step SB8). SB10). Both are com. X X X. Jp. JigyoshoA. Fab6, and the network laying location information matches, so a true value is returned (step SB11). Next, the information of the organization> tag in the network ID pattern 501-1 is extracted from the information of the organization> tag in the network ID 602-1 (step SB8, step SB9) and compared (step SB10). Since both are com. XXX. Jp. Cl. Drl and the network management organization information matches, the true value is returned (step SB 11) o Since all conditions in the <and> tag are satisfied (all (True value), the logical product of all the processing results is a true value, and it is determined that the connection control information RI-1 can be combined with the connection setting information SI-1.

Similarly, the network connection agent 303 reads the connection control information RI-2 and determines the combination. The connection control information confirmation unit 305 receives く and> as an input (step SB4), and sequentially compares the conditions of and and> directly under the tag, and>and> ANDs the comparison results of all the conditions in the tag. Return (step SB5). The connection control information confirmation unit 305 extracts the location> tag information in the network ID pattern 501-2 and the location> tag information in the network ID 602-1 (step SB8, step SB9) and compares them (step SB8). Step SB10). Since they are different, a false value is returned for the network location information (step SB11). Next, ku or> tag is received as an input (step SB6), ku or> conditions of the tag immediately below are compared in order, and logical sum of the comparison results of all conditions in ku or> tag is returned (step SB7). . The network ID pattern 501—2 organization> tag information and the network ID 602—1 organization> tag information are retrieved (step SB8, step SB9) and compared (step SB10). Since the two network management organization information described in network ID pattern 501-2 are inconsistent, both are false. Returns the value (step SB11). After that, when processing is completed for the condition directly under the tag or> tag, the logical sum of the processing results is calculated. In this case, since both are false values, a false value is returned. (Step SB7). All conditions in the <and> tag are not satisfied, and the logical product of all the processing results is a false value, and it is determined that the connection control information RI-2 cannot be combined with the connection setting information SI-1.

[0057] Similarly for connection control information RI-3, the condition of network ID pattern 501-3 is <and> and the information of <organization> does not match, so the result is a false value, and connection control information RI — 3 is determined not to be combined with connection setting information SI-1.

Accordingly, the network connection agent 303 extracts the connection control information RI-1 that is determined by the connection control information confirmation unit 305 to be combined with the connection setting information SI-1 (step S13). The connection control information confirmation unit 305 confirms the expiration date 502 included in the extracted connection control information RI-1 (step S14). If the expiration date has passed, the network connection agent 303 terminates the connection process and does not connect to the network 40-1 (step S15). ₀ Also, the connection control information storage unit 301 is combined with the connection setting information SI-1. If the possible connection control information RI is not held, the connection process is terminated and the connection to the network 40-1 is not made (step S15).

[0059] When the extracted connection control information RI-1 is within the validity period, the network interface setting unit 306 includes the IP address 604 included in the connection setting information SI-1 and the default gateway IP address. Configure network interface 307 using 605, DNS server IP address 606, and Web server IP address 607, and connect network 40-1 and terminal device 30 via wireless LAN access point 401-1. (Step S16). When the connection is completed, the network connection agent 303 acquires the portal page information through the Web server 403-1 and the network 40-1, processes it by the portal page display unit 308, displays it on the display screen 309, and displays it to the terminal user A. Present (step S20).

[0060] When the terminal device 30 moves away from the wireless LAN access point 401-1, and enters the outside of the connection range, the radio wave from the wireless LAN access point 401-1 does not reach, so between the terminal device 30 and the network 40-1 Will be disconnected. [0061] Next, when the terminal device 30 enters the connection range of the network 40-2, the wireless LAN access point detection unit 304 detects the wireless LAN access point 401-2 and detects the wireless LAN access point 401-2. ESS—ID sent from 2 is acquired (step S8). The network connection agent 303 searches the connection setting information storage unit 302 for the connection setting information SI having the ESS ID that matches the acquired ESS ID as a key value, and the connection setting information that matches the key value. SI-2 is extracted (step S10).

[0062] The network connection agent 303 reads the connection control information RI-1 and determines the possibility of combination. The connection control information confirmation unit 305 refers to the comparison condition tag in the network ID pattern 501-1 (step SB1). Since this tag is “and” and “>” (step S B4), the conditions directly under “and” and “>” are compared in order, and the logical product of all the processing results in the “and” tag is returned (step SB5). The connection control information confirmation unit 305 extracts the <location> tag information of the network ID pattern 501-1 and the <location> tag information of the network ID 602-2 (step SB8, step SB9) and compares them (step SB10). . Since the information of both is different, a false value is returned for the network location information (step SB11). Next, the information of the organization> tag in the network ID pattern 501—1 and the information of the organization> tag in the network ID 602—2 are extracted (step SB 8, step SB9) and compared (step SB10). Both do not match, and a false value is returned for the network management organization information (step SB11). All conditions in the <and> tag are not satisfied, and the logical product of all the processing results is a false value, and it is determined that the connection control information RI-1 cannot be combined with the connection setting information SI-2 .

Next, the network connection agent 303 reads the connection control information RI-2 and determines the combination. The connection control information confirmation unit 305 refers to the comparison condition tag in the network ID pattern 501-2 (step SB1). Since this tag is “and” and “>” (step SB4), the tags immediately after “and” and “>” are compared in order, and the logical product of all the processing results in the “and” tag is returned (step SB5). The connection control information confirmation unit 305 extracts the location> tag information in the network ID pattern 501-2 and the location> tag information in the network ID 602-2 (steps SB8 and SB9) and compares them (step SB10). ). Since both match with com.XXX.jp.jigyoshoB.bldg9, the network laying location information Returns a true value (step SB11). Next, ku or> tag is received as an input (step S Bl), and the logical sum of the processing results immediately below ku or> tag is returned (SB7). Network ID pattern 5 01—The information of the organization> tag in 2 and the information of the organization> tag in the network ID 602—2 are extracted (step SB8, step SB9) and compared (step SB 10). Network ID pattern 501—com.XXX.jp.cl.dr2 is included in the information of the organization> tag in 2. Therefore, true value is returned for network management organization information. Since all conditions in the <and> tag are satisfied, the logical product of all the processing results is a true value, and it is determined that the connection control information RI-2 can be combined with the connection setting information SI-2.

[0064] Similarly for connection control information RI-3, the comparison condition of network ID pattern 501-3 is "and>", and the network installation location information and the network management organization information match, and the result of logical product is true. It is determined that the connection control information RI-3 can be combined with the connection setting information SI-2.

Therefore, the network connection agent 303 extracts the connection control information RI-2 and the connection control information RI-3 (step S13).

[0066] The connection control information confirmation unit 305 confirms the expiration date 502-2 included in the connection control information RI-2, and if the expiration date has passed, the expiration date 502 included in the connection control information RI-3 Check 3. If the expiration date 502-3 has also expired, the network agent 303 terminates the connection process and does not connect to the network 40-1 (step S15).

[0067] When the extracted connection control information RI-2 is within the validity period, the network interface setting unit 306 includes the IP address 604 included in the connection setting information SI-2, and the default gateway IP address. Configure network interface 307 using 605, DNS server IP address 606, and Web server IP address 607, and connect network 40-1 and terminal device 30 via wireless LAN access point 401-1. (Step S16). Thereafter, the operations from step S18 to step S20 are similarly performed. If the connection control information RI-2 is outside the valid period and the connection control information RI-3 is within the valid period, the network interface setting unit 306 similarly uses the connection setting information SI-2 to establish the network interface 307. The network 40-1 and the terminal device 30 are connected. (Step S16). Thereafter, the operations from step S18 to step S20 are similarly performed.

[0068] Next, when the terminal device 30 enters the connection range of the network 40-3, the wireless LAN access point detector 304 detects the wireless LAN access point 401-3, and the wireless LAN access point 401-3. ESS—ID sent from 3 is acquired (step S8). The network connection agent 303 searches the connection setting information storage unit 302 for the connection setting information SI having the ESS ID that matches the acquired ESS ID as a key value, and the connection setting information that matches the key value. SI-3 is extracted (step S10).

Similarly, the network connection agent 303 reads the connection control information RI-1 to the connection control information RI-3 from the connection control information storage unit 301, and determines the combination. The location> tag in network ID 602—3 is com. XXX .jp.jigyoshoB.bldglO, and the organization> tag is com. XXX .jp.cl.dr3, and there is no matching network ID pattern. Therefore, the connection control information RI-1 to the connection control information RI-3 cannot be extracted, and the network agent 303 ends the connection process and does not connect to the network 40-1 (step S15).

[0070] Further, the network installation location information and the management organization information are described in regular expressions. For example, the installation location information is com. X xx. As shown in the network ID pattern 501-4 shown in Fig. 5 (b). jp. jigyoshoB. *, management organization information ability Scom. xxx. jp. cl. If *, it matches all network IDs including com. x xx. jp. jigyoshoB. In the example of Fig. 6, it matches network ID 602-2 and network ID 602-2. Therefore, when the terminal device 30 holds the connection control information RI including the network ID pattern 501-4, it can be connected to both the network 40-1 and the network 40-2.

[0071] As described above, the combination of the connection setting information SI for connecting to the network 40 and the connection control information RI for executing connection permission / inhibition is not limited to one-to-one, but to one-to-many, or Many-to-many. In addition, it is possible to flexibly set network connection permission / rejection by changing various information for determining connection permission / rejection such as the expiration date 502 included in the connection control information RI. For example, by including prepaid information that defines the usage fee of the network 40 in the connection control information RI, it is possible to reduce the number of networks 40 to which the terminal device 30 can be connected after reaching a certain charge amount. Also, it can be combined for certain connection setting information SI Two pieces of effective connection control information RI are prepared and ordered. The first connection control information RI can be used free of charge for the network, but it has an expiration date, and the second connection control information RI includes prepaid information. As a result, the network connection agent 303 determines that the network 40 can be used free of charge until the first time based on the first connection control information, but thereafter, the network connection agent 303 is charged based on the second connection control information ( Prepaid) and it is determined that there is a validity period. As a result, it is possible to control such that when the prepaid is used up, it becomes impossible to connect to the network. Furthermore, by including connection time zone information, the number of terminal devices 30 that can be connected for each hour can be limited.

[0072] Even when there are multiple types of technical standards for the connection destination network, the connection control information RI can be configured so that it does not depend on the technical standards, as long as the connection setting information SI is prepared according to each technical standard. Therefore, it is possible to determine whether to permit or reject a connection even for a network with multiple technical standards.

Next, a connection control system according to the second embodiment of the present invention will be described. The connection control system of the second embodiment has the same configuration as that of the first embodiment, but connection control information and connection setting information are different. FIG. 9 shows the configuration of the network ID pattern 5001 and the network ID 602 used in the second embodiment of the present invention. Network ID pattern 501 and network ID 602 are described in IP address notation. The network ID pattern 501 includes identification information 501A for identifying the network 40, a mask 501B, and a comparison condition 501C. The comparison condition 501C is a condition for determining whether the connection control information RI and the connection setting information SI can be combined, and is represented by a logical expression. The connection control information confirmation unit 305 calculates the mask 501B and the network ID 602 based on the comparison condition 501C when determining the force that the connection control information RI and the connection setting information SI can be combined. For example, in the configuration of the network ID pattern 501, the identification information 501A is described as 10.15.0.0, mask501B is described as 255.255.0.0, the comparison condition 501C is described as and, and the network ID6 02 is described as 10. 15. 34.2.

In the connection control system according to the second embodiment of the present invention, the terminal device 30 and the network 40 are connected by the same operation as in the first embodiment shown in FIG. FIG. 10 shows an operation when determining the possibility of the combination of the connection setting information SI and the connection control information RI in step S12 of FIG. The network connection agent 303 reads the connection control information RI and determines the possibility of combination. The connection control information confirmation unit 305 extracts the mask 501B from the network ID pattern 501 (Step SC1). Next, the calculation method of the logical calculation is determined with reference to the comparison condition 501C in the network ID pattern 501 (step SC3). Then, logical calculation of mask 501B and network ID is performed (step SC4). In this example, since the comparison condition 501C is and, the network ID 10.15.34.2 and the mask501B 255.255.0.0! ^ Performs AND operation (in binary notation! ^ AND operation). The identification information 501A is extracted from the network ID pattern 501 (step SC7), and compared with the calculation result in step SC5, the possibility of combination is determined (step SC9). In this case, since both the identification information 501A and the value of the calculation result in step SC5 match 10.15.0.0, the connection control information RI with this network ID pattern 501 is combined with the connection setting information. It is determined that it is possible (step SC 11). If the identification information 501A and the value of the calculation result in step SC5 do not match, it is determined that the combination is impossible (step SC13).

[0076] The comparison condition 501C in the above example may be another logical expression such as force or or not, and a combination thereof.

[0077] In this method, the degree of freedom of the information that can be included in the network ID pattern 501 and the network ID 602 is lower than that described in the XML document, but the determination process of the possibility of combination is simple, and high-speed processing is possible. Is possible.

As described above, the connection control system according to the present invention checks whether or not connection is possible in the terminal device 30 and does not require the help of an external server through the network. Therefore, it is possible to determine whether or not connection is possible before connection.

[0079] In addition, the right information for determining whether to permit connection to the network 40 and the setting information of the interface 307 are separated, and all the information depending on the technical standard of the network 40 is stored on the setting information side of the interface 307. Therefore, it is not included in the connection control information RI to the network 40. Therefore, even for a network configuration in which multiple wireless LAN technical standards are mixed, network connection permission / inhibition can be set uniformly. FIG. 11 is a block diagram showing the configuration of the connection control system according to the third example of the present invention. Referring to FIG. 11, in the third embodiment, rights information and setting information are managed separately for services provided on the network (for example, VoIP service) and used when using the services. Refusal determination and connection setting are executed. In this case, the contents of the rights information RI 'for using the VoIP service does not depend on the VoIP technical standard, and the settings information SI' for using the VoIP service is used to use the VoIP service. Contains necessary setting information items.

[0081] In the third embodiment, the connection control system in the first embodiment is configured as a network service utilization system. Figure 11 shows the configuration of the network service utilization system. The network service utilization system according to the present invention is configured to use the terminal device 30 ′, the network 40 connected to the terminal device 30, and the setting for using the VoIP service provided on the network 40. A setting information distribution device 302 ′ holding information SI ′ and a right information distribution device 301 ′ holding right information RI, which is used to determine whether or not the VoIP service can be used. In addition, a service providing server 307 ′ for providing VoIP service on the network 40 is connected to the network 40 ′.

The terminal device 30 ′ includes a right information storage unit 301 ′, a setting information storage unit 302 ′, and a service utilization agent 303 ′. The terminal device 30 ′ acquires the rights information RI ′ from the rights information distribution device 10 ′ in advance and holds it in the rights information holding unit 301 ′. In addition, the setting information SI ′ is acquired from the setting information distribution device 20 ′ and is held in the setting information holding unit 302 ′. The service utilization agent 303 ′ includes a right information confirmation unit 305 ′ and a setting information transmission unit 306 ′.

[0083] When the terminal device 30 'uses the VoIP service on the network 40', the service use agent 303 first sets the setting information SI 'used for setting to use the VoIP service on the network 40. To extract. Further, the right information RI ′ corresponding to the setting information SI ′ is retrieved from the right information storage unit 301 ′ and extracted. If the corresponding rights information RI 'is !, the terminal device 30 cannot use the VoIP service of the corresponding network 40'. Here, the right information RI ′ stored in the right information storage unit 301 ′ is the right information RI-1′˜RI-n ′, and the setting information SI ′ stored in the setting information storage unit 302 ′ is the setting information SI. — 1 'to SI — n. Rights information RI' and setting information SI 'are common information such as A, B, C, D, E, F, etc. Information is included.

[0084] When the setting information SI 'used for setting to use the VoIP service is the setting information SI-3, the service use agent 303' receives the setting information SI-3 'from the setting information storage unit 302'. The right information RI ′ having the information C included in the setting information SI—3 ′ is retrieved from the right information storage unit 301 ′, and the right information RI—2 ′ is extracted. The rights information confirmation unit 305 ′ refers to the rights information RI-2 ′ to determine refusal to use the VoIP service. At this time, the rights information RI-2 'includes usage conditions such as an expiration date, which is the expiration date.

[0085] When the right confirmation unit 305 ′ determines that the corresponding VoIP service is available, the setting information transmission unit 306 ′ sends the setting information SI-3 ′ to the service providing service via the network 40 ′. Send the message to 307 ', configure the settings to use the VoIP service, and receive the service.

[0086] As described above, the right information for determining only availability without depending on the service technical standard and the setting information used for setting to use the service depending on the service technical standard are separated. By holding, the number and types of services for each network that can be used by the terminal device 30 can be flexibly changed. Furthermore, the setting information and rights information can be collectively managed in the terminal device 30 to provide services of multiple technical standards. It is possible to set the availability of services uniformly for the network 40 in which.

According to the connection control system and the terminal device of the present invention, it is possible to determine whether or not connection is possible within the terminal device before connecting to the network. In addition, the number and configuration of networks to which terminal devices can be connected can be flexibly changed.

Furthermore, it is possible to uniformly set whether to connect to a network for a network configuration in which a plurality of technical standards are mixed.

Claims

The scope of the claims

[1] a first storage unit for storing a plurality of connection setting information for setting a connection with a plurality of connection destinations;

A second storage unit for storing a plurality of connection control information for controlling the connection based on the plurality of connection setting information;

When the plurality of connection setting information and the plurality of connection control information each include a pair of specific connection setting information and at least one specific connection control information corresponding to a specific connection destination, the specific connection control information and the specific connection Based on the setting information! And the connection agent that connects to the specific destination

A terminal device comprising:

[2] In the terminal device according to claim 1,

When the specific connection control information indicates that the connection with the specific connection destination is valid, the connection agent connects the terminal device with the connection destination based on the specific connection setting information.

Terminal device.

[3] In the terminal device according to claim 1,

When the specific connection control information is plural for the specific connection setting information, the specific connection control information is ordered, and indicates that the connection with the specific connection destination is valid in a different range, the connection The agent sequentially connects to the connection destination of the terminal device based on the specific connection setting information based on the plurality of specific connection control information.

Terminal device.

[4] In the terminal device according to any one of claims 1 to 3,

The connection agent determines one of the plurality of connection setting information as the specific connection setting information based on the specific connection destination, and the plurality of connection control information based on the specific connection control information Determine at least one of them as the specific connection control information

Terminal device.

[5] In the terminal device according to claim 4,

When the specific connection destination is detected, the connection agent determines one of the plurality of connection setting information as the specific connection setting information based on the specific connection destination, and includes the specific connection setting information in the specific connection setting information. And determining at least one of the plurality of connection control information as the specific connection control information

Terminal device.

[6] In the terminal device according to claim 4 or 5,

Each of the plurality of connection setting information includes first discrimination information;

Each of the plurality of connection control information has second determination information and a condition,

The connection agent performs a process of determining whether or not the first determination information of the specific connection setting information and the second determination information of each of the plurality of connection control information satisfy the condition! The connection control information satisfying the condition is determined as the specific connection control information

Terminal device.

[7] The terminal device according to any one of claims 1 to 6,

The specific connection destination is a network

Terminal device.

[8] The terminal device according to any one of claims 1 to 6,

The specific connection destination is a server connected to a network to which the terminal device is connected

Terminal device.

[9] A connection setting information distribution device for storing a plurality of distribution connection setting information for setting a connection with a plurality of connection destinations,

A connection control information distribution device for storing a plurality of distribution connection control information for controlling the connection based on the plurality of distribution connection setting information;

A terminal device,

The terminal device

A first storage unit and a second storage unit; At least a part of the plurality of distribution connection setting information is acquired as a plurality of connection setting information from the connection setting information distribution device and stored in the first storage unit, and the plurality of distributions including the connection setting information distribution device A communication unit that acquires at least a part of the connection control information as a plurality of connection control information and stores it in the second storage unit; and

When the plurality of connection setting information and the plurality of connection control information each include a pair of specific connection setting information and at least one specific connection control information corresponding to a specific connection destination, the specific connection control information and the specific connection Based on the setting information! And a connection agent that connects the terminal device to the specific connection destination

A connection control system comprising:

[10] In the connection control system according to claim 9,

When a new connection destination is added, distribution connection setting information corresponding to the new connection destination is added to the connection setting information distribution device,

Each of the plurality of distribution connection control information is information indicating the validity of the specific connection setting information to be paired among the plurality of distribution connection setting information.

Connection control system.

[11] The connection control system according to claim 9 or 10,

The specific connection destination is a network

Connection control system.

[12] The connection control system according to claim 9 or 10,

Connection control system.

[13] When the terminal device is to be connected to the specific connection destination, extracting specific connection setting information corresponding to the specific connection destination from a plurality of connection setting information stored in the first storage unit;

Extracting at least one specific connection control information to be paired with the specific connection setting information from a plurality of connection control information stored in the second storage unit;

Based on the specific connection control information and the specific connection setting information, the specific connection destination Connecting the terminal device;

A connection control method comprising:

[14] In the connection control method according to claim 13,

The plurality of connection setting information is provided for setting a connection with a plurality of connection destinations, and each of the plurality of connection control information is the identification of the plurality of connection setting information to be the set. Information indicating the validity of the connection setting information

Connection control method.

[15] The connection control method according to claim 14,

The connecting step includes:

A connection control method comprising: connecting the terminal device to the connection destination based on the specific connection setting information when the specific connection control information indicates that the specific connection setting information is valid.

[16] In the connection control method according to claim 14,

The specific connection control information is plural with respect to the specific connection setting information, the plurality of specific connection control information is ordered and indicates validity in different ranges, and the step of connecting includes:

Based on the validity of each of the plurality of specific connection control information, and sequentially connecting the terminal device to the connection destination

A connection control method comprising:

[17] In the connection control method according to any one of claims 13 to 16,

The step of extracting the specific connection setting information includes:

A step of determining one of the plurality of connection setting information as the specific connection setting information based on the connection destination when the connection destination is detected;

A connection control method comprising:

[18] In the connection control method according to claim 17,

The step of extracting the specific connection control information includes: Performing a process of determining whether or not the first determination information of the specific connection setting information and the second determination information of each of the plurality of connection control information satisfy the condition; and the connection control satisfying the condition Step for determining information as the specific connection control information

A connection control method comprising:

[19] The connection control method according to any one of claims 13 to 18,

The connection destination is a network

Connection control method.

[20] The connection control method according to any one of claims 13 to 18,

The connection destination is a service providing server connected to a network.

Connection control method.