JP2008210397A - Communication terminal and communication system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To set an access right of target equipment from an external terminal through a network while ensuring security, without requiring a complicated operation for setting the access right, the security and the like for the target equipment, and without using a large-scale complicated system. <P>SOLUTION: A call channel is established between a cellular phone terminal MB of a user YB and a cellular phone terminal MA of a user YA, a router LB and an HDD recorder RB are set to allow an access through the Internet 10 from the cellular phone terminal MA, when an access permission is input from the user YB, and access information for accessing the equipment through the Internet 10 is transmitted to the cellular phone terminal MA. The cellular phone terminal MA accesses the HDD recorder RB or the like through the Internet 10, using the access information transmitted from the cellular phone terminal MB. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a communication terminal and a communication system suitable for controlling various devices in a home network that can be connected to an external network such as the Internet from the outside through the Internet or the like.

  Conventionally, when an external device accesses the various devices in the home network that can be connected to an external network such as the Internet through the Internet or the like, at least the access right setting for the router and the external Settings are required for the device to connect to the home network. Therefore, it is extremely difficult for a device other than a predetermined communication terminal for which access rights have been set in advance to connect to the home network from the outside.

  On the other hand, International Publication No. 01/82086 pamphlet (Patent Document 1) includes an access right setting device that allows an access right to be easily set when a user who is restricted from accessing a network resource issues a request. A system including an administrator terminal is disclosed. According to this system, a user who wants to access resources on a network describes access right setting contents such as resources, time, and access contents in access request information, and is directed to an access right setting device that manages access rights. Send. The access request information is transferred to the resource administrator by the access request information transfer means, and when the administrator confirms the request content and makes an approval decision, the access right setting device automatically assigns the access right. Settings are made.

  Japanese Patent Laid-Open No. 2003-242115 (Patent Document 2) discloses an HTTP authentication method that can easily perform an authentication operation and improve security without troublesome operations on a client. Has been. According to this HTTP authentication method, when a personal computer or VTR is remotely operated by a mobile phone terminal possessed by a user having access authority, first, the server apparatus is dialed. In response to this, the URL management unit creates a disposable password with an expiration date and notifies the SMTP client. The SMTP client creates an e-mail describing the URL in which the password is embedded and transmits it to the mobile phone terminal. The mobile phone terminal accesses the HTTP server by designating the URL, and the HTTP server refers to the password embedded in the URL, performs authentication work, transmits HTML data, or remotely operates the home device.

International Publication No. 01/82086 pamphlet (Figs. 1 and 2) JP2003-242115A (FIGS. 1, 2, and 5)

  By the way, in a real life scene, for example, when a user makes an inquiry to a customer center regarding the setting of a personal computer such as at home, or when a parent who is not good at operating and setting a recording device, for example, calls a son etc. There are often cases where a person who has the ability to set the target device wants to directly operate and set the target device from the outside via a network, such as when asking for a method.

  However, as described above, in order for an external terminal to set the target device via the network, the external terminal must be given an access right to the target device in advance, or the target can be The user of the device must set the access right to the external terminal. However, it is not desirable for security to give access rights to external terminals in advance, and operations that allow users unfamiliar with device settings and operations to set access rights to external terminals on the spot. It is also difficult to do.

  According to the above-mentioned International Publication No. 01/82086 pamphlet and Japanese Patent Application Laid-Open No. 2003-242115, it is possible to set an access right to an external terminal, but the external terminal that has requested the access right. The authentication process and its configuration are complicated and large-scale, which is very expensive.

  The present invention has been proposed in view of such circumstances, and does not require a complicated operation for access right setting and security setting of the target device, and without using a large-scale and complicated system. An object of the present invention is to provide a communication terminal and a communication system capable of setting access rights of a target device to an external terminal via a network while ensuring security.

  The communication terminal of the present invention has at least a first communication unit used for communication including a voice call, an operation input unit for obtaining an instruction input from a user, and a function capable of receiving at least access via an external network. When a voice call is established between the second communication unit for performing communication with the predetermined target device provided, and another communication terminal, and an access permission instruction is input from the user, A control unit configured to permit access to the target device from another communication terminal via an external network, and to transmit access information for accessing the target device via the external network to the other communication terminal; By solving, the above-described problems are solved.

  In the communication terminal of the present invention, a voice call is established between a communication unit used for communication including at least a voice call, an operation input unit for obtaining an instruction input from a user, and another communication terminal. The above-described problem is solved by having a control unit that performs control to access a predetermined target device via an external network using predetermined access information transmitted from another communication terminal after that.

  Further, the communication system of the present invention is configured to access from the second communication terminal via the external network when a voice call is established with the second communication terminal and an access permission instruction is input from the user. A first communication terminal configured to permit a predetermined target device to transmit the access information for accessing the target device via an external network, and the first communication terminal And a second communication terminal that accesses the target device via an external network using the access information transmitted from the first communication terminal after a voice call is established with Solve the problem.

  That is, according to the present invention, target devices that mutually identify each other by establishing a voice call between communication terminals, and that the own terminal has access rights only to the specified communication terminal of the other party Is set to permit access via the external network, and information for accessing the target device via the external network is given to the communication terminal of the other party.

  In the present invention, when a voice call is established with each other and an access permission instruction is input from the user, the target device is configured to permit access via the external network from the other communication terminal. By transmitting access information for accessing to the other party's communication terminal, it is not necessary for the user to perform complicated operations such as access right setting and security setting of the target device. Without using a complicated system, it is possible to set the access right of the target device to the communication terminal of the other party via the network while ensuring security.

  Hereinafter, an embodiment of a communication terminal and a communication system of the present invention will be described with reference to the drawings.

  In the present embodiment, a mobile phone terminal is cited as an example of the communication terminal of the present invention, and a home network system is cited as an example of the communication system. Of course, the contents described here are merely examples, and the present invention Needless to say, is not limited to this example.

[Outline of system configuration and functions of each device]
FIG. 1 shows a schematic configuration of a communication system according to an embodiment of the present invention.

  In FIG. 1, it is assumed that a home network HNA is constructed at the home of the user YA, and similarly, a home network HNB is also constructed at the home of the user YB. The home network HNA on the user YA side includes at least a router LA and an access point APA for a wireless LAN (Local Area Network). Similarly, the home network HNB on the user YB side includes at least a router LB, an access point APB, and an HDD recorder RB that is an example of another device in the home network HNB.

  The mobile phone terminal MA of the user YA has at least a wireless LAN function and an IP (Internet Protocol) telephone function in addition to the functions of a general mobile phone terminal.

  Similarly, the mobile phone terminal MB of the user YB has a wireless LAN function and an IP phone function in addition to the functions of a general mobile phone terminal.

  The access point APA of the home network HNA is a wireless LAN access point and is connected to the router LA. In the case of the present embodiment, the access point APA is capable of wireless LAN connection with the mobile phone terminal MA of the user YA.

  Similarly, the access point APB of the home network HNB is a wireless LAN access point and is connected to the router LB. In the case of the present embodiment, the access point APB is capable of wireless LAN connection with the mobile phone terminal MB of the user YB.

  The HDD recorder RB of the home network HNB is connected to a router LB in addition to a television broadcast receiving tuner and HDD (hard disk drive) provided in a general HDD recorder and external input / output terminals for video and audio signals. It also has a connection terminal. In addition, the HDD recorder RB is set with access rights for the user YB's mobile phone terminal MB to perform various settings and operations of the own device (HDD recorder RB) via the network. In other words, the HDD recorder RB of the home network HNB is basically set with an access right only for the IP address or the like of the mobile phone terminal MB existing in the same segment.

  The router LA of the home network HNA has a function of connecting devices in the home network HNA (that is, in the home network of the same segment) and an external network such as the Internet 10 through the Internet service provider 12A to which the user YA has subscribed. It has a function to connect to as needed. Further, the access right for the mobile phone terminal MA of the user YA to perform various settings of the own device (router LA) via the network is set in the router LA. That is, the access right is basically set only for the IP address or the like of the mobile phone terminal MA existing in the same segment in the router LA of the home network HNA.

  Similarly, the router LB of the home network HNB has a function of connecting each device in the home network HNB (within the home network of the same segment) and an external device such as the Internet 10 through the Internet service provider 12B to which the user YB is subscribed. And a function to connect to the network as needed. In addition, an access right for the mobile phone terminal MB of the user YB to perform various settings of the own device (router LB) via the network is set in the router LB. That is, in the router LB of the home network HNB, the access right is basically set only for the IP address or the like of the mobile phone terminal MB existing in the same segment.

  As described above, according to the home network HNA of the present embodiment, the access point APA and the router LA are connected, the router LA can be connected to the Internet 10, and the mobile phone terminal MA is connected to the router LA through the access point APA. Therefore, the mobile phone terminal MA can connect to the Internet service provider 12A through the access point APA and the router LA, thereby making a call via the IP telephone network 11 in the Internet 10, for example. And can send and receive data.

  Similarly, according to the home network HNB of this embodiment, the access point APB and the router LB are connected, the router LB can be connected to the Internet 10, and the mobile phone terminal MB is connected to the router LB through the access point APB. Therefore, the cellular phone terminal MB can be connected to the Internet service provider 12B through the access point APB and the router LB, thereby making a call or data transmission / reception via the IP telephone network 11 in the Internet 10 It can be performed.

  Further, according to the present embodiment, since only the access right to the mobile phone terminal MA is set in each device in the home network HNA, the mobile phone terminal MA is connected to each device in the home network HNA. Settings and operations can be performed.

  Similarly, since only the access right to the mobile phone terminal MB is set in each device in the home network HNB, the mobile phone terminal MB performs setting and operation of each device in the home network HNB. Can do.

[Access permission settings via external network]
Hereinafter, in the communication system of the embodiment of the present invention, for example, various setting processes when the user YA's mobile phone terminal MA sets and operates the HDD recorder RB in the home network HNB on the user YB side via a network such as the Internet 10. Will be described.

  In the communication system according to the present embodiment, the router LB on the home network HNB side allows / disallows network access from a terminal other than the mobile phone terminal MB of the user YB (in this example, the mobile phone terminal MA of the user YA). Settings relating to permission are made possible, and a function of sending information on own device capability (hereinafter referred to as device capability information) such as whether or not access setting is possible via a network is provided. Yes.

  In the communication system of the present embodiment, the HDD recorder RB of the home network HNB permits / permits network access from a terminal other than the mobile phone terminal MB of the user YB (in this example, the mobile phone terminal MA of the user YA). It is possible to make settings related to non-permission, whether or not access setting is possible via the network, and various setting operations such as receiving channel setting and recording reservation setting are possible via the network, etc. When a function for sending information on own device capability (device capability information) and network access permission is given to the other mobile phone terminal MA, the other mobile phone terminal MA is the own device (HDD recorder RB). Output temporary key (that is, authentication key) information that allows you to temporarily operate and set And a function.

  In the communication system of the present embodiment, the voice communication path is established between the mobile phone terminal MB of the user YB on the home network HNB side and another terminal (in this example, the mobile phone terminal MA of the user YA). When the user YB performs a predetermined operation for allowing the other mobile phone terminal MA to access the device in the home network HNB when the other mobile phone terminal MA is in the home network HNB in the same segment, And a function for presenting the list of target devices accessible to the other mobile phone terminal MA via the external network to the user YB, and a target device selected by the user YB from the list of target devices (in this example, an HDD recorder). RB) and router LB are set to values that can be accessed by the other mobile phone terminals MA via the external network. A function to be controlled, and information for allowing the other mobile phone terminal MA to temporarily access the target device (HDD recorder RB in this example) via the network (hereinafter referred to as temporary access information). And a function of transmitting to the other mobile phone terminal MA. The temporary access information includes the end point (IP address, port number) of the target device (HDD recorder RB) and the temporary key information.

  On the other hand, in the communication system of the present embodiment, the mobile phone terminal MA of the user YA uses the temporary access information sent from the terminal MB when a voice communication path is established with the mobile phone terminal MB. When received, the IP address, port number, and temporary key information included in the temporary access information are used to access the home network HNB of the user YB via the Internet 10. Thereby, the mobile phone terminal MA can set and operate the HDD recorder RB, which is the target device in the home network HNB.

  In the present embodiment, the functions of the mobile phone terminal MA and the mobile phone terminal MB have been described separately. Of course, the mobile phone terminal MA may have the same function as the mobile phone terminal MB, or the mobile phone terminal The MB may have the same function as the mobile phone terminal MA.

[Flow when accessing via external network]
Hereinafter, in the communication system of the embodiment of the present invention, for example, the flow until the user YA sets the recording setting of the HDD recorder RB of the home network HNB on the user YB side using the mobile phone terminal MA is shown in FIG. This will be described using the sequence diagram, the screen transition example of the mobile phone terminal MB shown in FIG. 3, and the screen transition example of the mobile phone terminal MA shown in FIG.

  In FIG. 2, first, in step F1, for example, a call is made from the mobile phone terminal MA to the mobile phone terminal MB via the IP telephone network 11, and then in step F2, the mobile phone terminal MB is sent to the mobile phone terminal MA. When the incoming call is accepted, a voice communication path by the IP telephone network 11 is established between the mobile phone terminal MA and the mobile phone terminal MB at step F3, and further, if necessary, the mobile phone at step F4. Assume that an encrypted communication path is established between the terminal MA and the mobile phone terminal MB. When the communication path is established in the above step F3 (or step F4), the display on the mobile phone terminal MB is connected to the partner terminal (terminal MA) as shown on the screen V11 in FIG. 3, for example. Is displayed on the display of the mobile phone terminal MA, for example, as shown on the screen V1 in FIG. 4, for example, to communicate with the partner terminal (terminal MB). A display indicating that the road has been established is displayed. The encrypted communication path is not indispensable, but security of communication performed between the mobile phone terminal MA and the mobile phone terminal MB, for example, when the above-described temporary key (authentication key) communication is performed. When it is necessary to maintain performance, it is desirable to establish an encrypted communication path as in step F4.

  Next, when a predetermined button operation (for example, an operation such as pressing a “function key”) is performed by the user YB as indicated by E11 in FIG. 3, the mobile phone terminal MB is displayed, for example, on a screen V12 in FIG. As described above, the function list menu of the terminal is displayed on the display. When the home network (HN) device cooperation menu is selected from the screen V12 by the user YB (E12 in FIG. 3) through the cursor operation or the like, for example, the mobile phone terminal MB is in the home network HNB. The home network device cooperation function for linking the devices is activated, and in step F5 in FIG. 2, the home network HNB is connected through the access point APB, and each device connected to the home network HNB is searched (devices). Search) starts. At this time, the mobile phone terminal MB displays on the display that the search is being performed, for example, as shown in the screen V13 in FIG.

  When the device search is performed by the mobile phone terminal MB, each device (in this example, the router LB and the HDD recorder RB) in the home network HNB exists in the home network HNB as Step F6 in FIG. And the above-mentioned device capability information in each device is returned to the mobile phone terminal MB. When the mobile phone terminal MB receives a response from each device (E13 in FIG. 2), the mobile phone terminal MB obtains a target device that can be accessed by the mobile phone terminal MA via the external network from the respective devices. For example, a list of devices is displayed on a display as shown in a screen V14 in FIG.

  Next, when a desired target device (HDD recorder RB in this example) is selected by the user YB from the screen V14 through a cursor operation or the like (E14 in FIG. 3), the mobile phone terminal MB is displayed in FIG. In step F7, the setting value of the router LB is changed so that the HDD recorder RB can be accessed via the external network. In step F8 of FIG. 2, the HDD recorder RB is also accessed via the external network. Change the setting value as possible. Further, the cellular phone terminal MB requests temporary key information from the HDD recorder RB as step F9 in FIG. When changing the setting value, the mobile phone terminal MB displays on the display that the setting is being changed, for example, as shown in a screen V15 in FIG.

  Next, when the mobile phone terminal MB acquires the temporary key information from the HDD recorder RB in step F11 in FIG. 2, the mobile phone terminal MA temporarily sends it to the HDD recorder RB via the network as step F11 in FIG. The temporary access information for accessing the mobile phone is transmitted to the mobile phone terminal MA via the IP telephone network 11.

  The mobile phone terminal MA that has received the temporary access information to the HDD recorder RB (E1 in FIG. 4) passes through the Internet or the like to a device in a home network (in this example, the home network HNB) in a segment different from the home network HNA. For example, a display as shown on a screen V2 in FIG. 3 for asking the user YA whether or not to connect is performed. Then, when “connect” is selected by the user YA (E2 in FIG. 4) from the screen V2 in FIG. 3 through, for example, a cursor operation or the like, the mobile phone terminal MA first performs step F12 in FIG. The communication path with the HDD recorder RB is established using the temporary access information received at the same time. When communicating with the HDD recorder RB, the mobile phone terminal MA displays information indicating that the connection is being made, for example, as shown on a screen V3 in FIG.

  Next, in step F13 in FIG. 2, the mobile phone terminal MA receives device information indicating the current device state (for example, information indicating that a command related to “recording setting” can be received) from the HDD recorder RB. Further, based on the received device information, the mobile phone terminal MA displays on the display a menu for a user interface when setting or operating the HDD recorder RB as shown in a screen V4 in FIG. . When, for example, the recording setting menu is selected by the user YA (E4 in FIG. 4) from the screen V4 in FIG. 4 through a cursor operation or the like, the mobile phone terminal MA displays, for example, the screen V5 in FIG. As shown, a setting screen for recording a television program, for example, is displayed on the HDD recorder RB.

  Next, when the user YA uses the recording setting screen to select a recorded program (E5 in FIG. 4), the mobile phone terminal MA performs the user YA as shown in the screen V6 in FIG. The selected recording program selection status is displayed on the display. Then, when the setting content of the previous program recording is determined by the user YA pressing the determination key or the like, for example, the mobile phone terminal MA selects the program recording selected by the user YA as step F14 in FIG. Is sent to the HDD recorder RB. As a result, the HDD recorder RB is set for recording.

  Thereafter, for example, the user YA performs an operation such as pressing the end button on the mobile phone terminal MA, and the voice call between the mobile phone terminal MA and the mobile phone terminal MB is terminated. When the communication path is disconnected, the cellular phone terminal MB cancels the settings for the router LB and the HDD recorder RB performed in steps F7 and F8 in steps F16 and F17. As a result, the settings of the router LB and the HDD recorder RB of the home network HNB are set to the external access disapproval setting (return to the secure state), and thus the mobile phone terminal MA cannot access the home network HNB.

  In the above description, an example has been given in which the mobile phone terminal MB returns the home network HNB to the inaccessible setting state in response to the end of the talk. For example, the time count starts when the access permission setting is made via the network. When the time count value reaches a predetermined time-up count value, the home network HNB may be returned to the inaccessible setting state.

[Internal configuration of mobile phone terminal]
FIG. 5 shows a schematic internal circuit configuration of the mobile phone terminal of this embodiment provided with the functions of the mobile phone terminals MA and MB described above.

  In FIG. 5, a data line is a transmission line for transmitting various data such as voice data, e-mail data, and image data. The control line is a transmission line for transmitting various control information such as control data from the control unit 30 configured by a CPU (Central Processing Unit).

  The antenna 32 is an antenna for transmitting and receiving signal radio waves to and from a base station of the mobile phone network, and is connected to the communication circuit 31. The communication circuit 31 performs frequency conversion, modulation, demodulation, and the like of transmission / reception signals.

  The wireless LAN control unit 44 and the wireless LAN antenna 45 are devices for the mobile phone terminal of this embodiment to perform wireless LAN communication. The mobile phone terminal of the present embodiment connects to each device in the home network by accessing the access point in the home network described above, for example, through the wireless LAN control unit 44 and the wireless LAN antenna 45, It can be connected to the Internet 10 or the like as necessary. In the case of the mobile phone terminal of this embodiment, as described above, connection to the IP telephone network 11 is possible by connecting to the Internet 10 via the wireless LAN.

  Call voice data received by the antenna 32 and the communication circuit 31 and call voice data obtained from the IP telephone network via the wireless LAN are sent to the voice processing unit 42, and other received data are controlled. After being sent to the unit 30 and appropriately processed, it is sent from the control unit 30 to each unit as necessary. The received data other than the call voice can include, for example, e-mail data, moving image and still image data, music data, HTML (Hyper Text Markup Language) data, and program code data.

  When the call voice data is supplied, the voice processing unit 42 decodes the call voice data, converts the decoded call voice data into an analog voice signal, and converts the analog voice signal into the speaker 40 or not shown. Send to earphone jack.

  The speaker 40 is built in the terminal body, amplifies the supplied analog audio signal by an internal amplifier, converts the audio signal into audible audio, and outputs the audio signal to the outside. Thereby, the call voice is output from the speaker 40.

  The microphone 41 is built in the terminal body, converts input sound into an analog sound signal, amplifies it with an internal amplifier, and sends the analog sound signal to the sound processing unit 42.

  When a call voice signal is supplied from the microphone 41, the voice processing unit 42 converts the call voice signal into digital voice data and then encodes the encoded voice data, and further converts the encoded call voice data into the communication circuit 31 or the wireless LAN. The data is sent to the control unit 44. As a result, it is possible to transmit an audio signal using the cellular phone network and transmit an audio signal using the IP telephone network 11.

  The display unit 33 includes, for example, a liquid crystal display and a display driving circuit for driving the liquid crystal display. The display driving circuit drives the liquid crystal display based on the display signal supplied from the control unit 30 and the image signal supplied from the image processing unit 43. Thereby, an image, a character, etc. are displayed on a display.

  The operation unit 34 includes operation elements such as a numeric keypad (keyboard), a power button, an utterance / end call button, and a cross key, and an operation signal generator that generates an operation signal corresponding to the operation of these operation elements. The user operates the operation unit 34 to make incoming / outgoing calls and e-mail texts for calls, send / receive e-mails, connect to the Internet, start the device cooperation as described above, Instruction operations such as device selection, device operation via the network, and device settings are performed.

  The image processing unit 43 decompresses and decodes the compressed and encoded image data read from the built-in memory under the control of the control unit 30, the image data acquired via the Internet, etc. The decoded image data is sent to the display unit 33 via the data line. The image processing unit 43 performs compression encoding of still image and moving image data captured by a camera unit (not shown), and stores the compression encoded image data under the control of the control unit 30. Send to memory for storage.

  The memory unit 35 includes a ROM (Read Only Memory) and a RAM (Random Access Memory). The ROM is an OS (Operating System), control program code for the control unit 30 to control each unit, various initial setting values, font data, dictionary data, various sound data such as ringtones and key operation sounds, and the present embodiment. Program code for controlling access to the home network, etc., setting and control of each device in the home network, operation and setting of each device via the network, display screen display control according to them, etc. Further, program codes for various applications installed in the terminal, device identification information (ID) of the terminal, and the like are stored. This ROM includes a rewritable ROM such as NAND-type flash memory (NAND-type flash memory) or EEPROM (Electrically Erasable Programmable Read-Only Memory), e-mail data, telephone book and e-mail address book data, Various data related to communication such as schedule book data, communication history, communication charges, dictionary data, still image and video data, sound data for key operation sound, notification sound, and other various user setting values It is also possible to save. The RAM stores data as needed as a work area when the control unit 30 performs various data processing.

  The control unit 30 is composed of a CPU, and based on the OS and various programs stored in the memory unit 35, various controls of the terminal, access control to the above-described home network and the like according to the present embodiment, and in the home network Each device is set and controlled, and each device is operated and set via the network, and the display screen display control is performed accordingly.

  In addition, although not shown in FIG. 5, the terminal of this embodiment includes a digital camera unit, an external memory interface, an external cable connector, an infrared communication function, an electronic wallet function, a battery, a power control function, an LED ( It is also provided about each component with which a general cellular phone terminal, such as a light emitting diode part and a vibrator, is provided.

[Summary]
As described above, according to the mobile phone terminal and the communication system of the embodiment of the present invention, when a voice communication path is established between the mobile phone terminal MA and the mobile phone terminal MB, The user YA and the user YB are considered to have a reliable relationship, and the mobile phone terminal MA and the mobile phone terminal MB used by the user YA and the user YB are assumed to be reliable. For example, the home network HNB of the user YB By temporarily giving the same access right to the mobile phone terminal MA of the user YA to the mobile phone terminal MB of the user YA, the user YB can connect each device in the home network HNB. There is no need to perform complicated setting operations for enabling access via an external network, and the user YA uses the mobile phone terminal MA. Setting and operation of each device within the home network HNB users YB is possible. That is, according to the embodiment of the present invention, access is permitted / denied or stopped via the network depending on whether or not the voice communication path is established, and thus the user needs to perform a special operation to perform access via the network. There is no. In addition, according to the present embodiment, since the voice communication path is established and access is permitted by the user, access via the network is possible. On the other hand, when the voice communication path is disconnected, access is impossible. External access unintended by the user when not in the middle can be prevented, and a complicated security setting for a router or the like is not required as in the past.

  Therefore, according to the present embodiment, for example, parents who are unable to make recording settings for the HDD recorder, etc., place a phone call on a mobile phone terminal such as a child living in a remote place and perform a simple operation, so that the child It is possible to give the mobile phone terminal access rights to the HDD recorder at the home of a parent or the like and have the child perform recording settings. Of course, not only the HDD recorder, but the same can be done when setting personal computers and printers. Further, according to the present embodiment, for example, a user who has trouble in a personal computer such as at home calls a customer center, for example, and from the terminal of the person in charge of the customer center to the personal computer with the user's agreement Support such as giving access rights and setting the personal computer and solving troubles from the customer center terminal can be realized safely and easily.

  The communication system of the present embodiment can be realized by a mobile phone terminal and a home network, and does not require a conventional large-scale and complicated system.

  The above description of the embodiment is an example of the present invention. For this reason, the present invention is not limited to the above-described embodiment, and it is needless to say that various modifications can be made according to the design or the like as long as the technical idea according to the present invention is not deviated.

  The communication terminal according to the present invention is not limited to the above-described mobile phone terminal, and can be applied to various mobile terminals such as a PDA (Personal Digital Assistants), a car navigation device, and a portable AV device having a communication function. . Moreover, the network concerning the communication system of this invention is not limited to a home network system, It can apply also to other various networks.

1 is a conceptual diagram of a communication system according to an embodiment of the present invention. For example, it is a sequence diagram showing a flow until the user YA sets the recording setting of the HDD recorder RB of the home network HNB on the user YB side using the mobile phone terminal MA. It is a figure which shows the example of a transition of the screen displayed on the display of mobile telephone terminal MB, when the process shown in the sequence diagram of FIG. 2 is performed. It is a figure which shows the example of a transition of the screen displayed on the display of mobile telephone terminal MA, when the process shown in the sequence diagram of FIG. 2 is performed. It is a block diagram which shows the schematic internal structure of the mobile telephone terminal of embodiment of this invention.

Explanation of symbols

  YA, YB user, MA, MB mobile phone terminal, HNA, YNB home network, LA, LB router, APA, APB access point, RB HDD recorder, 10 Internet, 11 IP telephone network, 12A, 12B Internet service provider, 30 control Unit, 31 communication circuit, 32 communication antenna, 33 display unit, 34 operation unit, 35 memory unit, 40 speaker, 41 microphone, 42 audio processing unit, 43 image processing unit, 44 wireless LAN control unit, 45 for wireless LAN antenna

Claims (14)

A first communication unit used for communication including at least a voice call;
An operation input unit for acquiring an instruction input from the user;
A second communication unit for communicating with at least a predetermined target device having a function capable of receiving access via an external network;
When a voice call is established with another communication terminal via the first communication unit, and an access permission instruction is input from the user via the operation input unit, the target device is Perform setting for permitting access from the other communication terminal via the external network, and access information for accessing the target device via the external network via the first communication unit. A control unit to transmit to,
A communication terminal comprising: The second communication unit communicates with the target device connected to a predetermined local area network,
The said control part transmits the said access information about the said target apparatus in the said predetermined local area network to said other communication terminal via said 1st communication part. Communication terminal. Having a display with a screen,
The control unit searches a plurality of devices connected to the predetermined local area network through the second communication unit, displays a list of each device obtained by the search on the screen of the display unit, For the target device selected by the user from the list of the plurality of devices displayed on the screen via the operation input unit, access permission setting via the external network is performed, and the access to the target device is performed. 3. The communication terminal according to claim 2, wherein the information is transmitted to the other communication terminal via the first communication unit.   The control unit requests authentication key information for temporarily permitting access via the external network to the target device when setting to permit access via the external network to the target device. The communication terminal according to claim 1, wherein authentication key information acquired from the target device is included in the access information.   The communication terminal according to claim 1, wherein the first communication unit has a function of performing encrypted communication. A communication unit used for communication including at least a voice call;
An operation input unit for acquiring an instruction input from the user;
Access to a predetermined target device via an external network using predetermined access information transmitted from the other communication terminal after a voice call is established with the other communication terminal via the communication unit A control unit for performing control, and
A communication terminal comprising: Having a display with a screen,
The control unit acquires device information representing a function operable via the communication path from the target device after establishing a communication path with the target device via the external network, and acquires the acquired device. Based on the information, an operation screen for the user to operate the target device is displayed on the display unit, and the operation of the target device is performed according to an operation instruction input from the user via the operation input unit. The communication terminal according to claim 6, wherein control is performed.   The communication terminal according to claim 6, wherein the communication unit has a function of performing encrypted communication. When a voice call is established with the second communication terminal and an access permission instruction is input from the user, the predetermined target device is accessed via the external network from the second communication terminal. A first communication terminal configured to permit, and to transmit access information for accessing the target device via an external network to the second communication terminal;
Second communication for accessing the target device via an external network using the access information transmitted from the first communication terminal after a voice call is established with the first communication terminal A terminal,
A communication system comprising:   The first communication terminal communicates with the target device connected to a predetermined local area network, and transmits the access information about the target device in the predetermined local area network to the second communication terminal. The communication system according to claim 9.   The first communication terminal searches for a plurality of devices connected to the predetermined local area network, displays a list of each device obtained by the search, and displays a list of the plurality of devices displayed on the screen. The access permission setting via the external network is performed for the target device selected by the user from the network, and the access information about the target device is transmitted to the second communication terminal. The communication system according to 10.   When the first communication terminal is configured to permit access via the external network to the target device, the first communication terminal receives authentication key information for temporarily permitting access via the external network. The communication system according to claim 9, wherein the access information includes authentication key information requested from the device and acquired from the target device.   The second communication terminal acquires device information representing a function operable through the communication path from the target device after establishing a communication path with the target device via the external network, and An operation screen for a user to operate the target device is displayed based on the acquired device information, and operation control of the target device is performed in response to an operation instruction input from the user. The communication system according to claim 9.   The communication system according to claim 9, wherein the first communication terminal and the second communication terminal have a function of performing encrypted communication.

Images