JP2013153323A - Communication device, communication device control method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable processing of sharing an encryption key even if processing of sharing the encryption key is started when the encryption key is not shared in advance.SOLUTION: A communication device includes: parameter sharing means for performing parameter sharing processing to perform a prescribed protocol with a communication partner device and share a communication parameter with the partner device; encryption sharing means for performing encryption sharing processing to share an encryption key with the partner device by use of the communication parameter; determination means for determining the setting state of the communication parameter to the communication device; and implementation means for implementing either the parameter sharing processing with the partner device or the encryption key sharing processing without performing the parameter sharing processing depending on the determination by the determination means.

Description

  The present invention relates to a communication device, a communication device control method, and a program.

  There is an IEEE802.11i standard for ensuring security in a wireless LAN. Communication devices compliant with IEEE802.11i exchange mutual random numbers of communication devices based on a common encryption key (PMK) and share a communication channel encryption key (PTK). When the user of each device shares the encryption key in advance and connects, the pre-shared key (PSK) is used as the PMK.

The standard also stipulates encryption key exchange not only in an infrastructure mode that passes through an access point but also in an ad hoc mode in which devices are directly connected without passing through an access point. (Non-Patent Document 1)
According to Non-Patent Document 1, it is disclosed that two or more communication devices having the same security setting start a key exchange process when existing in the same ad hoc network. The security setting here refers to ESSID, BSSID, authentication method, and encryption method.

  Non-Patent Document 2 discloses a method for automatically setting communication parameters in an infrastructure mode wireless LAN network as Wi-Fi Protected Setup (hereinafter referred to as WPS). In the WPS specification, a user can share a pre-shared key (PSK) with a simple operation in addition to security settings between communication devices.

  The WPS specification discloses a method for distinguishing on the communication device side between a case where the communication device is connected to an access point to receive communication parameters and a case where connection is performed when normal communication is performed. Specifically, the base station determines whether or not to perform the parameter automatic setting process with the communication device according to the type and presence of additional information of the Association Request packet for participating in the infrastructure mode network. Can do.

  Patent Document 1 discloses an example of automatic setting of communication parameters in an ad hoc mode wireless LAN network.

JP 2010-81566 A

LAN / MAN Committee of the IEEE Computer Society, IEEE Std 802.11TM-2007 (Revision of IEEE Std 802.11-1999) Wi-Fi Alliance, Wi-Fi Protected Setup Specification Version 1.0h

  In communication parameter automatic setting in an ad hoc mode wireless LAN network, a communication parameter receiving apparatus participates in an ad hoc network of a communication parameter providing apparatus and receives communication parameters.

  In an ad hoc mode network, unlike an infrastructure mode network, there is no Association Request packet to join the network. That is, a beacon signal having the same content is transmitted around, so that it participates in the network. For this reason, a participating communication device cannot determine whether it has joined the network for automatic setting of communication parameters or has joined the network to connect using the received communication parameters. The key sharing process is started.

  If the encryption key (PTK) sharing process is started even though the encryption key (PMK or PSK) is not shared, if the PMK is not shared, the encryption key sharing process always fails and the retry packet The traffic will be crowded. Further, when the encryption key sharing process is started during the communication parameter automatic setting operation, an unexpected failure may occur in the communication parameter automatic setting process.

  One object of the present invention is to prevent a useless encryption sharing process from being started. Other objects of the present invention will become apparent from the following specification and drawings.

  The present invention is a communication device, which executes a predetermined protocol with a partner device, performs parameter sharing processing for sharing a communication parameter with the partner device, and the partner device using the communication parameter. A cipher sharing unit for performing cipher sharing processing for sharing the cipher key between them, a determination unit for determining a communication parameter setting state of the communication device, and the partner device and the parameter according to the determination by the determination unit Execution means for executing whether to perform the encryption key sharing process without performing the sharing process or the parameter sharing process.

  According to the present invention, it is possible to reduce the failure of the encryption sharing process by executing either the communication parameter sharing process or the encryption sharing process according to the communication parameter setting state.

Block diagram of the device Software function block diagram in the device The figure which shows an example of the network configuration to which this invention is applied 1 is a sequence diagram of a communication apparatus according to Embodiment 1 of the present invention. 1 is a sequence diagram of a communication apparatus according to Embodiment 1 of the present invention. 1 is a sequence diagram of a communication apparatus according to Embodiment 1 of the present invention. FIG. 6 is a flowchart of processing performed by the communication apparatus according to the first embodiment of the present invention. FIG. 6 is a flowchart of processing performed by the communication apparatus according to the first embodiment of the present invention. Sequence diagram of a communication apparatus according to the second embodiment of the present invention Sequence diagram of a communication apparatus according to the second embodiment of the present invention Sequence diagram of a communication apparatus according to the second embodiment of the present invention Processing flowchart of the communication apparatus according to the second embodiment of the present invention. Processing flowchart of the communication apparatus according to the second embodiment of the present invention.

Example 1
Hereinafter, the communication apparatus according to the present embodiment will be described in detail with reference to the drawings. In the following, an example using a wireless LAN system compliant with the IEEE 802.11 series will be described, but the communication form is not necessarily limited to the wireless LAN compliant with IEEE 802.11.

  A hardware configuration in a case suitable for the present embodiment will be described. FIG. 1 is a block diagram illustrating an example of a configuration of each device described later according to the present embodiment. Reference numeral 101 denotes the entire apparatus. A control unit 102 controls the entire apparatus by executing a control program stored in the storage unit 103. The control unit 102 also performs communication parameter setting control with other devices. A storage unit 103 stores a control program executed by the control unit 102 and various types of information such as communication parameters. Various operations described later are performed by the control unit 102 executing a control program stored in the storage unit 103.

  A wireless unit 104 performs wireless LAN communication conforming to the IEEE802.11 series. Reference numeral 105 denotes a display unit that performs various displays, and has a function capable of outputting visually recognizable information such as an LCD or LED, or outputting sound such as a speaker. Reference numeral 106 denotes a setting button for giving a trigger for starting the communication parameter setting process. When the setting button 106 is operated by the user, communication parameter automatic setting processing is started. When the control unit 102 detects an operation of the setting button 106 by the user, the control unit 102 performs processing described later. Reference numeral 107 denotes an antenna control unit, and reference numeral 108 denotes an antenna. Reference numeral 109 denotes an input unit for the user to perform various inputs.

  FIG. 2 is a block diagram showing an example of the configuration of software function blocks that execute communication parameter automatic setting operations described later.

  Reference numeral 201 denotes the entire apparatus. Reference numeral 202 denotes a communication parameter automatic setting function block. In the present embodiment, communication parameters necessary for wireless LAN communication such as an SSID as a network identifier, an encryption method, an encryption key, an authentication method, and an authentication key are automatically set. In the following, automatic setting of communication parameters is simplified as automatic setting. When automatic setting is performed with a communication partner, communication parameters are shared with the communication partner. That is, the communication parameter is provided from the providing device that provides the communication parameter to the providing device, and the communication parameter is shared between the providing device and the providing device.

  A packet receiving unit 203 receives packets related to various types of communication. Reception of the beacon (notification signal) is performed by the packet receiving unit 203. A packet transmission unit 204 transmits packets related to various types of communication. The beacon is transmitted by the packet transmission unit 204. Various information about the transmission source device is added to the beacon. A search signal transmission unit 205 controls transmission of a device search signal such as a probe request. The probe request can also be referred to as a network search signal for searching for a desired network. Transmission of the probe request is performed by the search signal transmission unit 205. Further, the search signal transmission unit 205 also transmits a probe response that is a response signal to the received probe request. In the present embodiment, when the user operates the setting button 106 and starts the automatic setting process, information indicating that automatic setting is being performed (automatic setting operation is in progress) is added to the beacon, probe request, and probe response. Send. This information is added as an Information Element (Information Element, IE).

  A search signal receiving unit 206 controls reception of a device search signal such as a probe request from another device. The search signal reception unit 206 receives the probe request. The search signal receiving unit 206 also receives a probe response. Various information of the transmission source device is added to the device search signal and the response signal. A network control unit 207 controls network connection. The connection processing to the wireless LAN ad hoc network is performed by the network control unit 207.

  In the automatic setting function block 202, 208 is a communication parameter receiving unit that receives (accepts) communication parameters from a partner device, and 209 is a communication parameter providing unit that provides communication parameters to the partner device. An automatic setting control unit 210 controls various protocols in automatic setting. The automatic setting process described later is performed by the communication parameter receiving unit 208 and the communication parameter providing unit 209 based on the control of the automatic setting control unit 210. The automatic setting control unit 210 also determines whether or not the elapsed time since the communication parameter automatic setting process has started exceeds the time limit for the setting process. If it is determined that the time limit has been exceeded, the automatic setting process is stopped under the control of the automatic setting control unit 210.

  Reference numeral 211 denotes a provider detection unit that detects a communication parameter providing device (hereinafter, a providing device). The providing source detection unit 211 detects a communication parameter providing device based on transmission and response of the search signal by the search signal transmission unit 205 and the search signal reception unit 206. Further, the providing source detecting unit 211 can also detect the providing device by receiving the beacon by the packet receiving unit 203. When receiving communication parameters, the requested providing device is requested to provide communication parameters, and the communication parameters are provided. In the following description, a device that receives communication parameters is called a receiving device.

  A communication parameter storage unit 212 stores communication parameters provided from the providing device or communication parameters provided to the receiving device. The communication parameter storage unit 212 corresponds to the storage unit 103. In this embodiment, when communication parameters are provided from another device, the communication parameters are stored in the storage unit 103 as set parameters. Further, when the communication parameter is provided to another apparatus, the communication parameter is stored in the storage unit 212 as a set parameter. The set parameters stored in the storage unit 103 may be discarded when communication over a network configured using the set parameters is completed. Alternatively, the information may be discarded when the apparatus is turned off after a predetermined time has elapsed since it was stored in the storage unit 103. Reference numeral 213 denotes a beacon control unit that controls the transmission timing of a beacon (notification signal). Reference numeral 214 denotes a beacon generation unit that generates a beacon. The generated beacon is transmitted to the network by the packet transmission unit 204.

  All the functional blocks have a mutual relationship in terms of software or hardware. Further, the functional block is an example, and a plurality of functional blocks may constitute one functional block, or any functional block may be further divided into blocks that perform a plurality of functions.

  FIG. 3 is a diagram illustrating a communication device A32 (hereinafter, device A), a communication device B33 (hereinafter, device B), and an ad hoc network A31 (hereinafter, network A). All these communication apparatuses have the configurations shown in FIGS. 1 and 2 described above.

  There are three possible communication parameter setting situations when two communication apparatuses implement network connection.

(1) Communication parameters are not set for both units. (2) Communication parameters are set for one unit. (3) Communication parameters are set for both units. It explains using. The case (1) will be described with reference to FIG. 4, the case (2) will be described with reference to FIG. 5, and the case (3) will be described with reference to FIG.

  FIG. 4 is a sequence diagram until communication devices with communication parameters not set share communication parameters and share an encryption key.

  When the setting button 106 is pressed in the device A and the device B, the parameter providing role determination process of which device A or device B becomes the communication parameter providing device and which becomes the communication parameter receiving device operates (F401). Through the parameter provision role setting process, the communication device A determines the providing device (F402). On the other hand, the communication apparatus B determines as a providing destination apparatus (F403).

  Since the role of providing communication parameters has been determined, parameter sharing processing is performed between the communication devices A and B (F404). Specifically, the communication device B transmits a message requesting the communication device A to provide communication parameters, and the communication device A provides the communication parameters to the communication device B. In this embodiment, the communication parameter automatic setting process is performed according to a predetermined protocol. In the following description, it is assumed that the predetermined protocol is a Wi-Fi Protected Setup (WPS) protocol.

  When the communication parameter sharing process is completed, the identifier indicating the communication parameter setting state is set to “configured” in each communication device. The identifier is set to “unconfigured” when the communication parameter is not set. The identifier is also set to “unconfigured” even when the communication parameter is manually set by a user operation at the input unit 109.

  Thereafter, the communication device B that is the providing destination device performs connection processing to the communication device A that is the providing source device (F407). When the connection process is completed, a handshake defined in IEEE802.11i or WPA / WPA2 is started and a key exchange process is performed (F408). WPA is Wi-Fi Protected Access and is a standard for an encryption method using TKIP (Temporal Key Inter- stance Protocol) standardized by Wi-Fi Alliance. WPA2 is a new WPA standard and also supports AES (Advanced Encryption Standard) encryption. In the key exchange process, a random number is exchanged between communication devices based on a common encryption key (PMK) common between communication devices, and the encryption key of the communication channel is used using the random number exchanged with the common encryption key (PMK). This is a process for generating (PTK) and sharing the encryption key (PTK). When the user of each device shares the encryption key in advance and connects, the pre-shared key (PSK) is used as the PMK.

  Once the communication parameter is set by the automatic setting process, the identifier indicating the communication parameter setting state is “set”. However, when the parameter automatic setting process is performed again, the identifier is changed to “not set”. Perform a series of processing. The identifier indicating the communication parameter setting state can be set to “not set” in accordance with a user operation on the input unit 109.

  FIG. 5 is a sequence diagram from when communication devices in which one communication parameter is not set and the other communication parameter is set to each other to perform communication parameter automatic setting processing and share an encryption key.

  In apparatus A and apparatus B, the setting button 106 is pressed. It is assumed that the communication parameter has already been set for the device A and the communication parameter has not been set for the device B. In this case, the device A becomes a communication parameter providing device (F501). In the communication apparatus A, the identifier indicating the communication parameter setting state is set to “Configured”. Note that a communication device whose identifier indicating the communication parameter setting state is “Configured” is a communication parameter providing device when performing communication parameter automatic setting processing.

  Apparatus B performs communication parameter provision role setting processing. In this communication parameter providing role setting process, apparatus B executes a providing apparatus search process (F502). Since the communication device A is the providing device, the communication device B detects the communication device A that is the providing device, and determines itself as the providing destination device (receiving device) (F503). In the communication parameter provision role setting process, when a device that is not determined to be a providing device detects a providing device, the role of the providing device and the receiving device is determined by determining itself as a providing destination device (receiving device).

  Since the role of providing communication parameters has been determined, communication parameter automatic setting processing is performed between communication devices A and B (F504). Specifically, the communication device B issues a communication parameter provision request to the communication device A, and the communication device A provides the communication parameter to the communication device B according to the WPS protocol.

  When the communication parameter sharing process is completed, the communication device B sets the identifier indicating the communication parameter setting state to “Configured”. The identifier is set to “unconfigured” when the communication parameter is not set.

  After that, the communication device B that is the providing destination device performs connection processing to the communication device A that is the providing source device (F506). When the connection process is completed, a handshake defined by IEEE802.11i or WPA / WPA2 is started, and a key exchange process is performed (F507).

  FIG. 6 is a sequence diagram until communication devices for which communication parameters have been set share an encryption key.

  In the devices A and B, the set communication parameters are acquired from the storage unit 103. If the communication parameter automatic setting process has been set, the value of the role at the time of setting (communication parameter providing apparatus or receiving apparatus) is acquired (F601, F602).

  Next, in each communication apparatus, an identifier indicating a communication parameter setting state is set to “Configured”. The identifiers indicating the communication parameter setting states of the devices A and B are both “set”. In this case, the communication parameter automatic setting process does not operate.

  Thereafter, the communication device B, which is the providing destination device, performs connection processing to the communication device A, which is the providing source device (F605). That is, the providing apparatus is always an ad hoc network creator (Adhoc Creator), and the providing destination apparatus is an ad hoc network participant (Adhoc Joiner). However, the providing device may be a participant and the providing device may be an opener. In the wireless LAN ad-hoc network, the creator (Creator) and the participant (Joiner) may be determined uniquely.

  When the connection process is completed, a handshake defined in IEEE802.11i or WPA / WPA2 is started, and a key exchange process is performed (F606).

  4 to 6 are classified according to the parameter setting state in the communication apparatus. However, when the user wants to create a new parameter and reconstruct the network, the identifier indicating the communication parameter setting state is set to “unset” by the user operation at the input unit 109 of the device A or device B. Thereafter, when the setting button 106 is pressed in the devices A and B, the sequence shown in FIG. 4 operates.

  Next, internal processing of each communication apparatus for realizing these sequences will be described with reference to FIGS.

  FIG. 7 is a flowchart until a communication device in which communication parameters are not set or set is connected to the ad hoc network and starts key exchange. The communication device A and the communication device B perform the operations described with reference to FIGS.

  In FIG. 7, the communication device acquires various types of information of the communication device from the storage unit 103. The identifier indicating the communication parameter setting state of the own communication device is referred to (S701). When the identifier is “configured” (Configured), the communication partner apparatus is searched (S702). This search is performed by transmitting a probe request and receiving a probe response of a response signal. Moreover, you may perform by reception of the beacon signal which a communicating party apparatus transmits, and you may perform by reception of the probe request signal which the other party apparatus transmitted.

  In step S703, it is determined whether a connection partner has been detected. If the connection partner is not detected, a new network is established using the communication parameters that have been set (S705). After opening a new network, the processing of FIG. 8 is performed.

  If a connection partner is detected in step S703, the network parameters (ESSID, BSSID, privacy bit, WPAIE, and RSNIE) of the partner device are referred to and compared with the network parameters of the own device (S704, S706). The network parameter of the partner device is included in the beacon signal, probe request signal, and probe response signal transmitted by the partner device, and is determined by analyzing the signal received when searching for the partner device. The ESSID is an extended service set identification and is one of network identifiers for identifying a network. BSSID is BasicService Set Identification, and is one of network identifiers for identifying networks. The privacy bit is information indicating whether or not to perform encrypted communication. WPAIE is WPA Information Element, and is information indicating that it is compatible with WPA. The RSN IE is a Robust Security Network Information Element and is information indicating that it is compatible with WPA2. The network parameter is not limited to the above, and may include other elements. That is, the network parameter will be described as an example of network information.

  If the network parameter of the partner device does not match the network parameter of the own device as a result of the comparison of the network parameters, a new network is established using the communication parameters that have been set, as in step S705 (S708). After opening a new network, the processing of FIG. 8 is performed.

  In step S706, if the network parameters match between the partner device and the own device, the communication parameter that has been set is used to join the existing network (S707). At this time, since the partner device also has the same network parameters, the own device and the partner device exist in the same network.

  After joining the existing network in step S707, the communication parameter setting state of the counterpart device is referred to (S709). Information indicating the communication parameter setting state of the counterpart device is also included in the beacon signal, probe request signal, and probe response signal transmitted by the counterpart device, and is determined by analyzing the signal received when searching for the counterpart device.

  As a result of the reference in step S709, when the setting state of the partner apparatus is “Configured” (S710), key exchange processing with the partner apparatus is performed (S711). After performing the key exchange process, encrypted communication is performed using the encryption key shared with the partner apparatus by the key exchange process (S719).

  If “not set” (Unconfigured) in step S710, the process waits until there is a request for key exchange processing from the partner apparatus (S717). When a request for key exchange processing is received from the counterpart device (S721), key exchange processing with the counterpart device is performed (S711). After performing the key exchange process, encrypted communication is performed using the encryption key shared with the partner apparatus by the key exchange process (S719). The process is terminated when a predetermined time has elapsed or the user has performed a termination operation without receiving a request for the key exchange process from the partner apparatus.

  If the identifier of the own communication device is “unconfigured” (UnConfigured) in step S701, the communication partner device is searched (S712). This search is performed by transmitting a probe request and receiving a probe response of a response signal. Moreover, you may perform by reception of the beacon signal which a communicating party apparatus transmits, and you may perform by reception of the probe request signal which the other party apparatus transmitted.

  In step S713, it is determined whether a connection partner has been detected. If the connection partner is not detected as a result of the determination, a new communication parameter is generated, and a new network is opened using the generated communication parameter (S718). After opening a new network, the processing of FIG. 8 is performed. Note that communication parameters of a new network to be opened when a connection partner is not detected may be stored in the storage unit 103 in advance, and a new network may be opened using this communication parameter in S718.

  If a connection partner is detected in step S713, the connection partner is joined to an existing network (S714). This participation in the existing network is performed using the ESSID, BSID, and other information included in the beacon signal, probe request signal, and probe response signal transmitted by the counterpart device received in the search in S712. Thereafter, automatic communication parameter setting processing is performed with the connection partner (S715), and key exchange processing is performed using the communication parameters shared with the connection partner (S716). After performing the key exchange process, encrypted communication is performed using the encryption key shared with the partner apparatus by the key exchange process (S720).

  Thus, by referring to the communication parameter setting information of each communication device, it is possible to perform appropriate communication connection processing.

  FIG. 8 is a flowchart from when a communication device in which communication parameters are not set or set to start an ad hoc network and start key exchange.

  When the communication device has already established an ad hoc network and detects another communication device (S800), the communication parameter setting state of the communication device is referred to (S801). Detection of other communication devices is performed by receiving a beacon signal, receiving a probe request signal, transmitting a probe request signal, and receiving a probe response signal that is a response signal.

  When the setting state of the own communication device is “configured” (Configured), the network parameters (ESSID, BSSID, privacy bit, WPAIE, and RSNIE) of the detected partner device are referred to. Then, the network parameter of the hand device is compared with the network parameter of the own device (S802, S803). The network parameter of the partner device is included in the beacon signal, probe request signal, and probe response signal transmitted by the partner device, and is determined by analyzing the signal received when the partner device is detected.

  As a result of the comparison, if the network parameter of the partner device does not match the network parameter of the own device, the process is terminated. As a result of the comparison in step S803, when the network parameter matches between the partner device and the own device, the communication parameter setting state of the partner device is referred to (S804). Information indicating the communication parameter setting state of the counterpart device is also included in the beacon signal and probe response signal transmitted by the counterpart device, and is determined by analyzing the signal received when searching for the counterpart device.

  As a result of the reference in step S805, if the setting state is “configured” (Configured), key exchange processing is performed (S807). If the setting state is “not set” (Unconfigured) as a result of the reference in step S804, communication parameter and communication parameter automatic setting processing is performed before the key exchange processing (S806). After performing the communication parameter automatic setting process, the key exchange process is performed using the communication parameter shared with the connection partner (S807). After performing the key exchange process, encrypted communication is performed using the encryption key shared with the partner apparatus by the key exchange process (S812).

  Consider a case where the communication parameter setting state of the own communication device is “unconfigured” (UnConfigured) in step S801. Here again, the network parameters (ESSID, BSSID, privacy bit, WPAIE, and RSNIE) of the partner apparatus are referred to and compared with the network parameters of the own apparatus (S808, S809). The network parameter of the partner device is included in the beacon signal, probe request signal, and probe response signal transmitted by the partner device, and is determined by analyzing the signal received when the partner device is detected.

  As a result of the comparison, if the network parameter of the partner device does not match the network parameter of the own device, the process is terminated.

  As a result of the comparison in step S808, if the network parameter matches between the partner device and the own device, automatic setting processing of the partner device and the communication parameter is performed (S810). After performing the communication parameter automatic setting process, the key exchange process is performed using the communication parameter shared with the connection partner (S811). After performing the key exchange process, encrypted communication is performed using the encryption key shared with the partner apparatus by the key exchange process (S813).

  As described above, when the connection is established from the partner device, the communication parameter is automatically set by referring to the communication parameter setting state, or the key exchange process using the communication parameter shared with the communication partner is performed. It becomes possible to determine whether or not. The automatic setting of communication parameters is automatic setting of communication parameters for performing wireless LAN communication such as an SSID as a network identifier, an encryption method, an encryption key, an authentication method, and an authentication key.

  In the first embodiment, information indicating whether the communication parameter has been set or not set is given to the beacon signal, the probe request signal, and the probe response signal, and the information is referred to before the key exchange is performed. Judge whether or not to implement. By performing the key exchange process according to the determination result, it is possible to prevent unnecessary traffic from being issued on the network and to prevent an unexpected operation. Further, by determining the organizer or the participant of the wireless LAN ad hoc network according to the role of the providing device or the receiving device in the automatic communication parameter setting, the processing time until the connection is completed can be shortened.

(Example 2)
In the first embodiment, an example has been described in which an identifier indicating a communication parameter setting state is operated to distinguish whether the communication apparatus performs communication parameter automatic setting or encryption key exchange. In the second embodiment, IE: (Information Element information element) information is used to distinguish them. For example, when the communication parameter has been set, at least one of WPAIE and RSNIE is assigned to the beacon signal, probe request signal, and probe response signal, and neither is assigned when the communication parameter is not set. The communication apparatus according to the second embodiment also has the configuration illustrated in FIGS. 1 and 2 described above.

  There are three possible communication parameter setting situations when two communication apparatuses implement network connection.

(1) Communication parameters are not set for both units. (2) Communication parameters are set for one unit. (3) Communication parameters are set for both units. Will be described. The case of (1) will be described with reference to FIG. 9, the case of (2) will be described with reference to FIG. 10, and the case of (3) will be described with reference to FIG.

  FIG. 9 is a sequence diagram until communication devices that have not been set with communication parameters share communication parameters and share encryption keys.

  When the setting button 106 is pressed in the device A and the device B, the parameter provision role determination process of which device A or device B becomes the communication parameter providing device and which becomes the communication parameter receiving device operates (F901). Through the parameter provision role setting process, the communication device A determines the providing source device (F902). On the other hand, the communication device B determines the providing destination device (F903).

  Since the role of communication parameter provision has been determined, parameter sharing processing is performed between the communication device A and the communication device B (F904). Specifically, the communication device B issues a communication parameter provision request to the communication device A, and the communication device A provides the communication parameter to the communication device B according to the WPS protocol.

  When the communication parameter sharing processing is completed, at least one of WPAIE and RSNIE is set in accordance with the security information in each communication device (F905, F906). That is, WPAIE is set when WPA is used as the encryption method, and RSNIE is set when WPA2 is used.

  After that, the communication device B that is the providing destination device performs a connection process to the communication device A that is the providing source device (F907). When the connection process is completed, a handshake defined in IEEE802.11i, WPA, or WPA2 is performed, and a key exchange process is performed (F908).

  Once the communication parameters are set by the automatic setting process, at least one of WPAIE and RSNIE is assigned. However, when performing a new parameter automatic setting process again, a series of processes are performed after deleting both WPAIE and RSNIE. It can be carried out. WPAIE and RSNIE can be deleted in accordance with a user operation on the input unit 109.

  FIG. 10 is a sequence diagram until communication devices in which one communication parameter is not set and the other communication parameter has been set perform automatic communication parameter setting processing and share an encryption key.

  In apparatus A and apparatus B, the setting button 106 is pressed. It is assumed that the communication parameter has already been set for the device A and the communication parameter has not been set for the device B. In this case, the device A is a communication parameter providing device. (F1001). In the communication apparatus A, at least one of WPAIE and RSNIE is set according to the security information. Note that a communication device to which at least one of WPAIE and RSNIE is assigned becomes a communication parameter providing device when performing communication parameter automatic setting processing.

  Apparatus B performs communication parameter provision role setting processing. In the communication parameter providing role setting process, apparatus B executes a providing apparatus search process (F1002). Since the communication device A is the providing device, the communication device B detects the communication device A, which is the providing device, and determines itself as the providing destination device (receiving device) (F1003). In the communication parameter provision role setting process, when a device that is not determined to be a providing device detects a providing device, the role of the providing device and the receiving device is determined by determining itself as a providing destination device (receiving device).

  Since the role of providing communication parameters has been determined, communication parameter automatic setting processing is performed between communication devices A and B (F1004). Specifically, the communication device B issues a communication parameter provision request to the communication device A, and the communication device A provides the communication parameter to the communication device B according to the WPS protocol.

  When the communication parameter sharing process is completed, at least one of WPAIE and RSNIE is set in the communication device B (F1005). That is, WPAIE is set when WPA is used as the encryption method, and RSNIE is set when WPA2 is used.

  Thereafter, the communication device B that is the providing destination device performs connection processing to the communication device A that is the providing source device (F1006). When the connection process is completed, a handshake defined in IEEE 802.11i, WPA, or WPA2 is performed, and a key exchange process is performed (F1007).

  FIG. 11 is a sequence diagram until communication devices for which communication parameters have been set share an encryption key.

  In the devices A and B, the set communication parameters are acquired from the storage unit 103. Also, if it has been set by the communication parameter automatic setting process, the value of the role at the time of setting (communication parameter providing device or receiving device) is acquired (F1101, F1102).

  Next, in each communication apparatus, at least one of WPAIE and RSNIE is set (F1103, F1104).

  Thereafter, the communication device B, which is the providing destination device, performs connection processing on the communication device A, which is the providing source device (F1105). That is, the providing device is an ad hoc network creator (Adhoc Creator), and the providing device is an ad hoc network participant (Adhoc Joiner). However, the providing device may be a participant and the providing device may be an opener. In the wireless LAN ad hoc network, the creator (Creator) and the participant (Joiner) may be determined uniquely.

  When the connection process is completed, a handshake defined in IEEE802.11i, WPA, or WPA2 is performed, and a key exchange process is performed (F1106).

  9 to 11 are classified according to the parameter setting state in the communication apparatus. However, if it is desired to recreate the network by creating new parameters at the user's will, WPAIE and RSNIE are deleted by a user operation at the input unit 109 of devices A and B. Thereafter, when the setting button 106 is pressed in the devices A and B, the sequence of FIG. 9 operates.

  Next, internal processing of each communication apparatus for realizing these sequences will be described with reference to FIGS. 12 and 13.

  FIG. 12 is a flowchart until a communication device in which communication parameters are not set or set is connected to the ad hoc network and starts key exchange. The communication device A and the communication device B perform the operations described with reference to FIGS.

  In FIG. 12, the communication device acquires various types of information of the own communication device from the storage unit 103. The communication parameter setting state of the own communication device is referred to (S1201). If the communication parameter has been set, the communication partner device is searched (S1202). This search is performed by transmitting a probe request and receiving a probe response of a response signal. Moreover, you may perform by reception of the beacon signal which a communicating party apparatus transmits, and you may perform by reception of the probe request signal which the other party apparatus transmitted.

  In step S1203, it is determined whether a connection partner has been detected. If the connection partner is not detected as a result of the determination, a new network is held using the set communication parameters (S1209). After opening a new network, the processing of FIG. 13 is performed.

  If a connection partner is detected, in step S1205, the network parameters (ESSID, BSSID, privacy bit, WPAIE, RSNIE) of the partner device are referred to and compared with the network parameters of the own device. The network parameter of the partner device is included in the beacon signal, probe request signal, and probe response signal transmitted by the partner device, and is determined by analyzing the signal received when searching for the partner device.

  If the network parameter of the partner device does not match the network parameter of the own device as a result of the comparison, a new network is held using the communication parameters that have been set (S1210). After opening a new network, the processing of FIG. 13 is performed.

  In step S1205, if the network parameter matches between the partner device and the own device, the communication parameter that has been set is used to join the existing network (S1206). At this time, since the partner device also has the same network parameters, the own device and the partner device exist in the same network.

  Since the network parameters match between the partner device and the own device, the settings of WPAIE and RSNIE are the same. In this case, a key exchange process is performed (S1207). After performing the key exchange process, encrypted communication is performed using the encryption key shared with the partner apparatus by the key exchange process (S1208).

  When the communication parameter setting state of the own communication device is not set in step S1201, the communication partner device is searched (S1211). This search is performed by transmitting a probe request and receiving a probe response of a response signal. Moreover, you may perform by reception of the beacon signal which a communicating party apparatus transmits, and you may perform by reception of the probe request signal which the other party apparatus transmitted.

  In step S1212, it is determined whether a connection partner has been detected. If the connection partner is not detected as a result of the determination, a new communication parameter is generated, and a new network is opened using the generated communication parameter (S1217). After opening a new network, the processing of FIG. 13 is performed. Note that communication parameters of a new network to be established when a connection partner is not detected may be stored in the storage unit 103 in advance, and a new network may be established using this communication parameter in S1217.

  If the connection partner is detected in step S1212, the connection partner is joined to the existing network (S1213). This participation in the existing network is performed using the ESSID, BSID, and other information included in the beacon signal, probe request signal, and probe response signal transmitted by the counterpart device received in the search in S1211. Thereafter, automatic communication parameter setting processing is performed with the connection partner (S1214), and key exchange processing is performed using the communication parameters shared with the connection partner (S1215). After performing the key exchange process, encrypted communication is performed using the encryption key shared with the partner apparatus by the key exchange process (S1216).

  Thus, by referring to the communication parameter setting information of each communication device, it is possible to perform appropriate communication connection processing.

  FIG. 13 is a flowchart until a communication device in which communication parameters are not set or has been set up opens an ad hoc network and starts key exchange.

  When the communication device has already established an ad hoc network and detects another communication device (S1301), the communication parameter setting state of the communication device is referred to (S1302). Detection of other communication devices is performed by receiving a beacon signal, receiving a probe request signal, transmitting a probe request signal, and receiving a probe response signal that is a response signal.

  If the setting state of the own communication device is already set, the network parameters (ESSID, BSSID, privacy bit) of the partner device are referred to and compared with the network parameters of the own device (S1302, S1303). The network parameter of the partner device is included in the beacon signal, probe request signal, and probe response signal transmitted by the partner device, and is determined by analyzing the signal received when the partner device is detected.

  If the network parameter of the partner apparatus and the network parameter of the own apparatus do not match (S1304), the process ends. When the network parameters match between the partner device and the own device (S1304), the partner device's WPAIE and RSNIE are referred to. The partner device's WPAIE and RSNIE are also included in the beacon signal and probe response signal transmitted by the partner device, and are determined by analyzing the signal received when searching for the partner device.

  If neither the WPAIE nor the RSNIE of the partner device is set (S1305), the communication partner performs the communication parameter automatic setting process (S1309). After performing the communication parameter automatic setting process, the key exchange process is performed using the communication parameter shared with the connection partner (S1307). After performing the key exchange process, encrypted communication is performed using the encryption key shared with the partner apparatus by the key exchange process (S1308).

  When at least one of WPAIE and RSNIE of the partner device is set (S1305), it is determined whether the WPAIE and RSNIE set as the communication partner matches the WPAIE and RSNIE set for the own device ( S1306). If they match, a key exchange process is performed (S1307). After performing the key exchange process, encrypted communication is performed using the encryption key shared with the partner apparatus by the key exchange process (S1308). If the WPAIE and RSNIE set for the communication partner do not match the WPAIE and RSNIE set for the own apparatus (S1306), the process ends. If the WPAIE / RSNIE set for the communication partner does not match the WPAIE / RSNIE set for the own device (S1306), the communication partner may perform automatic communication parameter setting processing in S1309. Good.

  Consider a case where the communication parameter setting state of the own communication device is not set in step S1302. Here, the network parameters (ESSID, BSSID, privacy bit, WPAIE, RSNIE) of the partner apparatus are also referred to and compared (S1310). The network parameter of the partner device is included in the beacon signal, probe request signal, and probe response signal transmitted by the partner device, and is determined by analyzing the signal received when the partner device is detected.

  As a result of the comparison, if the network parameter of the partner device and the network parameter of the own device do not match (S1311), the process ends. As a result of the comparison in step S1311, when the network parameter matches between the partner device and the own device, automatic setting processing of the partner device and the communication parameter is performed (S1312). After performing the communication parameter automatic setting process, the key exchange process is performed using the communication parameter shared with the connection partner (S1313). After performing the key exchange process, encrypted communication is performed using the encryption key shared with the partner apparatus by the key exchange process (S1314).

  As described above, when the connection is established from the partner device, the communication parameter is automatically set by referring to the communication parameter setting state, or the key exchange process using the communication parameter shared with the communication partner is performed. It becomes possible to determine whether or not. The communication parameter automatic setting is a process of automatically setting communication parameters for performing wireless LAN communication such as an SSID as a network identifier, an encryption method, an encryption key, an authentication method, and an authentication key.

  In the second embodiment, the presence / absence of key exchange is determined with reference to WPAIE or RSNIE added to the beacon signal, probe request signal, and probe response signal. Since the key exchange process is performed according to the determination result, it is possible to prevent unnecessary traffic from being issued on the network and to prevent an unexpected operation.

  As described above, according to the above-described embodiment, it is possible to reduce the failure of the encryption sharing process by executing either the communication parameter sharing process or the encryption sharing process according to the communication parameter setting state. As a result, it is possible to prevent unnecessary traffic from being issued on the network and to prevent an unexpected operation.

<Other embodiments>
The present invention can also be realized by executing the following processing. That is, software (program) that realizes the functions of the above embodiments is supplied to a system or apparatus via a network or various storage media, and a computer (or CPU, MPU, etc.) of the system or apparatus reads and executes the computer program It is processing to do.

DESCRIPTION OF SYMBOLS 101 Communication apparatus 102 Control part 103 Memory | storage part 104 Radio | wireless part 105 Display part 106 Setting button 107 Antenna control part 108 Antenna 109 Input part

Claims (8)

A communication device,
A parameter sharing unit that executes a predetermined protocol with the partner device and performs a parameter sharing process for sharing communication parameters with the partner device;
Encryption sharing means for performing encryption sharing processing for sharing an encryption key with the counterpart device using the communication parameter;
Determining means for determining a communication parameter setting state of the communication device;
An execution means for executing whether to perform the encryption key sharing process without performing the parameter sharing process or the parameter sharing process with the counterpart device according to the determination by the determination means;
A communication device.   The execution means indicates that the communication parameter setting state of the communication device has set the communication parameter by executing the predetermined protocol, and the network information acquired from the counterpart device and the network information set in the communication device 2. The communication according to claim 1, wherein a network is established based on communication parameters set in the communication device without performing the parameter sharing process and the encryption key sharing process. apparatus.   The execution means indicates that the communication parameter setting state of the communication device has set the communication parameter by executing the predetermined protocol, and the network information acquired from the counterpart device and the network information set in the communication device The encryption key sharing process is executed without performing the parameter sharing process according to a communication parameter setting state of the counterpart device. Communication device.   4. The determination unit according to claim 1, wherein the determination unit determines a setting state of the communication parameter based on information indicating that the communication parameter has been set by executing the predetermined protocol. Item 1. The communication device according to item 1.   The communication device sets up a network when the communication parameter setting state of the communication device indicates that the communication parameter is set by executing the predetermined protocol, and the partner device is not detected. The communication apparatus according to any one of claims 1 to 4.   When the network information acquired from the partner device detected after the communication device has opened a network matches the network information of the network established by the communication device, the parameter sharing process is executed with the detected partner device The communication apparatus according to any one of claims 1 to 5, wherein: A communication device control method comprising:
A parameter sharing step of executing a predetermined protocol with the counterpart device and performing a parameter sharing process for sharing communication parameters with the counterpart device;
An encryption sharing step for performing an encryption sharing process for sharing an encryption key with the counterpart device using the communication parameter;
A determination step of determining a communication parameter setting state of the communication device;
An execution step of performing whether to perform the encryption key sharing processing without performing the parameter sharing processing or the parameter sharing processing with the counterpart device in accordance with the determination in the determination step;
A control method for a communication apparatus having   A computer program for causing a computer to function as the communication device according to claim 1.

Images