JP2007151193A - Radio station - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve security at a station side in a network of wireless LAN. <P>SOLUTION: When an operation for displaying on a display panel an SSID allocated to an access point for a printer to relay data communication is performed by a control panel (s204) and an SSID corresponding to the operation is an SSID of an access point being set to utilize an SSID non-disclosed function (s210), this SSID is displayed on the display panel in an unidentifiable manner (s230). Thus, the SSID allocated to an access point for relaying data is prevented from being known by being displayed on the display panel as it is. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

The present invention relates to a radio stations performing radio communication in accordance with wireless LAN standard.

  At present, a so-called wireless LAN that wirelessly implements data communication between a plurality of stations or between a station and an external network is widely spread.

  In general, a wireless LAN network is formed with not only stations but also access points that relay wireless communication between stations or relay communication between a station and an external network.

A station in such a wireless LAN network sets the same SSID as the SSID (service set identifier or ESSID: extended SSID) assigned to the access point on the station side as connection data for wireless communication. By specifying the access point, the access point can be accessed. Here, only a station having the same SSID as the access point can access the access point (except for some exceptions), so the SSID setting is an authentication function for connecting to a wireless LAN network. There is also an aspect that is used as.

  However, according to the wireless LAN standard (IEEE 802.11 standard), the access point periodically transmits a “beacon signal” to inform surrounding stations of the SSID assigned to itself, and the SSID is set to “ANY”. When an inquiry request (probe request) is received from a received station, a reply (probe response) including its own SSID is returned. As described above, since the SSID assigned to the access point can be specified from the beacon signal or the probe response, there is a problem that the network security cannot be sufficiently secured even if the SSID is used as an authentication function.

  Therefore, in recent years, an SSID (connection data) in which an SSID is not included in a beacon signal, or a reply not including its own SSID is returned in response to a connection request in which the SSID is set to “ANY” (or the reply itself is not returned). ) Access points with specifications that do not disclose (output) are becoming commercially available.

  With such a specification, the access point will not inadvertently transmit a signal (beacon signal, probe response) including the SSID, so that network security can be improved.

By the way, when a station performs various settings including an SSID (for example, WEP key; Wired Equivalent Privacy), the station has a user interface with high operability like a personal computer (hereinafter referred to as “PC”). Then, it is easy to perform the setting operation using this user interface.
However, in a station such as a printer or a scanner that does not have a user interface with high operability compared to a PC, it is difficult to perform setting operations using this user interface. Some stations have specifications that do not allow user interface settings. Many of such stations are configured to indirectly perform setting (remote setup) from the other station side by exchanging data regarding the setting with other stations.

  As described above, data can be exchanged with other stations by data communication via a cable, but is generally performed by wireless data communication. However, at this time, there is a possibility that the SSID assigned to the access point may be specified from data exchanged wirelessly with other stations, which causes a decrease in network security. There is also a risk of it.

As a technique for preventing a decrease in security caused by data exchange over the air, for example, data (setting parameters) related to settings necessary for realizing data communication via an access point are exchanged with the access point. There has been proposed a technique of exchanging with a radio wave weaker than a normal radio wave between them (see Patent Document 1). As a result, the data reception area can be narrowed, so that network security can be enhanced.
JP 2003-152735 A

  As described above, in the wireless LAN, various technologies for enhancing network security have been put into practical use and proposed until recently, but are only technologies for improving the security on the access point side.

  Since the SSID of the access point is naturally recorded in the memory or the like on the station side where the SSID of the access point is set, there is a possibility that the SSID recorded on the station side will be known to a malicious user. It is left.

  As a specific example, the SSID of the access point can be easily obtained by displaying the SSID of the access point to be accessed by the station itself on the display unit of the station. Further, if the station has a network management function (SNMP agent; Simple Network Management Protocol), it is possible to notify the SSID in response to an information request from the network management tool (SNMP manager).

  As described above, in the wireless LAN network, the security measures on the station side are not sufficient as compared with the access point.

  The present invention has been made to solve the above-described problems, and an object of the present invention is to provide a technique for improving station-side security in a wireless LAN network.

In order to solve the above problem, a wireless station according to claim 1 is a wireless station capable of performing wireless communication with an access point constituting a wireless LAN, comprising parameter recording means, output means, reception means, Setting information acquisition means, setting information recording means, setting information recording control means, determination means, and output restriction means are provided. Among these, the parameter recording means records parameter data including connection data indicating setting contents for the wireless station to perform wireless communication with the access point. The output means outputs the parameter data recorded in the parameter recording means. The accepting means accepts a command related to the output of parameter data by the output means. The setting information acquisition unit receives setting data transmitted from the access point , the setting data specifying the setting information about whether or not the access point is set not to output connection data for performing wireless communication , The setting information is acquired from the setting data . The setting information recording means records the setting information. The setting information recording control unit records the setting information acquired by the setting information acquiring unit in the setting information recording unit. The determination means determines whether or about the setting information acquired by the setting information acquiring unit, those access point is configured not to output the connection data. The output restricting means includes a parameter including the connection data by the output means according to a command from the accepting means when the determining means determines that the access point is set not to output connection data. In connection with the output of data, part or all of the connection data recorded in the parameter recording means is restricted from being output to the outside of the radio station itself.
According to a second aspect of the present invention, there is provided a wireless station capable of performing wireless communication with an access point constituting a wireless LAN, the parameter recording means, the output means, the reception means, and the setting information acquisition means. , Setting information recording means, initialization means, setting information recording control means, determination means, and output restriction means. Among these, the parameter recording means records parameter data including connection data indicating setting contents for the wireless station to perform wireless communication with the access point. The output means outputs the parameter data recorded in the parameter recording means. The accepting means accepts a command related to the output of parameter data by the output means. The setting information acquisition means receives setting data capable of specifying setting information about whether or not the access point is set so as not to output connection data for performing wireless communication, repeatedly transmitted from the access point, The setting information is acquired from the setting data. The setting information recording unit records the setting information acquired by the setting information acquisition unit. The initialization means initializes the setting information recorded in the setting information recording means at a predetermined timing. The setting information recording control unit records the setting information newly acquired by the setting information acquisition unit in the setting information recording unit on condition of initialization by the initialization unit. In addition, the determination unit determines whether or not the setting information acquired by the setting information acquisition unit is set so that the access point does not output connection data. When the output restricting unit determines that the access point is set not to output connection data by the determining unit, the output restricting unit includes a parameter including the connection data by the output unit in accordance with a command of the receiving unit In connection with the output of data, part or all of the connection data recorded in the parameter recording means is restricted from being output to the outside of the radio station itself.

According to the wireless station configured as described in claims 1 and 2, for an access point set not to output connection data, a part of connection data set or acquired during wireless communication with the access point Or it can control that all are outputted outside the radio station itself. In this way, by restricting the connection data from being output outside the wireless station, it is possible to prevent malicious users from knowing the connection data of access points that are set not to output connection data. it can.

Note that the output restricting means according to claims 1 and 2 described above prevents, for example, some or all of the connection data from being displayed on the display unit, or displays on the display unit in a state in which some or all of the connection data cannot be identified. By doing so, the display of connection data may be restricted.

Further, it is possible to determine whether the claimed if claim 2 such construction, on the basis of the setting data repeatedly transmitted from the access point, the access point is configured to output the connection data.

According to the radio station configured as claimed in claim 2 , when setting information is acquired, setting information acquired in the past (previous cycle) is deleted. That is, if the setting information has not been acquired in the latest cycle, the access point corresponding to this setting information is determined to be an access point set not to output connection data.

  Therefore, for example, even if the access point of the setting information acquired in the past, that is, the access point set to output connection data is changed so as not to output connection data, this latest It is possible to determine whether or not the setting is made so as not to output the connection data in a state in which the setting contents are reflected. As a result, it is possible to prevent the connection data from being inadvertently determined by erroneously determining whether or not the access point is set not to output the connection data.

Further, in the configuration of claim 2 , setting information cannot be acquired from the access point due to a trouble on the access point side (for example, temporarily out of the radio wave reception range, unstable operation state, etc.) Even in this case, even if the access point is an access point that has been set to output connection data in the past, it is determined that the access point is set to not output connection data. become.

  While setting information cannot be obtained due to trouble on the access point side, the setting may be changed so that connection data is not output on the access point side. Even if it is set to output, it is dangerous to determine that the setting data is set to be output.

  For this reason, it is inadvertent that it is possible to determine that this access point is an access point that is set not to output connection data when setting information cannot be obtained from the access point due to a trouble on the access point side. This is suitable for preventing connection data from being output.

  Hereinafter, as the best mode for carrying out the present invention, a network 1 in which a plurality of network devices (hereinafter simply referred to as “devices”) are LAN-connected will be described as an example.

[First Embodiment]
As shown in FIG. 1, the network 1 includes an access point 10, a network printer (hereinafter simply referred to as “printer”) 20, a personal computer (hereinafter referred to as “PC”) 30, and the like.

  First, the access point 10 is a relay that relays data communication between a wireless station capable of wireless communication with the access point 10 itself and another device connected via the cable 100, and includes a CPU 11, a ROM 12. RAM 13, network controller 14, wireless LAN controller 15, and the like.

  The CPU 11 provided in the access point 10 controls the operation of the access point 10 as a whole by sending commands to each component while recording the processing result in the RAM 13 according to the processing procedure recorded in the ROM 12.

The RAM 13 records parameter data that can specify parameters necessary for the access point 10 to perform wireless communication with a wireless station, function data that indicates whether or not to use an SSID private function, which will be described later, and the like. Has been. Among these, the parameter data is data that can specify the SSID (service set identifier or ESSID: extended SSID) assigned to the access point 10, and the access point 10 has the same SSID as this SSID. Allow access only from configured wireless stations (with some exceptions). Note that the parameter data and function data are data generated by exchanging data related to settings with other devices wirelessly or by wire and indirectly setting (remote setup) from the other devices. It is.

  The network controller 14 is an interface for realizing data communication with other devices connected via the cable 100, and the wireless LAN controller 15 realizes wireless communication with a wireless station. It is an interface for.

Here, the “SSID private function” indicated by the function data described above will be described. The SSID private function is a function for preventing the access point 10 from inadvertently notifying the surrounding wireless stations of the SSID, and includes the following two functions. Function 1: Do not include SSID in beacon signal In wireless LAN standard (IEEE802.11 standard), a device used as an access point is for informing surrounding wireless stations of the SSID assigned to itself. It is decided to transmit a “beacon signal” periodically. Since the SSID of the access point 10 can be specified from this beacon signal, the SSID is prevented from being notified to surrounding wireless stations by not including the SSID in the beacon signal. Function 2: Does not return a response to a connection request from a wireless station whose SSID is set to “ANY” (or returns a response that does not include an SSID)
In the wireless LAN standard, when a device used as an access point receives a connection request (probe request) from a wireless station whose SSID is set to “ANY”, a reply including its own SSID (probe response) Is decided to return. From this reply, the SSID of the access point 10 can be specified in the same manner as the above-described beacon signal. Therefore, by not making such a reply (or returning a reply not including the SSID), the SSID is Suppressing notifications to surrounding wireless stations.

  In the wireless LAN standard, it is determined that a device used as an access point is allowed unconditionally to allow access from a wireless station whose SSID is blank (not set) or set to “ANY”. This is “some exceptions” when the access point 10 permits access from the wireless station. In this SSID private function, such SSID is set to blank or “ANY”. A function of not permitting access from the wireless station is also realized.

  Next, the printer 20 is a device that functions as a wireless station, and includes a CPU 21, ROM 22, RAM 23, wireless LAN controller 24, PC interface unit (PCI / F) 25, operation panel 26, display panel 27, print engine 28, and the like. It has.

  The CPU 21 of the printer 20 controls the overall operation of the printer 20 by sending commands to each component while recording the processing results in the RAM 23 according to the processing procedure recorded in the ROM 22.

  The RAM 23 stores parameter data indicating setting contents for the printer 20 to perform wireless communication with the access point 10. This parameter data is data indicating the SSID assigned to the access point 10 to which the printer 20 should relay data communication, and the printer 20 only applies to the access point 10 to which the same SSID as this SSID is assigned. Access is allowed. The parameter data is data generated by performing setting indirectly from other devices by exchanging data related to setting contents wirelessly or by wire with other devices, as with the access point 10. It is.

  The wireless LAN controller 24 is an interface for realizing wireless communication with the access point 10.

  Further, the PC interface unit 25 is an interface for connecting the printer 20 to another PC via a communication cable, thereby enabling data communication between the printer 20 and the PC.

In addition, the printer 20 is connected to the SNMP (Simple Network Manager).
t Protocol) Application software is installed to function as an agent. By the function of the SNMP agent, when the printer 20 receives an SNMP request command for requesting a predetermined parameter via the network 1, it returns an SNMP response command including the parameter requested by the SNMP request command. Can do. Here, the parameter requested by the SNMP request command is read from a database (MIB: Management Information Base) recorded in the RAM 14. In this database, various parameters relating to the printer 20 are registered. When the above-described parameter data is generated and updated, the content indicated by the parameter data, that is, the access point 10 that relays data communication is assigned. The registered SSID is registered.

The PC 30 is a known computer system that can be connected to the network 1 via the cable 100. Application software for causing the PC 30 to function as an SNMP manager is incorporated in the PC 30. By the function of the SNMP manager, the PC 30 transmits an SNMP request command for requesting a predetermined parameter to another device, and receives and collects SNMP response commands returned from the device that has received the SNMP request command. To do. Table Registration Process by Printer 20 Hereinafter, a table registration process performed by the CPU 21 of the printer 20 will be described with reference to FIG. This table registration process is repeatedly executed at regular intervals (30 sec in this embodiment) after the printer 20 is activated.

  First, an AP (access point) table is initialized (s110). In this process, all items (SSID) registered in the AP table are deleted from the AP table which is the data table recorded in the RAM 23 in the previously executed table registration process. When this table registration process is first executed after the printer 20 is activated, an AP table in a state where nothing is registered in the RAM 23 is generated.

  Next, a timer is set (s120). In this process, a countdown from a predetermined value (2 sec in the present embodiment) is started.

  Next, it is checked whether the timer has expired (s130).

  If the timer has not expired in the process of s130 (s130: NO), it is checked whether a beacon signal has been received (s140). This “beacon signal” is a signal transmitted at regular intervals (for example, 100 msec) from an access point existing around the printer 20 (wireless reception area). If the access point that transmitted this beacon signal is not set to use the SSID private function described above, it is transmitted in a state where the SSID assigned to this access point can be specified. If it is set to use a non-public function, it is transmitted in a state where the SSID cannot be specified.

  If the beacon signal is not received in the process of s140 (s140: NO), the process returns to the process of s130, while if the beacon signal is received (s140: YES), whether or not the SSID can be specified from this beacon signal. Check (s150).

  If the SSID cannot be specified from the beacon signal in the process of s150 (s150: NO), the process returns to the process of s130, while if the SSID can be specified (s150: YES), whether this SSID has been registered in the AP table. Is checked (s160).

If the SSID is already registered in the AP table in the process of s160 (s160: NO)
On the other hand, if not registered (s160: YES), this SSID is registered in the AP table (s170). Here, the SSID registered in the AP table is that of the access point set so as not to use the SSID private function as described above.

  After completing the process of s170, the process returns to the process of s130.

  Thus, after repeating the processing from s130 to s170 until the timer is finished, when the timer is finished in the processing of s130 (s130: YES), this table registration processing is finished.

As described above, by repeating the processing from s130 to s170, the SSID of the access point 10 that is set not to use the SSID private function among the access points 10 existing around the printer 20 is registered in the AP table. The Operation Process by Printer 20 Hereinafter, a process procedure of an operation process executed by the CPU 21 provided in the printer 20 will be described with reference to FIG. This operation process is repeatedly executed every time the operation panel 26 is operated after the printer 20 is activated. In the printer 20, the operation panel 26 causes the display panel 27 to display the SSID assigned to the access point 10 to which the printer 20 relays data communication, in addition to operations for performing various settings by the printer 20. SSID display operation which is an operation for confirming the content can be performed.

  First, it waits until the operation panel 26 is operated (s202: NO).

  If the operation panel 26 is operated in the process of s202 (s202: YES), it is checked whether or not the operation content is an SSID display operation (s204).

  In the process of s204, if the operation content is not an SSID display operation (s204: NO), the process according to the operation content (other process) is performed (s206), and then the process returns to s202.

  On the other hand, if the operation content is an SSID display operation in the process of s204 (s204: YES), it is checked whether or not the SSID assigned to the access point 10 that relays data communication is registered in the AP table (s210). . In this process, by checking whether the SSID assigned to the access point 10 to which the printer 20 relays data communication, that is, the SSID indicated by the parameter data recorded in the RAM 23 is registered in the AP table, It is checked whether or not this access point 10 is set to use the SSID private function.

  If the SSID is registered in the AP table in the process of s210 (s210: YES), the SSID is displayed on the display panel 27 as it is (s220), and the process returns to s202.

On the other hand, if the SSID is not registered in the AP table in the process of s210 (s210: NO), the SSID is displayed on the display panel 27 in a state where it cannot be identified (s230), and the process returns to the process of s202. In the present embodiment, the display panel 27 is configured to display a character string made up of the same number of asterisks “*” as the number of characters constituting the SSID so that the “SSID cannot be identified”. Irrelevant character string, message that it is not set to use the private function, state that does not display anything, etc.
A state where the SSID cannot be identified may be used. The SNMP agent process performed by the printer 20 Hereinafter, the process procedure of the SNMP agent process executed by the CPU 21 of the printer 20 will be described with reference to FIG. This SNMP agent process is a process executed by the function of the SNMP agent.

  First, it waits until an SNMP request command is received from the PC 30 via the network 1 (s302: NO).

  If an SNMP request command is received in the process of s302 (s302: YES), it is determined whether or not the parameter requested by the SNMP request command is the SSID assigned to the access point 10 to which the printer 20 relays data communication. A check is made (s304). In this process, when the parameter requested by the SNMP request command matches the SSID indicated by the parameter data recorded in the RAM 23, the printer 20 is the SSID assigned to the access point 10 that relays data communication. judge.

  If the parameter is not an SSID in the process of s304 (s304: NO), the parameter is read from the database (s306).

  On the other hand, if the parameter is SSID in the process of s304 (s304: YES), it is checked whether or not the SSID assigned to the access point 10 that relays data communication is registered in the AP table (s310). In this process, by checking whether the SSID assigned to the access point 10 to which the printer 20 relays data communication, that is, the SSID indicated by the parameter data recorded in the RAM 23 is registered in the AP table, It is checked whether or not this access point 10 is set to use the SSID private function.

  If the SSID is registered in the AP table in the process of s310 (s310: YES), the SSID registered in the database is read (s320).

  On the other hand, if the SSID is not registered in the AP table in the process of s310 (s310: NO), the SSID registered in the database is read, and a character string that cannot be identified as an SSID is generated (s330). In the present embodiment, a character string composed of the same number of asterisks “*” as the number of characters constituting the SSID is generated as a “character string that cannot identify an SSID”. A message indicating that the public function is not set may be set as “a state where the SSID cannot be identified”.

  Then, an SNMP response command is returned to the PC 30 (s308). In this process, if a parameter is read in the processes of s306 and s320, an SNMP response command including this parameter is returned to the PC 30. If a character string is generated in the process of s330, an SNMP response command including this character string is returned to the PC 30.

  In this way, after finishing the process of s308, it returns to the process of s302.

[Effect of the first embodiment]
According to the printer 20 that constitutes the network 1 described above, the access point 10 that is set to use the SSID private function, that is, the access point 10 that is set not to notify (disclose) the SSID to the surroundings. It can be regulated that the SSID set in the wireless communication with the access point 10 is output outside the printer 20 itself. In this way, since the output of the SSID to the outside of the printer 20 can be restricted, the malicious user is informed that the SSID of the access point 10 set not to notify (disclose) the SSID to the surroundings. Can be prevented.

  Specifically, in the operation process of FIG. 3, when an operation for displaying on the display panel 27 the SSID assigned to the access point 10 to which the printer 20 relays data communication is performed by the operation panel 26. If the SSID corresponding to the operation is the SSID of the access point 10 set to use the SSID private function (processing of s210), the SSID is displayed on the display panel 27 in a state where it cannot be identified (s230). processing). Thereby, it is possible to prevent the SSID assigned to the access point 10 that relays data communication from being displayed on the display panel 27 as it is and the SSID being known.

  In the SNMP agent process of FIG. 4, when the printer 20 receives an SNMP request command for requesting the SSID of the access point 10 that relays data communication, the SSID requested by the SNMP request command is not disclosed to the SSID. If it is the SSID of the access point 10 set to use the function (process in s310), a character string that cannot identify this SSID is returned as an SNMP response command (process in s308). Thus, it is possible to prevent the SNMP response command from being returned in response to the SNMP request data and the SSID being known.

  In the table registration process of FIG. 2, the SSID of the access point 10 set to use the SSID private function is registered in the AP table based on the beacon signal periodically transmitted from the access point 10. be able to. In the operation process of FIG. 3 and the SNMP agent process of FIG. 4, it is possible to determine whether the access point is set to use the SSID private function based on the AP table (s210, s310). Processing).

  In the table registration process of FIG. 2, when the SSID is acquired in the processes from s130 to s170, the AP table is initialized in the process of s110, and only the newly acquired SSID is registered in the AP table. become.

  Therefore, for example, the access point of the SSID registered in the AP table in the table registration process executed in the past, that is, the access point 10 set not to use the SSID private function uses the SSID private function. Even when the setting is changed as described above, only the SSID according to the latest setting content can be registered in the AP table. Thereby, in the process of s210 in FIG. 3 and s310 in FIG. 3, the connection data is inadvertently determined by erroneously determining whether or not the access point 10 is set not to use the SSID private function. Can be prevented from being output.

  In addition, when the table registration process of FIG. 2 is executed, for example, access is caused on the access point 10 side due to troubles such as temporarily out of the electric field reception range or unstable operation state. When a beacon signal that can normally identify an SSID cannot be received from the point 10, this SSID is not registered in the AP table. Therefore, even if the access point 10 is an access point that has been set not to use the SSID private function in the past, the access point 10 is determined to be an access point that uses the SSID private function. become.

While the normal SSID cannot be specified due to a trouble on the access point 10 side, the setting may be changed to use the SSID private function on the access point 10 side. Even if it has been set not to use the SSID private function in the past, it is dangerous to determine that the SSID private function is not used.

  Therefore, when a normal beacon signal cannot be received from the access point 10 due to a trouble on the access point 10 side (SSID is specified), the access point 10 is set to use the SSID private function. It can be determined that the access point 10 is inadvertent, in order to prevent the SSID from being inadvertently disclosed.

[Second Embodiment]
The network 1 in the second embodiment has the same configuration as that of the first embodiment, and only the table registration process executed by the printer 20 is different, so only this difference will be described in detail. . ○ Table registration process by printer 20 The table registration process in the second embodiment is a probe response while the table registration process in the first embodiment (FIG. 2) registers the SSID specified by the beacon signal in the AP table. The specified SSID is registered in the AP table, and only the difference will be described in detail.

  First, as shown in FIG. 5, a probe request in which the SSID is set to “ANY” is transmitted between the processes of s110 and s120 (s112). The access point 10 that has received the probe request returns a probe response including the SSID if it is set not to use the SSID private function. On the other hand, if it is set to use the SSID private function, a probe response is not returned or a probe response not including the SSID is returned.

  If the timer has not expired in the process of s130 (s130: NO), it is checked whether a probe response has been received (s142).

  If the probe response is not received in the process of s142 (s142: NO), the process returns to the process of s130, while if the probe response is received (s142: YES), whether or not the SSID can be specified from the probe response. Check (s150).

  If the SSID cannot be specified from the probe response in the process of s150 (s150: NO), the process returns to the process of s130. On the other hand, if the SSID can be specified (s150: YES), the processes after s160 are performed.

[Effects of Second Embodiment]
According to the printer 20 constituting the network 1 described above, the following effects can be obtained in addition to the effects obtained from the same configuration as the printer 20 of the first embodiment.

  According to the printer 20, in the table registration process of FIG. 5, based on the probe response returned from the access point 10, the SSID of the access point 10 set to use the SSID private function is stored in the AP table. You can register.

  [Modifications] Although the embodiment of the present invention has been described above, the present invention is not limited to the specific embodiment described above, and can be implemented in various other forms.

For example, in the above embodiment, the wireless station of the present invention is applied to a network printer. However, the configuration of the present invention can be applied to configurations other than the network printer as long as the device functions as a wireless station. For example, instead of the print engine 28, a scanner or a digital camera provided with a reading unit, or a multifunction machine or a FAX having both a printer and a function as the printer can be considered.

  In the above-described embodiment, the processing shown in each flowchart is illustrated as being executed by a computer system including the CPU 21 of the printer 20. However, some or all of these processes may be executed by another computer system connected to the printer 20 via a wired / wireless signal transmission path.

  In this embodiment, the SSID is recorded when the SSID can be specified in the processing from s150 to s170 in FIGS. 2 and 5, but information obtained from the received beacon signal or probe response (for example, SSID). In addition, the MAC address of the access point may be recorded. In this case, in the process of s210 in FIG. 3 and s310 in FIG. 4, information including the SSID is searched from the AP table.

  In the above embodiment, the printer 20 receives command data for causing the display panel 27 to display the SSID assigned to the access point 10 that relays data communication via the wireless LAN controller 24 or the PC interface unit 25. When the SSID commanded by the command data is displayed on the display panel 27, the operation process of FIG. 3 is executed even when such command data is received. It is good to configure.

  With this configuration, when command data is received from outside the printer 20 in the operation process of FIG. 3, the SSID commanded by this command data is set to use the SSID private function. If it is the SSID of the point 10 (processing of s210), this SSID is displayed on the display panel 27 in a state where it cannot be identified (processing of s230). Thereby, it is possible to prevent the SSID assigned to the access point 10 that relays data communication from being displayed on the display panel 27 as it is and the SSID being known.

  In the above embodiment, the SSID assigned to the access point 10 other than the access point 10 to which the printer 20 relays data communication is recorded in the RAM 23, and this SSID is displayed on the display panel 27 by the operation panel 26. If the operation can be performed, the operation process (FIG. 3) may be started also when this operation is performed. In this case, the description “SSID assigned to the access point 10 for relaying data communication” is read as “SSID recorded in the RAM 23”.

  In the above embodiment, when the printer 20 records the SSID assigned to the access point 10 other than the access point 10 that relays data communication, and this SSID is requested by the SNMP request command. The SNMP agent processing (FIG. 4) may also be started when this SNMP request command is received. In this case, the description “the SSID assigned to the access point 10 for relaying data communication” is read as “the SSID requested by the SNMP request command”.

Moreover, in the said embodiment, what was comprised so that the table registration process of FIG. 2, FIG. 5 might be repeatedly performed for every fixed time (fixed time period) was illustrated. However, these processes may be executed every time a specific operation is performed by the operation panel 26 or every time a specific command signal is received from the outside of the printer 20.

[Correspondence with the present invention]
In the embodiment described above, the printer 20 is a radio station in the present invention.

Also, SSID is Ru Oh connection data in the present invention. Their to, in the present embodiment, these beacon signals and probe response, by whether it contains SSID, whether or not it is set to use the SSID secret function, that is, notifies the SSID around It is configured to specify setting information in the present invention such as whether or not.

Further, the process of s140 in Fig. 2 is a setting information acquisition unit of the present invention.

The processing of s 230, s 330 is the output regulating means in the present invention.

Further, the process of s142 in Fig. 5 is a setting information acquisition unit of the present invention.

Diagram showing a network composed of multiple devices The flowchart which shows the process sequence of the table registration process in 1st Embodiment. The flowchart which shows the processing procedure of the operation processing The flowchart which shows the process sequence of an SNMP agent process The flowchart which shows the process sequence of the table registration process in 2nd Embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Network, 10 ... Access point, 11 ... CPU, 12 ... ROM, 13 ... RAM, 14 ... Network controller, 15 ... Wireless LAN controller, 20 ... Printer, 21 ... CPU, 22 ... ROM, 23 ... RAM, 24 ... Wireless LAN controller 25... PC interface unit 26... Operation panel 27. Display panel 28. Print engine 30.

Claims (11)

A wireless station capable of performing wireless communication with an access point constituting a wireless LAN,
Setting information acquisition means for acquiring setting information about whether or not the access point is set not to output connection data for performing wireless communication;
Determination means for determining whether the access point is set not to output the connection data based on the setting information acquired by the setting information acquisition means;
When it is determined by the determination means that the access point is set not to output the connection data, a part or all of the connection data set or acquired during wireless communication with the access point An output restriction means for restricting output to the outside of the wireless station; When the determination means receives request data for requesting the connection data set or acquired in wireless communication with a specific access point from the outside of the wireless station, the access point does not output the connection data To determine whether it is set to
If the output restricting unit determines that the access point is set not to output the connection data by the determining unit, the connection data of the access point is transmitted to the transmission source of the request data. The radio station according to claim 1, wherein the radio station is regulated. When the determination unit receives command data from the outside of the wireless station to display the connection data set or acquired during wireless communication with a specific access point on a display unit, the access point receives the connection data. To determine whether it is set to not output
The output restricting means restricts the display of the connection data of the access point when the determining means determines that the access point is set not to output the connection data. The radio station according to claim 1, wherein: The determination means does not output the connection data when the operation unit performs an operation for displaying the connection data set or acquired during wireless communication with a specific access point on the display unit. To determine whether it is set to
The output restricting means restricts the display of the connection data of the access point when the determining means determines that the access point is set not to output the connection data. The radio station according to claim 1, wherein: The access point that is set to output the setting information transmits setting data that can specify the setting information at a predetermined timing, and the setting information acquisition unit outputs the setting information. It is configured to receive setting data transmitted at a predetermined timing from a set access point, and acquire the setting information specified by the setting data, and the determination means is acquired by the setting information acquisition means 5. The radio station according to claim 1, wherein it is determined whether the access point is set not to output the connection data based on the set information. Recording means for recording various information, and recording command means for recording the setting information acquired by the setting information acquisition means in the recording means,
6. The wireless station according to claim 5, wherein the determination unit determines whether the access point is set not to output the connection data based on the setting information recorded by the recording unit. In the recording means, a data table for registering setting information of an access point set to output the connection data is recorded,
The radio station according to claim 6, wherein the recording command unit registers the setting information acquired by the setting information acquisition unit in the data table. The setting information acquisition means performs reception of setting data transmitted at a predetermined timing from the access point set to output the setting information and acquisition of the setting information at a specific cycle, and the determination means 8. The access point other than the access point from which the setting information can be acquired by the setting information acquisition unit is determined to be an access point set not to output the connection data. A radio station according to any of the above. The recording command means deletes the setting information recorded in the recording means when the setting information acquisition means starts receiving the setting data and acquiring the setting information at a specific cycle. The radio station according to claim 7.   An output regulation program for causing a computer system to execute various processing procedures for causing a wireless station according to any one of claims 1 to 9 to function. A wireless station that can perform wireless communication with an access point configuring a wireless LAN outputs a part or all of connection data used for wireless communication with the access point to the outside of the wireless station. It is an output regulation method that regulates this, and obtains setting information about whether or not the access point is set not to output the connection data,
Based on the acquired setting information, determine whether the access point is set not to output the connection data,
When the determination result is a determination that the access point is set not to output the connection data, a part or all of the connection data set or acquired in wireless communication with the access point is A method for regulating output, comprising regulating output to the outside of the radio station.