JP2004127187A - Internet access system - Google Patents

Abstract

An object of the present invention is to provide a highly secure Internet access system in which a user can easily connect to a wireless LAN in a wireless LAN access service area, and can securely and efficiently access and browse a Web page provided by a business operator. .
In a terminal, client software (terminal setting means) automatically performs setting of the terminal based on setting information of a wireless LAN access point, and a user connects his / her own terminal to the wireless LAN access point. This eliminates the need for complicated setting work.
The authentication server is provided with an authentication unit for authenticating the user and a Web page address notifying unit for allowing the user who has obtained the authentication to browse a Web page on which the information service provided by the business entity is posted.
The terminal 11 has a Web browser activation unit, activates the Web page browsing unit based on the Web page address notified from the authentication server, and displays the corresponding Web page.
[Selection diagram] Fig. 1

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an Internet access system that allows a user terminal to access the Internet using a wireless LAN. In particular, in a wireless LAN access service area that provides an environment, a user terminal can easily connect to a wireless LAN, The present invention relates to a highly secure Internet access system that automatically accesses a Web page or the like on which an information service provided by a user is displayed and displays the Web page on a user terminal.
[Prior art]
In recent years, a system for accessing the Internet using a wireless LAN has been provided and is becoming popular.
[0002]
A place where an environment in which the wireless LAN can be used to access the Internet is provided is called a wireless LAN access service area.
[0003]
A user having a personal computer (personal computer) or a personal digital assistant (PDA) that can access a wireless LAN goes to a wireless LAN access service area provided at an arbitrary location, accesses the wireless LAN in the wireless LAN access service area, and enters his / her home. You can enjoy the same Internet service as in the office.
[0004]
In the wireless LAN access service area, devices such as a wireless LAN access point and a LAN router for wirelessly connecting to a user terminal are installed, and a system environment has been constructed such that the Internet can be accessed via an IP network.
[0005]
Such an Internet access system using a wireless LAN is becoming popular with an increase in users and wireless LAN access service areas.
[0006]
FIG. 9 is a schematic diagram showing a configuration of a conventional Internet access system using a wireless LAN in a wireless LAN access service area.
[0007]
As shown in FIG. 9, the Internet access system 99 includes a terminal 11 (user's personal computer, PDA, or the like) having an environment that can be connected to the wireless LAN 90, and a wireless LAN access point device (AP) 12 (hereinafter, referred to as “AP12”). , A Web server 94, a content server 95, a network management device 16, a DHCP server 17, an authentication server 98, and a router 21. The router 21 of the wireless LAN 90 can access the Internet 26 via the IP network 25.
[0008]
In order for the user to connect to the wireless LAN 90 from the terminal 11, it is necessary to set a wireless LAN device (not shown) of the terminal 11 to the same value as the setting value of the ESS-ID and WEP of the wireless LAN access point device 12 (AP12). There is.
[0009]
Therefore, in order to allow the user to easily connect to the wireless LAN 90, the ESS-ID of the AP 12 is set to, for example, "ANY" and the WEP is set to "None" so that the authentication and encryption of the user are not performed. 11 can be easily connected to the wireless LAN 90.
[0010]
The setting information of the AP 12 to the user (for example, “CH: 6”, “ESS-ID: ANY”, “WEP: None”, etc.) is posted on a bulletin board or the like in the wireless LAN access service area to notify the user. To do.
[0011]
However, since the setting of the AP 12 is such that the ESS-ID is an open value and the encryption protocol is not implemented, security such as theft of communication data or unauthorized access is low. Had a problem.
Therefore, in order to improve these problems, the provision of a highly secure Internet access system in which user authentication and encryption are strengthened is increasing.
[0012]
FIG. 10 is a schematic diagram showing the configuration of a highly secure Internet access system in which user authentication and encryption are strengthened.
[0013]
In FIG. 10, the same reference numerals are given to the same devices as those shown in FIG. 9 for convenience of explanation.
[0014]
As shown in FIG. 10, the Internet access system 100 sets the ESS-ID of the setting information of the AP 13 to a specific value (for example, “ESS-ID: AP2”) so that the terminals 11 having different ESS-IDs connect to the wireless LAN 90. You can refuse to do so. Also, by setting the WEP to a specific value (for example, “WEP: abc-xyz”), an encryption protocol between the terminal 11 and the wireless LAN is implemented, thereby increasing the concealment of the wireless signal and preventing theft of communication data. The configuration is such that only a user who has been authenticated for a usage right can connect to the Internet access system 100.
[0015]
For a company providing a wireless LAN access service area, a wireless LAN access service can be provided by constructing and providing an Internet access system capable of distributing more information than users can obtain from their homes and offices via the Internet. The use of the area is promoted, and it is possible to produce a merit of attracting many customers around the wireless LAN access service area and encouraging users to increase consumption.
[0016]
In this manner, the wireless LAN access service area allows the user to receive the service with high information density provided by the business operator, and encourages the business operator to increase the consumption of the user who has attracted customers in the wireless LAN access service area. Can create benefits.
[0017]
[Problems to be solved by the invention]
FIG. 11 shows a connection flow from when the user of the highly secure Internet access system 100 shown in FIG. 10 connects to the wireless LAN 90 and receives the information service provided by the business operator.
[0018]
As shown in FIG. 11, the user activates the wireless LAN connection software 111 to connect to the AP 13 of the wireless LAN 90 and sets the user terminal 11 to the setting information of the AP 13 (for example, “ch: 11”, “ESS-ID: AP2 "and" Wep: abc-xyz ").
[0019]
The setting information, ID, PASSWORD, and the like of the AP 13 are notified from the business to each user.
[0020]
Although the security of the Internet access system 100 as shown in FIG. 10 is enhanced, the user needs to perform the setting work of the terminal 11 based on the setting information of the AP 13, and the operation becomes complicated.
[0021]
In order for a user to receive an information service provided by a business operator, it is necessary to specify a Web server address of a Web page on which the information service is posted using, for example, a Web page browsing unit and access the Web server.
[0022]
However, in many cases, the user brings his / her own terminal 11 into the wireless LAN access service area and uses it. When the Web browser software 113 of the terminal 11 is activated, the user is accessed to the Web page of the Web server address registered by the user. I will.
[0023]
In order for a user to browse a Web page or the like on which an information service provided by a business is published, the business must notify the user of the address of the Web page on which the information service is published. .
[0024]
Therefore, the business operator has to provide the user with an Internet access system that enables the user to access the Web page on which the information service is posted with certainty and efficiency.
[0025]
Therefore, the present invention enables a user in a wireless LAN access service area to easily connect to a wireless LAN, securely and efficiently browse a Web page or the like on which an information service provided by a business operator is provided, and to provide communication data. It is an object of the present invention to provide a highly secure Internet access system that can prevent plagiarism and unauthorized access.
[0026]
[Means for Solving the Problems]
In order to achieve the above object, the present invention has a user terminal, a wireless LAN, and various servers including an authentication server that performs an authentication procedure when connecting the user terminal to the wireless LAN access point, In an Internet access system for accessing the Internet from the user terminal via the wireless LAN access point, the user terminal sets, in its own terminal, setting information relating to connection to the wireless LAN access point, A terminal setting means for sending a connection request to the wireless LAN access point based on the set information and performing an authentication procedure with the authentication server; and after completing the authentication procedure, from any of the servers. The web page browsing unit is activated based on the notified web page address, and the corresponding web page is accessed. A web browser starting means for displaying a web page, a database means for storing setting information, authentication information, and a web page address relating to connection to the wireless LAN access point in the arbitrary server; Setting information notifying means for searching the database for the setting information and notifying the user terminal after the completion of the authentication procedure in the authentication server for the connection request from the user terminal, and after notifying the setting information, Web page address notifying means for retrieving the Web page address and notifying the user terminal is provided.
[0027]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the Internet access system according to the present invention will be described with reference to the accompanying drawings.
[0028]
FIG. 1 is a schematic diagram showing an example of an embodiment of the Internet access system of the present invention in a wireless LAN access service area.
[0029]
Note that, in FIG. 1, the same reference numerals are given to the same devices as those shown in FIGS. 9 and 10 for convenience of description.
[0030]
As shown in FIG. 1, the Internet access system 29 includes a LAN 27 and a wireless LAN 28.
[0031]
A router 21, a router 20, and a wide-area public Web server 19 are connected to the LAN 27.
[0032]
The wireless LAN 28 includes a router 20, a local Web server 14, a local content server 15, a network management device 16, a DHCP server 17, an authentication server 18, a wireless LAN access point device 12 (AP12), and a wireless LAN access point device 13 (AP13). It is connected.
[0033]
The Internet access system 29 includes a client software 22 that activates the settings and programs of the terminal 11 so that the user terminal 11 can connect to the wireless LAN 28 to receive the information service provided by the provider, and the information service provided by the provider. It has manager software 23 for performing necessary processing for providing the terminal 11.
[0034]
The user can receive the information service provided by the business operator by obtaining and activating the client software 22.
[0035]
In order to use the Internet access system 29 of the present invention, the user needs at least the terminal 11 having the following configuration.
[0036]
A personal computer or a personal digital assistant (PDA) having a wireless LAN device (not shown) required to connect to the wireless LAN 28 and Web browser software 211 for browsing Web pages.
[0037]
The router 21 connects to the Internet 26 via the IP network 25 and routes packet data from the LAN 27 and the wireless LAN 28 to the IP network 25.
[0038]
The router 20 has a function of performing routing between the LAN 27 and the wireless LAN 28 and blocking a packet input from the router 21.
[0039]
The wide area public Web server 19 is a server having a Web page and contents that can be referred to from the terminal 11 connected to the Internet 26 and the wireless LAN 28.
[0040]
The local Web server 14 and the local content server 15 are servers that have Web pages and contents that can be referred to from the terminal 11 connected to the wireless LAN 28.
The DHCP server 17 is a server that assigns an IP address to the terminal 11 connected to the wireless LAN 28.
[0041]
The authentication server 18 is a server having an authentication unit for rejecting a person other than a user having an ID and a password registered in advance from connecting to the wireless LAN 28 and preventing unauthorized access.
[0042]
The authentication server 18 includes a database in which user IDs and passwords are registered, a database in which setting information of each AP is registered, a database in which Web server address information of a Web page on which an information service provided by a business is registered, and manager software. 23 is stored in the database 24.
[0043]
The network management device 16 is a device for maintaining and managing each router, each server, and each wireless LAN access point (AP).
[0044]
The AP 12 is a wireless LAN access point to which the ESS-ID is widely and generally known, does not perform encryption, and does not consider security, and the user terminal 11 is connected first.
[0045]
The AP 13 restricts the ESS-ID, performs encryption, and is set in consideration of security. The AP 13 is a wireless LAN access point to which the terminal 11 of the user who wants to browse the information service provided by the provider is connected. is there.
[0046]
The information on these APs 12 and 13 is stored in the database 24 as AP setting information.
[0047]
The wide area public Web server 19 can be referred to via the Internet 26 and the AP 13, but the local Web server 14 and the local content server 15 can only refer to the terminal 11 connected to the AP 13 by the routing function of the router 20. It has such a configuration.
[0048]
With such a configuration, the user of the Internet access system 29 of the present invention can enjoy more information and content services than the information obtained from the home or office via the Internet.
[0049]
In the first embodiment, the setting of the terminal 11 and the activation of the Web browser are realized by the client software 22 mounted on the terminal 11, and the notification of the AP setting information and the Web server address notification are realized by the manager software 23 mounted on the authentication server 18. The description is made on the assumption that
[0050]
It is assumed that the user of the Internet access system 29 has been notified of the ID and password from the business operator in advance, and has been provided with the client software 22, and then the client software 22 has been installed on the terminal 11 of the user.
[0051]
The AP 12 is set so as not to perform authentication and encryption so that the user can easily connect to the wireless LAN 28 (for example, “ch: 6”, “ESS-ID: ANY”, “Wep: none”).
[0052]
The AP 13 performs settings for performing authentication and encryption (for example, “ch: 11”, “ESS-ID: AP2”, “AP”) so that only the user terminal 11 that desires the information service provided by the provider can be connected. Wep: abc-xyz ”).
[0053]
FIG. 2 shows a connection flow from when the client software 22 is installed in the user terminal 11 to when the client software 22 is activated and the information service provided by the provider is displayed on the user terminal 11 in the first embodiment. It is shown.
[0054]
A connection flow from starting the client software 22 to displaying a Web page on which an information service is displayed on the terminal 11 of the user will be described below with reference to FIG.
[0055]
First, the user starts the client software 22 installed on the terminal 11.
[0056]
When the client software 22 is started, the used radio waves of each AP of the wireless LAN 28 are monitored via a wireless LAN device (not shown) of the user terminal 11, and the used channel (for example, ch: 6) information of the AP 12 is obtained.
The client software 22 sets the settings of the terminal 11 based on the acquired use channel (ch: 6) information of the AP 12 to the setting information of the AP 12 (for example, “ch: 6”, “ESS-ID: ANY”, “Wep: none”). After setting the same value as, the AP 12 is requested to connect.
[0057]
Since the AP 12 is set not to perform the authentication and the encryption, the connection to the AP 12 can be easily performed if the channel to be used can be specified.
[0058]
The connection request from the terminal 11 is transmitted to the manager software 23 stored in the authentication server 18 via the AP 12.
[0059]
The manager software 23 that has received the connection request from the terminal 11 transmits the setting information of the AP 13 (for example, “ch: 11”, “ESS-ID: AP2”, “Wep: abc-”) from the database 24 stored in the authentication server 18. xyz ”), and notifies the terminal 11 of a connection permission response to the AP 12 together with the extracted setting information of the AP 13 via the AP 12.
[0060]
The client software 22 of the terminal 11 that has received the setting information of the AP 13 sets the terminal 11 to the same value as the setting information of the AP 13 (“ch: 11”, “ESS-ID: AP2”, “Wep: abc-xyz”). After the setting is made to enable connection with the AP 13, a connection request is made to the AP 13.
[0061]
The connection request from the terminal 11 is transmitted to the manager software 23 via the AP 13. The manager software 23 that has received the connection request from the terminal 11 notifies the terminal 11 of the input request of the ID and the password via the AP 13.
[0062]
The ID and password input request notified to the terminal 11 is displayed on the terminal 11 by the client software 22 as an ID and password input request screen (not shown), and the user inputs the ID and password notified in advance. Urge you to
[0063]
The ID and password input by the user are transmitted from the terminal 11 to the manager software 23 of the authentication server 18 via the AP 13.
[0064]
The manager software 23 checks the ID and password input by the user against the ID and password registered in the database 24 of the authentication server 18 to determine whether the user has the right to use.
[0065]
The manager software 23 extracts Web server address information from the database 24 only when the ID and password entered by the user match the ID and password registered in the database 24, and extracts the extracted Web server address information. Then, the terminal 11 is notified of the connection permission response of the AP 13 via the AP 13.
[0066]
The client software 22 of the terminal 11 that has received the Web server address information sets the Web server address based on the received Web server address information, and activates the Web browser software 211.
[0067]
As the Web server address information, a Web server address or the like (eg, a local Web server address “192.168.1.35”) that stores a homepage or the like that the business operator wants the user to view first is stored. I have.
[0068]
When the client software 22 sets the Web server address and starts the Web browser software 211, a homepage that the business operator wants the user to view first is displayed on the terminal 11.
[0069]
For example, when the Web browser software is Internet Explorer, the application is started by setting “explore.exe 192.168.1.35”.
[0070]
When the web browser software “explore.exe 192.168.1.35” is started, it is connected to the local web server 14 via the AP 13 and the router 20.
[0071]
The Web server 14 connects to the homepage of the address corresponding to the Web server address “192.168.1.35”, and the connected homepage is transmitted to the terminal 11 via the AP 13 and displayed.
[0072]
Through such a series of processes, the user's terminal 11 is automatically connected to the AP 13 of the wireless LAN access point, and the terminal 11 displays a home page that the business operator wants the user to view first.
[0073]
Next, client software and manager software according to the first embodiment will be described below.
[0074]
First, the client software 22 includes monitoring means, connecting means, terminal setting means, and Web browser starting means.
[0075]
The monitoring means monitors a radio wave used by the wireless LAN 28 and specifies a channel (ch) set by the AP 12.
[0076]
The connection means transmits a connection request between the terminal 11 and each AP and data input from the terminal 11 to each AP, receives each AP setting information and data transmitted from each AP, and receives these information and data. Is transmitted to the terminal setting means and the Web browser starting means.
[0077]
The terminal setting means sets the terminal 11 based on the AP setting information.
[0078]
The Web browser starting unit sets a Web address based on the Web address information and starts the browser software.
[0079]
FIG. 3 shows a processing flow of the client software 22 in the first embodiment.
[0080]
The processing flow of the client software 22 will be described below with reference to FIG.
[0081]
When the client software 22 is started, the monitoring means of the client software 22 monitors the radio wave used by the AP 12, specifies the channel (setting channel) used by the AP 12, and sets the channel setting information (eg, "ch: 6") of the AP 12 as the terminal setting means. (Step 300).
[0082]
The terminal setting means sets the terminal 11 based on the setting information (“ch: 6”) of the AP 12 (Step 301).
[0083]
The AP 12 is set so as not to perform authentication and encryption (for example, “ch: 6”, “ESS-ID: ANY”, “Wep: none”) so that the user can easily connect to the wireless LAN 28. If the setting channel (for example, “ch: 6”) can be specified, connection to the AP 12 can be easily performed.
[0084]
After the terminal 11 is set to be connectable to the AP 12 by the terminal setting means, a connection request to the AP 12 is made by the connection means (step 302).
[0085]
After the connection request to the AP 12, the connection unit waits for a response from the AP 12, and performs processing according to the content of the response from the AP 12.
[0086]
The connection unit that has received the connection permission response from the AP 12 and the setting information of the AP 13 transmits the setting information of the AP 13 to the terminal setting unit (step 303 / YES).
[0087]
The terminal setting means sets the terminal 11 based on the setting information of the AP 13 from the setting state of the AP 12 (for example, “ch: 6”, “ESS-ID: ANY”, “Wep: none”) based on the setting information of the AP 13 (eg, ch: 11 ”,“ ESS-ID: AP2 ”,“ Wep: abc-xyz ”) (step 304).
[0088]
After the terminal 11 is set to be connectable to the AP 13 by the terminal setting means, a connection request to the AP 13 is made by the connection means (step 305).
[0089]
Upon receiving the ID and PASSWORD input request from the AP 13, the connection unit displays an ID and password input request screen (not shown) on the terminal 11 to prompt the user to input the ID and password (step 306 / YES, step 307). ).
[0090]
Since the user is notified in advance of the ID and password to the user from the business operator, the user inputs the notified ID and password.
[0091]
The ID and password input by the user are transmitted to the AP 13 by the connection means (step 308 / YES, step 309).
[0092]
The ID and password entered by the user are authenticated by the authentication means of the authentication server 18 to determine whether the user has the right to use.
[0093]
When the ID and password input by the user are authenticated, a connection permission response and Web server address information are transmitted from the AP 13 to the terminal 11.
[0094]
The Web server address information transmitted from the AP 13 is transmitted to the Web browser activation unit by the connection unit.
[0095]
The Web browser starting unit sets the Web server address based on the Web server address information and starts the Web browser software (Steps 311 and 312).
[0096]
When the Web browser software is activated, a Web page (a page that the business operator wants the user to browse first) of the set Web server address is displayed on the terminal 11.
[0097]
Next, the manager software 23 will be described below.
[0098]
The manager software 23 includes a connection receiving unit, an AP setting information notifying unit, an authentication unit, and a Web page address notifying unit.
[0099]
The connection accepting unit, when receiving a connection request from the terminal 11 via an AP (for example, the AP 12) for which authentication and encryption are not set, transmits the connection request to the AP setting information notifying unit, and When the connection request is received via an AP (for example, AP 13) for which authentication and encryption are set, the connection request is transmitted to the authentication unit.
[0100]
The connection accepting unit transmits information output from each unit of the AP setting information notifying unit, the authentication unit, and the Web page address notifying unit to the terminal 11 via each AP.
[0101]
The AP setting information notifying unit extracts predetermined AP setting information from the database 24 in which each AP setting information stored in an arbitrary server (for example, the authentication server 18) is registered, and transmits the extracted AP setting information to the connection receiving unit.
[0102]
The authentication unit checks the ID and password information input by the user with the ID and password information stored in the database 24 of an arbitrary server (for example, the authentication server 18). If the ID and password entered by the user match the ID and password registered in the database 24, the ID and password information is transmitted to the Web page address notifying means.
[0103]
If the ID and password entered by the user do not match the ID and password registered in the database 24, connection rejection processing is performed, and a connection rejection response is transmitted to the connection accepting means.
[0104]
The Web page address notifying unit is configured to output a Web page address corresponding to the user ID from Web page address information stored in the database 24 of an arbitrary server (for example, the authentication server 18) based on the ID and password information transmitted from the authentication unit. The information is extracted and transmitted to the connection receiving means.
[0105]
FIG. 4 shows a processing flow of the manager software 23 of the first embodiment.
[0106]
The processing flow of the manager software 23 will be described below with reference to FIG.
[0107]
The connection receiving unit that has received the connection request from the terminal 11 checks which AP (for example, the AP 12 or the AP 13) has received the connection request (Step 400, Step 401).
[0108]
When the connection accepting unit receives a connection request from the terminal 11 via the AP 12, the AP setting information notifying unit selects the AP 13 from the AP setting information registered in the database 24 of an arbitrary server (for example, the authentication server 18). The setting information is extracted, and the extracted AP13 setting information is notified to the terminal 11 via the AP 12 (step 401 / NO, steps 407, 408).
[0109]
When the connection receiving means receives a connection request from the terminal 11 via the AP 13, it is confirmed whether an ID and a password have been input from the user's terminal 11 (step 401 / YES, step 402).
[0110]
When the ID and the password are not input from the terminal 11, the input request of the ID and the password is notified to the terminal 11 via the AP 13 (Step 402 / NO, Step 409, Step 410).
[0111]
When the ID and the password are input from the terminal 11, the ID and the password input by the user are compared with the ID and the password registered in the database 24 by the authentication means (step 402 / YES, step 403).
[0112]
If the ID and password entered by the user match the ID and password registered in the database 24, the ID and password are registered in the database 24 of an arbitrary server (for example, the authentication server 18) by the Web page address notifying means. Web server address information corresponding to the user ID is extracted from the existing Web server address information (step 404 / 'match', step 406).
[0113]
The extracted Web server address information is notified to the terminal 11 via the AP 13 (Step 410).
[0114]
If the ID and password entered by the user do not match the ID and password registered in the database 24, connection rejection processing is performed, and the terminal 11 is notified of the connection rejection via the AP 13 (step). 404 / 'mismatch', step 405, step 410).
[0115]
In the first embodiment, a method has been described in which after the client software is installed in the user terminal in advance, the client software is activated and the user receives the information service provided by the business operator.
[0116]
The Internet access system of the present invention can register the client software in an arbitrary server, for example, an authentication server, and download the client software to the user terminal every time the user makes a connection request to the wireless LAN access point. It is.
[0117]
A case where a user downloads and acquires client software from an arbitrary server and receives an information service provided by a business entity will be described below as a second embodiment.
[0118]
FIG. 5 shows a connection flow from when the client software is downloaded from an arbitrary server until the Web page on which the information service provided by the provider is displayed is displayed on the user terminal in the second embodiment. is there.
[0119]
A connection flow until a Web page on which an information service is posted is displayed on a user terminal will be described below with reference to FIG.
[0120]
First, the user uses the accessory driver software 114 of the wireless LAN device (not shown) of the terminal 11 to change the setting of the terminal 11 to the setting information of the AP 12 (for example, “ch: 6”, “ESS-ID: ANY”, “ After setting the same value as “Wep: none”) to enable connection with the AP 12, a connection request is made to the AP 12 of the wireless LAN 28.
[0121]
The connection request transmitted from the terminal 11 is transmitted to the manager software 33 stored in the authentication server 18 via the AP 12.
[0122]
The manager software 33 extracts the setting information (for example, “ch: 11”, “ESS-ID: AP2”, and “Wep: abc-xyz”) of the AP 13 from the database 24 stored in the authentication server 18.
[0123]
The setting information of the AP 13 and the connection permission response to the AP 12 extracted by the manager software 33 are transmitted to the terminal 11 via the AP 12, and the client software 32 stored in the authentication server 18 is downloaded to the terminal 11.
[0124]
The client software 32 is automatically activated when downloaded to the terminal 11. When the client software 32 is started, the client software 32 sets the setting of the terminal 11 to the same value as the setting information of the AP 13 and then requests connection to the AP 13.
[0125]
The connection request transmitted from the terminal 11 is transmitted to the manager software 33 via the AP 13.
[0126]
The manager software 33 notifies the terminal 11 of an input request for an ID and a password to the terminal 11 via the AP 13.
[0127]
The terminal 11 that has received the ID and password input request displays an ID and password input request screen (not shown) on the terminal 11 by the client software 32 to prompt the user to input.
[0128]
The ID and password input by the user are transmitted from the terminal 11 to the manager software 33 of the authentication server 18 via the AP 13.
[0129]
The manager software 33 checks the ID and password entered by the user against the ID and password registered in the database 24 of the authentication server 18 to determine whether the user has the right to use.
[0130]
The manager software 33 extracts Web server address information from the database 24 only when the ID and password entered by the user match the ID and password registered in the database 24, and extracts the extracted Web server address information. Then, the terminal 11 is notified of the connection permission response of the AP 13 via the AP 13.
[0131]
The client software 32 of the terminal 11 that has received the Web server address information sets the Web server address based on the received Web server address information, and activates the Web browser software 511.
[0132]
When the Web browser software 511 is activated, the terminal 11 displays a home page that the business operator wants the user to browse first.
[0133]
In the second embodiment, the method of downloading the client software to the user terminal and activating the client software has been described. However, it is also possible to activate the client software on the network without downloading the client software to the user terminal.
[0134]
The client software 32 and the manager software 33 according to the second embodiment will be described below.
[0135]
The client software 32 includes connection means, terminal setting means, and Web browser activation means.
[0136]
FIG. 6 shows a processing flow of the client software 32 of the second embodiment.
[0137]
As shown in FIG. 6, the client software 32 of the second embodiment is configured to monitor the client software 22 of the first embodiment (processing (step 300) of acquiring the set CH information of the AP 12 shown in FIG. 3) to a connection request to the AP 12. (Step 302)) is the same as the case of the first embodiment (steps 303 to 312 shown in FIG. 3) except that the processing of (step 302) is omitted, and therefore the description of the client software 32 of the second embodiment is omitted.
[0138]
FIG. 7 shows a processing flow of the manager software 33 of the second embodiment.
[0139]
The processing flow of the manager software 33 will be described below with reference to FIG.
[0140]
The user activates the accessory driver software 114 of the wireless LAN device (not shown) of the terminal 11, sets the terminal 11 based on the setting information of the AP 12, and requests the AP 12 to connect.
[0141]
The connection accepting unit that has received the connection request transmitted from the terminal 11 checks which AP (for example, the AP 12 or the AP 13) has received the connection request (Step 700, Step 701).
[0142]
When the connection accepting unit receives a connection request from the terminal 11 via the AP 12, the AP setting information notifying unit selects the AP 13 from the AP setting information registered in the database 24 of an arbitrary server (for example, the authentication server 18). , And notifies the terminal 11 of the AP13 setting information via the AP12, and downloads the client software 32 stored in the authentication server 18 to the terminal 11. (Step 701 / NO, Step 707, Step 708).
[0143]
When the connection accepting means receives a connection request from the terminal 11 via the AP 13, it checks whether an ID and a password have been input from the user's terminal 11 (step 701 / YES, step 702).
[0144]
Since the subsequent processing flow is the same as the processing flow of the manager software 23 of the first embodiment shown in FIG. 4, the description is omitted here.
[0145]
In the first and second embodiments, the AP 12 having no authentication and encryption settings and the AP 13 having the authentication and encryption settings are physically connected to the Internet access by two wireless LAN access points. An example of the system has been described.
[0146]
The present invention can also provide an Internet access system as a configuration having both the function of the AP 12 without security and the function of the AP 13 with security implemented in one wireless LAN access point.
[0147]
FIG. 8 shows the configuration of an Internet access system having a configuration in which one wireless LAN access point has a wireless LAN access point 123 (AP123) having both functions of an AP 12 having no security and an AP 13 having security. It is the schematic shown as Embodiment 3.
[0148]
The method of connecting the user to the Internet access system 40 and receiving the information service provided by the business operator is the same as in the first and second embodiments, and thus the description is omitted here.
[0149]
【The invention's effect】
As described above, according to the present invention, since the terminal setting means for setting the setting information relating to the connection to the wireless LAN access point to the user terminal is provided, the user in the wireless LAN access service area can use his / her own terminal. A high-security Internet access system that can be easily connected to a wireless LAN system, and can prevent theft and unauthorized access of communication data, by eliminating complicated setting operations when connecting to a wireless LAN access point. Can be provided.
[0150]
Further, in the present invention, the terminal is provided with a Web browser starting means for starting a Web page browsing means based on a Web page address notified from an arbitrary server and displaying a corresponding Web page. It is possible to provide an Internet access system that allows a user to access a Web page provided by a business operator from his / her own terminal with certainty and efficiency effectively and reliably, and to refer to it.
[Brief description of the drawings]
FIG. 1 is a schematic diagram showing an embodiment of an Internet access system of the present invention.
FIG. 2 is a diagram showing a connection flow of the first embodiment.
FIG. 3 is a diagram showing a processing flow of client software in the first embodiment.
FIG. 4 is a diagram showing a processing flow of manager software according to the first embodiment.
FIG. 5 is a diagram illustrating a connection flow according to a second embodiment.
FIG. 6 is a diagram showing a processing flow of client software in the second embodiment.
FIG. 7 is a diagram showing a processing flow of manager software in the second embodiment.
FIG. 8 is a schematic diagram illustrating an Internet access system according to a third embodiment.
FIG. 9 is a schematic diagram showing an example of a conventional Internet access system.
FIG. 10 is a schematic diagram showing another example of a conventional Internet access system.
FIG. 11 is a diagram showing a connection flow of another example in the related art.
[Explanation of symbols]
11 User terminal
12 Wireless LAN access point without authentication and encoding settings
13 Wireless LAN Access Point with Authentication and Encoding Settings
14 Local Web Server
15 Local content server
16 Network management device
17 DHCP server
18 Authentication server
19 Wide Area Public Web Server
20, 21 router
22 Client Software
23 Manager software
24 Database
25 IP Network
26 Internet
29 Internet Access System

Claims (6)

A user terminal, a wireless LAN, and various servers including an authentication server for performing an authentication procedure when connecting the user terminal to the wireless LAN access point; Internet access system that accesses the Internet via
The user terminal,
Setting information relating to connection to the wireless LAN access point is set in the terminal, and a connection request is sent to the wireless LAN access point based on the set information, and an authentication procedure is performed with the authentication server. Terminal setting means for performing
After the completion of the authentication procedure, a web browser starting unit that starts up a web page browsing unit based on a web page address notified from any of the servers and displays a corresponding web page,
The optional server includes:
Database means for storing setting information, authentication information, and web page address related to connection to the wireless LAN access point;
After the completion of the authentication procedure in the authentication server for the connection request from the user terminal, setting information notification means for searching the database for the setting information and notifying the user terminal,
An Internet access system, comprising: a Web page address notifying unit that searches the database for the Web page address after notifying the setting information and notifies the user terminal of the search. 2. The Internet access system according to claim 1, wherein said terminal setting means is executed by being stored in said database means and downloaded to said user terminal. 2. The Internet access system according to claim 1, wherein said terminal setting means is executed by being stored in said database means and transferred to an arbitrary server. The wireless LAN access point has a first wireless LAN access point to which an unspecified number of user terminals can be connected, and a second wireless LAN access point to which only a specific user terminal that has been authorized based on arbitrary authentication information can be connected. Consisting of a wireless LAN access point,
The terminal setting means connects to the first wireless LAN access point and performs an authentication procedure with the authentication server. After the authentication procedure is completed, the terminal setting means switches to the second wireless LAN access point and performs an Internet connection process. 2. The Internet access system according to claim 1, wherein The Internet access system according to claim 4, wherein the first wireless LAN access point and the second wireless LAN access point are configured by one wireless LAN access point. A first LAN including a first routing unit connected to the Internet via an IP network; a second LAN including a second routing unit connected to the first LAN; First server means connected thereto, and second server means connected to the second LAN,
2. The Internet access system according to claim 1, wherein said second routing means controls not to permit connection from the Internet to said second server means.

Images