JP2014090303A - Radio communication system, radio access device and radio slave unit - Google Patents

Abstract

PROBLEM TO BE SOLVED: To allow a radio slave unit to establish radio connection without a physical access to radio setting information of a radio access point.SOLUTION: In a radio slave unit 10, an SSID is specified by using a photographed image of a radio access point and a connection request of a wireless LAN is performed by using the SSID. After the connection request, in the radio slave unit 10, a radio access point 20 is specified by detecting light emission in a predetermined light emission pattern in the radio access point 20.

Description

  The present invention relates to a wireless communication system, a wireless access device, and a wireless slave device, and more particularly to a wireless communication system in which a wireless slave device and a wireless access device are connected with security ensured.

  In order to connect a wireless slave unit to a wireless access point via a wireless LAN, an SSID (Service Set Identifier), which is an identification address for specifying the wireless access point, and an encryption method for ensuring secure connection And the encryption key must be set in the wireless slave device to be connected to the wireless access point for connection.

  Conventionally, in order to confirm the SSID, encryption method, and encryption key of a wireless access point to be connected, an interface that can confirm internal setting information such as a WEB setting screen prepared for the wireless access point is used, It was necessary to visually confirm the contents displayed on the label or the like attached to the access point.

  Also, in order to simplify the input by the user, the setting is performed by reading the barcode registered with the SSID, encryption method, and encryption key displayed on the screen or label of the device with the camera of the wireless slave unit. (For example, refer to Patent Document 1).

  Also, by pressing the switch of the wireless access point, the wireless access point is put into a special mode to specify the wireless access point to which the wireless slave unit is connected, and the standard or means different from the wireless LAN communication to be connected A technique for confirming setting information using (infrared communication or short-range communication) has been considered (see, for example, Patent Documents 2 and 3).

  Further, a technique for acquiring setting information by photographing blinking of an infrared LED at an access point has been considered (see, for example, Patent Document 4).

JP2011-259372A JP 2010-161780 A JP 2008-199503 A JP 2007-110274 A

  However, the above-described technique has the following problems.

  When the wireless access point is installed at a position where it cannot be touched, a physical interface such as a switch cannot be operated, so that the wireless connection procedure cannot be started. In addition, the wireless setting displayed on the screen, the label, or the like cannot be confirmed, and the wireless connection cannot be set.

  In addition, when a communication means different from wireless LAN communication is used, the appearance and internal configuration of the apparatus are affected, and the cost is increased.

  In addition, when setting information is acquired by photographing blinking of an infrared LED at an access point, the user must recognize the wireless access point in advance.

  The present invention has been made in view of the problems of the technology as described above, and the wireless slave unit ensures security for a wireless access device installed in a place where physical access is not possible. A wireless communication system, a wireless access device, and a wireless slave device that can be connected to the wireless slave device while ensuring security without adding a special communication function to the wireless access device. The purpose is to provide.

In order to achieve the above object, the present invention provides:
A wireless communication system that performs security communication between a wireless slave and a wireless access device,
The wireless slave is
Photographing means for photographing an image and a light emission state of the wireless access device;
The wireless access device is identified using an image captured by the imaging means, and a first connection request is transmitted to the wireless access device, and a predetermined light emission pattern of the wireless access device is determined by the imaging means. Slave unit control means for transmitting a second connection request to the wireless access device when the flashing state is photographed;
The wireless access device is:
A light emitting means for emitting light in the predetermined light emission pattern when receiving the first connection request;
When the second connection request is received, it is determined whether the wireless slave device that has transmitted the second connection request is the wireless slave device that has transmitted the first connection request, and the second connection request If the wireless slave device that transmitted the wireless connection device is the wireless slave device that transmitted the first connection request, the device transmits the information necessary for performing the security communication to the wireless slave device and permits the connection. Control means.

Also, a wireless access device that performs security communication with a wireless slave device,
When receiving the first connection request from the wireless slave unit, light emitting means for emitting light with a predetermined light emission pattern;
When receiving the second connection request transmitted from the wireless slave device that has confirmed the light emission pattern, the wireless slave device that has transmitted the second connection request is the wireless slave device that has transmitted the first connection request. In order to determine whether or not there is a wireless slave unit that has transmitted the second connection request is a wireless slave unit that has transmitted the first connection request, to perform the security communication with the wireless slave unit And device control means for transmitting necessary information and permitting connection.

Also, a wireless slave device that performs security communication with the wireless access device,
Photographing means for photographing an image and a light emission state of the wireless access device;
The wireless access device is identified using an image photographed by the photographing means, a first connection request is transmitted to the wireless access device, and a predetermined in the wireless access device that has received the first connection request And a handset control means for transmitting a second connection request to the wireless access device when the light emission state of the light emission pattern is photographed by the photographing means.

  According to the present invention, a wireless slave device can be connected to a wireless access device installed in a place where physical access is not possible while ensuring security. Further, the wireless slave device can be connected with security secured without adding a special communication function to the wireless access device.

It is a figure which shows one Embodiment of the radio | wireless communications system of this invention. It is a block diagram which shows the structure of the radio | wireless subunit | mobile_unit shown in FIG. It is a block diagram which shows the structure of the wireless access point shown in FIG. 4 is a flowchart for explaining a connection setting operation in the wireless communication system shown in FIGS. It is a figure which shows an example of the information extracted from the image image | photographed with the radio | wireless subunit | mobile_unit shown in FIG. It is a figure which shows an example of the information stored as apparatus identification information in the subunit | mobile_unit memory shown in FIG. It is a figure which shows the other example of the information stored as apparatus identification information in the subunit | mobile_unit memory shown in FIG. It is a figure which shows the other example of the information extracted from the image image | photographed with the radio | wireless subunit | mobile_unit shown in FIG.

  Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 is a diagram showing an embodiment of a wireless communication system of the present invention.

  In this embodiment, as shown in FIG. 1, the wireless slave device 10 is connected to a wireless access point 50 that is a wireless access device whose setting information for ensuring security, such as an SSID, an encryption method, and an encryption key, is unknown. A wireless LAN connection is established by the wireless 100.

  The wireless slave device 10 is capable of wireless LAN communication based on the standard of IEEE802.11x (for example, IEEE802.11a, IEEE802.11b, IEEE802.11g, or IEEE802.11n), and is a lens for taking a video as a photographing unit. 14.

  The wireless access point 50 can be connected to a data communication line such as a LAN (Local Area Network) or the Internet via the network 80, and is configured to be able to communicate with the wireless slave unit 10 via a wireless LAN. Have.

  In the wireless communication system configured as described above, when the wireless slave device 10 is connected to the wireless access point 50 by wireless LAN using the wireless 100, the wireless slave device 10 uses the lens 14 to connect the wireless access point 50 to the wireless access point 50. An image is photographed, the device or model of the wireless access point 50 is specified from the image, and a connection request on the wireless 100 is made using wireless LAN setting information previously assigned to the specified device or model. The wireless access point 50 that has received the connection request causes the LED 56 to emit light with a predetermined light emission pattern, and notifies the wireless slave device 10 that the connection request has been received by the light emission 200. The wireless slave device 10 captures the light emission state of the LED 56 with the lens 14, confirms a predetermined light emission pattern, identifies the wireless access point 50 as a connection partner, and makes a connection request again. The wireless access point 50 identifies the target wireless slave device 10 by allowing a specific partner to transmit a wireless connection request again, and permits wireless connection.

  In this way, it is possible to perform wireless LAN connection setting for the wireless access point 50 whose wireless connection setting information is not known without operating the wireless access point 50 or confirming the display.

  Hereinafter, the configuration and operation of the above-described wireless communication system will be described in more detail.

  FIG. 2 is a block diagram showing a configuration of the wireless slave device 10 shown in FIG.

  As shown in FIG. 2, the wireless slave device 10 shown in FIG. 1 is a slave device that performs wireless LAN communication based on the IEEE802.11x standard with a slave device control unit 11 such as a CPU that controls the operation of the wireless slave device 10. Wireless communication unit 12, slave antenna 13 that transmits and receives wireless communication, lens 14 that captures an image as an image capturing function, and a CCD (Charge Coupled Device) that converts image information captured by lens 14 into analog data ) Unit 15, an A / D (Analog / Digital) conversion unit 16 that converts analog data into digital data, an image analysis unit 17 that identifies and extracts necessary information from the image data converted into digital data, and a user A user control unit 18 for operating the wireless slave device 10 by a switch, a touch panel, etc., and a slave device timer 19 for measuring an elapsed time from when a specific state occurs A display unit 21 for displaying information, and a slave unit memory 20. The slave unit memory 20 is set with operations and information necessary for the wireless slave unit 10 to establish a wireless connection with the wireless access point 50, and a dedicated application that the user starts to perform this operation. 31, device identification information 32 storing information for specifying the model from the appearance information of the wireless access point 50 taken, and SSID information of the wireless connection destination and an encryption key for encrypting communication are registered Wireless connection information 33 to be stored is stored.

  FIG. 3 is a block diagram showing a configuration of the wireless access point 50 shown in FIG.

  As shown in FIG. 3, the wireless access point 50 shown in FIG. 1 includes a control unit 51 serving as a device control unit such as a CPU that controls the operation of the wireless access point 50, and a wireless device that uses the same standard as the wireless slave device 10. A wireless communication unit 52 that enables LAN communication, an antenna 53 that transmits and receives wireless communication, a network communication unit 54 that enables connection to a LAN or the Internet via the network 80 based on the Ethernet (IEEE 802.3 standard), and an LED 56 An LED control unit 55 for controlling on / off of the LED, an LED 56 for displaying the state of the apparatus to the user, a timer 57 for measuring an elapsed time since the occurrence of a specific state, and a memory 58 ing. In the memory 58, operations and information necessary for the wireless access point 50 to establish a wireless connection with the wireless slave device 10 are set, and wireless information such as the SSID of the wireless access point 50 and the corresponding encryption information, The wireless connection information 61 that stores information of the wirelessly connected slave unit and the control content for the operation that requires the wireless access point 50 to establish a wireless connection between the wireless slave unit 10 are set. Dedicated software 62 is stored.

  Note that, in the wireless slave device 10 and the wireless access point 50, functions and configurations defined in IEEE802.11 are well known to those skilled in the art and are not directly related to the present invention. Omitted.

  Hereinafter, in the wireless communication system configured as described above, an operation (hereinafter referred to as a connection setting operation) until the wireless slave device 10 is in a wireless communication connection state with the wireless access point 50 will be described.

  As a premise, in order to perform the connection setting operation, the wireless slave unit 10 has not been wirelessly connected to the wireless access point 50, and SSID, encryption method, and encryption key setting information necessary for connection are not registered. It is also assumed that the user of the wireless slave device 10 does not know the setting information.

  The wireless slave device 10 can perform connection setting operations by a dedicated application 31 for user activation and the wireless access point 50 by dedicated software 61, respectively.

  Further, it is assumed that information necessary for the following connection setting operation is registered in advance in both the wireless slave device 10 and the wireless access point 50.

  The SSID of the wireless access point starts with a specific character string depending on the device, as will be described later. Further, the wireless access point does not conceal the SSID for the wireless access point search from the wireless slave unit.

  As a wireless method for connection in the connection setting operation, the encryption method is WEP and the encryption key is 12345678.

  As a light emission condition of the LED 56, a condition of “flashing in which lighting for 0.1 second is repeated three times at intervals of 1 second” is set.

  Within 5 seconds is set as the time until the LED 56 is reconnected after light emission.

  FIG. 4 is a flowchart for explaining a connection setting operation in the wireless communication system shown in FIGS.

  When a user who wants to connect the wireless slave device 10 to the wireless access point 50 via a wireless LAN operates the user control unit 18 of the wireless slave device 10 and executes the dedicated application 31 stored in the slave memory 20 (step 1) The wireless slave device 10 starts the dedicated application 31 and notifies the user to the lens 14 to take an image of the wireless access point 50 by the display unit 21.

  When the user captures an image of the wireless access point 50 with the lens 14 (step 2), the wireless slave device 10 receives the image captured with the lens 14 with the CCD unit 15 and digitally outputs with the A / D unit 16. The image is converted into an image and sent to the image analysis unit 17. The image analysis unit 17 extracts information on the shape and color of the target with the device at the center of the image information as the appearance of the wireless access point 50 (step 3).

  The wireless slave device 10 compares the information extracted from the image with the device identification information 32 in the slave device control unit 11 (step 4), and specifies the device of the wireless access point 50 to be connected (step 5).

  FIG. 5 is a diagram illustrating an example of information extracted from an image photographed by the wireless slave device 10 illustrated in FIG. 3. FIG. 6 is a diagram showing an example of information stored as device identification information 32 in handset memory 20 shown in FIG.

  As shown in FIG. 6, in the slave memory 20, the first three characters of the SSID of the device are stored as the device identification information 32 in association with the device name, its outer shape, and color. Therefore, as shown in FIG. 5, by comparing the information extracted from the image by the image analysis unit 17 and the device identification information 32, the device of the wireless access point 50 to be connected can be specified. Note that the outer shape in the figure is only a figure from one direction, but the identification can be compared with the data stored in the device identification information 32 without photographing from a specific angle by three-dimensional image data. And If the apparatus cannot be identified in step 5, the appearance information is extracted again from the captured image and compared.

  Since the information extracted from the image is as shown in FIG. 5, the handset controller 11 is a device that stores the device identification information 32 shown in FIG. 6 as a wireless access point for wireless communication. A device B having the same shape and color in the image shown in FIG. Since the wireless access point 50 is the device B, it can be seen from the device identification information 32 shown in FIG. 6 that the wireless SSID starts with a specific value “BBB”.

  The wireless slave device 10 searches for connectable SSIDs. Since the wireless access point corresponding to the connection setting operation does not conceal the SSID, it can be confirmed by searching for the SSID.

  In the slave unit 10, the slave unit 10 transmits a connection request to the wireless access point whose SSID starts with “BBB” via the slave unit wireless communication unit 12 and the slave unit antenna 13. This connection request becomes the first connection request. If there are multiple wireless access points that have the same device and the SSID starts with the same value, it is possible to identify them by sequentially sending connection requests and checking for the presence or absence of a reply by turning on the LED described later. is there. At this time, the wireless slave device 10 also transmits a MAC address that is identification information of the wireless slave device 10 together with the connection request.

  The transmission of the connection request from the wireless slave device 10 is performed using a specific encryption method and encryption key defined for identifying the connection in the connection setting operation. Here, a connection request is transmitted using WEP as the encryption method defined as described above and 12345678 as the encryption key (step 6).

  When the wireless access point 50 receives the connection request transmitted from the wireless slave device 10 via the antenna 53 and the wireless communication unit 52 (step 7), the received connection request is sent to the specific encryption method by the control unit 51. Then, it is confirmed whether the encryption key (encryption method: WEP, encryption key: 12345678) is used (step 8).

  If the received connection request does not use a specific encryption method and encryption key, since the connection request is not based on the connection setting operation, normal connection determination is performed (step 9).

  On the other hand, when the received connection request uses a specific encryption method and encryption key, it is determined that the connection request is a connection setting operation, and the control unit 51 has been transmitted together with the connection request. The MAC address of the wireless slave device 10 is read and stored in the wireless connection information 61. Then, in order to notify the wireless slave device 10 that has transmitted the connection request that the connection request has been received, the LED control unit 55 turns on the LED 56 in a predetermined pattern “0.1 second in advance” for 1 second. Light is emitted by “flashing repeated three times at intervals” (step 10).

  The timer 57 starts measuring time after the LED 56 emits light in a predetermined pattern (step 11). The time measurement by the timer 57 is to prevent malicious connections from other wireless slave units by analyzing the packet contents of wireless communication, and only connections that are accessed again within a predetermined time from the light emission of the LED 56 are allowed.

  After transmitting the connection request in Step 6, the wireless slave device 10 continues to analyze the image captured by the lens 14 in the image analysis unit 17, and the light emission state of the predetermined pattern is captured by the lens 14. When this is detected (step 12), the slave unit control unit 11 specifies that the SSID that transmitted the connection request in step 6 is that of the wireless access point 50 to be connected. The slave timer 19 measures the elapsed time from when the light emission state of a predetermined pattern is detected.

  The wireless slave unit 10 sends a connection request to the wireless access point 50 via the slave unit wireless communication unit 12 and the slave unit antenna 13 before the slave unit timer 19 reaches the predetermined time “5 seconds”. (Step 13). This connection request becomes the second connection request. At this time, the wireless slave device 10 also transmits the MAC address of the wireless slave device 10 together with the connection request.

  When the wireless access point 50 receives the connection request transmitted from the wireless slave device 10 via the antenna 53 and the wireless communication unit 52 (step 14), the wireless access point 50 transmitted together with the received connection request in the control unit 51. The MAC address of the device 10 and the MAC address of the connection request received earlier stored in the wireless connection information 61 are compared, and if they match, the wireless slave device 10 that has transmitted the connection request received in step 14 However, it is determined that the wireless slave device 10 has transmitted the connection request received in step 7 and has transmitted the connection request again in the connection setting operation (step 15).

  In addition, the wireless access point 20 uses the timer 57 to check whether the time from when the LED 56 emits light in a predetermined pattern until the connection request is received in step 14 is within a predetermined time ( Step 16) When it is within the time, a connection notification is transmitted to the wireless slave device 10 (Step 17), and a wireless connection is established (Step 18).

  In the connection setting operation, since the wireless slave device 10 and the wireless access point 50 are connected using the encryption method and the encryption key for the connection setting operation, the security of the wireless connection is not ensured. For this reason, the wireless access point 20 transmits an encryption method and an encryption key necessary for performing security communication with secure security to the wireless slave unit 10, and the wireless access point 50 and the wireless slave unit 10 communicate with each other. By switching to this encryption method and encryption key, security is ensured (step 19).

  Further, the wireless access point 50 determines that the MAC address received in step 14 does not match the MAC address of the connection request received earlier stored in the wireless connection information 61, or that the LED 56 emits light in a predetermined pattern. If the time from receiving the connection request in step 14 exceeds a predetermined time, the connection is rejected (step 20).

  As described above, in the wireless handset 10, the SSID that is the connection information set in advance for the captured wireless access point is identified using the image of the captured wireless access point, and the wireless LAN is used using the SSID. It is possible to identify the wireless access point 20 by detecting the light emission of the LED 56 with a predetermined light emission pattern in the wireless access point 20 that has received the connection request in the wireless slave unit 10 after the connection request is made. Thus, it is possible to establish a wireless LAN connection with the wireless access point 20 that is shooting. Thereby, the wireless slave device 10 can establish a wireless connection without physically accessing the wireless setting information of the wireless access point 50.

  In the present embodiment, the appearance of the wireless access point from the image taken by the wireless slave device 10 is specified at the center of the image, but the device identification is made from a highly likely target. The extraction can be continued until the information in the information 32 is applied, or only the appearance having a high possibility of reading can be extracted before the device identification information 32 is extracted.

  Further, in this embodiment, the wireless access point 50 uses only the light emission state by blinking of the LED 56 to notify that the wireless slave device 10 that has transmitted the connection request has received the connection request. It is also possible to set a specific pattern depending on the combination of blinking and the color of light emission.

  In this embodiment, the connection condition is “within 5 seconds”, but it is also possible to specify the target device by setting a specific time range such as “between 6 seconds and 8 seconds”. is there.

(Other embodiments)
In the above-described embodiment, the wireless connection is performed using the appearance information (outer shape, color) of the wireless access point 50, but the device of the wireless access point 50 is specified on the surface of the wireless access point 50. It is also possible to give a figure to the wireless access point 50 by displaying a figure, and to perform wireless connection using this figure.

  FIG. 7 is a diagram showing another example of information stored as device identification information 32 in handset memory 20 shown in FIG.

  In this embodiment, as shown in FIG. 7, a specific graphic is stored as the device identification information 32 instead of the external shape and color of the device, and the device and the SSID are specified using this graphic.

  In the wireless slave device 10, the image analysis unit 17 determines whether or not there is a figure stored as the device identification information 32 shown in FIG. 7 in the image photographed by the lens 14 and extracts it.

  FIG. 8 is a diagram illustrating another example of information extracted from an image photographed by the wireless slave device 10 illustrated in FIG. 3.

  When the image photographed by the wireless slave device 10 is as shown in FIG. 8, the graphic extracted from this image indicates “device H” with reference to the device identification information 32 shown in FIG. Since it corresponds to a figure, the slave unit controller 11 of the wireless slave unit 10 identifies the device H as a wireless access point for performing wireless communication. Since the wireless access point 50 is the device H, it can be seen from the device identification information 32 shown in FIG. 7 that the wireless SSID starts with a specific value “HHH”.

  Thereafter, in the same manner as described above, the wireless slave device 10 transmits a connection request to a wireless access point whose SSID starts with “HHH”.

  In this way, for a wireless access point whose wireless connection setting information is not known, wireless LAN connection settings are made without using other communication means and without operating or checking the display of the wireless access point. be able to.

DESCRIPTION OF SYMBOLS 10 Radio | wireless subunit | mobile_unit 11 subunit | mobile_unit control part 12 subunit | mobile_unit radio | wireless communication part 13 subunit | mobile_unit antenna 14 lens 15 CCD part 16 A / D conversion part 17 image analysis part 18 user control part 19 subunit | mobile_unit timer 20 subunit | mobile_unit memory 21 display part 31 Dedicated application 32 Device identification information 33, 61 Wireless connection information 50 Wireless access point 51 Control unit 52 Wireless communication unit 53 Antenna 54 Network communication unit 55 LED control unit 56 LED
57 timer 58 memory 62 dedicated software 80 network 100 wireless 200 light emission

Claims (8)

A wireless communication system that performs security communication between a wireless slave and a wireless access device,
The wireless slave is
Photographing means for photographing an image and a light emission state of the wireless access device;
The wireless access device is identified using an image captured by the imaging means, and a first connection request is transmitted to the wireless access device, and a predetermined light emission pattern of the wireless access device is determined by the imaging means. Slave unit control means for transmitting a second connection request to the wireless access device when the flashing state is photographed;
The wireless access device is:
A light emitting means for emitting light in the predetermined light emission pattern when receiving the first connection request;
When the second connection request is received, it is determined whether the wireless slave device that has transmitted the second connection request is the wireless slave device that has transmitted the first connection request, and the second connection request If the wireless slave device that transmitted the wireless connection device is the wireless slave device that transmitted the first connection request, the device transmits the information necessary for performing the security communication to the wireless slave device and permits the connection. And a wireless communication system having control means. The wireless communication system according to claim 1, wherein
The slave unit control means transmits identification information of the wireless slave unit to the wireless access device together with the first and second connection requests,
The wireless communication system, wherein the device control means determines whether the wireless slave device that has transmitted the second connection request is a wireless slave device that has transmitted the first connection request, using the identification information. The wireless communication system according to claim 1 or 2,
The device control means connects to the wireless slave unit when the time from when the light emitting means emits light in the predetermined pattern to when the second connection request is received is within a predetermined time. Wireless communication system to allow. The wireless communication system according to any one of claims 1 to 3,
The wireless communication system for specifying the wireless access device by using the shape and color of the wireless access device included in the image captured by the photographing unit or a graphic attached to the wireless access device. . A wireless access device for performing security communication with a wireless slave unit,
When receiving the first connection request from the wireless slave unit, light emitting means for emitting light with a predetermined light emission pattern;
When receiving the second connection request transmitted from the wireless slave device that has confirmed the light emission pattern, the wireless slave device that has transmitted the second connection request is the wireless slave device that has transmitted the first connection request. In order to determine whether or not there is a wireless slave unit that has transmitted the second connection request is a wireless slave unit that has transmitted the first connection request, to perform the security communication with the wireless slave unit A wireless access device having device control means for transmitting necessary information and permitting connection. The wireless access device according to claim 5, wherein
The device control means connects to the wireless slave unit when the time from when the light emitting means emits light in the predetermined pattern to when the second connection request is received is within a predetermined time. Wireless access device to allow. A wireless slave device that performs security communication with a wireless access device,
Photographing means for photographing an image and a light emission state of the wireless access device;
The wireless access device is identified using an image photographed by the photographing means, a first connection request is transmitted to the wireless access device, and a predetermined in the wireless access device that has received the first connection request A wireless slave device having slave device control means for transmitting a second connection request to the wireless access device when the light emission state of the light emission pattern is photographed by the photographing means. The wireless slave device according to claim 7,
The slave unit control unit is a radio slave unit that identifies the radio access device using the shape and color of the radio access device included in the image photographed by the photographing unit, or a graphic attached to the radio access device. .

Images