The present invention relates to a personal network management method and a personal network management apparatus. More particularly, the present invention relates to a personal network management method and personal network management apparatus managing access to communication terminal apparatus in a personal network.
A network service is proposed where a plurality of communication equipment is grouped together on a network and this grouped plurality of communication equipment is managed and administered by a management server on the network. With this service, identification information etc. for a plurality of communication terminals connected to the network is registered in the management server by a communication terminal user so that communication is possible between fellow communication terminals in the registered group. In this way, a network configuration constituting a network utilizing a plurality of communication equipment such as mobile telephones etc. an individual user is in possession of, referred to as a PN (Personal Network) is noted as a service configuration utilizing a network. Investigation of technology relating to PN by 3GPP (3rd Generation Partnership Project) is far advanced (refer to non-patent document 1).
Further, it is also assumed that not only public networks such as telephone networks etc. but also networks such as LANs and the Internet etc. are utilized, and that a plurality of terminals connected to a plurality of different types of networks are grouped together.
For example, personal communication trace connection methods such as disclosed in patent document 1 exist as technology relating to PN's for grouping a plurality of communication terminals connected to a plurality of different types of network. In this method, a personal communication number corresponding to a person is assigned, a user specifies connection destination terminals over a plurality of networks at their own personal communication number, and the mobile terminal is managed over a plurality of networks with this position information. The user can then specify arbitrary communication terminals in a plurality of networks by specifying the personal communication number.
Patent Document 1: Japanese Patent Application Laid-Open No. Hei. 5-145963.
However, with personal network services where research by 3GPP is advanced (non-patent document 1), research has only been carried out into communication between fellow communication terminals in a personal network, i.e. communication between fellow communication terminals in a personal network constituted by a plurality of communication terminals in the possession of the same user.
Further, it is necessary for terminals in the personal network to be known in advance in order to connect communication terminal users outside the personal network to inside the personal network. Moreover, with personal networks of the related art, registration of a plurality of utilized communication terminals with networks is such that the user accesses a management server to register in advance, and there is the problem that this registration processing is annoying for the user.
Moreover, in order to implement information with limited access from outside with respect to the communication terminal in the personal network, it is necessary for the administrator of the personal network to add and change settings of access limiting information for every communication terminal in each individual personal network, with the operation of adding and changing settings also being troublesome.
Further, with the aforementioned patent document 1, while a user is designating a terminal for a connection destination using their own personal communication number across a plurality of networks, it is necessary to register identification information etc. for connection destination terminals in advance on the network side, and the registration procedure for designating the connection destination terminals is also troublesome.
It is therefore an object of the present invention to provide a personal network management method and personal network management apparatus capable of dynamically carrying out registration processing as to whether or not connection to a communication terminal in a personal network is possible upon an access request from a communication terminal outside a personal network, in the event that association of this communication terminal information with the terminal in the personal network is not yet registered.
The personal network management method of the present invention is a personal network management method managing a personal network comprising a plurality of communication terminal apparatus connected to a network, comprised of a terminal connection management step managing registration of communication terminal information for a connection destination in a terminal connection management memory every communication terminal apparatus constituting the personal network, a receiving step receiving connection requests from communication terminal apparatus outside the personal network to communication terminal apparatus in the personal network, a search process of extracting connection source communication terminal information and connection destination communication terminal information from the received connection request, and search connection source communication terminal information from the terminal connection management memory, a registration step of associating and registering in the terminal connection management memory communication terminal information in the personal network and communication terminal information for the connection source if association of communication terminal information in the personal network and communication terminal information of the connection source is associated in the terminal connection management memory at the network the communication terminal apparatus belongs to in the personal network.
Further, the personal network management apparatus of the present invention is a personal network management apparatus managing a personal network comprising a plurality of communication terminal apparatus connected to a network, comprising a terminal connection management section managing registration of communication terminal information for a connection destination every communication terminal apparatus constituting the personal network, a receiving section receiving connection requests from communication terminal apparatus outside the personal network to communication terminal apparatus in the personal network, a search section extracting connection source communication terminal information and connection destination communication terminal information from the received connection request, and search connection source communication terminal information from the terminal connection management section, and a registration section associating and registering in the terminal connection management section communication terminal information in the personal network and communication terminal information for the connection source if association of communication terminal information in the personal network and communication terminal information of the connection source is associated in the terminal connection management section at the network the communication terminal belongs to in the personal network.
According to the present invention, upon an access request from a communication terminal outside a personal network, in the event that association of this communication terminal information with a terminal in the personal network is not yet registered, it is possible to dynamically carry out registration processing as to whether or not connection to the communication terminal inside the personal network is possible, a registration procedure from a communication terminal outside the personal network is straightforward, and access to inside the personal network is possible. Further, by utilizing an authentication function (terminal validity) certified by the operator or encryption (security) of a channel, complex processing using electronic certificates etc. is reduced and processing can be carried out securely.
The following is a detailed description with reference to the drawings of preferred embodiments of the present invention.
In the embodiments below, the cases of operator-managed networks and particularly mobile networks where strong security is provided in a channel is shown for the network but application is also possible to other operator-managed networks than mobile networks.
As shown in
A case is shown here where, with the network system 1 of
Communication control section 201 has a communication I/F function connecting with mobile network 30 and executes communication procedures between mobile terminal 10, mobile/fixed terminal 11 and mobile terminal 12, according to call requests and data communication requests.
DB match confirmation section 202 determines processes corresponding to each request received from mobile terminal 12 via communication control section 201 using process determining section 203, extracts each item of information necessary in the processes using frame analysis section 200, compares each item of extracted information and information stored in terminal identifier management DB 210, terminal connection management DB 220, and terminal attribute management DB 214, and executes database search processing (see
Frame analysis section 200 analyses the frame structure of each request inputted from DB match confirmation section 202, extracts each item of information necessary for processing, and outputs each item of information for a connection destination and a connection source to DB match confirmation section 202.
Terminal identifier management DB 210 is a database for managing user identifiers “UID-1”, “UID-2”, “UID-3” shown in
Connection denial management DB 211 is a database for managing information (for example, “NULL: no setting” and “ALL: all connections denied” etc) denying network connections to each of mobile terminal 10, mobile/fixed terminal 11 and mobile terminal 12 connected to mobile network 30.
Connection permit management DB 212 is a database for managing information (for example, “ALL: all connections permitted” and specific user identifiers etc) permitting network connections to each of mobile terminal 10, mobile/fixed terminal 11 and mobile terminal 12 connected to mobile network 30.
Personal NW management DB 213 is a database managing information for other terminals belonging to a personal network every mobile terminal 10, mobile/fixed terminal 11, and mobile terminal 12 connected to mobile network 30.
Terminal attribute management DB 214 is a database managing terminal attribute information (user identifier, administrator information: master) for each of mobile terminal 10, mobile/fixed terminal 11, and mobile terminal 12 connected to mobile network 30. In this Embodiment, a description is given of a method for managing administrator information using a database but administrator information may also be contained in the user identifier.
An example of terminal connection management DB 220 configured from connection denial management DB 211, connection permit management DB 212, and personal NW management DB 213 is shown in
In this example, “NW connection denial: NULL”, “NW connection permission: ALL”, and “personal NW:UID-2” are recorded in “UID-1,” which represents mobile terminal 10. That is, this example shows that mobile terminal 10 permits network connections from all terminals and shows that mobile/fixed terminal 11 belongs to personal network 40 the terminal belongs to.
Further, “NW connection denial: ALL” and “NW connection permission: UID-1” are registered in “UID-2,” which represents mobile/fixed terminal 11. Namely, it is shown that mobile/fixed terminal 11 only permits connection with mobile terminal 10 and denies network connections from other terminals. Here, the supposed mobile/fixed terminal 11 (for example, mobile/fixed terminal 11) is a management terminal etc. for a home NW managed by the user in possession of mobile terminal 10. In the home NW, it is preferable to deny connections other than from the administrator for security.
Further, “NW connection denial: NULL” and “NW connection permission: ALL” are registered in “UID-3” which represents mobile terminal 12. That is, this example shows that mobile terminal 12 shows that network connection from all terminals is possible.
An example of terminal attribute management DB 214 is shown in
Next, with the network system 1 of
In
The details of this database search processing are now described with reference to the flowchart shown in
In
In this event, the administrator of mobile terminal 10 “UID-1” of the connection destination is “UID-1” and the administrator matches.
Consequently, DB match confirmation section 202 determines whether or not the connection destination and the connection destination “master” match (step S101: YES), step S102 is gone to, and whether “NW connection permit” is registered for mobile terminal 12 “UID-3” that is the connection source by mobile terminal 10 “UID-1” that is the connection destination is confirmed by terminal connection management DB 220 of
In terminal connection management DB 200 of
In step S103, DB match confirmation section 202 confirms whether or not “NW connection denial” is registered by mobile terminal 10 “UID-1” that is the connection destination for mobile terminal 12 “UID-3” that is the connection source by means of terminal connection management DB 220 of
Further, in the event that connection permission is not registered by the connection destination for the connection source in step S102 (step S102: NO), and, further, in the event that connection denial is not registered by the connection destination for the connection source (step S103: YES) in step S103, DB match confirmation section 202 denies connection from mobile terminal 12 to mobile terminal 10 is denied (step S105) and this process is complete.
Further, in the event that the connection destination and the administrator of the connection destination do not match in step S101, for example, in the event that the terminal for the connection destination is a home NW and a terminal managing the home NW exists separately (step S101: NO), step S106 is proceeded to, and DB match confirmation section 202 confirms whether connection denial of the connection source is registered by the connection destination by means of terminal connection management DB 220 of
In the event that connection permit is not set (step S107: NO), DB match confirmation section 202 denies connection from the connection source to the connection destination (step S108), and this process is complete. Further, in step S106, in the event that connection denial is not registered by the connection destination for the connection source (step S106: NO), and, further, in the event that connection permission is registered by the connection destination for the connection source in step S107 (step S107: YES), connection from the connection source to the connection destination is permitted (step S109), and this process is complete.
As a result of the above database search processing, mobile network management apparatus 20 permits connection from mobile terminal 12 to mobile terminal 10 and a channel is connected from mobile terminal 12 to mobile terminal 10 in
Next, a connection permit registration request set with registration request source “UID-1”, registration target “UID-3” and registration request destination “UID-2,” is sent from mobile terminal 10 to mobile network management apparatus 20 (S15). When it is detected in mobile network management apparatus 20 that the request received by process determining section 203 is a connection permit registration request, connection permit registration processing is executed (S16).
The details of this connection permit registration processing are now described with reference to the flowchart shown in
In
In the terminal attribute management DB 214 of
Registration content shown in
Next, DB match confirmation section 202 gives report of registration completion to registration request source “UID-1” from communication control section 201 (step S204), and this process is complete. Further, in the event that it is determined in step S201 that the registration request source does not match with the registration request destination or the “master” of the registration request destination (step S201: NO), DE match conformation section 202 reports that registration is not possible from communication control section 201 to registration request source “UID-1” (step S205), and this process is complete.
Next, returning to
Upon receiving the access request from mobile terminal 12, mobile network management apparatus 20 executes database search processing in the same way as described above in S11 (S19). At this time, in terminal attribute management DB 214 in mobile network management apparatus 20, “UID-3” is already registered in “NW connection permit” of connection destination “UID-2” as a result of connection permit registration processing described above and processing for connecting a channel from mobile terminal 12 to mobile/fixed terminal 11 is executed (S20).
When transfer by mobile network management apparatus 20 is accepted (S21), mobile/fixed terminal 11 establishes a connection with mobile terminal 12 (S22).
As shown above, upon an access request to mobile terminal 10 in personal network 40 from mobile terminal 12 outside personal network 40, information for “NW connection permit” of mobile/fixed terminal 11 and “personal NW” of mobile terminal 12 is additionally registered to terminal attribute management DB 214 in mobile network management apparatus 20.
Next, a description is given with reference to the ladder chart shown in
In
In
In terminal attribute management DB 214 of
Next, DB match confirmation section 202 deletes “personal NW: UID-2” of deletion target “UID-3” of terminal connection management DB 220 of
Further, in the event that it is determined that deletion request source “UID-1” does not match with deletion request destination “UID-2” or “master” of deletion request destination “UID-2” (step S301: NO), DB match confirmation section 202 reports that deletion is not possible at deletion request source “UID-1” from communication control section 201 (step S305), and this process is complete.
As described above, with the network system of Embodiment 1, in the event that an access request is sent from a mobile terminal outside a personal network to a terminal in the personal network, the terminal receiving the access request extracts information necessary to permit connection and sends a connection permit registration request to the mobile network management apparatus, and the mobile network management apparatus then additionally registers connection permit information to the database managing the connection destinations of the terminal in the personal network based on information received with the connection permit registration request.
Therefore, upon an access request from the communication terminal outside a personal network, in the event that association with a terminal in the personal network for this communication terminal information is not yet registered, it is possible to dynamically carry out registration processing as to whether or not connection to a communication terminal is possible, a registration procedure from a communication terminal outside the personal network is straightforward, and access to in the personal network is possible.
In Embodiment 1 described above, a description is given for a case where a personal network is configured with mobile terminals connected to a single mobile network 30 is used as a network system, but, with Embodiment 2, a description will be given of a case of a network system where a personal network is configured with mobile terminals connected to mobile networks of a number of different companies.
A user identifier “company A UID-1” assigning a unique ID to the terminal user from company A is set in mobile terminal 10, user identifier “company C UID-1” assigning a uniquely assigned to the terminal user from company C is set in mobile/fixed terminal 11, and a user Identifier “company B UID-1” uniquely assigned to the terminal user from company B is set in mobile terminal 12.
The configurations for mobile network management apparatus A20, B21 AND C22 of Embodiment 2 are the same as for mobile network management apparatus 20 shown in
In the following, processing for a case where an access request is sent from mobile terminal 12 to mobile terminal 10 will be described using the ladder chart of
First, mobile terminal 12 makes an access request to its own operator's mobile network management apparatus B21 (S10) and mobile network management apparatus B21 executes database search processing using the received access request. This database search processing are now described with reference to the flowchart shown in
In
Next, when the transferred database search request is received, mobile network management apparatus A20 extracts information for the connection destination “company A UID-1” and the connection source “company B UID-1” (step S400). After this, DB match confirmation section 202 determines whether or not extracted connection destination “company A UID-1” is a mobile terminal registered in its own operator's management network, i.e. mobile network A30, by searching terminal identifier management DB 210 (step S401). DB match confirmation section 202 then determines that the extracted connection destination “company A UID-1” is a mobile terminal registered in mobile network A30 (step S401: YES), and the processing of step S403 onwards is executed. Processing from step S403 to step S411 is the same as processing of step S101 to step S109 for
Database search processing of
Returning to
After this, when a connection permit registration request set with registration request source “company A UID-1”, registration target “company B UID-1” and registration request destination “company C UID-1” is sent from mobile terminal 10 to mobile network management apparatus A20, the following connection permit registration process is executed at mobile network management apparatus A20.
A description is now given with reference to the flowchart shown in
In
After this, mobile network management apparatus C22 extracts registration request source “company A UID-1”, registration target “company B UID-1” and registration request destination “company C UID-1” (step S500), determines whether the extracted connection destination “company C UID-1” is a mobile terminal registered in mobile network C32 by means of DB match confirmation section 202 (step S501: YES), and executes processing from step S502 onwards. Processing from step S502 to step S506 is the same as processing of step S201 to step S205 of
Connection permit processing of
An example resulting from execution of the above connection permit registration processing where information permitting connection to each of the administered terminal connection management DB's is registered in mobile network management apparatus A20, mobile network management apparatus B21, and mobile network management apparatus C22 is described with reference to
Here, user identifier information “company C UID-1” of mobile/fixed terminal 11 under the management of mobile terminal 10 is already registered in column “personal NW” in terminal connection management DB 500. Further, user identifier information “company A UID-1” for mobile terminal 10 that is the administrator terminal of mobile/fixed terminal 1 is already registered in column “master” in terminal attribute management DB 610.
By executing the connection permit registration processing by means of terminal connection management DB's 500, 600 and 700 of
Next, processing for mobile terminal 10 “company A UID-1” to delete connection permission with respect to mobile/fixed terminal 11 “company C UID-1” of mobile terminal 12 “company B UID-1” is described with reference to the flowchart shown in
In
Further, in the event that DB match confirmation section 202 determines that the extracted deletion request destination is a mobile terminal registered in its own mobile network A30 (step S601: YES), the process of step S602 onwards is executed. Processing from step S602 to step S606 is the same as processing of step S301 to step S305 for
Connection deletion processing of
Next, a description is given with reference to
In terminal connection management DB 700 of
Further, in terminal attribute management DB 710 of (b) of the same, user identifier information “UID-2” for mobile/fixed terminal 13 and this administrator terminal information “UID-1” are already registered as mobile terminal attribute information for mobile/fixed terminal 13.
Next, a description is given with reference to the ladder chart of
In
When connection from mobile network management apparatus A20 is accepted (S44), mobile terminal 10 establishes a connection with mobile terminal 12 (S45). At this time, a user identifier “company B UID-2” for mobile/fixed terminal 13 constituting a registration target is transmitted. Next, mobile terminal 10 sends a connection permit registration request set with registration request source “company A UID-1”, registration target “company B UID-2” and registration request destination “company C UID-1” to mobile network management apparatus A20. When the connection permit registration request is received, mobile network management apparatus A20 executes connection permit registration processing (S47).
At this time the connection permit registration process of
At mobile network management apparatus C22, user identifier information “company B UID-2” of mobile/fixed terminal 13 is additionally registered as a new network connection permit destination in terminal connection management DB 600 shown in
Further, in terminal connection management DB 700 of mobile network management apparatus B21, as shown in
Returning to
When mobile/fixed terminal 13 receives connection destination report, an access request set with this connection destination “company C UID-1” is sent to mobile network management apparatus C22 via mobile network management apparatus B21 (S50 and S51). Upon receiving the access request from mobile/fixed terminal 13, mobile network management apparatus C22 executes database search processing (S51) in the same way as described above (S42). At this time, in terminal connection management DB 700 in mobile network management apparatus C22, “company B UID-2” is already registered in “NW connection permit” of connection destination “UID-1”, and a process for connecting a channel from mobile/fixed terminal 13 to mobile/fixed terminal 11 is executed (S52).
When a connection from mobile network management apparatus C22 is accepted (S53), mobile/fixed terminal 11 establishes a connection with mobile/fixed terminal 13 (S54).
In this way, in the network system of Embodiment 2, in the event that an access request is sent from a terminal outside a personal network configured from a plurality of communication terminals connected to a plurality of different networks, the mobile terminal receiving the access request extracts information necessary for connection permission and sends a connection permit registration request to the mobile network management apparatus. The management apparatus for the mobile network the terminals constituting the personal network are connected to then additionally registers connection permit information in the database managing connections of the mobile terminals in the personal network based on information received with the connection permit registration request.
In the event that association with a terminal in a personal network of this communication terminal information is not yet registered upon an access request from a communication terminal connected to an external network to a personal network constituted by a plurality of communication terminals connected to a plurality of different networks, it is possible to carry out registration processing for the possibility of connect to this communication terminal dynamically, the registration procedure from the communication terminal outside the personal network becomes straightforward, and access to inside the personal network is possible.
In the description of Embodiments 1 and 2, an example is shown of a case where the registration request destination consists of one terminal in the connection permit registration request of S15 of
Further, in another method, as shown in
Next, a description is given with reference to the ladder flowchart shown in
In
In
Next, a group identifier is set for terminals selected from in the results shown to the group registration request source, this is registered in terminal group table 215a in group management database 215 (step S602), the group registration request source is reported completion of registration (step S603), and this process is complete.
Further, a description is given with reference to the ladder chart shown in
In
In
Next, a request from the group deletion request source is determined (step S702), and in the event of a request to delete an entire group (step S302: YES), the group selected for deletion is deleted from terminal group table 215a in group management database 215 (step S703), completion of deletion is reported to the group deletion request source (step S706), and this process is complete. Further, in step S702, in the event that the deletion request is for individual terminals registered as a group (step S702: NO), terminals registered as selected groups are extracted and shown to the group deletion request source (step S704). After this, terminals selected for deletion are deleted from groups from terminal group table 215a in group management database 215 (step S705), the group deletion request source is reported completion of deletion (step S706), and this process is complete.
An example is shown for Embodiment 1 taking an example of connection permit registration processing to a plurality of terminals but it is a straightforward analogy that is also applicable to Embodiment 2.
In Embodiments 1, 2 and 3, that representing the mobile terminal and the mobile/fixed terminal is seen to be management terminals of a personal network such as a home network or PAN (Private Area Network) etc. so that application enabling management of accesses to in elements of a personal network is possible. Further, management at a device level is possible by applying the present invention to devices in these personal network elements.
As an example of this, a description is given using
Device 60 and device 61 have DEV1 and DEV2, respectively, as device identifiers. If this device identifier can be identified by an operator, the device identifier can be handled in the same way as the user identifier described in Embodiment 1, and at mobile network management apparatus 20, connection management in individual device units is also possible by carrying out connection management relating to connection to device 60.
Regarding connection management of this device, by carrying out management using fixed terminal 11, for example, connections to home network 50 (i.e. fixed terminal 11) of
As shown above, upon an access from an external personal network, via mobile network 30, to device 60 or device 61, in the event that association with the device in the personal network is not yet registered for this communication terminal information, it is possible to dynamically carry out registration processing as to whether or not connection to a communication terminal is possible, a registration procedure from outside the personal network is straightforward, and access to inside the personal network is possible.
In Embodiments 1, 2, 3 and 4 described above, a case is shown where a mobile terminal or mobile/fixed terminal and management terminal “master” are registered one-to-one but a configuration for a case where a mobile terminal belonging to a certain personal network or a mobile/fixed terminal is an administrator terminal belonging to the personal network and an administrator terminal belonging to another personal network are shared, i.e. a registration in a one-to-many relationship, can also be considered. The present invention can therefore also be applied to this kind of personal network configuration.
The present application is based on Japanese Patent Application No. 2005-195616, filed on Jul. 4, 2005, and Japanese Patent Application No. 2006-029060, filed on Feb. 6, 2006, the entire contents of which are expressly incorporated herein by reference.
The present invention is therefore useful as a personal network system etc. where, upon an access request from the communication terminal outside a personal network, in the event that association of this communication terminal information with a terminal inside the personal network is not yet registered, it is possible to dynamically carry out registration processing as to whether or not connection to the communication terminal in the personal network is possible, the registration procedure from the communication terminal outside the personal network is straightforward, and access to inside the personal network is possible.
Number | Date | Country | Kind |
---|---|---|---|
2005-195616 | Jul 2005 | JP | national |
2006-029060 | Feb 2006 | JP | national |
Filing Document | Filing Date | Country | Kind | 371c Date |
---|---|---|---|---|
PCT/JP2006/313253 | 7/3/2006 | WO | 00 | 2/20/2008 |