JP2010258644A - Communication apparatus, communication method, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a communication apparatus that selects a plurality of communication channels, while preventing a reduction in security. <P>SOLUTION: A data generation part 11 generates data to be transmitted. A data transmission part 12 transmits the data generated by the data generation part 11 to the other end of the line. At that time, the data transmission part 12 transmits a part of the data by way of a first communication network, and transmits remaining data by way of a second communication network different from the first communication network. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a communication device, and more particularly to a communication device capable of communicating with a communication partner via a plurality of communication networks. The present invention also relates to a communication method and program in such a communication apparatus.

  There is a communication device that can communicate with a communication partner using a plurality of communication paths. As an example of such a communication device, a mobile phone having a function of FMC (Fixed Mobile Convergence) that integrates a mobile phone service and a fixed phone service is known (for example, see Patent Document 1). A mobile phone having an FMC function is normally connected to a wireless base station of a mobile network and communicates with a communication partner through the mobile network. The cellular phone is connected to the femtocell within the communicable area of the femtocell connected to the fixed network, and communicates with the communication partner through the fixed network.

Japanese Patent Laid-Open No. 2007-306312

  Here, in the communication network, if data is transmitted and received through the same line, the risk of leakage of communication contents increases due to the interception of the line. In general, in a mobile network, a place where a user communicates is not uniquely determined, so it is considered difficult to intercept a specific user's communication at a specific location in the mobile network. However, when data is transmitted through a fixed network, the data of the same user is transmitted from the same location, so it can be said that the risk of leaking communication content is higher than when data is transmitted through a mobile network. .

  Note that Patent Document 1 merely describes that security parameters are simply set in a terminal while maintaining a security level. Therefore, in Patent Document 1, it is impossible to suppress a decrease in security due to data flowing through a fixed network.

  An object of the present invention is to provide a communication device, a communication method, and a program capable of suppressing a decrease in security in a communication device capable of selecting a plurality of communication paths.

  In order to achieve the above object, the present invention transmits a part of the generated data to a communication partner via a first communication network, and a data generation unit that generates data to be transmitted. And a data transmission unit that transmits the rest via a second communication network different from the first communication network.

  The present invention is a communication in which a part of data is transmitted to a communication partner via a first communication network and the rest is transmitted via a second communication network different from the first communication network. Provide a method.

  According to the present invention, a part of data is transmitted to a data processing apparatus constituting a communication apparatus via a first communication network to a communication partner, and the rest is different from the first communication network. A program for executing a process of transmitting via a communication network is provided.

  The communication device, communication method, and program of the present invention can suppress a decrease in security in a communication device that can select a plurality of communication paths.

The block diagram which shows the communication system containing the communication apparatus of 1st Embodiment of this invention. The block diagram which shows the communication apparatus of 1st Embodiment of this invention. The flowchart which shows the process sequence at the time of data transmission. The block diagram which shows the communication apparatus of 2nd Embodiment of this invention. The flowchart which shows the process sequence at the time of the data transmission in 2nd Embodiment.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 shows a communication system including a communication apparatus according to the first embodiment of the present invention. The communication system includes a mobile network 201 and a fixed network 202. The mobile network 201 is a communication network provided by, for example, a mobile phone company. The fixed network 202 is a communication network provided by, for example, a fixed telephone company. Alternatively, the fixed network 202 may be a communication network such as an IP (Internet Protocol) network provided by an Internet service provider (ISP). The mobile network 201 and the fixed network 202 are independent communication networks. The mobile network 201 and the fixed network 202 are connected to each other via a gateway (not shown).

  The wireless base station 203 performs wireless communication with the mobile terminal (communication device) 100. The radio base station 203 relays the call / communication of the mobile terminal 100 with the mobile network 201. The femtocell 204 is a small radio base station. The femtocell 204 is installed in the cover area of the radio base station 203. The coverage area of the femtocell 204 is narrower than the coverage area of the radio base station 203. The femtocell 204 relays the call / communication of the mobile terminal 100 with the fixed network 202.

  When the mobile terminal 100 can connect to both the radio base station 203 and the femtocell 204, the mobile terminal 100 preferentially connects to the femtocell 204. When the mobile terminal 100 cannot connect to the femtocell 204, the mobile terminal 100 connects to the radio base station 203. When the mobile terminal 100 is connected to the femtocell 204, the mobile terminal 100 performs a call / communication with the communication partner 301 via the fixed network 202. When the mobile terminal 100 is connected to the radio base station 203, the mobile terminal 100 performs a call / communication with the communication partner 301 via the mobile network 201.

  FIG. 2 shows the configuration of the mobile terminal 100. The mobile terminal 100 includes a data processing device 10, a storage device 20, an input device 30, an output device 40, and a wireless device 50. The storage device 20 has a memory 21. The memory 21 stores a program for controlling the mobile terminal device. The data processing device 10 reads out a program from the storage device 20, and controls the input / output device and controls calls and communications according to the read program.

  The input device 30 includes a keyboard 31 and a microphone 32. The keyboard 31 accepts user key input. The microphone 32 is a voice input device. The output device 40 includes a display unit 41 and a receiver 42. The display unit 41 is a display device such as a liquid crystal display unit. The receiver 42 is an audio output device. The wireless device 50 includes a wireless unit 51. The wireless unit 51 performs wireless communication with the wireless base station 203 or the femtocell 204 via the antenna 52.

  The data processing apparatus 10 includes a data generation unit 11, a data transmission unit 12, a connection destination selection unit 13, and a security setting determination unit 14. The connection destination selection unit 13 determines whether or not the wireless unit 51 can connect to the femtocell 204 and selects a connection destination of the wireless device 50 according to the determination result. When the wireless unit 51 can connect to the femtocell 204, the connection destination selection unit 13 selects the fixed network 202 as the connection destination communication network. When the wireless unit 51 cannot connect to the femtocell 204, the connection destination selection unit 13 selects the mobile network 201 as the connection destination communication network.

  The user can perform security settings by operating the keyboard 31 in advance. For example, the data processing apparatus 10 sets the flag in the memory 21 to “1” when the user turns on the security setting, and sets the flag to “0” when the user turns off the security setting. Security settings can be set for each communication content. For example, the user can turn on the security setting for communication of specific image data. The security setting determination unit 14 determines whether or not the user has turned on the security setting during communication.

  The data generation unit 11 generates data to be transmitted to the communication partner 301 (FIG. 1) using the wireless unit 51. The data transmission unit 12 receives the data generated by the data generation unit 11 and transmits the received data to the communication partner 301 using the wireless device 50. At that time, when the connection destination selection unit 13 selects the fixed network 202 and the security setting is on, the data transmission unit 12 passes a part of the data through the mobile network 201 via the wireless base station 203. To the communication partner 301, and the rest is transmitted to the communication partner 301 via the fixed network 202 via the femtocell 204.

  The data generation unit 11 includes an encryption unit 15 and a decryption key generation unit 16. The encryption unit 15 encrypts the data generated by the data generation unit 11 when the connection destination selection unit 13 selects the fixed network 202 and the security setting is on. The decryption key generation unit 16 generates a decryption key used for decrypting the data encrypted by the encryption unit 15. The data generation unit 11 passes the encrypted data and the decryption key to the data transmission unit 12 when the security setting is on. When the security setting is off, the data generation unit 11 passes the data to the data transmission unit 12 as it is.

  When the security setting is on and the connection destination selection unit 13 selects the fixed network 202, the data transmission unit 12 receives the encrypted data (data body), the decryption key, and the like from the data generation unit 11. Receive. The data transmission unit 12 transmits the decryption key of the received data to the communication partner 301 via the mobile network 201. Further, the data transmission unit 12 transmits the encrypted data body of the received data to the communication partner 301 via the fixed network 202.

  The data transmission unit 12 receives unencrypted data from the data generation unit 11 at other times, that is, when the security setting is off or the connection destination selection unit 13 selects the mobile network 201. receive. The data transmission unit 12 transmits the data received from the data generation unit 11 to the communication partner 301 via the mobile network 201 or the fixed network 202 as usual.

  FIG. 3 shows a processing procedure at the time of data transmission. Consider a case where a user operates mobile terminal 100 to connect to a line and transmits data to communication partner 301 (FIG. 1). It is assumed that the portable terminal 100 exists in the cover area of the femtocell 204. That is, it is assumed that the connection destination selection unit 13 has selected the fixed network 202. The security setting determination unit 14 reads a security setting for data to be transmitted during communication (step A1). The security setting determination unit 14 determines whether the security setting is on (step A2).

  The security setting determination unit 14 notifies the determination result to the data generation unit 11 and the data transmission unit 12. When the security setting determination unit 14 determines that the security setting is not on, the data generation unit 11 reads the data from the memory 21 and passes it to the data transmission unit 12. The data transmission unit 12 transmits the data received from the data generation unit 11 to the communication partner 301 by normal data transmission (step A8). That is, the data transmission unit 12 transmits data to the communication partner 301 via the fixed network 202. When the connection destination selection unit 13 selects the mobile network 201, the data transmission unit 12 transmits data to the communication partner 301 via the mobile network 201 in the same manner as in step A8. To do.

  When the security setting determination unit 14 determines that the security setting is on, the data generation unit 11 encrypts the data using the encryption unit 15 and uses the decryption key generation unit 16 to decrypt the data. Is generated (step A3). When the encryption is completed, the connection destination selection unit 13 connects to the radio base station 203 and switches the connection destination communication network from the fixed network 202 to the mobile network 201 (step A4). The data transmission unit 12 transmits the decryption key generated in step A3 to the communication partner 301 via the mobile network 201 (step A5). The decryption key transmitted from the portable terminal 100 is received by the communication partner 301 via the wireless base station 203 and the portable network 201.

  After transmitting the decryption key, the connection destination selection unit 13 connects to the femtocell 204 and switches the connection destination communication network from the mobile network 201 to the fixed network 202 (step A6). The data transmission unit 12 transmits the encrypted data (data body) generated in step A3 to the communication partner 301 via the fixed network 202 (step A7). The encrypted data transmitted from the portable terminal 100 enters the portable network 201 through the femtocell 204 and the fixed network 202 and is received by the communication partner 301. The communication partner 301 decrypts the encrypted data using the received decryption key.

  In addition, when the data processing apparatus 10 connects to the radio base station 203 in step A4 and the connection destination is not found, the data processing apparatus 10 displays a message for determining whether to transmit data through the connectable line. It may be displayed on the unit 41 and wait for the user's judgment. The user views the display screen and operates the keyboard 31 to give an instruction to the data processing apparatus. When the data processing apparatus 10 connects to the femtocell 204 in step A6 and the connection destination is not found, the data processing apparatus 10 similarly displays a message for requesting the user's judgment on the display unit 41 and waits for the user's judgment. Also good.

  In the present embodiment, the mobile terminal 100 transmits a decryption key to the communication partner 301 via the mobile network 201 as a part of data to be transmitted, and transmits the remaining encrypted data body to the fixed network. It transmits to the communication partner 301 via 202. In this embodiment, the transmission data is encrypted, and the decryption key is transmitted via the mobile network 201. Therefore, even if the communication is intercepted by the fixed network 202, the content of the intercepted communication is used. The transmitted data cannot be decrypted. In the present embodiment, since the decryption key and the encryption key are transmitted to the communication partner via different communication networks, the security of the data to be transmitted can be improved.

  In the present embodiment, the user can arbitrarily set security settings. For specific data transmission in which the security setting is turned on, the mobile terminal 100 encrypts the data and sends a decryption key used for decrypting the encrypted data via a communication network different from the data body. Then send. On the other hand, the mobile terminal 100 transmits data for which the security setting is off via the mobile network 201 or the fixed network 202 as usual. Thus, the user can turn on / off the security enhancement function according to the data.

  FIG. 4 shows a portable terminal according to the second embodiment of the present invention. The difference from the first embodiment shown in FIG. 2 is that the data generation unit 11 a includes a data division unit 17. The data dividing unit 17 divides data to be transmitted to the communication partner 301 (FIG. 1) into a plurality of blocks. The data generation unit 11 a passes the divided data to the data transmission unit 12. The data transmission unit 12 transmits a part of the divided blocks to the communication partner 301 via the mobile network 201 and transmits the rest to the communication partner 301 via the fixed network 202.

  FIG. 5 shows a processing procedure at the time of data transmission. Here, a case is considered where the user operates mobile terminal 100 to connect to a line and transmits data to communication partner 301. It is assumed that the portable terminal 100 exists in the cover area of the femtocell 204. That is, it is assumed that the connection destination selection unit 13 has selected the fixed network 202. The security setting determination unit 14 reads the security setting for data to be transmitted during communication (step B1). The security setting determination unit 14 determines whether the security setting is on (step B2).

  The security setting determination unit 14 notifies the determination result to the data generation unit 11a and the data transmission unit 12. When the security setting determination unit 14 determines that the security setting is not on, the data generation unit 11a transmits data to the communication partner 301 by normal data transmission (step B8). That is, the data transmission unit 12 transmits data to the communication partner 301 via the fixed network 202. When the connection destination selection unit 13 selects the mobile network 201, the data transmission unit 12 transmits data to the communication partner 301 via the mobile network 201 in the same manner as in step B8. To do. The steps so far are the same as those in the first embodiment shown in FIG.

  When the security setting determination unit 14 determines that the security setting is on, the data generation unit 11a uses the data dividing unit 17 to divide the data into predetermined size units. The data generation unit 11a sequentially outputs the divided data to the data transmission unit 12. The connection destination selection unit 13 connects to the femtocell 204 and sets the connection destination communication network as the fixed network 202 (step B3). The data transmission unit 12 transmits the divided data to the communication partner 301 via the fixed network 202 (step B4). Data (block) transmitted from the portable terminal 100 enters the portable network 201 through the femtocell 204 and the fixed network 202 and is received by the communication partner 301.

  The connection destination selection unit 13 connects to the radio base station 203 and switches the connection destination communication network from the fixed network 202 to the mobile network 201 (step B5). The data transmission unit 12 transmits the continuation of the divided data to the communication partner 301 via the mobile network 201 (step B6). Data (block) transmitted from the portable terminal 100 is received by the communication partner 301 via the wireless base station 203 and the portable network 201.

  The data transmission unit 12 determines whether all the divided data has been transmitted (step B7). If the data transmission unit 12 determines that all the divided data has not been transmitted, the process returns to step B3. The data transmission unit 12 switches the connection destination communication network between the fixed network 202 and the mobile network 201 for each block, and continues transmission of the remaining blocks.

  In the present embodiment, the data transmission unit 12 transmits the divided data to the communication partner using both the mobile network 201 and the fixed network 202. In this embodiment, since the communication network is switched and used at the time of data transmission, a part of the data passes through the mobile network 201 and the rest passes through the fixed network 202. For this reason, even if the user's communication is intercepted on the fixed network 202, the contents of the data transmitted by the user to the communication partner 301 are not all available. Therefore, as in the first embodiment, it is difficult to intercept data, and the security level can be improved.

  The first embodiment and the second embodiment can be used in combination. That is, the encrypted data may be divided into a plurality of blocks, and the divided data (encrypted data) may be transmitted to the communication partner 301 while switching between the mobile network 201 and the fixed network 202. At this time, the decryption key may not be divided. In the second embodiment, the connection destination communication network is switched between the mobile network 201 and the fixed network 202 for each block, but it is not always necessary to switch for each block. Further, the blocks of the divided data need not have the same size. For example, the block size of data transmitted via the mobile network 201 may be made smaller than the block size of data transmitted via the fixed network 202.

  In the first embodiment, an example in which encryption is not performed when the security setting is off has been described. However, the data generation unit 11 may perform encryption even when the security setting is off. The data generation unit 11 may encrypt the data when the connection destination selection unit 13 selects the mobile network 201. In that case, the decryption key and the encrypted data may be transmitted to the communication partner 301 via either the mobile network 201 or the fixed network 202.

  In each of the above embodiments, the example in which the communication network that can be used by the mobile terminal 100 is the mobile network 201 and the fixed network 202 has been described. However, the communication networks that can be used by the mobile terminal may be different from each other, It is not limited to a mobile network and a fixed network. For example, a combination of a mobile network and another mobile network, or a combination of a fixed network and another fixed network may be used. Even in that case, even if one of the communication networks is intercepted, the contents of the data are not all available, so the effect of improving security compared to the case where all the data is transmitted via a single communication network. There is.

  In FIG. 1, the communication partner 301 is a terminal connected to a radio base station different from the radio base station 203 to which the mobile terminal 100 is connected, but is not limited thereto. For example, it may be a terminal connected to the radio base station 203 to which the mobile terminal 100 is connected. Alternatively, the communication partner 301 may be another terminal connected to the fixed network 202 via the femtocell 204 or a terminal connected to the fixed network 202 by wire. The communication partner may be a terminal connected to another network connected to the mobile network 201 and the fixed network 202 via a gateway or the like.

  The present invention has been described based on the preferred embodiments. However, the communication device, the communication method, and the program of the present invention are not limited to the above embodiments, and various configurations are possible from the configurations of the above embodiments. Those modified and changed as described above are also included in the scope of the present invention.

  Finally, the minimum configuration of the present invention will be described. The communication device of the present invention includes a data generation unit and a data transmission unit as a minimum configuration. The data generation unit generates data to be transmitted. The data transmission unit transmits a part of the data generated by the data generation unit to the communication partner via the first communication network, and transmits the rest to the second communication network different from the first communication network. To send via.

  The minimum configuration of the communication method of the present invention transmits a part of data to a communication partner via a first communication network and the rest via a second communication network different from the first communication network. And transmitting.

  The minimum configuration of the program of the present invention is that a part of data is transmitted to the data processing apparatus constituting the communication apparatus via the first communication network to the communication partner, and the rest is the first communication network. Is configured to execute a process of transmitting via a different second communication network.

  In the present invention, a part is transmitted via the first communication network, and the rest is transmitted via the second communication network. When data transmission is performed via a single communication network, if the communication network is intercepted, the contents of communication may be known to a third party. In the present invention, since all data is not transmitted via a single communication network, a third party who performs data interception does not intercept both the first communication network and the second communication network. must not. Accordingly, security can be improved as compared with the case where transmission is performed via a single communication network.

  In particular, if the first communication network is a mobile network and the second communication network is a fixed network, the fixed network may be less secure than the mobile network. In the present invention, all data is not transmitted via a fixed network, but a part of the data is transmitted via a highly secure mobile network, so that security can be improved.

100: Mobile terminal (communication device)
201: Mobile network (first communication network)
202: Fixed network (second communication network)
203: Radio base station 204: Femtocell 301: Communication partner 10: Data processing device 11: Data generation unit 12: Data transmission unit 13: Connection destination selection unit 14: Security setting determination unit 15: Encryption unit 16: Decryption key Generation unit 17: data division unit 20: storage device 21: memory 30: input device 31: keyboard 32: microphone 40: output device 41: display unit 42: receiver 50: wireless device 51: wireless unit 52: antenna

Claims (18)

A data generator for generating data to be transmitted;
Data that transmits a part of the generated data to a communication partner via a first communication network and transmits the rest via a second communication network different from the first communication network A communication apparatus comprising a transmission unit.   The data generation unit includes an encryption unit that encrypts data, and a decryption key generation unit that generates a decryption key used for decryption of the encrypted data, and the data transmission unit includes: The communication device according to claim 1, wherein a decryption key is transmitted to the communication partner via the first communication network, and the encrypted data is transmitted via the second communication network.   A data dividing unit that divides the data into a plurality of blocks, wherein the transmitting unit transmits a part of the divided blocks to the communication partner via the first communication network; The communication apparatus according to claim 1, wherein the communication apparatus transmits to the communication partner via the second communication network.   The communication device according to claim 3, wherein the transmission unit switches between the first communication network and the second communication network for transmission for each block.   The communication apparatus according to any one of claims 1 to 4, wherein the first communication network is a mobile network, and the second communication network is a fixed network.   A security setting determination unit that determines security settings; and a connection destination selection unit that selects a communication network to be used for data transmission. The data transmission unit has security settings turned on, and the connection destination selection unit 6. When selecting a fixed network, a part of the generated data is transmitted to the communication partner via the mobile network, and the rest is transmitted to the communication partner via the fixed network. The communication device described.   A communication method in which a part of data is transmitted to a communication partner via a first communication network and the rest is transmitted via a second communication network different from the first communication network.   Encrypting data, generating a decryption key used for decrypting the encrypted data, transmitting the decryption key to the communication partner via the first communication network, and The communication method according to claim 7, wherein the transmitted data is transmitted to the communication partner via the second communication network.   Data is divided into a plurality of blocks, a part of the divided blocks is transmitted to the communication partner via the first communication network, and the rest is transmitted to the communication partner via the second communication network. The communication method according to claim 7 or 8, wherein the communication method is transmitted to a communication partner.   The communication method according to claim 9, wherein the divided data is transmitted by switching between the first communication network and the second communication network for each block.   The communication method according to claim 7, wherein the first communication network is a mobile network, and the second communication network is a fixed network.   The method further comprises a step of determining security settings and a step of selecting a communication network used for data transmission. In the step of transmitting data, the security setting is on and the fixed network is used as a communication network used for data transmission. 12. When a network is selected, a part of the generated data is transmitted to the communication partner via the mobile network, and the rest is transmitted to the communication partner via the fixed network. The communication method described in 1. In the data processing device constituting the communication device,
A program for executing a process of transmitting a part of data to a communication partner via a first communication network and transmitting the rest via a second communication network different from the first communication network .   The data processing apparatus further executes a process of encrypting data and a process of generating a decryption key used for decryption of the encrypted data. In the process of transmitting, the decryption key is The program according to claim 13, wherein the program is transmitted to the communication partner via a first communication network, and the encrypted data is transmitted to the communication partner via the second communication network.   The data processing apparatus further executes a process of dividing data into a plurality of blocks, and in the transmitting process, a part of the divided blocks is transferred to the communication partner via the first communication network. The program according to claim 13 or 14, wherein the remainder is transmitted to the communication partner via the second communication network.   The program according to claim 15, wherein in the process of transmitting, the divided data is transmitted by switching between the first communication network and the second communication network for each block.   The program according to any one of claims 13 to 16, wherein the first communication network is a mobile network and the second communication network is a fixed network.   The data processing apparatus further performs a process of determining security settings and a process of selecting a communication network used for data transmission, and in the process of transmitting the data, the security setting is on and data transmission is used. When the fixed network is selected as a communication network to be transmitted, a part of the generated data is transmitted to the communication partner via the mobile network, and the rest is transmitted to the communication partner via the fixed network. The program according to claim 17, which is transmitted.

Images