JP2005051314A - Wireless LAN system, access point, terminal device, and connection management program - Google Patents

Abstract

A method for managing a connection time of a client to an access point is provided.
In a wireless LAN system, a time for connection to an access point is set for a client connected to the access point. When the connectable time elapses, the client cannot connect to the access point 20. Therefore, it is possible to manage the connection time of the client to the access point. In other words, the network administrator can easily grasp the actual state of the client that can connect to the access point 20. Further, since it is possible to reject the connection of a client who does not want to accept the connection, it is possible to improve security.
[Selection] Figure 2

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a wireless LAN system, its access point, a terminal device, and a connection management program.
[0002]
[Prior art]
In recent years, wireless LAN (Local Area Network) has been actively used for the reason that cable routing is unnecessary.
In a wireless LAN, a PC card (wireless LAN card) having a wireless communication function is generally attached to a PC (Personal Computer) serving as a client. Then, the PC card and the access point connected to the wired LAN perform wireless communication, so that the LAN can be used.
[0003]
At this time, a PC with a wireless LAN card can be connected to an access point by setting various communication parameters such as channel and encryption method settings in accordance with the access point to be connected. .
As a technique for performing settings related to communication between a PC and an access point, a technique described in JP-A-2002-359623 is known.
[0004]
In the technique described in this publication, after the access point sets communication parameters for the PC, the access point and the PC perform wired communication to transmit the setting content to the PC.
[0005]
[Patent Document 1]
JP-A-2002-359623 [0006]
[Problems to be solved by the invention]
However, when a client is connected to the wireless LAN, not all clients are always allowed to connect, and it may be necessary to allow only a temporary connection to some clients. For example, in a wireless LAN built in a company, an access point installed in a certain office is always allowed to connect to employees belonging to that office, but visited from a non-employee or another office. Employees may need to be temporarily allowed to connect.
[0007]
In such a case, in the technique described in Japanese Patent Application Laid-Open No. 2002-359623, although the access point can set the communication parameter on the PC side, managing the connection time of the client to the access point is considered. It wasn't.
In other words, in the conventional technique, even for a client that is allowed to be temporarily connected, a state in which connection to an access point is possible is maintained unless the setting is manually canceled.
[0008]
Therefore, it is difficult for the network administrator to grasp the actual state of the client that can connect to the access point. In addition, since management of client connections cannot be performed properly, a security problem that a client who wants to allow connection only temporarily can connect to the access point outside the time allowed to connect is allowed. Has occurred.
[0009]
As described above, in the conventional technique, various problems occur due to the fact that the connection time of the client to the access point is not managed.
An object of the present invention is to enable management of a connection time of a client to an access point.
[0010]
[Means for Solving the Problems]
In order to solve the above problems, the present invention provides:
A wireless LAN system including an access point capable of wireless communication with a terminal device as a client, and setting means for setting a connectable time indicating a time during which the terminal device can be connected to the access point by wireless communication (For example, the setting unit 22 in FIG. 2), connection time detecting means (for example, the timer 24 and the communication control unit 25 in FIG. 2) for detecting the connection time in which the terminal device is connected to the access point, The determination means (for example, the communication control unit 25 in FIG. 2) that determines whether or not the connection time is within the connectable time and the determination means determine that the connection time is not within the connectable time. Connection management means (for example, the communication control unit in FIG. 2) that disables connection by wireless communication from the terminal device to the access point. It is characterized in that it comprises 5) and.
[0011]
With such a configuration, it is possible to manage the connection time of the terminal device to the access point.
That is, the network administrator can easily grasp the actual state of the client that can connect to the access point. In addition, it is possible to solve the security problem that a client who only wants to permit connection only temporarily can connect to the access point outside the permitted time.
[0012]
Further, the connection management means is provided in the access point, and the access point rejects the connection from the terminal device when it is determined that the connection time is not within the connectable time. .
With such a configuration, connection management of terminal devices can be performed centrally at the access point.
[0013]
Further, the connection management means is provided in the terminal device, and when it is determined that the connection time is not within the connectable time, the terminal device prevents the terminal device from connecting to the access point. It is characterized by controlling.
With such a configuration, the terminal device can autonomously manage connection to the access point.
[0014]
The present invention also provides:
An access point in a wireless LAN system including an access point capable of wireless communication with a terminal device as a client, wherein a connectable time indicating a time during which the terminal device can be connected by wireless communication is set. Setting means for performing, connection time detecting means for detecting a connection time in which the terminal device is connected to the terminal device, determination means for determining whether the connection time is within the connectable time, and A connection management unit configured to disable connection by wireless communication from the terminal device to the access point when the determination unit determines that the connection time is not within the connectable time. Yes.
[0015]
The present invention also provides:
A terminal device in a wireless LAN system including an access point capable of wireless communication with a terminal device as a client, wherein the wireless LAN system has a time during which wireless connection to the access point is possible for the terminal device. A setting means for setting a connectable time, a connection time detecting means for detecting a connection time in which the terminal device is connected to the access point, and whether or not the connection time is within the connectable time. A determination means for determining, and when the determination means determines that the connection time is not within the connectable time, the terminal device can perform a connection by wireless communication from the own device to the access point. It is characterized by comprising connection management means for making it in a non-existing state.
[0016]
The present invention also provides:
A connection management program for controlling a terminal device in a wireless LAN system including an access point capable of wireless communication with a terminal device as a client, wherein the wireless LAN system provides wireless communication to the access point with respect to the terminal device. Setting means for setting a connectable time indicating a connectable time by communication, a connect time detecting means for detecting a connect time when the terminal device is connected to the access point, and the connect time is the connectable And determining means for determining whether or not it is within the time, and when the determination means determines that the connection time is not within the connectable time, the access point from the own apparatus to the terminal device It is characterized in that it realizes a connection management function that makes it impossible to establish a connection by wireless communication.
[0017]
ADVANTAGE OF THE INVENTION According to this invention, it becomes possible to manage the connection time of the client with respect to an access point.
[0018]
DETAILED DESCRIPTION OF THE INVENTION
Embodiments of a wireless LAN system according to the present invention will be described below with reference to the drawings.
First, the configuration will be described.
FIG. 1 is a diagram showing a configuration of a wireless LAN system 1 to which the present invention is applied.
[0019]
In FIG. 1, the wireless LAN system 1 includes a plurality of PCs 10 serving as clients and an access point 20, and the access point 20 is configured to be able to communicate with an external network via a wired LAN 30. The PC 10 and the access point 20 are configured to be able to perform wireless communication.
The PC 10 is a personal computer that can use the wireless LAN system 1 by mounting a wireless LAN card. In addition, it is possible to use another information processing apparatus such as a PDA (Personal Digital Assistant) as a client even if it is not a PC.
[0020]
The access point 20 is a base station that performs wireless communication with a wireless LAN card attached to the PC 10.
FIG. 2 is a block diagram showing the configuration of the access point 20.
In FIG. 2, an access point 20 includes a client interface (hereinafter referred to as “client I / F”) 21, a setting unit 22, a network information management unit 23, a timer 24, a communication control unit 25, A network processing unit 26 and a wired LAN interface (hereinafter referred to as “wired LAN I / F”) 27 are included.
[0021]
The client I / F 21 is an interface to which a PC 10 serving as a client or a wireless LAN card attached to the PC 10 serving as a client can be connected. As the client I / F 21, for example, when connecting the PC 10 itself, an interface such as USB (Universal Serial Bus) or RS-232C can be used. Further, when connecting a wireless LAN card attached to the PC 10, the client I / F 21 can be a PC card slot. Further, when information is transmitted between the access point 20 and the PC 10 via a storage medium such as a memory card, the client I / F 21 can be a card reader / writer.
[0022]
In the following description, it is assumed that the PC 10 itself serving as a client is connected to the client I / F 21.
The setting unit 22 has an input / output function for setting various communication parameters necessary for communication with the access point 20 in the PC 10 connected to the client I / F 21. Specifically, the setting unit 22 is configured by an input / output device including a CPU (Central Processing Unit), a memory, a display device, operation buttons, and the like. The administrator of the wireless LAN system 1 communicates with the PC 10 serving as a client. The parameter is set.
[0023]
The communication parameters set by the setting unit 22 are output to the PC 10 via the client I / F 21.
In addition to the communication parameters, the setting unit 22 sets a time for permitting connection to the access point 20 for the PC 10 serving as a client (hereinafter referred to as “connectable time”). The set connectable time is output to the network information management unit 23.
[0024]
The network information management unit 23 reads information for identifying the PC 10 (hereinafter referred to as “client identification information”) from the PC 10 connected to the client I / F 21. The client identification information is information that can uniquely identify the client (PC 10). Here, as an example, the MAC (Media Access Control) address of a wireless LAN card attached to the PC 10 is used.
[0025]
The network information management unit 23 stores a management table in which the connectable time input from the setting unit 22 and the MAC address of the PC 10 serving as a client are associated with each other and stored.
FIG. 3 is a diagram illustrating a data configuration example of the management table.
In FIG. 3, in the management table, for each client connectable to the access point 20, an “index” for identifying record data in the management table and a “client ID” set for identifying the PC 10 on the access point 20 side. ”And the“ MAC address ”of the wireless LAN card used by the PC 10 for wireless LAN access and the“ connectable time ”set in the PC 10 are stored in association with each other.
[0026]
The timer 24 has a function of measuring time using the system clock of the access point 20 or the like.
The communication control unit 25 identifies the PC 10 connected to the access point 20 by wireless communication based on the MAC address, and manages the connection time of the PC 10 to the access point 20 with reference to the management table.
[0027]
Further, the communication control unit 25 measures the connection time of the PC 10 connected to the access point 20 by the timer 24, and when the connection time from the first connection exceeds the connectable time, the access from the PC 10 is performed thereafter. The connection to the point 20 is not possible. That is, the communication control unit 25 deletes the record data of the PC 10 whose connection time exceeds the connectable time from the management table, and refuses connection to the access point 20 unless the PC 10 is registered in the management table again. And
[0028]
Note that, as the connectable time, it is possible to target the cumulative connection time from the first connection, or to the elapsed time from the first connection regardless of the presence or absence of connection. Alternatively, the connectable time may be defined by setting a time that is a time limit for connection.
The wireless network processing unit 26 performs communication processing when the access point 20 performs wireless communication with the PC 10. Specifically, the wireless network processing unit 26 includes an antenna 26a and a wireless communication unit 26b. The wireless communication unit 26b performs processing such as modulation or multiplexing on a signal transmitted to the PC 10, and outputs the signal from the antenna 26a as a wireless signal. To do.
[0029]
In addition, the wireless network processing unit 26 receives a wireless signal transmitted from the wireless LAN card attached to the PC 10 via the antenna 26a, and performs a distribution process and a demodulation process of multiplexed data by the wireless communication unit 26b. Apply processing.
When the access point 20 performs communication via the wired LAN 30, the wired LAN I / F 27 performs data conversion processing and multiplexing processing on a variety of data to be transmitted and outputs the data to the wired LAN 30. . Further, the wired LAN I / F 27 performs a distribution process of multiplexed data and a data conversion process into the original data format on the signal received from the wired LAN 30 and outputs the result to the wireless network processing unit 26 and the like.
[0030]
Next, the operation will be described.
FIG. 4 is a flowchart showing the operation of the wireless LAN system 1.
In FIG. 4, first, the user of the PC 10 serving as a client connects the PC 10 to the client I / F 21 of the access point 20, and the setting unit 22 sets the connectable time and various communication parameters (step S1).
[0031]
Next, the network information management unit 23 registers the PC 10 in the management table (adds record data of the PC 10) (step S2).
Then, connection to the access point 20 by the PC 10 (connection by wireless communication) becomes possible, and the communication control unit 25 determines whether or not the connection time of the PC 10 has exceeded the connectable time (step S3).
[0032]
If it is determined in step S3 that the connection time of the PC 10 does not exceed the connectable time, the communication control unit 25 repeats the process of step S3.
On the other hand, if it is determined in step S3 that the connection time of the PC 10 has exceeded the connectable time, the communication control unit 25 sets the record data of the PC 10 in a state where the connection to the access point 20 by the PC 10 is rejected. An instruction to delete from the management table is issued (step S4).
[0033]
And the network information management part 23 deletes the record data of PC10 from a management table based on the instruction | indication from the communication control part 25, and updates a management table (step S5).
Thereafter, the wireless LAN system 1 ends the above-described processing related to the PC 10 and manages connection based on the new management table.
[0034]
As described above, in the wireless LAN system 1 according to the present embodiment, the time that can be connected to the access point 20 is set for the client connected to the access point 20. When the connectable time elapses, the client cannot connect to the access point 20.
Therefore, it is possible to manage the connection time of the client to the access point.
[0035]
In other words, the network administrator can easily grasp the actual state of the client that can connect to the access point 20. In addition, since it is possible to reject a connection of a client that does not want to accept the connection, security can be improved.
In the present embodiment, the connection time of the PC 10 is managed in the access point 20 and the connection is rejected when the connection time is exceeded. However, the connection time to the access point 20 is determined in the PC 10. It is also possible to manage.
[0036]
That is, the connectable time set in the access point 20 is notified to the PC 10, and the connection time is measured by the timer or the like in the PC 10. When the connection time exceeds the connectable time, the PC 10 can be controlled so that it cannot autonomously connect to the access point 20.
At this time, the connectable time set in the access point 20 can be transmitted to the PC 10 via the client I / F 21.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration of a wireless LAN system 1 to which the present invention is applied.
2 is a block diagram showing a configuration of an access point 20. FIG.
FIG. 3 is a diagram illustrating a data configuration example of a management table.
FIG. 4 is a flowchart showing the operation of the wireless LAN system 1;
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 Wireless LAN system, 20 access point, 21 Client I / F, 22 Setting part, 23 Network information management part, 24 Timer, 25 Communication control part, 26 Wireless network processing part, 26a Antenna, 26b Wireless communication part, 27 Wired LANI / F, 30 Wired LAN

Claims (6)

A wireless LAN system including an access point capable of wireless communication with a terminal device as a client,
Setting means for setting a connectable time indicating a time during which wireless connection to the access point is possible for the terminal device;
A connection time detecting means for detecting a connection time during which the terminal device is connected to the access point;
Determining means for determining whether or not the connection time is within the connectable time;
Connection management means for making a state in which connection by wireless communication from the terminal device to the access point cannot be performed when the determination means determines that the connection time is not within the connectable time. A featured wireless LAN system. The connection management means is provided in the access point,
The wireless LAN system according to claim 1, wherein the access point rejects the connection from the terminal device when it is determined that the connection time is not within the connectable time. The connection management means is provided in the terminal device,
The wireless LAN according to claim 1, wherein when it is determined that the connection time is not within the connectable time, the terminal device controls itself so as not to connect to the access point. system. An access point in a wireless LAN system including an access point capable of wireless communication with a terminal device as a client,
Setting means for setting a connectable time indicating a time in which the terminal device can be connected to the terminal device by wireless communication;
A connection time detecting means for detecting a connection time in which the terminal device is connected to the own device;
Determining means for determining whether or not the connection time is within the connectable time;
Connection management means for making a state in which connection by wireless communication from the terminal device to the access point cannot be performed when the determination means determines that the connection time is not within the connectable time. Feature access point. A terminal device in a wireless LAN system including an access point capable of wireless communication with a terminal device as a client,
The wireless LAN system includes:
Setting means for setting a connectable time indicating a time during which wireless connection to the access point is possible for the terminal device;
A connection time detecting means for detecting a connection time during which the terminal device is connected to the access point;
Determination means for determining whether or not the connection time is within the connectable time,
The terminal device
When it is determined by the determination means that the connection time is not within the connectable time, it comprises a connection management means for making a connection from the own device to the access point by wireless communication impossible. Terminal device to do. A connection management program for controlling a terminal device in a wireless LAN system including an access point capable of wireless communication with a terminal device as a client,
The wireless LAN system includes:
Setting means for setting a connectable time indicating a time during which wireless connection to the access point is possible for the terminal device;
A connection time detecting means for detecting a connection time during which the terminal device is connected to the access point;
Determination means for determining whether or not the connection time is within the connectable time,
In the terminal device,
When the determination unit determines that the connection time is not within the connectable time, it realizes a connection management function that disables connection from the own device to the access point by wireless communication. Connection management program.

Images