JP2013247533A - Wireless lan communication system, wireless lan master device, wireless lan slave device, communication connection establishment method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a wireless LAN communication system and others which can surely establish communication connection without imposing an operation load on a user.SOLUTION: In a wireless LAN communication system 1, a wireless LAN master device 300 and a wireless LAN slave device 100 which have a common network identifier perform intercommunication by using a common or corresponding encryption key. A network identifier and the encryption key are assigned to the wireless LAN slave device 100 in advance, and the wireless LAN master device 300 acquires the network identifier and encryption key assigned to the wireless LAN slave device 100 on the basis of information transmitted from a server device 200. Then, the wireless LAN slave device 100 and the wireless LAN master device 300 establish communication connection by using the acquired network identifier and encryption key.

Description

  The present invention relates to a wireless LAN communication system, a wireless LAN master device, a wireless LAN slave device, a communication connection establishment method, and a program.

  Various settings are required for electrical equipment before use. In order to reduce the operation burden on the user, Patent Literature 1 discloses a setting method for information home appliances in which the home server controls the initial settings of the information home appliances using the initial setting information acquired via the network. ing. Patent Documents 2 and 3 disclose a method for enabling setting of a wireless LAN system with a simple operation by a user.

JP 2003-308263 A JP 2005-117243 A JP 2007-274703 A

  Generally, a wireless LAN (Wireless Local Area Network) system is used when a user sets an SSID (Service Set Identifier) and an encryption key (password) that are set in advance in the wireless LAN base unit to the wireless LAN handset. It becomes possible.

  The method of patent document 1 reduces the operation burden of a user because a home server controls the setting of information household appliances. However, in the case of a wireless LAN system, the wireless LAN master unit controls the setting of the wireless LAN slave unit to reduce the operation burden on the user, but until the SSID and the encryption key are set in the wireless LAN slave unit, The LAN master unit cannot communicate with the wireless LAN slave unit. Even if the method disclosed in Patent Document 1 is applied to the wireless LAN system, it is not changed that the SSID or the like must be set in the wireless LAN slave device by the user's own hand, which does not reduce the operation burden on the user.

  In addition, the methods disclosed in Patent Documents 2 and 3 enable connection settings for a wireless LAN system with a simple operation by a user. However, these methods do not change that the user is required to operate the device even if the connection setting can be performed with a simple operation. The possibility that the wireless LAN slave unit cannot establish a communication connection cannot be denied.

  The present invention has been made in view of such a problem, and can establish a communication connection without imposing a burden on the user, a wireless LAN communication system, a wireless LAN master device, a wireless LAN slave device, a communication connection, and the like. An object is to provide an establishment method and a program.

A wireless LAN communication system according to a first aspect of the present invention includes:
A wireless LAN master unit connected to the server device via the network and a wireless LAN slave unit having a common network identifier with the wireless LAN master unit establish a communication connection using a common or corresponding encryption key. A wireless LAN communication system,
The wireless LAN slave unit is
A network identifier and an encryption key for establishing a communication connection with the wireless LAN base unit are pre-assigned,
Storage means for storing assigned network identifier and encryption key, or information for generating the assigned network identifier and encryption key,
The server device
Handset information storage means for storing information assigned to the wireless LAN handset;
In response to a request from the wireless LAN base unit, a handset information transmission unit that transmits information of the wireless LAN handset stored in the handset information storage unit,
The wireless LAN base unit is
Based on the information transmitted from the server device, the network identifier assigned to the wireless LAN slave unit and the encryption key common to or corresponding to the encryption key assigned to the wireless LAN slave unit Connection information acquisition means to acquire;
Connection information setting means for setting the acquired network identifier and encryption key as a network identifier and encryption key for establishing a communication connection with the wireless LAN slave unit, and
The wireless LAN slave unit and the wireless LAN base unit communicate with each other using a network identifier and encryption key assigned to the wireless LAN slave unit or a network identifier and encryption key set by the connection information setting unit. Establish,
It is characterized by that.

The wireless LAN master device according to the second aspect of the present invention is:
A wireless LAN master device that establishes a communication connection with a wireless LAN slave device to which a network identifier and an encryption key are assigned in advance,
A network identifier assigned to the wireless LAN slave unit and an encryption key common to or corresponding to the encryption key assigned to the wireless LAN slave unit from a server device connected via the network Connection information acquisition means for acquiring based on the information;
Connection information setting means for setting the acquired network identifier and encryption key as a network identifier and encryption key for establishing a communication connection with the wireless LAN slave unit;
Communication connection establishment means for establishing communication connection with the wireless LAN slave device using the set network identifier and encryption key,
It is characterized by that.

The wireless LAN slave device according to the third aspect of the present invention is:
A network identifier and an encryption key that are pre-assigned to a wireless LAN slave unit and acquired based on information from a server device connected via a network, a network identifier for establishing a communication connection with the wireless LAN slave unit, and A wireless LAN slave device that establishes a communication connection with a wireless LAN master device set as an encryption key,
Storage means for storing pre-assigned network identifier and encryption key, or information for generating the assigned network identifier and encryption key;
Communication connection establishment means for establishing a communication connection with the wireless LAN base unit using an assigned network identifier and an encryption key;
It is characterized by that.

The communication connection establishment method according to the fourth aspect of the present invention is:
A wireless LAN slave device to which a network identifier and an encryption key are assigned in advance; a wireless LAN master device connected via a network to a server device having a function of transmitting information assigned in advance to the wireless LAN slave device; Is a communication connection establishment method for establishing a communication connection,
The wireless LAN base unit sends a network identifier pre-assigned to the wireless LAN handset and an encryption key common to or corresponding to an encryption key pre-assigned to the wireless LAN handset. A connection information acquisition step to acquire based on information transmitted from the device;
A connection information setting step in which the wireless LAN base unit sets the network identifier and encryption key acquired in the connection information acquisition step as a network identifier and encryption key for establishing a communication connection with the wireless LAN slave unit; ,
The wireless LAN slave unit and the wireless LAN base unit communicate with each other using the network identifier and encryption key assigned to the wireless LAN slave unit or the network identifier and encryption key set in the connection information setting step. A communication connection establishment step for establishing
It is characterized by that.

A program according to the fifth aspect of the present invention is:
A computer that controls a wireless LAN master device that establishes a communication connection with a wireless LAN slave device in which a network identifier and an encryption key are pre-assigned,
A server device in which a network identifier pre-assigned to the wireless LAN slave device and an encryption key common to or corresponding to an encryption key pre-assigned to the wireless LAN slave device are connected via a network Connection information acquisition function to acquire based on information from,
A connection information setting function for setting the acquired network identifier and encryption key as a network identifier and encryption key for establishing a communication connection with the wireless LAN slave unit;
A communication connection establishment function for establishing a communication connection with the wireless LAN slave device using a set network identifier and an encryption key;
It is characterized by that.

  According to the present invention, it is possible to provide a wireless LAN communication system, a wireless LAN parent device, a wireless LAN child device, a communication connection establishment method, and a program that can reliably establish a communication connection without requiring an operation burden on the user.

It is the schematic of the portable terminal which concerns on embodiment of this invention. 1 is a block diagram of a wireless LAN communication system according to an embodiment of the present invention. It is a functional block diagram for demonstrating the function of the wireless LAN main | base station shown in FIG. 1, and a wireless LAN subunit | mobile_unit. It is a figure for demonstrating the information stored in the memory | storage part of the wireless LAN subunit | mobile_unit and wireless LAN parent | base station shown in FIG. 1, (A) is the specific information stored in the memory | storage part of a wireless LAN subunit | mobile_unit, manufacturing number The figure which shows a random value, (B) is a figure which shows the identification information stored in the memory | storage part of a wireless LAN main | base station. It is a functional block diagram for demonstrating the function of the server and wireless LAN main | base station shown in FIG. It is a figure for demonstrating the subunit | mobile_unit information database memorize | stored in the server shown in FIG. It is a flowchart for demonstrating the subunit | mobile_unit information transmission process and connection information generation process which concern on embodiment of this invention. It is a figure which shows a mode that connection information is produced | generated in the wireless LAN main | base station shown in FIG. 1, (A) is a figure which shows the some subunit | mobile_unit information extracted from the subunit | mobile_unit information database, (B) is each subunit | mobile_unit information. It is a figure which shows a mode that the connection information was produced | generated about. It is a flowchart for demonstrating the communication connection establishment process which concerns on embodiment of this invention. 10 is a flowchart for explaining a probe response / request process executed in the communication connection establishment process shown in FIG. 9.

  Hereinafter, embodiments for carrying out the present invention will be described with reference to the drawings.

  A wireless LAN communication system 1 according to an embodiment of the present invention is a system in which a wireless LAN master device having a common network identifier and a wireless LAN slave device establish a communication connection using a common or corresponding encryption key. It is. Here, the “network identifier” is a network name for identifying an access point of the wireless LAN, for example, an SSID or ESSID (Extended Service Set Identifier). The “encryption key (password)” is data used to encrypt data when the wireless LAN base unit communicates with the wireless LAN handset. For example, a WEP key (Wired Equivalent) Privacy Key) and WPA Key (Wi-Fi Protected Access Key).

  As shown in FIG. 1, the wireless LAN communication system 1 includes a wireless LAN slave device 100, a server 200, and a wireless LAN master device 300.

  The wireless LAN slave device 100 includes, for example, a wireless LAN client device such as a USB wireless LAN adapter configured to be connectable to a USB (Universal Serial Bus) terminal of a PC (Personal Computer). Each wireless LAN slave device 100 is assigned a network identifier and an encryption key. The wireless LAN slave device 100 establishes a communication connection with the wireless LAN master device 300 using the assigned network identifier and encryption key (for example, the wireless LAN master device 300 and the wireless LAN slave device 100 have the network identifier and Authenticate each other using an encryption key so that data can be sent and received on a one-to-one basis).

  As shown in FIG. 2, the wireless LAN slave device 100 includes a control unit 110, a storage unit 120, and an antenna 130.

  The control unit 110 includes a processing device such as a processor. The control unit 110 operates in accordance with a program stored in a ROM (Read Only Memory) or a RAM (Random Access Memory) (not shown), and executes various operations including a “communication connection establishment process” described later. Further, the control unit 110 operates according to the “communication connection establishment process”, thereby functioning as a beacon signal reception unit 111, a probe request transmission unit 112, and a communication connection establishment unit 113 as illustrated in FIG. The operation of these functions will be described later in “Communication connection establishment process”.

  Returning to FIG. 2, the storage unit 120 includes a nonvolatile memory such as an EPROM (Electrically Erasable Programmable Read-Only Memory) or a mask ROM (Masked Read Only Memory). The storage unit 120 stores unique information specific to each wireless LAN slave device assigned to each wireless LAN slave device 100, such as a MAC address, a serial number, and a random value, as shown in FIG. 4A. ing. In addition, the storage unit 120 stores network identifiers and encryption keys assigned in advance to the wireless LAN slave units 100.

  The network identifier and the encryption key are information generated using a predetermined algorithm based on the unique information of the wireless LAN slave device 100. The network identifier and the encryption key are generated by a device manufacturer, a provider, or the like when the wireless LAN slave device 100 is manufactured and shipped, or when the wireless LAN slave device 100 is sent to the user. Stored in Note that an algorithm for generating a network identifier and an encryption key is not limited to a specific algorithm, and various known algorithms can be used. As the algorithm, for example, a hash algorithm such as SHA (Secure Hash Algorithm) or MD5 (Message Digest Algorithm 5), an encryption algorithm such as AES (Advanced Encryption Standard) or RC4 (registered trademark), or the like can be used. In the following description, for ease of understanding, the algorithm used to generate the network identifier is referred to as “algorithm A1”, and the algorithm used to generate the encryption key is referred to as “algorithm A2”. .

  Returning to FIG. 2, for example, the antenna 130 is a wireless LAN antenna having a function of transmitting and receiving radio waves in a frequency band (for example, 2.4 GHz band and 5 GHz band) defined by IEEE 802.11a / b / g / n. Consists of The antenna 130 transmits data to the wireless LAN base unit 300 according to the control of the control unit 110 and receives data from the wireless LAN base unit 300.

  The server 200 is composed of a server device such as a mainframe or a host computer. As shown in FIG. 1, a plurality of wireless LAN master devices 300 are connected to the server 200 via a network. The server 200 is installed at a location away from the wireless LAN master device 300 (for example, outside the radio wave reachable range of the wireless LAN master device 300), and is managed by an Internet connection provider (hereinafter referred to as “provider”). . A plurality of wireless LAN slave devices 100 are pre-assigned to one wireless LAN master device 300 by a device manufacturer, a provider, or the like. Information of the assigned slave unit (for example, slave unit production number, network identifier, etc .; hereinafter referred to as “slave unit information”) is stored in a “slave unit information database” described later by the device manufacturer or provider. The When the slave device information is requested from the wireless LAN master device 300, the server 200 extracts the corresponding slave device information from the slave device information database and transmits it.

  As shown in FIG. 2, the server 200 includes a control unit 210, a child device information storage unit 220, and a communication interface 230.

  The control unit 210 includes a processing device such as a processor. The control unit 210 operates according to a program stored in a ROM or RAM (not shown), and executes various operations including a “child device information transmission process” described later. Further, the control unit 210 operates according to the “slave unit information transmission process”, thereby functioning as a request reception unit 211 and a slave unit information transmission unit 212 as shown in FIG. Note that the operation of these functions will be described later in the “Slave unit information transmission process” section.

  Returning to FIG. 2, the slave unit information storage unit 220 includes a storage device such as a DRAM (Dynamic Random Access Memory), a flash memory, and a hard disk. The slave unit information storage unit 220 stores various information such as a “slave unit information database”.

  The “slave device information database” is a database in which information on the wireless LAN master device 300 and information on the wireless LAN slave device 100 assigned to the wireless LAN master device 300 are stored in association with each other. In the handset information database, as shown in FIG. 6, “user ID” of a user who uses the wireless LAN handset 100, “identification information” for identifying the wireless LAN base unit 300 from other wireless LAN base units 300. ”(For example, the MAC address or manufacturing number of the parent device) and“ unique information ”(for example, the MAC address, manufacturing number, random value) of the wireless LAN child device 100 assigned to the wireless LAN parent device 300 are stored. Multiple records are stored. Note that the contents of the slave unit information database can be changed by an administrator (for example, a provider) that manages the server 200. For example, according to the user's request, the contents of the slave unit information database are separated from the wireless LAN master unit 300 that is already at the user's hand. Wireless LAN slave device 100 can be assigned.

  Returning to FIG. 2, the communication interface 230 includes a network connection interface such as a LAN device. The communication interface 230 is connected to the wireless LAN base unit 300 and data via a network such as a LAN (Local Area Network), a WAN (Wide Area Network), a telephone network (a mobile phone network, a fixed telephone network, etc.), a regional IP network, and the Internet. Send and receive.

  The wireless LAN base device 300 includes a wireless LAN access point device such as a wireless LAN compatible router or a wireless LAN compatible home gateway. As shown in FIG. 1, the wireless LAN master device 300 is configured to connect a plurality of wireless LAN slave devices 100. The wireless LAN base device 300 includes a program or dedicated hardware having a function of executing the algorithm A1 and the algorithm A2 described in the storage unit 120 described above. The wireless LAN base device 300 specifies the network identifier and the encryption key assigned to the handset using the handset information acquired from the server 200 and the algorithm A1 and the algorithm A2. Then, the wireless LAN master device 300 establishes a communication connection with the wireless LAN slave device 100 using the specified network identifier and encryption key.

  As shown in FIG. 2, the wireless LAN base device 300 includes a control unit 310, a storage unit 320, a communication interface 330, and an antenna 340.

  The control unit 310 includes a processing device such as a processor. The control unit 310 operates in accordance with a program stored in a ROM or RAM (not shown), and executes various operations including “connection information generation processing” and “communication connection establishment processing” which will be described later. The control unit 310 operates according to the “connection information generation process”, thereby functioning as a child device information request unit 311, a child device information acquisition unit 312, and a connection information acquisition unit 313 as illustrated in FIG. Further, the control unit 310 operates as a “communication connection establishment process”, thereby functioning as a beacon signal transmission unit 314, a connection information setting unit 315, and a communication connection establishment unit 316 as illustrated in FIG. The operation of these functions will be described later in “connection information generation processing” and “communication connection establishment processing”.

  Returning to FIG. 2, the storage unit 320 includes a storage device such as a DRAM, a flash memory, and a hard disk. In the storage unit 120, identification information for identifying the wireless LAN base device 300 from other wireless LAN base devices 300, for example, as shown in FIG. Stored.

  Returning to FIG. 2, the communication interface 330 includes a network connection interface such as a LAN device. The communication interface 230 transmits / receives data to / from the server 200 via the network.

  The antenna 340 includes a wireless LAN antenna having a function of transmitting / receiving radio waves in a frequency band (for example, 2.4 GHz band or 5 GHz band) defined by IEEE 802.11a / b / g / n. The antenna 340 transmits data to the wireless LAN slave device 100 under the control of the control unit 310 and receives data from the wireless LAN master device 300.

  Next, the operation of the wireless LAN communication system 1 having such a configuration will be described.

  As for the operation of the wireless LAN communication system 1, the server 200 transmits “child device information transmission processing” in which the child device information is transmitted to the wireless LAN parent device 300, and the wireless LAN parent device 300 generates connection information based on the child device information. It is divided into “connection information generation processing” and “communication connection establishment processing” in which the wireless LAN master device 300 and the wireless LAN slave device 100 establish communication connection. First, the “slave device information transmission process / connection information generation process” will be described.

  When the power is turned on, the server 200 starts a “slave unit information transmission process” for transmitting information about the wireless LAN slave unit 100 to the wireless LAN base unit 300. Further, when the power is turned on, the wireless LAN base device 300 starts a “connection information generation process” for generating connection information such as a network identifier and an encryption key based on the handset information received from the server 200. Hereinafter, the “slave device information transmission process / connection information generation process” will be described with reference to the flowchart of FIG.

  When the power is turned on, the slave information request unit 311 of the wireless LAN master device 300 transmits request data for requesting information on the wireless LAN slave device 100 assigned to the server 200 to the server 200. At this time, the wireless LAN base device 300 transmits its own identification information (for example, a MAC address and a manufacturing number) together with the request data (step S101).

  Moving to a flow on the server side, the request reception unit 211 of the server 200 determines whether request data has been received from the wireless LAN base device 300 (step S102). If the request data has not been received (step S102: No), step S102 is repeated until the request data is received. If the request data is received (step S102: Yes), the process proceeds to step S103.

  The slave unit information transmission unit 212 of the server 200 acquires the slave unit information database shown in FIG. 6 from the slave unit information storage unit 220. Then, the server 200 extracts information on the wireless LAN slave device 100 assigned to the wireless LAN master device 300 based on the identification information of the wireless LAN master device 300 transmitted from the wireless LAN master device 300 (step S103). ). For example, if the identification information received from the wireless LAN parent device 300 is “identification information P1”, the server 200 determines that the parent device identification information is “identification information P1” from the child device information database shown in FIG. The slave unit specific information of records 1 to 3 is extracted as slave unit information. If a plurality of wireless LAN slave devices 100 are assigned to the wireless LAN master device 300, for example, as shown in FIG. 8A, a plurality of slave device information is extracted.

  Returning to the flow of FIG. 7, the slave unit information transmission unit 212 transmits the extracted slave unit information to the wireless LAN base unit 300. If a plurality of child device information is extracted, the plurality of child device information is transmitted to the wireless LAN parent device 300 (step S104). When the transmission is completed, the server 200 returns to step 102 and waits for reception of request data.

  Moving to the flow on the parent device side in FIG. 7, the child device information acquisition unit 312 of the wireless LAN parent device 300 determines whether or not the child device information has been received from the server 200 (step S105). When the slave unit information is not received (step S105: No), step S105 is repeated until the slave unit information is received. When the child device information is received (step S105: Yes), the process proceeds to step S106.

  The connection information acquisition unit 313 of the wireless LAN master device 300 includes the same algorithm (that is, the algorithm A1 and the algorithm A2) used to generate the connection information (network identifier and encryption key) assigned to the slave device, Using the handset information received from the server 200, the same connection information as the connection information assigned to the wireless LAN handset 100 is generated (step S106). If a plurality of slave unit information has been received, connection information is generated for each received slave unit information, for example, as shown in FIG.

  When the generation of the connection information is completed, the wireless LAN base device 300 stores the generated connection information in the storage unit 320 and ends the connection information generation process.

  Next, “communication connection establishment processing” will be described.

  When the generation of the connection information is completed, the wireless LAN master device 300 starts “communication connection establishment processing” for establishing a communication connection with the wireless LAN slave device 100. In addition, when the power is turned on, the wireless LAN slave device 100 starts a “communication connection establishment process” for establishing a communication connection with the wireless LAN master device 300. The “communication connection establishment process” will be described below with reference to the flowchart of FIG.

  The beacon signal transmission unit 314 of the wireless LAN base device 300 acquires the network identifier generated by the connection information generation process from the storage unit 320. Then, a beacon signal including the acquired network identifier is generated, and the beacon signal is transmitted through the antenna 340 at regular time intervals (step S210). If there are a plurality of wireless LAN slave devices 100 assigned to the wireless LAN master device 300 and a plurality of network identifiers are generated in the connection information generation process, a beacon signal is generated and transmitted for each network identifier. For example, if three network identifiers are generated in the connection information generation process, three beacon signals are alternately transmitted.

  Moving to the flow on the handset side, the beacon signal receiving unit 111 of the wireless LAN handset 100 determines whether a beacon signal has been received from the wireless LAN base device 300 (step S220). When the beacon signal is not received (step S220: No), step S220 is repeated until the beacon signal is received. When the beacon signal is received (step S220: Yes), the process proceeds to step S230.

  The beacon signal receiving unit 111 acquires the network identifier assigned to the wireless LAN slave device 100 from the storage unit 120. And the communication connection establishment part 113 discriminate | determines whether the network identifier contained in the beacon signal which the beacon signal receiving part 111 received corresponds with an own network identifier (step S230). If they do not match (step S230: No), the process returns to step S220 and waits for reception of a beacon signal.

  When the network identifiers match (step S230: Yes), the wireless LAN slave device 100 causes the wireless LAN master device 300 and the wireless LAN slave device 100 to mutually check the channel used, the modulation method, the SSID, etc. "Request processing" is started (step S240). In addition, the wireless LAN base device 300 starts probe response processing in response to the probe request from the wireless LAN slave device 100. The “probe request / response process” will be described below with reference to the flowchart of FIG.

  The probe request transmission unit 112 of the wireless LAN slave device 100 transmits a probe request signal including a network identifier that the probe request transmission unit 112 has around (step S241).

  Moving to the flow on the parent device side, the communication connection establishment unit 316 of the wireless LAN parent device 300 determines whether a probe request signal is received from the wireless LAN slave device 100 (step S242). When the probe request signal has not been received (step S242: No), step S242 is repeated until the probe request signal is received. When the probe request signal is received (step S242: Yes), the process proceeds to step S243.

  The communication connection establishment unit 316 acquires the network identifier generated by the connection information generation process from the storage unit 320. If a plurality of network identifiers are generated in the connection information generation process, a plurality of network identifiers are acquired. Then, the communication connection establishment unit 316 determines whether the acquired network identifier includes a network identifier that matches the network identifier included in the probe request signal received from the wireless LAN slave device 100 (step S243). If there is no matching network identifier (step S243: No), the wireless LAN base device 300 returns to step S242 and waits for reception of the probe request signal again. If there is a matching network identifier (step S243: Yes), the process proceeds to step S244.

  The communication connection establishment unit 316 acquires the encryption key corresponding to the matching network identifier from the storage unit 320. Then, the communication connection establishment unit 316 sets the matching network identifier and the acquired encryption key in a predetermined storage area as connection information for establishing a communication connection with the wireless LAN slave device 100 (Step S31). S244).

  When the setting is completed, the communication connection establishment unit 316 transmits a probe response signal including the network identifier set in step S244 to the surroundings (step S245).

  Moving to the flow on the handset side, the probe request transmitting unit 112 of the wireless LAN handset 100 determines whether a probe response signal is received from the wireless LAN base device 300 (step S246). When the probe response signal has not been received (step S246: No), step S246 is repeated until the probe response signal is received. When the probe response signal is received (step S246: Yes), the process proceeds to step S247.

  The probe request transmission unit 112 determines whether the network identifier included in the probe response signal matches its own network identifier (step S247). If they do not match (step S247: No), the wireless LAN slave device 100 returns to step S246 and waits for reception of a probe response signal. If they match (step S247: Yes), the wireless LAN slave device 100 ends the probe request process.

  Returning to the communication connection establishment process in FIG. 9, the communication connection establishment unit 316 of the wireless LAN master device 300 and the communication connection establishment unit 113 of the wireless LAN slave device 100 respectively authenticate the wireless LAN slave device 100 to the wireless LAN slave device 100. Authentication processing is executed using the assigned network identifier and encryption key or the network identifier and encryption key set in step S244 (step S250). The authentication method is not limited to a specific method, and various known authentication methods can be used. As the authentication method, for example, shared key authentication (common key authentication), PSK (Pre-Shared Key) authentication specified by IEEE 802.11, an authentication method uniquely defined by the device manufacturer, etc. are used. Is possible.

  When the authentication is completed, the communication connection establishment unit 316 and the communication connection establishment unit 113 register the wireless LAN slave device 100 authenticated by the wireless LAN master device 300 (for example, an AID (Association ID) in the wireless LAN slave device 100). Association request / response processing is performed to establish a communication connection (step S260). When the communication connection is established, the wireless LAN master device 300 and the wireless LAN slave device 100 end the communication connection establishment process.

  According to the present embodiment, the wireless LAN slave device 100 does not change the connection settings, but the wireless LAN master device 300 changes the connection settings. Even before the device 100 authenticates each other and can enter a one-to-one communication, the wireless LAN parent device 300 acquires the child device information from the server 200, so that the wireless LAN parent device 300 and the wireless LAN The subunit | mobile_unit 100 can have a common network identifier and encryption key. Therefore, the user can securely install the wireless LAN master device 300 and the wireless LAN slave device 100 within the mutual radio wave reachable range and turn on the power without performing complicated setting operations. And a communication connection between the wireless LAN slave unit 100 and the wireless LAN slave unit 100 can be established.

  In addition, since the wireless LAN base device 300 is configured to generate a network identifier and an encryption key using a hash algorithm and an encryption algorithm based on the unique information of the handset, the network identifier and encryption are bothered to the server 200. There is no need to memorize the key. Therefore, even if there is a malicious person among the persons who manage the server 200, there is no fear that the network identifier and the encryption key will be leaked from that person. Further, since there is no need to include an encryption key or the like in the slave unit information, there is no concern that a malicious person will steal the encryption key or the like while the slave unit information is passing through the network.

  The parent-child relationship between the wireless LAN master device 300 and the wireless LAN slave device 100 is managed in the slave device information database of the server 200. The wireless LAN base device 300 is configured to acquire the information of the assigned slave device by transmitting its own identification information to the server 200. Naturally, since the server administrator can freely rewrite the contents of the child device information storage unit 220, the server administrator can freely change the parent-child relationship between the parent device and the child device owned by the user from a remote location. Since the user can leave the registration work to a server administrator in a remote location, even if a new slave unit is purchased, the master unit can be used immediately as it is without any operation burden. Become.

  The above-described embodiment is an example, and various changes and applications are possible.

  For example, in the above-described embodiment, the wireless LAN slave device 100 is configured to acquire the network identifier and the encryption key from the storage unit 120. However, similarly to the wireless LAN master device 300, the algorithm A1 and the algorithm A2 are used. May be used to generate a network identifier and an encryption key. Since it is not necessary to store the network identifier and the encryption key in the storage unit 120, there is a concern that the network identifier and the encryption key may be extracted at the device manufacturing stage even if there is a malicious person among the device manufacturers and providers. There is no.

  In the above-described embodiment, the server 200 is configured to transmit only the slave unit specific information to the wireless LAN base unit 300. However, the slave unit information storage unit 220 stores the network identifier and the encryption key of the slave unit. The network identifier and the encryption key may be stored and transmitted at the same time. It is possible to transmit only the network identifier and the encryption key without transmitting the handset specific information.

  In the above-described embodiment, the wireless LAN master device 300 and the wireless LAN slave device 100 establish a communication connection using a common encryption key. However, the encryption key is not necessarily required to be common. Absent. For example, the wireless LAN master device 300 and the wireless LAN slave device 100 are each provided with a program or dedicated hardware for executing an algorithm of a public key cryptosystem, and each establishes a communication connection using a corresponding encryption key. Good. More specifically, the wireless LAN master device 300 and the wireless LAN slave device 100 each have a corresponding private key / public key pair, and establish a communication connection using the private key / public key pair. Also good. At this time, the wireless LAN master device 300 encrypts itself using an algorithm corresponding to the algorithm (that is, algorithm A2) used to generate the encryption key (private key and public key pair) of the slave device. A key (a pair of a secret key and a public key) may be generated.

  Further, the wireless LAN master device 300 and the wireless LAN slave device 100 may be configured to change the encryption key at regular time intervals after establishing the communication connection. In this case, each of the wireless LAN master device 300 and the wireless LAN slave device 100 may generate an encryption key using a random value included in the unique information of the slave device.

  In the above-described embodiment, the wireless LAN master device 300 sets the network identifier and the encryption key after receiving the probe request signal from the wireless LAN slave device 100, but before transmitting the beacon signal. A network identifier and an encryption key may be set.

  In the above-described embodiment, the wireless LAN slave device 100 is configured to be used by being connected to the USB terminal. However, in addition to the USB terminal, various terminals such as an IEEE 1394 terminal, a LAN terminal, and a PC card slot can be used. You may be comprised so that it can connect and use. In addition to the PC, the wireless LAN slave device 100 is connected to various electric devices such as a PC, a television, a recorder, a game machine, a fixed phone, a mobile phone, a smartphone, a tablet terminal, and a PDA (Personal Digital Assistant). It may be configured to be used. The wireless LAN slave device 100 may be a component built in the electric device or the electric device itself.

  The wireless LAN slave device 100, the server 200, and the wireless LAN master device 300 according to the present embodiment may be realized by a dedicated system or an ordinary computer system. For example, the wireless LAN slave device 100 and the server 200 are stored by distributing a program for performing the above-described operation in a computer-readable recording medium, installing the program in a computer, and executing the above-described processing. The wireless LAN base unit 300 may be configured. Further, it may be stored in a disk device provided in a server device on a network such as the Internet so that it can be downloaded to a computer, for example. Further, the above-described functions may be realized by joint operation of the OS and application software. In this case, only the part other than the OS may be stored and distributed in a medium, or may be downloaded to a computer.

  As a recording medium for recording the program, USB memory, flexible disk, CD (Compact Disc), DVD (Digital Versatile Disc), Blu-ray Disc (registered trademark), MO (Magneto-Optical disk), SD memory card ( A computer-readable recording medium such as a Secure Digital memory card), a Memory Stick (registered trademark), a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, a magnetic tape, or the like can be used.

  A part or all of the above embodiment can be described as in the following supplementary notes, but is not limited thereto.

(Appendix 1)
A wireless LAN master unit connected to the server device via the network and a wireless LAN slave unit having a common network identifier with the wireless LAN master unit establish a communication connection using a common or corresponding encryption key. A wireless LAN communication system,
The wireless LAN slave unit is
A network identifier and an encryption key for establishing a communication connection with the wireless LAN base unit are pre-assigned,
Storage means for storing assigned network identifier and encryption key, or information for generating the assigned network identifier and encryption key,
The server device
Handset information storage means for storing information assigned to the wireless LAN handset;
In response to a request from the wireless LAN base unit, a handset information transmission unit that transmits information of the wireless LAN handset stored in the handset information storage unit,
The wireless LAN base unit is
Based on the information transmitted from the server device, the network identifier assigned to the wireless LAN slave unit and the encryption key common to or corresponding to the encryption key assigned to the wireless LAN slave unit Connection information acquisition means to acquire;
Connection information setting means for setting the acquired network identifier and encryption key as a network identifier and encryption key for establishing a communication connection with the wireless LAN slave unit, and
The wireless LAN slave unit and the wireless LAN base unit communicate with each other using a network identifier and encryption key assigned to the wireless LAN slave unit or a network identifier and encryption key set by the connection information setting unit. Establish,
A wireless LAN communication system.

(Appendix 2)
The slave unit information storage means of the server device stores a network identifier and an encryption key assigned to the wireless LAN slave unit,
The slave unit information transmitting means of the server device transmits a network identifier and an encryption key assigned to the wireless LAN slave unit,
The connection information acquisition means of the wireless LAN master unit acquires a network identifier and an encryption key assigned to the wireless LAN slave unit from the server device.
The wireless LAN communication system according to appendix 1, wherein

(Appendix 3)
The network identifier stored in the wireless LAN slave device is information generated using the first algorithm based on unique information assigned to each of the wireless LAN slave devices and unique to the wireless LAN slave device,
The encryption key stored in the wireless LAN slave device is information generated using a second algorithm based on the unique information of the wireless LAN slave device,
The slave unit information storage means of the server device stores the unique information of the wireless LAN slave unit,
The slave unit information transmitting means of the server device transmits the unique information of the wireless LAN slave unit in response to a request of the wireless LAN master unit,
The connection information acquisition means of the wireless LAN base unit is:
Obtaining the specific information of the wireless LAN slave unit from the server device;
Using the acquired unique information and the first algorithm, a network identifier common to the network identifier assigned to the wireless LAN slave unit is generated,
Using the acquired unique information and an algorithm common to or corresponding to the second algorithm, an encryption key that is common to or corresponds to the encryption key assigned to the wireless LAN slave unit is generated.
The wireless LAN communication system according to appendix 1, wherein

(Appendix 4)
The storage means of the wireless LAN slave device stores the unique information unique to the wireless LAN slave device, which is information for generating a network identifier and an encryption key assigned to the wireless LAN slave device,
The wireless LAN slave unit is
Using the unique information stored in the storage means and the first algorithm, a network identifier assigned to the wireless LAN slave unit is generated,
Using the unique information stored in the storage means and the second algorithm to generate an encryption key assigned to the wireless LAN slave unit;
The wireless LAN communication system according to supplementary note 3, wherein

(Appendix 5)
The wireless LAN base unit is pre-assigned the wireless LAN handset,
The slave device information storage means of the server device includes identification information for identifying the wireless LAN master device from other wireless LAN master devices, and information of the wireless LAN slave device assigned to the wireless LAN master device. Remember and associate
The wireless LAN master device requests the server device for information on the wireless LAN slave device, and transmits the identification information of itself.
The slave unit information transmitting means of the server device is:
Based on the identification information transmitted from the wireless LAN base unit, information on the wireless LAN handset assigned to the wireless LAN base unit is extracted from information stored in the handset information storage unit And
Transmitting the extracted information of the wireless LAN slave unit to the wireless LAN master unit;
The wireless LAN communication system according to any one of appendices 1 to 4, characterized in that:

(Appendix 6)
A wireless LAN master device that establishes a communication connection with a wireless LAN slave device to which a network identifier and an encryption key are assigned in advance,
A network identifier assigned to the wireless LAN slave unit and an encryption key common to or corresponding to the encryption key assigned to the wireless LAN slave unit from a server device connected via the network Connection information acquisition means for acquiring based on the information;
Connection information setting means for setting the acquired network identifier and encryption key as a network identifier and encryption key for establishing a communication connection with the wireless LAN slave unit;
Communication connection establishment means for establishing communication connection with the wireless LAN slave device using the set network identifier and encryption key,
A wireless LAN base unit characterized by the above.

(Appendix 7)
A network identifier and an encryption key that are pre-assigned to a wireless LAN slave unit and acquired based on information from a server device connected via a network, a network identifier for establishing a communication connection with the wireless LAN slave unit, and A wireless LAN slave device that establishes a communication connection with a wireless LAN master device set as an encryption key,
Storage means for storing pre-assigned network identifier and encryption key, or information for generating the assigned network identifier and encryption key;
Communication connection establishment means for establishing a communication connection with the wireless LAN base unit using an assigned network identifier and an encryption key;
A wireless LAN handset characterized by the above.

(Appendix 8)
A wireless LAN slave device to which a network identifier and an encryption key are assigned in advance; a wireless LAN master device connected via a network to a server device having a function of transmitting information assigned in advance to the wireless LAN slave device; Is a communication connection establishment method for establishing a communication connection,
The wireless LAN base unit sends a network identifier pre-assigned to the wireless LAN handset and an encryption key common to or corresponding to an encryption key pre-assigned to the wireless LAN handset. A connection information acquisition step to acquire based on information transmitted from the device;
A connection information setting step in which the wireless LAN base unit sets the network identifier and encryption key acquired in the connection information acquisition step as a network identifier and encryption key for establishing a communication connection with the wireless LAN slave unit; ,
The wireless LAN slave unit and the wireless LAN base unit communicate with each other using the network identifier and encryption key assigned to the wireless LAN slave unit or the network identifier and encryption key set in the connection information setting step. A communication connection establishment step for establishing
The communication connection establishment method characterized by the above-mentioned.

(Appendix 9)
A computer that controls a wireless LAN master device that establishes a communication connection with a wireless LAN slave device in which a network identifier and an encryption key are pre-assigned,
A server device in which a network identifier pre-assigned to the wireless LAN slave device and an encryption key common to or corresponding to an encryption key pre-assigned to the wireless LAN slave device are connected via a network Connection information acquisition function to acquire based on information from,
A connection information setting function for setting the acquired network identifier and encryption key as a network identifier and encryption key for establishing a communication connection with the wireless LAN slave unit;
A communication connection establishment function for establishing a communication connection with the wireless LAN slave device using a set network identifier and an encryption key;
A program characterized by that.

DESCRIPTION OF SYMBOLS 1 Wireless LAN communication system 100 Wireless LAN subunit | mobile_unit 110 Control part 111 Beacon signal receiving part 112 Probe request transmission part 113 Communication connection establishment part 120 Storage part 130 Antenna 200 Server 210 Control part 211 Request reception part 212 Child machine information transmission part 220 Child Machine information storage unit 230 Communication interface 300 Wireless LAN base unit 310 Control unit 311 Slave unit information request unit 312 Slave unit information acquisition unit 313 Connection information acquisition unit 314 Beacon signal transmission unit 315 Connection information setting unit 316 Communication connection establishment unit 320 Storage unit 330 Communication interface 340 Antenna

Claims (9)

A wireless LAN master unit connected to the server device via the network and a wireless LAN slave unit having a common network identifier with the wireless LAN master unit establish a communication connection using a common or corresponding encryption key. A wireless LAN communication system,
The wireless LAN slave unit is
A network identifier and an encryption key for establishing a communication connection with the wireless LAN base unit are pre-assigned,
Storage means for storing assigned network identifier and encryption key, or information for generating the assigned network identifier and encryption key,
The server device
Handset information storage means for storing information assigned to the wireless LAN handset;
In response to a request from the wireless LAN base unit, a handset information transmission unit that transmits information of the wireless LAN handset stored in the handset information storage unit,
The wireless LAN base unit is
Based on the information transmitted from the server device, the network identifier assigned to the wireless LAN slave unit and the encryption key common to or corresponding to the encryption key assigned to the wireless LAN slave unit Connection information acquisition means to acquire;
Connection information setting means for setting the acquired network identifier and encryption key as a network identifier and encryption key for establishing a communication connection with the wireless LAN slave unit, and
The wireless LAN slave unit and the wireless LAN base unit communicate with each other using a network identifier and encryption key assigned to the wireless LAN slave unit or a network identifier and encryption key set by the connection information setting unit. Establish,
A wireless LAN communication system. The slave unit information storage means of the server device stores a network identifier and an encryption key assigned to the wireless LAN slave unit,
The slave unit information transmitting means of the server device transmits a network identifier and an encryption key assigned to the wireless LAN slave unit,
The connection information acquisition means of the wireless LAN master unit acquires a network identifier and an encryption key assigned to the wireless LAN slave unit from the server device.
The wireless LAN communication system according to claim 1. The network identifier stored in the wireless LAN slave device is information generated using the first algorithm based on unique information assigned to each of the wireless LAN slave devices and unique to the wireless LAN slave device,
The encryption key stored in the wireless LAN slave device is information generated using a second algorithm based on the unique information of the wireless LAN slave device,
The slave unit information storage means of the server device stores the unique information of the wireless LAN slave unit,
The slave unit information transmitting means of the server device transmits the unique information of the wireless LAN slave unit in response to a request of the wireless LAN master unit,
The connection information acquisition means of the wireless LAN base unit is:
Obtaining the specific information of the wireless LAN slave unit from the server device;
Using the acquired unique information and the first algorithm, a network identifier common to the network identifier assigned to the wireless LAN slave unit is generated,
Using the acquired unique information and an algorithm common to or corresponding to the second algorithm, an encryption key that is common to or corresponds to the encryption key assigned to the wireless LAN slave unit is generated.
The wireless LAN communication system according to claim 1. The storage means of the wireless LAN slave device stores the unique information unique to the wireless LAN slave device, which is information for generating a network identifier and an encryption key assigned to the wireless LAN slave device,
The wireless LAN slave unit is
Using the unique information stored in the storage means and the first algorithm, a network identifier assigned to the wireless LAN slave unit is generated,
Using the unique information stored in the storage means and the second algorithm to generate an encryption key assigned to the wireless LAN slave unit;
The wireless LAN communication system according to claim 3. The wireless LAN base unit is pre-assigned the wireless LAN handset,
The slave device information storage means of the server device includes identification information for identifying the wireless LAN master device from other wireless LAN master devices, and information of the wireless LAN slave device assigned to the wireless LAN master device. Remember and associate
The wireless LAN master device requests the server device for information on the wireless LAN slave device, and transmits the identification information of itself.
The slave unit information transmitting means of the server device is:
Based on the identification information transmitted from the wireless LAN base unit, information on the wireless LAN handset assigned to the wireless LAN base unit is extracted from information stored in the handset information storage unit And
Transmitting the extracted information of the wireless LAN slave unit to the wireless LAN master unit;
The wireless LAN communication system according to claim 1, wherein the wireless LAN communication system is a wireless LAN communication system. A wireless LAN master device that establishes a communication connection with a wireless LAN slave device to which a network identifier and an encryption key are assigned in advance,
A network identifier assigned to the wireless LAN slave unit and an encryption key common to or corresponding to the encryption key assigned to the wireless LAN slave unit from a server device connected via the network Connection information acquisition means for acquiring based on the information;
Connection information setting means for setting the acquired network identifier and encryption key as a network identifier and encryption key for establishing a communication connection with the wireless LAN slave unit;
Communication connection establishment means for establishing communication connection with the wireless LAN slave device using the set network identifier and encryption key,
A wireless LAN base unit characterized by the above. A network identifier and an encryption key that are pre-assigned to a wireless LAN slave unit and acquired based on information from a server device connected via a network, a network identifier for establishing a communication connection with the wireless LAN slave unit, and A wireless LAN slave device that establishes a communication connection with a wireless LAN master device set as an encryption key,
Storage means for storing pre-assigned network identifier and encryption key, or information for generating the assigned network identifier and encryption key;
Communication connection establishment means for establishing a communication connection with the wireless LAN base unit using an assigned network identifier and an encryption key;
A wireless LAN handset characterized by the above. A wireless LAN slave device to which a network identifier and an encryption key are assigned in advance; a wireless LAN master device connected via a network to a server device having a function of transmitting information assigned in advance to the wireless LAN slave device; Is a communication connection establishment method for establishing a communication connection,
The wireless LAN base unit sends a network identifier pre-assigned to the wireless LAN handset and an encryption key common to or corresponding to an encryption key pre-assigned to the wireless LAN handset. A connection information acquisition step to acquire based on information transmitted from the device;
A connection information setting step in which the wireless LAN base unit sets the network identifier and encryption key acquired in the connection information acquisition step as a network identifier and encryption key for establishing a communication connection with the wireless LAN slave unit; ,
The wireless LAN slave unit and the wireless LAN base unit communicate with each other using the network identifier and encryption key assigned to the wireless LAN slave unit or the network identifier and encryption key set in the connection information setting step. A communication connection establishment step for establishing
The communication connection establishment method characterized by the above-mentioned. A computer that controls a wireless LAN master device that establishes a communication connection with a wireless LAN slave device in which a network identifier and an encryption key are pre-assigned,
A server device in which a network identifier pre-assigned to the wireless LAN slave device and an encryption key common to or corresponding to an encryption key pre-assigned to the wireless LAN slave device are connected via a network Connection information acquisition function to acquire based on information from,
A connection information setting function for setting the acquired network identifier and encryption key as a network identifier and encryption key for establishing a communication connection with the wireless LAN slave unit;
A communication connection establishment function for establishing a communication connection with the wireless LAN slave device using a set network identifier and an encryption key;
A program characterized by that.

Images