JP5958607B2 - Wireless LAN system, access point, station, communication terminal and communication program - Google Patents

Description

  The present invention relates to a wireless LAN system that enables data communication between both by setting a wireless station in the same connection method as a wireless access point, and a communication terminal and a communication program that can be used in this system.

Currently, so-called wireless LANs that realize wireless data communication between a plurality of wireless stations or between a wireless station and an external network are widely used.
In wireless LAN networks, there are communication methods such as “infrastructure mode” in which each wireless station performs wireless communication via a relay station and “ad hoc mode” in which wireless stations directly communicate with each other. The communication system can be switched according to the application, but it is generally used in the “infrastructure mode”.

  In such an “infrastructure mode” network, a wireless station can access a wireless access point by performing various settings such as a connection method on the wireless station side. The above-mentioned “connection method” refers to, for example, a wireless LAN standard (for example, IEEE802.11b, -a, -g, etc.) adopted when performing wireless connection, and a frequency band used in these wireless LAN standards ( This is a wireless connection method defined by a so-called channel).

  Here, for various settings on the wireless station side, if the wireless station has a user interface with high operability such as a personal computer (hereinafter referred to as “PC”), the setting operation is performed by this user interface. It is easy to do.

  However, in a wireless station that does not have a user interface with higher operability than a PC such as a printer that provides services via a network, setting with this user interface is very troublesome and laborious. It is.

  For this reason, in some of these wireless stations, the communication method for both other wireless stations is switched to “ad-hoc mode”, and data related to settings is exchanged between the two wireless stations to indirectly Configuration (remote setup), or by connecting the PC directly with a cable and exchanging data related to the configuration with the PC, it can be configured indirectly from the PC side. Some are.

  However, in this case, it is necessary to move wireless stations whose communication methods have been switched to “ad hoc mode” to a position where wireless communication is possible, or to move a PC to a place where a cable can be laid. After all, remote setup is still a time-consuming task.

  In particular, when using a wireless station used in "Infrastructure Mode" for remote setup, it is necessary to switch the communication method from "Ad Hoc Mode" to "Infrastructure Mode" again after the remote setup is completed. It takes time and effort.

  As described above, a wireless station that does not have a user interface with higher operability than a PC, such as a printer that provides a service via a network, has a problem in that it takes time to perform various settings. It was.

  Therefore, in recent years, various techniques for reducing the labor of such work have been proposed. For example, add a function as a wireless access point (relay station) to a network device such as a printer that functions as a wireless station, establish an original wireless network with this function (relay function unit), and connect via this wireless network The function as a wireless access point is stopped after indirectly performing the necessary settings (remote setup) for connecting to other wireless networks from the other wireless station side using the wireless station function (terminal function unit) (See Patent Document 1).

  With this technology, it is possible to reduce the labor required for work for performing various settings in a wireless station that does not have a user interface with high operability.

JP 2003-143156 A

  However, in the above-described technology, wireless stations whose communication methods are switched to “ad hoc mode” are moved to a position where wireless communication is possible, or a PC is moved to a place where a cable can be laid. Although it is possible to reduce the time and labor associated with the setting, the operation itself for setting must be performed.

  In order to construct a wireless LAN network, not only a setting related to a general LAN (wired LAN) but also a setting “connection method” unique to the wireless LAN is required. Since this setting requires various specialized knowledge, even users who have expertise in wired LANs often cannot easily make settings specific to wireless LANs, and even for users who are unfamiliar with LANs themselves. It can be said that the setting of the LAN is very difficult.

  As described above, the load on the user with respect to the setting of the wireless LAN is currently heavy, and this is considered to be one of the factors hindering the spread of the wireless LAN, and the load on the user with respect to the setting of the wireless LAN is reduced. There was a demand for technology.

  The present invention has been made on the basis of such a demand, and an object thereof is to reduce a load on a user with respect to setting of a wireless LAN.

In order to solve the above problem, in the wireless LAN system according to aspect 1, a wireless station capable of setting a connection method as a wireless connection method to any one of a plurality of connection methods is set in advance to any one of the plurality of connection methods. A wireless LAN system that enables data communication between a wireless station and a wireless access point by setting to the same connection method as the wireless access point.

  As a specific configuration, first, the wireless station includes a method switching unit, an advertisement transmission unit, and a method setting unit. Among these, the method switching means sequentially switches the connection method to the wireless access point to each of the plurality of connection methods at predetermined time intervals. Further, each time the connection method is switched by the method switching unit, the advertisement transmission unit transmits advertisement data for advertising the connection method thus switched to the surroundings based on the connection method. The method setting means can establish a wireless connection by the same connection method as the transmitted advertisement data after the advertisement data is transmitted by the advertisement transmitting means and before the method switching means switches to the next connection method. A connection method for wirelessly connecting to the wireless access point the connection method at the time of stopping by stopping the switching of the connection method by the method switching means when the notification data for notifying that is received Set as. On the other hand, the wireless access point includes notification return means for returning notification data to the wireless station when advertisement data transmitted based on a preset connection method is received from the wireless station.

  In the wireless LAN system configured as described above, the wireless station transmits advertisement data based on each connection method while sequentially switching the connection methods. This advertisement data is received by a wireless access point in which the same connection method (wireless station connection method at the time of transmitting the advertisement data) is set, and this wireless access point is the same connection method as the received advertisement data. The wireless station is notified by replying notification data that wireless connection is possible. Then, the wireless station that has received the reply of the notification data sets the connection method notified by the notification data, that is, the same connection method as the connection method set in the wireless access point. In this way, the wireless station is set to the same connection method as the wireless access point, so that wireless connection can be established between them.

  In this way, in the wireless station, the connection method to the wireless access point is automatically set by the method setting unit through the switching of the connection method by the method switching unit and the transmission of the advertisement data by the advertisement transmission unit. . Therefore, the load on the user with respect to the setting of the wireless LAN can be greatly reduced.

  In addition, when the notification data is received by the method setting means, only the connection method switching is stopped, and the connection method at the time of the stop, that is, the same connection method set in the wireless access point Can be set.

  The above-mentioned “connection method” refers to, for example, a wireless LAN standard (for example, IEEE802.11b, -a, -g, etc.) adopted when performing wireless connection, and a frequency band used in these wireless LAN standards ( This is a wireless connection method defined by a so-called channel.

  In the wireless station, the “advertisement data” transmitted by the advertisement transmitting means is data for advertising the connection method switched by the method switching means to the surroundings, and the parameter indicating the connection method itself is data. It only has to be included as content. However, if the wireless access point is configured to receive data only using a preset connection method, the connection method advertised by this advertisement data when the advertisement data is received is the connection set to itself. In this case, the parameter indicating the connection method may not be included because it can be specified that the method is the same.

The timing at which the method switching means in the wireless station starts switching the connection method is not particularly limited. For example, the wireless LAN system according to aspect 2 switches the connection method when receiving an external command. It can be configured to start.

With this configuration, the setting of the connection method for the wireless station can be explicitly commanded from the outside.
The “command from the outside” in this configuration is, for example, a specific operation performed by the user on the operation unit provided in the wireless station, or data from a communication terminal connected to the wireless station so that data communication is possible. And so on.

  In the wireless access point described above, the notification return means is means for returning the notification data to the wireless station when the advertisement data is received from the wireless station. The notification data is transmitted to a predetermined connection method. Reply based on.

In addition, when the wireless LAN system according to aspect 3 receives the advertisement data transmitted based on the connection method set in advance, the notification reply unit permits wireless connection to the wireless access point itself. The request prompting data for requesting is sent back to the wireless station as notification data. After that, when an association request, which is data for requesting permission for wireless connection, is transmitted from this wireless station, wireless communication to the wireless access point itself is performed. It is good to comprise so that the association response which permits a connection may be returned.

  With this configuration, after the connection method is set on the wireless station side, the wireless connection between the wireless access point and the wireless station can be realized through the exchange of association requests and responses.

The notification reply unit described above, when receiving the advertisement data, what may be configured to return a notification data regardless of whether the advertisement data, the wireless LAN system of embodiment 4, preset The notification data may be returned to the wireless station that has transmitted the advertisement data satisfying the predetermined condition based on the connected connection method.

  With this configuration, the wireless access point can transmit the notification data and set the connection method only to the wireless station that has transmitted the advertisement data that satisfies the predetermined condition.

  Note that the specific content of the “predetermined condition” in this configuration is not particularly limited, but the connection method is repeatedly switched until the notification data is received on the wireless station side. It is conceivable that the condition is “advertisement data that has been transmitted more than once” after repeated.

For this purpose, the wireless LAN system according to aspect 5 is provided with advertisement collecting means for collecting advertisement data transmitted based on a connection method set in advance at a wireless access point over a predetermined period of time. After the advertisement data is collected by the advertisement collection means, the notification data is transmitted to the wireless station that has transmitted the advertisement data based on the same connection method as any one of the advertisement data thus collected. May be configured to reply.

  With this configuration, the wireless access point can return the notification data and set the connection method to the wireless station that has repeatedly transmitted the advertisement data twice or more.

  Note that the advertisement collecting means in this configuration is a means for collecting advertisement data as described above, and collects advertisement data received from the wireless station side for a predetermined period prior to the notification reply means.

In addition, as the “predetermined condition” described above, it is conceivable to use advertisement data having the highest reception level as a condition.
For this purpose, the wireless LAN system according to aspect 6 is provided with advertisement collecting means for collecting advertisement data transmitted based on a preset connection method at a wireless access point over a predetermined period, and a notification reply means. Is configured to return notification data to the wireless station that has transmitted the advertisement data based on the same connection method as the advertisement data having the highest reception level among the advertisement data collected by the advertisement collecting means. Good.

  With this configuration, the wireless access point can return the notification data and set the connection method to the wireless station that has transmitted the advertisement data having the highest reception level.

  In addition, in this way, returning the notification data to the wireless station that has transmitted the advertisement data with the highest reception level means that the connection method of the wireless station is different from the connection method of the wireless access point to be originally set. This is suitable for preventing erroneous setting.

  When setting the connection method of the wireless station to the wireless access point, if there is another wireless access point having notification return means in addition to the wireless access point (for example, an adjacent house), this wireless Notification data is also returned from the access point to the wireless station. Therefore, depending on the timing at which the notification data is received, the same connection method set at other wireless access points may be set regardless of the user's intention.

However, as described above, since the same connection method as the notification data having the highest reception level can be set as the connection method to the wireless access point, the reception level at the time of wireless communication between the wireless access point and the wireless station is high. It is possible to prevent an incorrect connection method from being set based on notification data from other wireless access points simply by making them close to each other.

Note that the advertisement collecting means in this configuration collects advertisement data received from the wireless station side over a predetermined period, as described above.
In addition, the above-described notification return means in the wireless access point is determined based on an external command among the advertisement data transmitted based on the connection method set in advance in the wireless LAN system of aspect 7. The notification data may be returned to the wireless station that has transmitted the advertisement data.

  If comprised in this way, the wireless access point can return notification data and set a connection method only to the wireless station which can transmit the advertisement data determined based on the command from the outside.

Further, in this wireless access point, the wireless LAN system of aspect 8 includes an advertisement collecting unit that collects advertisement data transmitted based on a preset connection method over a predetermined period, and a notification reply unit includes: After the advertisement data is collected by the advertisement collecting means, notification data to the wireless station that has transmitted the advertisement data based on the same connection method as the advertisement data determined based on the command from the outside among the advertisement data thus collected It may be configured to reply.

  If comprised in this way, a wireless access point will return notification data only to the wireless station which can transmit the advertisement data determined based on the instruction | command from the outside among the advertisement data collected by the advertisement collection means. Connection method can be set.

  Note that the advertisement collecting means in this configuration collects advertisement data received from the wireless station side over a predetermined period, as described above. The advertisement data collected here may be stored in a memory or the like in a state where the connection method can be specified, for example. In this case, the notification reply unit may be configured to transmit the notification data to the wireless station that has transmitted the advertisement data determined based on the command from the outside among the collected advertisement data.

In addition, it is conceivable to configure the wireless LAN system of aspect 11 in which the “command from the outside” in this configuration is , for example, a predetermined operation by the user performed on the operation unit provided in the wireless station. .

In the wireless LAN system according to aspect 9, after the advertisement data is collected by the advertisement collection unit in the wireless access point, one or more wireless stations are selected from the wireless stations that are the transmission sources of the advertisement data thus collected. The first user selection means for causing the user to select is provided, and the notification reply means returns the notification data to the radio station selected by the user by the first user selection means.

According to this configuration, the wireless access point can return the notification data and set the connection method only to the wireless station arbitrarily selected by the user.
It is also conceivable to configure the wireless LAN system of aspect 10 in which a predetermined operation by the user is “external command”.

In the wireless LAN system according to aspect 10, in the wireless station, the advertisement transmission unit transmits the advertisement data in a state in which the identification data for identifying the wireless station itself is associated. The data is configured to be collected together with the identification data corresponding to the advertisement data, and after the advertisement data is collected by the advertisement collecting means, the identification data corresponding to each of the collected advertisement data is Second user selection means for allowing the user to select one or more pieces of identification data is provided, and the notification reply means returns the notification data to the wireless station identified by the identification data selected by the user by the second user selection means.

  With this configuration, the wireless access point can return the notification data only to the wireless station identified by the identification data arbitrarily selected by the user and set the connection method.

Further, the "instruction from outside" in aspects 8 described above, and the data from the radio station and data communicably connected communication terminal, it is conceivable to configure a wireless LAN system embodiment 11.

In the wireless LAN system according to aspect 11, in the wireless access point, the notification return means receives a command from a communication terminal connected to the wireless access point itself so as to perform data communication, and determines a wireless station to which the notification data should be returned. .

  If comprised in this way, a wireless access point will transmit notification data only to the wireless station which has transmitted the advertisement data determined based on the instruction | command from a communication terminal among the advertisement data collected by the advertisement collection means. To set the connection method.

In this configuration, for example, the wireless LAN system of aspect 12 can be considered to exchange commands with the communication terminal.
In the wireless LAN system according to aspect 12, the wireless access point includes an advertisement collection unit and a list transmission unit. Among these, the advertisement collection means collects advertisement data transmitted based on a preset connection method over a predetermined period, and thus collects the advertisement data and the wireless station that is the transmission source of this advertisement data Are stored in the storage unit. The list transmitting means transmits the list data indicating the list to the communication terminal side when receiving request data from the communication terminal for requesting a list of wireless stations whose correspondence is stored by the advertisement collecting means. . Further, the notification reply means transmits the list data transmitted from the list transmission means to the communication terminal, and then communicates selection data indicating one or more wireless stations selected from the list indicated by the list data on the communication terminal side. After receiving from the wireless station the advertisement data transmitted by the same connection method as the advertisement data corresponding to the wireless station indicated by this selection data after receiving from the terminal, the notification data is returned to this wireless station. It is configured. On the other hand, the communication terminal is provided with request transmission means, third user selection means, and selective transmission means. Of these, the request transmission means transmits request data to the wireless access point. Further, the third user selecting means receives the list data from the wireless access point after the request data is transmitted to the wireless access point by the request transmitting means, and the first user selecting means selects one from the list indicated by the list data. The user selects the above radio station. The selective transmission means transmits selection data indicating one or more wireless stations selected by the user by the third user selection means to the wireless access point.

  If comprised in this way, a wireless access point will transmit notification data only to the wireless station which the user arbitrarily selected on the communication terminal side based on the correspondence collected by the advertisement collection means, and will make it set a connection method Can do.

  Note that the advertisement collecting means in this configuration collects advertisement data received from the wireless station side over a predetermined period, as described above. The advertisement data collected here may be stored in a memory or the like in a state where the correspondence between the wireless station that is the transmission source and the connection method can be specified. In this case, the list transmitting means may be configured to transmit list data indicating a list of wireless stations specified by the stored correspondence relationship to the communication terminal side.

In addition, in the wireless LAN system of aspect 11 described above, a configuration like the wireless LAN system of aspect 13 can be considered in order to exchange commands with communication terminals.
In the wireless LAN system according to aspect 13, the wireless station transmits the advertisement data in a state in which the advertisement transmission means is associated with identification data for identifying the wireless station itself. The wireless access point is provided with advertisement collection means and list transmission means. Among these, the advertisement collecting means collects advertisement data transmitted based on a preset connection method together with identification data corresponding to this advertisement data over a predetermined period, and thus the collected advertisement data and identification data are collected. The correspondence relationship is stored in the storage unit. The list transmission means transmits the list data indicating the list to the communication terminal side when receiving request data from the communication terminal requesting the list of identification data for which the correspondence is stored by the advertisement collecting means. . Further, the notification reply means transmits the list data to the communication terminal by the list transmission means, and then communicates selection data indicating one or more identification data selected from the list indicated by the list data on the communication terminal side. After receiving from the wireless station the advertisement data transmitted by the same connection method as the advertisement data corresponding to the identification data indicated by the selection data after being received from the terminal, the notification data is returned to the wireless station. It is configured. The communication terminal includes request transmission means, fourth user selection means, and selection transmission means. Among these, the request transmission means transmits request data to the wireless access point. Further, the fourth user selecting means receives one or more of the lists indicated by the list data when receiving the list data from the wireless access point after the request data is transmitted to the wireless access point by the request transmitting means. Let the user select the identification data. The selection transmission means transmits selection data indicating one or more wireless stations selected by the user by the fourth user selection means to the wireless access point.

  If comprised in this way, a wireless access point will transmit advertisement data with the same connection method as the advertisement data corresponding to the identification data arbitrarily selected by the user on the communication terminal side based on the correspondence relationship collected by the advertisement collecting means. Only the wireless station that can be used can transmit the notification data and set the connection method.

  Note that the advertisement collecting means in this configuration collects advertisement data received from the wireless station side over a predetermined period, as described above. The advertisement data collected here may be stored in a memory or the like in a state where the correspondence between the identification data corresponding to the advertisement data and the connection method (or the advertisement data itself) can be specified, for example. In this case, the list transmitting means may be configured to transmit list data indicating a list of identification data specified by the stored correspondence relationship to the communication terminal side.

  Each of the user selection means described above is a means for allowing the user to make a selection. For example, the selection item (wireless station, identification data) is selected on the operation unit by a display unit, a printing unit, a speaker, or the like. A configuration may be adopted in which notification to the effect of selection is made and an operation unit is selected based on the notification.

Further, the wireless LAN system of embodiment 14, of the wireless access point described above, and includes what has advertising collection means.
In the wireless LAN system according to aspect 14, in the wireless station, the advertisement transmission means transmits the advertisement data in a state in which identification data for identifying the wireless station itself is associated. On the other hand, in the wireless access point, the advertisement collecting means collects the advertisement data together with the identification data corresponding to the advertisement data, and the notification reply means corresponds to the advertisement data collected by the advertisement collecting means and the advertisement data. The notification data is returned only to the wireless station that has transmitted the advertisement data having the same identification data.

  If comprised in this way, even if a wireless access point receives advertisement data by the same connection method as the advertisement data collected by the advertisement collection means, the identification data transmitted together with this advertisement data will be the advertisement data first. If it does not match the identification data collected together, the notification method is not transmitted and the connection method is not set. Accordingly, it is possible to prevent a wireless station that attempts to wirelessly connect to the wireless access point by impersonating and transmitting the advertisement data collected on the wireless access point side from being wirelessly connected to the wireless access point.

In the configuration including the advertisement collecting means described above, the notification reply means is transmitted based on the same connection method as the advertisement data collected after the advertisement data is collected by the advertisement collecting means. When the received advertisement data is received from the wireless station, it is desirable to configure the wireless LAN system according to aspect 15 in which notification data is returned to the wireless station.

  With this configuration, the wireless access point can transmit the notification data at a timing at which the wireless station has transmitted the advertisement data, that is, a timing at which data transmission / reception is possible on the wireless station side. . Thereby, the notification data transmitted from the wireless access point can be reliably received on the wireless station side.

  By the way, in the wireless LAN system described above, even if the wireless station is wirelessly connected to the wireless access point, if the wireless access point is set to encrypt data communication, normally, the wireless station side Similarly, data communication cannot be performed normally unless encryption is set to perform data communication.

Therefore, in order to enable normal data communication without any operation by the user, after the wireless access point returns the notification data by the notification return means, the data communication in the wireless access point itself is not performed. When it is set to be performed in the state encrypted with the first encryption key, only the data communication with the wireless station to which the notification data is returned is switched without changing the encryption method. The wireless LAN system according to aspect 16 may be provided with encryption switching means to perform.

  With this configuration, even if the wireless access point is set to perform encrypted data communication, data communication is normally performed without setting the wireless station to perform encrypted data communication. Will be able to. Thereby, it is possible to realize data communication between the wireless access point and the wireless station while maintaining a security level for data communication performed by the wireless access point with another wireless station or an external network.

Further, as another configuration for enabling normal data communication without user operation, the wireless LAN system according to aspect 17 can be considered.
In the wireless LAN system according to aspect 17, in the access point, the notification return means includes a second encryption key different from the first encryption key used for encrypting the notification data in the data communication at the wireless access point itself. It is configured to reply in a state where is added. Further, after the notification data is returned by the notification return means, the cipher switching for switching the encryption method so that the data communication with the wireless station to which the notification data is returned is performed in the state encrypted with the second encryption key. Means are provided. On the other hand, in the wireless station, after receiving the notification data from the wireless access point, there is encryption setting means for setting to perform data communication with the wireless access point by encrypting with the second encryption key added to the notification data. Is provided.

  With this configuration, the wireless access point switches the encryption method to perform data communication encrypted with the second encryption key to the wireless station that has returned the notification data, while receiving the notification data. The wireless station configured to perform data communication with the wireless access point by encrypting with the second encryption key. Thus, data communication can be normally performed between the wireless access point and the wireless station in a state encrypted with the second encryption key. This ensures a certain level of security for data communication between the wireless access point and the wireless station while maintaining the security level for data communication performed by the wireless access point with other wireless stations or external networks. Can be realized in the state.

In addition, with respect to the configurations of the above-described aspects 16 and 17, data communication between the wireless access point and the wireless station can be realized even when the wireless access point is set to perform data communication with encryption. The security level for data communication between the two is not high enough. This is because encryption is not performed in the configuration of aspect 16, and in the configuration of aspect 17, the second encryption key may be leaked in the process of being transmitted from the wireless access point to the wireless station. is there.

Therefore, in order to increase the security for data communication between the two, for example, the wireless LAN system according to aspect 18 may be used.
In the wireless LAN system of aspect 18, the wireless station uses a public key cryptosystem to obtain a first encryption key from a communication terminal connected to the wireless access point so that data communication is possible via the wireless access point; When the first encryption key is acquired from the communication terminal by the encryption acquisition means, the wireless connection with the wireless access point is canceled, and the wireless connection with the wireless access point is performed again after being encrypted with the first encryption key. Encryption changing means for changing the setting so that data communication is performed with the first encryption key encrypted. In addition, the communication terminal is provided with encryption delivery means for delivering the first encryption key to the wireless station via a wireless access point using a public key cryptosystem. In the wireless access point, the encryption switching unit does not switch the encryption method after the wireless connection with the wireless station is released.

  According to this configuration, data communication between the wireless access point and the wireless station can be performed by encrypting with the first encryption key transferred from the communication terminal to the wireless station. Therefore, data communication between the wireless access point and the wireless station can be realized at the same security level as that of data communication performed by the wireless access point with another wireless station or an external network.

  In addition, since the delivery of the first encryption key to the wireless station is performed by a public key encryption method, the possibility of leakage in the process of transmitting the first encryption key to the wireless station is naturally reduced.

In this configuration, it is preferable that when the first encryption key is transferred from the communication terminal to the wireless station, it can be confirmed whether or not the communication terminal is a correct wireless station to which the first encryption key should be transferred. To that end, for example, it is conceivable to configure the wireless LAN system of aspect 19.

  The communication terminal in the wireless LAN system of aspect 19 is configured such that the encryption delivery means delivers the authentication message to the wireless station by public key cryptography before delivering the first encryption key. After the authentication message is delivered by the encryption delivery means, a confirmation operation means is provided for the user to confirm the authentication message output on the wireless station side, and the encryption delivery means confirms the confirmation message. When the confirmation operation is performed by the operation means, the first encryption key is transferred. In addition, the wireless station is configured such that the cipher acquisition unit acquires an authentication message that is delivered from the communication terminal by a public key encryption method prior to the first encryption key, and is further acquired by the cipher acquisition unit. A message output means for outputting the authentication message, and the cipher acquisition means confirms the authentication message output by the message output means and the user confirming the authentication message output by the message output means to the communication terminal After the operation is performed, a first encryption key that is transferred from the communication terminal is acquired.

  If comprised in this way, it can be confirmed that this radio station is the right radio station which should deliver the 1st encryption key from a communication terminal by whether the message for authentication was output from the radio station. Then, after confirming the authentication message output from the wireless station, the user performs a confirmation operation on the communication terminal, whereby the first encryption key can be transferred from the communication terminal to the wireless station.

  The above-mentioned “authentication message” is a message for confirming that the communication terminal is the correct wireless station to which the first encryption key should be delivered, and the content is output on the wireless station side to the user. It is for making it confirm.

Further, the message output means in the wireless station is means for outputting the above-described authentication message by, for example, a display unit, a printing unit, a speaker, or the like.
As described above, the wireless access point is configured to support the setting of the connection method in the wireless station by realizing the return of the notification data by the notification return means. It may be configured to be performed only in the state.

Specifically, for example, in the wireless LAN system of aspect 20 , the operation mode of the wireless access point itself, the support mode that supports the setting of the connection method in the wireless station by realizing the return of the notification data by the notification return means, and It is only necessary to provide mode switching means capable of switching to any one of the normal modes that do not support connection method setting without realizing notification data reply by the notice reply means.

  With this configuration, only when the wireless access point's operation mode is switched to the support mode, the wireless access point will inadvertently set the connection method at the wireless station to support the setting of the connection method at the wireless station. Can be prevented. This indicates that the connection method in the wireless station can be set at an arbitrary timing if the transmission of advertisement data on the wireless station side is started while the operation mode of the wireless access point is switched to the support mode. .

In addition, the trigger when the mode switching unit in this configuration switches the operation mode is not particularly limited. For example, the wireless LAN system of aspect 21 switches the operation mode when receiving an instruction from the outside. What is necessary is just to comprise.

With this configuration, the operation mode of the wireless access point can be explicitly switched from the outside.
The “command from the outside” in this configuration is, for example, a specific operation performed by the user on the operation unit provided in the wireless station, or data from a communication terminal connected to the wireless station so that data communication is possible. And so on.

  In addition, with this configuration, each time an explicit command is given from the outside, the operation mode is switched to the support mode and the normal mode. However, the user must switch back to the normal mode from the state switched to the support mode. If forgotten, as described above, the wireless access point may inadvertently set the connection method in the wireless station.

Therefore, in the wireless LAN system according to aspect 22, the mode switching unit may be configured to switch the operation mode back to the normal mode when a predetermined period has elapsed after switching the operation mode to the support mode.

  With this configuration, even if you forget to switch back to normal mode from the state switched to support mode, the operation mode is automatically switched back to normal mode after a predetermined period of time. Can do.

  However, even with such a configuration, there is no possibility that the wireless access point will inadvertently set the connection method in the wireless station within a predetermined period after switching the operation mode to the support mode. I can't say that.

Therefore, in the wireless LAN system of aspect 23, after the mode switching unit switches the operation mode to the support mode, when the notification data is returned a predetermined number of times by the reply notification unit, the operation mode is switched back to the normal mode. It may be configured as follows.

  With this configuration, even when the operation mode is switched to the support mode and within a predetermined period, when the notification data is returned a predetermined number of times by the reply notification unit, it is possible to switch back to the normal mode. In other words, connection method setting can be supported only for the same number of wireless stations as the predetermined number of times.

  As a result, if the “predetermined number of times” described above is set according to the number of wireless stations for which a connection method is to be set, the wireless access point may inadvertently set the connection method at the wireless station more than necessary. Can be prevented.

In the wireless LAN system according to aspect 24, the wireless station includes content determination means and non-setting means. Among these, the content determination means is a method for connecting to a wireless access point after the setting content related to the connection method to the wireless access point is switched by the method switching means, the advertisement data is transmitted by the advertisement transmitting means, and the setting by the method setting means. It is determined whether or not the setting content needs to be set. Further, the non-setting means performs switching by the method switching means, transmission of advertisement data by the advertisement transmission means, and setting by the method setting means when it is determined by the content determination means that the connection method needs to be set. Avoid it.

  In the wireless LAN system configured as described above, the wireless station can set the connection method to the wireless access point only when the setting contents need to set the connection method to the wireless access point.

  The non-setting means in this configuration is a means for preventing switching by the method switching means, transmission of advertisement data by the advertisement transmitting means, and setting by the method setting means, and setting is not performed in this way. The configuration for doing so is not particularly limited. For example, a configuration may be adopted in which the operation of any one of the means is stopped or data received from the wireless access point is discarded.

In addition, in the wireless LAN system according to aspect 25, in the wireless station, the setting contents related to the connection method to the wireless access point are wirelessly accessed through switching by the method switching unit, transmission of advertisement data by the advertisement transmitting unit, and setting by the method setting unit. Content determination means for determining whether or not the setting content needs to set the connection method to the point is provided. Further, the advertisement transmitting means is configured to transmit the determination result as to whether or not it is necessary to set the connection method by the content determining means in the advertisement data. In the wireless access point, the notification reply means is configured to return the notification data only when the advertisement data received from the wireless station is data that can specify that the connection method needs to be set. Yes.

  In the wireless LAN system configured as described above, the wireless access point can transmit the notification data and set the connection method only when the wireless station has a setting content that requires the connection method to be set.

  Note that the “setting contents that need to set the connection method” determined by the contents determination means in these configurations are, for example, when the setting contents related to the connection method are in the initial state (factory shipment state), or in the wireless connection This is a case where a part of necessary setting contents is not included (not registered).

A communication terminal according to aspect 26 is a communication terminal that functions as a wireless station in the wireless LAN system according to any one of aspects 1 to 25.
According to the communication terminal configured as described above, a part of the wireless LAN system according to any one of aspects 1 to 25 can be configured.

A communication terminal according to aspect 27 is a communication terminal that functions as a wireless access point in the wireless LAN system according to any one of aspects 1 to 25.
According to the communication terminal configured as described above, a part of the wireless LAN system according to any one of aspects 1 to 25 can be configured.

The communication terminal of aspect 28 is a communication terminal that functions as a communication terminal in a wireless LAN system including at least the aspects 11 to 13, aspect 18, aspect 19 and the configuration of these aspects .

According to the communication terminal configured as described above, it is possible to configure part of the wireless LAN system including at least the aspects 11 to 13, aspect 18, aspect 19 and the structure of these aspects .

The communication program according to aspect 29 is a program for causing a computer system to execute various processing procedures for causing the wireless station in any of the wireless LAN systems according to aspects 1 to 25 to function as all means.

The computer system controlled by this program can constitute a part of any one of the wireless LAN systems according to aspects 1 to 25.
The communication program according to aspect 30 is a program for causing a computer system to execute various processing procedures for causing the wireless access point in any of the wireless LAN systems according to aspects 1 to 25 to function as all means. .

The computer system controlled by this program can constitute a part of any one of the wireless LAN systems according to aspects 1 to 25.
In addition, the communication program of the aspect 31 causes the computer system to execute various processing procedures for causing the communication program to function as a communication terminal in the wireless LAN system including at least the aspects 11 to 13, aspect 18, and aspect 19 and the configuration of these aspects. Communication program.

The computer system controlled by this program can constitute part of a wireless LAN system including at least the aspects 11 to 13, aspect 18, aspect 19 and the structure of these aspects .

  Each communication program described above is composed of an ordered sequence of instructions suitable for processing by the computer system, and is a program for causing the computer system to execute the respective functions. This program is, for example, a wireless access point, a wireless station and a communication terminal (hereinafter referred to as “communication terminal etc.”) via a recording medium such as an FD, a CD-ROM, a memory card, or a communication network such as the Internet. It is provided to a computer system or a user who uses these. As a computer system for executing this program, for example, a computer system built in a communication terminal or the like, a computer system connected to the communication terminal or the like through a wireless or wired communication path, etc., can be used. be able to.

Diagram showing network configuration The flowchart which shows the process sequence of the connection method determination process in 1st Embodiment. Sequence diagram showing exchange of data between an access point and a printer in the first embodiment The flowchart which shows the process sequence of the connection method instruction | indication process in 1st Embodiment. The flowchart which shows the process sequence of the connection method instruction | indication process in 2nd Embodiment. Diagram showing data structure of data table The flowchart which shows the process sequence of the connection method instruction | indication process in 3rd Embodiment. The flowchart which shows the process sequence of the connection method instruction | indication process in 4th Embodiment. Sequence diagram showing exchange of data between access point and printer in the fourth embodiment The flowchart which shows the process procedure of the setting command process in 4th Embodiment (the 1) The figure which shows the state where the contents which are indicated with list data are displayed Flowchart showing the procedure of setting command processing in the fourth embodiment (No. 2) The flowchart which shows the process sequence of the connection method instruction | indication process in 4th Embodiment. The flowchart which shows the process sequence of the connection method instruction | indication process in 5th Embodiment. The flowchart which shows the process sequence of the connection method determination process in 5th Embodiment. Sequence diagram showing exchange of data between access point and printer in the fifth embodiment The flowchart which shows the process sequence of the encryption key acquisition process in 5th Embodiment. The flowchart which shows the process sequence of the setting command process in 5th Embodiment. The flowchart which shows the process sequence of the encryption switching process in 5th Embodiment. The flowchart which shows the process sequence of the connection method determination process in another embodiment. The flowchart which shows the process sequence of the connection method instruction | indication process in another embodiment. The flowchart which shows the process sequence of the connection method instruction | indication process in another embodiment.

  Hereinafter, as a best mode for carrying out the present invention, a wireless LAN system in which a plurality of network devices (hereinafter simply referred to as “devices”) are LAN-connected will be described as an example.

[First Embodiment]
As shown in FIG. 1, the wireless LAN system includes an access point 10, a network printer (hereinafter simply referred to as “printer”) 20, and the like.

  The access point 10 is a wireless access point that relays data communication between a device (or external network) connected via the cable 100 and a wireless station. The access point 10 is a CPU 11, ROM 12, RAM 13, network controller 14, wireless A LAN controller 15, an operation panel 16, a display panel 17 and the like are provided.

  The CPU 11 provided in the access point 10 controls the operation of the access point 10 as a whole by sending commands to each component while recording the processing result in the RAM 13 according to the processing procedure recorded in the ROM 12.

  The ROM 12 indicates an SSID (service set identifier or ESSID: extended SSID) used when the access point 10 itself communicates with a wireless station, and a wireless connection method (hereinafter referred to as “connection method”). This is a readable / writable nonvolatile memory having storage areas for storing parameters and the like. The “connection method” means any one of the first to i-th wireless LAN standards (for example, three types of IEEE802.11a, IEEE802.11b, and IEEE802.11g), and this wireless LAN. It is defined by any one of a plurality of channels that can be used in the standard, and shows a method for realizing wireless connection with a wireless station as a wireless access point.

  The network controller 14 is an interface for realizing data communication with other devices (or an external network) such as the PC 30 connected via the cable 100.

  The wireless LAN controller 15 is an interface for realizing communication in accordance with the wireless LAN standard based on each parameter stored in the ROM 12, and is connected to the wireless station according to the connection method indicated by “parameter indicating connection method”. A communication function as a wireless access point is realized by establishing a connection.

  In the access point 10 configured as described above, after the “SSID” and the “parameter indicating the connection method” are stored in the ROM 12, the wireless station that has accessed according to the connection method described above using the same SSID as the SSID. Wireless communication is allowed.

  The access point 10 exchanges data related to settings with other devices wirelessly or by wire, and when an indirect setting (remote setup) is performed from the other device side, the “SSID” The “parameter indicating the connection method” is generated and stored in the ROM 12. In the present embodiment, the “parameter indicating the connection method” is stored (set) in the ROM 12 through remote setup that indicates the connection method defined by the second channel in the first wireless LAN standard. To do.

  Next, the printer 20 is a device having a function as a wireless station, and includes a CPU 21, a ROM 22, a RAM 23, a wireless LAN controller 24, a PC interface unit (PC I / F) 25, an operation panel 26, a display panel 27, and a print. An engine 28 and the like are provided.

  The CPU 21 of the printer 20 controls the overall operation of the printer 20 by sending commands to each component while recording the processing results in the RAM 23 according to the processing procedure recorded in the ROM 22.

  The ROM 22 is a readable / writable nonvolatile memory having storage areas for storing an SSID used when the printer 20 communicates with a wireless access point as a wireless station, a parameter indicating a connection method, and the like.

  The wireless LAN controller 24 is an interface for realizing communication in accordance with the wireless LAN standard based on each parameter stored in the ROM 22 and is indicated by “parameter indicating connection method” as described above. A communication function as a wireless station is realized by establishing a wireless access point according to the connection method.

  Further, the PC interface unit 25 is an interface for connecting the printer 20 to another PC via a communication cable, thereby enabling data communication between the printer 20 and the PC.

In the printer 20 configured as described above, after “SSID” and “parameter indicating connection method” are stored in the ROM 22, data communication using the SSID can be performed through wireless connection according to this connection method. Become. In the printer 20, “SSID” and “parameter indicating connection method” are generated and stored (set) in the ROM 22 in connection method determination processing (FIG. 2) described later. A connection method determination process performed by the printer 20 A connection method determination process executed by the CPU 21 of the printer 20 will be described below with reference to FIG. This connection method confirmation processing is received by the operation panel 16 for operations such as power-on, restart (reset), and initialization (returning the setting state of the printer 20 to the factory default and restarting). Be started when.

  First, it is checked whether or not the printer 20 is in a factory shipment state (s100). In this process, if the “parameter indicating the connection method” is not stored in the ROM 22, it is determined that the factory shipment state is set.

  In the process of s100, if the printer 20 is not in the factory-shipped state (s100: NO), the present connection method determination process is terminated. If the printer 20 is in the factory-shipped state (s100: YES), the variable M is initialized ( s110). In this process, the variable M is set to “1” (1 → M). Note that “m” described below indicates a value set in the variable M.

Next, the variable N is initialized (s120). In this process, the variable N is set to “1” (1 → N). Note that “n” described below indicates the value set in the variable N.
Next, the method of wireless connection to the wireless access point (hereinafter referred to as “connection method”) is switched to the connection method using the n-th channel in the m-th wireless LAN standard (s130). In this process, a parameter for realizing the communication function by the connection method defined by the n-th channel in the m-th wireless LAN standard is stored in the storage area for “parameter indicating connection method” in the RAM 23, and the connection method is stored. Is controlled according to the stored contents of the RAM 23 to switch the connection method to the access point 10 by the wireless LAN controller 24. In this way, control is performed according to the stored contents of the RAM 23 until switching to control according to the stored contents of the ROM 22 in subsequent processing (processing of s301). If a parameter is already stored in the storage area for “parameter indicating connection method”, it is rewritten to a new parameter.

  Next, advertisement data for advertising (advertisement) the connection method switched in the process of s130 to the surroundings is generated and transmitted (s140). In this process, first, as the “advertisement data”, a subtype indicating that it is advertisement data is set in the header information, and a device name and a device ID (MAC address in this embodiment) for identifying the device are set. Frame data (management frame) stored in the data body (body) is generated. Then, the frame data is broadcast (transmitted with the destination as a broadcast address) by the connection method using the n-th channel in the m-th wireless LAN standard (see “advertisement 11 to advertisement 3j” in FIG. 3). From the access point 10 that has received the advertisement data, if the advertisement data (content indicated by) is already registered in the connection method instruction process (FIG. 4) described later, the request prompting data is returned. (Refer to “request prompt” in FIG. 3) If it is not already registered, the advertisement data is only registered and the request prompt data is not returned (see “advertisement 12” in FIG. 3). The “request prompt data” is frame data for prompting the access point 10 to request permission (association request) for wireless connection to the access point 10, and the access point 10 is wireless. The SSID used for data communication with the station is stored.

  Next, the timer count is started (s150). The timer that is started in this process is for checking whether the above-mentioned request prompting data is returned within the time limit.

  Next, it is checked whether or not a time-out (that is, time-out) has occurred for the transmission of the advertisement data (s160). In this process, if the count value of the timer that started counting in the process of s150 has reached a predetermined value (250 ms in the present embodiment), it is determined that a timeout has occurred.

  If no timeout has occurred in the process of s160 (s160: NO), it is checked whether or not the request prompt data has been received from the access point 10 side (s170). If not received (s170: NO), s160 Return to the process.

  Thereafter, the processing of s160 and s170 is repeated, and if the time-out for the advertisement data transmission is reached in the processing of s160 (s160: YES), the timer that started counting in the processing of s150 is stopped and reset (s180). Then, “1” is added to the variable N (n + 1 → N) (s190).

  Next, it is checked whether or not the transmission of advertisement data by all channels in the mth wireless LAN standard has been completed (s200). Since each wireless LAN standard defines the number of channels that can be used, the value n of the variable N is larger than the number of channels j that can be used in the m-th wireless LAN standard (n If <j), it is determined that the transmission of advertisement data by all channels has been completed.

  If the transmission of the advertisement data by all channels in the m-th wireless LAN standard has not been completed in this process of s200 (s200: NO), the process returns to s130. Thereafter, by repeating the processes from s130 to s200, the advertisement data is transmitted in order by each channel in the m-th wireless LAN standard (see “advertisement 11 to advertisement 1j” in FIG. 3).

  In this way, after the processing from s130 to s200 is repeated, if the transmission of the advertisement data by all channels in the m-th wireless LAN standard is completed in the processing of s200 (s200: YES), “1” is set to the variable M. Addition (m + 1 → M) is performed (s210).

  Next, it is checked whether or not the transmission of advertisement data according to all wireless LAN standards has been completed (s220). In this process, if the value m of the variable M is larger than the number i of wireless LAN standards that can be communicated by the wireless LAN controller 24 (i <m), the transmission of advertisement data according to all wireless LAN standards is completed. It is determined that

If the transmission of advertisement data based on all wireless LAN standards has not been completed in the process of s220 (s220: NO), the process returns to s120.
Thereafter, in the processing after s120, advertisement data is transmitted according to the next wireless LAN standard (see “advertisement 21 to advertisement 2j” in FIG. 3), and by repeating the processing from s120 to s220, all wireless LANs are transmitted. Transmission of advertisement data according to the standard is performed (see “advertisement 11 to advertisement ij” in FIG. 3).

  In this way, after the processing from s120 to s220 is repeated, if the transmission of the advertisement data according to all wireless LAN standards has been completed in the processing of s220 (s220: YES), the processing returns to s110.

  When the request prompt data is received in the process of s170 while the processes of s120 to s220 are repeatedly performed (s170: YES), the timer that started the count in the process of s150 is stopped and reset (s230), and then the request is made. The SSID specified by the reminder data is stored in the RAM 23 as the SSID used for data communication with the wireless access point (s240). After the SSID is stored in this process, the printer 20 is in a state in which data communication can be realized with a wireless access point (access point 10) that can establish communication using the same SSID as this SSID.

  Next, an association request for requesting permission for wireless connection is transmitted to the access point 10 (s250). The “association request” is frame data (management frame) for requesting permission of wireless connection to the access point 10, and in the process of s250, the SSID recorded in the RAM 23 in the process of s240 is stored. (See “association request” in FIG. 3). In this association request, the device ID (MAC address) of the printer 20 is set in the header information. The access point 10 that has received this association request transmits an association response that is frame data (management frame) for permitting wireless connection to the access point 10 (see “association response” in FIG. 3).

  Next, the timer count is started (s260). The timer started in this process is for checking whether or not the above-mentioned association response is returned within the time limit.

  Next, it is checked whether or not a timeout has occurred for transmission of the association request (s270). In this process, if the count value of the timer that started counting in the process of s260 has reached a predetermined value (250 ms in the present embodiment), it is determined that a time-out has occurred.

  If no timeout has occurred in the process of s270 (s270: NO), it is checked whether an association response has been received from the access point 10 side (s280). If not received (s280: NO), the process of s270 Return to processing.

  After this, the processing of s270 and s280 is repeated, and if the time-out occurs for the transmission of the association request in the processing of s270 (s270: YES), the timer that started counting in the processing of s260 is stopped and reset (s290) , S110 is returned to.

  On the other hand, if an association response is received in the process of s280 (s280: YES), the timer that started the count in the process of s260 is stopped and reset (s300), and then the “parameter indicating connection method” in the RAM 23 is processed in the process of s130. The parameters and the SSID stored in the storage area are stored (copied) in the ROM 22 and the connection method is controlled according to the stored contents of the ROM 22 (s301), and then the connection method determination process is terminated.

Thus, when the connection method confirmation process is completed, the switching of the connection method by the process of s130 is stopped. Thus, the connection method (m-th wireless LAN standard, n-th standard) at the time of the stop is stopped. Channel) is determined (determined) as a connection method to the wireless access point. Connection Method Instruction Processing by Access Point 10 Hereinafter, a processing procedure of connection method instruction processing executed by the CPU 11 provided in the access point 10 will be described with reference to FIG. In this connection method instruction processing, an instruction operation (for example, pressing a specific button) for switching the operation mode of the access point 10 to the support mode that supports setting of the connection method in the wireless station is performed by the operation panel 26. Be started when. Note that this support mode is an operation mode only during the execution of the connection method instruction process, and the operation mode of the access point 10 is switched from the support mode to the normal mode at the end of the connection method instruction process. Will be.

  First, counting by a timer is started (s310). The timer that starts in this process is for checking whether or not the advertisement data is transmitted from the printer 20 within the time limit (the process of s140 in FIG. 2) after the above-described instruction operation is performed. . That is, the user starts the connection method instruction processing by the access point 10 and then starts the connection method determination processing (FIG. 2) described above by the printer 20, thereby connecting the printer 20 to the access point 10. The method is set (see “Instruction Operation” for the access point 10 and “Startup” for the printer 20 in FIG. 3).

  Next, it is checked whether or not a timeout has occurred with respect to the start of this connection method instruction process (s320). In this process, if the count value of the timer that started counting in the process of s310 has reached a predetermined value (15 s in the present embodiment), it is determined that a timeout has occurred.

  If no timeout has occurred in the process of s320 (s320: NO), it is checked whether data has been received from the printer 20 (s330). If not received (s330: NO), the process proceeds to s320. Return. If the access point 10 is not transmitted in accordance with the connection method in which the “connection method” described above is set for the access point 10 itself (indicated by the parameter stored in the ROM 12), normal data is obtained. In this processing of s330, data transmitted according to the connection method set for the access point 10 itself ("Ad 12" in FIG. 3 in this embodiment) is received. It is checking whether or not.

  On the other hand, if data is received from the printer 20 in the process of s330 (s330: YES), it is checked whether the received data is advertisement data (s340). This “advertisement data” is data transmitted by the printer 20 in the process of s140 in FIG.

  In the process of s340, if the received data is advertisement data (s340: YES), it is checked whether or not the advertisement data is already registered (s350). In this connection method instruction process, the device name indicated by the advertisement data is registered in the subsequent processes (see “registration” in FIG. 3). Therefore, in the process of s350, the device name indicated by the received advertisement data Is registered, it is determined that it is already registered. The advertisement data determined to be registered in the process of s350 is the advertisement data received for the second time after the start of this connection method instruction process (see “Advertisement 12” in FIG. 3). ).

  If the advertisement data is not already registered in the process of s350 (s350: NO), the device name and device ID indicated by the advertisement data are registered in the specific storage area in the RAM 13 (for example, Registered in the data table) (s360).

  On the other hand, if the advertisement data is already registered in the process of s350 (s350: YES), request prompting data for requesting transmission of the association request is returned to the printer 20 that is the transmission source of the advertisement data. (S370). In this processing, frame request data for requesting transmission of an association request, which is “request prompt data” in which “SSID” stored in the ROM 12 is stored, is transmitted to the printer 20 (in FIG. 3). (See “Request reminder”). The request prompt data is data that the printer 20 receives in the process of s170 in FIG. 2, and after receiving the request prompt data, the printer 20 transmits an association request instead of advertisement data (in FIG. 3). (See Association Request).

In this way, after finishing the process of s360 or s370, it returns to the process of s320.
If the received data is not advertisement data (s340: NO) in the process of s340 described above, it is checked whether the request is an association request (s380). This “association request” is data transmitted by the printer 20 in the process of s250 in FIG.

  In the process of s380, if the received data is an association request (s380: YES), an association response for permitting wireless connection to the access point 10 itself is returned to the printer 20 that is the transmission source of the association request. After (s400), the process returns to s320. The association response is data that the printer 20 receives in the process of s280 in FIG. 2 (see “association response” in FIG. 3). On the printer 20 side, the connection method at the time of receiving the association response is the access point. 10 is set as a connection method.

  Although detailed description is omitted, in the present embodiment, before the association request and response are exchanged, the request prompt data from the access point 10 is received by the printer 20 in the same manner as the normal wireless connection procedure. Then, an authentication request and a response are exchanged (see “Authentication Request to Authentication Response” in FIG. 3). However, since the data communication is not encrypted in the first embodiment, authentication requests and responses are exchanged by open authentication (that is, not encrypted).

  On the other hand, if the received data is not an association request in the process of s380 (s380: NO), the process based on the received data (other process) is performed (s410), and the process returns to the process of s320.

  Thus, after the processing from s320 to s410 is repeated, if the time-out occurs in the processing of s320 (s320: YES), the timer that started counting in the processing of s310 is stopped and reset (s420), and this connection method The instruction process is terminated. Thus, along with the end of the connection method instruction process, the operation mode of the access point 10 is switched again from the support mode to the normal mode.

[Effect of the first embodiment]
In the wireless LAN system configured as described above, the printer 20 transmits advertisement data based on each connection method while sequentially switching the connection methods (see “advertisement 11” to “advertisement 3j” in FIG. 3). . These advertisement data are received by the access point 10 set in the connection method at the time of transmission of the advertisement data (see “advertisement 12” in FIG. 3), and the access point 10 has the same connection as the received advertisement data. The printer 20 is notified by replying the request prompting data that the wireless connection by the method is possible (see “request prompting” in FIG. 3). Upon receiving this reply, the printer 20 sets the connection method notified by the request prompt, that is, the same connection method as the connection method set in the access point 10. Thus, the printer 20 is set to the same connection method as that of the access point 10, so that wireless connection can be established between the two.

  In this way, in the printer 20, the connection method to the access point 10 is automatically set through the switching of the connection method and the transmission of the advertisement data. Therefore, the load on the user with respect to the setting of the wireless LAN can be greatly reduced.

  Further, the printer 20 sequentially switches the connection method every predetermined time counted by the timer (processing of s110 to s220 in FIG. 3), and after receiving the request prompting data reply, the connection method. Stop switching. In this way, it is possible to set the same connection method as the connection method set in the access point 10 at the time of stopping by simply stopping the switching of the connection methods switched in order. it can.

Further, by explicitly instructing from the outside by starting up the printer 20, setting of the connection method for the printer 20 (execution of connection method determination processing (FIG. 2)) can be performed.
In addition, when a connection method is set in the printer 20, an association request and response are exchanged between the printer 20 and the access point 10, so that a wireless connection between the two can be realized immediately.

  In the connection method instruction process (FIG. 4), the access point 10 returns the request prompt data to the wireless station (printer 20) that has repeatedly transmitted the advertisement data by the same connection method, and sets the connection method. (Refer to “Requesting Request” in FIG. 3).

  In addition, after the operation mode of the access point 10 is switched to the support mode, the mode is switched back to the normal mode when the connection method instruction process (FIG. 4) ends after a predetermined period has elapsed. Therefore, the operation mode can be automatically switched back to the normal mode without performing an operation to switch back to the normal mode from the state switched to the support mode. Therefore, it is possible to prevent the access point 10 from remaining in the support mode from inadvertently setting the connection method in the wireless station.

Further, the printer 20 can set the connection method to the access point 10 only when the printer 20 is in the factory-shipped state (the process of s100 in FIG. 2).
Further, the access point 10 collects (registers) the advertisement data in the process of s340 to s360 in FIG. 4, and then transmits the advertisement data transmitted based on the same connection method as the advertisement data thus collected to the wireless station. Is received, the prompt request data is returned to the wireless station (processing of s370). Therefore, the access point 10 can transmit the request prompting data at a timing when the wireless station transmits the advertisement data, that is, at a timing when data transmission / reception is enabled on the wireless station side. Thereby, the request prompt data transmitted from the access point 10 can be reliably received on the wireless station side.

[Configuration that can be modified with respect to the first embodiment]
In the first embodiment, as shown below, a part of the configuration can be changed to another configuration. In addition, the structure shown below is applicable also to the same structure in other embodiment.

  For example, in the process of s100 in FIG. 3, when the printer 20 is in the factory shipment state, the process configured to perform the process after s110 is illustrated. However, even in a state other than the factory-shipped state, if it is necessary to set a connection method, the processing after s110 may be performed. Specifically, this is the case where some of the “parameters indicating connection methods” stored in the ROM 12 are insufficient.

  Moreover, in this embodiment, after exchanging an authentication request | requirement and a response, what was comprised so that an association request | requirement and a response might be exchanged was illustrated. However, it is also possible to configure to exchange only the association request and response without exchanging the authentication request and response.

  In this embodiment, the access point 10 can receive data only by a connection method set in advance, and when the advertisement data is received, the connection method advertised by the advertisement data is transmitted to the access point 10 itself. The specified connection method is specified. Therefore, the “advertisement data” transmitted by the printer 20 does not include the parameter itself indicating the connection method. However, such parameters themselves may be stored in the advertisement data.

  Further, in the present embodiment, an example in which the setting of the connection method for the printer 20 is instructed by the activation of the printer 20 is illustrated. However, the setting of the connection method for the printer 20 may be configured to be instructed by a specific operation using the operation panel 26 (see “command” in FIG. 3). Further, the printer 20 may be configured to be instructed by data from another communication terminal connected so as to be able to perform data communication.

  Moreover, in this embodiment, what was comprised so that the operation mode of the access point 10 might be switched by designation | designated operation was illustrated. However, the switching of the operation mode may be configured to be instructed by data from another communication terminal connected to the access point 10 so as to be able to perform data communication.

  In the present embodiment, the access point 10 is configured to repeatedly return the request prompting data until a timeout occurs in the connection method instruction process (to return to the process from s370 to s320). However, after the request prompting data is returned, the connection method instruction process may be terminated (specifically, the process proceeds to the process of s420). In this case, even within the predetermined period after the operation mode is switched to the support mode, when the request prompting data is returned once, it can be switched back to the normal mode. In other words, connection method setting can be supported only for the same number of wireless stations as the number of transmissions of the request prompt data “1”. In this configuration, when the request prompting data is returned, the number of replies may be counted, and the process may proceed to s420 only when the predetermined number of times is reached. In this case, as soon as the advertisement data is received from one wireless station, the request prompting data is returned and then the mode is switched back to the normal mode, and the advertisement data may not be registered.

  In the above-described embodiment, when the connection method determination process starts, the printer 20 performs a process after s110 after checking whether it is in a factory-shipped state (see the process of s100 in FIG. 2). Although it is configured as described above, the check as to whether or not it is in the factory-shipped state may not be performed immediately after the connection method determination process is started. For example, it may be between the process of s240 and the process of s250.

  Further, in the above-described embodiment, an example in which dedicated frame data is adopted as “advertisement data” and “request prompting data” is illustrated. However, as the “advertisement data” and “request prompting data”, well-known data defined in the wireless LAN standard may be adopted. Here, as data to be adopted, for example, a probe request and a response can be considered. However, when the probe request and response are employed in this way, the printer 20 wirelessly connects indiscriminately in response to probe responses from other wireless access points except the access point 10, and It may be difficult to realize a wireless connection. This is not desirable from the viewpoint of ensuring network security. Accordingly, when the access point 10 receives a probe request transmitted as “advertisement data”, a probe response including a parameter explicitly indicating that the printer 20 is to be set is transmitted as “request prompting data”. In addition, the printer 20 is preferably configured to perform the setting only when a probe response including a parameter explicitly indicating that the setting is to be performed is received as “request prompting data”.

[Second Embodiment]
The wireless LAN system according to the present embodiment has the same configuration as the wireless LAN system according to the first embodiment, and only part of the processing contents in the access point 10 is different. Therefore, only this difference will be described in detail. . Connection Method Instruction Processing by Access Point 10 Hereinafter, a processing procedure of connection method instruction processing executed by the CPU 11 provided in the access point 10 will be described with reference to FIG. This connection method instruction process is performed according to the following procedure from the connection method instruction process (FIG. 4) according to the first embodiment. The same processes as those in the first embodiment are denoted by the same step numbers, and detailed description thereof is omitted.

  First, if the advertisement data is not already registered in the process of s350 (s350: NO), the parameter indicated by this advertisement data is registered by storing it in a specific storage area in the RAM 13 (for example, in the data table). Registration) (s352). This process is the same process as the process of s360 in FIG. 4, but is associated with not only the device name and device ID but also the reception level (radio wave intensity) when the advertisement data is received in the process of s330. It is registered with. An example of a data table in which parameters indicated by the request prompting data are registered is shown in FIG.

After the process of s352 is completed or if the advertisement data has already been registered in the process of s350 (s350: YES), the process returns to the process of s320.
When the process of s340 is performed, the request prompting data is not transmitted and the association request is not transmitted. Therefore, when the data received in the process of s340 is not advertisement data (s340: NO) After performing “other processing” (s410), the process returns to s320.

  Thereafter, after the processing of s320 to s410 is repeated, if the time-out occurs in the processing of s320 (s320: YES), the timer that started counting in the processing of s310 is stopped and reset (s420).

  Next, it is checked whether or not parameters have been registered through the process of s352 (s510). In this process, if the data by the process of s352 is stored in a specific storage area in the RAM 13, it is determined that the parameter has been registered by the process of s352.

  If the parameter is not registered in the process of s510 (s510: NO), the present connection method instruction process is terminated. If the parameter is registered (s510: YES), the timer is started. (S520). The timer that is started in this process is for checking whether or not the advertisement data is transmitted again from the printer 20 within the time limit after registration of the advertisement data.

  Next, it is checked whether or not the advertisement data registration has timed out (s530). In this process, if the count value of the timer that started counting in the process of s520 has reached a predetermined value (15 s in the present embodiment), it is determined that a timeout has occurred.

  If no timeout has occurred in the process of s530 (s530: NO), it is checked whether data has been received from the printer 20 (s540). If not received (s540: NO), the process proceeds to s530. Return.

  On the other hand, if data is received from the printer 20 side in the process of s540 (s540: YES), it is checked whether or not the received data is advertisement data (s550). This process is the same as the process of s340 in FIG.

  In the process of s550, if the received data is advertisement data (s550: YES), it is checked whether or not the advertisement data is already registered (s560). This process is the same as the process of s350 in FIG.

If the received advertisement data is not already registered in the process of s560 (s560: NO), the process returns to the process of s530.
On the other hand, if the received advertisement data is already registered in the process of s560 (s560: YES), the reception level in the parameter registered for this advertisement data is the maximum reception level among all the parameters. It is checked whether or not (s570).

  In this process, if it is not the maximum reception level (s570: NO), the process returns to the process of s530. On the other hand, if it is the maximum reception level (s570: YES), the request prompt data is returned (s370). Return to processing.

If the received data is not advertisement data (s550: NO) in the process of s550 described above, it is checked whether the request is an association request (s380).
In the process of s380, if the received data is an association request (s380: YES), an association response for permitting wireless connection to the access point 10 itself is returned to the printer 20 that is the transmission source of the association request. After (s400), the process returns to s530.

  On the other hand, if the received data is not an association request in the process of s380 (s380: NO), the process based on the received data (other processes) is performed (s580) and the process of s530 is performed as in the process of s410. Return to processing.

  In this way, after the processing after s530 is repeated, if the time-out occurs in the processing of s530 (s530: YES), the timer that started counting in the processing of s520 is stopped and reset (s590), and this connection method instruction The process ends.

[Effects of Second Embodiment]
In the wireless LAN system configured as described above, the following operations and effects can be obtained in addition to the operations and effects obtained by the same configuration as the first embodiment.

  The access point 10 can return the request prompt data to the wireless station that has transmitted the advertisement data having the highest reception level, and set the connection method (processing of s570 and s370 in FIG. 5).

[Configuration that can be modified with respect to the second embodiment]
In the second embodiment, as shown below, a part of the configuration may be changed to another configuration. In addition, the structure shown below is applicable also to the same structure in other embodiment.

  For example, in the process of s570, an example is shown in which it is configured to check whether or not the reception level in the parameter registered for the received advertisement data is the maximum reception level among all the parameters. However, in the process of s570, it may be configured to check whether the device ID in the parameter registered for the received advertisement data matches the device ID at the time of receiving the advertisement data in the process of s540. Good. In this case, even if the access point 10 receives the same advertisement data as the registered advertisement data, the device ID specified by the advertisement data must match the device ID when the advertisement data is registered first. For example, the connection method is not set without transmitting the request prompting data. As a result, it is possible to prevent a wireless station attempting to make a wireless connection to the access point 10 by impersonating and transmitting the advertisement data registered on the access point 10 side from being wirelessly connected to the access point 10.

[Third Embodiment]
The wireless LAN system of the present embodiment has the same configuration as that of the wireless LAN system of the second embodiment, and only part of the processing contents in the access point 10 is different. Therefore, only this difference will be described in detail. . Connection Method Instruction Processing by Access Point 10 Hereinafter, a processing procedure of connection method instruction processing executed by the CPU 11 provided in the access point 10 will be described with reference to FIG. In this connection method instruction process, in the connection method instruction process (FIG. 5) in the second embodiment, after the process of s510 is performed, the processes of s512 and s514 described later are performed, and instead of the process of s570. Therefore, only s562 will be described in detail.

  First, if the parameter is registered in the process of s510 (s510: YES), the user is notified of each device name indicated by the parameter registered for each advertisement data (s512). In this process, notification is performed by causing the display panel 17 to display a list of device names indicated by the registered parameters. After the list is displayed on the display panel 17, the user can perform a selection operation for selecting one or more device names from the list using the operation panel 16.

Next, it waits until selection operation is performed by the user (s514: NO).
If a selection operation is performed in the process of s514 (s514: YES), the process proceeds to the process of s520. At this time, for the parameter indicating the device name selected by the selection operation, a selection flag indicating that the device name has been selected by the selection operation is set (a state in which “1” is set from the initial value “0”) And).

  If the received advertisement data is already registered in the process of s560 (s560: YES), the parameter registered for the advertisement data is set with the selection flag instead of the process of s570. It is checked whether or not there is (s562).

  If the selection flag is set in this process of s562 (s562: YES), the process proceeds to the process of s370. If the selection flag is not set (s562: NO), the process proceeds to s530. Return.

[Effect of the third embodiment]
In the wireless LAN system configured as described above, the following operations and effects can be obtained in addition to the operations and effects obtained by the same configuration as the second embodiment.

  The access point 10 can return the request prompt data only to the wireless station (for example, the printer 20) having the device name arbitrarily selected by the user and set the connection method (s512, s514, s562 in FIG. 7). Refer to the process.)

[Configuration that can be modified with respect to the third embodiment]
In the third embodiment, as shown below, a part of the configuration may be changed to another configuration. In addition, the structure shown below is applicable also to the same structure in other embodiment.

  For example, in the processing of s512 and s514 in FIG. 7, the configuration configured to allow the user to perform a selection operation based on the device name is illustrated. However, in these processes, the selection operation may be performed based on the device ID instead of the device name. In this case, only the wireless station having the device ID arbitrarily selected by the user can return the request prompting data and set the connection method.

[Fourth Embodiment]
The wireless LAN system of this embodiment has the same configuration as the wireless LAN system of the third embodiment. In the third embodiment, device name notification and selection operations (s512 and s514 in FIG. 7) performed by the access point 10 are performed. This processing is configured to be performed on the side of a well-known personal computer (hereinafter referred to as “PC”) 30 connected to the access point 10 via the cable 100 so that data communication is possible. Connection Method Instruction Processing by Access Point 10 Hereinafter, a processing procedure of connection method instruction processing executed by the CPU 11 provided in the access point 10 will be described with reference to FIG. This connection method instruction process is configured such that, in the connection method instruction process (FIG. 7) in the third embodiment, the processes of s516 and s518 described later are performed instead of the processes of s512 and s514. Only these processes will be described in detail. This connection method instruction process is started after receiving start command data from the PC 30 (see “start command” in FIG. 9).

  First, if parameters are registered in the process of s510 (s510: YES), list data indicating a list of device names indicated by the registered parameters is generated and the PC 30 (source of the above start command data) is generated. (S516). In the PC 30 that has received this list data (see “List Data” in FIG. 9), the list indicated by the list data is displayed on the display, so that each device name is notified. When a selection operation for selecting one or more device names from the device names is performed, selection data capable of specifying the selected device name is transmitted (see “Selection Data” in FIG. 9).

After the list data is transmitted in the process of s516, the process waits until selection data is received from the PC 30 side (s518: NO). When the selection data is received (s518: YES), the process proceeds to s520. In the process of s370 performed thereafter, based on the selection data received in the process of s518, based on the parameters (SSID and connection method) corresponding to the device name specified by the selection data, a request for prompting is made to the wireless station. Send data. Setting Command Processing by PC 30 Hereinafter, a processing procedure of setting command processing executed by the PC 30 will be described with reference to FIG. This setting command process is a process executed in accordance with a program incorporated in the PC 30.

  First, start command data is transmitted to the access point 10 (s610). The access point 10 that has received this start command data starts the above-described connection method instruction processing (FIG. 8) (see “start command” in FIG. 9), and transmits the above-described list data after a predetermined time has elapsed. Come.

Next, it waits until list data is received from the access point 10 (s620: NO).
When the list data is received in the process of s620 (s620: YES), the contents indicated by the list data are displayed on the display (s630). After the list of device names indicated by the list data is displayed in this way (see FIG. 11), the user can perform a selection operation for selecting one or more device names with a keyboard or a mouse.

  And it waits until selection operation is performed (s640: NO), and if selection operation is performed (s640: YES), the selection data which can specify the device name selected by this selection operation will be produced | generated, and the access point 10 will be generated. (S650).

[Effect of Fourth Embodiment]
In the wireless LAN system configured as described above, the following operations and effects can be obtained in addition to the operations and effects obtained by the same configuration as that of the third embodiment.

  The access point 10 prompts only the device name indicated by the selection data received from the PC 30 among the registered device names, that is, the wireless station (for example, the printer 20) of the device name arbitrarily selected by the user in the PC 30. Data can be transmitted to set the connection method (see the processing of s516, s518, and s562 in FIG. 8).

[Configuration that can be modified with respect to the fourth embodiment]
In this 4th Embodiment, as shown below, it can also implement in the state which changed a part structure into another structure. In addition, the structure shown below is applicable also to the same structure in other embodiment.

  For example, in the processing of s516 and s518 in FIG. 8, an example is shown that is configured to generate list data indicating a list of device names. However, in these processes, the list data indicating the list of device IDs is generated and transmitted in the process of s516, so that the selection operation is performed based on the device ID instead of the device name. May be. In this case, only the wireless station having the device ID arbitrarily selected by the user on the PC 30 side can return the request prompting data and set the connection method.

  In the present embodiment, the access point 10 is configured to transmit the list data generated based on the parameter after the parameter is registered (collected) for a predetermined time. However, the list data may be generated and transmitted at a timing when a transmission request is received from the PC 30 side (see “list request” in FIG. 9). For this purpose, for example, a step of waiting for an operation for requesting list data (s612) between the processing of s610 and s620 in FIG. 10, and the transmission of the list data is requested in response to this operation. Step (s614) is provided (see FIG. 12), and a step (s515) for waiting for a request from the PC 30 side is provided between the processes of s510 and s516 in FIG. 8 (see FIG. 13). do it. Further, in this configuration, as described above, the selection operation may be performed based on the device ID instead of the device name.

  In the present embodiment, after the access point 10 transmits the request prompt data to the wireless station (printer 20), the PC 30 side is notified that the connection method is set (or set) on the wireless station side. You may comprise as follows. For this purpose, for example, after the processing of s400 in FIG. 8, a step (s402) of transmitting setting notification data for notifying that the setting has been made to the PC 30 is provided (see FIG. 13), and s650 in FIG. Step (s652) of waiting for the transmission of the setting notification data after the process of step (s652) and a step (s654) of notifying that the connection method is set on the wireless station side when the setting notification data is received are provided. (See FIG. 12).

[Fifth Embodiment]
In each of the embodiments described above, even if the printer 20 is wirelessly connected to the access point 10, if the access point 10 is set to perform data communication encryption, the printer 20 side is usually the same. Unless data is encrypted and set to perform data communication, data communication cannot be performed normally. Therefore, the wireless LAN system according to the present embodiment is configured such that the wireless LAN system according to the fifth embodiment can perform data communication normally without being operated by the user.

  First, if a “security parameter” is stored in the ROM 12, the access point 10 communicates with a security measure based on this parameter. Here, as the “security parameter”, for example, there is an encryption key (in this embodiment, WEP key; Wired Equivalent Privacy) for performing communication in an encrypted state. If the encryption key is stored, the access point 10 (CPU 11) performs communication with the wireless station in a state encrypted with the encryption key. The encryption key is generated through remote setup and stored in the ROM 12 as described above.

Also, if “parameters related to security” are stored in the ROM 22, the printer 20 communicates with security measures based on these parameters. Here, the “security parameter” includes an encryption key as described above. If the encryption key is stored, the printer 20 (CPU 21) performs communication with the wireless access point in a state encrypted with the encryption key. Connection Method Instruction Processing by Access Point 10 Hereinafter, a processing procedure of connection method instruction processing executed by the CPU 11 provided in the access point 10 will be described with reference to FIG. This connection method instruction process includes a process of s372 described later after the process of s370 in the connection method instruction process (FIG. 8) in the fourth embodiment, and the processes of s592, s594, and s596 after the process of s590. Therefore, only these processes will be described in detail.

  First, in the present embodiment, in the process of s370, an encryption key different from the normal encryption key stored in the ROM 12 (hereinafter referred to as “temporary encryption key”) is randomly generated, and this temporary encryption key is added. Send in state.

  After transmitting the requested reminding data in the process of s370, before returning to the process of s530, the temporary encryption key in which the device name and device ID of the wireless station that transmitted the requested reminding data are added to the requested prompting data in the process of s370. Is registered in the reminder list in a state associated with (s372). This “reminder list” is a data table in which data is registered after being generated in the RAM 13.

  In addition, after completing the process of s590, the process waits until the wireless connection with any of the wireless stations registered in the prompt list in the process of s372 is released (s592: NO), and when the wireless connection is released (s592). : YES), the registered content for the wireless station whose wireless connection has been canceled is deleted from the prompt list (s594).

After the process of s594 is completed, it is checked whether or not the registered content remains in the prompt list (s596). If it remains (s596: YES), the process returns to s592. And it repeats until there is no registered content in the reminder list, and if no registered content remains in the process of s596 (s596: NO), this connection method instruction process is terminated. A connection method determination process performed by the printer 20 A connection method determination process executed by the CPU 21 of the printer 20 will be described below with reference to FIG. This connection method determination process is configured such that the following process is performed after the process of s301 in the connection method determination process (FIG. 5) in the other embodiment. Note that the same steps as those of the other embodiments are denoted by the same step numbers, and detailed description thereof is omitted.

  First, after the request prompt data is received in the process of s170, the SSID specified by the request prompt data is stored in the ROM 22 in the process of s174, and the temporary encryption key is stored in the storage area for “security parameters” in the RAM 23. Remember me. Thereafter, by switching the connection method in the process of s224, data communication with the wireless access point (access point 10) is performed in the state encrypted with the temporary encryption key stored in the storage area for “security parameters”. .

  In addition, after completing the processing of s301, the encryption key of the access point 10 is acquired (s700). This process is a process for obtaining the encryption key of the access point 10 from the PC 30 by the public key encryption method (see “Encryption key (encryption with random number)” in FIG. 16), and the detailed processing procedure will be described later. This will be described in the encryption key acquisition process (FIG. 17).

  If the encryption key has been acquired in the process of s700 (s302: YES), this encryption key is stored in the ROM 22 (s304). In this processing, the temporary encryption key is deleted from the RAM 23 as well as the encryption key is stored in the ROM 22.

  Next, the wireless connection with the access point 10 is canceled (s306). Here, the wireless connection with the access point 10 is canceled by transmitting the authentication cancellation to the access point 10 (see “authentication cancellation” in FIG. 16).

  Then, the wireless connection with the access point 10 is established again (s308). In this process, as described above, the wireless connection is established by exchanging the authentication request and response with the access point 10. After the wireless connection is established by this process, data communication is performed in the state encrypted by the encryption key stored in the process of s304.

In this way, after completing the process of s308, or if the encryption key has not been acquired in the process of s302 (s302: NO), this connection method determination process is terminated. O Encryption Key Acquisition Processing by Printer 20 Hereinafter, a processing procedure of encryption key acquisition processing executed by the CPU 21 provided in the printer 20 will be described with reference to FIG. This encryption key acquisition process is a detailed processing procedure of the process of s700 in FIG.

First, a public key / private key pair used in the public key cryptosystem is generated (s710).
Next, the public key generated in the process of s710 is transmitted to the PC 30 (s720). In this process, public key data is transmitted to the PC 30 which is a preset device. Upon receiving this public key, the PC 30 returns a random number randomly generated with this public key and returns it, and then transmits print data indicating a predetermined message image encrypted with this random number.

Next, the encrypted random number is received from the PC 30 (s730).
Next, the encrypted print data is received from the PC 30 (s740).
Next, the message image indicated by the print data received in the process of s740 is decrypted with the secret key generated in the process of s710, and then printed by the print engine 28 (s750). The message image printed in this process includes a message for allowing the user to confirm that the random number received in the process of s730 has been transmitted to the printer 20, and the user who has confirmed this is the PC 30. Thus, a confirmation operation described later is performed (refer to a setting command process (FIG. 18) described later). After this confirmation operation, the encryption key encrypted by the process of s730 is transmitted from the PC 30.

Next, a timer is started (s760).
Next, it is checked whether an encryption key has been received from the PC 30 (s770).
When the encryption key is received in the process of s770 (s770: YES), the timer started in the process of s760 is stopped and reset (s780), and then the encryption key acquisition process is terminated.

  On the other hand, if an encryption key has not been received in the process of s770 (s770: NO), it is checked whether or not a timeout has occurred (s790). In this process, if the count value of the timer started in the process of s760 has reached a predetermined value (30 s in this embodiment), it is determined that a timeout has occurred.

If no timeout has occurred in the process of s790 (s790: NO), the process returns to the process of s770. If the timeout has occurred (s790: YES), the process proceeds to the process of s780 to obtain an encryption key. The encryption key acquisition process is terminated without any processing. Setting Command Processing by PC 30 Hereinafter, a processing procedure of setting command processing executed by the PC 30 will be described with reference to FIG. This setting command process is a process executed in accordance with a program incorporated in the PC 30. This setting command process is configured such that the following process is performed after the process of s650 in the setting command process (FIG. 10) in the other embodiment. The same processes as those in the fifth embodiment are denoted by the same step numbers, and detailed description thereof is omitted.

  First, after the process of s650 is performed, the process waits until a public key is received from the printer 20 (s810: NO). This public key is data transmitted by the printer 20 in the process of s720 in FIG.

  When the public key is received in the process of s810 (s810: YES), a random number randomly generated with this public key is encrypted and returned (s820). This encrypted random number is data received by the printer 20 in the process of s730 in FIG.

  Next, the print data indicating the message image is encrypted and transmitted using the public key received in the process of s810 (s830). This encrypted print data is data received by the printer 20 in the process of s740 in FIG. In the printer 20 that has received the print data, the message image is printed as described above. After the message image is printed, the user performs a confirmation operation on the PC 30. The confirmation operation is an operation such as pressing a specific key or button or pressing a plurality of buttons or keys in a specific procedure.

Next, it waits until confirmation operation is performed (s840: NO).
If a confirmation operation is performed in the process of s840 (s840: YES), the encryption key is encrypted with the random number generated in the process of s820 and transmitted (s850). This encrypted encryption key is data received by the printer 20 in the process of s770 in FIG. The encryption key is stored in advance in a memory or the like.

In this way, after finishing the process of s850, this setting command process is complete | finished. ○ Cryptographic switching process by the access point 10 The access point 10 is configured to perform a cryptographic switching process when it is time to perform data communication (data transmission / reception) with a wireless station after being activated. Hereinafter, the processing procedure of the encryption switching processing will be described with reference to FIG.

  First, it is checked whether or not the wireless station to which data communication is to be performed is a wireless station having a device name or device ID registered in the prompting table in the RAM 12 (s910).

  In the process of s910, if the wireless station has a device name or device ID registered in the reminder table (s910: YES), data communication is performed in a state encrypted with a temporary encryption key corresponding to the device name or device ID. (S920).

  On the other hand, if it is not a wireless station with the device name or device ID registered in the prompting table in the processing of s910 (s910: NO), normal data communication encrypted with the encryption key is performed (s930).

In this way, after finishing the process of s920 or s930, this encryption switch process is complete | finished.
[Effect of Fifth Embodiment]
In the wireless LAN system configured as described above, the following operations and effects can be obtained in addition to the operations and effects obtained by the configuration similar to the above-described embodiments.

  The access point 10 switches the encryption method to perform data communication encrypted with the temporary encryption key to the wireless station that has returned the request prompt data (see the process of s910 in FIG. 19), while the request prompt is requested. The printer 20 that has received the data is set to perform data communication with the access point 10 by encrypting with the temporary encryption key (see the process of s224 in FIG. 15). In this way, data communication can be normally performed between the access point 10 and the printer 20 while being encrypted with the temporary encryption key. Thereby, the data communication between the access point 10 and the printer 20 can be realized in a state where a certain security level is secured while maintaining the security level for the data communication performed by the access point 10 with the external network.

  Subsequently, when the printer 20 can acquire the encryption key by the encryption key acquisition process (FIG. 17), the data communication between the access point 10 and the printer 20 is performed from the PC 30 by performing wireless connection to the access point 10 again. Encryption is performed using the encryption key delivered to the printer 20 (see the processing in s306 and s308 in FIG. 15). At this time, the access point 10 deletes the parameter corresponding to the wireless station whose wireless connection has been canceled from the prompt list (see the process of s594 in FIG. 14), and thereafter, data communication with the printer 20 is performed using the encryption key. It will be returned to encrypt. Therefore, data communication between the access point 10 and the printer 20 can be realized at the same security level as the data communication performed by the access point 10 with other wireless stations or external networks.

  Further, since the encryption key is transferred from the PC 30 to the printer 20 by the public key cryptosystem, the possibility of leakage in the process of transmitting the encryption key to the printer 20 is naturally reduced.

  Further, the printer 20 prints the message image indicated by the print data delivered from the PC 30 before the encryption key (see the process of s750 in FIG. 17). Therefore, the user can confirm that the printer 20 is a correct wireless station to which the encryption key is to be delivered from the PC 30 depending on whether or not a message image is printed from the printer 20. Then, after confirming this message image, the user can perform a confirmation operation on the PC 30 (see the process of s840 in FIG. 18), so that the encryption key can be transferred from the PC 30 to the printer 20.

[Modification]
As mentioned above, although embodiment of this invention was described, this invention is not limited to said specific embodiment, It can implement with a various form besides this.

  For example, in the above-described embodiment, the printer 20 is applied as the wireless station of the present invention. However, the wireless station of the present invention can be applied to devices other than the printer 20 as long as the device functions as a wireless station.

  In the above embodiment, the configuration in which the PC 30 is connected to the access point 10 via the cable 100 is illustrated. However, when the PC 30 has a function as a wireless station, the PC 30 is wirelessly connected. It is good also as composition which has.

  Further, in each of the above-described embodiments, an example in which all processing including transmission of advertisement data is not performed when it is determined that the printer 20 is in a factory shipment state (FIG. 2). , See the process of s100 in FIG. 15). However, on the printer 20 side, the advertisement data is transmitted in a state where it can be determined whether or not the printer 20 itself is in a factory-shipped state, and the access point 10 side is prevented from registering the advertisement data or returning the request prompting data. Also good.

  For this reason, on the printer 20 side, for example, as shown in FIG. 20, the process of s100 is provided after the process of s130, and if “YES” is determined in the process of s100, the factory shipment state is indicated. While the advertisement data with the “Unconfigure device” flag indicating “1” set is transmitted (s142), if it is determined “NO”, the “Unconfiguredevice” flag is not set (“0 ”Is set) After the advertisement data is transmitted (s144), the process may be shifted to the process of s150.

  Further, on the access point 10 side, the following processing may be provided in FIGS. 4, 5, 7, 8, 13, and 14. For example, as shown in FIG. 21, if the wireless station (printer 20) is in the factory-shipped state as a result of checking the “Unconfigure device” flag of the received advertisement data after the process of s340 (s342: YES), s350 On the other hand, if the process is not in the factory-shipped state (s342: NO), the process returns to s320. Or, as shown in FIG. 22, after the process of s550, if the result of checking the “Unconfigure device” flag of the received advertisement data is that the wireless station is in a factory-shipped state (s552: YES), the process proceeds to s560. On the other hand, if it is not in the factory-shipped state (s552: NO), the process returns to s530.

  With this configuration, the access point 10 can perform registration and request prompt data transmission based on advertisement data and set a connection method only when the wireless station is in a factory-shipped state.

  In the present embodiment, the order in which the printer 20 switches the connection method is exemplified from the first channel in the first wireless LAN standard to the number order. However, the order is not particularly limited. For example, the order in the same wireless LAN standard may be such that radio wave interference does not occur.

  As a specific example, a plurality of channels are divided into a plurality of groups (for example, two groups of a high frequency side and a low frequency side which are divided into two frequency bands), and after a jth channel (j is an arbitrary number) in a certain group. It is preferable that the switching to the j-th channel in another group is performed in order on all channels in each group. In this case, it is not possible to continuously switch to a channel in the same group having a close frequency band, so that radio wave interference can be suppressed.

  Similarly, after switching a plurality of channels in order at a predetermined channel number k (for example, 5 channels) from the first channel in order, switching from the second channel in order at a predetermined channel number interval, You may comprise so that it may repeat from the 1st-k-1th channel. In this case, radio wave interference can be reliably suppressed by setting the predetermined number k of channels to an interval at which radio wave interference can be sufficiently suppressed.

[Correspondence with the present invention]
In the present invention, the method switching means provided in the wireless station is the processing of s110 to s290 in FIGS. The advertisement transmission means is the process of s140 in FIGS. The method setting means is the process of s280 in FIGS. 2 and 15 (when it is determined “YES”). Further, the notification collection means is the processing of s160 to s174 in FIG. The encryption setting means is the process of s224 in FIG. The cipher acquisition unit is the process of s700 in FIG. The cipher changing means is the process of s304 in FIG. The message output means is the process of s750 in FIG. The content determination means is the process of s100 in FIGS. The non-setting means is the process of s100 in FIGS. 2 and 15 (when it is determined “YES”).

  Further, the notification return means provided in the wireless access point is the processing of s370 and s400 in FIGS. 4, 5, 7, 8, 13, and 14. Further, the advertisement collecting means is the process from s320 to s360 in FIG. 4 and the process from s320 to s352 in FIGS. 5, 7, 8, 13, and 14. The first and second user selection means are the processes of s512 and s514 in FIG. The list transmission means is the process of s516 in FIGS. The cipher switching means is the processing from s910 to s930 in FIG. The mode switching means is the CPU 11 that executes connection method instruction processing. The content determination means is the processing of s342 and s542 in FIG.

  Further, the request transmission means included in the communication terminal is the process of s614 in FIG. The third and fourth user selection means are the processes of s630 and s640 in FIG. The selective transmission means is the process of s650 in FIG. Further, the encryption delivery means is the processing of s810 to s850 in FIG. The confirmation operation means is the process of s840 in FIG.

DESCRIPTION OF SYMBOLS 10 ... Access point, 11 ... CPU, 12 ... ROM, 13 ... RAM, 14 ... Network controller, 15 ... Wireless LAN controller, 16 ... Operation panel, 17 ... Display panel, 20 ... Printer, 21 ... CPU, 22 ... ROM, DESCRIPTION OF SYMBOLS 23 ... RAM, 24 ... Wireless LAN controller, 25 ... PC interface part, 26 ... Operation panel, 27 ... Display panel, 28 ... Print engine, 30 ... Personal computer, 100 ... Cable.

Claims (41)

A station capable functions as a wireless LAN station, and the access point that can function as a wireless LAN access point, a wireless LAN system Ru provided with,
The station
Station-side storage means;
Station side data transmitting and receiving means;
With
The station
When an external command is received, station side control is executed,
For the station side control,
The first station side data including identification data of the station itself is transmitted to the station side data transmitting / receiving means by wireless communication using a channel selected from a plurality of channels , and the same channel is used. by wireless communication, the second station side data including identification data of the station itself, and the station side transmission control Ru is transmitted to the station side data transmitting and receiving means,
Channel switching control for switching a channel selected from the plurality of channels;
After receiving a command from the outside, in between the predetermined period, the wireless LAN access point receiving the said first station side data and the second station side data is transmitted, the SSID data including the SSID When the station side transmitting / receiving means receives by wireless communication using the channel used for the first transmission of station data and the second transmission of station data, it is included in the SSID data SSID storage control for storing the SSID in the station side storage means ;
Association request control for making an association request to a wireless LAN network constructed by a wireless LAN access point using the SSID stored by the SSID storage control means;
Is included ,
The wireless access point is
Access point side storage means capable of storing SSID;
Access point side data transmitting and receiving means capable of transmitting and receiving data by wireless communication using a preset channel;
With
The access point is
When an external command is accepted, the access point side control is executed.
For the access point side control,
The first station side data transmitted by the wireless communication had use a channel the set in advance, from the wireless LAN station, if the access point side data communication means receives, the first Identification data storage control for storing identification data of the transmission source of the first station side data included in the station side data;
2 including identification data of the transmission source of the first station-side data that has been transmitted by wireless communication using the preset channel within a predetermined period after receiving the external command. the times th station side data, when the access point side data communication means is received, the the first station side data, said the second station side data, to the wireless LAN station which is the source of the, the SSID data including the SSID stored in the access point storing means, by wireless communication using a channel that the previously set, and SSID transmission control Ru is transmitted to the access point side data communication means,
When an association request using the SSID stored in the access point side storage means is made from a wireless LAN station, the wireless LAN network that is constructed by the access point itself as the association request source wireless LAN station Association response control to join
Wireless LAN system characterized in that it contains. Wherein the access point, the access point capable of data communication with a communication terminal is connected,
For the station side control ,
Cipher acquisition control for acquiring the first encryption key from the communication terminal by the public key encryption method via the access point having a first wireless connection with the station ;
Wherein when the first encryption key by the encryption acquisition control is acquired from the communication terminal, wherein the releasing the first wireless connection with the access point, the second radio in a state encrypted by the first encryption key by the connection, and encryption change control for setting change to be performed by the encrypted state by said first encryption key data communication with the access point, includes a,
In the communication terminal,
Wireless LAN system according to claim 1, the transfer of the first encryption key to the station by the public key encryption method, characterized in that is provided with encrypted transfer unit performed via the access point.   An access point that can function as a wireless LAN access point,
  Access point side storage means capable of storing SSID;
  Access point side data transmitting and receiving means capable of transmitting and receiving data by wireless communication using a preset channel;
With
  When an external command is accepted, the access point side control is executed.
  For the access point side control,
  When the first station side data transmitted by wireless communication using the preset channel is received from the wireless LAN station by the access point side data transmitting / receiving means, the first station side data is transmitted. Identification data storage control for storing identification data of the transmission source of the first station-side data included in
  2 including identification data of the transmission source of the first station-side data that has been transmitted by wireless communication using the preset channel within a predetermined period after receiving the external command. When the access point side data transmitting / receiving means receives the second station side data, to the wireless LAN station that is the transmission source of the first station side data and the second station side data, SSID transmission control control for transmitting SSID data including the SSID stored in the access point side storage means to the access point side data transmission / reception means by wireless communication using the preset channel;
  When an association request using the SSID stored in the access point side storage means is made from a wireless LAN station, the wireless LAN network that is constructed by the access point itself as the association request source wireless LAN station Association response control to join
It is included
  An access point characterized by that.   In the access point,
  The SSID transmission control control, when the access point side data transmitting / receiving means receives the second station side data transmitted by wireless communication using the preset channel, the SSID data, The access point side data transmission / reception means is transmitted to the wireless LAN station that is the second station side data transmission source, and then the association request is received from the wireless LAN station that is the second station side data transmission source. The access point side data transmission / reception means transmits an association response for joining the wireless LAN network constructed by the access point itself to the wireless LAN station that is the association request source.
  The access point according to claim 3.   In the access point,
  The access point side data transmitting / receiving means receives the first station side data, receives the second station side data, transmits the SSID data, and associates the wireless LAN station by the association response control. It does not change the communicable distance when participating in the wireless LAN network.
  The access point according to claim 3 or 4, wherein   In the access point,
  In the SSID transmission control, after the first station side data transmitted by wireless communication using a preset channel is received, among the received first station side data, The access point side data transmission / reception means is made to transmit the SSID data to the wireless LAN station that has transmitted the second station side data by wireless communication using the same channel as any one of the first station side data.
  The access point according to any one of claims 3 to 5, wherein:   In the access point,
  In the SSID transmission control, the first station side data determined based on a command from the outside among the first station side data transmitted by wireless communication using a preset channel is used. Send the SSID data to the access point side data transmitting / receiving means to the transmitting wireless LAN station
  The access point according to any one of claims 3 to 6, characterized in that:   In the access point,
  In the SSID transmission control, after the first station side data transmitted by wireless communication using a preset channel is received, among the received first station side data, The SSID data is sent to the access point to the wireless LAN station that has transmitted the second station side data by wireless communication using the same channel as the first station side data determined based on an external command. To the side transmission / reception means
  The access point according to claim 7.   In the access point,
  The SSID transmission control is configured to determine a wireless LAN station to which the SSID data should be returned in response to a command from a communication terminal connected to the access point itself so that data communication is possible.
  The access point according to claim 7.   In the access point,
  In the SSID transmission control, the SSID data is transmitted only to the wireless LAN station that has transmitted the identification data included in the first station side data and the second station side data including the same identification data. Send to access point side sending / receiving means
  The access point according to claim 6 or 8, wherein   In the SSID transmission control, after the first station side data is received, the second station side data transmitted using the same channel as the first station side data is transmitted from the wireless LAN station. When received, the SSID data is returned to the wireless LAN station that is the transmission source of the second station side data.
  The access point according to claim 6 or 8, wherein   In the access point,
  The access point according to claim 3, wherein the external command is received by pressing a specific button.   In the access point,
  44. The wireless LAN system according to claim 26, wherein the access point side transmission / reception means receives a probe request as the first station side data.   In the access point,
  The probe request is received as the first station-side data by the access point-side transmission / reception means, and a probe response including a parameter indicating that a setting related to wireless communication of the wireless LAN station is performed is transmitted to the access point-side transmission / reception. The access point according to claim 3, wherein the means transmits to a wireless LAN station that is a transmission source of the probe request.   In the access point,
  The access point according to claim 3, wherein the external command is received from another device connected via a cable.   In the access point,
  The access point according to claim 3, wherein the external command is received from another wirelessly connected device.   In the access point,
  The access point according to claim 3, wherein the external command is received from a connected external network.   A station that can function as a wireless LAN station,
  The station
  Station-side storage means;
  Station side data transmitting and receiving means;
With
  The station
  When an external command is received, station side control is executed,
  For the station side control,
  The first station side data including identification data of the station itself is transmitted to the station side data transmitting / receiving means by wireless communication using a channel selected from a plurality of channels, and the same channel is used. Station-side transmission control for causing the station-side data transmission / reception means to transmit second station-side data including identification data of the station itself by wireless communication;
  Channel switching control for switching a channel selected from the plurality of channels;
  SSID data including the SSID transmitted by the wireless LAN access point that has received the first station side data and the second station side data within a predetermined period after receiving the external command, When the station side transmission / reception means receives by wireless communication using the channel used for the first transmission of the station data and the second transmission of the station data, the SSID included in the SSID data SSID storage control for storing the above in the station side storage means,
  Association request control for making an association request to a wireless LAN network constructed by a wireless LAN access point using the SSID stored by the SSID storage control means;
It is included
  A station characterized by that.   In the station,
  The wireless station according to claim 18, wherein the external command is received from another connected device.   In the station,
  The station according to claim 18 or 19, wherein the command from the outside is a command to turn on the power.   In the station,
  21. The station according to claim 18, wherein the external command is a command for restarting.   In the station,
  The station according to any one of claims 18 to 21, wherein the command from the outside is a command to perform initialization.   In the station,
  It has an operation panel,
  The station according to any one of claims 18 to 22, wherein an instruction from the outside is received via the operation panel.   A station that can function as a wireless LAN station,
  The station
  Station-side storage means;
  Station side data transmitting and receiving means;
With
  The station
  When activated, the station side control is executed,
  For the station side control,
  The first station side data including identification data of the station itself is transmitted to the station side data transmitting / receiving means by wireless communication using a channel selected from a plurality of channels, and the same channel is used. Station-side transmission control for causing the station-side data transmission / reception means to transmit second station-side data including identification data of the station itself by wireless communication;
  Channel switching control for switching a channel selected from the plurality of channels;
  The SSID data including the SSID transmitted by the wireless LAN access point that has received the first station-side data and the second station-side data within a predetermined period after the activation is performed, When the station side transmission / reception means receives the station data by wireless communication using the channel used for the transmission of the station data and the second transmission of the station data, the SSID included in the SSID data is transmitted to the station. SSID storage control to be stored in the side storage means;
  Association request control for making an association request to a wireless LAN network constructed by a wireless LAN access point using the SSID stored by the SSID storage control means;
It is included
  A station characterized by that.   In the station,
  25. The station side transmission control causes the station side data transmitting / receiving means to transmit the first station side data when the station is in a factory shipment state. Station listed.   In the station,
  The station-side transmission control causes the station-side data transmission / reception means to transmit the first-time station-side data when parameters relating to wireless communication of the station are insufficient. The station according to any one of 25.   A station that can function as a wireless LAN station,
  The station
  Station-side storage means;
  Station side data transmitting and receiving means;
With
  The station
  When the station is in a factory default state, the station side control is executed,
  For the station side control,
  The first station side data including identification data of the station itself is transmitted to the station side data transmitting / receiving means by wireless communication using a channel selected from a plurality of channels, and the same channel is used. Station-side transmission control for causing the station-side data transmission / reception means to transmit second station-side data including identification data of the station itself by wireless communication;
  Channel switching control for switching a channel selected from the plurality of channels;
  The SSID including the SSID transmitted by the wireless LAN access point that has received the first station side data and the second station side data within a predetermined period after transmitting the first station side data. When the station side transmission / reception means receives data by wireless communication using the channel used for the first transmission of the station data and the second transmission of the station data, the SSID data SSID storage control for storing the included SSID in the station-side storage means;
  Association request control for making an association request to a wireless LAN network constructed by a wireless LAN access point using the SSID stored by the SSID storage control means;
It is included
  A station characterized by that.   A station that can function as a wireless LAN station,
  The station
  Station-side storage means;
  Station side data transmitting and receiving means;
With
  The station
  When the parameters related to wireless communication of the station are insufficient, the station side control is executed,
  For the station side control,
  The first station side data including identification data of the station itself is transmitted to the station side data transmitting / receiving means by wireless communication using a channel selected from a plurality of channels, and the same channel is used. Station-side transmission control for causing the station-side data transmission / reception means to transmit second station-side data including identification data of the station itself by wireless communication;
  Channel switching control for switching a channel selected from the plurality of channels;
  The SSID including the SSID transmitted by the wireless LAN access point that has received the first station side data and the second station side data within a predetermined period after transmitting the first station side data. When the station side transmission / reception means receives data by wireless communication using the channel used for the first transmission of the station data and the second transmission of the station data, the SSID data SSID storage control for storing the included SSID in the station-side storage means;
  Association request control for making an association request to a wireless LAN network constructed by a wireless LAN access point using the SSID stored by the SSID storage control means;
It is included
  A station characterized by that.   In the station,
  In the channel switching control, after the first station-side data is transmitted by the station-side data transmission means, the channel switching control is selected as a channel different from the channel used for the first station-side data transmission. After switching the channel and switching, the selected channel is switched to the channel used for the first station side data transmission.
  A station according to any of claims 18 to 28, characterized in that   In the station,
  By the wireless LAN access point by the first station side data transmission / reception means, the second station side data transmission, the SSID data reception, and the association request control by the station side data transmission / reception means Do not change the communicable distance by the association request to the built-in wireless LAN network.
  30. A station according to any one of claims 18 to 29.   In the station,
  The station according to any one of claims 18 to 30, wherein the station is a printer.   In the station,
  32. The station according to any one of claims 18 to 31, further comprising an interface connected to a communication terminal so as to be able to perform data communication.   In the station,
  The station-side transmission control causes the station-side data transmission / reception means to transmit the first station-side data including parameters related to wireless communication of the station. Station.   In the station,
  The station according to any one of claims 18 to 33, wherein the station side transmission control causes the station side data transmitting / receiving means to transmit a probe request as the first station side data.   In the station,
  In the station side transmission control, the probe request is transmitted to the station side data transmitting / receiving means as the first station side data,
  When the station-side data transmitting / receiving unit receives a probe response including a parameter transmitted from the wireless LAN access point that has received the probe request and indicating that the wireless LAN station performs settings related to wireless communication, the SSID is received. The station according to any one of claims 18 to 34, wherein the SSID is stored by storage control.   In the station,
  19. An image based on the received data is printed when data transmitted by a communication terminal that has instructed a wireless LAN access point to perform settings related to wireless communication of the wireless LAN station is received. 36. A station according to any of claims 35 to 35.   In the station,
  37. The station according to claim 36, wherein after the image based on the received data is printed, the information transmitted by the communication terminal that has confirmed the printing of the image is received. The communication terminal which functions as a station in any one of Claim 1 to 70 . Communication terminal that functions as an access point according to any of claims 1 71. Communication program for executing all the processing procedures, the computer system comprising a station according to any of claims 1 73. Communication program for executing all the processing procedures, the computer system provided in the access point according to any one of claims 1 74.

Images