JP2016122983A - Radio access point, and radio access system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To set the acceptance/rejection for relaying radio communication by a terminal without requesting troublesome setting by a user.SOLUTION: A radio AP 10 for relaying radio communication by a terminal includes: a reception part 111 for receiving permission/rejection information showing a permission/rejection of radio communication in association with product information being identification information common to a plurality of terminals; an acquisition part 112 for acquiring product information of a connection terminal from the connection terminal connected to the radio AP 10 by a radio communication link; a generation part 113 for generating relay acceptance/rejection information showing the relay acceptance/rejection of radio communication by the connection terminal on the basis of permission/rejection of the radio communication shown in the permission/rejection information in association with the product information acquired by the acquisition part 112; and a control part 114 for controlling whether to relay or block the radio communication according to the relay acceptance/rejection information.SELECTED DRAWING: Figure 3

Description

  The present invention relates to a wireless access point and a wireless access system.

  A wireless access point (hereinafter also referred to as a wireless AP) establishes a communication link with a wireless communication terminal (hereinafter also simply referred to as a terminal), and transmits and receives communication signals to and from the terminal via the established communication link. When establishing a communication link with each of a plurality of terminals, the wireless AP relays communication between the terminals by transmitting a communication signal received from one terminal to another terminal. At that time, for the purpose of ensuring security or the like, it is performed for each terminal whether or not to relay communication by the wireless AP.

  Patent Document 1 discloses an access control system that controls whether communication within a group is possible based on a predetermined security policy. Specifically, the access control system allows communication by a terminal that satisfies the security policy, while blocking communication by a terminal that does not satisfy the security policy, so that the terminal satisfies the security policy. Guide the terminal.

JP 2011-130016 A

  There is a problem that it is troublesome for a user to set whether or not to relay communication by a wireless access point for each terminal. In particular, when the terminal that can be connected to the wireless access point varies, the troublesome setting work by the user is further increased.

  The present invention has been made to solve the above problem, and provides a wireless access point that sets whether or not relaying of wireless communication by a terminal can be set without requiring a troublesome setting by a user.

  In order to solve the above problems, a wireless access point according to an aspect of the present invention is a wireless access point for relaying wireless communication by a terminal, and corresponds to product information that is identification information common to a plurality of terminals. An accepting unit for accepting permission / inhibition information indicating permission / inhibition of wireless communication, an obtaining unit for obtaining product information of the connection terminal from a connection terminal connected to the wireless access point via a wireless communication link, and the obtaining unit A generation unit that generates relay availability information indicating whether the connection terminal can relay the wireless communication based on the wireless communication permission / inhibition indicated in association with the acquired permission / rejection information in the acquired product information, and the relay availability A control unit that controls whether to relay or block the wireless communication according to the information.

  According to this, the wireless access point controls whether or not relaying of wireless communication by the connected terminal is performed based on wireless communication permission / prohibition information for each product information received from a user or a service person (hereinafter simply referred to as “user”). be able to. Here, since the user does not specify permission / rejection information for each terminal, but specifies permission / rejection information for each product information, the burden of setting is reduced as compared with the case of specifying for each terminal. In addition, even if the number of connection terminals connected to the wireless access point may increase or decrease after accepting permission / denial information, whether to relay wireless communication by a new connection terminal is flexibly determined based on the accepted permission / rejection information. Therefore, the troublesome setting by the user is further reduced. Therefore, the wireless access point can set whether or not to relay wireless communication by the terminal without requiring troublesome setting by the user.

  In addition, the reception unit is a group for product information of the terminal, and specifies information indicating a group indicating that wireless communication between terminals corresponding to the product information included in the group is permitted. The generation unit generates the relay availability information so that wireless communication between terminals corresponding to product information included in the group is relayed by the control unit based on the information specifying the group. You may do that.

  According to this, it is possible to set whether or not to relay by a wireless access point by designating a group that is allowed to perform wireless communication with each other. Setting only whether or not to relay is equivalent to setting only one group at the wireless access point. By setting not only one group but also a plurality of groups in the wireless access point, it is possible to control wireless communication more flexibly. Therefore, the wireless access point can more flexibly set whether or not to relay wireless communication by the terminal without requiring troublesome setting by the user.

  The acquisition unit further transmits request information for requesting the connection terminal to transmit product information to the wireless access point to the connection terminal, and the connection terminal transmits the request information according to the request information. The product information may be acquired.

  According to this, the wireless access point acquires product information transmitted by the connection terminal in response to request information transmitted by the wireless access point. Thereby, the wireless access point can acquire the product information of the connection terminal more reliably.

  The wireless access point further includes a storage unit, and the permission / refusal information further includes the predetermined condition for a logging function that is a function of storing communication data related to wireless communication using a predetermined condition. In addition, the control unit may further store communication data related to the wireless communication in the storage unit when the relayed wireless communication satisfies the predetermined condition.

  According to this, the wireless access point stores the communication data related to the relayed wireless communication that meets the predetermined condition. Further, maintenance and operability of the wireless access point and the wireless access system are improved.

  The product information of the terminal may include product model number information of the terminal.

  According to this, the wireless access point uses the product model number as product information. The product model number is information conventionally used to indicate the product type. By using this information as product information to determine whether or not the wireless communication of the connecting terminal is relayed, the product information of the connecting terminal can be acquired more correctly.

  The terminal may include a PC or a mobile terminal.

  According to this, the wireless access point can control whether to relay wireless communication by the PC or the portable terminal.

  The terminal may include a PC or a mobile terminal that can execute an application, and the PC or the mobile terminal may operate as the terminal by executing the application.

  According to this, the wireless access point can control whether or not the wireless communication can be relayed by the PC or the portable terminal based on the processing by the application operating on the PC or the portable terminal.

  A wireless access system according to an aspect of the present invention includes the wireless access point described above and the connection terminal connected to the wireless access point via the wireless communication link.

  Thereby, there exists an effect similar to said wireless access point.

  A wireless access system according to an aspect of the present invention is a wireless access system for relaying wireless communication by a terminal, and includes a first wireless access point and a second wireless access point that can perform wired communication with each other. An access system, connected to the first wireless access point by a wireless communication link, a reception unit that receives permission information indicating permission / inhibition of wireless communication in association with product information that is identification information common to a plurality of terminals. Product information of the first connection terminal is obtained from the first connection terminal, and the second connection terminal connected to the second wireless access point by a wireless communication link An acquisition unit that acquires product information of the connection terminal, and the wireless communication indicated in association with the product information acquired by the acquisition unit in the permission / rejection information. Based on whether or not the wireless communication between the first connection terminal and the second connection terminal is generated, a generation unit that generates relayability information indicating whether or not to relay wireless communication, and the wireless communication according to the relayability information And a control unit that controls whether to relay or block.

  Thereby, there exists an effect similar to said wireless access point.

  Note that the present invention can be realized not only as an apparatus but also as a method using steps as processing units constituting the apparatus, as a program for causing a computer to execute the steps, or as a computer read recording the program. It can also be realized as a possible recording medium such as a CD-ROM, or as information, data or a signal indicating the program. These programs, information, data, and signals may be distributed via a communication network such as the Internet.

  According to the present invention, the wireless access point can set whether or not to relay wireless communication by the terminal without requiring troublesome setting by the user.

FIG. 1 is a system configuration diagram of a radio access system according to the first embodiment. FIG. 2 is a block diagram illustrating a hardware configuration of the wireless AP according to the first embodiment. FIG. 3 is a block diagram showing a functional configuration of the wireless AP according to the first embodiment. FIG. 4 is an explanatory diagram of group designation for each product information according to the first embodiment. FIG. 5A is an explanatory diagram showing an example of a request packet according to Embodiment 1. FIG. 5B is an explanatory diagram showing an example of a response packet according to Embodiment 1. FIG. 5C is an explanatory diagram illustrating an example of product information according to Embodiment 1. FIG. 6 is an explanatory diagram of a first example of the product information list acquired from the terminal according to the first embodiment. FIG. 7 is an explanatory diagram of relay availability information for each terminal according to Embodiment 1. FIG. 8 is a flowchart showing relay processing in the wireless AP according to the first embodiment. FIG. 9 is an explanatory diagram of whether or not communication is possible in the wireless access system according to the first embodiment. FIG. 10 is a system configuration diagram of the radio access system according to the second embodiment.

  Each of the embodiments described below shows a preferred specific example of the present invention. The numerical values, shapes, materials, constituent elements, arrangement positions and connecting forms of the constituent elements, steps, order of steps, and the like shown in the following embodiments are merely examples, and are not intended to limit the present invention. In addition, among the constituent elements in the following embodiments, constituent elements that are not described in the independent claims indicating the highest concept of the present invention are described as optional constituent elements that constitute a more preferable embodiment.

  In addition, the same code | symbol is attached | subjected to the same component and description may be abbreviate | omitted.

(Embodiment 1)
In this embodiment, a wireless AP that sets whether or not relaying of wireless communication by a terminal is set for each terminal without requiring troublesome settings by a user will be described.

  FIG. 1 is a system configuration diagram of a radio access system according to the present embodiment.

  As shown in FIG. 1, the wireless access system 1 includes a wireless AP 10, surveillance cameras 21 and 22, a device server 23, a PC 31 (Personal Computer), and a smartphone 32.

  The wireless AP 10 establishes a wireless communication link with the terminal, and transmits and receives communication signals to and from the terminal via the established wireless communication link. When the wireless AP 10 establishes a wireless communication link with each of a plurality of terminals, the wireless AP 10 relays communication between the terminals by transmitting a communication signal received from one terminal to another terminal. When relaying wireless communication, the wireless AP 10 determines whether or not to relay based on product information of a terminal that is to perform wireless communication. A method for determining whether or not to relay will be described in detail later.

  The surveillance camera 21 is a surveillance camera having a wireless communication interface. The monitoring camera 21 generates an image obtained by photographing the periphery, and transmits the generated image to an appropriate terminal by wireless communication. Note that the image may be a still image or a moving image.

  The surveillance camera 21 is the same as the surveillance camera 22.

  The device server 23 is a device server having a wireless communication interface. The device server 23 connects with a device having an interface corresponding to a predetermined connection standard according to the predetermined connection standard, and communicates with a terminal via the wireless communication interface and the wireless AP 10. The device server 23 stores the image data from the monitoring camera 21 or 22, and transmits the stored image in response to a request from another terminal. In the present embodiment, the wireless AP 10 and the device server 23 are described as separate bodies, but the wireless AP 10 and the device server 23 may be integrated.

  The PC 31 is a PC having a wireless communication interface. The PC 31 receives information input from the user, and transmits the received information and the like to other terminals via the wireless AP 10. Further, the PC 31 receives information from another terminal or the like via the wireless AP 10, and presents the received information to the user using an image or sound.

  The smartphone 32 is a smartphone (high function mobile phone) having a wireless communication interface. As with the PC 31, the smartphone 32 transmits information and the like to other terminals via the wireless AP 10, and receives information from other terminals and the like via the wireless AP 10.

  Note that the PC 31 and the smartphone 32 need to have a function of receiving a request packet described later and transmitting a response packet to the request packet. For example, the PC 31 and the smartphone 32 can have the above function by installing an application that realizes the above function.

  Each of the monitoring cameras 21 and 22, the device server 23, the PC 31, and the smartphone 32 corresponds to a terminal. That is, each of the above devices is connected to the wireless AP 10 via a wireless communication link, and can communicate with each other if relayed by the wireless AP 10. Then, based on the determination of whether or not relaying is possible by the wireless AP 10, whether or not communication between the respective devices is performed is controlled.

  The terminal is not limited to the above devices as long as it has a wireless communication interface.

  Note that the information processing in the terminal may be realized by hardware or software held in advance by the terminal, or may be realized by executing a program (application) acquired from an external device.

  FIG. 2 is a block diagram showing a hardware configuration of the wireless AP according to the present embodiment.

  As illustrated in FIG. 2, the wireless AP 10 includes a CPU 101 (Central Processing Unit), a ROM 102 (Read Only Memory), a RAM 103 (Random Access Memory), a storage device 104, a WNIC 105 (Wireless Network Interface), and a wireless network. And NIC 106 (Network Interface Card).

  The CPU 101 is a processor that executes a control program stored in the ROM 102.

  The ROM 102 is a read-only storage area that holds a control program and the like.

  The RAM 103 is a volatile storage area used as a work area used when the CPU 101 executes a control program.

  The storage device 104 is a non-volatile storage area that holds a control program or data.

  The WNIC 105 is a wireless communication interface that establishes a wireless link with the wireless AP 10 and performs communication. The type of the wireless communication interface is not limited. That is, the WNIC 105 may be a wireless LAN interface that conforms to the IEEE802.11a, b, g, and n standards, or may be another wireless communication interface.

  The NIC 106 is a communication interface that transmits communication data to a LAN (not shown) or receives communication data from the LAN. The type of communication interface is not limited. In other words, the NIC 106 may be a wired LAN interface that conforms to the IEEE 802.3 standard or the like, or may be a wireless LAN interface that conforms to the IEEE 802.11a, b, g, or n standard.

  FIG. 3 is a block diagram showing a functional configuration of the wireless AP according to the present embodiment.

  As illustrated in FIG. 3, the wireless AP 10 includes a reception unit 111, an acquisition unit 112, a generation unit 113, and a control unit 114.

  The accepting unit 111 accepts, from a user, permission / denial information indicating permission / inhibition of wireless communication in association with product information that is identification information common to a plurality of terminals.

  Specifically, the reception unit 111 receives permission / denial information that is information indicating wireless communication by a terminal that can be connected to the wireless AP 10 for each product information of the terminal. Here, the “terminal that can be connected to the wireless AP 10” may be various terminals. For example, a terminal manufactured by a specific communication device manufacturer or a terminal manufactured by a specific communication device manufacturer may be used. It may be adapted to predetermined conditions. The accepting unit 111 is realized by the CPU 101, the ROM 102, the RAM 103, and the like.

  The permission / rejection information is information indicating permission / rejection of wireless communication via relay by the wireless AP 10 for each product information of the terminal. The permission / refusal information is information indicating whether wireless communication by a terminal having predetermined product information is permitted or blocked, for example. Further, the permission / refusal information may be a group including one or more pieces of product information, and may determine a group that permits wireless communication by a terminal corresponding to the product information in the group. There may be a plurality of groups. For example, assuming that there are two groups A and B, the group A may include product information a, b, and c, and the group B may include product information d and e. In this case, wireless communication between products corresponding to the product information a, b and c and wireless communication between products corresponding to the product information d and e are possible. On the other hand, for example, wireless communication between a product corresponding to product information a and a product corresponding to product information d is impossible.

  Product information is terminal identification information common to a plurality of terminals. Specifically, the product information may include information indicating a product type (monitoring camera, bridge, device server, or print server), or information indicating a concept including a plurality of other products. . The product information may include a product model number, an IP address, a firmware version, or the like.

  In addition, the permission information may include setting information related to a logging function (described later) or a notification function (described later) when the permitted wireless communication is performed when wireless communication is permitted. When the accepting unit 111 accepts permission / refusal information including conditions relating to the logging function or the notification function, the control unit 114 described later can execute the logging function or the notification function.

  In addition, before the reception part 111 receives permission information from a user, the predetermined permission information may be set.

  The acquisition unit 112 acquires product information of the connection terminal from a connection terminal that is a terminal wirelessly connected to the wireless AP 10 through a wireless communication link.

  Specifically, the acquisition unit 112 transmits a request packet, which is a communication packet for requesting product information, to the connection terminal, and receives a response packet transmitted from the connection terminal in response to the request packet. Get product information for the terminal. For example, the request packet may be transmitted after the wireless AP 10 and the connection terminal establish authentication (Authentication) and establish a wireless communication link (Association). Further, the request packet may be periodically broadcast by the wireless AP 10 to all terminals wirelessly connected by the wireless AP 10. In this case, the broadcast transmission may be performed periodically. The acquisition unit 112 is realized by the CPU 101, the ROM 102, the RAM 103, the WNIC 105, and the like.

  When the connection terminal receives the request packet and determines that the received packet is a request packet by analyzing the received request packet, the connection terminal transmits a response packet including product information of the own device at the transmission source of the request packet. Transmit to a certain wireless AP 10.

  The acquisition unit 112 may acquire product information from a wireless communication terminal or a wired communication terminal connected via the NIC 106. In that case, a wireless communication terminal or a wired communication terminal that has acquired product information is called a connection terminal.

  The generation unit 113 generates relay permission / rejection information indicating whether or not wireless communication can be relayed by the connection terminal based on the permission / inhibition of wireless communication indicated in association with the permission / rejection information in the product information acquired by the acquisition unit 112. Note that the generation unit 113 generates relay availability information indicating that the connection terminal that has not responded to the request packet is not relayed to the connection terminal belonging to the group.

  The generation unit 113 acquires permission / rejection of wireless communication indicated by permission / denial information for each of the product information of the terminal acquired by the acquiring unit 112. The generation unit 113 determines to relay wireless communication for a terminal that is permitted to perform wireless communication. For a terminal that is supposed to block wireless communication, it is determined not to relay (block) wireless communication. Then, relay enable / disable information including the relay enable / disable determined as described above is generated and held. The generation unit 113 is realized by the CPU 101, the ROM 102, the RAM 103, the storage device 104, and the like.

  The control unit 114 controls whether the wireless communication by the connected terminal is relayed or blocked according to the relay availability information.

  Specifically, when the control unit 114 receives a communication packet destined for another connection terminal (destination terminal) from the connection terminal (source terminal), the control unit 114 determines whether or not to transmit the communication packet to the destination terminal. Is determined according to the relay availability information. Since the relay availability information indicates the relay availability for each connected terminal, the control unit 114 can determine whether to relay the communication packet for each connected terminal by referring to the relay availability information. Here, when determining whether or not to relay a communication packet, the relay availability information may be referred to based on the transmission source terminal of the communication packet, or the relay availability information may be referred to based on the destination terminal. The relay availability information may be referred to based on both the transmission source terminal and the destination terminal. The control unit 114 is realized by the CPU 101, the ROM 102, the RAM 103, the WNIC 105, and the like.

  When the accepting unit 111 accepts permission / inhibition information including a condition regarding the logging function or the notification function, the control unit 114 executes the logging function or the notification function when transmitting a communication packet corresponding to the condition to the destination terminal. To do. The logging function refers to communication data (for example, data in a predetermined field of a communication packet or packet capture data of a communication packet) related to the wireless communication when wireless communication corresponding to a predetermined condition is performed. This is a function of storing in the storage device 104. The notification function is a function for notifying the maintenance staff by e-mail or the like that a predetermined wireless communication has been performed.

  FIG. 4 is an explanatory diagram of group designation for each product information according to the present embodiment. The group designation 401 illustrated in FIG. 4 is an example of permission / denial information that the reception unit 111 receives from the user.

  The group designation 401 indicates the product type, model number, and group for each model number of the terminal.

  “Product type” is information indicating the product type or product category of the terminal. Specifically, the product type includes a camera, a bridge, a device server, or a print server.

  “Model number” is information indicating the model number of the terminal. In principle, the model number is a numerical value or a character string assigned to one product. One or more model numbers correspond to one product type.

  “Group” is an example of permission information for each terminal, and is information indicating that communication between products belonging to the same group is permitted. Multiple groups, groups A and B, are set, communication between terminals belonging to group A (or B) is permitted, and communication between terminals belonging to different groups (terminals belonging to group A and group B) (Communication with the terminal) indicates that it is rejected.

  It is to be noted that “group” information indicating permission / denial of communication for each terminal is particularly required by the user. Therefore, the reception unit 111 presents a list of predetermined product types and model numbers to the user, prompts the user to input “group” information based on the list, and then receives a “group” from the user. Information may be received.

  The accepting unit 111 may accept an input from a user through a web interface. The web interface is a user interface that presents information to the user using a web page described in HTML (Hypertext Markup Language) or the like and receives information from the user. In addition, the user may input permission information determined by the user himself / herself, or may input information selected by the user from a plurality of permission information provided separately.

  FIG. 5A is an explanatory diagram showing an example of a request packet according to the present embodiment.

  A request packet 501 shown in FIG. 5A includes a MAC (Media Access Control address) header and a MAC payload. The MAC header includes the MAC address of the wireless AP 10 as the transmission source MAC address, and includes the MAC address of the terminal (broadcast address when broadcast transmission is performed) as the destination MAC address. The MAC payload includes a predetermined message (request message) for requesting product information of the terminal.

  The request packet 501 is transmitted by the wireless AP 10 and received by the terminal. The terminal that has received the request packet 501 recognizes that the received packet is a request packet by analyzing the MAC payload of the received request packet 501. The request packet 501 is an example of request information.

  Note that the request packet 501 is merely an example of a request packet, and other packet formats may be used. Specifically, for example, a request message may be included in an IP payload portion in an IP (Internet Protocol) packet, or a TCP payload or UDP in a TCP (Transmission Control Protocol) or UDP (User Datagram Protocol) packet. A request message may be included in the payload portion.

  FIG. 5B is an explanatory diagram showing an example of a response packet according to the present embodiment.

  The response packet 502 shown in FIG. 5B includes a MAC header and a MAC payload. The MAC header includes information such as a source MAC address and a destination MAC address. The MAC payload includes a message (response message) including product information of the terminal.

  Note that the response packet 502 is merely an example of a response packet, and may have another packet format. Specifically, similar to the request packet 501, the request message may be included in the IP payload portion of the IP packet, or the request message may be included in the TCP payload or the UDP payload portion in TCP or UDP. May be.

  FIG. 5C is an explanatory diagram illustrating an example of product information according to the present embodiment. Product information 503 shown in FIG. 5C is information described in the response message of the response packet 502.

  The product information 503 includes a model number, an IP address, or a firmware version.

  “Model number” is information indicating the model number of the terminal. The “model number” is the same type of information as the “model number” in FIG.

  “IP address” is the IP address of the terminal. When an IP packet, a TCP packet, a UDP packet, or the like is used as the response packet, the response packet has an IP header. In that case, since the IP address of the terminal is described in the source IP address field of the IP header, the “IP address” field can be omitted.

  “Firmware version” is information indicating the firmware version of the terminal. In place of the firmware version, a version of predetermined software that operates on the terminal can be used.

  FIG. 6 is an explanatory diagram of a first example of the product information list acquired from the terminal according to the present embodiment.

  The product information list 601 in FIG. 6 is created as a list of information included in the received response packet 502 when the acquisition unit 112 receives the response packet 502. Specifically, the product information list 601 is acquired by the acquisition unit 112 when the monitoring cameras 21 and 22, the device server 23, the PC 31, and the smartphone 32 that are terminals exist in the wireless communication area with the wireless AP 10 (FIG. 1). This is a list of product information to be created.

  FIG. 7 is an explanatory diagram of relay availability information for each terminal according to the present embodiment.

  The relayability information 701 shown in FIG. 7 indicates the group determined by the generation unit 113 for each terminal from which the acquisition unit 112 has acquired product information. The generation unit 113 determines, for each terminal from which the acquisition unit 112 has acquired product information, which group the terminal corresponding to the product information belongs to based on the group designation 401. And the production | generation part 113 produces | generates the relay availability information 701 which matches and shows a MAC address and a group for every terminal.

  The control unit 114 relays wireless communication between terminals belonging to the same group according to the relay availability information 701, and blocks wireless communication between terminals belonging to different groups.

  FIG. 8 is a flowchart showing relay processing in the wireless AP according to the present embodiment.

  In step S801, the reception unit 111 receives permission / rejection information indicating whether wireless communication is permitted or not in association with product information of the terminal from the user.

  In step S802, the acquisition unit 112 acquires product information of the connection terminal from the connection terminal that is a terminal wirelessly connected to the wireless AP 10 through the wireless communication link. The acquisition unit 112 may acquire the product information after establishing a wireless communication link with the connection terminal, or the product information every predetermined time from the connection terminal that has established the wireless communication link. May be obtained.

  In step S <b> 803, the generation unit 113 generates relay availability information indicating whether the connection terminal can relay wireless communication based on the permission / inhibition of wireless communication indicated in association with the product information acquired by the acquisition unit 112. To do.

  In step S804, the control unit 114 controls whether to relay or block wireless communication according to the relay availability information.

  FIG. 9 is an explanatory diagram of whether or not communication is possible in the wireless access system according to the first embodiment.

  According to the relay availability information 701, the wireless AP 10 (control unit 114) relays the communication between the monitoring camera 21 and the PC 31, and the communication between the monitoring camera 22 and the smartphone 32 ("OK" in FIG. 9). On the other hand, the wireless AP 10 (control unit 114) blocks communication between the monitoring camera 21 and the smartphone 32 and communication between the monitoring camera 22 and the PC 31 ("NG" in FIG. 9).

  Thereby, PC31 and the smart phone 32 can display the image data produced | generated by the monitoring cameras 21 and 22, respectively. On the other hand, the PC 31 and the smartphone 32 cannot display the image data generated by the monitoring cameras 22 and 21, respectively. As described above, based on the wireless communication permission information for each product information input by the user prior to the wireless communication, it is possible to control the wireless communication between the connected terminals via the relay by the wireless AP 10. As a result, since the wireless AP 10 can only allow wireless communication between specific terminals, security between communication terminals is improved.

  As described above, the wireless access point according to the present embodiment can control whether wireless communication is relayed by the connected terminal based on wireless communication permission information for each product information received from the user. Here, since the user does not specify permission / rejection information for each terminal, but specifies permission / rejection information for each product information, the burden of setting is reduced as compared with the case of specifying for each terminal. In addition, even if the number of connected terminals connected to the wireless access point may increase or decrease or change after accepting permission / denial information, it is possible to determine whether or not to relay wireless communication by a new connected terminal based on the accepted permission / rejection information. Therefore, the troublesome setting by the user is further reduced. Therefore, the wireless access point can set whether or not to relay wireless communication by the terminal without requiring troublesome setting by the user.

(Embodiment 2)
In this embodiment, a wireless access system that sets whether or not relaying of wireless communication by a terminal is set for each terminal without requiring troublesome settings by a user will be described.

  FIG. 10 is a system configuration diagram of the radio access system according to the present embodiment.

  As shown in FIG. 10, the wireless access system 2 includes a wireless AP 11 and a wireless AP 12. Both the wireless AP 11 and the wireless AP 12 are connected to the LAN 41.

  The wireless AP 11 has the same hardware configuration as the wireless AP 10 in the first embodiment. The NIC 106 is connected to the LAN 41. The wireless AP 11 can communicate with the wireless AP 12 via the LAN 41. Further, when the wireless AP 11 receives communication data from a connection terminal connected to the wireless AP 11 via a wireless communication link to a connection terminal connected to the wireless AP 12 via a wireless communication link, the wireless AP 11 transmits the communication data to the LAN 41. To the wireless AP 12 via. The LAN 41 may be a wired LAN or a wireless LAN.

  Further, the wireless AP 11 includes the same functional blocks as the wireless AP 10 in the first embodiment. However, while the control unit 114 in the first embodiment controls whether or not relaying is possible only between connecting terminals connected to the WNIC 105, the control unit in the present embodiment is connected to the connecting terminal connected to the WNIC 105 and wirelessly. This is different in that it controls whether or not to relay wireless communication with a connection terminal connected to the WNIC 105 of the AP 12.

  The wireless AP 12 has the same function as the wireless AP 11.

  With the wireless APs 11 and 12, a connection terminal connected to the wireless AP 11 via a wireless communication link and a connection terminal connected to the wireless AP 12 via a wireless communication link can communicate with each other via the LAN 41 and the wireless APs 11 and 12. It is. Based on the determination of whether or not relaying is possible by the wireless AP 11 or 12, whether or not communication is possible between the respective connecting terminals is controlled.

  As described above, the wireless access system 2 including a plurality of wireless APs can set whether or not to relay wireless communication between connected terminals as in the first embodiment. In addition, it is possible to configure a radio access system that covers a wide radio communication area including each radio communication area of a plurality of radio APs.

  As described above, the wireless access point and the like of the present invention have been described based on the embodiment, but the present invention is not limited to this embodiment. Unless it deviates from the meaning of this invention, the form which carried out the various deformation | transformation which those skilled in the art can think to this embodiment, and the structure constructed | assembled combining the component in different embodiment is also contained in the scope of the present invention. .

  The present invention can be used for a wireless access point or the like for setting whether or not to relay wireless communication by a terminal without requiring troublesome settings by a user.

1, 2 Wireless access system 10, 11, 12 Wireless AP
21, 22 Surveillance camera 23 Device server 31 PC
32 Smartphone 101 CPU
102 ROM
103 RAM
104 Storage device 105 WNIC
106 NIC
111 reception unit 112 acquisition unit 113 generation unit 114 control unit

Claims (9)

A wireless access point for relaying wireless communication by a terminal,
A reception unit that receives permission / rejection information indicating permission / rejection of wireless communication in association with product information that is identification information common to a plurality of terminals;
An acquisition unit that acquires product information of the connection terminal from a connection terminal connected to the wireless access point by a wireless communication link;
A generation unit configured to generate relay availability information indicating whether the wireless communication is relayed by the connection terminal based on the wireless communication permission / inhibition shown in association with the product information acquired by the acquisition unit; ,
A wireless access point comprising: a control unit that controls whether to relay or block the wireless communication according to the relay availability information. The accepting unit accepts, as the permission information, information specifying a group indicating product information of the terminal and indicating that wireless communication between terminals corresponding to the product information included in the group is permitted. ,
The generation unit generates the relay availability information so that wireless communication between terminals corresponding to product information included in the group is relayed by the control unit based on information identifying the group. The wireless access point according to 1. The acquisition unit further transmits request information for requesting the connection terminal to transmit product information to the wireless access point, to the connection terminal,
The wireless access point according to claim 1, wherein the product information transmitted by the connection terminal is acquired according to the request information. The wireless access point further includes a storage unit,
The permission / refusal information further includes the predetermined condition for a logging function that is a function of storing communication data related to wireless communication using a predetermined condition,
The control unit further stores communication data related to the wireless communication in the storage unit when the relayed wireless communication satisfies the predetermined condition. Wireless access point. The wireless access point according to claim 1, wherein the product information of the terminal includes product model number information of the terminal. The wireless access point according to claim 1, wherein the terminal includes a PC or a portable terminal. The terminal includes a PC or a mobile terminal capable of executing an application,
The wireless access point according to claim 1, wherein the PC or the mobile terminal operates as the terminal by executing the application. A wireless access point according to any one of claims 1 to 7,
A wireless access system comprising: the connection terminal connected to the wireless access point by the wireless communication link. A wireless access system for relaying wireless communication by a terminal, the wireless access system comprising first and second wireless access points capable of performing wired communication with each other,
A reception unit that receives permission / rejection information indicating permission / rejection of wireless communication in association with product information that is identification information common to a plurality of terminals;
Product information of the first connection terminal is acquired from the first connection terminal connected to the first wireless access point via the wireless communication link, and the second wireless access point is acquired via the wireless communication link. An acquisition unit that acquires product information of the second connection terminal from the connected second connection terminal;
Relay of wireless communication between the first connection terminal and the second connection terminal based on the permission / inhibition of the wireless communication indicated in the permission information in association with the product information acquired by the acquisition unit A generation unit that generates relayability information indicating availability;
A wireless access system comprising: a control unit that controls whether to relay or block the wireless communication according to the relay availability information.

Images