JP5061290B2 - Wireless communication system - Google Patents

Description

  The present invention relates to a wireless communication system, and more particularly to a technique for easily performing wireless communication setting.

  A wireless communication system using a wireless local area network (LAN) includes an access point device that is a relay device and a client device that performs wireless communication with the access point device. The user needs to make various settings related to wireless LAN communication in order to enable wireless communication between the client device and the access point device.

  Patent Documents 1 and 2 are disclosed as techniques related to the present invention.

JP 2004-215232 A Japanese Patent Laid-Open No. 2006-100757

  However, there is a problem that the setting for wireless LAN communication is difficult for general users. In addition, since a network key is not initially set in a wireless communication system using a wireless LAN, there is a possibility that wireless communication may be executed with a security problem.

  Therefore, an object of the present invention is to provide a wireless communication system that can easily realize settings and security related to wireless communication.

A first aspect of a wireless communication system according to the present invention is a wireless communication system having a first communication device and a second communication device that performs wireless communication with the first communication device, wherein the first communication device is , A first identification name generated using a seed and first identification information unique to the first communication device, a first recording medium in which the seed is recorded, and the first identification name as the second identification name. A first wireless communication unit that wirelessly communicates with the communication device, wherein the second communication device receives the first identification name from the first communication device; and the seed is used for the wireless communication. Using the second recording medium recorded in advance, the first identification name acquired from the first communication device, and the seed recorded in the second recording medium, to restore the first identification information; Determining whether or not connection with the first communication device is possible based on the first identification information Provided with a door.

A second aspect of the radio communication system according to the present invention is a radio communication system according to the first embodiment, the first communication device are both the said species recorded on the first recording medium No. A first encryption unit that encrypts communication data with a first encryption key generated using the one identification information, wherein the first wireless communication unit transmits the encrypted communication data to the second communication The second wireless communication unit receives the encrypted communication data from the first communication device, and the second communication device transmits the first identification information generated by the determination unit And a first decryption unit for decrypting the encrypted communication data with a first decryption key generated using the seed recorded on the second recording medium.

A third aspect of the wireless communication system according to the present invention is the wireless communication system according to the first or second aspect, wherein the second communication device includes the first identification information generated by the determination unit, A second encryption unit that encrypts the communication data with a second encryption key generated using the seed recorded on the second recording medium, wherein the second wireless communication unit is encrypted The communication data is transmitted to the first communication device, the first wireless communication unit receives the encrypted communication data from the second communication device, and the first communication device A second decryption key generated by using the first identification information recorded on the first recording medium and the seed, and decrypting the communication data encrypted by the second encryption unit; A decoding unit is further provided.

A fourth aspect of the radio communication system according to the present invention is a radio communication system according to the first to third aspects, the first identification name, said first communication device is unique to the second communication device Used for registration communication for registering the second identification information, and the first recording medium is generated using the seed and the first identification information, and is different from the first identification name for normal communication. The second identification name is recorded, and the second communication device uses the seed recorded on the second recording medium and the first identification information generated by the determination unit to determine the second identification name. An identification name generation unit is further provided, and the first communication device and the second communication device communicate with each other using the second identification name during normal communication.

A fifth aspect of the wireless communication system according to the present invention is the wireless communication system according to any one of the first to third aspects, wherein the first identifier is the first communication device. Used in registration communication for registering second identification information unique to two communication devices, and the first recording medium includes a first type different from the type used for generating the first identification name and the first identification And a second identification name for normal communication, which is different from the first identification name, is recorded, and the second communication device records the first type recorded in the second recording medium. And an identification name generation unit that generates the second identification name using the first identification information generated by the determination unit, wherein the first communication device and the second communication device are configured to perform normal communication. Communicate with each other using the second identifier .

A sixth aspect of the wireless communication system according to the present invention is the wireless communication system according to the second aspect, wherein the first communication device includes the first encryption key and the first decryption key. The first encryption unit is generated by using the first identification information recorded on the first recording medium and the seed, and is used at the time of registration communication for registering the second identification information unique to the two communication devices. The communication data is encrypted with a third encryption key for normal communication different from the first encryption key, and the first decryption unit includes the first identification information generated by the determination unit and the The third encryption key generated by using the seed recorded in the second recording medium and different from the first decryption key, and encrypted by the third encryption key, for a normal communication. Decrypt communication data.

A seventh aspect of the wireless communication system according to the present invention is the wireless communication system according to the second aspect, in which the first communication device includes the first encryption key and the first decryption key. 2 used in registration communication for registering second identification information unique to the communication device, and used for generating the first encryption key and the first decryption key in the first recording medium and the second recording medium. A second type different from the above-mentioned type is recorded, and the first encryption unit is generated using the first identification information and the second type, both of which are recorded on the first recording medium. The communication data is encrypted with a third encryption key for normal communication different from the first encryption key, and the first decryption unit includes the first identification information generated by the determination unit and the It is generated using the second type recorded on the second recording medium, and the first recovery is performed. Different from the encryption key, in the normal third decryption key for communication, decrypts the communication data encrypted by the third encryption key.

An eighth aspect of the wireless communication system according to the present invention is the wireless communication system according to the third aspect, in which the first communication device includes the second encryption key and the second decryption key. The second encryption unit is used at the time of registration communication for registering the second identification information unique to the two communication devices, and the second encryption unit is configured to record the first identification information generated by the determination unit and the type recorded on the second recording medium. And the communication data is encrypted with a fourth encryption key for normal communication, which is different from the second encryption key, and the second decryption unit is provided on the first recording medium. A fourth decryption key for normal communication, which is generated by using the recorded first identification information and the seed and is different from the second decryption key, and is encrypted by the fourth encryption key. The communication data is decrypted.

A ninth aspect of the wireless communication system according to the present invention is the wireless communication system according to the third aspect, in which the first communication device includes the second encryption key and the second decryption key. 2 used in registration communication for registering second identification information unique to the communication device, and used for generating the second encryption key and the second decryption key in the first recording medium and the second recording medium. The third type different from the type is recorded, and the second encryption unit includes the first identification information generated by the determination unit and the third type recorded on the second recording medium. The communication data is encrypted with a fourth encryption key for normal communication, which is different from the second encryption key, and the second decryption unit is recorded on the first recording medium. Generated using the first identification information and the third type, and the second decoding The key different, the usual fourth decryption key for communication, decrypts the communication data encrypted by the fourth encryption key.

A tenth aspect of the wireless communication system according to the present invention is the wireless communication system according to any one of the first to ninth aspects, wherein the second communication device determines that the determination unit should be connected. The first identification name of the first communication device is recorded, and a setting completion notification is transmitted to the first communication device. The first communication device has second identification information unique to the second communication device. A registration permission unit that invalidates the registration of the second identification information when a period from the start of the registration operation for registering the registration to the reception of the setting completion notification exceeds a predetermined value. The registration operation includes: wireless communication of the first identification name to the second communication device by the first wireless communication unit; and identification of the first identification name from the first communication device by the second wireless communication unit. Reception and determination of the connection by the determination unit When, including the transmission of the setting completion notification, the invalid registration of the second identification information by the registration permission section.

An eleventh aspect of the wireless communication system according to the present invention is the wireless communication system according to any one of the first to ninth aspects, wherein the second communication device determines that the determination unit should be connected. The first identification name is recorded, a setting completion notification is transmitted to the first communication device, and the first communication device performs a registration operation for registering second identification information unique to the second communication device. When the setting completion notification is received after the start, the registration further includes a registration permission unit that ends the registration operation, and the registration operation is performed by the first wireless communication unit to the second communication device with the first identification name. Wireless communication, reception of the first identification name from the first communication device by the second wireless communication unit, determination of whether the connection is possible by the determination unit, transmission of the setting completion notification, and registration permission Registration operation of the second identification information And an end.

A twelfth aspect of the wireless communication system according to the present invention is the wireless communication system according to any one of the first to ninth aspects, wherein the second communication device determines that the determination unit should be connected. The first identification name is recorded, a setting completion notification is transmitted to the first communication device, and the first communication device is registered for registering second identification information unique to the second communication device. A registration permission unit that invalidates registration of the identification information of the second communication device when receiving a plurality of the setting completion notifications within a predetermined period of time after starting the operation; Wireless communication of the first identification name to the second communication device by one wireless communication unit, reception of the first identification name from the first communication device by the second wireless communication unit, and the determination unit by the determination unit Judgment of connection availability and sending of the setting completion notification When, and a disable registration of the second identification information by the registration permission section.

A thirteenth aspect of the wireless communication system according to the present invention is the wireless communication system according to any one of the first to ninth aspects, wherein the second communication device includes an input unit operated by a user, The first identification name determined to be connected by the determination unit is recorded as one of setting information, and a setting completion notification is transmitted to the first communication device, and the first communication device completes the setting completion. When the notification is received, the information processing apparatus further includes a registration permission unit that notifies the second identification information unique to the second communication device to the outside and does not permit registration of the second identification information in response to an operation of the input unit .

According to the first and second aspects of the wireless communication system according to the present invention, at the time of wireless setting, the user does not need to specify with which access point device the client device is wirelessly communicated, and further, the encryption key and decryption There is no need to set the activation key.

According to the third and fourth aspects of the wireless communication system according to the present invention, the first network identifier is used for registration communication, and the second network identifier is used for normal communication. Registration can be suppressed.

According to the fifth to ninth aspects of the wireless communication system according to the present invention, the encryption key and the decryption key used during registration communication are different from the encryption key and the decryption key used during normal communication. Unauthorized registration by client devices of the three parties can be suppressed.

According to the 10th aspect of the radio | wireless communications system which concerns on this invention, since registration time is restrict | limited, registration of an unauthorized client apparatus can be suppressed further.

According to the eleventh aspect of the wireless communication system of the present invention, when the setting completion command is received, the registration operation is completed. Therefore, it is possible to shorten the time for the access point device to accept the registration, and thus to register the unauthorized client device Can be suppressed.

According to the 12th aspect of the radio | wireless communications system which concerns on this invention, the unauthorized registration by the client apparatus which a 3rd party has can be suppressed.

According to the 13th aspect of the radio | wireless communications system which concerns on this invention, since the client apparatus which a user is going to register can be confirmed, the unauthorized registration by the client apparatus which a 3rd party has can be prevented.

(First embodiment)
FIG. 1 shows an example of a schematic configuration diagram of a wireless communication system according to the first embodiment of the present invention. The wireless communication system includes an access point device 1 and a client device 2. The access point device 1 is connected to the network 3 via a LAN, a WAN (Wide Area Network) or the like. The client device 2 can be connected to the access point device 1 by wireless communication, and can be connected to the network 3 using the access point device 1 as a relay device.

  FIG. 2 is a schematic configuration diagram illustrating an example of the internal configuration of the access point device 1, and FIG. 3 is a schematic configuration diagram illustrating an example of the internal configuration of the client device 2.

  As shown in FIG. 2, the access point device 1 includes an antenna 11, a wireless communication unit 12, a network communication unit 13, a control unit 14, a recording medium 15, a timer unit 16, and an input unit 17. Yes.

  The wireless communication unit 12 can wirelessly communicate with the client device 2 via the antenna 11.

  The network communication unit 13 is connected to the network 3 and can send and receive signals to and from other devices (not shown) connected to the network 3.

  In the recording medium 15, a setting information generation key and identification information unique to the access point device 1 are recorded in advance. The setting information generation key is a parameter for generating setting information (network identification name, network key, etc., which will be described later) common to the access point device 1 and the client device 2 among the setting information for performing wireless LAN communication. It is. The identification information is, for example, a manufacturing serial number or a MAC (Media Access Control) address. In addition, a wireless LAN setting file for recording various setting information is recorded on the recording medium 15.

  The input unit 17 includes an input button that functions as a registration button when setting a wireless LAN with the client device 2, for example. When the user presses the registration button, as will be described later, the access point device 1 includes a wireless LAN setting operation (including a registration operation for registering identification information unique to the client device 2 as one of setting information, hereinafter also referred to as a registration operation). ). The trigger for starting the wireless LAN setting operation is not limited to pressing the registration button, and may be reception of a signal from the client device 2, for example.

  The control unit 14 refers to the wireless LAN setting file recorded on the recording medium 15 and controls the operation of the wireless communication unit 12 based on various setting information recorded here. The control unit 14 includes an identification name generation unit 14a, an encryption key generation unit 14b, a routing unit 14c, an encryption / decryption unit 14d, and a registration permission unit 14e.

  The identification name generation unit 14a performs a first calculation process using the setting information generation key recorded in advance on the recording medium 15 and the identification information unique to the access point device 1 to generate a network identification name. Further, the network identification name can be written in the network identification name column 15a in the wireless LAN setting file and recorded on the recording medium 15. The network identification name is a name for identifying from another access point device, and is, for example, an SSID (Service Set Identifier).

  The encryption key generation unit 14b uses the setting information generation key pre-recorded on the recording medium 15 as an encryption seed and also uses the identification information unique to the access point device 1 to perform the second calculation process (first And a network key as an encryption key and a decryption key are generated. Further, the network key can be written in the network key field 15b in the wireless LAN setting file and recorded on the recording medium 15.

  Although details will be described later, the identification name generation unit 14a and the encryption key generation unit 14b can individually generate a network identification name and a network key for registration and normal communication, respectively.

  The routing unit 14 c performs routing processing for transmitting and receiving communication data from the client device 2 to other devices (not shown) connected to the network 3.

  The encryption / decryption unit 14d uses the network key recorded in the wireless LAN setting file of the recording medium 15 to transmit communication data using an encryption technique such as WEP (Wired Equivalent Privacy) or WPA (Wi-Fi Protected Access). Is encrypted and transmitted to the client device 2, or the communication data received from the client device 2 is decrypted using the network key.

  The registration permission unit 14 e permits to record (register) identification information unique to the client device 2 in the wireless LAN setting file of the recording medium 15. Specifically, the registration permission unit 14e initializes the timer unit 16 when a trigger for wireless LAN setting (registration) operation (for example, pressing of the registration button) is obtained. When the counter value of the timer unit 16 does not exceed a predetermined value (for example, 3 minutes), registration of the client device 2 is permitted only when a setting completion notification is received from the client device 2. In other words, the registration of the client device 2 is invalidated when the counter value of the timer unit 16 exceeds a predetermined value.

  Next, as illustrated in FIG. 3, the client device 2 includes an antenna 21, a wireless communication unit 22, a control unit 23, a recording medium 24, and an input unit 25.

  The wireless communication unit 22 can wirelessly communicate with the access point device 1 via the antenna 21.

  The input unit 25 includes, for example, an input button that functions as a registration button for starting a wireless LAN setting operation with the access point device 1. When the user presses the registration button, the client apparatus 2 starts an operation for setting a wireless LAN as will be described later. Note that the trigger for starting the wireless LAN setting is not limited to pressing the registration button, but may be, for example, reception of a signal from the access point device 1, or setting information is not recorded in the wireless LAN setting file. That can be a trigger.

  Prior to wireless communication, a setting information generation key and identification information unique to the client device 2 are recorded on the recording medium 24. The setting information generation key is the same as that recorded on the recording medium 15 of the access point device 1. The recording medium 24 records a wireless LAN setting file for recording various setting information for wireless communication with the access point apparatus 1.

  The control unit 23 refers to the wireless LAN setting file recorded on the recording medium 24 and controls the wireless communication unit 22 based on various setting information recorded here. The control unit 23 includes an identification name generation unit 23a, an encryption key generation unit 23b, a determination unit 23c, and an encryption / decryption unit 23d.

  The determination unit 23 c calculates the identification information of the access point device 1 using the registration network identification name (described later) acquired from the access point device 1 and the setting information generation key recorded on the recording medium 24. . Then, it is determined whether or not the access point device 1 can be connected based on the obtained identification information.

  The identification name generation unit 23a uses the setting information generation key recorded in advance in the recording medium 24 and the identification information of the access point device 1 obtained by the determination unit 23c to use a network identification name for normal communication (described later). ) Is generated. Further, the network identification name can be written in the network identification name column 24a in the wireless LAN setting file and recorded on the recording medium 24.

  The encryption key generation unit 23b uses the setting information generation key recorded in advance on the recording medium 24 and the identification information of the access point device 1 obtained by the determination unit 23c to perform the same arithmetic processing as the encryption key generation unit 14b. To generate a network key. Further, the network key can be written in the network key field 24b of the wireless LAN setting file and recorded on the recording medium 24.

  Although details will be described later, the encryption key generation unit 23b can individually generate a network identification name and a network key for registration and normal communication.

  The encryption / decryption unit 23d performs the same operation as the encryption / decryption unit 14d included in the access point device 1, and encrypts communication data using the network key recorded in the wireless LAN setting file (recording medium 24). / Decrypt.

  The encryption / decryption units 14d and 23d perform encryption and decryption processing using a common network key, but the present invention is not limited to this. The encryption key generation units 14b and 23b may generate different encryption keys and decryption keys, and the encryption / decryption units 14d and 23d may encrypt / decrypt communication data using the encryption keys and the decryption keys. .

  The identification name generation units 14a and 23a, the encryption key generation units 14b and 23b, the determination unit 23c, the encryption / decryption units 14d and 23d, and the registration permission unit 14e may be configured by hardware. It may be configured by software that uses and realizes the function.

  Next, with reference to FIG. 4, an operation for setting a wireless LAN (including registration of identification information unique to the client apparatus 2) in the wireless communication system will be described. FIG. 4 is a flowchart showing the wireless LAN setting operation of the access point device 1 and the client device 2.

  First, in steps S101 and S201, the access point device 1 and the client device 2 are powered on. When the access point device 1 is powered on, in step S102, the identification name generation unit 14a and the setting information generation key recorded in advance in the recording medium 15 and the identification information unique to the access point device 1 (hereinafter, referred to as “access point device 1”). The first calculation process is executed using a network address (hereinafter, exemplified by SSID) for normal communication. Then, the SSID for normal communication is written in the network identification name field 15a in the wireless LAN setting file and recorded on the recording medium 15.

  The encryption key generation unit 14b executes a second calculation process (different from the first calculation process) using the setting information generation key recorded in advance on the recording medium 15 and the MAC address of the access point device 1. A network key for normal communication is generated. Then, the network key for normal communication is written in the network key field 15b in the wireless LAN setting file and recorded on the recording medium 15.

  Next, in step S103, the control unit 14 refers to the wireless LAN setting file recorded in the recording medium 15, and based on various setting information (such as SSID and network key for normal communication) recorded here. Transition to a state of performing wireless communication with the outside. However, at this time, the MAC address of the client apparatus 2 is not registered in the wireless LAN setting file. Note that the processing in steps S102 and S103 is processing for performing wireless communication with the client device 2 when another registered client device 2 exists.

  Next, in step S <b> 104, the user presses a registration button assigned to the input unit 17, for example, in order to register the unregistered client device 2. When the registration button is pressed, a registration operation for registering identification information unique to the client apparatus 2 is started. Specifically, the registration permission unit 14e initializes the counter value of the timer unit 16 and executes Step S105 described later.

  In step S105, the identification name generation unit 14a uses a setting information generation key recorded in advance in the recording medium 15 and the MAC address of the access point device 1 to perform a third calculation process different from the first calculation process. To generate an SSID for registration. Then, the SSID for registration is overwritten in the network identification name field 15a in the wireless LAN setting file and recorded on the recording medium 15.

  The encryption key generation unit 14b executes a fourth calculation process different from the second calculation process by using the setting information generation key recorded in advance on the recording medium 15 and the MAC address of the access point device 1, and performs registration. Generate a network key for. Then, the network key for registration is overwritten on the network key column 15b in the wireless LAN setting file and recorded on the recording medium 15.

  Next, in step S106, the control unit 14 refers to the wireless LAN setting file recorded in the recording medium 15, and shifts to a state in which wireless communication with the outside is performed. That is, thereafter, wireless communication is performed using the SSID for registration and the network key for registration.

  On the other hand, when the user presses a registration button assigned to the input unit 25 in step S202, for example, the client apparatus 2 searches for (scans) the access point apparatus 1 existing in the vicinity in step S203. Specifically, for example, the wireless communication unit 22 acquires a SSID for registration of the access point device 1 by receiving a beacon transmitted from the access point device 1 every predetermined time and carrying the SSID. Note that a probe request may be broadcast from the client device 2 to obtain a registration SSID.

  Next, in step S204, the determination unit 23c uses the acquired registration SSID and the setting information generation key recorded in the recording medium 24 to execute a decryption process corresponding to the third calculation process. The MAC address of the access point device 1 is calculated. This operation is performed for all the obtained SSIDs when the respective SSIDs are obtained from the plurality of access point apparatuses 1.

  Next, in step S205, the determination unit 23c determines whether or not to connect to the access point device 1 having the MAC address. As a specific determination method, for example, a determination is made by checking the manufacturer code of the MAC address. If the determination unit 23c determines that there is no access point device to be connected or if there are a plurality of access point devices determined to be connected, the registration operation ends in step S206. At this time, for example, an error may be displayed to notify the user.

  If it is determined in step S205 that the access point device 1 is an access point device to be connected, in step S207, the determination unit 23c determines the MAC address and the SSID for registration in the access in the wireless LAN setting file. The information is recorded in the point device identification information column 24 c and the network identification name column 24 a and recorded in the recording medium 24. Then, the encryption key generation unit 23b uses the setting information generation key recorded on the recording medium 24 and the MAC address to execute a fourth calculation process (the same operation as the encryption key generation unit 14b) and perform registration. Generate a network key for. Then, it is written in the network key field 24b in the wireless LAN setting file and registered in the recording medium 24.

  Next, in step S208, the encryption / decryption unit 23d uses the registration network key to encrypt, for example, the identification information of the client device 2 (for example, the MAC address stored in the identification information column 24e of the client device). The wireless communication unit 22 transmits the result to the access point device 1 indicated by the registration SSID. Note that if the MAC address of the client device 2 is arranged in the header of the communication data, it is not always necessary to transmit the MAC address of the client device 2.

  Next, in step S209, the wireless communication unit 22 transmits to the access point device 1 a setting completion notification in which the encryption / decryption unit 23d performs encryption processing using the registration network key.

  On the other hand, in step S107, the encryption / decryption unit 14d performs a decryption process on the received (encrypted) setting completion notification using the registration network key. Then, the registration permission unit 14e that has recognized the reception of the setting completion notification determines whether or not the counter value from the timer unit 16 exceeds a predetermined value (for example, 3 minutes). The registration of the client device 2 is invalidated. At this time, an error may be transmitted to the client device 2 and the error may be displayed on the client device 2.

  That is, since the registration permission unit 14e permits the registration of the client device 2 only when the counter value does not exceed the predetermined value, the time for the access point device 1 to accept the registration can be limited, and the client device possessed by the third party Unauthorized registration from 2 can be suppressed.

  If the counter value does not exceed the predetermined value in step S107, in step S109, the registration permission unit 14e records the acquired MAC address of the client device 2 in the client device identification information column 15c of the wireless LAN setting file. And recorded on the recording medium 15. Then, the registration operation ends. Specifically, by executing steps S110 and S111, which will be described later, the registration operation is terminated and the normal communication is started.

  That is, when the setting completion notification is received, the registration operation is terminated, so that the time for the access point device 1 to accept the registration can be shortened, and thus the unauthorized registration from the client device 2 owned by the third party can be suppressed. it can.

  In step S110, the identification name generation unit 14a executes the first calculation process using the setting information generation key recorded in advance on the recording medium 15 and the MAC address of the access point device 1, and the SSID for normal communication. Is generated. Then, the SSID for normal communication is overwritten in the network identification name field 15a in the wireless LAN setting file and recorded in the recording medium 15.

  The encryption key generation unit 14b executes the second calculation process using the setting information generation key recorded in advance on the recording medium 15 and the MAC address of the access point device 1 to generate a network key for normal communication. Then, the network key for normal communication is overwritten on the network key column 15b in the wireless LAN setting file and recorded on the recording medium 15.

  Next, in step S111, the control unit 14 refers to the wireless LAN setting file recorded on the recording medium 15, and shifts to a state where wireless LAN communication with the client device 2 indicated by the registered MAC address is possible.

  On the other hand, in step S210, the identification name generation unit 23a uses the setting information generation key recorded in the recording medium 24 and the MAC address of the access point device 1 recorded in the wireless LAN setting file of the recording medium 24. The first arithmetic processing is executed to generate an SSID for normal communication. Then, the SSID for normal communication is overwritten on the network identification name field 24a in the wireless LAN setting file and recorded in the recording medium 24.

  The encryption key generation unit 23b executes the second calculation process using the setting information generation key recorded on the recording medium 24 and the MAC address, and generates a network key for normal communication. Then, the network key for normal communication is overwritten in the network key field 24b in the wireless LAN setting file and recorded on the recording medium 24.

  Then, the encryption / decryption unit 23d performs encryption / decryption processing on the communication data using the network key for normal communication in the wireless LAN setting file recorded in the recording medium 24, and the control unit 23 performs wireless communication. The communication data is transmitted / received to / from the access point device 1 indicated by the SSID for normal communication via the unit 22.

  As described above, since the access point device 1 and the client device 2 generate the same setting information (network identification name and network key), it is not necessary for the user to input the setting information and the wireless LAN setting is easily performed. be able to.

  Further, when the wireless LAN is set, the user does not need to designate which access point device the client device of his / her wirelessly communicates with, so the convenience of the user can be improved.

  In addition, since the network key is not wirelessly communicated between the access point device 1 and the client device 2, security can be improved. Since the user does not need to set a network key, convenience can be improved.

  Further, by using the SSID and network key for registration and normal communication, respectively, unauthorized registration by a client device owned by a third party can be suppressed.

(Modification)
In the first embodiment, as shown in FIG. 5, the identification name generation unit 14a executes different first and third arithmetic processes to generate two different SSIDs for registration and normal communication. Yes. Also, the encryption key generation units 14b and 23b execute different second and fourth arithmetic processes, respectively, to generate two different network keys for registration and normal communication. However, not all of these processes are essential.

  For example, as illustrated in FIG. 6, the identification name generation unit 14a performs a first calculation process using a bit string obtained by concatenating additional information (for example, service) for normal communication to a MAC address and a setting information generation key. A SSID for normal communication is generated, and a SSID for registration is generated by a first calculation process using a bit string obtained by concatenating additional information for registration (for example, entry) to a bit string of a MAC address and a setting information generation key. You may do it.

  In this case, the determination unit 23c uses the registration SSID searched in step S204 (see FIG. 4) and the setting information generation key recorded in the recording medium 24 to perform the reverse of the first calculation process. 1 is executed to calculate a bit string (MAC address + “entry”). And the determination part 23c can recognize the manufacturer code of the MAC address of the said bit string, and can determine that it is an access point apparatus which should be connected. Note that the access point device to be connected may be determined by recognizing the entry of the bit string.

  In step S209 (see FIG. 4), the identification name generation unit 23a adds additional information for normal communication (for example, service information) to the setting information generation key recorded in advance on the recording medium 24 and the MAC address extracted from the bit string. The SSID for normal communication may be generated by the first arithmetic processing using the bit string concatenated).

  Also, as shown in FIG. 6, the encryption key generation units 14b and 23b are the same as the identification name generation unit 14a. For example, each of the encryption key generation units 14b and 23b uses a setting information generation key recorded in advance in the recording media 15 and 24, and a bit string in which additional information (for example, service) for normal communication is connected to the MAC address. The network key for normal communication is generated by the arithmetic processing of 2, and the setting information generation key is used for registration by the second arithmetic processing using the bit string obtained by connecting the additional information for registration (for example, entry) to the MAC address. The network key may be generated.

  In this case, each of the identification name generation unit 14a and the encryption key generation units 23a and 23b only needs to execute one type of arithmetic processing. Therefore, the circuit scale is simplified for hardware, and the program configuration is simplified for software. Can do.

  Further, the identification name generation units 14a and 23a and the encryption key generation units 14b and 23b may execute the same calculation process. In this case, for example, four patterns of additional information are set in advance. For example, servicename is set in advance for the SSID for normal communication, entryname is set for the SSID for registration, servicekey is set for the network key for normal communication, and entrykey additional information is set for the network key for registration. . Then, the first calculation process is executed using the bit string obtained by concatenating the additional information corresponding to each MAC address and the setting information generation key, and the normal communication, the SSID for registration, the normal communication, and the registration are performed. A network key can be generated. However, the present invention is not limited to this, and four setting information generation keys may be recorded in advance, and each of the four different setting information generation keys (SSID, network key) is set by setting two patterns of setting information generation keys and two patterns of additional information. It may be generated.

  In this case, the identification name generation units 14a and 23a and the encryption key generation units 14b and 23b need only execute one type of arithmetic processing, so that the circuit scale is further simplified for hardware, and the program configuration is further simplified for software. can do.

(Second Embodiment)
A radio communication system according to the second embodiment of the present invention will be described. The schematic block diagram of the radio | wireless communications system which concerns on 2nd Embodiment is the same as FIGS. The wireless communication system according to the second embodiment is intended to more effectively suppress unauthorized registration by a client device held by a third party, as compared with the first embodiment.

  Only differences from the first embodiment will be described below. Specifically, the operation of the registration permission unit 14e shown in FIG. 2 (the operation of the portion surrounded by a broken line shown in FIG. 4) is different. FIG. 7 is a flowchart for explaining the operation of the registration permission unit 14e according to the second embodiment. For convenience, the operation of the registration permission unit 14e is described as registration determination.

  In step ST1, the registration permission unit 14e that has recognized the reception of the setting completion notification from the client device 2 determines whether the counter value of the timer unit 16 is within a predetermined value (for example, 3 minutes), and determines a predetermined value (for example, If within 3 minutes), ST1 is executed again.

  If the counter value exceeds the predetermined value, it is determined in step ST2 whether or not two or more setting completion notifications have been received. If two or more are received, the registration permission unit 14e invalidates the registration from all the client devices 2 in step ST3. At this time, an error may be transmitted to all the client apparatuses 2 that have transmitted the setting completion notification.

  If two or more setting completion notifications have not been received in step ST2, the registration permission unit 14e records the MAC address of the client device 2 in the recording medium 15 and ends the registration operation in step ST4.

  Therefore, even when the unauthorized client device 2 setting completion notification is transmitted earlier than the authorized client device 2 setting completion notification, registration of the unauthorized client device 2 can be invalidated.

  Further, the registration permission unit 14e may be configured to execute the flowchart shown in FIG. Specifically, the registration permission unit 14e that has received the setting completion notification from the client device 2 determines whether or not the counter value of the timer unit 16 is within a predetermined value (for example, 3 minutes) in step ST10. If so, the registration of the client apparatus 2 that transmitted the setting completion notification in step ST11 is invalidated.

  If the counter value is within a predetermined value (for example, 3 minutes), in step ST12, the received identification information (MAC address, manufacturing serial number, etc.) of the client device 2 is notified to the outside. Specifically, it is displayed on a display unit (not shown).

  In step ST <b> 13, the user confirms the identification information of the client device 2 and determines that the client device 2 is not a valid (own) client device 2, and presses a non-permission button assigned to the input unit 17.

  When the non-permission button is pressed, in step ST14, the registration permission unit 14e invalidates the registration of the client device 2.

  If it is determined in step ST13 that the user is a legitimate (own) client apparatus 2, the permission button assigned to the input unit 17 is pressed.

  When the permission button is pressed, in step ST15, the registration permission unit 14e records the MAC address of the client device 2 on the recording medium 15 and completes the registration operation.

  Therefore, an unauthorized registration operation by the client device 2 possessed by a third party can be prevented.

It is a schematic block diagram which shows an example of the radio | wireless communications system which concerns on this invention. It is a schematic block diagram which shows an example of an internal structure of an access point apparatus. It is a schematic block diagram which shows an example of an internal structure of a client apparatus. 6 is a flowchart illustrating a wireless LAN setting operation in the wireless communication system. It is a figure which shows an example of the arithmetic processing of an identification name production | generation part and an encryption key production | generation part. It is a figure which shows an example of the arithmetic processing of an identification name production | generation part and an encryption key production | generation part. It is a flowchart which shows operation | movement of the registration permission part concerning 2nd Embodiment. It is a flowchart which shows operation | movement of the registration permission part concerning 2nd Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Access point apparatus 2 Client apparatus 14a Identification name generation part 14b Encryption key generation part 14e Registration permission part 15 Recording medium 23a Identification name generation part 23b Encryption key generation part 23c Determination part 24 Recording medium

Claims (13)

A wireless communication system having a first communication device and a second communication device that performs wireless communication with the first communication device,
The first communication device is
A first recording medium in which a first identification name generated using a seed and first identification information unique to the first communication device, and the seed are recorded;
A first wireless communication unit that wirelessly communicates the first identification name with the second communication device;
The second communication device is
A second wireless communication unit for receiving the first identification name from the first communication device;
A second recording medium in which the seed is recorded prior to the wireless communication;
The first identification information is restored using the first identification name acquired from the first communication device and the seed recorded on the second recording medium, and the first identification information is restored based on the first identification information. A wireless communication system comprising: a determination unit that determines whether or not connection with one communication device is possible. The first communication device is
Each further comprises a first encryption unit that encrypts communication data with a first encryption key generated using the seed recorded on the first recording medium and the first identification information,
The first wireless communication unit transmits the encrypted communication data to the second communication device,
The second wireless communication unit receives the encrypted communication data from the first communication device,
The second communication device is
A first decryption key generated using the first identification information generated by the determination unit and the seed recorded on the second recording medium is used to decrypt the encrypted communication data. The wireless communication system according to claim 1, further comprising one decoding unit. The second communication device is
A second encryption unit that encrypts the communication data with a second encryption key generated using the first identification information generated by the determination unit and the seed recorded on the second recording medium.
Further comprising
The second wireless communication unit transmits the encrypted communication data to the first communication device,
The first wireless communication unit receives the encrypted communication data from the second communication device,
The first communication device is
In any case, the communication data encrypted by the second encryption unit is decrypted with the second decryption key generated using the first identification information recorded on the first recording medium and the seed. Second decoding unit
The wireless communication system according to claim 1, further comprising: The first identifier is used during registration communication in which the first communication device registers second identification information unique to the second communication device,
The first recording medium is generated using the seed and the first identification information, and is recorded with a second identification name for normal communication different from the first identification name,
The second communication device is
An identification name generation unit that generates the second identification name using the seed recorded on the second recording medium and the first identification information generated by the determination unit;
In addition,
The wireless communication system according to any one of claims 1 to 3, wherein the first communication device and the second communication device communicate with each other using the second identification name during normal communication . The first identifier is used during registration communication in which the first communication device registers second identification information unique to the second communication device,
The first recording medium is generated using a first type different from the type used for generating the first identification name and the first identification information, and is different from the first identification name. A second identifier for communication is recorded,
The second communication device is
An identification name generation unit that generates the second identification name using the first type recorded on the second recording medium and the first identification information generated by the determination unit;
In addition,
The wireless communication system according to any one of claims 1 to 3, wherein the first communication device and the second communication device communicate with each other using the second identification name during normal communication . The first encryption key and the first decryption key are used during registration communication in which the first communication device registers second identification information unique to the second communication device,
The first encryption unit is generated using the first identification information recorded on the first recording medium and the seed, and is different from the first encryption key. Encrypt communication data with an encryption key,
The first decryption unit is generated using the first identification information generated by the determination unit and the seed recorded in the second recording medium, and is different from the first decryption key in normal communication. The wireless communication system according to claim 2 , wherein the communication data encrypted with the third encryption key is decrypted with a third decryption key for use . The first encryption key and the first decryption key are used during registration communication in which the first communication device registers second identification information unique to the second communication device,
In the first recording medium and the second recording medium, a second type different from the type used for generating the first encryption key and the first decryption key is recorded,
The first encryption unit is generated by using the first identification information and the second type, both of which are recorded on the first recording medium, and is different from the first encryption key in normal communication. Encrypt the communication data with the third encryption key for
The first decryption unit is generated using the first identification information generated by the determination unit and the second type recorded in the second recording medium, and is different from the first decryption key. The wireless communication system according to claim 2 , wherein the communication data encrypted with the third encryption key is decrypted with a third decryption key for normal communication . The second encryption key and the second decryption key are used during registration communication in which the first communication device registers second identification information unique to the second communication device,
The second encryption unit is generated using the first identification information generated by the determination unit and the seed recorded on the second recording medium, and is different from the second encryption key, Encrypt communication data with the 4th encryption key for communication,
Each of the second decryption units is generated using the first identification information and the seed recorded on the first recording medium, and is different from the second decryption key and is used for normal communication. The wireless communication system according to claim 3 , wherein the communication data encrypted with the fourth encryption key is decrypted with a four decryption key . The second encryption key and the second decryption key are used during registration communication in which the first communication device registers second identification information unique to the second communication device,
In the first recording medium and the second recording medium, a second type different from the type used for generating the second encryption key and the second decryption key is recorded,
The second encryption unit is generated using the first identification information generated by the determination unit and the second type recorded on the second recording medium, and is different from the second encryption key. , Encrypt communication data with the 4th encryption key for normal communication,
Each of the second decryption units is generated using the first identification information recorded on the first recording medium and the second type, and is different from the second decryption key for normal communication. The wireless communication system according to claim 3 , wherein the communication data encrypted with the fourth encryption key is decrypted with the fourth decryption key . The second communication device is
After recording the first identification name of the first communication device determined by the determination unit to be connected, a setting completion notification is transmitted to the first communication device,
The first communication device is
The second identification information is obtained when a period from when a registration operation for registering the second identification information unique to the second communication device is started until the setting completion notification is received exceeds a predetermined value. Registration permission section to invalidate registration
Further comprising
The registration operation includes wireless communication of the first identification name to the second communication device by the first wireless communication unit and reception of the first identification name from the first communication device by the second wireless communication unit. And determining whether the connection is possible by the determination unit, transmitting the setting completion notification, and invalidating registration of the second identification information by the registration permission unit. The wireless communication system according to 1. The second communication device is
After recording the first identification name determined by the determination unit to be connected, a setting completion notification is transmitted to the first communication device,
The first communication device is
A registration permission unit that terminates the registration operation upon receiving the setting completion notification after starting the registration operation for registering the second identification information unique to the second communication device.
Further comprising
The registration operation includes wireless communication of the first identification name to the second communication device by the first wireless communication unit and reception of the first identification name from the first communication device by the second wireless communication unit. And determining whether the connection is possible by the determination unit, transmitting the setting completion notification, and ending the registration operation of the second identification information by the registration permission unit. the wireless communication system according to One. The second communication device is
After recording the first identification name determined by the determination unit to be connected, a setting completion notification is transmitted to the first communication device,
The first communication device is
When a plurality of the setting completion notifications are received within a predetermined period from the start of a registration operation for registering second identification information unique to the second communication device, registration of the identification information of the second communication device Registration permission part to invalidate
Further comprising
The registration operation includes wireless communication of the first identification name to the second communication device by the first wireless communication unit and reception of the first identification name from the first communication device by the second wireless communication unit. And determining whether the connection is possible by the determination unit, transmitting the setting completion notification, and invalidating registration of the second identification information by the registration permission unit. The wireless communication system according to 1. The second communication device is
After recording the first identification name determined by the determination unit to be connected as one of setting information, a setting completion notification is transmitted to the first communication device,
The first communication device is
An input unit operated by a user;
When receiving the setting completion notification, a registration permission unit notifying the second identification information unique to the second communication device to the outside and not permitting the registration of the second identification information according to the operation of the input unit;
The wireless communication system according to any one of claims 1 to 9, further comprising:

Images