JP2016181775A - Device and program for managing access point identifier - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable setting to an access point an access point identifier dedicated for a group to which a user belongs, when the user connects to the access point using a common access point identifier.SOLUTION: A user information receiver unit 210 receives the user information 211 of a user, who uses a user terminal connected to the access point, using the common access identifier. Based on the received user information 211, a user authentication unit 220 identifies an access identifier dedicated for the user. An access point set information generation unit 231 generates access point set information 231F which includes the identified dedicated access identifier. An access point set information transmitter unit 241 transmits the access point set information 231F to the access point control device, so that the access point set information 231F is set to the access point.SELECTED DRAWING: Figure 2

Description

  The present invention relates to a technique for managing an SSID (Service Set Identifier) that is an access point identifier.

An SSID for a communication company is set at an access point of the wireless public network. Then, the user who has contracted with the communication company uses the SSID for the contracted communication company to connect to the access point and uses the Internet via the access point.
On the other hand, since there is an upper limit to the number of SSIDs that can be set in the access point, no dedicated SSID is assigned to companies other than the communication company. In general, the maximum number of SSIDs that can be set for an access point is 16, and a dedicated SSID cannot be prepared for 17 or more companies.
Therefore, the user cannot connect to the access point using the dedicated SSID of the company to which the user belongs and cannot access the corporate in-house LAN (Local Area Network).

  Japanese Patent Application Laid-Open No. 2004-133260 discloses a technique for setting SSIDs equal to or less than the number that can be set for an access point to the access point.

Japanese Patent Laying-Open No. 2015-043537

  Another object of the present invention is to enable a dedicated access point identifier of a group to which a user belongs to be set as an access point when the user connects to the access point using a common access point identifier.

The access point identifier management device of the present invention,
A user information receiving unit that receives user information of a user who uses a user terminal connected to the access point using a common access identifier that is an access point identifier set in the access point;
A dedicated access identifier identifying unit that identifies a dedicated access identifier that is a dedicated access point identifier of a group to which the user belongs based on received user information;
An access point setting information generating unit for generating access point setting information including the specified dedicated access identifier;
An access point setting information transmitting unit configured to set the access point setting information in the access point by transmitting the access point setting information to an access point control device that controls the access point.

The access point identifier management device
A dedicated network identifier specifying unit for specifying a dedicated network identifier for identifying a dedicated network that is a network for a group to which the user belongs based on the user information;
A relay device setting information generating unit that generates relay device setting information including the specified dedicated network identifier and the dedicated access identifier;
A relay device setting information transmitting unit configured to set the relay device setting information in the relay device by transmitting the relay device setting information to a relay device control apparatus that controls the relay device that relays data to the dedicated network. .

The access point identifier management device
By acquiring the number of connected terminals, which is the number of user terminals connected to the access point using the dedicated access identifier, from the access point control device every time monitoring time elapses, A connected terminal number monitoring unit for monitoring changes;
When the state in which the number of connected terminals is zero continues for a holding time, a deletion request including an access point setting identifier for identifying the access point setting information is transmitted to the access point control device, whereby the transmitted deletion request is transmitted. An access point setting deletion request unit for deleting access point setting information identified by the included access point setting identifier from the access point.

The access point identifier management device
When the state in which the number of connected terminals is zero continues for the hold time, the deletion request transmitted by transmitting a deletion request including a relay device setting identifier for identifying the relay device setting information to the relay device control apparatus. A relay device setting deletion request unit for deleting the relay device setting information identified by the relay device setting identifier included in the relay device.

The access point identifier management program of the present invention is
A user information receiving unit that receives user information of a user who uses a user terminal connected to the access point using a common access identifier that is an access point identifier set in the access point;
A dedicated access identifier identifying unit that identifies a dedicated access identifier that is a dedicated access point identifier of a group to which the user belongs based on received user information;
An access point setting information generating unit for generating access point setting information including the specified dedicated access identifier;
By transmitting the access point setting information to an access point control device that controls the access point, the computer is caused to function as an access point setting information transmitting unit that sets the access point setting information in the access point.

  According to the present invention, when a user connects to an access point using a common access point identifier, a dedicated access point identifier of a group to which the user belongs can be set as the access point.

1 is a configuration diagram of a network system 100 according to Embodiment 1. FIG. FIG. 3 is a functional configuration diagram of an access point identifier management apparatus 200 in the first embodiment. FIG. 4 is a configuration diagram of user information 211 in the first embodiment. The block diagram of the user information database 291 in Embodiment 1. FIG. 2 is a functional configuration diagram of a user authentication unit 220 according to Embodiment 1. FIG. FIG. 2 is a hardware configuration diagram of an access point identifier management apparatus 200 in the first embodiment. 6 is a flowchart of an access point identifier management method at the time of setting in the first embodiment. 6 is a flowchart of an access point identifier management method at the time of monitoring in the first embodiment. 6 is a flowchart of an access point identifier management method at the time of deletion in the first embodiment.

Embodiment 1 FIG.
An access point identifier management apparatus 200 that sets, as an access point, a dedicated access point identifier of a group to which the user belongs when the user connects to the access point using a common access point identifier, based on FIG. 1 to FIG. explain.

*** Explanation of configuration ***
The network system 100 will be described with reference to FIG.
The network system 100 includes a user terminal 110, an access point 120, and an access point identifier management system 101.

  The user terminal 110 is a computer that operates according to an operation performed by the user. An example of the user terminal 110 is a smartphone and a tablet terminal.

  The access point identifier management system 101 includes an access point identifier management device 200, a server device 130, an access point control device 140, a relay device control device 150, and a relay device group 160.

The access point identifier management device 200 is a computer that manages access point identifiers set in the access point 120.
The access point identifier is an SSID. SSID is an abbreviation for Service Set Identifier.

The server device 130 is a web server that manages a dedicated portal site, and includes a user information database.
The dedicated portal site is a dedicated website for a group to which a user who uses the user terminal 110 belongs. An example of a group is a company.
The user information database is a file in which user information used for login authentication is registered. Login authentication is an authentication process in which login information input on a login page of a dedicated portal site is checked against a user information database. The login page is a web page for login. If user information that matches the login information is registered in the user information database, the user is authenticated. An example of user information is a user identifier and a password.

The access point control device 140 is a computer that controls the access point 120. An example of the access point control device 140 is a wireless controller.
The relay device control apparatus 150 is a computer that controls the relay device group 160. An example of the relay device control apparatus 150 is an SDN controller. SDN is an abbreviation for Software Defined Networking.
The relay device group 160 is a plurality of relay devices 161. An example of the relay device 161 is an open flow switch. A plurality of OpenFlow switches constitute an OpenFlow network.

The user terminal 110 connects to the access point 120 using the common access identifier.
The common access identifier is an access point identifier set in advance in the access point 120. An example of the common access identifier is an SSID for a communication company.

The user terminal 110 accesses the login page of the dedicated portal site via the access point 120 and inputs login information to the login page of the dedicated portal site.
The server device 130 performs login authentication by checking the login information input on the login page of the dedicated portal site against the user information database.

When the user is authenticated, the server device 130 acquires user information from the user terminal 110 via the access point 120. The user information is information that identifies the user and the user terminal 110. An example of user information is a user identifier and a terminal identifier.
The server device 130 transfers the acquired user information to the access point identifier management device 200, and the access point identifier management device 200 receives the user information transferred from the server device 130.

The access point identifier management device 200 specifies a dedicated access identifier and a dedicated network identifier based on the received user information.
The dedicated access identifier is a dedicated access point identifier of the group to which the user belongs.
The dedicated network identifier is an identifier for identifying the dedicated network 170, and the dedicated network 170 is a network for the group to which the user belongs.
An example of the dedicated network 170 is an in-house LAN. An example of a LAN is a VLAN. LAN is an abbreviation for Local Area Network, and VLAN is an abbreviation for Virtual LAN.

The access point identifier management device 200 generates access point setting information including the specified dedicated network identifier, and transmits the generated access point setting information to the access point control device 140. The access point setting information is information set in the access point 120.
The access point control device 140 receives the access point setting information transmitted from the access point identifier management device 200, and sets the received access point setting information in the access point 120.

The access point identifier management device 200 generates relay device setting information including the specified dedicated network identifier and the dedicated access identifier, and transmits the generated relay device setting information to the relay device control device 150. The relay device setting information is information set in the relay device 161. The setting information is also called a flow.
The relay device control device 150 receives the relay device setting information transmitted from the access point identifier management device 200 and sets the received relay device setting information in each relay device 161 of the relay device group 160.

After the access point setting information is set in the access point 120 and the relay device setting information is set in each relay device 161, the user terminal 110 connects to the access point 120 using the dedicated access identifier. As a result, the user terminal 110 can connect to the dedicated network 170 identified by the dedicated network identifier.
The user terminal 110 is connected to the dedicated network 170 via the access point 120, the relay device group 160, and the Internet 102.
Each relay device 161 in the relay device group 160 relays data between the user terminal 110 and the dedicated network 170.

The access point identifier management device 200 acquires the number of connected terminals from the access point control device 140 every time the monitoring time elapses. The number of connected terminals is the number of user terminals 110 connected to the access point 120 using the dedicated access identifier.
When the state in which the number of connected terminals is zero continues for the hold time, the access point identifier management apparatus 200 generates a deletion request including the access point setting identifier, and transmits the generated deletion request to the access point control apparatus 140. The access setting identifier is an identifier for identifying access point setting information, and an example of the access setting identifier is a dedicated access identifier.
Furthermore, the access point identifier management device 200 generates a deletion request including the relay device setting identifier, and transmits the generated deletion request to the relay device control device 150. The relay device setting identifier is an identifier for identifying relay device setting information, and examples of the relay device setting identifier are a dedicated network identifier and a dedicated access identifier.

The access point control device 140 receives the deletion request transmitted from the access point identifier management device 200, and deletes the access point setting information identified by the access setting identifier included in the received deletion request from the access point 120.
The relay device control apparatus 150 receives the deletion request transmitted from the access point identifier management apparatus 200, and deletes the relay device setting information identified by the relay device setting identifier included in the received deletion request from each relay device 161. .

A functional configuration of the access point identifier management apparatus 200 will be described with reference to FIG.
The access point identifier management device 200 includes a user information reception unit 210, a user authentication unit 220, a setting information generation unit 230, a setting information transmission unit 240, a connected terminal number monitoring unit 250, and a setting deletion request unit 260. Prepare. Furthermore, the access point identifier management device 200 includes a storage unit 290.

The user information receiving unit 210 receives user information 211 of a user who uses the user terminal 110 connected to the access point 120 using the common access identifier from the server device 130.
As shown in FIG. 3, the user information 211 includes a user identifier, a password, and a terminal identifier. An example of a terminal identifier is a MAC address and an IP address. MAC is an abbreviation for Media Access Control. IP is an abbreviation for Internet Protocol.

The user authentication unit 220 performs user authentication using the user information 211, and acquires a user information entry 291 E that matches the user information 211 from the user information database 291.
User authentication is an authentication process in which the user information 211 is checked against the user information database 291. When the user information entry 291E that matches the user information 211 is registered in the user information database 291, the user and the user terminal 110 are authenticated.
As shown in FIG. 4, the user information database 291 is a file in which a user information entry 291E is registered. Each line in the figure is a user information entry 291E.
The user information entry 291E includes a user identifier, a password, a terminal identifier, a dedicated access identifier, a VLAN identifier, a wireless definition script name, and a flow definition script name.
A user information entry 291E including the same user identifier, password, and terminal identifier as the user information 211 is a user information entry 291E that matches the user information 211.
The wireless definition script name is an identifier for identifying the wireless definition script 292.
The flow definition script name is an identifier for identifying the flow definition script 293.

As illustrated in FIG. 5, the user authentication unit 220 includes a dedicated access identifier specifying unit 221 and a dedicated network identifier specifying unit 222.
The dedicated access identifier specifying unit 221 specifies a dedicated access identifier based on the received user information 211. The specified dedicated access identifier is a dedicated access identifier included in the user information entry 291E that matches the user information 211.
The dedicated network identifier specifying unit 222 specifies a dedicated network identifier based on the received user information 211. The specified dedicated network identifier is a dedicated network identifier included in the user information entry 291E that matches the user information 211.

The setting information generation unit 230 includes an access point setting information generation unit 231 and a relay device setting information generation unit 232.
The access point setting information generation unit 231 generates access point setting information 231F including the specified dedicated access identifier.

The access point setting information generation unit 231 generates access point setting information 231F as follows.
The access point setting information generation unit 231 acquires the wireless definition script name from the user information entry 291E that matches the user information 211.
The access point setting information generation unit 231 selects the wireless definition script 292 identified by the acquired wireless definition script name.
The access point setting information generation unit 231 executes the selected wireless definition script 292 with the specified dedicated access identifier as an input. The wireless definition script 292 is a program that generates access point setting information 231F including a dedicated access identifier that is an input.

  The relay device setting information generation unit 232 generates relay device setting information 232F including the specified dedicated network identifier and dedicated access identifier.

The relay device setting information generation unit 232 generates the relay device setting information 232F as follows.
The relay device setting information generation unit 232 acquires the flow definition script name from the user information entry 291E that matches the user information 211.
The relay device setting information generation unit 232 selects the flow definition script 293 identified by the acquired flow definition script name.
The relay device setting information generation unit 232 executes the selected flow definition script 293 with the specified dedicated network identifier as an input. The flow definition script 293 is a program that generates relay device setting information 232F including an input dedicated network identifier.

The setting information generation unit 230 generates a setting identifier entry 294E and registers the generated setting identifier entry 294E in the setting identifier list 294.
The setting identifier entry 294E is data including an access point setting identifier for identifying the generated access point setting information 231F and a relay device setting identifier for identifying the generated relay device setting information 232F. The access point setting identifier is a dedicated access identifier. The relay device setting identifier is a dedicated network identifier and a dedicated access identifier.
The setting identifier list 294 is a file in which the setting identifier entry 294E is registered.

The setting information transmission unit 240 includes an access point setting information transmission unit 241 and a relay device setting information transmission unit 242.
The access point setting information transmission unit 241 transmits the access point setting information 231F to the access point control device 140. The transmitted access point setting information 231F is set in the access point 120 by the access point control device 140.
The relay device setting information transmission unit 242 transmits the relay device setting information 232F to the relay device control apparatus 150. The transmitted relay device setting information 232F is set in each relay device 161 of the relay device group 160 by the relay device control apparatus 150.

The connected terminal number monitoring unit 250 monitors the change in the connected terminal number 251 by acquiring the connected terminal number 251 from the access point control device 140 every time the monitoring time elapses. The monitoring time is a predetermined time.
The number of connected terminals 251 is the number of user terminals 110 connected to the access point 120 using a dedicated access identifier.

The connected terminal number monitoring unit 250 acquires the connected terminal number 251 as follows.
The connected terminal number monitoring unit 250 acquires a dedicated access identifier from the setting identifier entry 294E, and transmits a connection terminal number request including the acquired dedicated access identifier to the access point control device 140. Then, the connected terminal number monitoring unit 250 receives a connected terminal number response including the connected terminal number 251 from the access point control device 140.

The setting deletion request unit 260 includes an access point setting deletion request unit 261 and a relay device setting deletion request unit 262.
When the state where the number of connected terminals 251 is zero continues for the holding time, the access point setting deletion request unit 261 acquires the access point setting identifier from the setting identifier entry 294E. The holding time is a predetermined time.
Then, the access point setting deletion request unit 261 generates a deletion request including the acquired access point setting identifier, and transmits the generated deletion request to the access point control device 140.
The access point setting information 231F identified by the access setting identifier included in the transmitted deletion request is deleted from the access point 120 by the access point control device 140.

The relay device setting deletion request unit 262 acquires the relay device setting identifier from the setting identifier entry 294E when the state where the number of connected terminals 251 is zero continues for the holding time.
Then, the relay device setting deletion request unit 262 generates a deletion request including the acquired relay device setting identifier, and transmits the generated deletion request to the relay device control apparatus 150.
The relay device setting information 232F identified by the relay device setting identifier included in the transmitted deletion request is deleted from each relay device 161 of the relay device group 160 by the relay device control device 150.

Storage unit 290 stores data used, generated or input / output by access point identifier management apparatus 200.
Examples of data stored in the storage unit 290 are a user information database 291, a wireless definition script 292, a flow definition script 293, and a setting identifier list 294.

A hardware configuration example of the access point identifier management device 200 will be described with reference to FIG.
The access point identifier management device 200 is a computer having hardware such as a processor 901, an auxiliary storage device 902, a memory 903, a communication device 904, an input interface 905, and an output interface 906.
The processor 901 is connected to other hardware via a signal line 910. The input interface 905 is connected to the input device 907 via a cable 911. The output interface 906 is connected to the output device 908 via the cable 912.

The processor 901 is an IC that performs processing, and controls other hardware. An example of the processor 901 is a CPU, DSP, or GPU. IC is an abbreviation for Integrated Circuit. CPU is an abbreviation for Central Processing Unit, DSP is an abbreviation for Digital Signal Processor, and GPU is an abbreviation for Graphics Processing Unit.
The auxiliary storage device 902 stores data. An example of the auxiliary storage device 902 is a ROM, a flash memory, and an HDD. ROM is an abbreviation for Read Only Memory, and HDD is an abbreviation for Hard Disk Drive.
The memory 903 stores data. An example of the memory 903 is a RAM. RAM is an abbreviation for Random Access Memory.
The communication device 904 includes a receiver 9041 that receives data and a transmitter 9042 that transmits data. An example of the communication device 904 is a communication chip or a NIC. NIC is an abbreviation for Network Interface Card.
The input interface 905 is a port to which a cable 911 is connected, and an example of the port is a USB terminal. USB is an abbreviation for Universal Serial Bus.
The output interface 906 is a port to which the cable 912 is connected, and the USB terminal and the HDMI terminal are examples of ports. HDMI (registered trademark) is an abbreviation for High Definition Multimedia Interface.
The input device 907 inputs data, instructions and requests. An example of the input device 907 is a mouse, a keyboard, and a touch panel.
The output device 908 outputs data, results and responses. An example of the output device 908 is a display or a printer. An example of a display is an LCD. LCD is an abbreviation for Liquid Crystal Display.

The auxiliary storage device 902 stores an OS. OS is an abbreviation for Operating System.
The auxiliary storage device 902 stores programs that realize the functions of “unit” such as the user authentication unit 220, the setting information generation unit 230, the setting information transmission unit 240, the connected terminal number monitoring unit 250, and the setting deletion request unit 260. Has been.
At least a part of the OS is loaded into the memory 903, and the processor 901 executes a program that realizes the function of “unit” while executing the OS. A program that realizes the function of “unit” is loaded into the memory 903, read into the processor 901, and executed by the processor 901.
The access point identifier management apparatus 200 may include a plurality of processors 901, and the plurality of processors 901 may execute a program that realizes the function of “unit” in cooperation with each other.

  Data, information, signal values, variable values, and the like indicating the processing result of “part” are stored in the memory 903, the auxiliary storage device 902, a register in the processor 901, or a cache memory in the processor 901.

The “part” may be implemented as “circuitry”. “Part” may be read as “circuit”, “process”, “procedure”, or “processing”.
“Circuit” and “circuitry” are concepts including a processing circuit such as the processor 901, logic IC, GA, ASIC, and FPGA. GA is an abbreviation for Gate Array, ASIC is an abbreviation for Application Specific Integrated Circuit, and FPGA is an abbreviation for Field-Programmable Gate Array.

*** Explanation of operation ***
The operation of the access point identifier management device corresponds to an access point identifier management method. The access point identifier management method corresponds to the processing procedure of the access point identifier management program.

Based on FIG. 7, an access point identifier management method at the time of setting to set a dedicated access identifier in the access point 120 and to set a dedicated network identifier in the relay device 161 will be described.
S110 is a user information reception process.
In S <b> 110, the user information receiving unit 210 receives user information 211 of a user who uses the user terminal 110 from the server device 130 that communicates with the user terminal 110 via the access point 120.
The user information 211 includes a user identifier, a password, and a terminal identifier.

S120 is a user authentication process.
In S120, the user authentication unit 220 collates the user information 211 with the user information database 291.
When a user information entry 291E that matches the user information 211 is registered in the user information database 291, the user authentication unit 220 authenticates the user and the user terminal 110.
When the user information entry 291E that matches the user information 211 is not registered in the user information database 291, the user authentication unit 220 does not authenticate the user and the user terminal 110.
When the user and the user terminal 110 are authenticated, the user authentication unit 220 transmits an authentication success message to the user terminal 110 via the server device 130. As a result, an authentication success message is displayed on the user terminal 110. The authentication success message is a message indicating that the user and the user terminal 110 have been authenticated. Then, the process proceeds to S130.
When the user and the user terminal 110 are not authenticated, the user authentication unit 220 transmits an authentication failure message to the user terminal 110 via the server device 130. As a result, an authentication failure message is displayed on the user terminal 110. The authentication failure message is a message indicating that the user and the user terminal 110 have not been authenticated. Then, the processing of the access point identifier management method at the time of setting ends.

S130 is a dedicated access identifier specifying process and a dedicated network identifier specifying process.
In S <b> 130, the user authentication unit 220 acquires a user information entry 291 </ b> E that matches the user information 211 from the user information database 291.

S140 is a dedicated access identifier confirmation process.
In S140, the access point setting information generation unit 231 of the setting information generation unit 230 acquires a dedicated access identifier from the acquired user information entry 291E.
Then, the access point setting information generation unit 231 determines whether a setting identifier entry 294E including the same dedicated access identifier as the acquired dedicated access identifier is registered in the setting identifier list 294.
Here, it is said that there is a dedicated SSID that the setting identifier entry 294E including the same dedicated access identifier as the acquired dedicated access identifier is registered in the setting identifier list 294.
If there is a dedicated SSID, the processing of the access point identifier management method at the time of setting ends.
If there is no dedicated SSID, the process proceeds to S150.

S150 is an access point setting information generation process and a relay device setting information generation process.
In S150, the access point setting information generation unit 231 of the setting information generation unit 230 generates the access point setting information 231F as follows.
The access point setting information generation unit 231 acquires a dedicated access identifier and a wireless definition script name from the acquired user information entry 291E.
The access point setting information generation unit 231 selects the wireless definition script 292 identified by the acquired wireless definition script name.
Then, the access point setting information generation unit 231 executes the selected wireless definition script 292 with the acquired dedicated access identifier as an input. Thereby, the access point setting information 231F including the acquired dedicated access identifier is generated.

Also, the relay device setting information generation unit 232 of the setting information generation unit 230 generates the relay device setting information 232F as follows.
The relay device setting information generation unit 232 acquires a dedicated network identifier, a dedicated access identifier, and a flow definition script name from the acquired user information entry 291E.
The relay device setting information generation unit 232 selects the flow definition script 293 identified by the acquired flow definition script name.
Then, the relay device setting information generation unit 232 inputs the acquired dedicated network identifier and the dedicated access identifier, and executes the selected flow definition script 293. As a result, relay device setting information 232F including the acquired dedicated network identifier and dedicated access identifier is generated.

S160 is access point setting information transmission processing.
In S160, the access point setting information transmitting unit 241 of the setting information transmitting unit 240 transmits the generated access point setting information 231F to the access point control device 140.
The transmitted access point setting information 231F is set in the access point 120 by the access point control device 140.
This allows the user terminal 110 to connect to the access point 120 using the dedicated access identifier.

S170 is a relay device setting information transmission process.
In S170, the relay device setting information transmission unit 242 of the setting information transmission unit 240 transmits the generated relay device setting information 232F to the relay device control apparatus 150.
The transmitted relay device setting information 232F is set in each relay device 161 of the relay device group 160 by the relay device control apparatus 150.
As a result, the user terminal 110 connected to the access point 120 using the dedicated access identifier can access the dedicated network 170 identified by the dedicated network identifier via each relay device 161.
After S170, the processing of the access point identifier management method at the time of setting ends.

Based on FIG. 8, the process of the access point identifier management method during monitoring for monitoring the number of connected terminals 251 will be described.
The process of the access point identifier management method at the time of monitoring is executed every time the monitoring time elapses.

S210 to S280 are connected terminal number monitoring processing.
In S210, the connected terminal number monitoring unit 250 selects one unselected setting identifier entry 294E from the setting identifier list 294.

In S220, the connected terminal number monitoring unit 250 acquires a dedicated access identifier from the selected setting identifier entry 294E.
The connected terminal number monitoring unit 250 generates a connected terminal number request including the acquired dedicated access identifier, and transmits the generated connected terminal number request to the access point control device 140.
Then, the connected terminal number monitoring unit 250 receives a connected terminal number response including the connected terminal number 251 from the access point control device 140. The number of connected terminals 251 is the number of user terminals 110 that are accessing the access point 120 using the acquired dedicated access identifier.

In S230, the connected terminal number monitoring unit 250 determines whether the connected terminal number 251 is zero.
If the number of connected terminals 251 is zero, the process proceeds to S240.
If the number of connected terminals 251 is not zero, the process proceeds to S260.

In S240, the connected terminal number monitoring unit 250 determines whether the acquired monitoring timer for the dedicated access identifier is operating.
If the monitoring timer for the acquired dedicated access identifier is operating, the process proceeds to S280.
If the monitoring timer for the acquired dedicated access identifier is not operating, the process proceeds to S250.

  In S250, the connected terminal number monitoring unit 250 sets a holding time in the acquired monitoring timer for the dedicated access identifier, and starts the monitoring timer in which the holding time is set. The activated monitoring timer notifies a timeout when the hold time has elapsed.

In S260, the connected terminal number monitoring unit 250 determines whether the monitoring timer for the acquired dedicated access identifier is operating.
If the monitoring timer for the acquired dedicated access identifier is operating, the process proceeds to S270.
If the monitoring timer for the acquired dedicated access identifier is not operating, the process proceeds to S280.

  In S270, the connected terminal number monitoring unit 250 stops the monitoring timer for the acquired dedicated access identifier.

In S280, the connected terminal number monitoring unit 250 determines whether there is an unselected setting identifier entry 294E that has not been selected in S210.
If there is an unselected setting identifier entry 294E, the process returns to S210.
If there is no unselected setting identifier entry 294E, the process of the access point identifier management method at the time of monitoring ends.

Based on FIG. 9, the process of the access point identifier management method at the time of deletion in which the access point setting information 231F is deleted from the access point 120 and the relay device setting information 232F is deleted from the relay device 161 will be described.
The processing of the access point identifier management method at the time of deletion is executed when the monitoring timer times out.

In S310, the connected terminal number monitoring unit 250 acquires the dedicated access identifier from the timed-out monitoring timer.
The connected terminal number monitoring unit 250 acquires the setting identifier entry 294E including the acquired dedicated access identifier from the setting identifier list 294.

S320 is an access point setting deletion request process.
In S320, the access point setting deletion request unit 261 of the setting deletion request unit 260 acquires a dedicated access identifier from the acquired setting identifier entry 294E.
Then, the access point setting deletion request unit 261 generates an access point setting deletion request including the acquired dedicated access identifier, and transmits the generated access point setting deletion request to the access point control device 140.
The transmitted access point setting deletion request is received by the access point control device 140. Then, the access point setting information 231F including the dedicated access identifier included in the received access point setting deletion request is deleted from the access point 120 by the access point control device 140.

S330 is a relay device setting deletion request process.
In S330, the relay device setting deletion request unit 262 of the setting deletion request unit 260 acquires the dedicated network identifier and the dedicated access identifier from the acquired setting identifier entry 294E.
Then, the relay device setting deletion request unit 262 generates a relay device setting deletion request including the acquired dedicated network identifier and the dedicated access identifier, and transmits the generated relay device setting deletion request to the relay device control apparatus 150.
The transmitted relay device setting deletion request is received by the relay device control apparatus 150. Then, the relay device setting information 232F including the dedicated network identifier and the dedicated access identifier included in the received relay device setting deletion request is deleted from each relay device 161 by the relay device control device 150.
After S330, the process of the access point identifier management method at the time of deletion ends.

*** Explanation of effects ***
When the user terminal 110 connects to the access point 120 using the common access identifier, the access point identifier management apparatus 200 can set a dedicated access identifier of the group to which the user using the user terminal 110 belongs to the access point 120. . As a result, the user can connect to the access point 120 using the dedicated access identifier.
Furthermore, the access point identifier management apparatus 200 can set a dedicated network identifier for identifying the dedicated network 170 of the group to which the user belongs to the relay device group 160. Thereby, the user can access the dedicated network 170 via the access point 120.
When there is no user connected to the access point 120 using the dedicated access identifier, the access point identifier management apparatus 200 deletes the dedicated access identifier from the access point 120 and deletes the dedicated network identifier from the relay device group 160. be able to. Thereby, it is possible to assign dedicated access identifiers to groups larger than the number of access point identifiers that can be set for the access point 120.

The embodiments are exemplifications of preferred forms and are not intended to limit the technical scope of the present invention. The embodiment may be implemented partially or in combination with other embodiments.
The processing procedure described with reference to the flowcharts is an example of the processing procedure of the access point identifier management device, the access point identifier management method, and the access point identifier management program.

  100 network system, 101 access point identifier management system, 102 Internet, 110 user terminal, 120 access point, 130 server device, 140 access point control device, 150 relay device control device, 160 relay device group, 161 relay device, 170 dedicated network , 200 access point identifier management device, 210 user information receiving unit, 211 user information, 220 user authentication unit, 221 dedicated access identifier specifying unit, 222 dedicated network identifier specifying unit, 230 setting information generating unit, 231 access point setting information generating unit 231F access point setting information, 232 relay device setting information generation unit, 232F relay device setting information, 240 setting information transmission unit, 241 access point setting information Transmission unit, 242 Relay device setting information transmission unit, 250 connected terminal number monitoring unit, 251 connected terminal number, 260 setting deletion request unit, 261 access point setting deletion request unit, 262 relay device setting deletion request unit, 290 storage unit, 291 User information database, 291E user information entry, 292 radio definition script, 293 flow definition script, 294 setting identifier list, 294E setting identifier entry, 901 processor, 902 auxiliary storage device, 903 memory, 904 communication device, 9041 receiver, 9042 transmitter, 905 input interface, 906 output interface, 907 input device, 908 output device, 910 signal line, 911 cable, 912 cable.

Claims (5)

A user information receiving unit that receives user information of a user who uses a user terminal connected to the access point using a common access identifier that is an access point identifier set in the access point;
A dedicated access identifier identifying unit that identifies a dedicated access identifier that is a dedicated access point identifier of a group to which the user belongs based on received user information;
An access point setting information generating unit for generating access point setting information including the specified dedicated access identifier;
An access point identifier management apparatus comprising: an access point setting information transmitting unit configured to set the access point setting information in the access point by transmitting the access point setting information to an access point control apparatus that controls the access point. A dedicated network identifier specifying unit for specifying a dedicated network identifier for identifying a dedicated network that is a network for a group to which the user belongs based on the user information;
A relay device setting information generating unit that generates relay device setting information including the specified dedicated network identifier and the dedicated access identifier;
A relay device setting information transmitting unit configured to set the relay device setting information in the relay device by transmitting the relay device setting information to a relay device control apparatus that controls the relay device that relays data to the dedicated network. The access point identifier management apparatus according to claim 1. By acquiring the number of connected terminals, which is the number of user terminals connected to the access point using the dedicated access identifier, from the access point control device every time monitoring time elapses, A connected terminal number monitoring unit for monitoring changes;
When the state in which the number of connected terminals is zero continues for a holding time, a deletion request including an access point setting identifier for identifying the access point setting information is transmitted to the access point control device, whereby the transmitted deletion request is transmitted. The access point identifier management device according to claim 2, further comprising: an access point setting deletion request unit that deletes access point setting information identified by the included access point setting identifier from the access point. When the state in which the number of connected terminals is zero continues for the hold time, the deletion request transmitted by transmitting a deletion request including a relay device setting identifier for identifying the relay device setting information to the relay device control apparatus. The access point identifier management apparatus according to claim 3, further comprising: a relay device setting deletion request unit that deletes from the relay device the relay device setting information identified by the relay device setting identifier included in the relay device. A user information receiving unit that receives user information of a user who uses a user terminal connected to the access point using a common access identifier that is an access point identifier set in the access point;
A dedicated access identifier identifying unit that identifies a dedicated access identifier that is a dedicated access point identifier of a group to which the user belongs based on received user information;
An access point setting information generating unit for generating access point setting information including the specified dedicated access identifier;
An access point identifier for causing a computer to function as an access point setting information transmitting unit that sets the access point setting information in the access point by transmitting the access point setting information to an access point control device that controls the access point Management program.

Images