JP6160479B2 - Wireless connection apparatus and method for setting wireless communication - Google Patents

Description

  The present invention relates to a wireless connection device.

  In a wireless connection device such as an access point, in order to easily set wireless communication for a wireless terminal, setting information related to wireless communication is transmitted from the wireless connection device to the wireless terminal and the setting information received by the wireless terminal is validated The technology to do is known. As such a technique, for example, AOSS (AirStation One-Touch Secure System) and WPS (Wi-Fi Protected Setup) are known.

  Patent Documents 1 to 5 describe wireless communication setting methods based on AOSS or WPS. In Patent Document 1, the start trigger of the setting process is that the wireless connection device detects that the setting button is pressed or that the wireless connection device receives an instruction using short-range wireless communication. In Patent Documents 2 to 4, the start of the setting process is that the wireless connection device detects the pressing of the setting button. In Patent Document 5, the start trigger of the setting process is that the wireless connection device receives an instruction using short-range wireless communication.

JP2013-38498A JP 2013-106332 A JP 2008-283590 A JP 2011-205292 A JP 2006-197063 A Japanese Patent No. 4894826

  As described above, in the conventional wireless connection device, anyone can set wireless communication by using a predetermined method such as pressing a setting button or an instruction using short-range wireless communication. For this reason, for example, there is a possibility that a malicious third party who has visited his / her home can easily set wireless communication, and there is a problem that there is a security concern.

  For this reason, in a wireless connection device capable of setting wireless communication to a wireless terminal in response to a predetermined start instruction, it has been desired to improve security in setting processing.

  SUMMARY An advantage of some aspects of the invention is to solve at least a part of the problems described above, and the invention can be implemented as the following forms or application examples.

(1) According to an aspect of the present invention, a wireless connection device is provided. The wireless connection device includes: a setting processing unit for executing wireless communication setting processing for a wireless terminal connected to the wireless connection device as a wireless communication client; according to a first start instruction; A first start instruction unit for starting the setting process; and associating a specific wireless terminal with the wireless connection device, and suppressing the start of the setting process by the first start instruction unit after the association A second start instruction different from the first start instruction, and a second start instruction section for starting the setting process in response to a second start instruction using the association; Is provided. According to the wireless connection device of this aspect, the control unit suppresses the start of the setting process by the first start instruction unit after the association between the specific wireless terminal and the wireless connection device. For this reason, after the association between the specific wireless terminal and the wireless connection device, the start of the setting process corresponding to the first start instruction is suppressed. Further, the second start instruction unit is different from the first start instruction, and starts the setting process in response to the second start instruction using the association between the specific wireless terminal and the wireless connection device. That is, according to the wireless connection device of this embodiment, after the association between the specific wireless terminal and the wireless connection device, unless the second start instruction using the association between the specific wireless terminal and the wireless connection device is used, The setting process cannot be started. As a result, in the wireless connection device capable of setting wireless communication to the wireless terminal in response to the first start instruction (predetermined start instruction), security in setting processing can be improved.

(2) In the wireless connection device of the above aspect; the second start instruction may be an instruction using a method different from the method used in the first start instruction. According to the wireless connection device of this aspect, since the second start instruction is an instruction using a method different from the method used in the first start instruction, security in setting processing is further improved. Can do.

(3) In the wireless connection device of the above embodiment; the second start instruction includes the first start instruction and an instruction using a method different from the method used in the first start instruction; A combination of these may be used. According to the wireless connection device of this aspect, the second start instruction is a combination of the first start instruction and an instruction using a method different from the method used in the first start instruction. Security in setting processing can be further improved.

(4) In the wireless connection device of the above aspect; the association may be to store information on the specific wireless terminal in the wireless connection device. According to the wireless connection device of this aspect, the control unit can associate the specific wireless terminal and the wireless connection device by storing information on the specific wireless terminal in the wireless connection device.

(5) In the wireless connection device of the above aspect; the second start instruction using the association may be an instruction including information on the specific wireless terminal stored in the wireless connection device. According to the wireless connection device of this aspect, the second start instruction using the association is an instruction including information on a specific wireless terminal stored in the wireless connection device. For this reason, other wireless terminals other than the specific wireless terminal associated with the wireless connection device by storing information in the wireless connection device in advance, for example, a malicious third party wireless terminal, The second start instruction cannot be given. As a result, in the wireless connection device capable of setting wireless communication to the wireless terminal in response to the first start instruction (predetermined start instruction), security in the setting process can be further improved.

(6) In the wireless connection device of the above aspect; the association may be notification of identification information necessary for authentication by the wireless connection device to the specific wireless terminal. According to the wireless connection device of this aspect, the control unit can associate the specific wireless terminal and the wireless connection device by notifying the specific wireless terminal of identification information necessary for authentication by the wireless connection device.

(7) In the wireless connection device of the above aspect; the second start instruction using the association may be an instruction including the notified identification information. According to the wireless connection device of this aspect, the second start instruction using the association is an instruction including the notified identification information. For this reason, other wireless terminals other than the specific wireless terminal associated with the wireless connection apparatus by being notified of the identification information in advance, for example, a malicious third party wireless terminal, Cannot give start instructions. As a result, in the wireless connection device capable of setting wireless communication to the wireless terminal in response to the first start instruction (predetermined start instruction), security in the setting process can be further improved.

(8) In the wireless connection device according to the above aspect, the control unit further alerts a user of the wireless connection device when the first start instruction is issued after the association. Guidance may be provided. According to the wireless connection device of this aspect, the control unit performs guidance for calling attention to the user of the wireless connection device when there is a first start instruction after the association. Accordingly, the user of the wireless connection apparatus can know that the setting process cannot be executed unless the second start instruction is followed.

(9) In the wireless connection device of the above aspect, the control unit further permits the specific wireless terminal to start the setting process when there is the first start instruction after the association Inquiry about whether or not to perform; the setting process may be started according to the result of the inquiry. According to the wireless connection device of this aspect, the control unit inquires whether or not to allow the specific wireless terminal to start the setting process when there is a first start instruction after the association, and as a result The setting process can be started according to the above. As a result, after the association, other start means other than the second start instruction can be provided.

  A plurality of constituent elements of each embodiment of the present invention described above are not essential, and some or all of the effects described in the present specification are to be solved to solve part or all of the above-described problems. In order to achieve the above, it is possible to appropriately change, delete, replace with a new component, and partially delete the limited contents of some of the plurality of components. In order to solve some or all of the above-described problems or achieve some or all of the effects described in this specification, technical features included in one embodiment of the present invention described above. A part or all of the technical features included in the other aspects of the present invention described above may be combined to form an independent form of the present invention.

  For example, one aspect of the present invention includes a part or all of the four elements of the setting processing unit, the first start instruction unit, the control unit, and the second start instruction unit. It is feasible as a method. Such a device can be realized as a wireless connection device, for example, but can also be realized as a device other than the wireless connection device. Any or all of the technical features of each form of the wireless connection device described above can be applied to this device.

  The present invention can also be realized in various forms other than the wireless connection device. For example, the present invention is realized in the form of a method for setting wireless communication, a network system including a wireless connection device, a computer program for realizing part or all of these methods, a non-temporary recording medium on which the computer program is recorded, and the like. Can do.

It is explanatory drawing which shows schematic structure of the network system as one Embodiment of this invention. It is a block diagram which shows the structure of AP and a smart phone functionally. It is a flowchart which shows the procedure of an initial process. It is a flowchart which shows the procedure of a setting start process. It is a block diagram which shows functionally the composition of AP and a smart phone in a 2nd embodiment. It is a flowchart which shows the procedure of the initial process in 2nd Embodiment. It is a flowchart which shows the procedure of the setting start process of 2nd Embodiment. It is a flowchart which shows a part of process procedure performed in the setting start process of 3rd Embodiment.

  Next, an embodiment of the present invention will be described based on the embodiment.

A. First embodiment:
A-1. System outline:
FIG. 1 is an explanatory diagram showing a schematic configuration of a network system as an embodiment of the present invention. The network system 1 includes a wireless connection device 10 and a wireless terminal 20. In FIG. 1, for convenience, other network relay devices, lines, terminals, and the like that are not necessary for explanation are not shown. The wireless connection device 10 is an access point device compliant with IEEE 802.11. Hereinafter, the wireless connection device 10 is also referred to as “AP10”. The wireless terminal 20 is a portable terminal provided with a wireless communication interface compliant with IEEE 802.11. Hereinafter, the wireless terminal 20 is also referred to as “smart phone 20”.

  The AP 10 also functions as a router and is connected to the Internet INT via a wired cable. The AP 10 has conventionally known AOSS (AirStation One-Touch Secure System, AOSS is a registered trademark) and WPS (Wi-Fi Protected Setup) as functions for automatically setting wireless communication setting information to a wireless communication client. Is supported. The setting information regarding wireless communication includes communication information and encryption information. “Communication information” means SSID (Service Set Identifier), BSSID (Basic Service Set Identifier), ESSID (Extended Service Set Identifier), etc. for avoiding radio LAN (Local Area Network) interference. “Encryption information” refers to encryption such as WEP (Wired Equivalent Privacy), WPA (Wi-Fi Protected Access), WPA2-PSK (Wi-Fi Protected Access 2 Pre-Shared Key), etc., for encrypting wireless communication. Means the encryption method and the key used for encryption.

  The above-described AOSS or WPS is started when the AP 10 detects that the setting button 120 is pressed. For this reason, the user of the smartphone 20 can set the wireless communication between the AP 10 and the smartphone 20 by using the AOSS or WPS of the AP 10 by pressing the setting button 120 provided on the AP 10. it can. In such a case, conventionally, even when the setting button 120 of the AP 10 is pressed by a malicious third party, wireless communication between the AP 10 and the third-party smartphone 30 is set. There was a problem. The AP 10 according to the present embodiment performs the above-described problem, that is, the occurrence of the problem that the wireless communication between the third-party smartphone 30 and the AP 10 is set by executing the setting start process described below. Can be suppressed.

A-2. AP schematic configuration:
FIG. 2 is a block diagram functionally showing the configuration of the AP 10 and the smartphone 20. FIG. 2A shows the configuration of the AP 10. The AP 10 includes a CPU 110, a setting button 120, a RAM 130, a wireless communication interface 140 (I / F), a wired communication interface (I / F) 150, a flash ROM 160, an NFC (Near Field Communication) interface (I / F). F) 170, and each component is connected to each other by a bus.

  The CPU 110 controls the AP 10 by expanding and executing a computer program stored in the flash ROM 160 on the RAM 130. In addition, the CPU 110 implements the functions of the relay processing unit 111, the setting processing unit 112, the control unit 113, the first start instruction unit 114, and the second start instruction unit 115.

  The relay processing unit 111 executes relay processing for transferring the packet received by the AP 10 according to the destination.

The setting processing unit 112 implements one of the AOSS function and the WPS function by executing the following processes a1 to a3. Hereinafter, AOSS and WPS are also collectively referred to as “setting process”.
(A1) The setting processing unit 112 establishes temporary wireless communication with a device as a client (hereinafter also referred to as “client device”).
(A2) The setting processing unit 112 transmits the setting information regarding the wireless communication stored in the setting information 161 to the client device via the established temporary wireless communication.
(A3) The setting processing unit 112 sets the wireless communication for the client device by storing the setting information regarding the wireless communication received by the client device.

  The control unit 113 executes setting start processing. The setting start process is a process for starting the setting process by the setting processing unit 112. In the setting start process, the control unit 113 associates the specific wireless terminal with the AP 10 and suppresses the operation of the first start instruction unit 114 after the association is established. Here, the “specific wireless terminal” is intended to be a wireless terminal of the administrator of the AP 10, and is assumed to be, for example, the smartphone 20 (FIG. 1) in the present embodiment.

  The first start instruction unit 114 causes the setting processing unit 112 to start setting processing in response to the first start instruction. The second start instruction unit 115 causes the setting processing unit 112 to start setting processing in response to the second start instruction. In the present embodiment, the “first start instruction” is detection of pressing of the setting button 120. In the present embodiment, the “second start instruction” is a start instruction using the association between a specific wireless terminal and the AP 10, and specifically, a specific wireless terminal stored in the AP 10, that is, The start instruction includes information for identifying the smartphone 20 that is the wireless terminal of the administrator.

  The “first start instruction” can be arbitrarily determined. For example, an instruction given in a form in which an information code provided by the wireless connection device is photographed by a camera built in the wireless terminal may be employed. Specifically, for example, an instruction given in the form of photographing an information code such as a QR code (registered trademark), a barcode, or a hologram may be adopted. Furthermore, an instruction given using infrared communication may be adopted, or an instruction given using a GUI (Graphical User Interface) of a wireless connection device or a wireless terminal may be adopted.

  Similarly, the “second start instruction” can be arbitrarily determined as long as it is an instruction different from the first start instruction. Here, “different instruction” means i) an instruction that uses a method different from the method used in the first start instruction, and ii) a first start instruction that is used in the first start instruction. It means to include both an instruction composed of a combination with an instruction using a method different from the method being used. Here, “different schemes” mean different implementation methods. For example, when the hardware to be used is different, the system is different. Moreover, even if it is the same near field communication, it is a different system as long as it conforms to a different protocol. As a specific example of the second instruction, for example, an instruction given in the form of photographing the above-described information code, an instruction given using infrared communication, an instruction given using a GUI may be used, An instruction given using Bluetooth (registered trademark) or an instruction given via a USB (Universal Serial Bus) bus connection may be used. Also, a combination of these instructions may be used.

  As a modification of the combination of the first start instruction and the second start instruction, for example, the following modes can be adopted. A mode in which a disclosure instruction using Bluetooth is adopted as the first start instruction, and a disclosure instruction using NFC is adopted as the second start instruction. A mode in which detection of pressing of the setting button 120 is adopted as the first start instruction, and a combination of detection of pressing of the setting button 120 and disclosure instruction using NFC is adopted as the second start instruction. A mode in which detection of pressing of the setting button 120 is adopted as the first start instruction, and a combination of a disclosure instruction using NFC and an instruction given through the USB bus connection is adopted as the second start instruction. An aspect in which an instruction given in the form of photographing a QR code is adopted as the first start instruction, and a disclosure instruction using NFC is adopted as the second start instruction.

  The setting button 120 is a switch provided on the housing of the AP 10. The wireless communication interface 140 includes a transmission / reception circuit, and performs demodulation and generation of data received via the antenna, and generation and modulation of radio wave transmitted via the antenna. The wired communication interface 150 is connected to a line on the Internet INT (FIG. 1) side, and is connected to another device (for example, NAS or personal computer) in the LAN through a wired cable. The wired communication interface 150 includes a PHY / MAC controller, adjusts the waveform of the received signal, and extracts a MAC frame from the received signal.

  The flash ROM 160 includes setting information 161 and an administrator information storage area 162. The setting information 161 stores setting information related to wireless communication. The administrator information storage area 162 is an area for storing information acquired by the AP 10 from the smartphone 20 in the setting start process, in other words, information on a specific wireless terminal.

  The NFC interface 170 is a short-range wireless communication interface compliant with ISO / IEC14443 and ISO / IEC18092. NFC is a short-range wireless communication in which a communicable distance is limited to about 10 cm, and wireless communication is possible even in a non-contact state between communication devices having an NFC interface. Also called wireless communication. The NFC interface 170 includes an NFC reader / writer and an antenna, and reads and writes information to and from an adjacent IC chip using radio waves transmitted and received via the antenna.

A-3. Smart phone configuration:
FIG. 2B shows the configuration of the smartphone 20. The smartphone 20 includes a CPU 210, a ROM 220, a RAM 230, a wireless communication interface (I / F) 240, a mobile communication network communication interface (I / F) 250, a touch panel 260, a voice communication unit 270, and an NFC tag. 280, and each component is connected to each other by a bus.

  The CPU 210 controls the smartphone 20 by developing and executing a computer program stored in the ROM 220 on the RAM 230. In addition, the CPU 210 realizes the function of the WEB browser 211. The WEB browser 211 is a computer program used for browsing content acquired from the WWW (World Wide Web) based on, for example, a data transfer protocol such as HTTP (HyperText Transfer Protocol).

  The wireless communication interface 240 includes a transmission / reception circuit, and performs demodulation and generation of radio waves received via the antenna, and generation and modulation of radio waves transmitted via the antenna. The mobile communication network communication interface 250 includes an antenna and a transmission / reception circuit. For example, the mobile communication network communication interface 250 performs data communication and voice communication with a communication carrier by a mobile communication system compliant with WiMAX / 3G / LTE.

  The touch panel 260 has a structure in which a display unit such as a liquid crystal screen and an input information acquisition unit such as a colorless and transparent touch pad are stacked. When the user of the smartphone 20 presses a GUI (Graphical User Interface) such as an icon displayed on the liquid crystal screen with a finger, the touch pad detects an input (for example, pressing) to a position where the icon is displayed. Then, an electric signal indicating the detected position is transmitted to the CPU 210.

  Audio communication unit 270 includes a speaker for outputting audio, a microphone for inputting audio, a circuit for driving these, and the like. The smartphone 20 also operates as a telephone by including the mobile communication network communication interface 250 and the voice communication unit 270.

  The NFC tag 280 includes an IC chip, and information can be recorded in the IC chip. Tag information 281 is information stored in the IC chip. The tag information 281 can be read and written by a device having an NFC reader / writer. In the present embodiment, the tag information 281 stores information for identifying the smartphone 20 in advance. The information for identifying the smartphone 20 is not particularly limited. For example, the MAC address or UUID (Universally Unique Identifier) of the smartphone 20 or the MAC address or UUID of a device included in the smartphone 20 can be adopted. .

  Note that the configuration of the smartphone 30 is substantially the same as that of the smartphone 20 illustrated in FIG. However, the tag information 281 of the smartphone 30 stores a blank value or a value different from the tag information 281 of the smartphone 20.

A-4. Setting start processing:
A procedure of setting start processing by the AP 10 of this embodiment will be described. The setting start process is a process for starting the setting process (AOSS or WPS) by the setting processing unit 112. The setting start process described below is started on the assumption that the setting of wireless communication between the AP 10 and the smartphone 20 has been completed for the administrator's wireless terminal, in the present embodiment, the smartphone 20. Therefore, the setting process (AOSS or WPS) that has undergone the subsequent setting start process is performed on wireless terminals other than the smartphone 20. The setting process for the smartphone 20 that is the administrator's wireless terminal is started with a first start instruction (that is, detection of pressing of the setting button 120) as a trigger. The setting start process includes a setting start process and an initial process executed before the setting start process.

A-4-1. Initial processing:
FIG. 3 is a flowchart showing the procedure of the initial process. In step S <b> 102, the control unit 113 determines whether or not an instruction to register information on the wireless terminal of the administrator with the AP 10 (hereinafter also referred to as “registration instruction”) has been acquired. In the present embodiment, the registration instruction is given via the setting screen of the AP 10 provided by means such as HTTP. The registration instruction can be arbitrarily determined. For example, the button provided on the AP 10 can be pressed, or an instruction using short-range wireless communication or voice can be used. When the registration instruction has not been acquired (step S102: NO), the control unit 113 shifts the process to step S102 and waits for the acquisition of the registration instruction.

  When the registration instruction is acquired (step S102: YES), in step S104, the NFC interface 170 detects a touch of the NFC tag 280 of the smartphone 20. In step S104, it may be detected that the NFC tag 280 of the smartphone 20 is within the readable range of the NFC reader of the NFC interface 170 instead of detecting the touch.

  In step S <b> 106, the NFC interface 170 reads the tag information 281 of the NFC tag 280 and acquires information for identifying the smartphone 20 stored in the tag information 281.

  In step S <b> 108, the control unit 113 acquires information for identifying the smartphone 20 from the NFC interface 170, and stores the acquired information in the administrator information storage area 162 as “manager information”.

  If it does in this way, the control part 113 will show the information of the smart phone 20 (specific radio | wireless terminal), specifically, the information for identifying the smart phone 20, administrator information storage area 162 of AP10 (wireless connection apparatus). The smartphone 20 and the AP 10 can be associated with each other by storing them in. Through this initial process, the smartphone 20 is associated with the AP 10 as the administrator's wireless terminal.

A-4-2. Setting start processing:
FIG. 4 is a flowchart showing the procedure of the setting start process. In step S202, the control unit 113 determines whether or not the first start instruction has been acquired, specifically, whether or not the pressing of the setting button 120 of the AP 10 is detected.

  When pressing of the setting button 120 (first start instruction) is detected (step S202: YES), in step S204, the control unit 113 refers to the administrator information storage area 162 of the AP 10 and manages the administrator information (the smartphone 20). It is determined whether or not (information for identification) is stored. When the administrator information is not stored (step S204: NO), in step S206, the first start instruction unit 114 causes the setting processing unit 112 to perform setting processing (AOSS or WPS).

  When the administrator information is stored (step S204: YES), in step S208, the control unit 113 provides guidance for calling attention to the user of the AP 10. The control unit 113 can realize guidance to the user using various methods. For example, the control unit 113 turns on or blinks the indicator of the AP 10, displays a warning message on the display unit (liquid crystal screen or the like) of the AP 10, sounds a warning sound, and alerts a predetermined e-mail address The message can be alerted using a method such as sending a message.

  On the other hand, when pressing of the setting button 120 (first start instruction) is not detected in step S202 (step S202: NO), in step S210, the control unit 113 indicates that the NFC interface 170 is a wireless terminal (the smartphone 20 or the smartphone 30). It is determined whether or not a touch of the NFC tag 280 is detected. In step S210, instead of detecting touch, it may be detected that the NFC tag 280 of the wireless terminal is within the readable range of the NFC reader of the NFC interface 170. When the touch of the NFC tag 280 is not detected (step S210: NO), the control unit 113 ends the setting start process.

  When the touch of the NFC tag 280 is detected (step S210: YES), in step S212, the NFC interface 170 reads the tag information 281 of the NFC tag 280, and information for identifying the wireless terminal stored in the tag information 281. To get.

  In step S214, the control unit 113 acquires information for identifying the wireless terminal stored in the tag information 281 from the NFC interface 170, and the acquired information is stored in the administrator information storage area 162. It is determined whether or not it matches. If they do not match (step S214: NO), the control unit 113 ends the setting start process. At this time, the control unit 113 may issue a warning that the tag information does not match. For the warning, the same method as in step S208 can be used.

  If they match (step S214: YES), in step S216, the second start instruction unit 115 causes the setting processing unit 112 to perform setting processing (AOSS or WPS).

  Thus, according to the setting start process of the first embodiment, the control unit 113 more specifically associates the smartphone 20 with the association between the smartphone 20 (specific wireless terminal) and the AP 10 (wireless connection device). Depending on the presence or absence of association with the AP 10 (step S204), the start of the setting process (AOSS, WPS) by the first start instruction unit 114 is suppressed. Therefore, after the association between the smartphone 20 and the AP 10, in other words, after the completion of the initial process shown in FIG. 3, the setting process corresponding to the detection of the pressing of the setting button 120 of the AP 10 (first start instruction) is performed. Start is suppressed. Further, the second start instruction unit 115 is different from the detection of the pressing of the setting button 120 (first start instruction), and is a second start instruction using the association between the smartphone 20 and the AP 10, that is, NFC. The setting process is started according to the detection of the touch of the tag 280 and the coincidence between the tag information 281 and the administrator information. That is, according to this form of AP10, after the association between the smartphone 20 and the AP10, the second start instruction using the association between the smartphone 20 and the AP10, that is, the detection of the touch of the NFC tag 280 and the tag information 281 The setting process cannot be started unless the administrator information matches. As a result, the security in the setting process can be improved in the AP 10 that can set the wireless communication to the wireless terminal according to the detection of the pressing of the setting button 120 (first start instruction, predetermined start instruction).

  In addition, as described above, the second start instruction using the association between the smartphone 20 and the AP 10 is a specific wireless terminal stored in the AP 10 (wireless connection device), that is, the smartphone that is the administrator's wireless terminal. 20 is an instruction including information for identifying 20. For this reason, information (information for identifying the smartphone 20) is stored in advance in the administrator information storage area 162 of the AP 10 through the initial processing illustrated in FIG. Another wireless terminal, for example, a malicious third-party wireless terminal (smartphone 30) cannot give the AP 10 a second start instruction. As a result, the security in the setting process can be further improved in the AP 10 that can set the wireless communication to the wireless terminal in response to the detection of the pressing of the setting button 120 (first start instruction, predetermined start instruction). .

  Furthermore, the first start instruction is detection of pressing of the setting button 120 of the AP 10, and the second start instruction is detection of touch of the NFC tag 280 and coincidence of the tag information 281 with the administrator information. As described above, since the second start instruction is an instruction using a method different from the method used in the first start instruction, security in the setting process can be further improved. Further, according to step S208 of the setting start process, the user of AP 10 can know that the setting process cannot be executed unless the second start instruction is used.

B. Second embodiment:
In the second embodiment of the present invention, a configuration that adopts a “second start instruction” different from the first embodiment will be described. Below, only the part which has a different structure and operation | movement from 1st Embodiment is demonstrated. In the figure, the same components as those of the first embodiment are denoted by the same reference numerals as those of the first embodiment described above, and detailed description thereof is omitted.

B-1. System outline:
The schematic configuration of the network system in the second embodiment is the same as that of the first embodiment shown in FIG. However, in the second embodiment, an AP 10a is provided instead of the AP 10.

B-2. AP schematic configuration:
FIG. 5 is a block diagram functionally showing the configuration of the AP 10a and the smartphone 20a in the second embodiment. FIG. 5A shows the configuration of the AP 10a. A difference from the first embodiment shown in FIG. 2A is that a CPU 110 a is provided instead of the CPU 110 and a flash ROM 160 a is provided instead of the flash ROM 160.

  The CPU 110a includes a control unit 113a instead of the control unit 113. The control unit 113a differs from the first embodiment in the processing content in the setting start processing.

  The flash ROM 160a includes identification information 163 instead of the administrator information storage area 162. In the identification information 163, information for identifying the administrator of the AP 10a (hereinafter also referred to as “identification information”) is stored in advance. The identification information 163 is used for authentication in the setting start process. Arbitrary information can be adopted as the identification information. For example, it is a part or all of the PIN number described on the ID card attached (included or described in the product package) at the time of selling the AP 10a. May be. The PIN number is a character string indicating a personal identification number used for determining that the user is an authorized user of the AP 10a.

B-3. Smart phone configuration:
FIG. 5B shows the configuration of the smartphone 20. The schematic configuration of the smartphones 20 and 30 is the same as that of the first embodiment shown in FIG.

B-4. Setting start processing:
Similar to the first embodiment, the setting start process of the second embodiment is a process for starting the setting process (AOSS or WPS) by the setting processing unit 112, and is an administrator's wireless terminal, which is a smartphone in the present embodiment. 20, it is assumed that the setting of wireless communication between the AP 10a and the smartphone 20 has been completed. The setting start process of the second embodiment includes a setting start process and an initial process executed before the setting start process.

B-4-1. Initial processing:
FIG. 6 is a flowchart showing a procedure of initial processing in the second embodiment. In step S302, the control unit 113a determines whether or not an instruction for requesting issuance of information (identification information) for identifying the administrator of the AP 10a (hereinafter also referred to as “issue instruction”) has been acquired. The issuing instruction can be realized by the same means as in step S102 of FIG. When the issue instruction has not been acquired (step S302: NO), the control unit 113a shifts the process to step S302 and waits for the issue instruction.

  When the issuance instruction is acquired (step S302: YES), in step S304, the NFC interface 170 detects a touch of the NFC tag 280 of the smartphone 20. In step S304, instead of detecting touch, it may be detected that the NFC tag 280 of the smartphone 20 is within the readable range of the NFC reader of the NFC interface 170.

  In step S306, the control unit 113a acquires the identification information stored in the identification information 163 of the flash ROM 160a. In addition, the control unit 113a adds information indicating that the acquisition of the identification information is completed to the identification information 163.

  In step S308, the control unit 113a transmits the identification information acquired in step S306 to the smartphone 20. The control unit 113a can transmit the identification information to the smartphone 20 using various methods. For example, the control unit 113a may transmit the identification information in such a manner that the user can browse the identification information with the WEB browser 211 of the smartphone 20. In this case, if HTTP is used for the registration instruction in step S302, the identification information can be transmitted to the smartphone 20 as a response to the registration instruction in step S302. Further, the control unit 113a may transmit identification information to a predetermined mail address. In this case, the mail address that is the transmission destination of the identification information may be acquired via the NFC interface 170 in step S304.

  If it does in this way, the control part 113a can associate the smart phone 20 and AP10a by notifying the smart phone 20 (specific radio | wireless terminal) the identification information 163 required for the authentication by AP10a (wireless connection apparatus). . Through this initial process, the smartphone 20 is associated with the AP 10a as the administrator's wireless terminal.

B-4-2. Setting start processing:
FIG. 7 is a flowchart illustrating a procedure of setting start processing according to the second embodiment. The difference from the first embodiment shown in FIG. 4 is that step S402 is provided instead of step S204, and steps S404 to S408 are provided instead of steps S212 and S214.

  When pressing of the setting button 120 (first start instruction) is detected in step S202 (step S202: YES), in step S402, the control unit 113a determines whether the identification information has been issued. Specifically, the control unit 113a refers to whether or not information indicating that the acquisition of the identification information is completed is stored in the identification information 163. When information indicating that the acquisition of the identification information is completed is stored, the control unit 113a determines that the identification information has been issued. If the identification information has not been issued (step S402: NO), in step S206, the first start instruction unit 114 causes the setting processing unit 112 to perform setting processing (AOSS or WPS).

  When the identification information has been issued (step S402: YES), in step S208, the control unit 113a alerts the user of the AP 10a. Details are the same as in the first embodiment.

  When pressing of the setting button 120 (first start instruction) is not detected in step S202 (step S202: NO), in step S210, the control unit 113a determines that the NFC interface 170 is an NFC tag of the wireless terminal (the smartphone 20 or the smartphone 30). It is determined whether or not a 280 touch is detected. Details are the same as in the first embodiment. When the touch of the NFC tag 280 is not detected (step S210: NO), the control unit 113a ends the setting start process.

  When the touch of the NFC tag 280 is detected (step S210: YES), in step S404, the control unit 113a transmits a request for identification information to the administrator's wireless terminal. Specifically, for example, the control unit 113a uses a method similar to step S308 in the initial process (FIG. 7) to request identification information from the wireless terminal of the administrator, in this embodiment, the smartphone 20. Send.

  In step S406, the control unit 113a acquires identification information from the administrator's wireless terminal. Specifically, for example, the control unit 113a acquires identification information transmitted as a response in step S404 from the administrator's wireless terminal, in the present embodiment, the smartphone 20.

  In step S408, the control unit 113a determines whether or not the identification information acquired in step S406 matches the identification information stored in the identification information 163 of the flash ROM 160. If they do not match (step S408: NO), the control unit 113a ends the setting start process. At this time, the control unit 113a may issue a warning that the identification information does not match. For the warning, the same method as in step S208 can be used.

  If they match (step S408: YES), in step S216, the second start instruction unit 115 causes the setting processing unit 112 to perform setting processing (AOSS or WPS).

  As described above, according to the setting start process of the second embodiment, the control unit 113a more specifically associates the smartphone 20 with the association between the smartphone 20 (specific wireless terminal) and the AP 10a (wireless connection device). Depending on the presence / absence of association with the AP 10a (step S402), the start of the setting process (AOSS, WPS) by the first start instruction unit 114 is suppressed. Therefore, after the association between the smartphone 20 and the AP 10a, in other words, after the completion of the initial process shown in FIG. 6, the setting process corresponding to the detection of the pressing of the setting button 120 (first start instruction) of the AP 10a is performed. Start is suppressed. Further, the second start instruction unit 115 is different from the detection of the pressing of the setting button 120 (first start instruction), and is a second start instruction using association between the smartphone 20 and the AP 10, that is, management. The setting process is started in accordance with the coincidence between the identification information issued to the smartphone 20 that is the person's wireless terminal and the identification information 163. That is, according to the AP 10a of this form, after the association between the smartphone 20 and the AP 10a, the second start instruction using the association between the smartphone 20 and the AP 10a, that is, the identification information and the identification information 163 issued to the smartphone 20 Unless it matches, the setting process cannot be started. As a result, according to the setting start process of the second embodiment, in the AP 10a capable of setting wireless communication to the wireless terminal in response to detection of pressing of the setting button 120 (first start instruction, predetermined start instruction). , Security in the setting process can be improved.

  Moreover, the 2nd start instruction | indication using the correlation with the smart phone 20 and AP10a is an instruction | indication including the identification information notified to the smart phone 20 which is an administrator's radio | wireless terminal as above-mentioned. For this reason, the identification information is notified in advance through the initial processing shown in FIG. 6, so that other wireless terminals other than the smartphone 20 (specific wireless terminal) associated with the AP 10a (wireless connection apparatus), for example, malicious A third-party wireless terminal (smart phone 30) cannot give the second start instruction to the AP 10a. As a result, in the AP 10a capable of setting wireless communication to the wireless terminal in response to detection of pressing of the setting button 120 (first start instruction, predetermined start instruction), security in setting processing can be further improved. it can.

C. Third embodiment:
In the third embodiment of the present invention, a modification in the setting start process of the first embodiment or the second embodiment will be described. Below, only the part which has a different structure and operation | movement from 1st Embodiment or 2nd Embodiment is demonstrated.

  FIG. 8 is a flowchart illustrating a part of a procedure of processing executed in the setting start processing of the third embodiment. In the setting start process of the third embodiment, instead of step S208 of the setting start process (FIG. 4) of the first embodiment or step S208 of the setting start process (FIG. 7) of the second embodiment, FIG. Perform the process described.

  In step S <b> 502, the control unit 113 transmits an inquiry (hereinafter, also referred to as “execution confirmation”) as to whether or not the administrator's wireless terminal is permitted to execute the setting process. Specifically, for example, the control unit 113 uses a method similar to step S308 in the initial process (FIG. 7) to request identification information from the administrator's wireless terminal, in this embodiment, the smartphone 20. Send.

  In step S504, the control unit 113 acquires the result of the execution confirmation from the administrator's wireless terminal. Specifically, for example, the control unit 113 acquires information transmitted as a response in step S502 from the administrator's wireless terminal, which is the smartphone 20 in this embodiment.

  In step S506, the control unit 113 determines whether the result of the execution confirmation is permitted or not. Specifically, the control unit 113 determines that the result of the implementation confirmation is “permitted” when the information acquired in step S504 is “permitted”, and in other cases, the implementation is performed. The result of the confirmation is determined as “not permitted”.

  When the result of the execution confirmation is “permitted” (step S506: permitted), in step S508, the control unit 113 causes the setting processing unit 112 to perform setting processing (AOSS or WPS). When the result of the execution confirmation is “non-permitted” (step S506: non-permitted), in step S510, the control unit 113 provides guidance for calling attention to the user of the AP 10. Details are the same as step S208 of the setting start process (FIG. 4) of the first embodiment.

  As described above, according to the setting start process of the third embodiment, the control unit 113 detects that the setting button 120 is pressed after the association between the smartphone 20 (specific wireless terminal) and the AP 10 (wireless connection device) (first operation). 1), the smart phone 20 (specific wireless terminal) is inquired whether to allow the start of setting processing (AOSS, WPS), and the setting processing is started according to the result. be able to. As a result, after the association, the second start instruction (detection of touch of NFC tag 280 and matching of tag information 281 and administrator information, or identification information and identification information issued to smartphone 20 which is the administrator's wireless terminal) Other starting means can be provided.

D. Variations:
In the above embodiment, a part of the configuration realized by hardware may be replaced by software, and conversely, a part of the configuration realized by software may be replaced by hardware. Good. In addition, the following modifications are possible.

・ Modification 1:
In the above embodiment, an example of a network system has been described. However, the configuration of the network system in the above embodiment is merely an example, and various modifications can be made. For example, the deformation | transformation which abbreviate | omits a part of component, adds a further component, or changes a part of component is possible.

  For example, network systems include, for example, network communication devices such as routers, switches, modems, and hubs, mobile devices such as personal computers, mobile phones, and PDAs (Personal Digital Assistants), digital cameras, printers, network displays, scanners, and the like. Image input / output devices, audio / TV and other AV devices, refrigerators, air conditioners, television and other home appliances, and other devices such as NAS (Network Attached Storage).

Modification 2
In the above embodiment, an example of the configuration of the wireless connection device and the wireless terminal is given. However, the structure in the said embodiment is an example to the last, and various changes are possible. For example, the deformation | transformation which abbreviate | omits a part of component, adds a further component, or changes a part of component is possible.

  For example, the wireless connection device may not have a function as a router. For example, in a wireless connection device, a wired communication interface or an NFC interface may be omitted.

  For example, in the wireless connection device, the flash ROM may be composed of different storage media. For example, the wireless connection device may include a removable storage medium such as a USB memory or a USB hard disk instead of the flash ROM. For example, the information described as being stored in the flash ROM in the above embodiment may be distributed and stored in a plurality of storage media.

  For example, the wireless terminal may include an NFC reader / writer in addition to the NFC tag.

・ Modification 3:
In the said embodiment, an example of the initial process and the setting start process was shown. However, the processing procedure in the above embodiment is merely an example, and various modifications are possible. For example, some steps may be omitted, and other steps may be added. Further, the order of the steps to be executed may be changed.

  For example, the initial process may be omitted. In this case, for example, when the setting process by AOSS or WPS is performed on the administrator's wireless terminal, the control unit reads the tag information of the nearby administrator's wireless terminal and stores it in the administrator information storage area. May be. For reading the tag information, for example, near field communication can be used. Further, for example, when the setting process by AOSS or WPS is performed on the administrator's wireless terminal, the control unit may read the identification information of the administrator's wireless terminal and store it in the administrator information storage area. Good. The identification information can be read using, for example, short-range wireless communication or wireless communication. As the identification information of the administrator's wireless terminal, arbitrary information can be used as long as the administrator's wireless terminal can be identified.

  For example, in the initial processing and setting start processing in the above embodiment, specifically, in step S104 in FIG. 3, step S210 in FIG. 4, and step S304 in FIG. 6, the NFC tag of the wireless terminal is the NFC reader of the wireless connection device. It may be detected that it is within the readable range. However, when using a device other than NFC, the communication device on the wireless connection device side may detect the communication device on the wireless terminal side in each step described above.

  For example, in the setting start process of the above-described embodiment, information on the person who gave the first start instruction not intended (specifically, the person who pressed the setting button) is notified at the time of alerting in step S208. Also good. For the notification, for example, a method of displaying the person's image on the display unit, attaching a mail, or the like can be employed. In addition, the wireless connection device may include a camera in order to capture an image of a person. In this way, the administrator of the wireless connection apparatus can easily identify the person who has given the unintended first start instruction.

  For example, in the setting start process of the first embodiment, the processes in steps S202 to S206 in FIG. 4 and the processes in steps S210 to S216 in FIG. 4 may be executed in parallel. Similarly, in the setting process of the second embodiment, steps S202 to S206 in FIG. 7 and steps S210 to S216 in FIG. 7 may be executed in parallel.

  For example, HTTP is used as an example of a data transfer protocol in the initial process and the setting start process in the above embodiment. However, as the data transfer protocol, any protocol can be used as long as it is a client-server protocol that can transmit and receive information by using a loopback address in a communication protocol such as TCP / IP. For example, HTTP, Secure HyperText Transfer Protocol (HTTPS), File Transfer Protocol (FTP), or the like can be used. Also, HTTP, HTTPS, and FTP are merely examples, and are not limited to these protocols, and information may be transmitted and received using a dedicated application.

  For example, in the initial processing and setting start processing of the second embodiment, transmission / reception of identification information via HTTP or mail is exemplified as an example of means for the control unit to exchange identification information with the administrator's wireless terminal. However, the control unit may exchange identification information with the administrator by other methods. For example, the control unit displays the identification information on the display unit (liquid crystal screen or the like) of the wireless connection device and acquires the identification information from the input unit (touch pad or alphanumeric input button) of the wireless connection device. The identification information may be exchanged with the person.

-Modification 4:
The present invention is not limited to the above-described embodiments, examples, and modifications, and can be realized with various configurations without departing from the spirit thereof. For example, the technical features in the embodiments, examples, and modifications corresponding to the technical features in each embodiment described in the summary section of the invention are to solve some or all of the above-described problems, or In order to achieve part or all of the above-described effects, replacement or combination can be performed as appropriate. Further, if the technical feature is not described as essential in the present specification, it can be deleted as appropriate.

    DESCRIPTION OF SYMBOLS 10 ... Wireless connection apparatus (AP), 20 ... Wireless terminal (smartphone), 30 ... Wireless terminal (smartphone), 110, 110a ... CPU, 111 ... Relay processing part, 112 ... Setting processing part, 113, 113a ... Control part, 114: First start instruction unit, 115: Second start instruction unit, 120: Setting button, 140: Wireless communication interface, 150: Wired communication interface, 161 ... Setting information, 162 ... Administrator information storage area, 163 ... Identification information 170 ... NFC interface 210 ... CPU 240 ... wireless communication interface 250 ... mobile communication network communication interface 260 ... touch panel 270 ... voice communication unit 280 ... NFC tag 281 ... tag information 160 ... flash ROM, INT ... Internet

Claims (10)

A wireless connection device,
A setting processing unit for executing wireless communication setting processing for a wireless terminal connected as a wireless communication client to the wireless connection device;
A first start instruction unit for starting the setting process in response to a first start instruction;
A control unit that associates a specific wireless terminal with the wireless connection device and suppresses the start of the setting process by the first start instruction unit after the association;
A second start instruction that is different from the first start instruction, and that starts the setting process in response to a second start instruction using the association;
A wireless connection device. The wireless connection device according to claim 1,
The wireless connection device, wherein the second start instruction is an instruction using a method different from the method used in the first start instruction. The wireless connection device according to claim 1,
The wireless connection device, wherein the second start instruction is a combination of the first start instruction and an instruction using a method different from the method used in the first start instruction. The wireless connection device according to any one of claims 1 to 3,
The association is a wireless connection device that stores information on the specific wireless terminal in the wireless connection device. The wireless connection device according to claim 4,
The second start instruction using the association is an instruction including information on the specific wireless terminal stored in the wireless connection apparatus. The wireless connection device according to any one of claims 1 to 3,
The association is a wireless connection device that notifies the specific wireless terminal of identification information necessary for authentication by the wireless connection device. The wireless connection device according to claim 6,
The second start instruction using the association is a wireless connection device that is an instruction including the notified identification information. The wireless connection device according to any one of claims 1 to 7,
The said control part is a radio | wireless connection apparatus which performs the guidance for calling attention to the user of the said radio | wireless connection apparatus when the said 1st start instruction | indication is further after the said correlation. The wireless connection device according to any one of claims 1 to 7,
The control unit further includes:
When there is the first start instruction after the association, the specific wireless terminal is inquired whether to allow the start of the setting process,
A wireless connection device that starts the setting process according to a result of the inquiry. A method for setting wireless communication,
A step of executing wireless communication setting processing for a wireless terminal connected as a wireless communication client to the wireless connection device;
A step of starting the setting process in response to a first start instruction;
Associating a specific wireless terminal with the wireless connection device;
Suppressing the operation of the first start instruction unit by the association;
A second start instruction different from the first start instruction, and starting the setting process in response to a second start instruction using the association;
A method comprising:

Images