JP2004362323A - Network component device, recording device, registration system, and parameter setting method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a method for automatically setting a necessary communication parameter and a network component device for realizing this. <P>SOLUTION: This network component device comprises an interface controller 4a for connecting with equipment, a nonvolatile memory 4b, and a communication module 4c for participating in a network, in which the parameter necessary for establishing a communication is preliminarily recorded in the memory. This device is used in pairs. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a network configuration device that automatically sets communication parameters and a recording system via a network using the same.
[0002]
[Prior art]
(Background of the present invention)
In the case where devices communicate with each other regardless of whether they are wired or wireless, “communication parameters” must be set for both devices. For example, in a wireless LAN (local area network), an unspecified device within a radio wave range can participate in the network, and therefore, an identification code (ESS-ID: enhanced service set) for identifying a plurality of communications, Set the channel, encryption key, MAC address, etc.
[0003]
When the encryption key is set, only the device that has set the encryption key can participate in the wireless LAN. There are various encryption methods, and an encryption system called WEP (Wired Equivalent Privacy) is one of common key encryption methods using the RC4 algorithm, and is currently widely used as an encryption technology for wireless LANs. .
[0004]
When a new client joins an existing network, some communication parameters are automatically set when the client is started. However, communication parameters (such as encryption keys and MAC addresses) for preventing eavesdropping and interference of communication data (this is particularly referred to as “security parameter” in this specification) are used by an administrator for ensuring security. Strictly stored. If security parameters are leaked, it may cause unauthorized access to the network. Therefore, these parameters are usually manually input by an administrator.
[0005]
[Problems to be solved by the invention]
However, it is troublesome to store security parameters strictly or to manually perform initial settings when a new device joins a network.
[0006]
Further, not only security parameters but also other communication parameters (channel, ESS-ID, PIN code, etc.) for preventing interference may need to be manually set.
[0007]
The present invention has been made to solve the above problems, and has as its first object to provide a method for automatically setting necessary communication parameters and a network configuration device for realizing the method. I do. A second object is to provide a recording system using the method.
[0008]
[Means for Solving the Problems]
In order to solve the above-described problems, a network configuration device according to the present invention is a network configuration device used for transmitting or receiving data by connecting to a device, and for connecting to the device therein. , A nonvolatile memory (4b), and a communication module (4c) for participating in a network, and parameters necessary for establishing communication are recorded in the memory in advance. It is characterized by having such a configuration. According to this configuration, parameters required for communication can be automatically set only by connecting the network configuration device to the device.
[0009]
Note that “pre-recorded in the memory” means, for example, a case where the same encryption key is written in one memory pair at the time when the memory is manufactured at a factory. This means that the encryption key has already been set. Further, the network configuration device includes a wired LAN card, a wireless LAN card, a network board, or a chip obtained by modularizing these.
[0010]
The network configuration device uses a pair as a minimum unit, and each memory has a common network identification code, an encryption key for encrypting or decrypting the data, its own MAC address, It is preferable that at least one of the other party's MAC addresses (herein, the other party's MAC address is defined as “PAL”) is recorded. This is because these parameters may be necessary as initial settings for communication, and setting these parameters in both network components in advance makes it easier to set the parameters.
[0011]
Note that there may be various encryption keys depending on the encryption method. For example, when encrypting with one secret key as in the WEP method, a uniquely determined common encryption key (secret key) may be recorded in the memory of each network component device. Further, in the case of an encryption method using a public key and a secret key, the public key of the partner network constituent device and the secret key of the own network constituent device may be recorded.
[0012]
Further, in order to solve the above-described problem, a recording device according to the present invention is a recording device for recording data via a network configuration device, and the recording device includes therein a communication device required for communication. It is characterized by comprising parameter reading and writing means for reading parameters from the network constituent device and storing them, parameter selecting means for selecting the stored parameters, and a recording medium for recording data. The parameter reading and writing means is specifically a memory or the like built in the recording device. Note that examples of the medium for recording data include a recording medium including a hard disk using light or magnetism, a nonvolatile semiconductor memory, and the like. In addition, the above-described recording apparatus naturally has not only a function of receiving and recording data but also a function of reading data recorded in the recording apparatus and transmitting the data via a network configuration device.
[0013]
Further, in order to solve the above-mentioned problem, a recording system according to the present invention includes a first network configuration device connected to an arbitrary device (10) having a first interface via the first interface. (11), a second network component device (21) connected to the recording device (20) having a second interface via the second interface, and the recording device (20), A system for transmitting or receiving data between the arbitrary device (10) and the recording device (20), wherein the recording device reads parameters necessary for communication from the network component device inside the system. Parameter reading and writing means for storing the data, parameter selecting means for selecting the stored parameters, and data recording. It is characterized by comprising a recording medium.
[0014]
In the above-mentioned recording system, the first and second interfaces are any one of an SDIO interface, a USB (Universal Serial Bus) interface, a PCMCIA interface, a CF (Compact Flash (registered trademark)) interface, and a PCI interface. May be applicable. This is because these interfaces have extremely high versatility, and the application range of the recording system according to the present invention is further expanded. According to this system, one network component device is connected to an arbitrary device having an SDIO interface or the like, and the other network component device is connected to the recording device (may be built in the device) to provide an arbitrary device. Data sent from the device can be recorded.
[0015]
For example, when connected to a digital video camera, there is no need to have a recording medium on its own, and data is stored in the other recording device connected to the network. Also, when connected to a personal computer, etc., even if multiple personal computers are used, data can be collected in one place, so storing all necessary data in the recording device of this recording system eliminates the need for data synchronization. , And backup becomes easy.
[0016]
Further, in order to solve the above-described problem, a method for manufacturing a network configuration device according to the present invention is a method for manufacturing a network configuration device for performing data communication between devices connecting two points. Communication interface (4a), a non-volatile memory (4b), and a communication module (4c) for joining a network. Is written as a pair of two in the memory. As described above, by using the pair set in advance at the time of shipment from the factory for the communication parameter setting, the user can connect the device to the network without being conscious of the communication parameter setting at all.
[0017]
In addition, in order to solve the above-described problem, a communication parameter setting method according to the present invention provides a method for setting a pair of two memory pairs holding a preset encryption key in data communication between devices connecting two points. One of them is connected to each of a first device and a second device, and encrypts or decrypts data transmitted and received by the device using the encryption key. The encryption key may be a common key (secret key), a public key, or both depending on the encryption method. As described above, when the communication parameters are set in a pair of two memory pairs, the parameter setting becomes easier than in the related art.
[0018]
BEST MODE FOR CARRYING OUT THE INVENTION
In recent years, an interface such as SDIO, UART, and PCMCIA has been used as an IEEE 802. A network configuration device such as a “wireless communication card” for connecting a wireless communication module such as x has been developed. For example, the wireless LAN card is used by being attached to any device provided with the interface, and enables the device to participate in the wireless LAN.
[0019]
However, the wireless LAN card itself does not have a memory function or the like, and at present, parameter settings for communication are manually performed by an administrator or a user.
[0020]
Therefore, when a memory is mounted on these network components and parameters necessary for communication are recorded in the memory, necessary parameter settings are automatically performed only by inserting a card into the device. Note that a memory that can be recorded by an electromagnetic method or the like, such as a flash memory or a ferroelectric memory, can be used as the memory, regardless of the type. Hereinafter, an example will be described.
[0021]
(Configuration example of wireless LAN card)
FIG. 1 shows a state in which a wireless LAN card 1 having an SDIO interface is connected to a host device 3 as an example of a network configuration device. The card 1 has an SDIO controller 4a, a memory 4b, and a wireless LAN module 4c inside. Here, the SDIO controller 4a is a control device for realizing a function for connecting to a host device, and uses a device conforming to the SDIO standard. The wireless LAN module 4c includes a medium access controller, a baseband processor, an RF control unit, and the like, and is connected to the SDIO controller 4a. As this communication module, a module conforming to the communication protocol of IEEE802.11b is used. In addition, the module is not limited to IEEE802.11b, and may be a module of another communication protocol. For example, a wired communication module such as IEEE802.3 (Ethernet (registered trademark)), a communication protocol such as IEEE802.11a, IEEE802.15, or a Bluetooth (registered trademark) module may be used. The same applies to other examples and embodiments in this specification.
[0022]
The device 3 is any device having an SDIO card interface (card slot 2), and includes, for example, a notebook personal computer, a personal digital assistant (PDA), a mobile hard disk, a digital still camera, a digital video camera, a printer, and the like. It is.
[0023]
(First Embodiment)-Parameter setting method-
(Embodiment 1)-Automatic setting method of encryption key-
FIGS. 2A and 2B illustrate a schematic configuration of a wireless communication system according to the present embodiment. This figure shows a state where two devices (portable information terminal 10 and mobile hard disk 20) are connected in a peer-to-peer manner.
[0024]
In FIG. 2A, each of the portable information terminal 10 and the portable hard disk 20 has an SDIO interface, and wireless LAN cards 11a and 21a each having a memory are mounted. A common encryption key (secret key: Key = xxa) is recorded in the memories of these wireless LAN cards 11a and 21a.
[0025]
The step of recognizing the wireless LAN card by the device is the same as in the case of recognizing a normal peripheral device, for example, by installing driver software and restarting the device.
[0026]
When each of the devices (10, 20) recognizes the card, the encryption key stored in the card is read into the memory in each device. Thereafter, a common secret key is set to each device, and the pair of wireless LAN cards can communicate with each other in a peer-to-peer manner. According to this method, unlike the related art, the user does not need to manually input the secret key to both devices.
[0027]
In this way, if a pair of secret keys as described above is held in a pair of cards that can be inserted into a highly versatile interface such as an SDIO card, the user can insert the card without any awareness of the encryption key setting. Just by doing so, the encryption setting is completed between any devices equipped with the partner card of the pair.
[0028]
(Modification of First Embodiment)
In the first embodiment, in peer-to-peer communication, it is important that a memory device in which a secret key is recorded in advance is manufactured in pairs and used in pairs. Therefore, it is not always necessary to form a pair in the form of a “wireless communication card”, and a usage form in which one or both are equipped with a memory device and a wireless communication module inside a device is also included in the scope of the invention. .
[0029]
That is, the modified example of the first embodiment is not limited to the aspect of the wireless LAN card externally attached to the device, but these may be modularized and incorporated in the device. For example, as shown in FIG. 2B, the mobile hard disk 20 itself has a built-in communication module 21b in which a specific secret key (Key = xxa) is set in advance, and a single card in which the same secret key as the secret key is recorded. Communication with the device 10 equipped with the wireless LAN card 11b (= 11a).
[0030]
According to the first embodiment and its modification, the setting of the encryption key is completed by a simple operation of inserting the card into the device.
[0031]
(Embodiment 2)-Communication between three parties-
Next, a case will be described in which three devices (the mobile hard disk 20, the notebook personal computer 30, and the digital still camera 40) communicate with each other.
[0032]
In this embodiment, in order to identify a plurality of communications, the same ESS-ID and secret key are recorded in each of the memory pairs of the wireless LAN card, and two sets (four) of the communication cards And a second wireless LAN card pair). FIG. 3A shows two wireless LAN card pairs in the present embodiment, and ESS-ID = foo and a secret key xxa are recorded in the first card pairs C1 and C2. In the second card pair C3, C4, ESS-ID = baa and secret key xxb are recorded.
[0033]
FIG. 3B illustrates a schematic configuration of a wireless communication system that communicates with a wireless communication LAN card including a plurality of ESS-IDs in the present embodiment. This example is a system configuration in which a mobile hard disk (hereinafter simply referred to as “device 20”) is used as an access point and communicates with a wireless LAN card having a plurality of ESS-IDs.
[0034]
When one of the first wireless LAN cards C1 is inserted into the device 20, the ESS-ID (foo) and the secret key (xxa) are read out from this card and stored in the memory on the device side.
[0035]
Next, a second wireless LAN card having a different ESS-ID and secret key is mounted on the device 20 again. When the second wireless LAN card is inserted into the device 20, the ESS-ID (baa) and the secret key (xxb) are read from this card, and stored in the memory on the device side.
[0036]
FIG. 4 shows the steps in which the required communication parameters are read into the device. First, S101 is a step of inserting a card, S102 is a step of reading a pair of an ESS-ID and a secret key from the card, S103 is a step of determining whether there is a storage history in the past, and S104 is an ESS-ID and a secret key. This is a step of recording the pair.
[0037]
As described above, when a wireless LAN card having an ESS-ID and a secret key which is not recorded in the memory of the device 20 is inserted into the device 20 for the first time, the ESS-ID and the secret key are written into the memory of the device 20, and It is added to the client list 22. If a card with previously saved parameters is inserted, it will not be written to memory.
[0038]
The pair of the ESS-ID and the secret key is accumulated in the memory of the device 20. On the other hand, the device 20 can select which setting to communicate from among the pair of the recorded ESS-ID and secret key. For this reason, the device 20 includes, for example, a human interface including a display unit and operation buttons as parameter selection means so that the setting can be changed by a simple operation.
[0039]
When the device 20 communicates with both the device 30 and the device 40, the setting (foo + baa) that allows both the first and second settings is selected. In this way, the device 20 can communicate with both the device 30 and the device 40.
[0040]
FIG. 5 illustrates another aspect of the present embodiment, and shows another schematic configuration of a wireless communication system that communicates with a wireless communication LAN card including a plurality of ESS-IDs. This example is a system configuration in which only a mobile hard disk (hereinafter, simply referred to as “device 20”) and a wireless LAN card having an ESS-ID and an encryption key of a selected setting are communicated in a peer-to-peer manner. When the first setting (ESS-ID = foo, secret key = xxa) is selected on the operation screen of the device 20, the device 20 is allowed to communicate only with the device 30, and the device 20 cannot communicate with the device 40. . In this way, only communication that satisfies the selected setting condition is permitted.
[0041]
In the device 20, the ESS-ID and secret key set on the display screen or the like should be given priority over the ESS-ID and secret key of the currently inserted card. That is, in this case, even if the second wireless LAN card C3 (ESS-ID = baa, secret key = xxb) is inserted in the device 20, the first setting (ESS-ID = foo, secret When the key = xxa) is selected, it is possible to communicate only with the other device 10 equipped with the first wireless LAN card. In this case, the wireless LAN card inserted into the device 20 operates only as a device for performing wireless communication. Also, since there are only three devices, after registering in the client list, only three wireless LAN cards are used for communication, but the other one is used for registering the client list. Therefore, it is assumed that such an aspect is also included in “using a pair as a unit”.
[0042]
(Example 3)-MAC address filtering-
MAC address filtering is a method of setting a device-specific identification code that allows a device serving as an access point to join the network in a communication network including the access point. This method contributes to higher security. However, in order to perform MAC address filtering, it is necessary to set the MAC address of the client in a device serving as an access point as an initial setting. Conventionally, this setting has been manually input by an administrator.
[0043]
FIG. 6A shows a pair of two wireless LAN cards in the present embodiment. Each card incorporates a wireless LAN module and a memory. The memory stores its own MAC address and the MAC address (PAL) of the partner of the pair. FIG. 6B shows a schematic configuration of a wireless communication system for explaining a MAC address filtering method in the present embodiment.
[0044]
The device 20 is preferably a highly versatile device such as a mobile hard disk, for example. Such a device is used as an access point to construct a network. At this time, MAC address filtering is performed to prevent unauthorized access.
[0045]
First, in order to perform MAC address filtering, it is necessary to notify an access point of a MAC address of a device permitted to communicate. Then, when one of the paired cards is inserted into the access point, the other party's MAC address (PAL) is recorded on the card, and the access point reads the address and records it in its own memory or the like. Note that the MAC address of the card itself may be recorded. When a new PAL that has not been registered is registered, it is added to the client list 23. Description of these steps will be omitted with reference to FIG. 4 in the second embodiment.
[0046]
For example, in the example of FIG. 6A, since the first card pair (C5 and C6) has MAC addresses 100 and 101, each card records the other party's MAC address (PAL). That is, C5 is recorded as MAC = 100, PAL = 101, and C6 is recorded as MAC = 101, PAL = 100.
[0047]
When one of the first card pair (C5) is inserted into the access point, the MAC address 101 of the partner card (C6) of the pair is read out from the card into the memory inside the access point, and PAL = 101 is added to the client list. Is added.
[0048]
On the other hand, when the partner card (C6) of the pair is inserted into a device to communicate with, the device can communicate with the access point because the device is a client permitted by the MAC address filtering of the access point.
[0049]
Similarly, when one (C7) of the second card pair is inserted into the access point for the second card pair, the MAC address 103 of the partner card (C8) of the pair is stored in the memory inside the access point from the card. It is read and PAL = 103 is added to the client list.
[0050]
On the other hand, when the partner card (C8) of the pair is inserted into a device to communicate with, the device can communicate with the access point because the device is a client permitted by MAC address filtering of the access point.
[0051]
However, the communication of the wireless LAN card C9 (MAC address 109) not present in the client list of the access point is cut off by MAC address filtering.
[0052]
As described above, the client list of the access point is added by a very simple operation of inserting one of the paired cards in which the other party's MAC address (PAL) is recorded.
[0053]
All you have to do is insert one of the card pairs into the access point. With only this work, a new client can be added to the network. There is no need to manually set the MAC address in the access point as in the related art. Also, since the necessary security parameters are stored electromagnetically in the memory in the card, there is no need to write down the MAC address itself on paper. For this reason, initial settings and management of security parameters are facilitated.
[0054]
(Second Embodiment)-Regarding Configuration of Mobile Hard Disk System-
The recording system according to the present invention includes a portable small hard disk (hereinafter referred to as “mobile hard disk”) and a pair of wireless LAN cards. The mobile hard disk has a USB terminal and an SDIO interface.
[0055]
Each wireless LAN card has the same basic configuration, and includes an SDIO interface, a flash memory, and a wireless communication module having, for example, a communication protocol of IEEE 802.11b. Necessary communication parameters are recorded in this flash memory in advance. The memory is not limited to the flash memory, but may be another type of memory that can record data by an electromagnetic method or the like.
[0056]
As communication parameters, an ESS-ID, a WEP key (common encryption key), a MAC address, and a MAC address (PAL) of a wireless LAN card of each other are recorded. The encryption method is not limited to WEP, and another method may be used.
[0057]
One of the wireless LAN cards is inserted into the SDIO slot of the mobile hard disk, and the other is connected to a device having an SDIO interface. For example, it is attached to a digital camera or a notebook personal computer having an SDIO interface.
[0058]
Then, the parameters recorded in the flash memory in the card are stored in the memory built in the mobile hard disk 20 and added to the client list.
[0059]
Normally, in order for a communication device to participate in a wireless LAN, it is necessary to make settings such as an ESS-ID and a WEP key on the access point side. However, according to the present system, once the wireless LAN card attached to the interface of the participating device is inserted into the mobile hard disk only once, the unique ESS-ID and encryption key recorded on the wireless LAN card are stored in the mobile hard disk. It is written to the internal memory and registered in the client list.
[0060]
If a versatile USB terminal is provided alongside the mobile hard disk 20, data can be exchanged through the USB terminal even when network connection is not possible.
[0061]
(Other embodiments)
The interface of the communication card is not limited to the SDIO interface, but includes a USB (Universal Serial Bus), a PCMCIA interface, a CF (Compact Flash (registered trademark)) interface, and a PCI interface.
Or another interface. Further, the communication protocol of the wireless communication module is not limited to IEEE802.11b, but may be IEEE802. Other communication protocols such as x and Bluetooth may be used.
[0062]
Although the ESS-ID is shown as identification data for connecting to a partner set for grouping computers performing wireless communication with each other, other identification data having the same type of function or operation effect may be used. For example, in the case of Bluetooth, a PIN code is used as identification data.
[0063]
In the above-described embodiment, the example of the mobile hard disk is described as the recording medium of the recording apparatus. However, in principle, the recording medium can be replaced with a large-capacity nonvolatile memory device, and the type of the recording medium does not matter. However, if the network component device is not built in the recording device but is of a removable card type, it can be easily replaced with another recording device if necessary. Alternatively, the recording medium of the recording apparatus itself may be an exchangeable medium such as a DVD-RAM or a CD-RW.
[0064]
【The invention's effect】
When the parameter setting method according to the present invention and the network configuration device according to the present invention employing the parameter setting method are used, communication parameters are automatically set, and troublesome parameter setting operations are not required. Further, the recording system according to the present invention proposes a new form of a recording medium that has not been used in the past, and its use value is extremely large.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating a state in which a wireless LAN card having an SDIO interface is connected to a host device 3 as an example of a network configuration device.
FIG. 2 is a diagram illustrating a schematic configuration of a wireless communication system according to a first embodiment.
FIG. 3A is a diagram illustrating two wireless LAN card pairs according to a second embodiment. (B) is a diagram illustrating a schematic configuration of a wireless communication system that communicates with a wireless communication LAN card including a plurality of ESS-IDs according to the second embodiment.
FIG. 4 is a diagram showing steps in which necessary communication parameters are read into a device.
FIG. 5 is a diagram illustrating another aspect of the second embodiment, and illustrating another schematic configuration of a wireless communication system that communicates with a wireless communication LAN card including a plurality of ESS-IDs.
FIG. 6A illustrates a pair of first and second wireless LAN cards according to a third embodiment. (B) is a diagram illustrating a schematic configuration of a wireless communication system for explaining a method of MAC address filtering in a third embodiment.
[Explanation of symbols]
1 Wireless LAN card
2 Card slot
3 Equipment
4a SDIO controller
4b memory
4c wireless LAN module
10 equipment (portable information terminals)
11a, 11b, 21a Wireless LAN card
20 devices (mobile hard disk)
21b Communication module
22, 23 Client list
30 equipment (notebook type personal computer)
40 equipment (digital camera)

Claims (6)

A network configuration device used for transmitting or receiving data by connecting to a device, wherein an interface controller (4a) for connecting to the device, a nonvolatile memory (4b), and a network And a communication module (4c) for participating in the
A network configuration device, wherein parameters necessary for establishing communication are recorded in the memory in advance. The network configuration device is used as a pair, and each memory has a common network identification code, an encryption key for encrypting or decrypting the data, its own MAC address, and 2. The network configuration device according to claim 1, wherein at least one of a partner MAC address (PAL) is recorded. A recording device for recording data via a network configuration device,
The recording device records therein parameters necessary for communication from the network component device and reads and saves the parameters, parameter reading and writing means for selecting the stored parameters, and records data therein. A recording apparatus comprising: a recording medium. A first network component device (11) connected to any device (10) having a first interface via the first interface, and a recording device (20) having a second interface. And a second network configuration device (21) connected via the second interface and the recording device (20), and data is transmitted between the arbitrary device (10) and the recording device (20). A system for transmitting or receiving
The recording device records therein parameters necessary for communication from the network component device and reads and saves the parameters, parameter reading and writing means for selecting the stored parameters, and records data therein. And a recording medium.
Recording system. A method for manufacturing a network configuration device for performing data communication between devices connecting two points,
Attaching an interface controller (4a) for connecting to the device, attaching a non-volatile memory (4b), and attaching a communication module (4c) for joining a network;
A method of manufacturing a network configuration device, comprising a step of writing two communication parameters set in advance as a pair into the memory. In data communication between devices connecting two points, each pair of memory pairs holding a preset encryption key is connected to each of a first device and a second device, and the two devices are connected by the encryption key. A communication parameter setting method characterized by encrypting or decrypting data transmitted and received by a device.

Images