JP2012039584A - Wireless lan connection authentication proxy device, wireless lan terminal device, wireless lan system, and proxy method for wireless lan connection authentication - Google Patents

Abstract

PROBLEM TO BE SOLVED: To perform connection processing to a wireless LAN access point device and authentication processing for using the same in advance before a wireless LAN terminal device is brought within a coverage covered by the wireless access point device.SOLUTION: A wireless LAN connection authentication proxy device 10, using wireless LAN connection information received from a multi-mode terminal 30, establishes a connection to a wireless LAN access point device 50, performs authentication processing for using the wireless LAN access point device 50 by using wireless LAN connection information, and sends wireless LAN connection status information and wireless LAN authentication status information to the multi-mode terminal 30. The multi-mode terminal 30, using the wireless LAN connection status information received from the wireless LAN connection authentication proxy device 10, establishes a connection to the wireless LAN access point device 50 and uses the wireless LAN access point device 50 by using the wireless LAN authentication status information.

Description

  The present invention relates to a wireless LAN connection authentication proxy device, a wireless LAN terminal device, a wireless LAN system, and a wireless LAN connection authentication proxy method.

  In recent years, public wireless LAN access point devices (APs) have been installed and used at stations, restaurants, and the like. In addition, multi-mode terminals that support a plurality of wireless systems are beginning to be provided. For example, according to a multi-mode terminal compatible with a cellular mobile communication network and a wireless LAN, the cellular mobile communication network and the wireless LAN can be switched and used according to the wireless environment. The wireless LAN has a narrow coverage and is a hot spot. Therefore, it is considered that the wireless LAN has a high radio wave utilization efficiency and is suitable for broadband applications such as moving image distribution. On the other hand, public wireless LAN generally requires connection processing and authentication processing before communication. These processes may take time from several tens of seconds to minutes, and may be a factor that reduces user convenience. If open access is selected as the authentication process, the time required for the authentication process is shortened, but secure communication cannot be performed, and users cannot be limited to registrants. Non-Patent Document 1 describes “IEEE802.1X”, which is a technology for performing secure communication by authenticating a wireless LAN terminal and a wireless LAN access point device using a certificate or the like.

Patent Document 1 discloses a technique in which when a terminal device notifies a server of one area of a wireless LAN, the server transmits data necessary for communication connection in the area and sets the data in the terminal device. Yes.
Patent Document 2 discloses a technology in which a communication terminal detects the strength of radio waves received through a plurality of networks having different communication methods, predicts a destination network, and controls communication connection in the predicted destination network. Has been.

JP 2004-350054 A JP 2006-270576 A

RFC3748, IETF (Internet Engineering Task Force)

  However, in the above-described conventional technology, the wireless LAN terminal device performs the connection process to the wireless LAN access point device and uses the wireless LAN access point device until the wireless LAN terminal device enters the coverage of the wireless LAN access point device. Authentication processing cannot be performed. For this reason, even if the wireless LAN terminal device enters the coverage of the wireless LAN access point device, the wireless LAN terminal device cannot immediately start data communication via the wireless LAN access point device.

  The present invention has been made in consideration of such circumstances. Before the wireless LAN terminal device moves into the coverage of the wireless LAN access point device, the connection processing to the wireless LAN access point device and It is an object of the present invention to provide a wireless LAN connection authentication proxy device, a wireless LAN terminal device, a wireless LAN system, and a wireless LAN connection authentication proxy method that can perform authentication processing when using the wireless LAN access point device.

  In order to solve the above-described problems, a wireless LAN connection authentication proxy device according to the present invention includes a communication network interface unit that communicates with a wireless LAN terminal via a communication network, and wireless LAN connection information received from the wireless LAN terminal. Using the wireless LAN interface unit connected to the wireless LAN access point device and the wireless LAN authentication information received from the wireless LAN terminal, authentication processing when using the wireless LAN access point device is performed. An authentication processing unit to perform, information indicating a connection state when connected to the wireless LAN access point device (wireless LAN connection state information), and information indicating an authentication state when authenticated (wireless LAN authentication state information) And a proxy management unit for transmitting to the LAN terminal.

  In the wireless LAN connection authentication proxy device according to the present invention, the proxy management unit maintains the connection with the wireless LAN access point device using the wireless LAN connection information after connecting to the wireless LAN access point device. A connection maintaining process is performed.

  In the wireless LAN connection authentication proxy device according to the present invention, the proxy management unit stops the connection maintaining process when receiving a proxy termination request message from the wireless LAN terminal.

  In the wireless LAN connection authentication proxy device according to the present invention, the proxy management unit receives the wireless LAN connection status information or the wireless LAN authentication status information during a period in which the connection with the wireless LAN access point device is maintained. When changed, the update data is transmitted to the wireless LAN terminal.

  In the wireless LAN connection authentication proxy device according to the present invention, the wireless LAN connection authentication proxy device includes a proxy processing request database unit that stores information of a plurality of the wireless LAN terminals that have requested a proxy for connection to the wireless LAN access point device, and the proxy management unit includes: The connection processing and authentication processing of the plurality of wireless LAN terminals to the wireless LAN access point device are performed according to the priority order of the wireless LAN terminals.

  In the wireless LAN connection authentication proxy device according to the present invention, the priority order of the wireless LAN terminal is the order of reception of the proxy start request message from the wireless LAN terminal, or the wireless LAN terminal covers the coverage of the wireless LAN access point device. The scheduled time of arriving at is in order of early arrival.

  In the wireless LAN connection authentication proxy device according to the present invention, when the proxy management unit is connectable to a plurality of wireless LAN access point devices, one wireless device is randomly selected from the plurality of wireless LAN access point devices. A LAN access point device is selected as a connection destination.

  In the wireless LAN connection authentication proxy device according to the present invention, the wireless LAN connection authentication proxy device includes a measurement unit that measures the degree of congestion of the wireless LAN access point device, and the proxy management unit is connectable to a plurality of wireless LAN access point devices. One of the plurality of wireless LAN access point devices that is relatively free is selected as a connection destination.

  A wireless LAN terminal device according to the present invention is provided corresponding to a communication network interface unit that communicates with a wireless LAN connection authentication proxy device via a communication network, and a wireless LAN access point device that the device itself intends to access. A pre-connection authentication management unit that transmits the wireless LAN connection information and wireless LAN authentication information of the own device to the wireless LAN connection authentication proxy device, and the wireless LAN connection authentication proxy device uses the wireless LAN connection information Information (wireless LAN connection state information) indicating a connection state when connected to the wireless LAN access point device is received from the wireless LAN connection authentication proxy device by the communication network interface unit, and the wireless LAN connection state information is received. A wireless LAN interface that is used to connect to the wireless LAN access point device Information indicating the authentication state when the wireless LAN connection authentication proxy device uses the wireless LAN authentication information to perform the authentication process when using the wireless LAN access point device (wireless LAN authentication state) Information) from the wireless LAN connection authentication proxy device by the communication network interface unit, and an authentication processing unit that uses the wireless LAN access point device by using the wireless LAN authentication status information. And

  In the wireless LAN terminal device according to the present invention, the pre-connection authentication management unit includes a wireless LAN access point corresponding to a wireless LAN connection authentication proxy device that is a transmission source of the received wireless LAN connection state information and wireless LAN authentication state information. When connection to the device becomes possible, a proxy end request message is transmitted to the wireless LAN connection authentication proxy device.

  In the wireless LAN terminal device according to the present invention, the wireless LAN interface unit has already received wireless LAN connection state information update data received by the communication network interface unit from the wireless LAN connection authentication proxy device. The wireless LAN connection state information reflected in the information is used, and the authentication processing unit has already received the wireless LAN authentication state information update data received by the communication network interface unit from the wireless LAN connection authentication proxy device. The wireless LAN authentication status information reflected in the authentication status information is used.

  In the wireless LAN terminal device according to the present invention, information of the wireless LAN connection authentication proxy device located at a position corresponding to the location of the wireless LAN access point device that the device itself intends to access is stored in the wireless LAN connection authentication proxy device. A proxy device search unit that searches from registration data in which information of a wireless LAN connection authentication proxy device is registered in association with location information indicating an installation location is provided.

  In the wireless LAN terminal device according to the present invention, when there are a plurality of access destination candidate wireless LAN access point devices, the pre-connection authentication management unit authenticates each wireless LAN connection authentication corresponding to the plurality of wireless LAN access point devices. A proxy start request message including wireless LAN connection information of the own device and wireless LAN authentication information is transmitted to the proxy device.

  A wireless LAN system according to the present invention includes the above-described wireless LAN connection authentication proxy device and the above-described wireless LAN terminal device.

  A wireless LAN connection authentication proxy method according to the present invention includes a wireless LAN connection authentication proxy device that can be connected to a wireless LAN access point device, and a wireless LAN that can communicate with the wireless LAN connection authentication proxy device via a communication network. A wireless LAN connection authentication proxy method in a wireless LAN system having a terminal, wherein the wireless LAN terminal device is provided in correspondence with a wireless LAN access point device that the device itself intends to access Transmitting the wireless LAN connection information and wireless LAN authentication information of the own device to the proxy device; and the wireless LAN connection authentication proxy device uses the wireless LAN connection information received from the wireless LAN terminal. Connecting to the wireless LAN access point device; and A proxy device using the wireless LAN authentication information received from the wireless LAN terminal to perform authentication processing when using the wireless LAN access point device; and the wireless LAN connection authentication proxy device Transmitting information indicating a connection state when connected to a LAN access point device (wireless LAN connection state information) and information indicating an authentication state when being authenticated (wireless LAN authentication state information) to the wireless LAN terminal; The wireless LAN terminal device uses the wireless LAN connection status information received from the wireless LAN connection authentication proxy device to connect to the wireless LAN access point device, and the wireless LAN terminal device connects to the wireless LAN connection device. Using the wireless LAN authentication status information received from the authentication agent device, the wireless LAN access Characterized in that it comprises the steps of utilizing Into device.

  According to the present invention, before the wireless LAN terminal device moves within the coverage of the wireless LAN access point device, the connection processing to the wireless LAN access point device and the use of the wireless LAN access point device are performed in advance. The effect that authentication processing can be performed is obtained.

1 is a schematic configuration diagram of a wireless LAN system according to a first embodiment of the present invention. It is a block diagram which shows the structure of the wireless LAN connection authentication proxy apparatus 10 shown in FIG. It is a block diagram which shows the structure of the multimode terminal 30 shown in FIG. It is a sequence diagram which shows the procedure of the wireless LAN connection authentication proxy method which concerns on 1st Embodiment of this invention. FIG. 2 is a first embodiment relating to a communication mode between the multimode terminal 30 and the wireless LAN connection authentication proxy device 10; 9 is a second embodiment relating to a communication mode between the multimode terminal 30 and the wireless LAN connection authentication proxy device 10; It is a sequence diagram which shows the execution example of the wireless LAN connection authentication proxy process which concerns on 4th Embodiment of this invention. It is explanatory drawing for demonstrating the wireless LAN connection authentication proxy method which concerns on 6th Embodiment of this invention. It is explanatory drawing for demonstrating the wireless LAN connection authentication proxy method which concerns on 7th Embodiment of this invention.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

[First Embodiment]
FIG. 1 is a schematic configuration diagram of a wireless LAN system according to the first embodiment of the present invention. In FIG. 1, the wireless LAN connection authentication proxy device 10 is installed in a coverage 52 of a specific wireless LAN access point device 50. The wireless LAN connection authentication proxy device 10 supports two wireless systems, a wireless LAN and a cellular mobile communication network, and can be connected to the base station 72 of the wireless LAN access point device 50 and the cellular mobile communication network 70. is there.

  The multi-mode terminal 30 is a terminal that can be moved by a user. The multimode terminal 30 is compatible with two wireless systems, a wireless LAN and a cellular mobile communication network, and can be connected to the wireless LAN access point device 50 and the base station 72 of the cellular mobile communication network 70.

  The wireless LAN access point device 50 is a public wireless LAN access point device, and is connected to the public wireless LAN operator network 60. The public wireless LAN operator network 60 is provided with an authentication server (RADIUS) 62 and a DHCP server 64 having a subscriber database. The wireless LAN access point device 50 is connected to the Internet 80.

  The cellular mobile communication network 70 is a cellular mobile communication network. In the cellular mobile communication network 70, a base station 72 is provided for each cell. The cellular mobile communication network 70 is provided with a subscriber database 74. The cellular mobile communication network 70 is connected to the Internet 80.

  In addition, as a radio system of the cellular mobile communication network, for example, WiMAX, EV-DO, LTE, and the like can be given.

  FIG. 2 is a block diagram showing a configuration of the wireless LAN connection authentication proxy device 10 shown in FIG. In FIG. 2, the wireless LAN connection authentication proxy device 10 includes a wireless LAN interface unit 12, an authentication processing unit 14, a proxy management unit 16, a cellular mobile communication network interface unit 18, and a proxy processing request database unit 20.

  The wireless LAN interface unit 12 is connected to the wireless LAN access point device 50 to transmit / receive data. The authentication processing unit 14 performs authentication processing when using the wireless LAN access point device 50. This authentication process is for performing secure communication via the wireless LAN access point device 50 or limiting users who use the wireless LAN access point device 50 to registrants. The proxy management unit 16 performs a wireless LAN connection authentication proxy process in response to a request from the multimode terminal 30. The cellular mobile communication network interface unit 18 is connected to the base station 72 of the cellular mobile communication network 70 to transmit and receive data. The proxy processing request database unit 20 stores information of the multimode terminal 30 that has requested the wireless LAN connection authentication proxy processing.

  The wireless LAN interface unit 12 may have an antenna and wirelessly connect to the wireless LAN access point device 50, or may be wired to the wireless LAN access point device 50 with an RF cable. Also good.

  FIG. 3 is a block diagram showing a configuration of multimode terminal 30 shown in FIG. In FIG. 3, the multimode terminal 30 includes a wireless LAN interface unit 32, an authentication processing unit 34, a pre-connection authentication processing management unit 36, a cellular mobile communication network interface unit 38, and a proxy device search unit 40.

  The wireless LAN interface unit 32 is connected to the wireless LAN access point device 50 to transmit / receive data. The authentication processing unit 34 performs an authentication process for performing secure communication via the wireless LAN access point device 50. The pre-connection authentication processing management unit 36 performs pre-connection authentication processing for the wireless LAN connection authentication proxy device 10. The cellular mobile communication network interface unit 38 is connected to the base station 72 of the cellular mobile communication network 70 to transmit and receive data. The proxy device search unit 40 searches the registered wireless LAN connection authentication proxy device 10 for the wireless LAN connection authentication proxy device 10 corresponding to the wireless LAN access point device 50 that the terminal intends to access.

  Note that the wireless LAN interface unit 32 and the cellular mobile communication network interface unit 38 are mounted in two different cases, and data transmission / reception between the two cases may be performed by short-range wireless communication means or the like. Good.

  Next, the operation of the wireless LAN system according to this embodiment will be described with reference to FIG. FIG. 4 is a sequence diagram showing a procedure of the wireless LAN connection authentication proxy method according to the present embodiment.

  First, it is assumed that the multimode terminal 30 is connected to the base station 72 of the cellular mobile communication network 70 and is connected to the Internet 80 via the cellular mobile communication network 70.

(Step S1) The pre-connection authentication processing management unit 36 of the multimode terminal 30 notifies the proxy device search unit 40 of location information indicating the location of the wireless LAN access point device 50 that the terminal itself is to access. Then, the search for the wireless LAN connection authentication proxy device 10 is instructed. The proxy device search unit 40 refers to registration data in which information (communication address or the like) of the wireless LAN connection authentication proxy device 10 is registered in association with position information indicating the installation position of the wireless LAN connection authentication proxy device 10. Information of the wireless LAN connection authentication proxy device 10 registered in association with the location information notified from the pre-connection authentication processing management unit 36 is searched.

  In addition, as a position of the wireless LAN access point apparatus 50 which the own terminal is going to access, for example, a current position, a future predicted position, or a pre-registered position can be used. The registration data of the wireless LAN connection authentication proxy device 10 may be stored in the multimode terminal 30 or a database device for storing the registration data of the wireless LAN connection authentication proxy device 10 is provided on the Internet 80, for example. The registration data may be referred to by communication.

(Step S2) The pre-connection authentication processing management unit 36 of the multi-mode terminal 30 sends the wireless LAN connection of its own terminal from the cellular mobile communication network interface unit 38 to the wireless LAN connection authentication proxy device 10 searched in Step S1. A proxy start request message having information for use and information for wireless LAN authentication is transmitted. This proxy start request message is received by the cellular mobile communication network interface unit 18 of the wireless LAN connection authentication proxy device 10 via the cellular mobile communication network 70. The proxy processing request database unit 20 stores a proxy start request message received from the multimode terminal 30.

  The wireless LAN connection information of the multimode terminal 30 includes information used in connection processing for connecting to the wireless LAN access point device 50. The wireless LAN connection information includes the MAC address of the multimode terminal 30. The wireless LAN authentication information of the multimode terminal 30 includes information used in authentication processing when the wireless LAN access point device 50 is used. The wireless LAN authentication information depends on the terminal authentication method. For example, when the terminal authentication method “IEEE802.1X” is used, a certificate, identification information, and password unique to the multimode terminal 30 are used. In the case of a method of using and authenticating, a combination of identification information and a password stored in the multimode terminal 30 can be used.

  Note that the wireless LAN connection information and the wireless LAN authentication information in step S2 may be registered in advance in the multimode terminal 30 so that they can be automatically transmitted without user operation. preferable.

(Step S3) The proxy management unit 16 of the wireless LAN connection authentication proxy device 10 notifies the wireless LAN interface unit 12 of the wireless LAN connection information included in the proxy start request message received from the multi-mode terminal 30. A connection to the access point device 50 is instructed. The wireless LAN interface unit 12 uses the wireless LAN connection information (for example, the MAC address) notified from the proxy management unit 16 to connect to the wireless LAN access point device 50.

(Step S4) The proxy management unit 16 of the wireless LAN connection authentication proxy device 10 notifies the authentication processing unit 14 of the wireless LAN authentication information included in the proxy start request message received from the multimode terminal 30, and performs the authentication process. Instruct. The authentication processing unit 14 uses the wireless LAN authentication information notified from the proxy management unit 16 (for example, the certificate of the multimode terminal 30), and the authentication server 62 via the wireless LAN access point device 50. Authentication processing (for example, conforming to “IEEE802.1X”) is performed for secure communication.

(Step S5) The proxy management unit 16 of the wireless LAN connection authentication proxy device 10 connects to the Internet 80 via the wireless LAN access point device 50 when the authentication process of Step S4 is successful. As a result, the wireless LAN connection authentication proxy device 10 can transmit and receive data via the Internet 80.

(Step S <b> 6) The proxy management unit 16 of the wireless LAN connection authentication proxy device 10 performs authentication between the authentication server 62 and information indicating the connection status when connected to the wireless LAN access point device 50 (wireless LAN connection status information). A proxy processing completion notification message having information (wireless LAN authentication state information) indicating the authentication state at the time of the transmission is transmitted to the multimode terminal 30.

  The wireless LAN connection state information includes identification information (ESSID) of the wireless LAN access point device 50, a channel number, position information of the wireless LAN connection authentication proxy device 10, position information of the wireless LAN access point device 50, and the like. The wireless LAN authentication status information includes encryption key information used for secure communication.

  The proxy process completion notification message transmission in step S6 may be completed by the scheduled time when the multimode terminal 30 arrives at the coverage 52 of the wireless LAN access point device 50, and the transmission is divided into a plurality of sessions. You may do it.

(Step S7) The proxy management unit 16 of the wireless LAN connection authentication proxy device 10 uses the wireless LAN connection information to connect to the wireless LAN access point device 50 until the proxy termination request message is received from the multimode terminal 30. To maintain. For example, the proxy management unit 16 periodically performs predetermined data communication with a predetermined communication partner via the wireless LAN access point device 50. In this data communication, it is desirable that the amount of data communication is small in order to reduce the influence on user traffic. For example, reading a web page with a small amount of data from a predetermined web server on the Internet 80 or executing a short-time ping to a predetermined server on the Internet 80 may be used.

(Step S8) The proxy management unit 16 of the wireless LAN connection authentication proxy device 10 changes the wireless LAN connection status information or the wireless LAN authentication status information during the period in which the connection with the wireless LAN access point device 50 is maintained. Then, the update data is transmitted to the multimode terminal 30. The pre-connection authentication processing management unit 36 of the multimode terminal 30 reflects the wireless LAN connection state information update data included in the update data received from the wireless LAN connection authentication proxy device 10 in the already received wireless LAN connection state information. Let Further, the pre-connection authentication processing management unit 36 of the multimode terminal 30 has already received the wireless LAN authentication status information update data included in the update data received from the wireless LAN connection authentication proxy device 10. To reflect.

(Step S <b> 9) The pre-connection authentication processing management unit 36 of the multi-mode terminal 30 includes the location information of the wireless LAN connection authentication proxy device 10 or the wireless LAN access included in the wireless LAN connection status information received from the wireless LAN connection authentication proxy device 10. The position information of the point device 50 is compared with the position information indicating the position of the terminal itself. The pre-connection authentication process management unit 36 determines whether or not the wireless LAN access point device 50 can be connected based on the comparison result. By this determination, the multimode terminal 30 is connected to the wireless LAN access point device 50 and grasps the timing at which the connection with the wireless LAN access point device 50 can be taken over from the wireless LAN connection authentication proxy device 10.

(Step S10) As a result of the determination in Step S9, the pre-connection authentication processing management unit 36 of the multimode terminal 30 can connect to the wireless LAN access point device 50, and the wireless LAN connection authentication proxy device 10 can connect to the wireless LAN access point device. When the connection with 50 can be taken over, a proxy end request message is transmitted to the wireless LAN connection authentication proxy device 10.

(Step S11) Upon receiving the proxy end request message from the multimode terminal 30, the proxy management unit 16 of the wireless LAN connection authentication proxy device 10 stops the process of maintaining the connection with the wireless LAN access point device 50 in Step S7. .

(Step S12) The pre-connection authentication processing management unit 36 of the multimode terminal 30 sets the wireless LAN connection state information received from the wireless LAN connection authentication proxy device 10 in the wireless LAN interface unit 32. Accordingly, the wireless LAN interface unit 32 connects to the wireless LAN access point device 50 using the wireless LAN connection state information. The pre-connection authentication processing management unit 36 sets the wireless LAN authentication state information received from the wireless LAN connection authentication proxy device 10 in the authentication processing unit 34. Accordingly, the authentication processing unit 34 continues the authentication state for performing secure communication via the wireless LAN access point device 50 using the wireless LAN authentication state information. Then, the pre-connection authentication processing management unit 36 switches the communication interface to be used from the cellular mobile communication network interface unit 38 to the wireless LAN interface unit 32.

(Step S13) The multi-mode terminal 30 is connected to the Internet 80 via the wireless LAN access point device 50, and performs encrypted communication (data traffic transmission / reception) using the encryption key included in the wireless LAN authentication status information.

  The wireless LAN connection authentication proxy device 10 notifies the multimode terminal 30 that there is no possibility of moving into the coverage 52 of the wireless LAN access point device 50 that is the target of the connection maintenance process in step S7. If the proxy end request message is not received even after a lapse of a certain period from the start of the connection maintaining process in step S7, the wireless LAN access point apparatus 50 stops the connection maintaining process in step S7. Disconnect from the.

  According to the present embodiment, before the multimode terminal 30 moves into the coverage 52 of the wireless LAN access point device 50, the multimode terminal 30 uses the wireless LAN connection authentication proxy device 10 outside the coverage 52 in advance. The connection to the wireless LAN access point device 50 and the authentication process for performing secure communication via the wireless LAN access point device 50 can be completed. As a result, the multimode terminal 30 can start data communication via the wireless LAN access point device 50 as soon as it moves into the coverage 52 of the wireless LAN access point device 50. As a result, convenience when the user of the multimode terminal 30 uses the cellular mobile communication network and the wireless LAN together is improved.

  Further, according to the present embodiment, the wireless LAN access point device 50 can use an existing device. Further, it is not necessary for the public wireless LAN network 60 and the cellular mobile communication network 70 to cooperate in authentication processing or the like. This is very useful considering that many operators provide public wireless LAN services.

[Second Embodiment]
The second embodiment is a modification of the multimode terminal 30 of the first embodiment. In the second embodiment, the proxy search unit 40 is arranged on the network side. For example, the proxy search unit 40 is provided in a predetermined server on the Internet 80. Then, the multimode terminal 30 transmits its own location information to the server, requests a search for the wireless LAN connection authentication proxy device 10, and receives the search result information (address of the wireless LAN connection authentication proxy device 10). .

[Third Embodiment]
The third embodiment is an example relating to a communication mode between the multimode terminal 30 and the wireless LAN connection authentication proxy device 10 of the first embodiment.

  FIG. 5 is a first embodiment of the communication mode between the multimode terminal 30 and the wireless LAN connection authentication proxy device 10. In FIG. 5, the multimode terminal 30 and the wireless LAN connection authentication proxy device 10 communicate directly (without going through a server) via a communication network such as a mobile network or a fixed network.

  FIG. 6 is a second embodiment of the communication mode between the multimode terminal 30 and the wireless LAN connection authentication proxy device 10. In FIG. 6, the multi-mode terminal 30 and the wireless LAN connection authentication proxy device 10 communicate with each other via a proxy server 90 provided on the network side. As this communication procedure, for example, the multimode terminal 30 connects to the proxy server 90 and calls the wireless LAN connection authentication proxy device 10 from the proxy server 90. Alternatively, the multimode terminal 30 calls the wireless LAN connection authentication proxy device 10 using SMS (Short Message Service), and the multimode terminal 30 and the wireless LAN connection authentication proxy device 10 communicate with the proxy server 90 using a common identifier. You may connect and communicate.

  Communication between the multimode terminal 30 and the wireless LAN connection authentication proxy device 10 may be wireless communication (mobile network) or wired communication (fixed network). For example, a wireless communication system such as the LTE system or the WiMAX system can be used.

[Fourth Embodiment]
The fourth embodiment is a modification according to the first embodiment. In the fourth embodiment, the wireless LAN connection authentication proxy device 10 performs wireless LAN connection authentication proxy processing in parallel for a plurality of multimode terminals 30.

  FIG. 7 is a sequence diagram illustrating an execution example of the wireless LAN connection authentication proxy process according to the present embodiment. In the example of FIG. 7, the wireless LAN connection authentication proxy device 10 receives each proxy start request message from the two multimode terminals 30-1 and 30-2. Then, the wireless LAN connection authentication proxy device 10 performs the wireless LAN connection authentication proxy processing related to the two multimode terminals 30-1 and 30-2 in parallel. Here, the connection process and the authentication process related to the multimode terminal 30-1 are first performed, and then the connection process and the authentication process related to the multimode terminal 30-2 are performed. And the connection maintenance process which concerns on the multimode terminal 30-1, and the connection maintenance process which concerns on the multimode terminal 30-2 are repeated alternately.

  The proxy management unit 16 changes the setting of the wireless LAN interface unit 12 corresponding to the multimode terminal 30 to be processed when performing the wireless LAN connection authentication proxy processing related to a plurality of multimode terminals 30 in parallel. . The content of the setting change is a setting content unique to the multimode terminal 30 such as a MAC address of the multimode terminal 30. Settings specific to the multimode terminal 30 are included in the proxy start request message. The proxy start request message received from each multimode terminal 30 is stored in the proxy processing request database unit 20.

  Further, the order in which the wireless LAN connection authentication proxy processing related to a plurality of multimode terminals 30 is performed in parallel follows the priority order of each multimode terminal 30. This priority may be the order in which the proxy start request message is received, or may be the order in which the scheduled arrival time of the wireless LAN access point device 50 to the coverage 52 is earlier. The multi-mode terminal 30 includes the estimated arrival time in the substitution start request message.

  Alternatively, the wireless LAN connection authentication proxy device 10 may include a plurality of wireless LAN interface units 12 so that the wireless LAN connection authentication proxy processing for the plurality of multimode terminals 30 can be executed in a short time.

  Further, the proxy processing request database unit 20 may hold all information necessary for the wireless LAN connection authentication proxy processing, or only information indicating from which multimode terminal 30 the proxy start request message has been received. And necessary information from the multi-mode terminal 30 may be acquired via the cellular mobile communication network 70 as necessary.

[Fifth Embodiment]
The fifth embodiment is a modification according to the fourth embodiment. In the fifth embodiment, when the proxy management unit 16 of the wireless LAN connection authentication proxy device 10 receives proxy start request messages from a plurality of multimode terminals 30, the priority order of each multimode terminal 30 or the processing of its own device Based on the capability information, it is determined whether or not the wireless LAN connection authentication proxy processing related to the specific multimode terminal 30 can be performed in parallel. As a result of this determination, if the wireless LAN connection authentication proxy process related to the specific multimode terminal 30 cannot be performed in parallel, the proxy management unit 16 performs the proxy process on the specific multimode terminal 30. Send a notification message.

  When the multimode terminal 30 receives the proxy process disabled notification message from the wireless LAN connection authentication proxy device 10, the multimode terminal 30 stops the pre-connection authentication process. As a result, the multimode terminal 30 starts normal connection processing and authentication processing to the wireless LAN access point device 50 after arriving at the coverage 52 of the wireless LAN access point device 50.

  If the multimode terminal 30 arrives at the coverage 52 of the wireless LAN access point device 50 without receiving the proxy processing completion notification message from the wireless LAN connection authentication proxy device 10, it stops the pre-connection authentication processing. Then, normal connection processing and authentication processing to the wireless LAN access point device 50 are started.

[Sixth Embodiment]
The sixth embodiment is a modification according to the multimode terminal 30 of the first embodiment. In the sixth embodiment, one multi-mode terminal 30 transmits a proxy start request message to a plurality of wireless LAN connection authentication proxy devices 10 simultaneously. FIG. 8 is an explanatory diagram for explaining a wireless LAN connection authentication proxy method according to the present embodiment. In the example of FIG. 8, one multi-mode terminal 30 transmits a proxy start request message to two wireless LAN connection authentication proxy devices 10-1 and 10-2 at the same time. For example, when a plurality of wireless LAN access point devices 50-1 and 50-2 are installed in close proximity and the multimode terminal 30 is expected to move to that location, access destination candidates This is effective when it cannot be limited to any one of the wireless LAN access point devices 50-1 and 50-2.

[Seventh Embodiment]
The seventh embodiment is a modification according to the first embodiment. In the seventh embodiment, one wireless LAN connection authentication proxy device 10 can be connected to a plurality of wireless LAN access point devices 50. FIG. 9 is an explanatory diagram for explaining a wireless LAN connection authentication proxy method according to the present embodiment. In the example of FIG. 9, one wireless LAN connection authentication proxy device 10 can be connected to two wireless LAN access point devices 50-1 and 50-2.

  The proxy management unit 16 of the wireless LAN connection authentication proxy device 10 selects one wireless LAN access point device 50 from the plurality of wireless LAN access point devices 50 when receiving a proxy start request message from the multimode terminal 30. Then, a wireless LAN connection authentication proxy process is performed for the selected one wireless LAN access point device 50. In the example of FIG. 9, the wireless LAN connection authentication proxy device 10 receives the proxy start request messages from the two multimode terminals 30-1 and 30-2, and the wireless LAN connection authentication for the multimode terminal 30-1. Proxy processing is performed on the wireless LAN access point device 50-1, and wireless LAN connection authentication proxy processing related to the multimode terminal 30-2 is performed on the wireless LAN access point device 50-2.

  As a method for selecting one wireless LAN access point device 50 from among a plurality of wireless LAN access point devices 50 as an object of the wireless LAN connection authentication proxy processing, the following two methods 1 and 2 are shown. Can be mentioned.

(Method 1) One wireless LAN access point device 50 is selected at random.

(Method 2) The wireless LAN connection authentication proxy device 10 includes a measurement unit that measures the degree of congestion (for example, the number of terminal connections) of the wireless LAN access point device 50, and the proxy management unit 16 includes a plurality of wireless LAN access point devices. One wireless LAN access point device 50 that is relatively free is selected from 50.

  According to the method 1 or 2, the following effects can be obtained. Conventionally, when one wireless LAN access point device 50 to be connected to a wireless LAN terminal is selected from a plurality of wireless LAN access point devices 50, the received signal strength from each wireless LAN access point device 50 is measured. The wireless LAN access point device 50 having a relatively large received signal strength is selected. However, in the conventional selection method, the connection destination of the wireless LAN terminal is biased toward the specific wireless LAN access point device 50. As a result, the specific wireless LAN access point device 50 is congested and communication quality is lowered. Problems can arise. On the other hand, according to the method 1 or 2 according to the present embodiment, the connection destination of the multimode terminal 30 is prevented from being biased toward a specific wireless LAN access point device 50, and the wireless LAN access point devices 50 are crowded. The effect of making the condition uniform can be obtained.

  As mentioned above, although embodiment of this invention was explained in full detail with reference to drawings, the specific structure is not restricted to this embodiment, The design change etc. of the range which does not deviate from the summary of this invention are included.

DESCRIPTION OF SYMBOLS 10 ... Wireless LAN connection authentication proxy device, 12, 32 ... Wireless LAN interface part, 14, 34 ... Authentication process part, 16 ... Proxy management part, 18, 38 ... Cellular mobile communication network interface part, 20 ... Proxy process request database 30: Multi-mode terminal, 36: Pre-connection authentication processing management unit, 40 ... Proxy device search unit, 50 ... Wireless LAN access point device, 52 ... Coverage, 60 ... Public wireless LAN carrier network, 62 ... Authentication server, 70 ... cellular mobile communication network, 72 ... base station, 80 ... internet

Claims (15)

A communication network interface unit that communicates with a wireless LAN terminal via a communication network;
A wireless LAN interface unit for connecting to a wireless LAN access point device using the wireless LAN connection information received from the wireless LAN terminal;
An authentication processing unit that performs authentication processing when using the wireless LAN access point device using the wireless LAN authentication information received from the wireless LAN terminal;
Proxy for transmitting information indicating the connection state when connecting to the wireless LAN access point device (wireless LAN connection state information) and information indicating the authentication state when authenticating (wireless LAN authentication state information) to the wireless LAN terminal The management department,
A wireless LAN connection authentication proxy device comprising: The proxy management unit performs a connection maintenance process for maintaining a connection with the wireless LAN access point device using the wireless LAN connection information after connecting to the wireless LAN access point device.
The wireless LAN connection authentication proxy device according to claim 1. When the proxy management unit receives a proxy end request message from the wireless LAN terminal, the proxy management unit stops the connection maintenance process.
The wireless LAN connection authentication proxy device according to claim 2. When the wireless LAN connection state information or the wireless LAN authentication state information is changed during a period in which the proxy management unit maintains a connection with the wireless LAN access point device, the proxy management unit transmits the update data to the wireless LAN. Send to device,
The wireless LAN connection authentication proxy device according to claim 2 or 3, A proxy processing request database unit that stores information of a plurality of the wireless LAN terminals that have requested proxy for connection to the wireless LAN access point device;
The proxy management unit performs connection processing and authentication processing for the plurality of wireless LAN terminals to the wireless LAN access point device according to the priority order of the wireless LAN terminals.
The wireless LAN connection authentication proxy device according to any one of claims 1 to 4, wherein   The priority order of the wireless LAN terminals is the order of reception of proxy start request messages from the wireless LAN terminals, or the order in which the wireless LAN terminals arrive at the coverage of the wireless LAN access point device in ascending order. The wireless LAN connection authentication proxy device according to claim 5, wherein: The proxy management unit, when connectable to a plurality of wireless LAN access point devices, randomly selects one wireless LAN access point device as a connection destination from the plurality of wireless LAN access point devices.
The wireless LAN connection authentication proxy device according to claim 1, wherein the wireless LAN connection authentication proxy device is a wireless LAN connection authentication proxy device. A measuring unit for measuring the degree of congestion of the wireless LAN access point device;
When the proxy management unit can connect to a plurality of wireless LAN access point devices, the proxy management unit selects one wireless LAN access point device that is relatively free from the plurality of wireless LAN access point devices as a connection destination. ,
The wireless LAN connection authentication proxy device according to claim 1, wherein the wireless LAN connection authentication proxy device is a wireless LAN connection authentication proxy device. A communication network interface unit that communicates with the wireless LAN connection authentication proxy device via a communication network;
Pre-connection authentication for transmitting the wireless LAN connection information and wireless LAN authentication information of the own device to the wireless LAN connection authentication proxy device provided corresponding to the wireless LAN access point device that the own device is scheduled to access The management department,
Information (wireless LAN connection state information) indicating a connection state when the wireless LAN connection authentication proxy device connects to the wireless LAN access point device using the wireless LAN connection information is transmitted by the communication network interface unit. A wireless LAN interface unit that receives from the LAN connection authentication proxy device and connects to the wireless LAN access point device using the wireless LAN connection state information;
Information (wireless LAN authentication state information) indicating an authentication state when the wireless LAN connection authentication proxy device performs an authentication process when the wireless LAN access point device is used using the wireless LAN authentication information. An authentication processing unit which is received from the wireless LAN connection authentication proxy device by a communication network interface unit and uses the wireless LAN access point device using the wireless LAN authentication state information;
A wireless LAN terminal device comprising: When the pre-connection authentication management unit becomes connectable to a wireless LAN access point device corresponding to the wireless LAN connection authentication proxy device that is the transmission source of the received wireless LAN connection state information and wireless LAN authentication state information, A proxy end request message is transmitted to the wireless LAN connection authentication proxy device;
The wireless LAN terminal device according to claim 9. The wireless LAN interface unit includes wireless LAN connection state information reflected in the wireless LAN connection state information already received from the wireless LAN connection authentication proxy device by the wireless network connection state information update data received by the communication network interface unit. use,
The authentication processing unit uses the wireless LAN authentication state information reflected in the wireless LAN authentication state information already received from the wireless LAN connection authentication proxy device by the wireless network authentication state information update data received by the communication network interface unit. To
The wireless LAN terminal device according to claim 9 or 10, characterized in that The wireless LAN connection authentication agent information at a position corresponding to the position of the wireless LAN access point device that the device itself intends to access is wirelessly associated with the position information indicating the installation position of the wireless LAN connection authentication agent device. A proxy device search unit that searches from registration data in which information of a LAN connection authentication proxy device is registered;
The wireless LAN terminal device according to claim 9, wherein the wireless LAN terminal device is a wireless LAN terminal device.   The pre-connection authentication management unit, when there are a plurality of access destination candidate wireless LAN access point devices, connects to the wireless LAN connection authentication proxy device corresponding to the plurality of wireless LAN access point devices. 13. The wireless LAN terminal device according to claim 9, wherein a proxy start request message including information for use and information for wireless LAN authentication is transmitted.   A wireless LAN system comprising the wireless LAN connection authentication proxy device according to claim 1 and the wireless LAN terminal device according to claim 9. Wireless LAN connection authentication in a wireless LAN system having a wireless LAN connection authentication proxy device connectable to a wireless LAN access point device and a wireless LAN terminal capable of communicating with the wireless LAN connection authentication proxy device via a communication network An agency method,
The wireless LAN terminal device has its own wireless LAN connection information and wireless LAN authentication for the wireless LAN connection authentication proxy device provided corresponding to the wireless LAN access point device that the device itself intends to access. Sending information for use;
The wireless LAN connection authentication proxy device using the wireless LAN connection information received from the wireless LAN terminal to connect to the wireless LAN access point device;
The wireless LAN connection authentication proxy device performs authentication processing when using the wireless LAN access point device using the wireless LAN authentication information received from the wireless LAN terminal;
Information indicating a connection state when the wireless LAN connection authentication proxy device is connected to the wireless LAN access point device (wireless LAN connection state information) and information indicating an authentication state when the authentication is performed (wireless LAN authentication state information) Transmitting to the wireless LAN terminal;
The wireless LAN terminal device using the wireless LAN connection status information received from the wireless LAN connection authentication proxy device to connect to the wireless LAN access point device;
The wireless LAN terminal device using the wireless LAN access point device using the wireless LAN authentication status information received from the wireless LAN connection authentication proxy device;
A wireless LAN connection authentication proxy method comprising:

Images