JP2019087202A - Communication controller, communication system, authentication method, and program - Google Patents

Abstract

To provide a communication controller, a communication system, an authentication method, and a program with which it is possible for a user to easily input authentication information while securing security for access from a terminal device.SOLUTION: A communication controller 1 comprises: a plurality of display lamps 11-1 to 11-n; and a control unit 12 for controlling communication in the communication controller 1 and controlling the lighting of the plurality of display lamps. The control unit 12 determines the lighting pattern of the plurality of display lamps for an access request from a terminal device connected via a network and controls the lighting of the plurality of display lamps in accordance with the determined lighting pattern, as well as causes an image for information input that prompts input of pattern information indicating the lighting pattern of the plurality of display lamps to be displayed on the terminal device. When pattern information that conforms to the determined lighting pattern is received from the terminal device, the control unit 12 determines that the authentication of the terminal device is successful.SELECTED DRAWING: Figure 1

Description

  The present disclosure relates to a communication control device, a communication system, an authentication method, and a program.

  Patent Document 1 discloses an example of a method of exchanging authentication data between two wireless devices. In the method described in Patent Document 1, first, one of the wireless devices turns on a plurality of LEDs (light emitting diodes) included in the order associated with the authentication data of the own device to be replaced. Next, the user operates the keys in accordance with the lighting and inputs information indicating the lighting order. This key operation is performed using an input key of a personal computer (PC) connected to the other wireless device. The input information is transmitted to the other wireless device, and is transmitted to the one wireless device as its own authentication data by the other wireless device.

  The one wireless device confirms whether or not the authentication data of the own device and the information (the authentication data of the own device in the other wireless device) transmitted from the other wireless device match. In addition, this confirmation can also be performed by the said other radio | wireless apparatus side. In the method described in Patent Document 1, simple authentication is performed by exchanging authentication data according to such a procedure, and then a normal authentication procedure is performed.

  Further, Patent Document 2 discloses a method of establishing wireless connection by sharing authentication data between a transmitting device that wirelessly transmits digital data and a receiving device that wirelessly receives the data. In this method, first, the transmitting device blinks one of the provided LEDs in a predetermined blinking pattern corresponding to the authentication data. Next, the receiving device causes the user to input information corresponding to the blinking pattern from the provided input switch, and transmits the information to the transmitting device. The transmitting device receives the information from the receiving device, and sets the information as authentication data for wireless connection with the receiving device if the information corresponds to the blinking pattern.

JP, 2009-089058, A JP 2007-323339 A

  However, in the technology described in Patent Document 1, in order to input information indicating the lighting order, the user visually checks the lit LEDs each time any of the plurality of LEDs is lit. It is necessary to perform key operation according to the LED. Further, with the technology described in Patent Document 2, the user can not confirm whether the input switch can be correctly pressed while inputting the blinking pattern of the LED, and the input fails and blinks many times. It may be necessary to re-enter the pattern. As described above, according to the techniques described in Patent Documents 1 and 2, the user can not easily input authentication information while securing security.

  An object of the present disclosure is a communication control device, a communication system, and an authentication method that solve the above-described problem, that is, a user can not easily input authentication information while securing security from access from a terminal device. And providing a program.

A communication control apparatus according to a first aspect of the present disclosure is
A plurality of display lamps, and a control unit performing communication control in the communication control device and lighting control of the plurality of display lamps.
The control unit
In response to an access request from a terminal connected via a network, the lighting pattern of the plurality of display lamps is determined;
The lighting of the plurality of display lamps is controlled in accordance with the determined lighting pattern, and an information input image for prompting input of pattern information indicating the lighting patterns of the plurality of display lamps is displayed on the terminal device.
When the pattern information matching the determined lighting pattern is received from the terminal device, the terminal device is successfully authenticated.

The authentication method according to the second aspect of the present disclosure is
An authentication method executed by a communication control device provided with a plurality of display lamps, the authentication method comprising:
In response to an access request from a terminal device connected to the communication control device via a network, the lighting pattern of the plurality of display lamps is determined;
The lighting of the plurality of display lamps is controlled in accordance with the determined lighting pattern, and an information input image for prompting input of pattern information indicating the lighting patterns of the plurality of display lamps is displayed on the terminal device.
When the pattern information matching the determined lighting pattern is received from the terminal device, the terminal device is successfully authenticated.

The program according to the third aspect of the present disclosure is
A program for causing a communication control device having a plurality of display lamps to execute an authentication process,
The authentication process is
In response to an access request from a terminal device connected to the communication control device via a network, the lighting pattern of the plurality of display lamps is determined;
The lighting of the plurality of display lamps is controlled in accordance with the determined lighting pattern, and an information input image for prompting input of pattern information indicating the lighting patterns of the plurality of display lamps is displayed on the terminal device.
When the pattern information matching the determined lighting pattern is received from the terminal device, the terminal device is successfully authenticated.
It is a process.

  According to the present disclosure, it is possible to provide a communication control apparatus, a communication system, an authentication method, and a program that allow a user to easily input authentication information while securing security with respect to access from a terminal device.

FIG. 1 is a block diagram showing an exemplary configuration of a communication control apparatus according to a first embodiment. FIG. 16 is a block diagram showing an example of the configuration of a router as an example of a communication control apparatus according to a second embodiment. FIG. 7 is a block diagram showing an example of configuration of a terminal apparatus connected to the communication control apparatus according to the second embodiment. FIG. 13 is a schematic view for explaining an example of an LED pattern authentication process performed in the communication system including the router according to the second embodiment. FIG. 13 is a schematic view for explaining an example of an LED pattern authentication process performed in the communication system including the router according to the second embodiment. It is a flowchart for demonstrating an example of the LED pattern authentication process performed in the communication system provided with the router which concerns on Embodiment 2. FIG. FIG. 13 is a schematic view for explaining an authentication process according to a comparative example for comparison with the LED pattern authentication process performed in the second embodiment. FIG. 14 is a flowchart for explaining an example of an LED pattern authentication process performed in the communication system according to Embodiment 3. It is a figure which shows an example of the hardware constitutions of a communication control apparatus.

  Hereinafter, embodiments will be described with reference to the drawings. In the embodiments, the same or equivalent elements will be denoted by the same reference signs, and overlapping descriptions will be omitted.

First Embodiment
FIG. 1 is a block diagram showing an exemplary configuration of a communication control apparatus according to the first embodiment.
The communication control device 1 according to the present embodiment is connected to a terminal device (not shown) via a network. This network may be a wired network such as a wired LAN (Local Area Network) or a wireless network such as a wireless LAN. A communication system can be configured by the communication control device 1 and this terminal device.

  The communication control device 1 may be, for example, an HGW (Home GateWay) product having a router function and a gateway function. Note that this HGW product may be simply referred to as a router. However, as the communication control device 1, various devices can be applied including a router not having a gateway function.

  As shown in FIG. 1, the communication control device 1 according to the first embodiment includes n display lamps 11-1 to 11-n and a control unit 12. In the following description, each of the display lamps 11-1 to 11-n may be referred to as the display lamp 11 when the same contents are described. n is an integer of 2 or more. That is, the communication control device 1 has a plurality of display lamps 11. The indicator lamp 11 can have a light emitting diode (LED), but can also have other light emitting means.

  The control unit 12 performs communication control in the communication control device 1 and lighting control of the n display lamps 11-1 to 11-n. Then, the control unit 12 performs the following process A in response to the access request from the terminal device connected via the network.

  In the process A, first, the lighting patterns of the n display lamps 11-1 to 11-n are determined. This lighting pattern can be determined, for example, by generating the light by random processing or by randomly selecting from patterns stored in advance. The lighting patterns can also be selected from among the patterns stored in advance in a predetermined order.

  In processing A, next, lighting of n display lamps 11-1 to 11-n is controlled in accordance with the determined lighting pattern, and an information input image is displayed on the terminal device. The information input image is an image prompting input of pattern information indicating the lighting patterns of the n display lamps 11-1 to 11-n.

  In processing A, next, when pattern information matching the determined lighting pattern is received from the terminal device (that is, when it is confirmed that pattern information matching the determined lighting pattern is input by the terminal device), The authentication of the terminal device is regarded as successful. Here, that the authentication of the terminal device is successful means that the authentication of the user who is using the terminal device is successful. The control unit 12 formally accepts the access from the terminal device for which the authentication is successful.

  On the other hand, when pattern information that does not match the determined lighting pattern is transmitted from the terminal device, the control unit 12 determines that the authentication for the terminal device has failed, and denies access from the terminal device.

  As described above, in the communication control device 1 according to the first embodiment, in response to an access request from a terminal device, the control unit 12 displays n display lamps 11-1 to 11- in order to authenticate the terminal device. The lighting pattern of n is determined, and control is performed to light the lighting pattern. Therefore, security can be secured by the number of combinations of the display lamps 11 indicated by the lighting pattern. Further, in the communication control device 1, the terminal device displays the information input image to prompt the user to input the lighting pattern. Therefore, the user can easily view the lighting pattern and information indicating the lighting pattern (that is, authentication information). You can enter Therefore, according to the communication control device 1, the user can easily input authentication information while ensuring security from access from the terminal device (the user can easily input authentication information and complete authentication) Becomes possible.

Second Embodiment
<< Configuration example >>
In the second embodiment, the router apparatus (hereinafter simply referred to as a router) is taken as an example of the communication control apparatus, and the various applications described in the first embodiment will be applied, focusing on the differences from the first embodiment. it can. FIG. 2 is a block diagram showing one configuration example of a router as an example of the communication control device according to the second embodiment, and FIG. 3 is a block diagram showing one configuration example of a terminal device connected to this communication control device. .

  The router 10 illustrated in FIG. 2 is an example of the communication control apparatus according to the second embodiment, and includes five LEDs 11-1 to 11-5, a control unit 12, and a setting storage unit 13. In addition, each of LED11-1 to 11-5 is an example of the display lamp 11, and can also be called LED lamp. Of course, the number of LEDs provided in the router 10 is not limited to five, and may be plural.

  Further, each of the LEDs 11-1 to 11-5 can be a status display lamp that displays a status of communication control in the router 10 (an operating status indicating a communication operation). In addition, at least one of the LEDs 11-1 to 11-5 may be a status display lamp that displays another operation status (a power status or the like) in the router 10. By performing the process A using the LED provided as the status display lamp, it is not necessary to separately provide a display lamp used for authentication. The status display lamp can also be referred to as an indicator lamp.

  Here, the status display lamp for displaying the status of communication control will be briefly described. When the router 10 is configured to be able to communicate with the WAN (Wide Area Network) side, 2.4 GHz band Wi-Fi (registered trademark, hereinafter the same) communication, and 5 GHz band Wi-Fi communication Take for example. One of such status display lamps is a display lamp that displays the link establishment state with the WAN side and the operation mode (for example,) of the router 10, such as whether an IP (Internet Protocol) address is set or not. . The above operation mode refers to, for example, a PPPoE (Point-to-Point Protocol over Ethernet) router mode, a local router mode, a bridge mode, and the like. In addition, as the status display lamp as described above, a display lamp indicating whether or not Wi-Fi communication in 2.4 GHz band is established, and whether or not Wi-Fi communication in 5 GHz band is established. An indicator lamp can also be mentioned.

  Next, the functions of the control unit 12 and the setting storage unit 13 in the router 10 will be described as long as these functions can be realized as the router 10. Thus, in the router 10, for example, the control unit 12 may include the setting storage unit 13.

  The control unit 12 has the same function as the control unit 12 in the first embodiment, and is configured to be able to execute the process A. In the present embodiment, since the LED is used as the display lamp 11, the process A is referred to as an LED pattern authentication process. That is, the control unit 12 in the second embodiment has a function of performing the LED pattern authentication process.

  The control unit 12 in the router 10 includes a packet transmission / reception interface (I / F) 21, a packet processing unit 22, a source storage unit 23, an LED control unit 24, a pattern consistency determination unit 25, and an LED pattern generation unit 26. it can. The control unit 12 can be realized by, for example, an integrated circuit (Integrated Circuit) except for a connection portion with a line (for example, an optical line) in the packet transmission / reception I / F 21. Each component of the control unit 12 will be described later.

  The setting storage unit 13 is a storage unit that stores setting values (setting parameters) for communication control of the router 10. The setting values stored in the setting storage unit 13 can also include setting values other than communication control. The setting storage unit 13, the source storage unit 23, and a storage unit (not shown) that stores information and the like regarding the lighting pattern may be configured by a common storage device.

  Next, a terminal device connected to the router 10 will be described. The terminal device 30 illustrated in FIG. 3 is a device connected to the router 10 via a network, and can include a display unit 31, a control unit 32, an operation unit 33, and a communication unit 34. As the terminal device 30, although an installation-type personal computer (PC), a mobile terminal, etc. are applicable, it is not limited to this. Examples of mobile terminals include terminals such as mobile PCs and mobile phones (including those called smart phones).

  The display unit 31 includes a display panel or the like, and can be used to display an information input image in the LED pattern authentication process. The control unit 32 is a part that controls the entire terminal device 30, and can be configured by, for example, a central processing unit (CPU), a working memory, and a non-volatile storage device. This storage device can store an operation system and application software to be executed by the control unit 32, various setting data in the terminal device 30, content data for viewing by the user, and the like.

  The operation unit 33 is a part that receives user input, and can be used to input pattern information from the information input image in the LED pattern authentication process. The operation unit 33 can have a hardware key. The operation unit 33 can also have a touch panel mounted on the software key and the display unit 31. The communication unit 34 has an interface for communicating with the router 10, and may have an interface for communicating with other electronic devices. The communication unit 34 can include, for example, a wireless LAN circuit according to a standard such as Wi-Fi, a Bluetooth (registered trademark) circuit, an LTE (Long Term Evolution) communication circuit, and the like.

Next, each component of the control unit 12 will be described.
The packet transmission / reception I / F 21 transmits and receives HTTP (Hypertext Transfer Protocol) packets and the like. The packet processing unit 22 executes processing such as analyzing the packet received by the packet transmission / reception I / F 21, and processes the packet processed in each part (each module) such as the LED control unit 24 and the pattern consistency determination unit 25. Send the corresponding processing request. Further, the packet processing unit 22 reads an HTML (Hypertext Markup Language) source or the like from the source storage unit 23, generates a transmission packet, and transmits the transmission packet to the packet transmission / reception I / F 21.

The packet processing unit 22 will be specifically described.
When the packet received by the packet transmission / reception I / F 21 is an LED pattern authentication request from the terminal device 30, the packet processing unit 22 transmits an LED pattern display request to the LED control unit 24. The LED pattern authentication request is a request for the terminal device 30 to request an LED pattern authentication process (that is, an authentication process based on the lighting pattern of the LED). The LED pattern display request is a request for generating a lighting pattern of the LEDs 11-1 to 11-5 and requesting lighting in the lighting pattern.

  After transmitting the LED pattern display request, the packet processing unit 22 reads the source for displaying the information input image from the source storage unit 23 and generates a transmission packet for causing the terminal device 30 to display the information input image. . The information input image is an image for causing the user to input pattern information when performing authentication processing based on the lighting pattern of the LED, and can also be referred to as an LED pattern authentication image. The packet processing unit 22 transmits the generated transmission packet to the terminal device 30 via the packet transmission / reception I / F 21 as a response to the LED pattern authentication request.

  When the packet received by the packet transmission / reception I / F 21 is an HTTP packet including pattern information (hereinafter, input pattern information) input by the user of the terminal device 30, the packet processing unit 22 receives the input pattern information. It is transmitted to the pattern consistency determination unit 25. As a response to this transmission, the packet processing unit 22 receives the determination result information from the pattern consistency determination unit 25. The packet processing unit 22 reads an image indicating the received determination result information from the source storage unit 23, transmits the image to the terminal device 30 via the packet transmission / reception I / F 21, and the display unit 31 of the terminal device 30 passes or fails the authentication. It can also be configured to be displayed.

  When the LED control unit 24 receives the LED pattern display request from the packet processing unit 22, the LED control unit 24 transmits the LED pattern generation request to the LED pattern generation unit 26 to generate the lighting patterns of the LEDs 11-1 to 11-5. Then, the LED control unit 24 receives information (hereinafter, lighting pattern information) indicating the generated lighting pattern. Further, the LED control unit 24 generates an LED control signal for controlling the LEDs 11-1 to 11-5 based on the received lighting pattern information, and transmits the LED control signal to the LEDs 11-1 to 11-5. Lighting control is performed. The LEDs 11-1 to 11-5 are turned on based on the LED control signal received from the LED control unit 24.

  When the LED pattern generation unit 26 receives the LED pattern generation request from the LED control unit 24, the LED pattern generation unit 26 generates a lighting pattern, and transmits lighting pattern information indicating the lighting pattern to the LED control unit 24. Further, the LED pattern generation unit 26 transmits the generated lighting pattern information to the pattern consistency determination unit 25.

  Here, the generated lighting pattern can be a pattern in which the lighting color is designated for each of the LEDs 11-1 to 11-5. However, in this case, each of the LEDs 11-1 to 11-5 is an LED whose lighting color can be changed. As LED which can change lighting color, multi-color LED, such as 2 color LED and 3 color LED, is mentioned, for example.

  The pattern consistency determination unit 25 stores the lighting pattern information transmitted from the LED pattern generation unit 26, compares the lighting pattern information with the input pattern information transmitted from the packet processing unit 22, It is determined whether or not you The pattern consistency determination unit 25 transmits determination result information indicating the determination result to the packet processing unit 22 and the LED control unit 24.

  The control unit 12 also has a function of performing an authentication process (password authentication process) based on the authentication password. This function is a function of displaying an authentication image for prompting input of an authentication password on the terminal device 30, and performing an authentication process based on the authentication password received from the terminal device 30. Then, the authentication image includes a selected area (a link for displaying another authentication image or the like) for selecting the LED pattern authentication process which is an authentication process different from the password authentication process. The authentication image can be stored in the source storage unit 23.

  Then, the control unit 12 causes the terminal device 30 to display an authentication image in response to an access request from the terminal device 30, and shifts to the LED pattern authentication process when the selected area is selected, as described above. Determine the lighting pattern. In addition, after the lighting pattern is determined, as described above, the lighting control is performed, the information input image is displayed on the terminal device 30, the reception of the input pattern information from the terminal device 30 is awaited, and the authentication is performed. .

<< Operation example >>
A preferred operation example of the router 10 according to the second embodiment will be described with reference to FIGS. 4 to 6 together. FIG.4 and FIG.5 is a schematic diagram for demonstrating an example of the LED pattern authentication process performed in the communication system provided with the router 10 and the terminal device 30. FIG. FIG. 6 is a flowchart for explaining an example of the LED pattern authentication process.

  In the operation example described here, when the user accesses the router 10 from the terminal device 30, the LED pattern authentication process is performed when the user forgets the authentication password set for authentication in the password authentication process. Run. Since this LED pattern authentication process basically uses authentication information only at that time, it can also be referred to as one-time authentication process.

  First, with reference to FIGS. 2 to 4, an example of processing up to displaying an initial login image, which is an example of the authentication image, will be briefly described. The user activates a browser such as a web browser on the terminal device 30 using the operation unit 33, and inputs or selects the IP address of the router 10. Thereby, the control unit 32 of the terminal device 30 transmits an HTTP request for requesting the router 10 to access, that is, an HTTP request for requesting the initial login image 40 via the communication unit 34 (step S1 in FIG. 4). In response to this, the router 10 transmits an HTTP response for displaying the initial login image 40 stored in the source storage unit 23 (step S2 in FIG. 4).

  The initial login image 40 can be a graphical user interface (GUI) image to be displayed on a browser such as a web browser. The terminal device 30 receives the HTTP response of step S2 by the communication unit 34, and the control unit 32 causes the browser of the display unit 31 to display the initial login image 40. The initial login image 40 can include a password input field 41, which is an input field for an authentication password, and a login button 42.

  The procedure for displaying the initial login image 40 on the browser is basically the same as the procedure for displaying the LED pattern authentication image 50 in FIG. 5 described later, except for the display target. Therefore, the source storage unit 23 also stores the source of the initial login image 40. Further, the initial login image 40 is only referred to as an “initial” login image in order to clarify the distinction from the login image (the LED pattern authentication image of FIG. 5 described later) in the LED pattern authentication process. Therefore, the initial login image 40 may be displayed even when the second and subsequent normal authentication processes are performed.

  When the authentication password is input in the password input field 41 by the operation unit 33 and the login button 42 is selected, the terminal device 30 includes the authentication password and unique information (ID) indicating the terminal device 30 or the user. Send an HTTP request to the router 10. In addition, ID can also use a default value. The control unit 12 of the router 10 performs authentication by determining whether or not the authentication password and the password registered in advance in association with the ID match. That is, the control unit 12 performs authentication by determining the consistency between the authentication password and the registered password. The setting storage unit 13 can store an ID and a password registered in advance as one of setting values. The router 10 transmits an HTTP response indicating the result of the authentication to the terminal device 30. Thereby, the user can know the result of the authentication in the terminal device 30.

  The initial login image may be stored in advance in the terminal device 30, and may be displayed on the display unit 31 by reading it. In this case, the terminal device 30 accesses the router 10 only when the login button 42 or a link 43 described later is selected.

Next, referring to FIG. 5 and FIG. 6 together, an example of the LED pattern authentication process will be described.
The initial login image 40 can include the link 43. The link 43 is an example of the selection area, and is a link for shifting to a mode in which the LED pattern authentication process is performed. The LED pattern authentication process is a process different from the password authentication process which is a normal authentication process using an authentication password. As shown in FIG. 4, by displaying the link 43 together with a sentence such as “If you forgot your password,” you can prompt the user to execute the LED pattern authentication process when you forgot the authentication password. it can.

  When the link 43 is selected on the browser by the operation unit 33, the terminal device 30 transmits an HTTP request (the above-mentioned LED pattern authentication request) for starting the LED pattern authentication process to the router 10 (step S11 in FIG. 6). ). Step S11 corresponds to step S3 in FIG.

  The router 10 receives the packet of the LED pattern authentication request at the packet transmission / reception I / F 21. The packet processing unit 22 executes packet analysis of the received packet, and transmits an LED pattern display request to the LED control unit 24.

  The LED control unit 24 that has received the LED pattern display request transmits a pattern generation request to the LED pattern generation unit 26, and causes the LED pattern generation unit 26 to generate lighting patterns of the LEDs 11-1 to 11-5 (Step S12). Specifically, the LED pattern generation unit 26 generates a lighting pattern by determining the lighting color of the LEDs 11-1 to 11-5 by random processing.

  The LED pattern generation unit 26 transmits lighting pattern information indicating the generated lighting pattern to the LED control unit 24, and the LED control unit 24 transmits a lighting control signal to the LEDs 11-1 to 11-5. Thereby, the LED control unit 24 lights each of the LEDs 11-1 to 11-5 in the determined lighting color (step S13). By the step S13, as illustrated in FIG. 5, the router 10 displays the LED patterns (arrangement patterns of lighting colors) in the arrangement regions of the LEDs 11-1 to 11-5. Further, the LED pattern generation unit 26 transmits the generated lighting pattern information to the pattern consistency determination unit 25.

  After performing lighting control of the LEDs 11-1 to 11-5, the control unit 12 of the router 10 sends an HTTP response back to the terminal device 30 as a response to the LED pattern authentication request in step S11 (step S14). Step S14 in FIG. 6 corresponds to step S4 in FIG. The HTTP response is a response for displaying the LED pattern authentication image 50 on the browser of the terminal device 30. The LED pattern authentication image 50 is an example of the information input image described above, and can be a GUI image to be displayed on a browser such as a web browser.

  A specific processing example of step S14 is as follows. That is, the packet processing unit 22 acquires an HTML source or the like indicating the LED pattern authentication image 50 from the source storage unit 23, generates an HTTP response packet, and transmits it to the terminal device 30 via the packet transmission / reception I / F 21. .

  The terminal device 30 receives the HTTP response transmitted in step S14, and displays the LED pattern authentication image 50 on the browser. Thus, the user can input the LED pattern on the LED pattern authentication image 50. As described above, in the terminal device 30, by selecting the link 43, the initial login image 40 transitions to the LED pattern authentication image 50 (page transition), and it becomes possible to receive an input from the user.

  As shown in FIG. 5, the LED pattern authentication image 50 includes an input field 51 and a login button 52. The input field 51 has a check box for selecting the lighting color for each of the LEDs 11-1 to 11-5. Further, in FIG. 5, in order to allow the user to identify the LEDs 11-1 to 11-5, the router 10 has names (here, the respective names are provided next to the respective LEDs 11-1 to 11-5 in the LED arrangement area. “LED1”, “LED2”,..., “LED5” as an example. These names are also written in the input field 51. At the time of step S14, the check box is not checked. In addition, the name here can be made into the name (for example, "WAN" etc.) of the object in which a state display lamp displays a state.

  The user visually checks the LEDs 11-1 to 11-5 in the router 10, and selects the check box in the input field 51 corresponding to each lighting color using the operation unit 33, thereby obtaining authentication information (input pattern information ) Is input (step S15). When the login button 52 is pressed by the operation unit 33, the terminal device 30 transmits an HTTP request to which the input pattern information is added to the router 10 (step S16).

  The router 10 receives the HTTP request at the packet transmission / reception I / F 21, performs packet analysis at the packet processing unit 22, and transmits the input pattern information input by the user at the terminal device 30 to the pattern consistency determination unit 25. Do. The pattern consistency determination unit 25 performs consistency determination to determine whether the input pattern information and the lighting pattern information transmitted from the LED pattern generation unit 26 match (coincidence). The process proceeds to step S18 (step S17). In step S17, the pattern consistency determination unit 25 transmits determination result information indicating the result of the consistency determination to the LED control unit 24 and the packet processing unit 22.

  Since it has already been determined in the consistency determination in step S17 that both information match (that is, there is consistency), the lighting of the LEDs 11-1 to 11-5 for the LED pattern authentication process becomes unnecessary. Therefore, in step S18, the LED control unit 24 that receives the determination result information with consistency performs the extinguishing control of the LEDs 11-1 to 11-5. In addition, when status indication lamps are used as the LEDs 11-1 to 11-5 as exemplified here, the LED pattern authentication process is executed after the above-mentioned turn-off control or instead of the above-mentioned turn-off control. It is possible to execute the state display control as displayed before.

  After step S18, the packet processing unit 22 generates an HTTP response indicating that the authentication is successful via the packet transmission / reception I / F 21 and transmits the HTTP response to the terminal device 30 (step S19). Thus, the LED pattern authentication process is completed. Then, the control unit 12 officially accepts the access from the terminal device 30 for which the authentication is successful (permits login).

  The router 10 lights the LEDs 11-1 to 11-5 before transmitting the HTTP response in step S14, but turns on the LEDs 11-1 to 11-5 simultaneously with or immediately after the transmission of the HTTP response in step S14. You can also

  In the above, the case where the LED pattern authentication process is successful has been described. If it fails (that is, if the consistency determination fails in step S17), the communication system including the router 10 and the terminal device 30 can be re-executed from the generation of the lighting pattern in step S12 to perform authentication again. The lighting pattern regenerated in this manner is different from the lighting pattern generated first.

  In addition, the router 10 regenerates another lighting pattern and switches to another LED pattern after a predetermined time elapses, not only when the integrity determination fails, but the LED displayed until then Disabling the pattern is preferable for security. Moreover, it is preferable that the router 10 include the information which shows the said fixed time or the said fixed time, and the remaining time in the LED pattern authentication image 50. In addition, when the LED pattern is switched, it is preferable that the router 10 display the LED pattern authentication image 50 to that effect.

  Next, the process after login will be briefly described. The control unit 12 of the router 10 is stored in the setting storage unit 13 when the authentication of the terminal device 30 is successful using either the authentication password or the input pattern information in response to the access request from the terminal device 30. It can be configured to allow changes in settings. In particular, the control unit 12 is preferably configured to permit change of the authentication password as one of the setting values. As a result, even a user who forgot the authentication password can reset the authentication password through the LED pattern authentication process.

  For example, the router 10 is equipped with a WebGUI having a setting value changing function by storing in the source storage unit 23 the source of the WebGUI allowing the user to change the setting value in the router 10 using a Web browser. Keep it. If a function capable of displaying the initial login image 40 and the LED pattern authentication image 50 as an authentication function is provided on the Web GUI, setting value change processing can be performed subsequent to the processing described with reference to FIG. When the router 10 is configured to be able to change the setting value, confirmation of the setting value for changing (confirmation of the setting state) is also possible.

  In addition, when the authentication of the terminal device 30 succeeds, the control unit 12 receives an operation to turn off the power of the router 10 or an operation to restart the router 10 from the terminal device 30, and turns off the power of the router 10 according to the operation. The router 10 can also be configured to restart.

  Next, the effect of the second embodiment will be described with reference to the comparative example shown in FIG. 7 when the above-described LED pattern authentication process is not performed. FIG. 7 is a schematic view for explaining an authentication process according to a comparative example for comparison with the LED pattern authentication process performed in the second embodiment.

  The communication system of the comparative example illustrated in FIG. 7 includes a router 101 and a terminal device 102. The router 101 can display the initial login image 110 on the terminal device 102. Specifically, the terminal device 102 transmits, to the router 101, an HTTP request for requesting the initial login image 110 using the mounted browser (step S101). The router 101 transmits an HTTP response including the source of the initial login image 110, and the terminal device 102 receives it (step S102). Then, the terminal device 102 displays the initial login image 110 on the browser. The initial login image 110 includes an authentication password input field 111, a login button 112, and a note 113 such as “an initialization is necessary if the password is forgotten”. A note 113 is written for the user who forgot the password.

  In fact, many users forget their password. Also, as is the case with many existing routers, if the router 101 can not initialize the router 101 as a coping method at the time of failure, it initializes at the time of failure and sets the authentication password to the initial password (default value). I can not but return. At this time, since the setting values of the router 101 up to now are initialized besides the authentication password, the user who forgot the password can not confirm the setting value. Therefore, the user who forgot the password becomes difficult to restore the setting value, and the resetting operation takes time.

  Under these circumstances, the support center of the router 101 receives a large number of inquiries from users who do not know how to deal with a failure, how to reset, and the setting value. However, in practice, the support center often can only respond to the user to perform initialization.

  On the other hand, by adopting the LED pattern authentication process according to the second embodiment, in the router 10 according to the second embodiment, as in the first embodiment, while ensuring security from access from the terminal device 30, The user can easily input authentication information. Therefore, in the second embodiment, it is possible to reduce the number of inquiries to the support center due to a password failure. This effect is also achieved in the first embodiment.

  The router 10 can execute the LED pattern authentication process even in the case where the router 10 can not display any of numbers, characters, and images. The first embodiment also exhibits this effect. Therefore, when the router 10 is a device not equipped with a display and compatible with confirmation and change of setting values, etc., even when the user forgets the authentication password, the router 10 can be easily and securely set without being initialized. Values can be checked, retrieved, changed, etc. Then, since the setting value can include the authentication password, it is possible to easily reset the authentication password.

  As mentioned above, in this embodiment, the lighting pattern is determined to the pattern as which lighting color was designated about each of LED11-1 to 11-5. As a result, the user can easily view the LED pattern, and thus can easily input the input pattern information. In addition, by adopting the lighting pattern in which the lighting color is specified in this way, the number of lighting patterns that can be taken is determined according to the number of LEDs and the number of lighting colors. Security can be enhanced compared to the case where the number of lighting patterns is determined according to two types.

  On the other hand, the lighting pattern to be determined may be a pattern in which at least one of the lighting colors at the time of lighting off and lighting is designated for each of the LEDs 11-1 to 11-5. However, also in this case, each of the LEDs 11-1 to 11-5 can change the lighting color. By adopting such a lighting pattern, the number of lighting patterns that can be taken is determined according to the number of LEDs and “(the number of lighting colors) +1”, so security can be further enhanced.

  In addition, although an example in which all of the LEDs 11-1 to 11-5 are status display lamps has been described, at least one of the LEDs 11-1 to 11-5 is a state of communication control in the router 10 (operation indicating communication operation If it is a status display lamp that displays the status) or a status display lamp that displays other operation status (such as the status of the power supply) in the router 10, there is an effect that it is not necessary to separately provide a display lamp used for authentication. can get.

  In the second embodiment, password authentication processing is performed prior to the LED pattern authentication processing. Thus, based on the password authentication process, the LED pattern authentication process can be implemented as a special authentication process when the password authentication process can not be performed.

Embodiment 3
<< Configuration example >>
The communication control apparatus according to the third embodiment has the same configuration as the communication control apparatus according to the second embodiment. Therefore, the communication control apparatus according to the third embodiment will be described by taking the router 10 shown in FIG. 2 as an example. Hereinafter, although the configuration example of the third embodiment will be described focusing on the difference from the second embodiment, various application examples described in the first and second embodiments can be applied.

  In the router 10 according to the third embodiment, the control unit 12 has a function of performing the above-described password authentication process. The control unit 12 executes the password authentication process, and determines the lighting pattern when the authentication of the terminal device 30 fails a predetermined number of times in the executed password authentication process. After the lighting pattern is determined, as described above, the lighting control is performed, the information input image is displayed on the terminal device 30, the reception of pattern information from the terminal device 30 is awaited, and the authentication is performed. That is, when the authentication with the authentication password transmitted from the terminal device 30 has failed a predetermined number of times, the control unit 12 shifts to the LED pattern authentication process.

<< Operation example >>
A preferred operation example of the router 10 according to the third embodiment will be described with reference to FIG. FIG. 8 is a flowchart for explaining an example of an LED pattern authentication process performed in the communication system according to the third embodiment.

  The process until the initial login image 40 shown in FIG. 4 is displayed is the same as that of the second embodiment. The case where the authentication password is input in the password input field 41 and the login button 42 is selected (pressed) while the initial login image 40 is displayed will be described. In this case, the terminal device 30 transmits an HTTP request including the ID of the terminal device 30 and the authentication password to the router 10 (step S21).

  The control unit 12 of the router 10 having received the HTTP request performs authentication by determining whether the authentication password and the password registered in advance in association with the ID match. When the authentication fails, the control unit 12 transmits an HTTP response indicating that the authentication failed to the terminal device 30 (step S22). The user inputs the authentication password again and presses the log-in button 42 to retry the password authentication process (step S23). The authentication password input in step S23 is transmitted again in step S21.

  The control unit 12 executes such a second password authentication process until the authentication succeeds, but when the authentication fails 10 times (step S24), the LED pattern authentication process (LED pattern authentication process is automatically performed) Mode). The number of failures determined in step S24 is not limited to ten, and may be a predetermined number, and may be one if an extreme example is given.

  In the LED pattern authentication process, the control unit 12 generates the lighting patterns of the LEDs 11-1 to 11-5 as in the steps S12 and S13 of FIG. 6 (step S25), and the LEDs 11-1 to 11- according to the lighting patterns. 5 is turned on (step S26). Next, the control unit 12 transmits an HTTP response to the terminal device 30 (step S27). The HTTP response is a response for displaying the LED pattern authentication image 50 on the browser of the terminal device 30. In the present embodiment, it is preferable to describe in the LED pattern authentication image 50 information indicating that the password authentication process has failed a prescribed number of times and that the LED pattern authentication process has been started.

  The transmission of the LED pattern authentication image 50 in step S27 is as described in step S14 of FIG. However, in the terminal device 30, the initial login image 40 transitions to the LED pattern authentication image 50 not triggered by the selection of the link 43 but triggered by the failure of the authentication ten times.

  Steps S28 to S32 are the same as steps S15 to S19 in FIG. Further, the process when the consistency determination in step S30 fails (that is, when it is determined that there is no consistency) is the same as that of the second embodiment.

  As described above, in the third embodiment, the LED pattern authentication process is automatically executed when the password authentication process fails a predetermined number of times. Therefore, in the router 10 according to the third embodiment, not only the same effects as in the first and second embodiments can be obtained, but even if the user does not positively select to perform the LED pattern authentication process, the LED can be used in necessary scenes. Pattern authentication processing can be performed.

  The router 10 according to the third embodiment can incorporate the process described in the second embodiment. That is, the router 10 not only shifts to the LED pattern authentication process if it fails a predetermined number of times, but also to the LED pattern authentication process when there is an instruction from the user such as when the link 43 in FIG. 4 is selected. It can also be configured to migrate.

Other Embodiments
[A]
The second and third embodiments have been described on the premise that authentication is performed to change the setting value stored in the setting storage unit 13. However, the router 10 can also perform authentication only to confirm the setting value or to update the firmware of the communication control device such as the router 10 or to confirm the version. Furthermore, the user can also access from the terminal device 30 for purposes other than confirmation and change of setting values or firmware, and accordingly, the setting storage unit 13 is not provided as a communication control device according to another embodiment. A communication control device may be employed.

[B]
In the second and third embodiments, it has been described on the premise that the indicator lamp exemplified by the LED is the status indicator lamp, but the present invention is not limited to this, and the indicator lamp provided only for the authentication process exemplified in the LED pattern authentication process It may be

[C]
The communication control device 1 and the router 10 according to the first to third embodiments may have the following hardware configuration. FIG. 9 is a diagram illustrating an example of a hardware configuration of the communication control device 1 or the router 10. The same applies to the other embodiments [a] and [b].

  The communication control device 90 shown in FIG. 9 has a processor 91 and a memory 92. The communication control device 90 also has a display lamp (not shown) such as an LED as described in FIG. 1 and the like. The control unit 12 in the communication control device 1 or the router 10 described in the first to third embodiments is realized by the processor 91 reading and executing a program stored in the memory 92. That is, this program is a program for causing the processor 91 to function as the control unit 12 described above, and is a program for causing the communication control device 90 to execute the process (including the authentication process) in the control unit 12. The memory 92 can also function as the setting storage unit 13 of the router 10 in FIG.

  In the above-mentioned example, the program can be stored using various types of non-transitory computer readable media and supplied to a computer. Non-transitory computer readable media include tangible storage media of various types. Examples of non-transitory computer readable media include magnetic recording media (eg, flexible disks, magnetic tapes, hard disk drives), magneto-optical recording media (eg, magneto-optical disks). Furthermore, in this example, a CD-ROM (Read Only Memory), a CD-R, a CD-R / W, a semiconductor memory (for example, mask ROM, PROM (Programmable ROM), EPROM (Erasable PROM), flash ROM, RAM (RAM) Random Access Memory)). Also, the programs may be supplied to the computer by various types of transitory computer readable media. Examples of temporary computer readable media include electrical signals, light signals, and electromagnetic waves. The temporary computer readable medium can provide the program to the computer via a wired communication path such as electric wire and optical fiber, or a wireless communication path.

[D]
Furthermore, in the various embodiments described above, as described in the control procedure including the authentication procedure in the communication control apparatus, the present disclosure also takes a form as an authentication method or a communication control method executed by the communication control apparatus. obtain. This authentication method is an authentication method executed by the communication control device provided with n display lamps 11-1 to 11-n, and the authentication process to be executed is as described in the first to third embodiments. is there. Further, the communication control method is a method of authenticating the terminal device using this authentication method and controlling the communication control device, and any communication control may be performed for communication control other than authentication.

  In addition, this indication is not limited to the said embodiment, It is possible to change suitably in the range which does not deviate from the meaning. In addition, the present disclosure may be implemented by appropriately combining the respective embodiments.

<Supplementary Note>
Some or all of the above embodiments may be described as in the following appendices, but is not limited to the following.

(Supplementary Note 1)
A communication control device,
A plurality of display lamps, and a control unit performing communication control in the communication control device and lighting control of the plurality of display lamps.
The control unit
In response to an access request from a terminal connected via a network, the lighting pattern of the plurality of display lamps is determined;
The lighting of the plurality of display lamps is controlled in accordance with the determined lighting pattern, and an information input image for prompting input of pattern information indicating the lighting patterns of the plurality of display lamps is displayed on the terminal device.
When the pattern information matching the determined lighting pattern is received from the terminal device, the terminal device is successfully authenticated.
Communication control unit.

(Supplementary Note 2)
Each of the plurality of display lamps is a lamp whose illumination color can be changed,
The lighting pattern is a pattern in which a lighting color is designated for each of the plurality of display lamps.
The communication control device according to appendix 1.

(Supplementary Note 3)
Each of the plurality of display lamps is a lamp whose illumination color can be changed,
The lighting pattern is a pattern in which at least one of the lighting color at the time of lighting off and lighting on for each of the plurality of display lamps is specified.
The communication control device according to appendix 1.

(Supplementary Note 4)
The control unit
It has a function of displaying an authentication image for prompting input of an authentication password on the terminal device, receiving the authentication password from the terminal device, and performing password authentication processing based on the received authentication password.
The authentication image includes a selection area for selecting an authentication process different from the password authentication process,
The control unit
In response to the access request, the authentication image is displayed on the terminal device;
When the selected area is selected, the lighting pattern is determined.
The communication control device according to any one of appendices 1 to 3.

(Supplementary Note 5)
The control unit
In response to the access request, an authentication image for prompting input of an authentication password is displayed on the terminal device, the authentication password is received from the terminal device, and password authentication processing based on the received authentication password is performed.
When the authentication of the terminal device fails a predetermined number of times in the password authentication process, the lighting pattern is determined.
The communication control device according to any one of appendices 1 to 4.

(Supplementary Note 6)
A storage unit configured to store setting values of the communication control;
The control unit permits the change of the setting value when the authentication of the terminal device succeeds by using either the authentication password or the information indicating the lighting pattern in response to the access request from the terminal device. Do,
The communication control device according to appendix 4 or 5.

(Appendix 7)
At least one of the plurality of display lamps is a status display lamp for displaying a status of communication control in the communication control device.
The communication control device according to any one of appendices 1 to 6.

(Supplementary Note 8)
The indicator lamp comprises a light emitting diode,
The communication control device according to any one of appendices 1 to 7.

(Appendix 9)
The communication control device according to any one of appendices 1 to 8,
The terminal device;
Communication system having.

(Supplementary Note 10)
An authentication method executed by a communication control device provided with a plurality of display lamps, the authentication method comprising:
In response to an access request from a terminal device connected to the communication control device via a network, the lighting pattern of the plurality of display lamps is determined;
The lighting of the plurality of display lamps is controlled in accordance with the determined lighting pattern, and an information input image for prompting input of pattern information indicating the lighting patterns of the plurality of display lamps is displayed on the terminal device.
When the pattern information matching the determined lighting pattern is received from the terminal device, the terminal device is successfully authenticated.
Authentication method.

(Supplementary Note 11)
Each of the plurality of display lamps is a lamp whose illumination color can be changed,
The lighting pattern is a pattern in which a lighting color is designated for each of the plurality of display lamps.
The authentication method according to appendix 10.

(Supplementary Note 12)
A program for causing a communication control device having a plurality of display lamps to execute an authentication process,
The authentication process is
In response to an access request from a terminal device connected to the communication control device via a network, the lighting pattern of the plurality of display lamps is determined;
The lighting of the plurality of display lamps is controlled in accordance with the determined lighting pattern, and an information input image for prompting input of pattern information indicating the lighting patterns of the plurality of display lamps is displayed on the terminal device.
When the pattern information matching the determined lighting pattern is received from the terminal device, the terminal device is successfully authenticated.
Is a process,
program.

(Supplementary Note 13)
Each of the plurality of display lamps is a lamp whose illumination color can be changed,
The lighting pattern is a pattern in which a lighting color is designated for each of the plurality of display lamps.
The program according to appendix 12.

1, 90 communication control unit 10 router 11 indicator light,
11-1, 11-n indicator lamp (LED)
11-2, 11-3, 11-4, 11-5 LED
12 controls,
13 setting storage unit,
21 Packet transmission / reception I / F
22 packet processing unit 23 source storage unit 24 LED control unit 25 pattern consistency determination unit 26 LED pattern generation unit 30 terminal device 31 display unit 32 control unit 33 terminal unit operation unit 34 communication unit 40 initial login image 41 password input field 42 , 52 Login button 43 Link 50 LED pattern authentication image 51 Input field 91 Processor 92 Memory

Claims (10)

A communication control device,
A plurality of display lamps, and a control unit performing communication control in the communication control device and lighting control of the plurality of display lamps.
The control unit
In response to an access request from a terminal connected via a network, the lighting pattern of the plurality of display lamps is determined;
The lighting of the plurality of display lamps is controlled in accordance with the determined lighting pattern, and an information input image for prompting input of pattern information indicating the lighting patterns of the plurality of display lamps is displayed on the terminal device.
When the pattern information matching the determined lighting pattern is received from the terminal device, the terminal device is successfully authenticated.
Communication control unit. Each of the plurality of display lamps is a lamp whose illumination color can be changed,
The lighting pattern is a pattern in which a lighting color is designated for each of the plurality of display lamps.
The communication control device according to claim 1. Each of the plurality of display lamps is a lamp whose illumination color can be changed,
The lighting pattern is a pattern in which at least one of the lighting color at the time of lighting off and lighting on for each of the plurality of display lamps is specified.
The communication control device according to claim 1. The control unit
It has a function of displaying an authentication image for prompting input of an authentication password on the terminal device, receiving the authentication password from the terminal device, and performing password authentication processing based on the received authentication password.
The authentication image includes a selection area for selecting an authentication process different from the password authentication process,
The control unit
In response to the access request, the authentication image is displayed on the terminal device;
When the selected area is selected, the lighting pattern is determined.
The communication control device according to any one of claims 1 to 3. The control unit
In response to the access request, an authentication image for prompting input of an authentication password is displayed on the terminal device, the authentication password is received from the terminal device, and password authentication processing based on the received authentication password is performed.
When the authentication of the terminal device fails a predetermined number of times in the password authentication process, the lighting pattern is determined.
The communication control device according to any one of claims 1 to 4. At least one of the plurality of display lamps is a status display lamp for displaying a status of communication control in the communication control device.
The communication control device according to any one of claims 1 to 5. The indicator lamp comprises a light emitting diode,
The communication control device according to any one of claims 1 to 6. The communication control device according to any one of claims 1 to 7.
The terminal device;
Communication system having. An authentication method executed by a communication control device provided with a plurality of display lamps, the authentication method comprising:
In response to an access request from a terminal device connected to the communication control device via a network, the lighting pattern of the plurality of display lamps is determined;
The lighting of the plurality of display lamps is controlled in accordance with the determined lighting pattern, and an information input image for prompting input of pattern information indicating the lighting patterns of the plurality of display lamps is displayed on the terminal device.
When the pattern information matching the determined lighting pattern is received from the terminal device, the terminal device is successfully authenticated.
Authentication method. A program for causing a communication control device having a plurality of display lamps to execute an authentication process,
The authentication process is
In response to an access request from a terminal device connected to the communication control device via a network, the lighting pattern of the plurality of display lamps is determined;
The lighting of the plurality of display lamps is controlled in accordance with the determined lighting pattern, and an information input image for prompting input of pattern information indicating the lighting patterns of the plurality of display lamps is displayed on the terminal device.
When the pattern information matching the determined lighting pattern is received from the terminal device, the terminal device is successfully authenticated.
Is a process,
program.

Images