JP2010288161A - Wireless communication apparatus, repeater, wireless communication system, wireless communication method, program, and integrated circuit - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a wireless communication apparatus in which connection settings can be performed while ensuring an appropriate security level in accordance with a positional relationship with a counterpart terminal. <P>SOLUTION: A wireless communication apparatus 100 includes: a request packet transmitting section 121 which sequentially transmits at predetermined time intervals a request packet requesting the start of connection settings for performing wireless communication with a repeater 200 and gradually increases transmission power each time the request packet is transmitted; a security setting section 122 for setting a security level corresponding to the transmission power of the request packet corresponding to the response packet, with reception of a response packet transmitted by the relay apparatus 200 as a trigger; and a connection setting section 123 for performing connection settings with the repeater 200 at the security level set by the security setting section 122. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a connection setting method for connecting wireless communication terminals to each other.

  Wireless communication, which is an example of a network configuration that connects information terminals to each other, has superior portability and flexibility in arrangement compared to wired communication, and can be reduced in weight by eliminating wired cables. It has the advantages such as. Therefore, it is used not only for data transmission with personal computers (hereinafter referred to as “PCs”), but also for various applications such as still image, audio, and video transmission with home appliances, and communication battle games with game machines. It has come to be.

  However, there are many users who do not use a function corresponding to the wireless communication function even though they own the device. One of the causes is that the user is concerned about the security of wireless communication. In fact, in wireless communication, communication is performed by radiating an electromagnetic wave carrying information into a space, so there is a risk that information leaks to a third party who is not a desired communication partner.

  For this reason, in wireless communication, it is generally recommended to authenticate with a desired communication partner in advance, share an encryption key, and give confidentiality to information to be transmitted. However, for the setting, for example, a work is required such as connecting a PC to a wireless access point (Access Point; hereinafter referred to as “AP”) by wire and checking the setting information of the wireless AP using the browser of the PC. It may become. That is, the work is often complicated for the user. The complexity of the settings required to ensure this secrecy is also considered to be one of the reasons for not using that function even though the user owns a device that supports the wireless communication function.

  With respect to the background described above, as conventional techniques for easily realizing connection settings for wireless communication, for example, WPS (Wi-Fi Protected Setup) described in Non-Patent Document 1 standardized by Wi-Fi Alliance, There exist some which were described in patent documents 1-patent documents 6.

JP 2004-215232 A JP 2007-259280 A JP 2003-218785 A JP 2006-50646 A JP 2004-247794 A JP 2004-80755 A

“Wi-Fi Protected Setup Specification Version 1.0h”, Wi-Fi Alliance, 2006

  Of the WPSs described in Non-Patent Document 1, two methods, a method called PIN (Personal Identification Number) and a method called PBC (Push Button Configuration), are particularly well known.

  In the PIN method, an 8-digit PIN code uniquely generated by a wireless communication terminal that receives setting information is registered in the wireless communication terminal that distributes the setting information. Then, connection settings such as authentication and key exchange are automatically performed using the shared PIN code. In general, the side that distributes the setting information is an AP, and the receiving side is a wireless slave that is a client.

  However, this method eliminates the need to input and set the authentication method and encryption key to the two terminals by the user himself, but it takes time to input the 8-digit PIN code to the terminal that distributes the setting information. Remain. When the user interface (User Interface; hereinafter referred to as “UI”) of the AP is not sufficient and a browser must be used at the time of setting, it is a complicated operation for the user.

  On the other hand, in the PBC system, connection setting is performed by pressing a button provided in the wireless communication terminal. A PIN code of “00000000” is set to the two wireless communication terminals when the button is pressed. Then, authentication and key exchange are performed using the same protocol as the PIN method. The button press in the PBC method may be a button provided on the casing of the wireless communication terminal, or a button displayed on a graphical user interface (hereinafter referred to as “GUI”). As a result, the troublesomeness of inputting the PIN code in the PIN system to the wireless communication terminal is reduced.

  However, since the PIN code generated when the button is pressed is a uniform and simple code “00000000”, there is a concern that the connection setting itself for enhancing the confidentiality of wireless communication may be intercepted.

  Furthermore, in the state shown in FIG. 10, connection setting may be performed between a communication partner different from the original communication partner. Specifically, as shown in FIG. 10, the first, second, and third wireless communication terminals 10, 20, and 30 exist, and the second wireless communication terminal 10 has a second communication range 11 in the communication range 11 of the first wireless communication terminal 10. This is a case where the wireless communication terminal 20 and the third wireless communication terminal 30 are included.

  In addition, any of the methods described in Patent Documents 1 to 6 limits the communication range by weakening the transmission power of the wireless communication terminal as compared with normal communication at the time of connection setting. Thereby, security at the time of connection setting can be improved, and connection with a nearby wireless communication terminal can be easily performed (in Patent Document 1, the communication range of normal communication is the normal communication area, the communication range at the time of connection setting) Are classified as security communication areas).

  For example, in the terminal arrangement shown in FIG. 11, the positional relationship between the first, second, and third wireless communication terminals 10, 20, and 30 is the same as that in FIG. However, connection settings are limited to the communication ranges 12, 22, and 32 that are narrower than the normal communication ranges 11, 21, and 31, respectively. As a result, the first wireless communication terminal 10 and the third wireless communication terminal 30 do not erroneously set connection.

  However, in the case of the terminal arrangement shown in FIG. 12, the first wireless communication terminal 10 and the second wireless communication terminal 20 can communicate in the normal communication ranges 11 and 12 but are narrow when used for connection setting. Communication is not possible in the communication ranges 12 and 22. As described above, the methods described in Patent Literature 1 to Patent Literature 6 have a problem that it is difficult to set connection between wireless communication terminals that are located far away.

  Accordingly, the present invention has been made in view of such a situation, and it is desirable to obtain a wireless communication apparatus capable of performing connection setting while ensuring an appropriate security level according to the positional relationship with the counterpart terminal. Objective.

  The wireless communication apparatus according to the present invention performs wireless communication with a counterpart terminal. Specifically, request packets for requesting start of connection setting for performing wireless communication with the counterpart terminal are sequentially transmitted at predetermined time intervals, and request packets for gradually increasing transmission power each time transmission is performed. In response to reception of a response packet transmitted by the counterpart terminal, a transmission unit, a security setting unit that sets a security level according to transmission power of the request packet corresponding to the response packet, and the security setting unit A connection setting unit configured to set connection with the counterpart terminal at the set security level.

  As in the above configuration, by changing the security level at the time of connection setting according to the transmission power of the request packet, it is possible to obtain a wireless communication device that achieves both confidentiality of communication and user operability. it can.

  The security level corresponds to the number of digits of connection setting encryption key generation information for generating an encryption key for encrypting a packet. The security setting unit generates the encryption key based on the connection setting encryption key generation information. The connection setting unit may encrypt a packet to be transmitted to the counterpart terminal with the encryption key and decrypt a packet received from the counterpart terminal with the encryption key.

  Thereby, the secrecy of communication can be ensured relatively easily. The security setting unit may generate an encryption key from the connection setting encryption key generation information based on a predetermined rule, or may use the connection setting encryption key generation information as an encryption key as it is.

  Furthermore, the wireless communication device includes a display unit. The security setting unit generates the connection setting encryption key generation information having a larger number of digits as the transmission power of the request packet is larger, and causes the display unit to display the connection setting encryption key generation information. Thus, the user may be requested to set the connection setting encryption key generation information in the counterpart terminal. In this way, by increasing the number of digits of the connection setting encryption key generation information as the communication range widens, priority is given to user operability (simplification of input work) when the communication range is narrow, and the communication range is wide. In this case, priority can be given to the confidentiality of communication.

  Further, the wireless communication apparatus includes an input unit that receives input of information from the user. The security setting unit may acquire the connection setting encryption key generation information generated by the counterpart terminal via the input unit. In this way, it goes without saying that the connection setting encryption key generation information generated at the counterpart terminal may be set.

  The relay device according to the present invention corresponds to the counterpart terminal that performs wireless communication with the above-described wireless communication device. Specifically, triggered by having received the request packet, a response packet transmitting unit that transmits a response packet to the wireless communication device, a security setting unit that sets the same security level as the wireless communication device, A connection setting unit configured to perform connection setting with the wireless communication device at a security level set in the security setting unit. Thereby, it is possible to obtain a relay device that achieves both confidentiality of communication and user operability.

  The security level corresponds to the number of digits of connection setting encryption key generation information for generating an encryption key for encrypting a packet. Further, the relay device includes an input unit that receives input of information from the user. The security setting unit acquires the connection setting encryption key generation information generated by the wireless communication device via the input unit, and the encryption setting based on the acquired connection setting encryption key generation information. Generate a key. The connection setting unit may encrypt a packet to be transmitted to the wireless communication device with the encryption key and decrypt a packet received from the wireless communication device with the encryption key.

  The request packet includes transmission power information for specifying transmission power when the request packet is transmitted. The security level corresponds to the number of digits of connection setting encryption key generation information for generating an encryption key for encrypting a packet. Further, the relay device includes a display unit. The security setting unit generates the connection setting encryption key generation information having a larger number of digits as the transmission power indicated in the transmission power information is larger, and the encryption setting is generated based on the connection setting encryption key generation information. Generating a key and displaying the connection setting encryption key generation information on the display unit to request the user to set the connection setting encryption key generation information in the wireless communication device; and May encrypt a packet to be transmitted to the wireless communication device with the encryption key and decrypt a packet received from the wireless communication device with the encryption key.

  Any of the above methods can prioritize user operability (simplification of input work) when the communication range is narrow, and prioritize communication confidentiality when the communication range is wide.

  The response packet transmitter may transmit the response packet with transmission power corresponding to the transmission power information. Specifically, the transmission power information may be a service set identifier. Thereby, the confidentiality of the response packet can be ensured.

  A wireless communication system according to the present invention includes a wireless communication device and a relay device that perform wireless communication with each other. The wireless communication device sequentially transmits a request packet for requesting start of connection setting for performing wireless communication with the relay device at a predetermined time interval, and a request to gradually increase transmission power each time transmission is performed. A packet transmission unit, a security setting unit that sets a security level according to transmission power of the request packet corresponding to the response packet, triggered by reception of the response packet transmitted by the relay device, and the security setting unit A connection setting unit configured to perform connection setting with the relay device at the security level set in (1). The relay device, upon receipt of the request packet, a response packet transmission unit that transmits a response packet to the wireless communication device, and a security setting unit that sets the same security level as the wireless communication device; A connection setting unit configured to perform connection setting with the wireless communication device at a security level set in the security setting unit.

  By setting it as the said structure, the radio | wireless communications system which made compatible the secrecy of communication and the operativity of a user can be obtained.

  The wireless communication method according to the present invention is a method for performing wireless communication with a counterpart terminal. Specifically, request packets for requesting start of connection setting for performing wireless communication with the counterpart terminal are sequentially transmitted at predetermined time intervals, and request packets for gradually increasing transmission power each time transmission is performed. A security setting step of setting a security level according to transmission power of the request packet corresponding to the response packet, triggered by reception of the response packet transmitted by the counterpart terminal, and the security setting step A connection setting step for setting a connection with the counterpart terminal at the set security level.

  The program according to the present invention causes a computer to perform wireless communication with a counterpart terminal. Specifically, request packets for requesting start of connection setting for performing wireless communication with the counterpart terminal are sequentially transmitted at predetermined time intervals, and request packets for gradually increasing transmission power each time transmission is performed. A security setting step of setting a security level according to transmission power of the request packet corresponding to the response packet, triggered by reception of the response packet transmitted by the counterpart terminal, and the security setting step A connection setting step for setting a connection with the counterpart terminal at the set security level.

  The integrated circuit according to the present invention performs wireless communication with a counterpart terminal. Specifically, request packets for requesting start of connection setting for performing wireless communication with the counterpart terminal are sequentially transmitted at predetermined time intervals, and request packets for gradually increasing transmission power each time transmission is performed. In response to reception of a response packet transmitted by the counterpart terminal, a transmission unit, a security setting unit that sets a security level according to transmission power of the request packet corresponding to the response packet, and the security setting unit A connection setting unit for setting connection with the counterpart terminal at a set security level.

  Note that the present invention can be realized not only as a wireless communication device or a relay device, but also as an integrated circuit that realizes these functions, or as a program that causes a computer to execute such functions. Needless to say, such a program can be distributed via a recording medium such as a CD-ROM and a transmission medium such as the Internet.

  According to the present invention, an appropriate security level can be secured and connection setting can be performed according to the positional relationship with the counterpart terminal, so that a wireless communication device that achieves both confidentiality of communication and ease of setting can be achieved. Obtainable.

1 is a block diagram of a radio communication system according to Embodiment 1. FIG. 3 is a flowchart showing an operation of the wireless communication apparatus according to the first embodiment. It is a figure which shows the state in which a radio | wireless communication apparatus and a relay apparatus are located in a communication range mutually. It is a figure which shows the state in which a radio | wireless communication apparatus and a relay apparatus are located out of a mutual communication range. It is a figure which shows the state which the radio | wireless communication apparatus expanded the communication range from the state of FIG. It is a figure which shows the state which the relay apparatus expanded the communication range from the state of FIG. It is a figure which shows the state in which a radio | wireless communication apparatus and a relay apparatus are located outside a mutual communication range, even if each maximizes a communication range. 6 is a flowchart illustrating an operation of the wireless communication apparatus according to the second embodiment. It is a figure which shows the relationship between the communication range of a radio | wireless communication apparatus, and the position of a relay apparatus. It is a prior art figure which shows the positional relationship of the 1st-3rd communication apparatus. It is a prior art figure which shows the state from which the 1st and 3rd communication terminal remove | deviated from the mutual communication range from the state of FIG. It is a prior art figure which shows the state in which the 1st and 2nd communication terminal is located out of a mutual communication range.

(Embodiment 1)
FIG. 1 is a block diagram of a radio communication system according to Embodiment 1 of the present invention. The wireless communication system includes a wireless communication device 100 and a relay device 200.

  The wireless communication device 100 includes an antenna 110, a communication control unit 120, a display unit 130, and an input unit 140. The communication control unit 120 includes a request packet transmission unit 121, a security setting unit 122, and a connection setting unit 123.

  The request packet transmitter 121 sequentially transmits request packets for requesting start of connection setting at predetermined time intervals. At this time, the transmission power is increased step by step every time a request packet is transmitted. This process ends when a response packet corresponding to the request packet transmitted immediately before is received from the relay apparatus 200.

  That is, the request packet transmission unit 121 monitors the reception of the response packet for a predetermined time after transmitting the first request packet. If no response packet is received, a second request packet is transmitted. Since the second request packet is transmitted with a larger transmission power than the first request packet, the second request packet reaches farther.

  Further, the request packet transmitted by the request packet transmitting unit 121 includes transmission power information for specifying transmission power. The transmission power information in the first embodiment is a service set identifier (Service Set Identifier: SSID). That is, the wireless communication device 100 and the relay device 200 can specify the transmission power at the time of transmitting the request packet based on the SSID value.

  The antenna 110 transmits the packet acquired from the communication control unit 120 to the wireless network. In addition, the communication control unit 120 is notified of the packet received from the wireless network. Although the specific structure of the display part 130 is not specifically limited, For example, a display may be sufficient and LED (Light Emitting Diode) etc. may be sufficient. The input unit 140 is not limited to a specific configuration, such as a keyboard, a mouse, and a push button, as long as it accepts input of information from the user.

  The security setting unit 122 sets a security level corresponding to the magnitude of transmission power at the time of request packet transmission. The security level in the first embodiment corresponds to the number of digits in the connection setting encryption key generation information. The connection setting encryption key generation information is information for generating an encryption key for encrypting a packet transmitted and received at the time of connection setting. In the first embodiment, the connection setting encryption key generation information is used as it is as an encryption key. That is, as the security level increases, the number of digits of the encryption key increases.

  Specifically, the same value as the SSID set in the corresponding request packet is set in the SSID of the response packet. That is, the security setting unit 122 specifies the transmission power at the time of transmitting the corresponding request packet from the SSID set in the response packet. Then, the security setting unit 122 generates an encryption key with the number of digits corresponding to the specified transmission power, notifies the connection setting unit 123, and displays it on the display unit 130.

  The connection setting unit 123 performs connection setting with the relay device 200 at the set security level. Specifically, the connection setting packet transmitted to the relay apparatus 200 is encrypted with the encryption key, and the connection setting packet received from the relay apparatus 200 is decrypted with the encryption key.

  A specific example of the wireless communication device 100 is not particularly limited, but is typically a PC. More specifically, a network interface card (NIC) including an antenna 110 and a communication control unit 120 is attached to a PC including a display (display unit 130) and a keyboard (input unit 140). In the first embodiment, the input unit 140 may be omitted.

  The relay device 200 includes an antenna 210, a communication control unit 220, a display unit 230, and an input unit 240. In addition, the communication control unit 220 includes a response packet transmission unit 221, a security setting unit 222, and a connection setting unit 223. Note that the configurations of the antenna 210, the display unit 230, and the input unit 240 are the same as those of the antenna 110, the display unit 130, and the input unit 240 of the wireless communication apparatus 100, and thus the description thereof is omitted.

  The response packet transmission unit 221 transmits a response packet that approves the start of connection setting when the request packet is received from the wireless communication apparatus 100. In this response packet, the SSID set in the received request packet is set as it is. In addition, the response packet transmission unit 221 may change the transmission power when transmitting the response packet based on the SSID set in the request packet.

  The security setting unit 222 sets a security level according to the magnitude of the transmission power when the received request packet is transmitted. In the first embodiment, the encryption key displayed on the display unit 130 of the wireless communication apparatus 100 is input by the user using the input unit 240. Then, the security setting unit 222 notifies the connection setting unit 223 of the input encryption key.

  The connection setting unit 223 performs connection setting with the wireless communication apparatus 100 at the set security level. Specifically, the connection setting packet transmitted to the wireless communication apparatus 100 is encrypted with the encryption key, and the connection setting packet received from the wireless communication apparatus 100 is decrypted with the encryption key.

  Although the specific example of this relay apparatus 200 is not specifically limited, Typically, it is AP (Access Point). As an example, the display unit 230 is an LED or the like provided in the relay device 200, and the input unit 240 is a push button provided in the relay device 200. In the first embodiment, the display unit 230 may be omitted. Furthermore, the display unit 230 and the input unit 240 may be a PC (external device) display and keyboard connected to the relay device 200.

  FIG. 2 is a processing flowchart according to the first embodiment of the present invention. 3 to 7 are diagrams showing the positional relationship between the wireless communication device 100 and the relay device 200 and the respective communication ranges.

  In the first embodiment, wireless communication device 100 is the side that requests connection setting, and relay device 200 is the side that responds to the request. FIG. 2 is a flowchart centering on processing in the wireless communication apparatus 100. Hereinafter, Embodiment 1 of the present invention will be described with reference to FIG.

  First, the wireless communication device 100 and the relay device 200 before the connection setting is started are set to perform communication with a transmission power Pa smaller than the normal transmission power Pz (S101). Thereby, as shown in FIG. 3, the wireless communication device 100 and the relay device 200 can communicate only in the communication ranges 101 and 201 narrower than the normal communication ranges 102 and 202.

  Next, the request packet transmission unit 121 of the wireless communication apparatus 100 transmits a request packet with the SSID set to “A” corresponding to the transmission power Pa based on an instruction from the user (S102). The request packet may be transmitted, for example, when a switch or button provided in the wireless communication apparatus 100 is pressed, or when a command is received via software. . Further, the destination of the request packet is not limited to a specific terminal. That is, all terminals existing within the communication range 101 receive the request packet.

  Next, the wireless communication device 100 monitors the reception of a response packet having the same SSID “A” as the request packet for a predetermined time (S103, S106). As illustrated in FIG. 3, the relay device 200 located within the communication range 101 of the wireless communication device 100 can receive a request packet transmitted from the wireless communication device 100. Therefore, the response packet transmission unit 221 of the relay apparatus 200 returns a response packet in which the same SSID “A” as the request packet is set.

  The security setting unit 122 of the wireless communication device 100 that has received the response packet with the SSID of “A” determines that the relay device 200 exists so close that communication can be performed with the transmission power Pa. Therefore, the security setting unit 122 determines that an operation for increasing confidentiality is not necessary at the time of connection setting, and sets the lowest security level. That is, the connection setting unit 123 performs connection setting without using the encryption key (the number of digits of the encryption key is 0).

  Next, the connection setting unit 123 of the wireless communication apparatus 100 enters a connection setting sequence such as authentication and encryption key exchange using the setting packet with the relay apparatus 200 (S105), and completes the setting.

  On the other hand, in the case of the terminal arrangement shown in FIG. 4, since relay apparatus 200 is not located within communication range 101 of wireless communication apparatus 100, it cannot receive a request packet whose SSID is “A” from wireless communication apparatus 100. . That is, the wireless communication device 100 cannot receive a response packet whose SSID is “A” from the relay device 200.

  When a response packet with an SSID of “A” cannot be received within a predetermined time and timed out (No in S106), the request packet transmitter 121 performs communication with transmission power Pz as shown in FIG. It sets so that it may perform (S191). Then, the request packet transmission unit 121 transmits a request packet with the SSID set to “Z” corresponding to the transmission power Pz (S192). Thereafter, the wireless communication device 100 waits for a response packet whose SSID is the same “Z” as the request packet (S193, S196).

  In the case of the terminal arrangement shown in FIG. 5, the relay apparatus 200 can receive a request packet whose SSID is “Z”. The response packet transmission unit 221 of the relay apparatus 200 that has received the request packet with the SSID “Z” sets to perform communication with the transmission power Pz as shown in FIG. Then, a response packet whose SSID is “Z” is returned to the wireless communication apparatus 100.

  In the first embodiment, the relay apparatus 200 confirms that the SSID of the received request packet is “Z” and changes the transmission power to the transmission power Pz. However, the present invention is not limited to this, and the transmission power information for specifying the transmission power may be included in an item different from the SSID of the request packet, and the value may be referred to by the relay device 200 and changed to the transmission power Pz.

  Next, the wireless communication apparatus 100 (Yes in S193) that has received the response packet with the SSID “Z” determines that the relay apparatus 200 does not exist in the communication range 101 but exists in the communication range 102. .

  Therefore, the security setting unit 122 of the wireless communication device 100 requests the user to perform an operation for increasing the confidentiality of the connection setting instead of performing the connection setting with the transmission power Pz. For example, the user is requested to input the multi-digit encryption key generated by the security setting unit 122 to the relay apparatus 200 via the input unit 240 (S194).

  Note that the general relay device 200 cannot be connected to the input unit 240 having excellent operability such as a keyboard. Therefore, a method for inputting an encryption key with one button will be described. For example, if the encryption key is a two-digit decimal number “25”, first, the button is pressed twice to enter the 10's place. Next, in order to notify that the input of the tenth digit has been completed, the button is long pressed. Finally, press the button 5 times to enter the 1's place. According to such a method, an encryption key can be set relatively easily even with the input unit 240 having low operability.

  Thereafter, the wireless communication device 100 and the relay device 200 enter a connection setting sequence such as authentication and encryption key exchange using the setting packet encrypted with the encryption key (S195), and complete the setting.

  As described above, when connection setting is performed with the transmission power Pz, a common encryption key may be set for the wireless communication device 100 and the relay device 200, and connection setting may be performed using a packet encrypted with the encryption key. For example, the probability of leakage of a 2-digit encryption key is 1 / 100th, 1 / 10,000 for 4 digits, and 1/100 million for 8 digits.

  Note that the number of digits of the encryption key, that is, the level of confidentiality may be changed according to the magnitude of the transmission power Pz. As described above, when connection setting is performed with the maximum transmission power Pz, confidentiality of the connection setting can be ensured by transmitting and receiving a packet encrypted with the encryption key, and connection setting with another wireless communication terminal by mistake. The possibility of performing can be reduced.

  In the case of the terminal arrangement shown in FIG. 7, the wireless communication apparatus 100 and the relay apparatus 200 cannot communicate with each other even with the transmission power Pz. Therefore, when the response packet with the SSID “Z” cannot be received within a predetermined time and timed out (Yes in S196), the security setting unit 122 of the wireless communication device 100 performs not only connection setting but also wireless communication. Judge that it is impossible. Then, the user is requested to bring the terminals closer to each other (S199), and the process ends without performing connection setting.

  According to this method, the user can complete the connection setting if only the connection setting start processing is performed between the wireless communication terminals located at a short distance. Further, even between wireless communication terminals located at a long distance, the user can ensure the confidentiality of the connection setting by setting the encryption key generated by one to the other. Furthermore, when the terminal arrangement is such that wireless communication terminals cannot communicate with each other, the user can be notified at the time of connection setting. As described above, according to the present invention, it is possible to provide the user with the ease of setting the connection of the wireless communication terminal and the reliability of the connection.

  In the first embodiment, the example in which the user inputs the encryption key generated by the wireless communication device 100 to the relay device 200 has been shown. However, the present invention is not limited to this, and the encryption key generated by the relay device 200 is A user may input to the wireless communication apparatus 100.

(Embodiment 2)
The second embodiment is a modification of the first embodiment. When connection setting is performed by wireless communication, it is desirable to perform transmission with the minimum transmission power that enables communication with the partner terminal from the viewpoint of confidentiality. Therefore, the second embodiment is an example in which variations in transmission power are increased and connection setting is performed at a security level suitable for each.

  FIG. 8 is a process flowchart according to the second embodiment of the present invention. FIG. 9 is a diagram illustrating the positional relationship between the wireless communication device 100 and the relay device 200 and the communication ranges 101, 102, 103, and 104 of the wireless communication device 100.

  As in the first embodiment, the wireless communication device 100 requests connection setting, and the relay device 200 responds to it. FIG. 8 is a flowchart centering on processing in the wireless communication apparatus 100. Hereinafter, a second embodiment of the present invention will be described with reference to FIG. In FIG. 8, the same steps and structures as those in FIG. 1 showing the first embodiment are denoted by the same reference numerals, and a part of the description is omitted.

  First, the wireless communication device 100 before the connection setting is started is set to perform communication with the transmission power Pa (S101). At this time, the packet transmitted by the wireless communication apparatus 100 can be received only by terminals existing within the communication range 101. On the other hand, it is assumed that relay apparatus 200 in Embodiment 2 always performs wireless communication with the maximum transmission power Pz.

  Next, the request packet transmitter 121 of the wireless communication apparatus 100 transmits a request packet with the SSID “A” (S102). Then, the wireless communication device 100 waits for a response packet whose SSID is “A”, which is the same as the request packet (S103, S106).

  When the response packet with the SSID “A” is received (Yes in S103), the wireless communication apparatus 100 is connected to the lowest security level, that is, authentication, encryption key exchange, etc. using an unencrypted setting packet. The setting sequence is entered (S105) and the setting is completed.

  When a response packet with an SSID of “A” cannot be received within a predetermined time and timed out (No in S106), the request packet transmitter 121 is larger than the transmission power Pa and smaller than the maximum transmission power Pz. It sets so that it may communicate with transmission power Pb (S111). At this time, the packet transmitted by the wireless communication apparatus 100 can be received only by terminals existing within the communication range 102.

  Next, the request packet transmitter 121 of the wireless communication device 100 transmits a request packet with the SSID “B” (S112). Then, the wireless communication device 100 waits for a response packet whose SSID is “B”, which is the same as the request packet (S113, S116).

  When the request packet having the SSID “B” is received, the relay apparatus 200 returns a response packet having the SSID “B” to the wireless communication apparatus 100. At this time, the relay device 200 turns on a light emitting diode (hereinafter referred to as LED) as the display unit 230 provided in the casing so that the user can visually recognize the light emitting diode.

  On the other hand, the wireless communication device 100 (Yes in S113) that has received the response packet whose SSID is “B” determines that communication with the relay device 200 is possible if the transmission power is Pb. Therefore, the wireless communication device 100 requests the user to perform an operation for increasing confidentiality in order to perform connection setting with a transmission power Pb larger than the transmission power Pa. However, the “operation for increasing confidentiality” is performed by the user as the transmission power becomes smaller.

  In the case of the transmission power Pb, for example, the wireless communication device 100 requests the user to input the color of the LED lit by the relay device 200 via the input unit 140 (S114). Thereafter, the wireless communication device 100 and the relay device 200 replace the LED color with an encryption key according to a certain rule.

  Then, a connection setting sequence such as authentication and encryption key exchange using the setting packet encrypted with the encryption key is entered (S115), and the setting is completed. At this time, the probability that the encryption key leaks depends on the number of colors of the LEDs, but is about 1/10 to 1/3, and the level of confidentiality at the time of connection setting is also a value corresponding thereto.

  When the response packet with the SSID “B” cannot be received within a predetermined time and time is reached (Yes in S116), the request packet transmission unit 121 of the wireless communication device 100 is greater than the transmission power Pb and the maximum It sets so that it may communicate with transmission power Pc smaller than transmission power Pz (S121). At this time, the packet transmitted by the wireless communication apparatus 100 can be received only by terminals within the communication range 103.

  Next, the request packet transmitter 121 of the wireless communication apparatus 100 transmits a request packet whose SSID is “C” (S122). Then, the wireless communication device 100 waits for a response packet whose SSID is the same “C” as the request packet (S123).

  Next, the wireless communication device 100 that has received the response packet whose SSID is “C” (Yes in S123) determines that communication with the relay device 200 is possible with the transmission power Pc. Then, the security setting unit 122 tries to set a higher secrecy than when the transmission power Pb.

  In the case of the transmission power Pc, for example, the security setting unit 122 of the wireless communication apparatus 100 generates a two-digit encryption key. Then, the encryption key is notified to the connection setting unit 123, and is displayed on the display unit 130 and requested to be input to the relay device 200 (S124). The two-digit encryption key can be input relatively easily even in the relay device 200 with insufficient UI.

  Thereafter, the wireless communication device 100 and the relay device 200 enter a connection setting sequence such as authentication and encryption key exchange using the setting packet encrypted with the encryption key (S125), and complete the setting. At this time, the probability that the encryption key leaks becomes 1/100, and the secrecy of the connection setting is higher than in the case of the transmission powers Pa and Pb.

  On the other hand, when the response packet with the SSID “C” cannot be received within a predetermined time and timed out (Yes in S126), the request packet transmission unit 121 of the wireless communication apparatus 100 communicates with the maximum transmission power Pz. (S191). At this time, the packet transmitted by the wireless communication apparatus 100 can be received only by terminals located within the communication range 104.

  Next, the request packet transmitter 121 of the wireless communication device 100 transmits a request packet whose SSID is “Z” (S192). The wireless communication apparatus 100 waits for a response packet having the same SSID “Z” as the request packet (S193, S196).

  The wireless communication apparatus 100 that has received the response packet whose SSID is “Z” (Yes in S193) determines that communication with the relay apparatus 200 is possible with the transmission power Pz. Then, higher secrecy is set than when transmission power Pc is used.

  Specifically, the security setting unit 122 of the wireless communication device 100 generates a four-digit encryption key. Then, the encryption key is notified to the connection setting unit 123, and is displayed on the display unit 130 and requested to be input to the relay device 200 (S194). Since it is difficult to input a four-digit code to the relay apparatus 200 with insufficient UI, it may be input by connecting a device having a keyboard.

  Thereafter, the wireless communication device 100 and the relay device 200 enter a connection setting sequence such as authentication and encryption key exchange using the setting packet encrypted with the encryption key (S195), and complete the setting. At this time, the probability that the encryption key leaks becomes 1 / 10,000, and the secrecy of the connection setting is higher than in the case of the transmission powers Pa, Pb, and Pc.

  On the other hand, if a response packet with an SSID of “Z” cannot be received within a predetermined time and timed out (No in S196), the terminals are brought closer to the user as in the first embodiment. A request is made (S199), and the process is terminated without setting the connection.

  As shown in FIG. 9, when the wireless communication apparatus 100 and the relay apparatus 200 are installed, the wireless communication apparatus 100 does not need the transmission power Pz and the transmission power Pc is sufficient to communicate with the relay apparatus 200. It is. That is, in the connection setting in the second embodiment, the user is required to input a two-digit code.

  According to the second embodiment, it is possible to determine the minimum transmission power necessary for connection setting, and by further reducing the reach of request packets, response packets, and setting packets, it is possible to further improve the confidentiality in connection settings. Can be increased. Moreover, it is possible to provide a user with an easier and safer connection setting method by appropriately selecting connection setting means having different levels of secrecy according to necessary transmission power. Further, by combining the confidentiality of information that can be input and the transmission power, it is possible to widely adapt even a wireless communication terminal having an insufficient UI.

  In the first and second embodiments, the example in which the connection setting encryption key generation information is directly used as the encryption key has been described. However, the present invention is not limited to this, and the connection setting encryption key is based on a predetermined rule. An encryption key may be generated from the generation information.

  In a conventional wireless communication device or the like, it is common to encrypt a packet with an encryption key having a certain number of digits. Therefore, for example, as a modification of the second embodiment shown in FIG. 8, an example in which the user's operability is improved and the conventional logic related to packet encryption can be used as in the first and second embodiments. Will be explained.

  First, in S105 of FIG. 8, the security setting units 122 and 222 assume that the 0-digit connection setting encryption key generation information is input, and the 8-digit encryption key (“00000000”) held as the default value. Is notified to the connection setting sections 123 and 223. Then, the connection setting units 123 and 223 perform connection setting using a packet encrypted with the encryption key.

  Next, in S115 of FIG. 8, the security setting units 122 and 222 generate one-digit (“1” to “9”) connection setting encryption key generation information from the input LED color. Then, eight numerical values are arranged to generate an 8-digit encryption key (“11111111” to “99999999”). Then, the connection setting units 123 and 223 perform connection setting using a packet encrypted with the encryption key.

  Next, in S125 of FIG. 8, the security setting units 122 and 222 arrange four pieces of two-digit connection setting encryption key generation information (“01” to “99”) into an eight-digit encryption key (“01010101” to “99999999”). Then, the connection setting units 123 and 223 perform connection setting using a packet encrypted with the encryption key.

  Next, in S195 of FIG. 8, the security setting units 122 and 222 arrange two pieces of 4-digit connection setting encryption key generation information (“0001” to “9999”) to form an 8-digit encryption key (“00010001” to “00010001”). “99999999”). Then, the connection setting units 123 and 223 perform connection setting using a packet encrypted with the encryption key.

  If it is the said structure, a user's operativity can be improved similarly to Embodiment 1,2. At the same time, by always generating an 8-digit encryption key, the conventional logic related to packet encryption can be used as it is.

  In the above example, in S115, S125, and S195, the range of the connection setting encryption key generation information is determined so that the default encryption key ("00000000") is not generated. The encryption key may be generated.

  In S115, S125, and S195, a duplicate encryption key (for example, “99999999”) can be generated. However, from the viewpoint of further improving security, connection setting in each step is performed so that an encryption key that can be generated in a step with a low security level (for example, S115) is not generated in a step with a high security level (for example, S125, S195). The range of the encryption key generation information may be determined.

  Further, in the above example, the method of generating the 8-digit encryption key by repeating the input connection setting encryption key generation information a predetermined number of times has been described. However, the encryption key is generated from the connection setting encryption key generation information. The rules are not limited to the above. It goes without saying that the connection setting encryption key generation information is not limited to decimal numbers, and may be hexadecimal numbers, for example.

  In the first and second embodiments, the example of connection setting between the wireless communication device 100 and the relay device 200 and the wireless communication in the infrastructure mode is shown. However, the present invention is not limited to this, and the relay device 200 has the same function. If the wireless communication device is replaced with the wireless communication device, it can be applied to the wireless communication in the ad hoc mode.

  The present invention can be realized not only as the wireless communication device 100 or the relay device 200 but also as an integrated circuit that realizes these functions, or as a program that causes a computer to execute such functions.

  Further, the method of circuit integration is not limited to LSI (Large Scale Integration), but may be realized by a dedicated circuit or a general-purpose processor, or an FPGA (Field Programmable Gate Array) that can be programmed after manufacturing the LSI. Alternatively, a reconfigurable processor that can reconfigure the connection and setting of circuit cells inside the LSI may be used.

  The program data may be introduced into the storage device via a recording medium, or may be directly executed from the recording medium. The recording medium refers to a recording medium such as a semiconductor memory such as a ROM, a RAM, or a flash memory, a magnetic disk memory such as a flexible disk or a hard disk, an optical disk such as a CD-ROM, DVD, or BD, or a memory card such as an SD card. . The recording medium is a concept including a communication medium such as a telephone line or a conveyance path.

  As mentioned above, although embodiment of this invention was described with reference to drawings, this invention is not limited to the thing of embodiment shown in figure. Various modifications and variations can be made to the illustrated embodiment within the same range or equivalent range as the present invention.

  The wireless connection setting method according to the present invention can be widely used for connection settings of wireless communication terminals that transmit confidential data such as text, still images, audio, and moving images.

10, 20, 30 Wireless communication terminal 11, 12, 21, 22, 31, 32, 101, 102, 103, 104, 201, 202 Communication range 100 Wireless communication device 110, 210 Antenna 120, 220 Communication control unit 121 Request packet Transmission unit 122, 222 Security setting unit 123, 223 Connection setting unit 130, 230 Display unit 140, 240 Input unit 200 Relay device 221 Response packet transmission unit

Claims (13)

A wireless communication device that performs wireless communication with a partner terminal,
A request packet transmitting unit that sequentially transmits a request packet for requesting start of connection setting for performing wireless communication with the counterpart terminal at a predetermined time interval, and a request packet transmitting unit that gradually increases transmission power each time it is transmitted;
A security setting unit that sets a security level according to the transmission power of the request packet corresponding to the response packet, triggered by reception of the response packet transmitted by the counterpart terminal,
A wireless communication apparatus comprising: a connection setting unit configured to perform connection setting with the counterpart terminal at a security level set by the security setting unit. The security level corresponds to the number of digits of encryption key generation information for connection setting for generating an encryption key for encrypting a packet,
The security setting unit generates the encryption key based on the connection setting encryption key generation information,
The wireless communication apparatus according to claim 1, wherein the connection setting unit encrypts a packet to be transmitted to the counterpart terminal with the encryption key and decrypts a packet received from the counterpart terminal with the encryption key. The wireless communication device further includes a display unit,
The security setting unit generates the connection setting encryption key generation information with a larger number of digits as the transmission power of the request packet is larger, and causes the display unit to display the connection setting encryption key generation information. The wireless communication device according to claim 2, wherein a request is made to a user for setting the connection setting encryption key generation information in the counterpart terminal. The wireless communication device further includes an input unit that receives input of information from the user,
The wireless communication apparatus according to claim 2, wherein the security setting unit acquires the connection setting encryption key generation information generated by the counterpart terminal via the input unit. A relay device as the counterpart terminal that performs wireless communication with the wireless communication device according to claim 1,
Triggered by receiving the request packet, a response packet transmitting unit that transmits a response packet to the wireless communication device;
A security setting unit that sets the same security level as the wireless communication device;
A relay device comprising: a connection setting unit configured to perform connection setting with the wireless communication device at a security level set in the security setting unit. The security level corresponds to the number of digits of encryption key generation information for connection setting for generating an encryption key for encrypting a packet,
The relay device further includes an input unit that receives input of information from the user,
The security setting unit acquires the connection setting encryption key generation information generated by the wireless communication device via the input unit, and obtains the encryption key based on the acquired connection setting encryption key generation information. Generate
The relay device according to claim 5, wherein the connection setting unit encrypts a packet to be transmitted to the wireless communication device with the encryption key, and decrypts a packet received from the wireless communication device with the encryption key. The request packet includes transmission power information for specifying transmission power at the time of transmission of the request packet,
The security level corresponds to the number of digits of encryption key generation information for connection setting for generating an encryption key for encrypting a packet,
The relay device further includes a display unit,
The security setting unit generates the connection setting encryption key generation information having a larger number of digits as the transmission power indicated in the transmission power information is larger, and determines the encryption key based on the connection setting encryption key generation information. And generating the connection setting encryption key generation information on the display unit to request the user to set the connection setting encryption key generation information in the wireless communication device,
The relay device according to claim 5, wherein the connection setting unit encrypts a packet to be transmitted to the wireless communication device with the encryption key and decrypts a packet received from the wireless communication device with the encryption key. The relay device according to claim 7, wherein the response packet transmission unit transmits the response packet with transmission power corresponding to the transmission power information. The relay apparatus according to claim 7 or 8, wherein the transmission power information is a service set identifier. A wireless communication system comprising a wireless communication device and a relay device that perform wireless communication with each other,
The wireless communication device
A request packet transmitter that sequentially transmits a request packet for requesting start of connection setting for performing wireless communication with the relay device at a predetermined time interval, and gradually increases transmission power each time it is transmitted;
Triggered by receiving a response packet transmitted by the relay device, a security setting unit that sets a security level according to the transmission power of the request packet corresponding to the response packet;
A connection setting unit configured to perform connection setting with the relay device at a security level set by the security setting unit;
The relay device is
Triggered by receiving the request packet, a response packet transmitting unit that transmits a response packet to the wireless communication device;
A security setting unit in which the same security level as that of the wireless communication device is set;
A wireless communication system comprising: a connection setting unit configured to perform connection setting with the wireless communication device at a security level set in the security setting unit. A wireless communication method for performing wireless communication with a partner terminal,
Request packet transmission step of sequentially transmitting a request packet for requesting the start of connection setting for performing wireless communication with the counterpart terminal at a predetermined time interval, and gradually increasing the transmission power each time it is transmitted,
Security setting step for setting a security level according to the transmission power of the request packet corresponding to the response packet, triggered by reception of the response packet transmitted by the counterpart terminal,
A wireless communication method including a connection setting step of performing connection setting with the counterpart terminal at the security level set in the security setting step. A program that allows a computer to perform wireless communication with a partner terminal,
Request packet transmission step of sequentially transmitting a request packet for requesting the start of connection setting for performing wireless communication with the counterpart terminal at a predetermined time interval, and gradually increasing the transmission power each time it is transmitted,
A security setting step for setting a security level according to the transmission power of the request packet corresponding to the response packet, triggered by reception of the response packet transmitted by the counterpart terminal,
A connection setting step for setting a connection with the counterpart terminal at the security level set in the security setting step. An integrated circuit that performs wireless communication with a partner terminal,
A request packet transmitting unit that sequentially transmits a request packet for requesting start of connection setting for performing wireless communication with the counterpart terminal at a predetermined time interval, and a request packet transmitting unit that gradually increases transmission power each time it is transmitted;
A security setting unit that sets a security level according to the transmission power of the request packet corresponding to the response packet, triggered by reception of the response packet transmitted by the counterpart terminal,
An integrated circuit including a connection setting unit configured to perform connection setting with the counterpart terminal at a security level set by the security setting unit.

Images