JP5779996B2 - Wireless communication system - Google Patents

Description

The present invention relates to a wireless communication system.

  In recent years, wireless network technology for electronic devices has been rapidly spreading. Unlike wired communication, wireless networks such as wireless LAN can communicate without being physically connected, and because of their nature, they can easily intercept communications. Therefore, the connection destination is uniquely determined before the first connection. For example, a process for sharing mutual authentication information for performing secure communication and an encryption key for performing encrypted communication is required. Connection information such as mutual authentication information and encryption key (hereinafter referred to as association information) is generally exchanged using secure means and stored in a nonvolatile memory or the like in a communication device.

  The stored association information is used as it is in the next connection. This first connection information sharing work is interpreted as the complexity of security communication in wireless communication or the like, and a method called “easy setup” has come to be used as a method for easily exchanging this association information. Yes. Wireless connection can be easily established between devices equipped with a wireless interface that complies with the technology for easy setup of wireless communication.

  The association information sharing method in this simple setup includes an In Band method in which association information is exchanged using a target main communication and an Out Of Band method in which association information is exchanged using a route different from the main communication. It is divided roughly into. A function for providing communication parameters is called a registrar, and a function for receiving and setting communication parameters from a registrar device is called an enrollee.

  As the In Band method, a “PIN method” that shares association information by simple authentication using a PIN code, or a “Push Button method that makes simple authentication by pressing a predetermined button on both sides that share association information instead of a PIN code. And so on.

  As the Out Of Band method, a “wired method” in which association information is once shared by wired connection, or a “UFD (USB Flash Drive) method” in which association information or minimum authentication information is stored and relayed in a USB storage drive. and so on.

  In recent years, as an Out Of Band method, it is promising to exchange and share association information by applying a technology that communicates at a lower speed and closer to the main communication, such as “NFC (Near Field Communication)”. It is seen and practical application is progressing. In communication technology such as NFC, association information is exchanged almost in contact, so that security can be physically secured, and there is no need for physical work such as plugging / connecting lines. It can be said that it is excellent in usability by easily exchanging association information.

  As one of such techniques using NFC, there is a technique disclosed in Patent Document 1. This technology is configured to include an access point 10, a wireless communication terminal 20, and an entrance / exit management device 30 that authenticates a visitor using the wireless communication terminal 20. The entrance / exit management device 30 can perform short-range wireless communication with the wireless communication terminal 20, connects to the wireless communication terminal 20 at the time of entry, authenticates the identity of the visitor, and differs for each connection with the wireless communication terminal 20. An ID is generated for each connection. Then, the connection setting information including the ID for each connection can be transmitted to the wireless communication terminal 20 that has been authenticated and to the access point 10, so that the connection setting with the access point 10 can be easily performed. In addition, impersonation of the wireless communication terminal 20 by “spoofing” can be suppressed.

  From the viewpoint of security, this simple setup method can be limited to those who know the PIN code for accessing the network in the “PIN method”, whereas the “Push Button method” is just a push of a button. Yes, its security level is low. On the other hand, the “UFD method” and the “NFC method” which are the Out Of Band method can be limited to a specific USB storage drive or a person who owns the NFC token, and therefore has higher security than the In Band method ( It can be said that this method has the ability to provide security.

  However, in the conventional general method, whether it is the In Band method or the Out of Band method, the simple setup method is well known, or if the person who actually operates it seems to know the method, Wireless LAN connection is possible for devices owned by anyone.

  Further, even if the simple setup method for restricting the use of wireless LAN connection is limited to, for example, the Out of Band method as disclosed in Patent Document 1, the device storing the association information is stolen. In such a case, there is a problem in that in-house information can be acquired easily by wireless LAN connection without knowing connection information. In addition, if the authentication system is complicated in order to solve this problem, there is a trade-off relationship with the original purpose of easy setup and the usability is lowered. Therefore, there is a demand to avoid such a technique as much as possible.

The present invention has been made in view of the above, and it is possible to securely set up a setup means for the connection without impairing the feature of the simple setup that the wireless LAN connection can be easily connected. It is an object of the present invention to provide a wireless communication system that can be known only to the public.

In order to solve the above-described problems and achieve the object, a wireless communication system according to the present invention is a setup means for automatically setting up a wireless LAN connection of a wireless communication device, and for performing wireless communication with the wireless communication device. A registrar device having wireless communication means, memory device communication means capable of communicating with a memory device, and setup availability control means for controlling whether or not to complete setup of a wireless LAN connection, and wireless capable of wireless communication with the registrar device A communication device and a memory device having storage means capable of storing the unique ID information of the wireless communication device and connectable to the registrar equipment, and the registrar equipment setup availability control means is configured to control the memory device communication. Means obtained from the memory device by means of When the unique ID information of the wireless communication device registered in the re-device matches the unique ID information of the wireless communication device acquired from the wireless communication device searched by the wireless communication means, the wireless communication device The setup of the wireless LAN connection to the device by the setup unit is completed , and it is detected that the radio wave intensity from the corresponding wireless communication device fluctuates more than a predetermined setting standard during the setup by the setup unit. In this case, the setup of the wireless LAN by the setup means is stopped .

Further, the wireless communication system of the present invention includes a setup means for automatically setting up a wireless LAN connection of a wireless communication device, a wireless communication means for performing wireless communication with the wireless communication device, and a plurality of wireless communication devices unique to each other. A registrar device having a memory device communication means capable of communicating with a memory device capable of registering ID information and a setup availability control means for controlling whether or not to complete setup of a wireless LAN connection, and wireless communication with the registrar device is possible. And a memory device having storage means capable of storing unique ID information of the wireless communication device and connectable to the registrar equipment. From the memory device by device communication means When the unique ID information of the wireless communication device registered in the obtained memory device matches the unique ID information of the wireless communication device acquired from the wireless communication device searched by the wireless communication means The wireless LAN connection setup for the wireless communication device is completed by the setup unit, and the unique ID information of the plurality of wireless communication devices acquired from the memory device is acquired from the wireless communication device with which the registrar device can communicate. When there is at least one item that matches the unique ID information, the setup of the wireless LAN connection by the setup unit is made available to any of the corresponding wireless communication devices.

According to the present invention, the wireless LAN connection setup of the wireless communication device is completed only when the memory device and the wireless communication device having the unique ID information registered in the memory device are simultaneously present in the communicable area. As a result, the wireless LAN connection can be made securely without compromising the simple setup feature, and the setup means for the connection can be known only to the setter. Play. Further, when it is detected that the radio wave intensity from the corresponding wireless communication device fluctuates beyond a predetermined setting standard during the execution of the setup by the setup unit, the setup of the wireless LAN by the setup unit can be stopped. As a result, if a malicious person has a wireless communication device and is moving, this can be detected, and unauthorized setup of the wireless LAN can be suppressed.

FIG. 1 is a block diagram showing the overall configuration of the wireless communication system in the present embodiment. FIG. 2 is a diagram illustrating an example of a hardware configuration of the registrar device according to the embodiment. FIG. 3 is a diagram illustrating an example of a software module configuration of the registrar device according to the embodiment. FIG. 4 is a block diagram illustrating a hardware configuration of the NFC device. FIG. 5 is a flowchart for explaining the operation of the registrar device when performing simple setup of the wireless LAN in the embodiment. FIG. 6 is a diagram illustrating a display example of the operation panel of the registrar device when a signal from the wireless communication device cannot be read. FIG. 7 is a flowchart illustrating the initial registration process in FIG.

  Exemplary embodiments of a wireless communication system according to the present invention will be described below in detail with reference to the accompanying drawings, focusing on the characteristic configuration and operation.

(System configuration)
First, the overall configuration of the wireless communication system in the present embodiment will be described with reference to FIG. FIG. 1 is a block diagram showing the overall configuration of the wireless communication system in the present embodiment. Note that the configuration shown in FIG. 1 is a minimum configuration for explanation, and the number of devices is arbitrary.

  As illustrated in FIG. 1, the overall configuration of the wireless communication system in the present embodiment includes a registrar device 10, an enrollee device 20, an NFC device 30, and a wireless communication device 40. At least the registrar device 10 is connected to an NFC reader / writer device (hereinafter referred to as NFC R / W) 50 capable of interfacing with the NFC device 30. In addition, the registrar device 10 in this embodiment functions as an access point for connecting the wireless communication device 40 to the LAN.

  In the example of FIG. 1, the user intends to connect the wireless communication device 40 as the enrollee device 20 to the LAN to which the registrar device 10 belongs by wireless LAN connection. The user stores unique ID information (hereinafter referred to as ID) of the wireless communication device 40 in the registrar device 10 and the NFC device 30 by an operation described later. This registers which wireless communication device 40 is the connection target.

  The user possesses an NFC device 30 that can be authenticated by the registrar device 10, and communicates with the registrar device 10 within a predetermined setting period to identify a wireless communication device connected to the LAN. Information (so-called association information) necessary for connecting to the LAN, such as an ESSID and an encryption key, can be provided only to the wireless communication device 40 to be connected specified by 30. That is, only the wireless communication device 40 to be connected specified by the NFC device 30 can perform the simple setup of the wireless LAN, and the simple setup cannot be completed for the other wireless communication devices 40. (Detailed operation will be described later). Note that IDs of wireless communication devices stored in the registrar device 10 and the NFC device 30 are encrypted and managed using an encryption algorithm in order to improve security.

  In the present embodiment, by adopting such a method, even if an NFC device 30 is used by a person other than the owner and an attempt is made to connect a certain wireless communication device 40 to the LAN, the device is stored in the NFC device 30. If the registrar device 10 does not receive a response signal from the wireless communication device 40 within a predetermined setting period and the wireless communication device 40 is not specified by the ID, the use of the LAN by simple setup of the wireless LAN is not possible. Can not. Thus, since unauthorized wireless LAN connection can be eliminated, the security of the wireless communication system can be ensured. Further, during the simple setup of the wireless LAN, the user actually takes only the action of holding the NFC device 30 over the registrar device 10 (except for the first registration described later), and does not impair usability.

  In addition, the form of the wireless communication device 40 in this embodiment is arbitrary. Also, the communication method between the wireless communication device 40 and the registrar device 10 is arbitrary, but as a form of the wireless communication device 40, a setup means for connection can be performed so that only the setting person can know. Therefore, it is desirable that the device is a device equipped with a small wireless tag or an ultra-small wireless communication device. For example, in the case of a wireless tag, even if a malicious person sees a place where connection setting by the NFC device 30 is performed, only the set person can know which wireless tag is to be connected to the LAN. This is because it is difficult for other people to easily determine which wireless tag is to be connected to the LAN visually.

(Registrar hardware configuration)
Next, the hardware configuration of the registrar device 10 in the present embodiment will be described with reference to FIG. FIG. 2 is a diagram illustrating an example of a hardware configuration of the registrar device 10 according to the present embodiment. In FIG. 2, the registrar device 10 includes a controller 100, an operation unit 120, and other hardware resources (not shown).

  The controller 100 includes a CPU 101, a timer 102, a ROM 103, a RAM 104, an ASIC (Application Specific Integrated Circuit) 105, a RAM 106, an HDD (Hard Disk Drive) 107, a serial bus I / F 108, an NIC (Network Interface LAN) 109, and a NIC (Network Interface WLAN) 109. The I / F 110, a USB (Universal Serial Bus) device I / F 111, a USB host 112, a memory card I / F 113, and the like.

  The controller 100 controls each part of the registrar device 10. The controller 100 includes a CPU 101 that is a microprocessor that executes various core processes, a timer 102 having a timekeeping function, a ROM 103 that stores an initial program executed by the CPU 101 at startup, various setting data, and the like. The RAM 104 used for temporarily storing programs and intermediate processing data when performing control, the ASIC 105 serving as a bridge connecting each device, and the programs and intermediate processing data temporarily when the ASIC 105 performs processing. RAM 106 used for storing data, HDD 107 for storing a control program such as a software module group to be described later executed by CPU 101 during operation and various data, registrar device 10 and peripheral devices not shown in serial connection Serial bus I / F 108 to be connected to the network, an expansion card connected to an expansion slot (not shown), NIC 109 which is an interface for LAN connection, WLAN I / F 110 to be wirelessly connected to the wireless communication device 40, and registrar equipment 10 to be not shown A USB device I / F 111 for connecting a USB-compatible peripheral device, a USB host 112 for connecting a later-described NFC R / W 50 to the controller 100 by a USB cable, and a memory card I / F 113 for connecting a memory card to the controller 100. I have.

  The operation unit 120 is an operation panel serving as a UI for receiving and displaying various operation inputs by the user. The operation unit 120 may include a speaker and emit a warning sound.

  Note that reading and writing of information to and from the NFC device 30 such as an NFC-compatible IC card, RFID device, or NFC-equipped device is controlled by the CPU 101 sending a command to the NFC R / W 50, and the NFC R / W This is realized by the W50 communicating with the NFC device 30. Data such as network association information, pairing information, authentication information of the user or NFC device 30 and key information for accessing the authentication information are transmitted and received through this USB communication path, but the USB bus is monitored. Since there is a concern about the leakage of information, the transmission and reception of commands and data on the USB bus are encrypted. Prior to encryption, the USB host 112 authenticates with the NFC R / W 50 and generates a common key obtained from the result. The USB bus is secured by performing encryption (and decryption) using this common key.

(Software module configuration)
Next, the software module configuration of the registrar device 10 in this embodiment will be described with reference to FIG. FIG. 3 is a diagram illustrating an example of a software module configuration of the registrar device 10 according to the present embodiment.

  When the NFC framework 201 corresponding to NFC receives an authentication request or a pairing or association request with a device from the application 202 for controlling the registrar device 10, an operation unit is connected via the drawing processing module 211 and the graphic driver 212. A predetermined display process is performed on the (operation panel) 120. Then, setting information and certification for association or pairing from the NFC device 30 through the NFC R / W device driver 204 and the USBHOST device driver 205 that control the USB-connected NFC R / W 50 via the NFC resource manager 203 File information is obtained, and the obtained certificate information is stored in the file system 209 using an address book DB module 208 that manages the address book DB for an authentication address book DB (not shown) provided in the HDD 107. And an inquiry through the HDD driver 210 or an inquiry through the wireless driver 207 using the network library 206 to an external CA server (certificate authority) or access point (both not shown) connected to the network. Do. Detailed information during the inquiry and the result of the inquiry are output to the application 202 as to whether the authentication has succeeded or failed.

  Here, the NFC resource manager 203 provides a resource management function corresponding to NFC. The USBHOST device driver 205 determines whether or not a USB-connected device is a control target, and the NFC R / W device driver 204 initializes the USB-connected NFC R / W50 or performs predetermined settings. Or The HDD driver 210 is a device driver that controls the drive of the HDD 107, and the file system 209 is a program that manages files stored in the HDD 107 and also has functions such as security and reliability. The application 202 is a program including an easy setup processing unit 202a that performs simple setup of a wireless LAN for the target wireless communication device 40, and an easy setup availability control unit 202b that controls whether or not the simple setup can be performed. .

(HFC hardware configuration)
Next, the hardware configuration of the NFC device 30 will be described with reference to FIG. FIG. 4 is a block diagram showing a hardware configuration of the NFC device 30. As shown in FIG.

  The NFC device 30 includes an antenna unit 300, an NFC controller unit 301, and a communication unit 304. The NFC controller unit 301 includes a control unit 302 and a memory 303. Under the control of the control unit 302, the communication unit 304 communicates with other NFC-compatible devices in a communicable range according to a wireless communication standard for non-contact ICs, using a carrier transmitted and received via the antenna unit 300.

  The control unit 302 controls the entire NFC device 30 by executing various programs stored in the memory 303, and manages association information stored in the memory 303, unique ID information of the wireless communication device 40, and the like. The memory 303 stores association data, various data such as the ID of the wireless communication device 40, and various programs, but the ID of the wireless communication device 40 is limited to the ID of one specific wireless communication device 40. Instead, the memory 303 can store the IDs of the plurality of wireless communication devices 40. By storing (registering) IDs of a plurality of wireless communication devices 40 in the memory 303, even if one wireless communication device 40 is damaged, lost, or stolen, another wireless communication device 40 can be easily used. become able to.

(Operation of registrar equipment)
Next, the operation of the registrar device 10 in this embodiment when performing a simple setup of a wireless LAN will be described with reference to FIG. FIG. 5 is a flowchart for explaining the operation of the registrar device 10 when performing a simple setup of the wireless LAN in the present embodiment.

  First, when the user performs a predetermined operation such as a screen operation for shifting the registrar device 10 to the simple setup mode, the registrar device 10 shifts to the simple setup mode (step S101). At this point, the registrar device 10 shifts to the simple setup mode, but the simple setup process is in a wait state. At this time, the registrar device 10 monitors the NFC device 30 via the NFC R / W 50.

  Next, when the user holds the NFC device 30 over the NFC R / W 50, the registrar device 10 starts communication with the NFC device 30 via the NFC R / W 50 (step S102), and authenticates the NFC device 30 (step S102). Step S103). Which NFC device 30 can be authenticated is managed by a database in the registrar device 10. If the NFC device 30 that has started communication here is an authenticable NFC device 30 registered in the database in the registrar device 10, device authentication is obtained. If device authentication cannot be obtained individually (NG in step S104), this process ends.

  On the other hand, when device authentication is obtained (OK in step S104), it is determined whether the NFC device 30 is used for the first time by referring to the access information of the database of the registrar device 10 (S105). The access information managed in the database of the registrar device 10 is information that can determine whether at least the corresponding NFC device 30 is used for the first time. For example, the access information is associated with identification information such as the ID of the NFC device 30. The number of uses by this device is managed by the database. The access information may be stored in the memory of the NFC device 30 and used.

  If it is found that the NFC device 30 is used for the first time (No in step S105), an initial registration process of the ID of the wireless communication device 40 is performed (S106). This initial registration process will be described later. The ID of the wireless communication device 40 is encrypted and can be decrypted by using an encryption key managed in a memory area in the registrar device 10.

  On the other hand, when the NFC device 30 is not used for the first time (Yes in step S105), the ID of the registered wireless communication device 40 is acquired from the NFC device 30 (step S107). The ID (one or more) of the wireless communication device 40 acquired here is stored in the memory area of the registrar device 10. At this time, if the ID of the wireless communication device 40 cannot be acquired (No in step S108), the series of processing ends, and the simple setup of the wireless LAN cannot be completed.

  When the ID of the wireless communication device 40 can be acquired from the NFC device 30 (Yes in step S108), the registrar device 10 then sends a signal (beacon) toward the peripheral wireless communication device 40. In response to this, when a response signal is returned from the surrounding wireless communication device 40 within a predetermined setting time counted by the timer 102 (Yes in step S109), the registrar device 10 encodes the signal and performs wireless communication. The ID of the device 40 is acquired (S110). At this time, when there are a plurality of wireless communication devices 40 around the registrar device 10, the respective IDs can be acquired. It is assumed that the response signal from the wireless communication device 40 includes the encrypted ID of the wireless communication device 40.

  On the other hand, if the signal from the wireless communication device 40 cannot be acquired within the set period (No in step S109), the series of processing ends. In this case, for example, a screen as shown in FIG. 6 is displayed on the operation unit (operation panel) 120 to inform the user that the signal from the wireless communication device 40 could not be read.

  Next, the ID acquired from the wireless communication device 40 and the ID acquired from the NFC device 30 are compared, and if they match (Yes in step S111), the wait state of the simple setup is solved and the wireless communication of the matched ID The simple wireless LAN setup process for the device 40 is executed and completed (S112). On the other hand, when the ID acquired from the wireless communication device 40 and the ID acquired from the NFC device 30 do not match (No in step S111), the process proceeds to step S109 and tries to acquire the ID from the wireless communication device 40 again.

  In the above processing, if the ID acquired from the NFC device 30 does not match all IDs acquired from the wireless communication device 40 within the setting period, or at least one wireless communication device 40 within the setting period. If the response signal is not returned from the user, the user cannot complete the simple setup. However, in this case, the user may be other than the rightful owner of the NFC device 30. It is desirable to take measures such as informing people in the area. Alternatively, it is desirable to take measures such as contacting the administrator of the registrar device 10 or the owner of the NFC device 30 registered in the database via the network.

  Further, in the above processing, during the execution of the wireless LAN simple setup processing, it is determined that the radio wave intensity from the wireless communication device 40 that should be in the vicinity of the registrar device 10 fluctuates more than a set standard. When detected by / F110, the simple setup is stopped and a warning notification is given by a warning sound or the like. At that time, a warning notification is given by a warning sound or the like. This is because if the NFC device 30 has been lost and is being used by a malicious person for easy wireless LAN setup, the malicious person may be carrying the wireless communication device 40 and moving. This means that it has been detected, and unauthorized wireless LAN setup can be suppressed.

  In the above processing, the IDs of the plurality of wireless communication devices 40 registered in the NFC device 30 are acquired from the NFC device 30, and the plurality of wireless communication devices 40 having IDs matching the plurality of IDs are detected. In this case, the wireless LAN connection simple setup can be used for any of the wireless communication devices 40 (the target of the simple setup). And when it becomes impossible to receive the signal from the at least 1 wireless communication device 40 in it, the simple setup of wireless LAN connection is stopped. This is because when the IDs of a plurality of wireless communication devices 40 are registered in the NFC device 30 and the plurality of wireless communication devices 40 can be used, usability is improved. This is because a situation in which a signal from the communication device 40 cannot be received may be theft. In this case as well, it is desirable to take measures such as notifying people in the vicinity by a warning sound or warning display.

  In the above processing, the IDs of the plurality of wireless communication devices 40 registered in the NFC device 30 are acquired from the NFC device 30, and the plurality of wireless communication devices 40 having IDs matching the plurality of IDs are detected. In this case, it is desirable to select one wireless communication device 40 that has responded earliest as an object of simple setup for wireless LAN connection. This is because, on the assumption that the user is wearing the wireless communication device 40, it is preferable to select the wireless communication device 40 with the fastest response that is considered to be closest to rejection.

  Note that “the wireless communication device 40 that responded earliest” selected here receives the response signal of one or more wireless communication devices 40 within a predetermined setting period, and then “ The wireless communication device 40 ″ that responds quickly is selected. Also in this case, as described above, when it becomes impossible to receive a signal from at least one of the wireless communication devices 40, the simple setup of the wireless LAN connection is stopped. Alternatively, in order to reduce the processing load, the corresponding wireless communication device 40 may be selected as “the wireless communication device 40 that responded earliest” when the response signal is first received.

(Initial registration process)
Here, the initial registration process in step S106 of the flowchart of FIG. 5 will be described with reference to FIG. FIG. 7 is a flowchart illustrating the initial registration process in FIG.

  In this initial registration, the registrar device 10 first performs signal transmission / reception to transmit a signal (beacon) to the peripheral wireless communication device 40 and receive a response (S201).

  Next, the received signal is encoded, the ID of the wireless communication device 40 is displayed, and the user is allowed to select (S202). If response signals are received from a plurality of wireless communication devices 40, it may be registered other than the desired wireless communication device 40. Therefore, it is preferable to perform reception in an environment where only one wireless communication device 40 can be received. .

  Next, after the user selects an ID from the operation panel, the ID (selected ID) is encrypted, and the encrypted ID information is written to the NFC device 30 via the NFC R / W 50 (S203).

  As described above, the ID of the corresponding wireless communication device 40 is registered in the NFC device 30. In this way, it is possible to set whether only the owner of the NFC device 30 is a target for simple setup of the wireless LAN connection. Further, since the ID information of the wireless communication device 40 transmitted at the time of setting is encrypted, it is possible to prevent the leakage of the ID. In addition, since this setting is not performed frequently, it takes time to improve security, but does not reduce usability. In this embodiment, “association information exchange” in the simple setup of the wireless LAN connection can be performed by the Out Of Band method using a conventional NFC device, but is not limited thereto.

(Other embodiments)
In the above, the NFC device 30 is used to control the completion of the simple setup, but it is the same if a memory device such as a USB flash memory (USB storage drive) is used instead of the NFC device 30. The effect of can be obtained. In this case, the NFC R / W 50 is not required, the memory device is directly connected to the registrar device 10, and instead of short-range wireless communication, communication between the controller 100 of the registrar device 10 and the memory device by USB or the like is performed. Processing such as registration and acquisition of ID information of the wireless communication device 40 shown in FIGS. 5 and 7 can be performed.

(Other examples)
In order to improve security, not only the NFC device 30 but also a “registered wireless communication device” can always be monitored by periodically sending signals (beacons) to the surroundings. The “registered wireless communication device” here is ideally incorporated into a small and wearable device, for example. If the wearable device is used, for example, if the user forgets to leave the NFC device 30 on the registrar device 10 before completing the easy setup, a malicious person steals the NFC device 30. Even so, if the “registered wireless communication device” is far enough to receive a signal from the registrar device 10, simple setup using the stolen NFC device 30 cannot be executed. Other wireless communication devices 40 that are not registered cannot be connected to the network by the simple setup in this embodiment. In addition, if it is a small device, even if another person sees the place where the simple setup is going to be made, it cannot be visually determined which wireless communication device 40 is the target for the simple setup.

  Since it is not preferable that the ID of the wireless communication device 40 stored in the NFC device 30 can be freely changed, the wireless communication device is similar to the condition for completing the simple setup described above with reference to FIG. Only when the 40 IDs match, the rewritable mode is set. The sequence at this time is the same as the initial registration. In case of damage or loss of the wireless communication device 40, it is possible to register a plurality of IDs. If you want to delete an ID that has been used up to now, register the ID that has been used before Delete it.

  As described above, once the NFC device 30 and the wireless communication device 40 are registered, the user can hold the NFC device 30 that the user wears over the NFC R / W 50 of the registrar device 10 with an extremely simple and intuitive operation. The wireless communication device 40 can be connected to the wireless LAN. Further, if the signal from the registrar device 10 does not reach the wireless communication device 40 or if the response signal from the wireless communication device 40 does not reach the registrar device 10, the registrar device 10 can be obtained even if a third party obtains the NFC device 30. Secure operation that wireless LAN connection is not possible.

  If the NFC device 30 cannot be easily set up due to theft, loss or damage of the NFC device 30, a new NFC device 30 is prepared and the administrator is provided with a registrar device so that the NFC device 30 can be used. By having the ten databases rewritten, simple setup for the corresponding wireless communication device 40 becomes possible. In addition, when the wireless LAN simple setup cannot be used due to theft, loss, or damage of the wireless communication device 40, the administrator rewrites the database so that the corresponding NFC device 30 is in a first use state. The new wireless communication device 40 can be re-registered (initial registration).

  As described above, according to the wireless communication system of the present embodiment, the user can perform the wireless LAN connection of the wireless communication device by an action equivalent to the conventional simple setup. For example, when the above memory device (NFC device / USB storage drive, etc.) used for wireless LAN connection is lost or stolen, use of the memory device is suppressed even if the owner is unaware of the situation It is possible to prevent leakage and falsification due to impersonation. Further, unlike the conventional method, even if the operation of the wireless LAN connection can be seen by a third party, it can be determined that the wireless LAN connection setting cannot be determined from the prejudice during the wireless LAN connection.

  As mentioned above, although embodiment for implementing invention was described, this invention is not limited to embodiment mentioned above. Modifications can be made without departing from the spirit of the present invention.

  For example, the various programs executed by the CPU 101 of the controller 100 of the above-described embodiment have been described as being pre-installed in the ROM 103 and the HDD 107, but these programs can be installed as files in an installable format or an executable format. You may comprise so that it may record and provide on computer-readable recording media, such as ROM, flexible disk (FD), CD-R, DVD (Digital Versatile Disk). Further, various programs executed by the CPU 101 of the controller 100 may be stored on a computer connected to a network such as the Internet and provided or distributed via a network such as the Internet.

10 registrar equipment 20 enrollee equipment 30 NFC device 40 wireless communication device 50 NFC R / W
100 controller 101 CPU
102 Timer 103 ROM
104 RAM
105 ASIC
106 RAM
107 HDD
108 Serial bus I / F
109 NIC
110 WLAN I / F
111 USB device I / F
112 USB host 113 Memory card I / F
120 Operation unit (operation panel)
300 Antenna unit 301 NFC controller unit 302 Control unit 303 Memory 304 Communication unit

JP 2009-278396 A

Claims (8)

Setup means for automatically setting up a wireless LAN connection of a wireless communication device,
Wireless communication means for performing wireless communication with a wireless communication device;
A memory device communication means capable of communicating with the memory device; and
Registrar equipment having setup availability control means for controlling whether to complete setup of wireless LAN connection;
A wireless communication device capable of wireless communication with the registrar device;
A memory device having storage means capable of storing unique ID information of the wireless communication device and connectable to the registrar device;
The registrar device setup availability control means includes the unique ID information of the wireless communication device registered in the memory device acquired from the memory device by the memory device communication means, and the wireless information searched by the wireless communication means. When the unique ID information of the wireless communication device acquired from the communication device matches, the setup of the wireless LAN connection by the setup unit for the wireless communication device is completed , and during the execution of the setup by the setup unit, A wireless communication system, wherein when it is detected that the radio wave intensity from the wireless communication device fluctuates beyond a predetermined setting standard, the setup of the wireless LAN by the setup means is stopped . The registrar device further comprises a timer having a timekeeping function,
The setup availability control means disables setup of the wireless LAN connection by the setup means when a response from the wireless communication device is not within a predetermined setting period timed by the timer. The wireless communication system according to claim 1. The setup propriety control means is a predetermined time measured by the timer for searching for a wireless communication device having unique ID information that matches the unique ID information of the wireless communication device registered in the memory device by the wireless communication means. The wireless communication system according to claim 2, wherein a warning is notified when the completion cannot be completed within the set period. The setup availability control means issues a warning notification when it is detected that the radio wave intensity from the corresponding wireless communication device fluctuates beyond a set standard during execution of the setup by the setup means. The wireless communication system according to any one of claims 1 to 3 . Setup means for automatically setting up a wireless LAN connection of a wireless communication device,
Wireless communication means for performing wireless communication with a wireless communication device;
A plurality of said wireless communication device unique ID information capable of communicating with registrable memory devices memory devices communicating means and,
Setup availability control means for controlling whether to complete setup of wireless LAN connection
Registrar equipment having
A wireless communication device capable of wireless communication with the registrar device;
A memory device having storage means capable of storing unique ID information of the wireless communication device and connectable to the registrar device;
The registrar device setup availability control means includes the unique ID information of the wireless communication device registered in the memory device acquired from the memory device by the memory device communication means, and the wireless information searched by the wireless communication means. When the unique ID information of the wireless communication device acquired from the communication device matches, a plurality of wireless communication acquired from the memory device by completing the setup of the wireless LAN connection by the setup means for the wireless communication device When at least one of the unique ID information of the device matches the unique ID information acquired from the wireless communication device with which the registrar device can communicate, the setup means for any of the corresponding wireless communication devices Wireless LAN connection To the available state up
A wireless communication system. Among the unique ID information of the plurality of wireless communication devices acquired from the memory device, there was at least one that matches the unique ID information acquired from the wireless communication device with which the wireless communication means of the registrar device can communicate when the wireless communication unit is to monitor the plurality of wireless communication devices in question when it becomes impossible to receive signals from at least one wireless communication device, the set-up acceptance control means of the wireless LAN by the set-up means 6. The wireless communication system according to claim 5 , wherein setup is stopped. Among the unique ID information of the plurality of wireless communication devices acquired from the memory device, there was at least one that matches the unique ID information acquired from the wireless communication device with which the wireless communication means of the registrar device can communicate The wireless communication system according to claim 5 or 6 , wherein the setup availability control means selects one wireless communication device that has responded earliest as a wireless LAN setup target. The memory device is an NFC (Near Field Communication) device having storage means for storing unique ID information of the wireless communication device and capable of short-range wireless communication, and the memory device communication means includes the NFC device. The wireless communication system according to claim 1 , wherein the wireless communication system is a communication unit for performing short-range wireless communication.

Images