JP2015179919A - Communication system, communication apparatus, access point, and connection method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a communication system that avoids permitting an unspecified large number of communication apparatuses to connect with an access point when connection information is transferred between communication apparatuses.SOLUTION: A communication system includes a communication apparatus 10 and a communication apparatus 20 between which connection information for connecting with an access point 50 is transferred and which connect with the access point 50 by using the connection information. The communication system comprises: a determination unit 11 for determining whether or not the communication apparatus 10 has specific information; and a communication control unit 12 which controls, on the basis of a result of the determination by the determination unit 11, transfer of the communication information between the communication apparatus 10 and the communication apparatus 20.

Description

  The present invention relates to a communication system, a communication device, an access point, and a connection method, and more particularly to a communication system, a communication device, an access point, and a connection method that perform wireless LAN communication.

  An increasing number of communication devices can use NFC (Near Field Communication) as short-range wireless communication. Such a communication apparatus can perform wireless LAN communication setting using NFC communication when connecting to an access point via a wireless LAN. For example, the communication device can perform NFC communication by approaching the access point, and can acquire a service set identifier (SSID) and an encryption key from the access point. The communication device can perform wireless LAN communication with the access point by setting the acquired SSID and encryption key.

  For example, Patent Document 1 describes that a printer that has acquired authentication information from an authentication card and an imaging apparatus approach each other to a distance that allows NFC communication and perform NFC communication. Further, it is described that when authentication between the printer and the imaging apparatus is successful, setting information necessary for wireless LAN communication is exchanged between the apparatuses.

JP 2006-135791 A

  When the communication device performs NFC communication with the access point and acquires information necessary for wireless LAN communication (hereinafter referred to as connection information or access point information), the communication device easily performs NFC communication with the access point. There are times when you can't. For example, when the distance between the communication device and the access point is large, or when the access point is installed on the back side of the television device and the communication device cannot be brought close to the access point. is there.

  In such a case, it is conceivable to perform NFC communication between communication devices and exchange access point information. For example, if one communication device acquires access point information by performing NFC communication with the access point in advance before installing the access point information, the other communication device holds the access point information. Access point information is acquired from the communication device. However, if it is possible to acquire access point information when authentication is successful in each other's communication device, there is a possibility that access point information may spread without limitation as a result of repeated access point information sound exchange between communication devices. is there. In this case, there arises a problem that an unspecified number of communication devices can connect to the access point.

  An object of the present invention is a communication system, a communication device, and a communication device, which avoids being able to connect an unspecified number of communication devices to an access point even when passing access point information between the communication devices, which is the above-mentioned problem It is to provide an access point and a connection method.

  A communication system according to a first aspect of the present invention is a communication system in which connection information for connecting to an access point is transferred between communication devices, and the communication device connects to the access point using the connection information. A determination unit that determines whether or not the communication device has specific information; and a communication control unit that controls delivery of the connection information between the communication devices based on a determination result in the determination unit. Is.

  A communication apparatus according to a second aspect of the present invention transfers connection information for connecting to an access point between communication apparatuses, and the communication apparatus connects to the access point using the connection information. A determination unit that determines whether the access point has specific information generated by the access point, and when the determination unit determines that the specific information is included, to another communication device A communication control unit that transmits the connection information, and that determines that the determination unit does not have the specific information, and that does not transmit the connection information to the other communication device.

  When the access point according to the third aspect of the present invention receives a request for connection information used for communication connection from the communication device to the own device, the access point connects to the communication information and the communication device to another communication device. It has sending means for sending specific information for permitting sending of information.

  A connection method according to a fourth aspect of the present invention is a connection method in which connection information for connecting to an access point is transferred between communication devices, and the communication device uses the connection information to connect to the access point. And determining whether or not the communication device has specific information, and controlling delivery of the connection information between the communication devices based on a determination result regarding whether or not the communication device has the specific information. .

  According to the present invention, a communication system, a communication device, an access point, and a connection method for avoiding that an unspecified number of communication devices can be connected to an access point even when passing connection information between the communication devices are provided. Can do.

1 is a configuration diagram of a communication system according to a first exemplary embodiment; FIG. 3 is a configuration diagram of a communication system according to a second exemplary embodiment. It is a block diagram of the access point concerning Embodiment 2. FIG. FIG. 10 is a diagram illustrating a screen image for setting the number of times of generating an NFC communication key according to the second embodiment. FIG. 10 is a diagram showing a screen image for setting whether or not to transmit NFC communication key information according to the second embodiment; FIG. 3 is a configuration diagram of a communication apparatus according to a second embodiment. FIG. 10 is a diagram illustrating a flow of processing for acquiring NFC communication key information according to the second exemplary embodiment; FIG. 10 is a diagram showing a flow of access point information transfer processing in the communication apparatus according to the second exemplary embodiment; FIG. 6 is a configuration diagram of an access point according to a third embodiment. FIG. 10 is a diagram showing a flow of encryption key generation processing according to the third exemplary embodiment. FIG. 10 is a diagram showing a flow of encryption key generation processing according to the third exemplary embodiment. It is a figure which shows the data managed in the list holding | maintenance part concerning Embodiment 3. FIG. FIG. 10 is a diagram illustrating a flow of connection processing of a communication device at an access point according to a third embodiment. It is a figure which shows the data managed in the list holding | maintenance part concerning Embodiment 3. FIG. FIG. 6 is a configuration diagram of a communication device according to a fourth embodiment. FIG. 10 is a diagram showing a flow of access point information transfer processing between communication apparatuses according to a fourth embodiment;

(Embodiment 1)
Embodiments of the present invention will be described below with reference to the drawings. A configuration example of a communication system according to the first exemplary embodiment of the present invention will be described with reference to FIG. The communication system in FIG. 1 includes a communication device 10, a communication device 20, and an access point 50.

  The communication device 10 and the communication device 20 connect to the access point 50 by using the access point information. The communication device 10 and the communication device 20 are connected to the access point 50 and perform wireless LAN communication with the access point 50. The access point information is passed between the communication device 10 and the communication device 20.

  Next, a configuration example of the communication device 10 will be described. Since the communication device 20 has the same configuration as the communication device 10, detailed description thereof is omitted. The communication devices 10 and 20 may be a mobile phone terminal, a smartphone terminal, a tablet terminal, or the like, or may be a computer device such as a personal computer.

  The communication device 10 includes a determination unit 11 and a communication control unit 12. The determination unit 11 determines whether the communication device 10 has specific information. The specific information may be stored in a memory or the like of the communication device 10, for example. The specific information may be, for example, identification information generated by the access point 50, or identification information generated by a management device or the like that manages the access point 50. The specific information may be referred to as key information, flag information, or the like.

  The communication control unit 12 controls the transfer of access point information between the communication device 10 and the communication device 20 based on the determination result in the determination unit 11. The access point information may be, for example, the SSID of the access point 50 and an encryption key or encryption information used when encrypting data communicated between the communication device 10 and the access point 50. .

  For example, when the determination unit 11 determines that the communication device 10 has the specific information, the communication control unit 12 may control the access point information included in the communication device 10 to be transmitted to the communication device 20. It may be controlled not to transmit.

  As described above, by using the communication system of FIG. 1, the access point information is transferred between the communication device 10 and the communication device 20 depending on whether or not the specific information is held in the communication device 10. Can be controlled. Therefore, unlimited transfer of access point information between communication devices can be avoided.

  In FIG. 1, the configuration in which the communication apparatus 10 includes the determination unit 11 and the communication control unit 12 has been described. However, for example, the access point 50 may include the determination unit 11 and the communication control unit 12. Alternatively, a device different from the communication device 10, the communication device 20, and the access point 50 includes the determination unit 11 and the communication control unit 12, and controls the transfer of access point information between the communication device 10 and the communication device 20. May be.

(Embodiment 2)
Subsequently, a configuration example of the communication system according to the second exemplary embodiment of the present invention will be described with reference to FIG. The communication system of this figure has a configuration in which a communication device 30 is added to the communication system of FIG. In this figure, the communication device 10 performs NFC communication with the access point 50. The communication device 10 acquires access point information and NFC communication key information from the access point 50 by performing NFC communication with the access point 50. The NFC communication key information is information transmitted only to the communication device 10 that has directly communicated with the access point 50. The NFC communication key information will be described in detail later.

  The communication device 20 is a communication device that attempts to acquire access information held by the communication device 10. The communication device 20 may perform NFC communication with the communication device 10 and attempt to acquire access information from the communication device 10. The communication device 30 is a communication device that attempts to acquire access information from the communication device 20 after the communication device 20 acquires access information from the communication device 10. The communication device 30 may perform NFC communication with the communication device 20 and attempt to acquire access information from the communication device 20.

  For example, it is assumed that the access point 50 is installed in a place where NFC communication cannot be easily performed after transmitting the access point information and the NFC communication key information to the communication device 10. In such a case, the communication device 20 acquires access point information from the communication device 10 that has already acquired access point information, and tries to access the access point 50. Further, the communication device 30 attempts to acquire access point information from the communication device 20 and try to access the access point 50.

  In such a case, transfer of access point information between the communication devices is controlled using the NFC communication key information.

  Next, a configuration example of the access point 50 according to the second embodiment of the present invention will be described with reference to FIG. The access point 50 includes a control unit 51, a wireless LAN I / F (interface) 53, and an NFC I / F 54. Further, the control unit 51 has a key generation unit 52.

  The control unit 51 may be, for example, a CPU (Central Processing Unit) that executes a program stored in a memory. The wireless LAN I / F 53 is an interface used for performing wireless LAN communication with the communication device 10 or the communication device 20. The wireless LAN I / F 53 is equipped with an antenna for performing wireless communication.

  The NFC I / F 54 is an interface used for performing NFC communication with the communication device 10 or the communication device 20. The NFC I / F 54 is provided with an antenna for performing wireless communication.

  The key generation unit 52 generates NFC communication key information. The control unit 51 transmits NFC communication key information to the communication device connected via the NFC I / F 54. The NFC communication key information is information that is passed between the access point 50 and the communication device, and is information that cannot be passed between the communication devices.

  The NFC communication key information is information that is referred to in the communication device when the access information is transferred between the communication devices. For example, when the communication apparatus has NFC communication key information, a transmission mode in which access information is transmitted to another communication apparatus may be applied. Further, when the communication device does not have the NFC communication key information, a reception mode in which access information is transmitted from another communication device may be applied.

  Further, the key generation unit 52 may transmit the NFC communication key information to the communication device only when the communication device has a predetermined communication device list and performs NFC communication with the communication device registered in the communication list. .

  The number of NFC communication key information that can be generated by the key generation unit 52 is freely set by the owner of the access point 50 according to the number of communication devices held by the owner of the access point 50. Also good. That is, the owner of the access point 50 may be able to transmit the NFC communication key information only to the communication device that is held. FIG. 4 shows a screen image for setting the number of times of generating the NFC communication key. As shown in FIG. 4, the owner of the access point 50 may select an arbitrary number of NFC communication key information generation times on the screen.

  Further, the processing in the key generation unit 52 may be controlled using an application displayed as shown in FIG. For example, the owner of the access point 50 may select whether or not to transmit the NFC communication key information to the communication device when connected from the communication device via the NFC I / F 54. Further, when transmitting the NFC communication key information, the owner of the access point 50 may select whether to transmit the copy information or deliver the generated NFC communication key information itself.

  Next, a configuration example of the communication apparatus 10 according to the second embodiment of the present invention will be described with reference to FIG. The communication device 10 includes a control unit 14, a wireless LAN I / F 15, and an NFC I / F 16. Further, the control unit 14 includes a determination unit 11, a communication control unit 12, and a key storage unit 13. The determination unit 11 and the communication control unit 12 will mainly be described below with respect to differences from the determination unit 11 and the communication control unit 12 of FIG.

  The control unit 14 may be, for example, a CPU (Central Processing Unit) that executes a program stored in a memory. The wireless LAN I / F 15 is an interface used for performing wireless LAN communication with the access point 50. The wireless LAN I / F 15 is equipped with an antenna for performing wireless communication.

  The NFC I / F 16 is an interface used for performing NFC communication with the communication device 20 or the access point 50. The NFC I / F 16 is provided with an antenna for performing wireless communication.

  The key storage unit 13 stores NFC communication key information transmitted from the access point 50 during NFC communication with the access point 50.

  The determination unit 11 determines whether or not NFC communication key information is stored in the key storage unit 13 when connected from the communication device 20 via the NFC I / F 16. The determination unit 11 outputs a determination result as to whether or not NFC communication key information is stored in the key storage unit 13 to the communication control unit 12.

  The communication control unit 12 controls whether to operate in the transmission mode or the reception mode according to the determination result output from the determination unit 11. For example, when the determination unit 11 is notified of the determination result that the NFC communication key information is stored in the key storage unit 13, the communication control unit 12 transmits the access point information to the communication device 20. Operates as a mode. In addition, when the communication control unit 12 is notified of the determination result that the NFC communication key information is not stored in the key storage unit 13 from the determination unit 11, the access point information is transmitted from the communication device 20. You may operate | move as reception mode which waits for coming.

  Next, the flow of the NFC communication key information acquisition process according to the second embodiment of the present invention will be described with reference to FIG. First, NFC communication is performed between the access point 50 and the communication device 10 (S11). As an authentication procedure when NFC communication is performed, a procedure generally executed as an authentication procedure is used.

  Next, the key generation unit 52 generates key information for NFC communication (S12). Next, the access point 50 transmits the access point information together with the NFC communication key information to the communication device 10 (S13). The key storage unit 13 stores the transmitted NFC communication key information (S14). The key generation unit 52 may generate NFC communication key information in advance before NFC communication is performed.

  Next, the flow of access point information transfer processing in the communication apparatus 10 according to the second embodiment of the present invention will be described with reference to FIG. First, the communication device 10 performs NFC communication with the communication device 20 (S21).

  Next, the determination unit 11 determines whether or not NFC communication key information is stored in the key storage unit 13 (S22). If the determination unit 11 determines that the key information for NFC communication is stored in the key storage unit 13, the communication control unit 12 operates by setting the transmission mode (S23). The case where the NFC communication key information is stored in the key storage unit 13 is a case where the communication device 10 performs NFC communication with the access point 50 and acquires the access point information and the NFC communication key information. . Next, when set to the transmission mode, the communication control unit 12 transmits access point information to the communication device 10 (S24).

  In step S22, when the determination unit 11 determines that the NFC communication key information is not stored in the key storage unit 13, the communication control unit 12 operates by setting the reception mode (S25). The case where the key information for communication is not stored in the key storage unit 13 means that the communication device 10 is not performing NFC communication with the access point 50 and has not acquired the access point information and NFC communication key information. It is.

  Next, the communication control unit 12 determines whether access point information is received from the communication device 20 (S26). If it is determined that the access point information has been received from the communication device 20, the communication control unit 12 accesses the access point 50 using the acquired access point information (S27). The case where the access point information is received from the communication device 20 is a case where the communication device 20 performs NFC communication with the access point 50 and acquires the access point information and the NFC communication key information. That is, the communication device 20 is operating in the transmission mode.

  When it is determined that the access point information has not been received from the communication device 20, the communication control unit 12 ends the NFC communication with the communication device 20 (S28). The case where the access point information is not received from the communication device 20 is a case where the communication device 20 is also not performing NFC communication with the access point 50 and has not acquired access point information and NFC communication key information. That is, the communication device 20 is operating in the reception mode.

  As described above, by using the communication system according to the second embodiment of the present invention, only the communication device that performs NFC communication directly with the access point 50 and holds the key information for NFC communication is used as another communication device. On the other hand, access point information can be passed. That is, since the communication device that has acquired the access point information from another communication device does not acquire the NFC communication key information from the access point 50, the access point information can be further passed to another communication device. Can not. As a result, it is possible to prevent the access point information from spreading without limit.

(Embodiment 3)
Next, a configuration example of the access point 60 according to the third exemplary embodiment of the present invention is described with reference to FIG. The access point 60 includes a control unit 61, a wireless LAN I / F 53, and an NFC I / F 54. The wireless LAN I / F 53 and the NFC I / F 54 are the same as the wireless LAN I / F 53 and the NFC I / F 54 at the access point 50 in FIG.

  Next, a configuration example of the control unit 61 will be described. The control unit 61 includes a list holding unit 62 and an encryption key generation unit 63. The encryption key generation unit 63 generates an encryption key when the communication device 10 or the communication device 20 requests to issue an encryption key. Further, the encryption key generation unit 63 may generate a master encryption key to be transmitted to a communication device connected using NFC communication. The master encryption key may be transmitted to the communication apparatus via the NFC I / F 54, or may be notified to the user who operates the communication apparatus by other means, and may be input to the communication apparatus by the user. That is, the master encryption key is an encryption key held in the communication device authenticated by the access point 60.

  The list holding unit 62 manages the communication device that has requested connection to the access point 60 and the encryption key used by the communication device in association with each other.

  Next, the flow of encryption key generation processing according to the third embodiment of the present invention will be described with reference to FIG. In this figure, it is assumed that the access point 60 receives an encryption key issue request message from the communication device 10 in order for the communication device 10 to pass the encryption key to the communication device 20. The communication device 10 has already acquired access point information including the encryption key, and is in a state where wireless LAN communication with the access point 50 can be performed. That is, in this figure, it is assumed that the communication device 10 requests the access point 60 to transmit an encryption key to be transferred to the communication device 20. Furthermore, it is assumed that the same encryption key cannot be used in different devices. For this reason, the communication device 10 is not trying to transfer the already held encryption key to the communication device 20, but is trying to acquire a new encryption key to be transferred to the communication device 20 from the access point 60.

  First, the encryption key generation unit 63 receives an encryption key issue request message from the communication device 10 (S21). The encryption key generation unit 63 receives the encryption key issue request message via the wireless LAN I / F 53. Next, the encryption key generation unit 63 determines whether or not a master encryption key is included in the encryption key issue request message transmitted from the communication device 10 (S22). When it is determined that the master encryption key is included, the encryption key generation unit 63 generates an encryption key different from the master encryption key (S23). Next, the encryption key generating unit 63 transmits the generated new encryption key to the communication device 10 (S24).

  If the encryption key generation unit 63 determines in step S22 that the master encryption key is not included in the encryption key issuance request message, the encryption key generation unit 63 rejects the encryption key issuance request (S25).

  That is, the access point 60 can issue and transmit a new encryption key only to the communication device having the master encryption key. The master key is not included in the encryption key issue request message, for example, the communication device 10 has acquired access point information including the encryption key from another communication device, and the communication device 10 This is a state before the access point information is transferred to another communication device. In such a case, the communication device 10 that does not have a master encryption key requests the access point 60 to issue an encryption key used in another communication device.

  Having the master encryption key means that the owner of the access point 60 notifies the communication device 10 in advance in order to allow the communication device 10 to pass the access point information to other communication devices. It is in a state of being.

  Here, data managed in the list holding unit 62 when an encryption key is generated in step S23 will be described with reference to FIG. The master encryption key is, for example, ABCDEF. Since the communication device 10 communicates with the access point 60 using the master encryption key, the list holding unit 62 manages the communication device 10 and the master encryption key ABCDEF in association with each other. Further, the encryption key generated by the list holding unit 62 in response to a request from the communication device 10 is assumed to be FEDCBA. The encryption key FEDCBA is only transmitted to the communication device 10, and there is no communication device that has performed communication using the encryption key FEDCBA. Therefore, the connection device associated with the encryption key FEDCBA is blank.

  Further, the communication device 10 may use the screen image shown in FIG. 12 to transmit the encryption key issue request message. For example, as shown in the screen image shown in FIG. 12, the communication apparatus 10 sets the transmission mode, and transmits an encryption key issue request message to the access point 60 by pressing an execution button in the encryption key issue request. can do. FIG. 12 may be information displayed on the display screen of the communication apparatus 10 by installing an application for issuing an encryption key issuance request in the communication apparatus 10.

  Next, a flow of communication device connection processing at the access point 60 according to the third exemplary embodiment of the present invention will be described with reference to FIG. In this figure, the flow of processing when the communication device attempts to connect to the access point 60 using the access point information including the SSID and the encryption key will be described.

  First, the control unit 61 receives the connection request message transmitted from the communication device via the wireless LAN I / F 53. The controller 61 determines whether or not a master encryption key is set in the connection request message (S22). When it is determined that the master encryption key is set in the connection request message, the control unit 61 permits connection of the communication device (S23). Thereafter, the access point 60 and the communication device can continue the wireless LAN communication.

  In step S22, when the control unit 61 determines that the master encryption key is not set in the connection request message, it is determined whether or not the encryption key set in the connection request message has been used in the past. Determine (S24).

  For example, the data in the list holding unit 62 described with reference to FIG. 11 indicates that the encryption key FEDCBA is generated, but there is no communication device that has been connected using the encryption key FEDCBA. In step S21, when the encryption key FEDCBA is set in the connection request message transmitted by the communication device 20, and the list holding unit 62 manages the data in the state of FIG. 11, the encryption key FEDCBA is It is determined that it has not been used in the past. In such a case, in the list holding unit 62, assuming that there is no history of the use of the encryption key FEDCBA, the control unit 61 permits the communication device 20 to connect using the encryption key FEDCBA (S23). )

  When the connection with the communication device 20 using the encryption key FEDCBA is permitted, the list holding unit 62 manages the encryption key FEDCBA and the communication device 20 in association with each other as shown in FIG.

  In step S24, when the control unit 61 determines that the encryption key set in the connection request message has been used in the past, the control unit 61 rejects the connection with the communication device (S25). A case will be specifically described where it is determined that the encryption key set in the connection request message has been used in the past. For example, when the communication device 30 transmits a connection request message in which the encryption key FEDCBA is set, the list holding unit 62 indicates that the encryption key FEDCBA has been used by the communication device 20 in the past. Has been. In such a case, the control unit 61 refuses connection with the communication device 30.

  When the encryption key set in the connection request message has been used in the past, for example, the communication device 30 uses an encryption key from the communication device 20 that does not have the master encryption key by some method. The case where it acquired is given.

  As described above, by using the master encryption key, it is possible to determine whether to notify the communication device of the encryption key that is access point information. A communication device that does not have a master encryption key cannot obtain an encryption key that is access point information, and therefore cannot transfer access point information between communication devices.

  Further, even if the communication device that does not have the master encryption key by some method further passes the access information including the encryption key acquired from the other communication device to the other communication device, the access point 60 By having the list holding unit 62, when the same encryption key is used in different communication devices, the connection of the communication device connected later can be rejected. As a result, the access point information spreads endlessly, and it is possible to prevent an unexpected communication device from connecting to the access point 60.

(Embodiment 4)
Next, a configuration example of the communication device 70 according to the fourth embodiment of the present invention will be described with reference to FIG. The communication device 70 includes a control unit 71, a wireless LAN I / F 15, and an NFC I / F 16. Furthermore, the control unit 71 has a flag storage unit 72 and a flag generation unit 73. The wireless LAN I / F 15 and the NFC I / F 16 are the same as the wireless LAN I / F 15 and the NFC I / F 16 of the communication apparatus 10 in FIG.

  The flag generation unit 73 generates flag information. The generated flag information is transmitted to the other communication device together with the access point information when the access point information is transmitted to the other communication device via the NFC I / F 16. The flag storage unit 72 stores the received flag information when the access point information and the flag information are received from another communication device.

  Next, the flow of access point information transfer processing from the communication apparatus 10 to the communication apparatus 20 according to the fourth embodiment of the present invention will be described with reference to FIG. First, the communication device 10 performs NFC communication with the communication device 20 (S31). Here, it is assumed that the communication device 10 operates as a transmission mode and the communication device 20 operates as a reception mode. The setting of the transmission mode or the reception mode may be set on the operation screen by installing an application used when setting the reception mode, for example.

  Next, the control unit 71 determines whether or not flag information is stored in the flag storage unit 72 (S32). Next, when the control unit 71 determines that the flag information is not stored in the flag storage unit 72, the control unit 71 transmits the access information and the flag information generated by the flag generation unit 73 to the communication device 20 (S33). The state in which the flag information is not stored in the flag storage unit 72 indicates that, for example, the communication device 10 has not transferred the access information acquired from the access point 60 to another communication device.

  In step S32, when it is determined that the flag information is stored in the flag storage unit 72, the control unit 71 disconnects the NFC communication with the communication device 20 without transmitting the access information to the communication device 20 (S34). . The state in which the flag information is stored in the flag storage unit 72 is, for example, a case where the communication apparatus 10 also acquires flag information when the access point information is transferred from another communication apparatus. That is, the state in which the flag information is stored in the flag storage unit 72 indicates that the access point information has been delivered from another communication device, not from the access point.

  As described above, the access point information can be transmitted when the flag information is not held, and the flag information is also transmitted when the access point information is transmitted. The transfer of access point information to other communication devices can be restricted.

  In the above-described embodiments, the present invention has been described as a hardware configuration, but the present invention is not limited to this. The present invention can also be realized by causing a CPU (Central Processing Unit) to execute a computer program for the processes executed in FIGS. 8, 10, and 13. )

  In the above example, the program can be stored and supplied to a computer using various types of non-transitory computer readable media. Non-transitory computer readable media include various types of tangible storage media. Examples of non-transitory computer-readable media include magnetic recording media (for example, flexible disks, magnetic tapes, hard disk drives), magneto-optical recording media (for example, magneto-optical disks), CD-ROMs (Read Only Memory), CD-Rs, CD-R / W, semiconductor memory (for example, mask ROM, PROM (Programmable ROM), EPROM (Erasable PROM), flash ROM, RAM (Random Access Memory)) are included. The program may also be supplied to the computer by various types of transitory computer readable media. Examples of transitory computer readable media include electrical signals, optical signals, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire and an optical fiber, or a wireless communication path.

  Note that the present invention is not limited to the above-described embodiment, and can be changed as appropriate without departing from the spirit of the present invention.

(Appendix 1) In a communication system in which access point information for connecting to an access point is transferred between communication devices, and the communication device connects to the access point using the access point information, the communication device is specified A communication system comprising: determination means for determining whether or not there is information; and communication control means for controlling delivery of the access point information between the communication devices based on a determination result in the determination means.
(Supplementary note 2) When the first communication device acquires the specific information from the access point, and the second communication device acquires the access point information from the first communication device, the determination means The communication according to appendix 1, wherein the first communication device determines that the specific information is included, and the communication control unit transmits the access point information from the first communication device to the second communication device. system.
(Supplementary Note 3) When the third communication apparatus acquires the access point from the second communication apparatus after the second communication apparatus acquires the access point from the first communication apparatus, the determination unit Determines that the second communication device does not have the specific information, and the communication control means does not transmit the access point information from the second communication device to the third communication device. 2. The communication system according to 2.
(Supplementary Note 4) The communication control means does not transmit the specific information to the second communication device when transmitting the access point information from the first communication device to the second communication device. Or the communication system of 3.
(Supplementary Note 5) When the first communication device has the specific information and the second communication device acquires the access point information from the first communication device, the determination unit is configured so that the first communication device The communication control means transmits first encryption information to the first communication device, and the access point information and the first encryption are transmitted from the first communication device. The communication system according to appendix 1, wherein when a connection request is made to the access point from the second communication device that has acquired the activation information, the connection between the second communication device and the access point is permitted.
(Additional remark 6) After the said 2nd communication apparatus acquires the said access point and the said 1st encryption information from the said 1st communication apparatus, the 2nd encryption different from the said 1st encryption information When requesting acquisition of information, the determination unit determines that the second communication device does not have the specific information, and the communication control unit sends the second communication device to the second communication device. The communication system according to appendix 5, wherein the encryption information is not transmitted.
(Supplementary note 7) After the second communication device acquires the access point and the first encryption information from the first communication device, the access point and the first encryption are sent to a third communication device. When the encrypted information is transmitted, the determination means is configured such that the third communication device does not have the specific information, and the first encrypted information is already used in the second communication device. The communication system according to appendix 5 or 6, wherein the communication control unit does not permit connection from the third communication device to the access point.
(Supplementary Note 8) When the first communication device transmits the specific information indicating that the access point information is transmitted together with the access point information to the second communication device, the determination unit is configured to transmit the second communication The communication system according to supplementary note 1, wherein an apparatus determines that the specific information is included, and the communication control unit does not permit transmission of the access point information from the second communication apparatus to a third communication apparatus.
(Supplementary Note 9) A communication device that exchanges access point information for connecting to an access point between communication devices, and that constitutes a communication system in which the communication device connects to the access point using the access point information. Determining whether to have the specific information generated at the access point, and transmitting the access point information to another communication device when the determination unit determines that the specific information is included. And a communication control unit that does not transmit the access point information to the other communication device when the determination unit determines that the specific information is not included.
(Supplementary Note 10) When receiving a request for connection information used for communication connection from the communication device to the own device, the connection information and a specification for permitting transmission of the connection information from the communication device to another communication device Access point having sending means for sending information A connection method for connecting, wherein it is determined whether or not the communication device has specific information, and the access point information is transferred between the communication devices based on a determination result regarding whether or not the communication device has the specific information. The connection method to control.
(Supplementary Note 12) Access point information for connecting to an access point is transferred between communication devices, and the communication device is executed by a computer constituting a communication system that connects to the access point using the access point information. A program that determines whether the access point has the specific information generated; if it is determined that the access point information has the specific information, the access point information is transmitted to another communication device; When it is determined that the access point information is not included, the computer causes the computer to execute that the access point information is not transmitted to the other communication device.
(Supplementary Note 13) Access point information for connecting to an access point is transferred between communication devices, and the communication device is executed by a computer constituting a communication system that connects to the access point using the access point information. If it is a program and it is determined whether or not the first communication device has the specific information, and it is determined that the first communication device has the specific information, the encrypted information is transmitted to the first communication device. Is transmitted to the second communication device together with the access point information, and when it is determined that the first communication device does not have the specific information, to the first communication device A program for causing a computer to execute not to transmit encrypted information and to prevent the access point information from being transmitted to the second communication device

DESCRIPTION OF SYMBOLS 10 Communication apparatus 11 Determination part 12 Communication control part 13 Key storage part 14 Control part 15 Wireless LAN I / F
16 NFC I / F
20 Communication Device 30 Communication Device 50 Access Point 51 Control Unit 52 Key Generation Unit 53 Wireless LAN I / F
54 NFC I / F
60 Access Point 61 Control Unit 62 List Holding Unit 63 Encryption Key Generation Unit 70 Communication Device 71 Control Unit 72 Flag Storage Unit 73 Flag Generation Unit

Claims (10)

A communication device that exchanges connection information for connecting to an access point between communication devices, and that constitutes a communication system in which the communication device connects to the access point using the connection information,
A determination unit that determines whether the access point has specific information generated;
When the determination unit determines that the specific information is included, the connection information is transmitted to another communication device. When the determination unit determines that the specific information is not included, the connection information is transmitted to the other communication device. And a communication control unit that does not transmit the connection information. In a communication system in which connection information for connecting to an access point is transferred between communication devices, and the communication device is connected to the access point using the connection information.
Determining means for determining whether or not the communication device has specific information;
A communication control unit comprising: a communication control unit configured to control delivery of the connection information between the communication devices based on a determination result in the determination unit. When the first communication device acquires the specific information from the access point, and the second communication device acquires the connection information from the first communication device,
The determination means includes
Determining that the first communication device has the specific information;
The communication control means includes
The communication system according to claim 2, wherein the connection information is transmitted from the first communication device to the second communication device. When the third communication device acquires the access point from the second communication device after the second communication device acquires the access point from the first communication device,
The determination means includes
Determining that the second communication device does not have the specific information;
The communication control means includes
The communication system according to claim 3, wherein the connection information is not transmitted from the second communication device to the third communication device. When the first communication device has the specific information and the second communication device acquires the connection information from the first communication device,
The determination means includes
It is determined that the first communication device has the specific information;
The communication control means includes
The first encryption information is transmitted to the first communication device, and the connection information and the first encryption information are acquired from the first communication device to the access point from the second communication device. The communication system according to claim 2, wherein when a connection request is made, the connection between the second communication device and the access point is permitted. The second communication device is
After obtaining the access point and the first encrypted information from the first communication device, and requesting acquisition of second encrypted information different from the first encrypted information,
The determination means includes
Determining that the second communication device does not have the specific information;
The communication control means includes
The communication system according to claim 5, wherein the second encryption information is not transmitted to the second communication device. The second communication device is
After acquiring the access point and the first encrypted information from the first communication device, and then transmitting the access point and the first encrypted information to a third communication device,
The determination means includes
The third communication device does not have the specific information, and further determines that the first encrypted information is already used in the second communication device;
The communication control means includes
The communication system according to claim 5 or 6, wherein a connection from the third communication device to the access point is not permitted. When the first communication device transmits the specific information indicating that the connection information is transmitted together with the connection information to the second communication device,
The determination means includes
Determining that the second communication device has the specific information;
The communication control means includes
The communication system according to claim 2, wherein transmission of the connection information from the second communication device to the third communication device is not permitted. When a request for connection information used for communication connection to the local device is received from the communication device,
An access point having sending means for sending the connection information and specific information for permitting sending of the connection information from the communication device to another communication device. A connection method for connecting connection information for connecting to an access point between communication devices, and for connecting the communication device to the access point using the connection information,
Determining whether the communication device has specific information;
A connection method for controlling delivery of the connection information between the communication devices based on a determination result regarding whether or not the specific information is included.

Images