JP2001148886A - Access method for data setting in radio base station and the radio base station - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an access method that can solve security problems in a network employing a radio base station without the need for provision of a setting tool to set an authentication server and authentication data. SOLUTION: In the access method to set data in the radio base station, when data relating to a radio terminal such as the authentication data used for deciding whether or not communication of the radio terminal is allowed or various operation data of the radio base station and set at the outside of the radio base station are set or deleted from the radio terminal via a radio block (S106), the radio terminal transmits a password of the radio base station, the radio base station collates the received password (S102), and decides whether the data are set or deleted on the basis of the result (S103).

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a radio communication system which enables a radio terminal to set data such as authentication data of a radio terminal indicating the right to access the radio base station to the radio base station via a radio section. The present invention relates to an access method for data setting in a base station and a radio base station.

[0002]

2. Description of the Related Art In a radio communication system, authentication is usually performed to confirm a right of a radio terminal to access a radio base station. In order to perform authentication, it is necessary to set the access right setting of the wireless terminal in the wireless base station in advance. Conventionally, the access right, that is, the authentication data is almost always held by a server on the network. That is,
When the wireless terminal transmits an access request to the wireless base station, the wireless base station makes an inquiry to a server on the network, and the authentication server on the network performs authentication, thereby permitting connection of the wireless terminal.

However, in a small-scale network or a network in which a single wireless base station connects a plurality of terminals in a home or the like, a form in which the wireless base station inquires whether or not the wireless base station can connect to the network is convenient. There is a problem from a viewpoint. On the other hand, in a wireless system in which a wireless terminal is connected to a wireless base station without making an inquiry to a network, that is, without performing authentication, how to avoid an unauthorized connection, particularly in a connection to a simple network where security is a weak point. Is a big problem.

For example, consider a case where a network is constructed by installing one wireless base station at home and connecting several personal computers and one printer. In this case, without authentication,
It becomes a situation where others can connect freely. In addition, connecting a server for authentication requires connecting an extra personal computer to a wireless base station to construct a wired network. Such problems can be solved if the authentication data can be owned by the wireless base station. However, in order to directly set the authentication data in the wireless base station, a setting tool for writing the authentication data in the memory of the wireless base station is required.

[0005]

As described above, when a simple network is constructed using a small number of wireless base stations at home or the like, it is necessary to perform an authentication process in order to restrict access rights to the wireless base stations. There is. In the past, authentication was performed using an authentication server on a network, so it was essential to connect the authentication server to a wireless base station. Alternatively, it is possible to construct a network by omitting the authentication server by making the wireless base station own the authentication data. In this case, however, it is necessary to write the authentication data into the memory of the wireless base station. A setting tool was required. As described above, in the related art, even when a simple network is constructed, a personal computer for a server is required, and a setting tool for writing authentication data in a memory of a wireless base station is required. Was.

According to the present invention, by setting authentication data in the radio base station, the need for using an authentication server is eliminated, and the authentication data is set without providing a setting tool for setting the authentication data in the radio base station. An object of the present invention is to provide an access method for data setting in a radio base station and a radio base station, which enable setting and solve a security problem in a network using the radio base station.

[0007]

According to an aspect of the present invention, in an access method for setting data in a wireless base station, it is determined whether or not communication of a wireless terminal is permitted. Data related to the wireless terminal, such as authentication data used at the time, or operation data set by the wireless base station and set from outside the wireless base station device, is set or deleted from the wireless terminal via the wireless section It is characterized by: In addition, the invention according to claim 2, when setting or deleting data from the wireless terminal to the wireless base station via the wireless section, the wireless terminal transmits the password possessed by the wireless base station, the password received by the wireless base station Are collated, and whether to execute data setting or deletion processing is determined based on the result.

Further, according to the present invention, when data relating to a wireless terminal to which access is permitted is registered in a wireless base station, only data indicated by the data relating to the registered wireless terminal can be used. It is characterized in that data in a wireless base station can be registered or deleted. The invention according to claim 4 is characterized in that the data relating to the wireless terminal is an identifier of the wireless terminal and data for authentication.

According to a fifth aspect of the present invention, there is provided a password verification means for receiving a password transmitted by a wireless terminal and verifying the received password, and a processing means for setting or deleting data based on the verification result. With, data on the wireless terminal used when determining whether to permit the communication of the wireless terminal, or the data for the operation that the wireless base station has and set from outside the wireless base station device,
It is characterized in that it is set or deleted according to a request received from a wireless terminal via a wireless section.

According to the present invention, authentication data is set in the wireless base station so that authentication can be performed without connecting the authentication server to the wireless base station. Also, the wireless terminal transmits the authentication data to be set to the wireless base station via the wireless section so that there is no need to provide a setting tool for setting the authentication data in the wireless base station. When setting the authentication data, a password is provided in the radio base station to confirm whether or not the radio terminal has the right to set data in the radio base station. Send to the station. According to the present invention, it is possible to limit wireless terminals that can set authentication data in a wireless base station.

That is, according to the present invention, by setting authentication data in the radio base station, it is possible to eliminate the need for using an authentication server. Further, according to the present invention, since the authentication data to be set in the wireless base station is transmitted from the wireless terminal via the wireless section, the security problem can be solved without providing a setting tool for setting the authentication data in the wireless base station. Can be. Furthermore, it is possible to provide a password to the wireless base station, restrict the right to set authentication data for the wireless terminal, and protect the operation of setting and deleting authentication data.

[0012]

FIG. 1 shows a system diagram (method 1) of the present invention. In FIG. 1, the wireless terminal performing registration transmits its own authentication data to the wireless base station and registers. For this reason, as shown in FIG. 1, when the wireless terminals B and C are in the unregistered state, the wireless terminal B registers the authentication data of the wireless terminal B, regardless of the fact that the wireless terminal A is already registered. The wireless terminal C registers the authentication data of the wireless terminal C with the wireless base station D. However, at the time of registration, since a password indicating the right to register with the radio base station D must be transmitted, only the radio terminal that knows the password of the radio base station D performs registration. Can be used for communication. In FIG. 1, the wireless terminal A indicated by hatching is registered, the wireless terminals B and C shown in white are unregistered, and the wireless terminals A and B are registered in the wireless base station D. Is a wireless terminal that can be registered and knows the password.

FIG. 2 shows a processing procedure for realizing the method 1. First, a registration request and a password of the wireless base station D are transmitted from the wireless terminal B or C. The registration request includes:
Also includes the identifier of the wireless terminal B or C. The wireless base station D that has received the registration request (step S101) collates the password (step S102). If the passwords match (in the case of the wireless terminal B in this example), the registration information, that is, the registration is performed in the wireless terminal. A message requesting transmission of authentication data to be transmitted is transmitted (step S103 → S104).

The radio terminal B receives the registration information request and transmits authentication data, which is registration information, to the radio base station D. The authentication data also includes the identifier of the wireless terminal B.
The wireless base station D receiving the authentication data (step S
105), confirms whether the identifier of the wireless terminal matches the one that sent the registration request, and if they match, performs registration processing (step S106), and
Then, a message notifying that the registration processing has been completed is transmitted (step S107).

On the other hand, in the password verification in step S102, if the passwords do not match (wireless terminal C
), The wireless terminal is notified that registration is not possible (step S108).

Next, another embodiment of the present invention will be described with reference to FIGS. FIG. 3 shows a system diagram (method 2) of the present invention. In the method shown in FIG. 3, the authentication data is already registered, and as a result of performing the authentication process using the registered authentication data, only the wireless terminal whose access is permitted by the wireless base station becomes the other wireless terminal. In this method, the authentication data can be registered.

As shown in FIG. 3, the initial system state (a) is a state in which no wireless terminal is registered at all, and only in such a state, registration from any wireless terminal is not performed. Make it possible. However, also in this case, by checking the password of the wireless base station, fraud in the initial state can be prevented. In the example shown in FIG. 3, it is assumed that all of the wireless terminals A to C are wireless terminals that can be registered.

Next, when one wireless terminal A enters the registered state (b), it becomes possible to register authentication data of another wireless terminal such as the wireless terminal B or C from the wireless terminal A. Here, when the authentication data of the wireless terminal B is registered from the wireless terminal A (c), the authentication data of the wireless terminal C can be registered from the wireless terminal A or the wireless terminal B.

FIG. 4 shows a processing procedure for realizing the method 2.
First, similarly to the method 1, the wireless base station D receives a registration request from the wireless terminal A (step S201). At this time,
The password is collated (step S202), and if they do not match, the registration is rejected (step S203 → S21).
1) If they match, it is determined whether there is a wireless terminal registered in the wireless base station D (step S203 →).
S204).

If there is no registered wireless terminal in the wireless base station D, that is, in the initial state, registration is performed by the same registration procedure as in method 1 (step S207).
To S210: corresponding to steps S104 to S107 in FIG. 2).

Next, a case where the wireless terminal A transmits a registration request for the wireless terminal B to the wireless base station D again after the wireless terminal A has been registered in the wireless base station D will be described.
The wireless base station D also checks the password with the wireless terminal A in this case (steps S201 to S20).
3) In this case, since the registered terminal A already exists in the wireless base station D (step S204), the authentication of the wireless terminal A is performed using the registered authentication data (step S205). If the authentication processing is successful (step S20)
5) The authentication data of the wireless terminal B is registered by exchanging data between the wireless base station D and the wireless terminal A (steps S207 to S210). Step S
If the authentication fails in 205, the radio base station D
Notifies the wireless terminal A that registration is not possible (step S211).

In the above embodiment, the authentication data to be registered in the radio base station includes an identifier of the radio terminal,
Authentication data, which is data for collation when performing authentication, is required. On the other hand, the wireless terminal has to store the above authentication data in an internal memory and transmit it to the wireless base station at the time of registration.

In the above configuration, for example, the same password is registered in a predetermined memory of the radio base station and the predetermined memory of the radio terminal in advance, and the password is automatically transmitted from the radio terminal to the authentication data registration. By transmitting the password to the base station, it is possible to verify the password. When the password of the wireless base station can be changed by the operator, the wireless terminal must have a function of inputting the password on the wireless terminal side when registering the authentication data.

In the above description, a case has been described in which a wireless terminal is connected to a wireless base station via a wireless section and an identifier and authentication data of the wireless terminal are set and registered in the wireless base station.
The data set in the wireless base station is not limited to the identifier of the wireless terminal and the authentication data as long as the data can be used to determine whether to permit the communication of the wireless terminal. For example, the data may be data regarding another wireless terminal such as a group code corresponding to a plurality of wireless terminals.

In the above description, a case has been described in which data relating to a radio terminal is "registered" in the radio base station in response to a request from the radio terminal. It is also possible to "delete" the data relating to the data or the data which the wireless base station has and which is set from the outside of the wireless base station device and used for operation. In this case, in the above description, the “registration” of steps S101 and S104 to S108 is replaced with “delete” in FIG. 2, and the “registration” of steps S201 and S207 to S211 is “deleted” in FIG. Should be read as Also, passwords required for registration or deletion may be the same or different.

[0026]

As described above, in the present invention, in order to register authentication data from a wireless terminal connectable to a wireless base station, the authentication data is written to an authentication server or a wireless base station on a network. This eliminates the need for tools and the like, and reduces the cost of developing wireless systems. Further, in the present invention, a password is set as an authority to register authentication data from a wireless terminal, thereby solving a problem in terms of security related to a registration process.

[Brief description of the drawings]

FIG. 1 is a system diagram (method 1) of the present invention.

FIG. 2 is a diagram for explaining a processing procedure for realizing the method 1;

FIG. 3 is a system diagram (method 2) of the present invention.

FIG. 4 is a view for explaining a processing procedure for realizing the method 2;

[Explanation of symbols]

 A, B, C wireless terminal D wireless base station

Continued on the front page (72) Inventor Junichi Iwatani 2-3-1 Otemachi, Chiyoda-ku, Tokyo F-term in Nippon Telegraph and Telephone Corporation (reference) 5J104 AA04 BA04 EA03 5K067 AA42 BB01 BB21 DD17 EE02 EE10 EE32 HH22 HH23 HH32

Claims (5)

[Claims] 1. An access method for setting data in a wireless base station, the data relating to the wireless terminal such as authentication data used when determining whether to permit communication of the wireless terminal, or the wireless base station. An access method for data setting in a wireless base station, comprising: setting or deleting operation data set in the wireless base station apparatus from outside the wireless base station apparatus from a wireless terminal via a wireless section. 2. When data is set or deleted from a wireless terminal to a wireless base station via a wireless section, the wireless terminal transmits a password possessed by the wireless base station, verifies the password received by the wireless base station, and checks the password. 2. The access method for data setting in a wireless base station according to claim 1, wherein it is determined whether to execute data setting or deletion processing based on the result. 3. When data on a wireless terminal to which access is permitted is registered in the wireless base station, registration of data in the wireless base station is performed only from the wireless terminal indicated by the data on the registered wireless terminal. 3. The access method for data setting in a radio base station according to claim 1, wherein the access method is capable of being deleted. 4. The data relating to a wireless terminal is an identifier of the wireless terminal and data for authentication.
4. The access method for data setting in the radio base station according to any one of items 3 to 3. 5. A wireless communication system comprising: a password verification unit that receives a password transmitted by a wireless terminal and verifies the received password; and a processing unit that performs data setting or deletion processing based on the verification result. The data regarding the wireless terminal used in determining whether to permit or not, or the operation data set by the wireless base station and set from outside the wireless base station device, was received from the wireless terminal via the wireless section A radio base station set or deleted according to a request.