WO2014017629A1

WO2014017629A1 - Communication system, node apparatus, method and program

Info

Publication number: WO2014017629A1
Application number: PCT/JP2013/070315
Authority: WO
Inventors: 拓也久保; 田村　利之
Original assignee: 日本電気株式会社
Priority date: 2012-07-27
Filing date: 2013-07-26
Publication date: 2014-01-30

Abstract

For performing an offload from a mobile communication access network to another access network, such an offload to an access network can be performed in accordance with a terminal; for example, an offload to an access network in which filtering is available can be performed for a terminal that requires the filtering. When a terminal (UE) enters, from a mobile communication access network, an offload-possible access network area other than the mobile communication access network, a node apparatus (ANDSF) refers to the subscriber information of the terminal (UE) and transmits, to the terminal, information of offload-destination access networks that corresponds to the terminal (UE). The terminal (UE), which is to be filtered, then selects, as access network that is a destination of offload from the mobile communication access network, an access network connected to a mobile operator network including a gateway that can perform the filtering.

Description

COMMUNICATION SYSTEM, NODE DEVICE, METHOD, AND PROGRAM

[Description of related applications]
The present invention is based on a Japanese patent application: Japanese Patent Application No. 2012-167235 (filed on July 27, 2012), and the entire description of the application is incorporated herein by reference.
The present invention relates to a communication system, a node device, a method, and a program.

In recent years, with the spread of smartphones, the amount of communication traffic per mobile terminal (UE: User Equipment) has increased significantly. For this reason, the congestion of the mobile network of a mobile communication operator (also referred to as a communication operator) is a big problem.

As one effective countermeasure against this problem, a mobile operator (mobile operator or mobile communication operator) uses GSM (registration) defined by 3GPP for communication from a mobile terminal (UE) of a subscriber. Trademark), WCDMA (registered trademark), LTE, 3GPP2 stipulated CDMA, CDMA2000, WiMAX, PHS and other access networks (hereinafter referred to as mobile communication access network), for example, Wi-Fi (Wireless Fidelity: Wi-Fi is Focusing on offloading (diverted) switching to other networks, such as wireless LAN (Local Area Network) using Wi-Fi Alliance registered technology, wireless LAN access points (simply access points, or Actively promote off-road measures such as expansion of hot spots) That. Wi-Fi refers to a test conducted by the Wi-Fi Alliance to verify the interoperability compatibility of IEEE (The Institute of Electrical and Electronics Electronics Inc) 802.11 series wireless LANs. .

The following is an analysis of related technologies. In the following, problems related to offloading to other wireless LAN networks such as Wi-Fi will be described (analysis results by the present inventors).

For the access from the mobile terminal (UE) to the Internet via a normal mobile network, filtering for adolescents is performed on the mobile network. For example, according to the content of a predetermined service contract by a parent or the like regarding a youth mobile terminal, the mobile operator
-Restrict access destinations and restrict access except for specific sites.
・ Provide various filtering services for young people, such as restricting access to specific categories (for example, dating, adult, gambling sites). Among these, the content filter monitors communication between the Internet and a mobile terminal using a gateway (gateway node) on the mobile operator's network, and connects to an access restriction target based on, for example, URL (Universal Resource Locator) information. Or filtering according to the content of the page, or a combination of these.

However, a mobile terminal (UE) is connected to the Internet via a wireless LAN network in a wireless LAN network environment such as Wi-Fi (for example, within a public wireless LAN access point area such as a cafe, a fast food restaurant, a station, or an airport). When connected, the communication by the mobile terminal (UE) is outside the scope of the filtering service by the mobile operator.

Therefore, as schematically shown in FIG. 1, the mobile terminal (UE) of the child (youth) enters the coverage (range) of a network other than the mobile operator, such as a Wi-Fi network, and the mobile phone of the child (youth) If the communication from the terminal (UE) is offloaded from the mobile communication access network to a network other than the mobile communication access network, such as a Wi-Fi network, the filtering service by the mobile operator is not implemented and the child (youth) There is a problem that it is impossible to restrict access to harmful sites by mobile terminals (for example, children cannot be protected from harmful sites).

In FIG. 1, the access network discovery selection function ANDSF (Access Network Discovery and Selection Function) is connected to a mobile terminal (UE) such as a mobile communication access network or an access network other than the mobile communication access network such as Wi-Fi. It is possible to provide information on connectable access networks. The portable terminal (UE) includes an antenna and a wireless unit that wirelessly communicate with a portable network, and an antenna and a wireless unit that wirelessly communicate with a network other than a portable network. For ANDSF, for example, 3GPP TS24.312 V.11 (3rd Generation Partnership Project; Technical Technical Specification Group Core Core Network and Terminals; Access Network Discovery and Selection Selection Function (ANDSF) Management Object (MO) (Release 11) The

In FIG. 1, when a mobile terminal (UE) enters the coverage (range) of a network other than a mobile communication access network such as Wi-Fi, and the mobile operator is offloaded to a network other than the mobile communication access network, If the terminal is an adult, it may be offloaded easily, but if the user of the mobile terminal (UE) is a youth, it needs to be done carefully. That is, for mobile terminals (UE) that require filtering processing (for example, the youth mobile terminal in FIG. 1), it is possible to provide a filtering service by a mobile operator, as in the case of access to a normal mobile communication access network. It is desirable to realize a safe network usage environment.

Therefore, the present invention has been made in view of the above-described problems, and its purpose is when a terminal is offloaded from a mobile communication access network to another radio access network or connected to the radio access network. In addition, it is possible to provide a communication system, apparatus, method, and program for connecting to a radio access network that can be filtered and connected to a filtering target terminal that can be offloaded or connected to a radio access network suitable for the terminal. It is in.

According to the present invention (Aspect 1), a terminal, an access network other than a mobile communication access network capable of connecting the terminal and the Internet, and an access other than the terminal and the mobile communication access network A node that controls connection with a network, and when the terminal connects to an access network other than the mobile communication access network, the node refers to subscriber information of the terminal, and When it is determined whether or not the terminal is set as an execution target of the filtering process, and it is determined that the terminal corresponds to the execution target of the filtering process, the terminal performs the filtering process from an access network other than the mobile communication access network Connect to the Internet via a network that can The identity of the other access network for a communication system for notifying the terminal is provided.

According to the present invention (Aspect 2), a terminal and a node on an access network that is an offload destination from a mobile communication access network are provided, and when the node receives a packet transmitted from the terminal, Reference is made to flag information indicating whether or not a subscriber of the terminal corresponds to a predetermined filtering process execution target, and when the packet is from a filtering process execution target terminal, the output destination of the packet A communication system is provided for automatically policy routing to a network that performs filtering.

According to the present invention (Aspect 3), there is provided a node device for controlling connection of an access network other than a mobile communication access network capable of connecting a terminal and the Internet, wherein the terminal is other than the mobile communication access network. When connecting to another access network, the subscriber information of the terminal is referred to, it is determined whether or not the terminal is set as a filtering process execution target, and the terminal becomes a filtering process execution target. When it is determined that it corresponds, the terminal notifies the terminal of identification information of the other access network for connecting to the Internet via a network that can perform filtering processing from an access network other than the mobile communication access network. A node device is provided.

According to the present invention (Aspect 4), there is provided a node device for controlling connection from a mobile communication access network capable of connecting a terminal and the Internet to a node on an offload destination access network, which is transmitted from the terminal. When the received packet is received, the subscriber of the terminal refers to flag information as to whether or not the filtering process is performed, and if the packet is from the filtering process performed terminal, the packet output A node device is provided that automatically policy-routes the destination to a network that performs filtering processing.

According to the present invention (Aspect 5), a node that controls connection of an access network other than the mobile communication access network that can connect the terminal and the Internet is configured such that the terminal When connecting to an access network, the node refers to subscriber information of the terminal to determine whether or not the terminal is set as a filtering process target, and the terminal performs a filtering process target. If the terminal is determined to fall under the above, identification information of the other access network for connecting to the Internet via a network in which the terminal can perform filtering processing from an access network other than the mobile communication access network is transmitted to the terminal. A communication method of notifying is provided.

According to the present invention (Aspect 6), when a node on an access network that is an offload destination from a mobile communication access network receives a packet transmitted from a terminal, whether or not the terminal falls under the filtering processing target. A communication method is provided in which when the packet is from a terminal that is subject to filtering processing, the destination of the packet is automatically policy-routed to a network that performs filtering processing. The

According to the present invention (Aspect 7), the terminal accesses the mobile communication access to a computer that constitutes a node device that controls connection of an access network other than the mobile communication access network that can connect the terminal and the Internet. When connecting to an access network other than the network, the subscriber information of the terminal is referred to, it is determined whether or not the terminal is set as a filtering process execution target, and the terminal performs the filtering process. If the terminal is determined to fall under the target, the identification information of the other access network for connecting to the Internet via a network in which the terminal can perform filtering processing from an access network other than the mobile communication access network, Pro to execute processing to notify Lamb is provided.

According to the present invention (Aspect 8), when a packet transmitted from a terminal is received by a computer constituting a gateway on an offload destination access network from a mobile communication access network, the terminal performs a predetermined filtering process. A process of referring to flag information as to whether or not the packet is a target of implementation, and automatically filtering the policy to the network by filtering the output destination of the packet when the packet is from a filtering target terminal Is provided. According to the present invention, there is provided a computer-readable recording medium such as a semiconductor memory in which the program according to the aspect 7 or 8 is recorded, and a magnetic disk / optical disk.

According to the present invention, when a terminal is offloaded from a mobile communication access network to another radio access network or connected to another radio access network, the terminal is offloaded or connected to a radio access network suitable for the terminal. It is possible to connect to a filtering-accessible radio access network.

It is a figure for demonstrating the subject of this invention. It is a figure which shows the structure of illustrative 1st Embodiment of this invention. 1 is a diagram illustrating a first exemplary embodiment of the present invention. It is a figure which shows the sequence of the 1st Embodiment of this invention. It is a figure which shows the sequence of the 2nd Embodiment of this invention.

Embodiments of the present invention will be described. According to the present invention, when a communication terminal (UE) enters another radio access network area that can be offloaded from a mobile communication access network, the subscriber information of the communication terminal (UE) is referred to, and the communication terminal (UE) It is determined whether or not (UE) is a predetermined filtering target. If it is determined that it is a filtering target, information for connecting to the network that performs filtering processing on the communication terminal (UE) is transmitted to the communication terminal (UE). Specifically, in FIG. 1 described above, the communication terminal (UE) enters the coverage (range) of an access network other than the mobile communication access network (network other than the mobile phone), and the mobile operator accesses the mobile communication. In order to offload from the network to an access network other than the mobile communication access network, the ANDSF sends information that enables offload to the access network corresponding to the communication terminal (UE) to the communication terminal (UE). ) To provide. For this reason, for example, even when a youth (child) communication terminal (UE) is offloaded from a mobile communication access network to an access network other than the mobile communication access network, the communication terminal as another access network of the offload destination An access network connected to a network that performs a filtering process of communication from (UE) is selected. For this reason, provision of the filtering service corresponding to a communication terminal (UE) is enabled.

<Embodiment 1>
FIG. 2 is a diagram showing a configuration of the entire system according to the first embodiment of the present invention. Referring to FIG. 2, a communication terminal (UE) 10 is connected to the Internet 40 via a mobile communication access network 20. The communication terminal (UE) 10 includes an antenna and a wireless unit that wirelessly communicate with the mobile communication access network 20 (mobile network), and an antenna and a wireless unit that wirelessly communicate with an access network 30 other than the mobile communication access network. It shall be. The communication terminal (UE) 10 is not limited to a mobile terminal, but may be a mobile terminal mounted on a vehicle or the like, or a fixed terminal installed in a home, the public, or the like. The mobile communication access network 20 is connected to a 3G (3rd Generation) / LTE (Long Term Evolution) connection via a terminal device of GGSN (Gateway GPRS (General Packet Radio Service) Support Node) / PGW (Packet Data network Gateway). Connect to the Internet 40 which is an external packet network. In addition to the Internet 40, the external packet network may be SIP (Session Initiation Protocol) -based IMS (IP Multimedia System) or the like.

Communication traffic from a communication terminal (UE) subject to a contract for the content filtering service is filtered by a gateway (GW) 21 on the mobile communication access network 20 to prevent access to an access-restricted site or the like. ing. Although not particularly limited, the gateway (GW) 21 may be the above-described GGSN / PGW or the like.

An environment in which the communication terminal (UE) 10 can be connected to an access network (wireless LAN network) 30 other than the mobile communication access network such as Wi-Fi (for example, public wireless such as a cafe, a fast food store, a station premises, an airport, etc.) When the communication terminal (UE) 10 enters the LAN access point area and connects to the access network 30 other than the mobile communication access network, the ANDSF 50 receives the subscriber information (UE) corresponding to the communication terminal (UE) 10 ( For example, it is determined whether or not the communication terminal (UE) 10 is a content filtering target by referring to a contract condition, an identification number, and the like. If the communication terminal (UE) 10 is a content filtering target, it is turned off. Other destination wireless access network (other than mobile communication access network) As the network 30), it performs control to offload provided to the possible access network filtering services via mobile operator. That is, the ANDSF 50 can be used as an access network 30 other than an offload destination mobile communication access network for a communication terminal (UE) 10 that is a content filtering target, for example, a mobile operator network having a gateway 21 that performs content filtering. Notifies the identification information of the access network to be connected. The communication terminal (UE) 10 that has received this notification connects to the Internet 40 via a node (gateway (GW) 21) that performs filtering from an access network 30 other than the off-road destination mobile communication access network.

In FIG. 2, information on whether or not the communication terminal (UE) 10 is a content filtering target is managed by subscriber profile information. The subscriber profile information is stored in a home subscriber server HSS (Home Subscriber Server) 60 which is a subscriber database node.

In the access to the home subscriber server (HSS) 60, the ANDSF 50 refers to, for example, a subscriber profile repository SPR (Subscriber Profile Repository) that stores subscriber profile information and a user data repository UDR (User Data Repository). You may do it.

FIG. 3 is a diagram for explaining the operation principle of the first embodiment. As shown in FIG. 3, the mobile operator sets two identification codes SSID (Service (Set Identifier) in a wireless access network such as Wi-Fi. One identification code (SSID = a) is a radio access network connected to the Internet via the mobile operator's network, and the other identification code (SSID = b) is an identification assigned to the radio access network directly connected to the Internet. Code. The SSID is an identifier of an IEEE 802.1x wireless network (wireless AN access point), and is used by a wireless device for establishing and maintaining a wireless connection. For example, a plurality of different SSIDs can be set in one wireless access point (WLAN AP). The communication terminal (UE) can make a connection request (association request) to the wireless LAN access point regardless of which SSID is used.

3, the mobile communication access network includes ANDSF 50, 3GPP (3rd Generation Partnership Project), AAA (Authentication, Authorization, Accounting), HSS 60, and gateway 21.

A wireless LAN network, which is an access network other than the mobile communication wireless access network (30 in FIG. 2), includes a wireless LAN access point (WLAN AP) for wireless communication with a communication terminal (UE) and a wireless LAN access point (WLAN AP). And a wireless LAN gateway (WLG) connected to the Internet and a portable (mobile) operator network.

The ANDSF 50 receives a request from a communication terminal (UE) in a wireless LAN environment (within a radio access network), accesses the HSS 60, refers to subscriber information corresponding to the communication terminal (UE), and ) Is a content filtering target. When the communication terminal (UE) is a content filtering target as a result of the determination, the ANDSF 50 uses the identification information (SSID = a) of the wireless access network (wireless LAN access point) that can provide the filtering service. Notify the communication terminal (UE). Based on the notification from the ANDSF 50, the communication terminal (UE) sends the wireless operator (WLAN AP) of the wireless network (channel) corresponding to SSID = a via the wireless LAN gateway (WLG) to the mobile operator. Connect to the network. Although not particularly limited, for example, a VLAN (Virtual LAN) connection is established between a wireless LAN access point (WLAN AP) and a wireless LAN gateway (WLG) corresponding to a plurality of SSID wireless networks.

When receiving the identification information (SSID) from the ANDSF 50, the content filtering target communication terminal (UE) is set in advance so as to connect to the radio access network of the identification information (SSID) as an offload destination. (That is, it is set so that a connection request cannot be made to the wireless LAN access point other than the identification information SSID = a notified from the ANDSF 50). As a result, the communication terminal (UE) is connected to the Internet from the wireless LAN network having the identification information SSID = a via the network of the mobile operator that provides the filtering service, and the communication terminal (UE) Internet access is restricted and a secure access service is provided.

The ANDSF 50 notifies the identification information (SSID = b) of the wireless access network (wireless LAN access point) to the communication terminal (UE) when the subscriber is not subject to content filtering from the subscriber information. Based on the notification from the ANDSF 50, the communication terminal (UE) connects to the Internet from the wireless LAN access point (WLAN AP) of the wireless network (channel) corresponding to SSID = b via the wireless LAN gateway (WLG). In addition, it is configured to have two wireless LAN access points (WLAN AP) corresponding to two different pieces of identification information SSID = a and SSID = b, and the two wireless LAN access points (WLAN AP) are connected to a wireless LAN gateway ( WLG).

FIG. 4 is a sequence diagram illustrating the operation flow of the embodiment. The UE, AP, WLG, 3GPP AAA, HSS, and ANDSF in FIG. 4 correspond to the UE, WLAN AP, WLG, 3GPP AAA, HSS, and ANDSF in FIG. 3, respectively.

Sequence 1:
When the communication terminal (UE) enters the coverage (coverage) of an access network (wireless LAN access point) other than the mobile communication access network, the communication terminal (UE) makes an access network information request (access network) to the ANDSF. information request).

Sequence 2:
The ANDSF that has received the access network information request from the communication terminal (UE) uses the subscriber identification number included in the access network information request message as a key, and the subscriber information request (HS) as a HSS. Send to. When the HSS receives a subscriber information request for a communication terminal (UE) from the ANDSF, the HSS determines whether the communication terminal (UE) is a content filtering target.

Sequence 3:
The HSS includes information on whether or not the communication terminal (UE) is a content filtering target (filter = on / off) in a subscriber information response (Subscriber Information Response) that is a response to the subscriber information request from the ANDSF. Return to ANDSF.

Sequence 4:
When the communication terminal (UE) is a content filtering target (filter = on), the ANDSF uses the SSID information of the wireless LAN access point connected to the operator's network as an access network information request. Including the response to the communication terminal (UE). When the communication terminal (UE) is not a content filtering target (filter = off), the ANDSF directly transmits the SSID information of the wireless LAN access point connected to the Internet without going through the operator network. It returns on the information terminal (access network information request) and returns to the said communication terminal (UE).

Sequence 5:
The communication terminal (UE) targeted for content filtering designates SSID = a and transmits an association request to the wireless LAN access point (AP).

Sequence 6:
3GPP AAA performs authentication with HSS. For example, in the authentication protocol EAP (Extensible Authentication Protocol) -SIM (Subscriber Identity Module), a SIM card of GSM (Global System for Mobile communications) (registered trademark) is used, for example, Wi-Fi compatible. Are authenticated by the Wi-Fi network, and the session key is distributed. For details of EAP-SIM authentication, refer to RFC (Request for Comments) 4186 of The Internet Engineering Task Force (IETF).

Sequence 7:
If the authentication is successful, the user traffic (data traffic) of the communication terminal (UE) is transferred to the operator network via the wireless LAN access point (AP) and the gateway (WLG). A predetermined filtering process according to the service contract content of the communication terminal (UE) is performed in the gateway (21 in FIG. 2) of the operator network. As a result, access to the harmful site or the like of the communication terminal (UE) is blocked. The downlink data is transferred from the Internet, operator network, gateway (WLG), and wireless LAN access point (AP) to the communication terminal (UE). In the first embodiment, the function of the ANDSF may be realized by a program executed by a computer constituting the ANDSF.

<Embodiment 2>
Next, Embodiment 2 of the present invention will be described. In the second embodiment, the traffic of the communication terminal (UE) subject to content filtering is forcibly redirected to the operator network by the wireless LAN controller (WLC) without using the ANDSF described in the first embodiment. Content filtering is performed on the operator network. In FIG. 4, an authentication protocol (RADIUS, Diameter) transmitted / received between WLG-3GPP AAA-HSS is extended, and a filter flag indicating whether or not content filtering is necessary is added. FIG. 5 is a diagram illustrating a sequence operation example according to the second embodiment of the present invention.

Sequence 1:
When a communication terminal (UE) enters an area within an access network (wireless LAN access point) other than the mobile communication access network, it transmits a connection request (association request) to the wireless LAN access point (AP). In this association request, the SSID of the radio access network is not specified as in the first embodiment. The wireless LAN access point (AP) periodically transmits a beacon signal to the client in the wireless access network, and the communication terminal (UE) transmits the probe request packet (SSID (ESS-ID set in the communication terminal (UE)). : Extended Service Set Identifier) is transmitted to search for a wireless LAN access point, and if the wireless LAN access point is the same SSID (ESS-ID), a probe response packet is returned to the communication terminal (UE). Upon receiving this probe response packet, the communication terminal (UE) may transmit an association request to the wireless LAN access point.

Sequence 2:
At the time of authentication of the communication terminal (UE), the wireless LAN gateway (WLG) determines whether the communication terminal (UE) is a content filtering processing target communication terminal (UE) via 3GPP AAA. The filter flag mounted on the authentication response message is received from (HSS).

Sequence 3:
When the wireless LAN gateway (WLG) receives an IP (Internet Protocol) packet transmitted from the communication terminal (UE), the IP packet is a packet from the communication terminal (UE) subject to content filtering processing (IP packet) The packet header source IP address is the IP address of the communication terminal (UE) to be filtered), the IP packet is forcibly (unconditionally) redirected to the operator network by the wireless LAN controller (WLC), Content filtering processing is performed on the operator network. The wireless LAN controller (WLC) may be mounted on the wireless LAN gateway (WLG), or the wireless LAN gateway (WLG) may execute the function of the wireless LAN controller (WLC). . In the second embodiment, the function of the wireless LAN gateway (WLG) may be realized by a program executed by a computer constituting the wireless LAN gateway (WLG).

Also in the second embodiment, as in the first embodiment, the filtering service can be provided by redirecting the communication terminal (UE) to be subjected to the filtering process to the mobile operator's network.

It should be noted that the embodiments and examples can be changed and adjusted within the framework of the entire disclosure (including claims) of the present invention and based on the basic technical concept. Various disclosed elements (including each element of each claim, each element of each embodiment, each element of each drawing, etc.) can be combined or selected within the scope of the claims of the present invention. . That is, the present invention of course includes various variations and modifications that could be made by those skilled in the art according to the entire disclosure including the claims and the technical idea.

10 communication terminal (UE: communication terminal, terminal)
20 Mobile communication access network 21 Gateway (GW)
30 Access networks other than mobile communication access networks (other networks)
40 Internet
50 ANDSF (access network discovery selection function)
60 HSS (Home Subscriber Server)

Claims

A terminal,
An access network other than the mobile communication access network capable of connecting the terminal and the Internet;
A node that controls connection between the terminal and an access network other than the mobile communication access network;
With
When the terminal connects to an access network other than the mobile communication access network, the node
With reference to the subscriber information of the terminal, it is determined whether or not the terminal is set as an execution target of the filtering process, and when it is determined that the terminal corresponds to the execution target of the filtering process, the terminal A communication system comprising: notifying the terminal of identification information of the other access network for connecting to the Internet via a network that can perform a filtering process from another access network other than the communication access network.
As an access network other than the mobile communication access network,
A first radio access network connected to a network of operators performing the filtering process;
A second radio access network directly connected to the Internet;
Different identification information is assigned to at least two access networks including
The node transmits, to the terminal, identification information of a radio access network selected according to whether or not the terminal falls under a filtering process target among the first and second radio access networks. The communication system according to claim 1.
The terminal is connected to the radio access network corresponding to the identification information transmitted from the node;
The terminal traffic is
Drawn from the radio access network to the operator's access network;
The communication system according to claim 2, wherein the same filtering process as that of the mobile communication access network is performed.
The communication system according to any one of claims 1 to 3, wherein the node is an ANDSF (access network discovery selection function).
When the ANDSF receives an access network information request from the terminal, the ANDSF requests subscriber information from a subscriber information database,
Information on whether or not the terminal corresponds to an execution target of filtering processing is acquired, and identification information of a radio access network selected according to whether or not the terminal corresponds to an execution target of filtering processing is transmitted to the terminal. The communication system according to claim 4, wherein the communication is performed.
A terminal,
A node on the access network as an offload destination from the mobile communication access network;
With
When the node receives a packet transmitted from the terminal,
Refer to flag information indicating whether or not the subscriber of the terminal falls under a predetermined filtering processing target,
A communication system that automatically policy-routes an output destination of the packet to a network that performs the filtering process when the packet is from a filtering target terminal.
The node is a gateway device on the offload destination access network;
The communication system according to claim 6, wherein the gateway device connects the offload destination access network to a network or an Internet of an operator who performs the filtering process.
The communication system according to claim 7, wherein the authentication result message of the terminal transmitted from the authentication server to the gateway device includes information indicating whether or not the subscriber is a filtering target.
A node device that controls connection of an access network other than a mobile communication access network capable of connecting a terminal and the Internet,
When the terminal connects to an access network other than the mobile communication access network,
With reference to the subscriber information of the terminal, it is determined whether or not the terminal is set as a filtering process execution target,
When it is determined that the terminal is subject to filtering processing, the terminal accesses the other access for connecting to the Internet via a network that can perform filtering processing from an access network other than the mobile communication access network. A node device for notifying the terminal of network identification information.
As the other access network other than the mobile communication access network,
A first radio access network connected to a network of operators performing the filtering process;
A second wireless access network directly connected to the Internet;
Different identification information is assigned to at least two access networks including
The node device transmits, to the terminal, identification information of a radio access network selected according to whether or not the terminal falls under a filtering process target among the first and second radio access networks. The node device according to claim 9.
The terminal is connected to the other access network corresponding to the identification information transmitted from the node device;
The terminal traffic is
Drawn into the operator's network from the other access network,
The node apparatus according to claim 10, wherein the same filtering process as that of the mobile communication access network is performed.
The node device according to any one of claims 9 to 11, wherein the node device is an ANDSF (access network discovery / selection function).
Upon receiving an access network information request from the terminal, request subscriber information from a subscriber information database, and obtain information on whether or not the terminal falls under a filtering process.
The node apparatus according to claim 12, wherein identification information of a radio access network selected according to whether or not the terminal corresponds to an execution target of filtering processing is transmitted to the terminal.
A node device that controls connection with a node on an access network that is an offload destination from a mobile communication access network that can connect a terminal and the Internet,
When receiving a packet transmitted from the terminal, refer to flag information as to whether the subscriber of the terminal falls under the filtering process implementation target,
A node device that automatically policy-routes the output destination of the packet to a network that performs the filtering process when the packet is from a terminal that is subject to filtering processing.
The node device is a gateway device on the offload destination access network;
15. The node device according to claim 14, wherein the gateway device connects the offload destination access network to an operator network or the Internet that performs the filtering process.
The node device according to claim 15, wherein the terminal authentication result message transmitted from the authentication server to the gateway device includes information indicating whether or not the terminal is a filtering target.
In the node that can connect the terminal and the Internet and control the connection of the radio access network other than the mobile communication access network
When the terminal is connected to an access network other than the mobile communication access network, it is determined whether or not the terminal is set as a filtering target by referring to subscriber information of the terminal. ,
If it is determined that the terminal falls under the filtering processing target, the other access for connecting to the Internet via a network in which the terminal can perform filtering processing from an access network other than the mobile communication access network A communication method of notifying the terminal of network identification information.
As the other access network other than the mobile communication access network,
A first radio access network connected to a network of operators performing the filtering process;
A second wireless access network directly connected to the Internet;
Different identification information is assigned to at least two access networks including
The node transmits, to the terminal, identification information of a radio access network selected according to whether or not the terminal falls under a filtering process target among the first and second radio access networks. The communication method according to claim 17.
The terminal is connected to the other access network corresponding to the identification information transmitted from the node;
The terminal traffic is
Drawn from the radio access network to the operator's network;
The communication method according to claim 17, wherein the same filtering process as that of the mobile communication access network is performed.
The communication method according to any one of claims 17 to 19, wherein the node is an ANDSF (access network discovery selection function).
When the ANDSF receives an access network information request from the terminal, the ANDSF requests subscriber information from a subscriber information database, and acquires information on whether the terminal falls under the filtering target.
The communication method according to claim 20, wherein identification information of an access network selected according to whether or not the terminal is a filtering process target is transmitted to the terminal.
When a node on the access network that is offloaded from the mobile communication access network receives a packet transmitted from the terminal,
Refer to flag information as to whether or not the terminal is subject to filtering processing,
A communication method, in which, when the packet is from a terminal to be subjected to filtering processing, the output destination of the packet is automatically policy-routed to a network that performs filtering processing.
The node is a gateway device on the offload destination access network;
23. The communication method according to claim 22, wherein the gateway device connects the offload destination access network to an operator network or the Internet that performs the filtering process.
The communication method according to claim 23, wherein the authentication result message of the terminal transmitted from the authentication server to the gateway device includes information on whether or not the terminal falls under a filtering process target.
To a computer constituting a gateway for controlling connection of an access network other than a mobile communication access network capable of connecting a terminal and the Internet,
When the terminal is connected to an access network other than the mobile communication access network, it is determined whether or not the terminal is set as a filtering target by referring to subscriber information of the terminal, If it is determined that the terminal falls under the filtering processing target, the other access for connecting to the Internet via a network in which the terminal can perform filtering processing from an access network other than the mobile communication access network A program for executing a process of notifying the terminal of network identification information.
As the other access network other than the mobile communication access network,
A first radio access network connected to a network of operators performing the filtering process;
A second wireless access network directly connected to the Internet;
Different identification information is assigned to at least two access networks including
A process of transmitting, to the terminal, identification information of a radio access network selected according to whether or not the terminal falls under a filtering process target among the first and second radio access networks; The program according to claim 25, which is executed by the program.
From the mobile communication access network to the computer that configures the gateway on the offload destination access network,
When receiving a packet transmitted from a terminal, refer to flag information as to whether or not the terminal falls under a predetermined filtering processing target,
A program that, when the packet is from a filtering target terminal, executes a process for filtering the output destination of the packet and automatically policy routing to a network.
The access network of the offload destination,
A network of operators performing the filtering process, or
28. The program according to claim 27, which causes the computer to execute processing for connecting to the Internet.
A communication terminal that can be connected to the Internet via an access network other than a mobile communication access network,
Upon receiving notification of identification information of the other access network for connecting to the Internet via a network that can perform filtering processing from an access network other than the mobile communication access network, the other network based on the identification information A communication terminal connected to an access network.