JP2016143167A - Communication equipment - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a technique capable of executing proper processing considering security of communication equipment and convenience of a user of external equipment in accordance with the situation of the communication equipment when the communication equipment receives a radio connection request from the external equipment.SOLUTION: When receiving a Probe Req. signal from terminal equipment 70 (T212), a printer PR determines that a radio connection refusal flag 40 indicates ON, a high security condition is satisfied and the terminal equipment 70 is not registered equipment. The printer PR does not establish radio connection with the terminal equipment 70 (T214).SELECTED DRAWING: Figure 9

Description

  The present specification discloses a communication device capable of establishing a wireless connection with an external device.

  Patent Document 1 discloses a multi-function device and an external device belonging to a network. The multi-function device establishes a connection with the external device and belongs to the network, and then receives a packet for executing the function of the multi-function device from the external device using the network. The multi-function device determines whether or not to execute the function indicated by the received packet according to the type of network (that is, wired network, Local Area Network, Personal Area Network).

JP 2011-054135 A JP 2006-094004 A

  In the technique of Patent Document 1, the function is limited only according to the type of network. Thereby, the security of the multi-function device can be maintained. However, since the function is limited only in accordance with the type of network, the use of the multi-function device may not be permitted even in a situation where the use of the multi-function device may be permitted. Therefore, there has been a demand for a method for satisfying the convenience of the user of the external device while maintaining the security of the multi-function device. In this specification, when a communication device receives a wireless connection request from an external device, an appropriate process that considers the security of the communication device and the convenience of the user of the external device is performed according to the status of the communication device. Provide technology that can be implemented.

  The communication device disclosed in the present specification includes a request reception unit, a first determination unit, and a predetermined process execution unit. The request receiving unit receives a wireless connection request from an external device. The first determination unit determines whether or not to allow the external device to execute a specific communication process using the wireless connection between the communication device and the external device when a wireless connection request is received from the external device. decide. The predetermined process execution unit executes a predetermined process according to the determination result. In a situation where the predetermined high security condition is not satisfied, the first determination unit performs a specific communication process regardless of whether the device identification information included in the wireless connection request is stored in the memory of the communication device. In the situation where high security conditions are satisfied and the device identification information is stored in the memory, the external device must be allowed to execute a specific communication process. In a situation where the high security condition is satisfied and the device identification information is not stored in the memory, it is determined that the external device is not allowed to execute the specific communication process. The high security condition is that (1) the communication device belongs to a network having an authentication server different from the communication device, and (2) the communication device belongs to a network having a proxy server different from the communication device. (3) The communication device belongs to a network including an IP address assignment server different from the communication device, and the communication device belongs to the network from the IP address assignment server. And (4) the function of the communication device that can be used by each user according to each function information corresponding to each user of the communication device. Including at least one of the following conditions.

  According to the above configuration, when receiving a wireless connection request from an external device, the communication device determines whether to allow the external device to execute a specific communication process. Specifically, in a situation where the high security condition is not satisfied, that is, in a situation where the necessity of maintaining the security of the communication equipment is low, the communication equipment is involved in whether or not the equipment identification information is stored in the memory of the communication equipment. First, it is determined that the external device is allowed to execute a specific communication process. Since the necessity of maintaining the security of the communication device is low, it is not necessary to limit the execution of the specific communication process by the external device. Therefore, the convenience of the user of the external device can be improved. On the other hand, in situations where high security conditions are met, that is, in situations where it is highly necessary to maintain the security of the communication device, the communication device is identified depending on whether the device identification information of the external device is stored in the memory. It is determined whether or not the external device is allowed to execute the communication process. Specifically, in a situation where the device identification information of the external device is stored in the memory, that is, in a situation where the external device is a highly reliable device, execution of a specific communication process is made to the external device. Allow. This can improve the convenience of the user of the external device while maintaining the security of the communication device. The communication device executes a specific communication process in a situation where the device identification information of the external device is not stored in the memory, that is, whether or not the external device is a highly reliable device. Is not allowed to external equipment. Thereby, the security of the communication device can be maintained.

  A control method, a computer program, and a computer-readable recording medium storing the computer program for realizing the communication device are also novel and useful. A communication system including the communication device and the external device is also new and useful.

1 shows a configuration of a communication system. The flowchart of a wireless connection process is shown. The flowchart of a function control process is shown. The operation of the printer according to various situations is shown. The operation of the printer according to various situations is shown. The flowchart of a notification process is shown. The sequence diagram of case A where the high security condition is not satisfied is shown. The sequence diagram of case B where authentication of a terminal device fails is shown. The sequence diagram of case C in which the wireless connection with an unregistered apparatus is not established is shown. The sequence diagram of case D in which authentication of a terminal device is successful is shown. A sequence diagram of case E in which a notification screen is displayed is shown.

(Example)
(System configuration: Fig. 1)
FIG. 1 shows a wired network. Hereinafter, the “network” may be referred to as “NW”. The wired NW includes a terminal device 90. The wired network further includes at least one of the authentication server 100, the proxy server 110, the NetBIOS Name server 120, the SNTP (abbreviation of Simple Network Time Protocol) server 130, and the DHCP (abbreviation of Dynamic Host Configuration Protocol) server 140. Can be provided. The printer PR can belong to the wired NW. Further, the printer PR can establish a wireless connection with each of the plurality of terminal devices 70 and 80.

(Configuration of authentication server 100)
The authentication server 100 is a server for executing authentication of a device (for example, a printer PR). Only devices that have been successfully authenticated in the authentication server 100 can belong to a wired NW including the authentication server 100. In other words, it can be said that the manager of the wired NW provided with the authentication server 100 has a relatively high security awareness.

  The administrator of the wired NW provided with the authentication server 100 registers authentication information (ie, user ID and password) for the target device in the authentication server 100. Then, the user of the target device (which may be the above-mentioned administrator or another person) connects the wired cable 4 to the wired I / F of the target device, and then inputs authentication information to the target device. In this case, the target device transmits authentication information to the authentication server 100 via the wired I / F 20 and causes the authentication server 100 to execute authentication of the target device. When the authentication information that matches the authentication information received from the target device is registered in the authentication server 100, the authentication server 100 transmits a success notification indicating that the authentication is successful to the target device. In this case, the target device can belong to a wired NW including the authentication server 100.

(Configuration of proxy server 110)
The proxy server 110 is a relay server that relays communication between a target device belonging to the wired NW and a device (for example, a device on the Internet) existing outside the wired NW. For example, when a packet is to be transmitted from a target device belonging to a wired NW to a device existing outside the wired NW, the proxy server 110 transmits source identification information (for example, an IP address of the target device) in the packet To the identification information of the proxy server 110, and the packet is transmitted outside the wired NW. As a result, even if the source identification information in the packet is referenced outside the wired NW, it is difficult to specify the target device, and as a result, the target device is illegally accessed from outside the wired NW. Can be suppressed. In other words, it can be said that the manager of the wired NW provided with the proxy server 110 has a relatively high security awareness.

(Configuration of NetBIOS Name server 120)
The NetBIOS Name server 120 is a server for assigning a NetBIOS Name used for name resolution. Specifically, the NetBIOS Name server 120 assigns a NetBIOS Name to each device belonging to the wired NW. The wired NW provided with the NetBIOS Name server 120 is likely to be a relatively large-scale wired NW to which many devices belong. An administrator of a relatively large wired NW usually has a high security awareness.

(Configuration of SNTP server 130)
The SNTP server 130 is a server for managing time. Specifically, the SNTP server 130 receives a time inquiry signal from each device belonging to the wired NW, and transmits time information indicating the current time to each device. Thus, each device can use the time indicated by the time information. That is, the SNTP server 130 can synchronize the time used by each device. In the wired NW provided with the SNTP server 130, it is possible to adopt an authentication method having a relatively high security in which accurate time should be used in each device. Also, since the wired NW can record an access log using an accurate time, communication within the wired NW can be appropriately monitored. Therefore, in the wired NW provided with the SNTP server 130, there is a high possibility that the security is maintained relatively high. In other words, it can be said that the manager of the wired NW provided with the SNTP server 130 has a relatively high security awareness.

(Configuration of DHCP server 140)
The DHCP server 140 is a server for assigning an IP address to each device belonging to the wired NW. Each device can receive various information from the DHCP server 140 in addition to the IP address. For example, each device belonging to the wired network provided with the NetBIOS Name server 120 and the DHCP server 140 receives from the DHCP server 140 related information related to the NetBIOS Name server 120 (that is, identification information for identifying the NetBIOS Name server 120, etc.) ). In other words, receiving the relevant information from the DHCP server 140 means that the wired NW includes the NetBIOS Name server 120.

  In addition, for example, each device belonging to a wired network provided with the SNTP server 130 and the DHCP server 140 is related information related to the SNTP server 130 from the DHCP server 140 (that is, identification information for identifying the SNTP server 130, etc.). Can receive. In other words, receiving the relevant information from the DHCP server 140 means that the wired NW includes the SNTP server 130.

  Further, for example, each device belonging to a wired NW including the proxy server 110 and the DHCP server 140 can receive WPAD (abbreviation of Web Proxy Auto-Discovery Protocol) information from the DHCP server 140. The WPAD information is information related to a protocol for automating proxy settings. The reception of WPAD information from the DHCP server 140 means that the wired NW includes the proxy server 110.

(Configuration of printer PR)
The printer PR is a peripheral device (that is, a peripheral device such as the terminal devices 70, 80, and 90) that can execute the printing function. The printer PR includes an operation unit 12, a display unit 14, a print execution unit 16, a wired interface 20, a wireless interface 22, and a control unit 30. Hereinafter, the interface is described as “I / F”.

  The operation unit 12 includes a plurality of keys. The user can input various instructions to the printer PR by operating the operation unit 12. The display unit 14 is a display for displaying various information. The print execution unit 16 is a printing mechanism such as an inkjet method or a laser method. The wired I / F 20 is an I / F for executing wired communication. A wired cable 4 can be connected to the wired I / F 20.

  The wireless I / F 22 is an I / F for executing wireless communication in accordance with a WFD (abbreviation of Wi-Fi Direct) method formulated by Wi-Fi Alliance. The printer PR can perform wireless communication via the wireless I / F 22 using the wireless NW when the printer PR belongs to the WFD wireless NW. A WFD wireless NW is formed by a device (hereinafter referred to as a “G / O device”) that operates in a G / O (abbreviation of Group Owner) state. By establishing a wireless connection with each of a plurality of devices, the G / O device can cause each device operating in the client state (hereinafter referred to as a “CL device”) to participate in the wireless NW. On the other hand, the CL device cannot normally establish a wireless connection with another device while maintaining a state where the wireless connection with the G / O device is established. Details of the WFD method are described in “Wi-Fi Peer-to-Peer (P2P) Technical Specification Version 1.1” created by Wi-Fi Alliance. Details of the WFD method are also disclosed in US Patent Application Publication No. 2013/0260683, which is cited with reference to this document.

  The control unit 30 includes a CPU 32 and a memory 34. The CPU 32 is a processor that executes various processes according to the program 36 stored in the memory 34. The memory 34 includes a RAM, a ROM, and the like. In addition to the program 36, the memory 34 further includes a registered device list 38, a wireless connection rejection flag 40, an authentication server flag 41a, a proxy server flag 42a, a relationship information flag 44a, an SFL flag (Secure Function Lock). (Omitted) 45a and SFL table 45b are stored. The memory 34 can further store authentication server information 41b, proxy server information 42b, and relationship information 44b.

  In the registered device list 38, device names of terminal devices (for example, terminal devices 70 and 80) are registered. The administrator of the printer PR can register the device name of the terminal device in the registered device list 38 by inputting the device name of the terminal device to the printer PR. For example, the administrator can register in the registered device list 38 a terminal device that is to execute communication with the printer PR. For this reason, the terminal device registered in the registered device list 38 is a highly reliable device. Hereinafter, devices registered in the registered device list 38 and devices not registered are referred to as “registered device” and “unregistered device”, respectively. Generally speaking, a registered device is a device with high reliability, and an unregistered device is a device with low reliability. In the modification, the MAC address of the terminal device may be registered in the registered device list 38 instead of the device name of the terminal device. Generally speaking, information for identifying a terminal device may be registered in the registered device list 38.

  The wireless connection rejection flag 40 is a flag that is set to “ON” or “OFF” by the administrator of the printer PR. In a situation where the wireless connection rejection flag 40 indicates “ON”, establishment of a wireless connection between the printer PR and the terminal device may be restricted. In a situation where the wireless connection rejection flag 40 indicates “OFF”, establishment of the wireless connection is not restricted.

  The authentication server flag 41 a indicates “ON” when the authentication server information 41 b is stored in the memory 34, and indicates “OFF” when the authentication server information 41 b is not stored in the memory 34. The authentication server information 41b includes identification information for identifying the authentication server 100 and authentication information for using the network including the authentication server 100. The authentication server information 41b can be stored in the memory 34 when the printer PR belongs to a wired NW including the authentication server 100. Specifically, when the authentication server 100 executes authentication of the printer PR and receives a success notification from the authentication server 100, the CPU 32 stores the authentication server information 41 b in the memory 34 and sets the authentication server flag 41 a to “ Change from "OFF" to "ON". On the other hand, when the CPU 32 causes the authentication server 100 to perform authentication of the printer PR and receives a failure notification from the authentication server 100, the CPU 32 does not store the authentication server information 41 b in the memory 34 and sets the authentication server flag 41 a to “OFF”. To maintain.

  As described above, it can be said that the manager of the wired NW provided with the authentication server 100 has a relatively high security awareness. Therefore, when the authentication server flag 41a indicates “ON”, that is, when the printer PR belongs to a wired NW including the authentication server 100, it can be said that there is a high need to maintain the security of the printer PR.

  The proxy server flag 42 a indicates “ON” when the proxy server information 42 b is stored in the memory 34, and indicates “OFF” when the proxy server information 42 b is not stored in the memory 34. The proxy server information 42b includes identification information for identifying the proxy server 110. The proxy server information 42b can be stored in the memory 34 when the printer PR belongs to a wired NW including the proxy server 110. Specifically, when the proxy server information 42b is stored in the memory 34 by the administrator of the printer PR, the CPU 32 changes the proxy server flag 42a from “OFF” to “ON”.

  As described above, it can be said that the manager of the wired NW provided with the proxy server 110 has a relatively high security awareness. Therefore, when the proxy server flag 42a indicates “ON”, that is, when the printer PR belongs to a wired NW including the proxy server 110, it can be said that there is a high need to maintain the security of the printer PR.

  The relationship information flag 44 a indicates “ON” when the relationship information 44 b is stored in the memory 34, and indicates “OFF” when the relationship information 44 b is not stored in the memory 34. The relationship information 44b may include at least one of information related to the NetBIOS Name server 120, information related to the SNTP server 130, and WPAD information related to the proxy server 110. When the wired NW to which the printer PR belongs includes at least one of the servers 110, 120, and 130, and the wired NW includes the DHCP server 140, the relationship information 44b can be received from the DHCP server 140. . In this case, the CPU 32 stores the relationship information 44b in the memory 34, and changes the relationship information flag 44a from “OFF” to “ON”.

  As described above, it can be said that the manager of the wired NW including at least one of the proxy server 110, the NetBIOS Name server 120, and the SNTP server 130 has a relatively high security awareness. Therefore, when the relationship information flag 44a indicates “ON”, that is, when the printer PR belongs to a wired NW including at least one of the servers 110, 120, and 130, the security of the printer PR is maintained. It can be said that the necessity to do is high.

  The SFL flag 45a indicates “ON” when one or more pieces of SFL information are registered in the SFL table 45b, and indicates “OFF” when one piece of SFL information is not registered in the SFL table 45b. The SFL information is information in which, for each user of the printer PR, a user name of the user, a password of the user, and function information indicating a function (for example, a printing function) that can be used by the user are associated. For example, the administrator of the printer PR operates the operation unit 12 to register each SFL information for each user in the SFL table 45b. In a situation where SFL information is registered in the SFL table 45b, the security of the printer PR is maintained. In other words, it can be said that the administrator of the printer PR has a relatively high security awareness. That is, when the SFL flag 45a indicates “ON”, it can be said that it is highly necessary to maintain the security of the printer PR. In the modification, the SFL table 45b may not be stored in the printer PR, and may be stored in a server belonging to the wired NW, for example.

(Configuration of terminal devices 70 to 90)
The terminal devices 70 to 90 may be portable devices such as mobile phones, smartphones, notebook PCs, and tablet PCs, and may be stationary devices such as desktop PCs and televisions. Each of the terminal devices 70 and 80 supports the WFD method, like the printer PR.

(Wireless connection processing; Fig. 2)
Next, the contents of the wireless connection process executed by the CPU 32 of the printer PR will be described with reference to FIG. The wireless connection process is executed in a situation where the operation state of the printer PR is the device state or the G / O state. Unlike the G / O state and the CL state, the device state is a state where the printer PR does not belong to the wireless NW. In the situation where the operation state of the printer PR is the G / O state, only the printer PR belongs to the wireless NW, or the printer PR and one or more terminal devices in the CL state belong to the wireless NW. In the situation where the operation state of the printer PR is the CL state, the printer PR cannot establish a wireless connection with the terminal device. For this reason, the wireless connection process in FIG. 2 is intended for situations where the operation state of the printer PR is the device state or the G / O state.

  In S <b> 10, the CPU 32 monitors reception of a Probe Request signal including the device name of the terminal device from the terminal device (for example, the terminal device 70 or 80) via the wireless I / F 22. The Probe Request signal is a signal transmitted from the terminal device when a search operation for searching for a device that is a target for establishing a wireless connection with the terminal device is executed by the user. When the CPU 32 receives a Probe Request signal from the terminal device via the wireless I / F 22 (YES in S10), the CPU 32 proceeds to S11. In the following, Request is described as “Req.”. In addition, since all communication executed between the printer PR and the terminal device described in FIG. 2 and the like is executed via the wireless I / F 22, the description “through the wireless I / F 22” is omitted. To do.

  In S <b> 11, the CPU 32 determines whether or not the wireless connection rejection flag 40 in the memory 34 indicates “ON”. When the wireless connection rejection flag 40 indicates “ON” (YES in S11), the CPU 32 proceeds to S12, and when the wireless connection rejection flag 40 indicates “OFF” (NO in S11), skips S12 and S14. Then, the process proceeds to S16. In this case, the CPU 32 establishes a wireless connection with the terminal device regardless of whether a high security condition described later is satisfied and whether the terminal device is a registered device (described later). S22, S28).

  In S12, the CPU 32 determines whether or not the high security condition is satisfied. The high security condition is a condition for determining whether or not it is highly necessary to maintain the security of the printer PR. When the high security condition is satisfied, it is highly necessary to maintain the security of the printer PR, and when the high security condition is not satisfied, the need to maintain the security of the printer PR is low. The high security condition includes the following first to fourth conditions. More specifically, the CPU 32 determines that the high security condition is satisfied when at least one of the first to fourth conditions is satisfied, and any of the first to fourth conditions is satisfied. If it is not satisfied, it is determined that the high security condition is not satisfied.

  The first condition is that the printer PR belongs to a network including the authentication server 100. The CPU 32 determines that the first condition is satisfied when the authentication server flag 41a indicates “ON”, and the first condition is satisfied when the authentication server flag 41a indicates “OFF”. Judge that it is not.

  The second condition is that the printer PR belongs to a network including the proxy server 110. The CPU 32 determines that the second condition is satisfied when the proxy server flag 42a indicates “ON”, and satisfies the second condition when the proxy server flag 42a indicates “OFF”. Judge that it is not.

  The third condition is that the printer PR belongs to the network including the DHCP server 140 and the relation information 44b has been received from the DHCP server 140. The CPU 32 determines that the third condition is satisfied when the relationship information flag 44a indicates “ON”, and satisfies the third condition when the relationship information flag 44a indicates “OFF”. Judge that it is not.

  The fourth condition is that the SFL information is registered in the SFL table 45b. When one or more pieces of SFL information are registered in the SFL table 45b, the CPU 32 determines that the fourth condition is satisfied, and when one piece of SFL information is not registered in the SFL table 45b. Is determined not to satisfy the fourth condition.

  If the CPU 32 determines that at least one of the first to fourth conditions is satisfied (YES in S12), the CPU 32 proceeds to S14. On the other hand, if the CPU 32 determines that none of the first to fourth conditions is satisfied (NO in S12), it skips S14 and proceeds to S16. In this case, the CPU 32 establishes a wireless connection with the terminal device regardless of whether the terminal device is a registered device (S22 and S28 described later). In other words, when the necessity of maintaining the security of the printer PR is low, the CPU 32 establishes a wireless connection with the terminal device even if the terminal device is an unregistered device (that is, the reliability of the terminal device is low). Establish and execute wireless communication with the terminal device. Thereby, the convenience of the user of a terminal device can be improved.

  In S14, the CPU 32 determines whether or not the terminal device that is the transmission source of the Probe Req. Signal in S10 is a registered device. Specifically, if the device name that matches the device name included in the Probe Req. Signal in S10 is registered in the registered device list 38 (YES in S14), the CPU 32 proceeds to S16. In this case, the CPU 32 establishes a wireless connection with the terminal device (S22 and S28 described later). That is, when the necessity of maintaining the security of the printer PR is high, if the terminal device is a registered device (that is, if the reliability of the terminal device is high), the CPU 32 establishes a wireless connection with the terminal device, and Perform wireless communication with the device. Thereby, the convenience of the user of the terminal device can be improved while maintaining the security of the printer PR. On the other hand, if the device name that matches the device name included in the Probe Req. Signal in S10 is not registered in the registered device list 38 (NO in S14), the CPU 32 does not execute the subsequent processing and proceeds to S10. Return. In this case, the CPU 32 does not establish a wireless connection with the terminal device. In other words, when the necessity of maintaining the security of the printer PR is high, the CPU 32 does not establish a wireless connection with the terminal device if the terminal device is an unregistered device (that is, if the reliability of the terminal device is low). Thereby, the CPU 32 can maintain the security of the printer PR.

  In S16, the CPU 32 determines whether or not the printer PR is a device device. The CPU 32 proceeds to S18 when the printer PR is a device device (YES in S16), and proceeds to S24 when the printer PR is a G / O device (NO in S16).

  In S18, the CPU 32 transmits a Probe Response signal including the device name of the printer PR to the terminal device. In S20, the CPU 32 receives a G / O Negotiation Req. Signal from the terminal device. In the following, Response and Negotiation are referred to as “Res.” And “Nego.”, Respectively.

  In S21, the CPU 32 executes G / O Nego. As a terminal device. As a result of G / O Nego., The CPU 32 shifts the operation state of the printer PR from the device state to the G / O state or the CL state. When the operation state of the printer PR shifts to the G / O state, that is, when the printer PR forms a wireless NW, the CPU 32 further prepares a wireless profile used in the wireless NW, Is stored in the memory 34. The wireless profile includes an SSID that is an identifier for identifying a wireless NW, and information used for authentication and encryption. The terminal device also shifts from the device state to the CL state or the G / O state as a result of G / O Nego. The terminal device prepares and stores a wireless profile when shifting to the G / O state.

  In S22, the CPU 32 establishes a wireless connection with the terminal device. When the printer PR is a G / O device, in the process of S22, the CPU 32 transmits the wireless profile prepared in S21 to the terminal device. On the other hand, when the printer PR is a CL device, in the process of S22, the CPU 32 receives the wireless profile prepared by the terminal device from the terminal device and stores the wireless profile in the memory 34. When S22 is executed, a wireless NW to which the printer PR and the terminal device belong is formed. For example, the CPU 32 can receive data (for example, data representing an image to be printed) from the terminal device using the formed wireless NW. In other words, the CPU 32 allows the terminal device to execute a process of transmitting data to the printer PR. Further, for example, the CPU 32 can transmit a file to the terminal device using the formed wireless NW. In other words, the CPU 32 allows the terminal device to execute processing for receiving data from the printer PR. When S22 ends, the process proceeds to S30.

  As described above, in the situation where the printer PR is a G / O device, the wireless profile prepared by the CPU 32 is stored in the memory 34. If the CPU 32 determines that the printer PR is a G / O device (NO in S16), in S24, Probe Res including the SSID in the wireless profile (hereinafter referred to as “the SSID of the printer PR”). Send the signal to the terminal device.

  The CPU 32 receives the Provision Discovery Req. Signal from the terminal device in S26, and establishes a wireless connection with the terminal device in S28. Since the printer PR is a G / O device (NO in S16), the CPU 32 transmits the wireless profile in the memory 34 to the terminal device in the process of S28. Thereby, the CPU 32 can establish a wireless connection with the terminal device and allow the terminal device to participate in the wireless NW in which the printer PR operates as a G / O device. As a result, as in the case of S22, the CPU 32 allows the terminal device to execute the process of transmitting data to the printer PR and the process of receiving data from the printer PR. When S28 ends, the process proceeds to S30.

  S30 is the same as S12. In S32, the CPU 32 determines a high security protocol having a relatively high security as a communication protocol to be used in the wireless NW. The high security protocols include SNMPv3 (abbreviation of Simple Network Management Protocol version 3), HTTPS (abbreviation of Hypertext Transfer Protocol Secure), SSH (abbreviation of Secure Shell), and SFTP (SSH File Transfer Protocol). SNMP is a protocol used for communication for monitoring and controlling devices belonging to a network. In SNMPv3, functions related to authentication and encryption of communication contents are strengthened compared to SNMPv1 (or v2). Therefore, SNMPv3 has higher security than SNMPv1 (or v2). HTTPS is a protocol in which SSL (Secure Sockets Layer), which is a technology related to encryption, is introduced to HTTP (abbreviation of Hypertext Transfer Protocol). Therefore, HTTPS has higher security than HTTP. SSH is a protocol for remotely operating devices belonging to a network, and is a protocol that uses encryption. Therefore, SSH has a relatively high security. SFTP is a protocol for transferring files in a network using SSH. Therefore, SFTP has a relatively high security. As described above, when it is highly necessary to maintain the security of the printer PR (that is, YES in S30), the CPU 32 can execute wireless communication using a communication protocol having relatively high security. Thereby, the security of the printer PR can be improved.

  In the modification, the CPU 32 may further execute the following process in S32. That is, the CPU 32 changes the setting of the printer PR from a setting that can use the push button method and the PIN code method to a setting that cannot use the push button method and can use only the PIN code method. Further, when the setting for using the SFL information registered in the SFL table 45b indicates “OFF”, the CPU 32 changes the setting to “ON”. Further, the CPU 32 causes the display unit 14 to display a message for prompting the user to set a password or the like for logging in to the printer PR. Further, when the wireless connection rejection flag 40 indicates “OFF”, the CPU 32 changes the wireless connection rejection flag 40 to “ON”. The CPU 32 can improve the security of the printer PR by executing the above processes.

  In S34, the CPU 32 determines a low security protocol having a relatively low security as a communication protocol to be used in the wireless NW. Low security protocols include SNMPv1 (or v2), HTTP, Telnet (abbreviation of Teletype network), FTP (abbreviation of File Transfer Protocol), and TFTP (abbreviation of Trivial File Transfer Protocol). Telnet, like SSH, is a protocol for remotely operating devices belonging to a network, but encryption is not used. For this reason, Telnet has a lower security than SSH. FTP and TFTP, like SFTP, are protocols for transferring files within a network, but SSH is not used. For this reason, FTP and TFTP have lower security than SFTP. In order for the printer PR to use the high security protocol, various settings need to be performed on the printer PR by the user, and the load on the user for the setting is high. On the other hand, in order for the printer PR to use the low security protocol, the load on the user for setting is low, and the convenience for the user is high. As described above, when the necessity of maintaining the security of the printer PR is low (that is, NO in S30), the CPU 32 determines to use the low security protocol, and improves the convenience for the user.

(Function control processing; FIG. 3)
Next, the function control process executed by the CPU 32 of the printer PR will be described with reference to FIG. The function control process is a process executed when a wireless connection with a terminal device is established (see S22 and S28 in FIG. 2), and the routing function and the CL relay function are set to “ON” or “OFF”. This is a process for determining to set. The routing function is a function in which the printer PR relays communication between a device belonging to the wired NW and the terminal device. The routing function “ON” or “OFF” is set for each terminal device for which a wireless connection with the printer PR is established. That is, for example, in a situation where the printer PR establishes wireless connection with two terminal devices, the routing function for one terminal device is set to “ON” and the routing function for the other terminal device is set. May be set to “OFF”. The CL relay function is used when the printer PR is a G / O device and the printer PR establishes a wireless connection with two or more CL devices. This function relays wireless communication. The CL relay function is not set for each terminal device, but is set in common for all terminal devices that have established a wireless connection with the printer PR. If the printer PR is a CL device, or if the printer PR is a G / O device and the printer PR has established a wireless connection with only one CL device, the CL Even if the relay function is set to “ON”, the printer PR cannot execute the CL relay function.

  4 and 5 show the settings of the routing function and the CL relay function according to the status of the printer PR. In the following description of the function control processing of FIG. 3, FIGS. 4 and 5 are referred to as appropriate. S110 in FIG. 3 is the same as S12 in FIG. In S <b> 112, the CPU 32 determines whether the printer PR belongs to a wired NW provided with the authentication server 100. When the authentication server flag 41a indicates “ON”, the CPU 32 determines YES in S112, and proceeds to S116. On the other hand, when the authentication server flag 41a indicates “OFF”, the CPU 32 determines NO in S112, and proceeds to S114.

  When NO is determined in S112, the authentication server 100 does not execute authentication of the terminal device, and it cannot be said that the reliability of the terminal device is reliably guaranteed. For this reason, in S114, the CPU 32 sets the routing function for the terminal device to “OFF” and sets the CL relay function to “OFF”. Thereby, when the printer PR belongs to the wired NW, the security of the wired NW can be maintained, and when two or more CL devices belong to the wireless NW, the security of the wireless NW is maintained. Can be maintained. The process of S114 corresponds to (d), (f) in FIG. 4 and (p), (q), (r), (s) in FIG. When S114 ends, the process of FIG. 3 ends.

  In S116, the CPU 32 monitors reception of authentication information from the terminal device. When the printer PR belongs to a wired NW provided with the authentication server 100, the user of the terminal device inputs authentication information (that is, user ID and password) of the terminal device to the terminal device. In this case, the CPU 32 receives the authentication information from the terminal device (YES in S116), and proceeds to S118.

  In S118, the CPU 32 transmits the received authentication information to the authentication server 100 via the wired I / F 20 using the wired NW. Thereby, the CPU 32 causes the authentication server 100 to execute authentication of the terminal device. For example, the manager of the wired NW registers authentication information for the terminal device in the authentication server 100 in advance. When the authentication information received from the printer PR is registered in the authentication server 100, the authentication server 100 transmits a success notification to the printer PR, and the authentication information received from the printer PR is registered in the authentication server 100. If not, a failure notification is transmitted to the printer PR.

  In S120, the CPU 32 determines whether to receive a success notification from the authentication server 100 via the wired I / F 20 using the wired NW. When the CPU 32 receives a success notification from the authentication server 100 (YES in S120), the CPU 32 proceeds to S122. On the other hand, when the CPU 32 receives a failure notification from the authentication server 100 (NO in S120), the CPU 32 proceeds to S121.

  When NO is determined in S120, since the authentication of the terminal device in the authentication server 100 has failed, it cannot be said that the reliability of the terminal device is reliably guaranteed. For this reason, in S121, the CPU 32 sets the routing function for the terminal device to “OFF” and sets the CL relay function to “OFF”. Thereby, the security of the wired NW to which the printer PR belongs (that is, the wired NW provided with the authentication server 100) can be maintained, and when two or more CL devices belong to the wireless NW, the wireless NW security can be maintained. The process of S121 corresponds to (b) in FIG. 4, (m), and (o) in FIG. When S121 ends, the process of FIG. 3 ends.

  On the other hand, if YES is determined in S120, since the authentication of the terminal device by the authentication server 100 is successful, the reliability of the terminal device is guaranteed. For this reason, in S122, the CPU 32 sets the routing function for the terminal device to “ON”. Thereby, the CPU 32 can relay communication between the terminal device and the device belonging to the wired NW.

  Next, in S124, the CPU 32 determines whether or not the printer PR is a G / O device and all the CL devices that have established a wireless connection with the printer PR have been successfully authenticated. If all the CL devices that have established a wireless connection with the printer PR have already determined YES in S120, the CPU 32 determines YES in S124, and sets the CL relay function to “ON” in S127. To do. That is, since the reliability of all the CL devices is guaranteed, it is not necessary to limit the execution of wireless communication between two or more CL devices. For this purpose, the CPU 32 relays wireless communication between two or more CL devices. As a result, the convenience of the user of each CL device can be improved. When S127 ends, the process of FIG. 3 ends.

  On the other hand, if the CPU 32 has determined NO in S120 for at least one CL device that has established a wireless connection with the printer PR, the CPU 32 determines NO in S124, and sets the CL relay function to “ Set to “OFF”. That is, since the reliability of all CL devices is not guaranteed, the execution of wireless communication between two or more CL devices is restricted. As a result, the security of the wireless NW can be maintained. The processes of S122, S127, and S128 correspond to (a) of FIG. 4, (l), and (n) of FIG. When S127 ends, the process of FIG. 3 ends.

  Next, a case where it is determined that the high security condition is not satisfied (NO in S110) will be described. In S <b> 130, the CPU 32 sets the CL relay function to “ON” and does not restrict the execution of wireless communication between two or more CL devices. If the high security condition is not satisfied (NO in S110), it is expected that the security awareness of the administrator of the printer PR is not so high. Therefore, although the security of the wireless NW may be reduced due to the CL relay function being set to “ON”, there is a low possibility that the result will be contrary to the security policy of the administrator of the printer PR. Since the CL relay function is set to “ON”, the convenience of the user of each CL device can be improved.

  Next, in S132, the CPU 32 determines whether or not the printer PR belongs to the wired NW. When the wired cable 4 is connected to the wired I / F 20 (that is, the link-up state), the CPU 32 determines YES in S132, and turns on the routing function for the terminal device in S134. Set. Therefore, although the security of the wired NW can be reduced due to the routing function being set to “ON”, the possibility of disobeying the security policy of the administrator of the printer PR is low. Since the routing function is set to “ON”, the convenience of the user of the terminal device can be improved. The processes in S130 and S134 correspond to (h) and (i) in FIG. 4 and (t) and (u) in FIG. When S134 ends, the process of FIG. 3 ends.

  On the other hand, when the wired cable 4 is not connected to the wired I / F 20 (that is, in the link-down state), the CPU 32 determines NO in S132, and turns off the routing function for the terminal device in S136. To "". This is because it is not necessary to set the routing function to “ON” because the printer PR does not belong to the wired NW. The processes of S130 and S136 correspond to (j) and (k) in FIG. 4 and (v) and (w) in FIG. When S136 ends, the process of FIG. 3 ends.

  In (c), (e), and (g) of FIG. 4, the wireless connection process of FIG. 3 is not executed because the wireless connection with the terminal device is not established. For this reason, the routing function and the CL relay function are not set in (c), (e), and (g) of FIG.

(Notification processing; FIG. 6)
Next, the contents of the notification process executed by the CPU 32 of the printer PR will be described with reference to FIG. The notification process is a process for prompting the user to register the device name of the unregistered device in the registered device list 38. The notification process is executed with the establishment of a wireless connection with the terminal device (see S22 and S28 in FIG. 2) as a trigger.

  S210 is the same as S112 of FIG. When the CPU 32 determines that the printer PR belongs to the wired NW including the authentication server 100 (YES in S210), the CPU 32 proceeds to S216 and determines that the printer PR does not belong to the wired NW including the authentication server 100. If so (NO in S210), the process of FIG. 6 is terminated without executing the subsequent processes.

  In the situation where the printer PR belongs to the wired NW including the authentication server 100 (YES in S210), as described above, YES is determined in S112 of FIG. 3, and S116 to S120 are executed. If YES is determined in S120 of FIG. 3, in S216 of FIG. 4, the CPU 32 determines that a success notification has been received from the authentication server 100 (YES in S216), and proceeds to S218. On the other hand, if NO is determined in S120 of FIG. 3, in S216 of FIG. 4, the CPU 32 determines that a failure notification has been received from the authentication server 100 (NO in S216), and does not execute the subsequent processing. Then, the process of FIG.

  In S218, the CPU 32 determines whether or not the wireless connection rejection flag 40 indicates “OFF”. When the wireless connection refusal flag 40 indicates “OFF” (YES in S218), the CPU 32 proceeds to S220, and when the wireless connection refusal flag 40 indicates “ON” (NO in S218), the CPU 32 executes the subsequent processing. The process of FIG.

  In S220, the CPU 32 determines whether the terminal device is an unregistered device. If the device name that matches the device name included in the Probe Req. Signal in S10 of FIG. 2 is not registered in the registered device list 38 (YES in S220), the CPU 32 proceeds to S222. On the other hand, when the device name that matches the device name included in the Probe Req. Signal in S10 of FIG. 2 is registered in the registered device list 38 (NO in S220), the CPU 32 does not execute the subsequent processing. Then, the process of FIG.

  In S222, the CPU 32 causes the display unit 14 to display a notification screen including a message that prompts the user to register the device name of the terminal device in the registered device list 38. By viewing the notification screen, the user can know that the device name of the terminal device should be registered in the registered device list 38, and can execute an operation for that purpose. That is, a terminal device that is an unregistered device can be changed to a registered device. When S222 ends, the process of FIG. 6 ends.

  In the above notification process, since the authentication of the terminal device with the authentication server 100 is successful (YES in S216), the reliability of the terminal device is guaranteed. Nevertheless, since the terminal device is not registered in the registered device list 38 (YES in S220), the user is prompted to register the device name of the terminal device in the registered device list 38 (S222). Thereby, a terminal device which is an unregistered device can be changed to a registered device. Therefore, after this, when the wireless connection rejection flag 40 is changed from “OFF” to “ON”, and when the wireless connection with the terminal device is once disconnected and the wireless connection should be reestablished, Can be appropriately established (YES in S11 of FIG. 2, YES in S12, YES in S14).

(Specific cases: FIGS. 7 to 11)
Next, specific contents of cases A to E realized according to the flowcharts of FIGS. 2, 3, and 6 will be described with reference to FIGS. 7 to 11.

(Case A; FIG. 7)
In this case, the printer PR belongs to a wired NW that includes the terminal device 90. Further, a wireless NW to which a printer PR that operates as a G / O device and a terminal device 80 that operates as a CL device belongs is formed. The wireless connection rejection flag 40 indicates “ON”. The wired NW does not include the servers 100 to 140 (that is, the authentication server flag 41a, the proxy server flag 42a, and the relationship information flag 44a indicate “OFF”). The SFL flag 45a indicates “OFF”. Therefore, the high security condition is not satisfied. The terminal device 70 is an unregistered device, and the terminal device 80 is a registered device.

  In T <b> 10, the user performs a search operation on the terminal device 70. In this case, the printer PR receives a Probe Req. Signal from the terminal device 70 at T12 (YES in S10 of FIG. 2). The printer PR determines that the wireless connection refusal flag 40 indicates “ON” (YES in S11), determines that the high security condition is not satisfied (NO in S12), and the printer PR is the G / O device. (NO in S16). In T14, the printer PR transmits a Probe Res. Signal including the SSID “AAA” of the wireless NW to the terminal device 70 (S24).

  In T16, the terminal device 70 displays a selection screen including the SSID “AAA” received from the printer PR. At T <b> 18, the user performs an operation on the terminal device 70 for selecting the SSID “AAA” from the selection screen.

  The printer PR receives the Provision Discovery Req. Signal from the terminal device 70 at T20 (S26), and establishes a wireless connection with the terminal device 70 operating in the CL state at T22 (S28). Accordingly, the printer PR can allow the terminal device 70 to execute wireless communication using the wireless NW.

  In T23, the printer PR determines that the high security condition is not satisfied (NO in S110 of FIG. 3), and sets the CL relay function to “ON” (S130). Further, the printer PR determines that the printer PR belongs to the wired NW (YES in S132), and sets the routing function for the terminal device 70 to “ON” (S134).

  Since the routing function is set to “ON”, the printer PR uses the wireless NW at T24 to receive the file designated by the terminal device 90 as the transmission destination from the terminal device 70, and at T26. The file can be transmitted to the terminal device 90 using a wired NW. In addition, since the CL relay function is set to “ON”, the printer PR uses the wireless NW to receive the file designated as the transmission destination from the terminal device 70 in T28, At T30, the file can be transmitted to the terminal device 80 using the wireless NW.

(Effect of Case A)
According to Case A, the printer PR establishes a wireless connection with the terminal device 70 which is an unregistered device in a situation where it is less necessary to maintain the security of the printer PR due to the high security conditions not being satisfied. Thus, the terminal device 70 is allowed to execute wireless communication using the wireless NW. Thereby, the convenience of the user of the terminal device 70 can be improved.

  Further, the printer PR sets the routing function to “ON” and sets the CL relay function to “ON” (T23). Accordingly, the printer PR relays communication between the terminal device 70 and the terminal device 90 (T24, T26) and also relays wireless communication between the terminal devices 70 and 80, which are two CL devices ( T28, T30). Thereby, the convenience of the user of the terminal device 70 can be improved.

(Case B; Fig. 8)
In this case, the printer PR belongs to a wired NW including the terminal device 90 and the authentication server 100 (that is, the authentication server flag 41a indicates “ON”). Further, a wireless NW to which a printer PR that operates as a G / O device and a terminal device 80 that operates as a CL device belongs is formed. The wireless connection rejection flag 40 indicates “ON”. Since the printer PR belongs to the wired NW provided with the authentication server 100, the high security condition is satisfied. The terminal devices 70 and 80 are registered devices.

  T110 and T112 are the same as T10 and T12 of FIG. The printer PR determines that the wireless connection rejection flag 40 indicates “ON” (YES in S11 of FIG. 2), determines that the high security condition is satisfied (YES in S12), and the terminal device 70 is the registered device. (YES in S14), it is determined that the printer PR is a G / O device (NO in S16). In T114, the printer PR transmits a Probe Res. Signal including the SSID “AAA” to the terminal device 70 (S24). T116 to T122 are the same as T16 to T22 of FIG. At T <b> 124, the user inputs authentication information to the terminal device 70.

  The printer PR receives the authentication information from the terminal device 70 at T126 (YES in S116 of FIG. 3), and transmits the authentication information to the authentication server 100 using the wired NW at T128 (S118). At T130, the authentication server 100 fails to authenticate the terminal device 70 using the authentication information.

  In T132, the printer PR uses the wired NW to receive a failure notification from the authentication server 100 (NO in S120 of FIG. 3). For this purpose, the printer PR sets the routing function for the terminal device 70 to “OFF” and also sets the CL relay function to “OFF” (S121).

  Since the routing function is set to “OFF”, even if the printer PR receives the file designated as the transmission destination by the terminal device 90 from the terminal device 70 using the wireless NW at T134, the printer PR at T136. The file is not transmitted to the terminal device 90 using the wired NW. Further, since the CL relay function is set to “OFF”, the printer PR uses the wireless NW at T138 even if the terminal device 80 receives the file designated as the transmission destination from the terminal device 70. In T140, the wireless NW is not used to transmit the file to the terminal device 80.

(Effect of Case B)
According to Case B, the printer PR is a terminal device that is a registered device having relatively high reliability when it is highly necessary to maintain the security of the printer PR due to the high security conditions being satisfied. 70 is established, and the terminal device 70 is allowed to execute wireless communication using the wireless NW. Thereby, the convenience of the user of the terminal device 70 can be improved while maintaining the security of the printer PR.

  As described above, since the terminal device 70 is a registered device, the reliability of the terminal device 70 is relatively high, but the authentication of the terminal device 70 with the authentication server 100 fails (T132). Reliability cannot be guaranteed. Therefore, the printer PR sets the routing function to “OFF” and sets the CL relay function to “OFF” (T133). Thereby, the printer PR can maintain the security of the wired NW and the wireless NW.

(Case C; FIG. 9)
In this case, the printer PR belongs to a wired NW including the terminal device 90 and the proxy server 110 (that is, the proxy server flag 42a indicates “ON”). Further, a wireless NW to which a printer PR that operates as a G / O device and a terminal device 80 that operates as a CL device belongs is formed. The wireless connection rejection flag 40 indicates “ON”. Since the printer PR belongs to the wired NW provided with the proxy server 110, the high security condition is satisfied. The terminal device 70 is an unregistered device, and the terminal device 80 is a registered device.

  T210 and T212 are the same as T10 and T12 of FIG. The printer PR determines that the wireless connection rejection flag 40 indicates “ON” (YES in S11 of FIG. 2), determines that the high security condition is satisfied (YES in S12), and the terminal device 70 is the registered device. It is determined that it is not (NO in S14). For this reason, in T214, the printer PR does not transmit the Probe Res. Signal to the terminal device 70. As a result, the printer PR does not establish a wireless connection with the terminal device 70.

(Effect of Case C)
According to Case C, the printer PR is a terminal that is an unregistered device having relatively low reliability when it is highly necessary to maintain the security of the printer PR due to the high security condition being satisfied. A wireless connection with the device 70 is not established. Accordingly, the printer PR can maintain the security of the wired NW and the security of the printer PR.

(Case D; FIG. 10)
The initial state of this case is the same as Case B in FIG. T310 to T328 are the same as T110 to T128 of FIG. In T330, the authentication of the terminal device 70 is successful in the authentication server 100.

  The printer PR receives the success notification from the authentication server 100 using the wired NW at T332 (YES in S120 of FIG. 3), and sets the routing function for the terminal device 70 to “ON” at T333. (S122). Further, since the printer PR has successfully authenticated the terminal devices 70 and 80 (YES in S124 in FIG. 3), the CL relay function is set to “ON” (S127).

  Since the routing function is set to “ON”, the printer PR relays file transmission from the terminal device 70 to the terminal device 90 at T334 and T336. Since the CL relay function is set to “ON”, the printer PR relays the transmission of the file from the terminal device 70 to the terminal device 80 at T338 and T340.

(Effect of Case D)
According to Case D, the printer PR is a terminal device that is a registered device having relatively high reliability when it is highly necessary to maintain the security of the printer PR due to the high security conditions being satisfied. 70 is established, and the terminal device 70 is allowed to execute wireless communication using the wireless NW. Thereby, the convenience of the user of the terminal device 70 can be improved while maintaining the security of the printer PR.

  Further, since the authentication of the terminal device 70 with the authentication server 100 is successful, the reliability of the terminal device 70 is guaranteed. For this purpose, the printer PR relays communication between the terminal device 70 and the terminal device 90 (T334, T336) and relays wireless communication between the terminal devices 70 and 80, which are two CL devices. (T338, T340). Thereby, the convenience of the user of the terminal device 70 can be improved.

(Case E; FIG. 11)
The initial state of this case is the same as Case D in FIG. 10 except that the wireless connection rejection flag is OFF and the terminal device 70 is an unregistered device. T410 to T433 are the same as T310 to T333 in FIG. However, unlike the case D in FIG. 10, the printer PR executes the process of T414 after determining that the wireless connection rejection flag is OFF (NO in S11 in FIG. 2). In T434, the printer PR displays a notification screen including a message prompting to register the device name of the terminal device 70 in the registered device list 38 (S222 in FIG. 6). T436 to T442 are the same as T334 to T340 in FIG.

(Effect of Case E)
Since the authentication of the terminal device 70 with the authentication server 100 is successful (T432), the reliability of the terminal device 70 is guaranteed. Nevertheless, since the terminal device 70 is not registered in the registered device list 38, the user is prompted to register the device name of the terminal device 70 in the registered device list 38 (T434). Thereby, the terminal device 70 which is an unregistered device can be changed to a registered device. Therefore, after that, the wireless connection rejection flag 40 is changed from “OFF” to “ON”, and when the wireless connection (T422) with the terminal device 70 is once disconnected and the wireless connection should be established again. The wireless connection with the terminal device 70 can be appropriately established.

(Correspondence)
The printer PR, the terminal device 70, and the DHCP server 140 are examples of “communication device”, “external device”, and “IP address assignment server”, respectively. The proxy server 110, the NetBIOS Name server 120, and the SNTP server 130 are examples of “predetermined servers”. The G / O device and the CL device are examples of “master station” and “slave station”, respectively.

  The wired NW in FIGS. 7 to 11 is an example of a “specific network”. The device name and SFL information are examples of “device identification information” and “function information”, respectively. The Probe Req. Signal in S10 of FIG. 2 is an example of a “wireless connection request”. The state in which the wireless connection rejection flag 40 indicates “ON” and the state in which “OFF” are indicated are examples of the “first operation mode” and the “second operation mode”, respectively. The low security protocol and the high security protocol are examples of the “first communication protocol” and the “second communication protocol”. The process in which the terminal device 70 transmits a file at T24 and T28 in FIG. 7, T134 and T138 in FIG. 8, T334 and T338 in FIG. 10, and T436 and T440 in FIG. 11 is an example of “specific communication process”. . The processes of S18 to S28 in FIG. 2 are examples of “predetermined process” and “connection process”.

  Specific examples of the present invention have been described in detail above, but these are merely examples and do not limit the scope of the claims. The technology described in the claims includes various modifications and changes of the specific examples illustrated above. The modifications of the above embodiment are listed below.

(Modification 1) The printer PR may include a wireless I / F different from the wireless I / F 22. In this case, the printer PR may establish a wireless connection with the access point using the different wireless I / F and belong to a wireless network including the access point. The wireless network may further include the servers 100 to 140. Generally speaking, the “specific network” may be a wired network or a wireless network.

(Modification 2) In the above embodiment, the printer PR executes G / O Nego. In S21 of FIG. 2 to shift the operation state of the printer PR from the device state to the G / O state or the CL state. Let Instead, the printer PR spontaneously shifts to the G / O state without executing G / O Nego., And the printer PR operates as a G / O device (that is, an example of “master station”). A wireless network may be formed. Thereafter, the printer PR may establish a wireless connection with the terminal device and allow the terminal device to participate in the wireless network as a slave station. Further, the printer PR may activate a so-called Soft AP without executing G / O Nego. To form a wireless network in which the printer PR operates as an access point (ie, an example of a “parent station”). Thereafter, the printer PR may establish a wireless connection with the terminal device and allow the terminal device to participate in the wireless network as a slave station. That is, the “wireless network” may be a network formed by executing G / O Nego. Or a network formed without executing G / O Nego.

(Modification 3) In the above embodiment, the high security condition includes the first to fourth conditions. However, in the modification, the high security condition includes one or more of the first to fourth conditions. Good. For example, in one aspect of the modification, the printer PR determines that the high security condition is satisfied when at least one of the first and second conditions is satisfied, and the first and second conditions are satisfied. If none of the conditions is satisfied, it may be determined that the high security condition is not satisfied.

(Modification 4) In the above embodiment, the printer PR determines whether the terminal device is a registered device or not when the high security condition is satisfied (YES in S12 of FIG. 2). Whether to establish a wireless connection with. Instead, when the high security condition is satisfied (YES in S12), the printer PR may establish a wireless connection with the terminal device regardless of whether or not the terminal device is a registered device. Good. The printer PR determines a low security protocol as a communication protocol to be used in the wireless NW when the terminal device is a registered device, and uses the wireless NW when the terminal device is an unregistered device. A high security protocol may be determined as a communication protocol to be used. That is, the printer PR allows the terminal device to execute wireless communication using the low security protocol when the terminal device is a registered device, and sets the low security protocol when the terminal device is an unregistered device. It is not necessary to allow the terminal device to execute the used wireless communication.

  In the present modification, the process of executing the wireless communication using the low security protocol is an example of “specific communication process”. The process for determining the low security protocol is an example of the “predetermined process”. Generally speaking, the “predetermined process” may not be the “connection process”.

(Modification 5) In the above embodiment, the printer PR may set the routing function to “ON” (S134 in FIG. 3 and the like). In the modification, the printer PR may set the routing function to “OFF” in any situation. In this modification, the printer PR can maintain the security of the wired NW higher. That is, the “first relay unit” can be omitted.

(Modification 6) In the above-described embodiment, the printer PR may set the CL relay function to “ON” (S127 in FIG. 3 and the like). In the modification, the printer PR may set the CL relay function to “OFF” in any situation. In this modification, the printer PR can maintain the security of the wireless NW higher. That is, the “second relay unit” can be omitted.

(Modification 7) In the above embodiment, the wireless connection rejection flag 40 is stored in the memory 34. However, in the modification, it may not be stored. In the present modification, the printer PR does not execute the process of S11 in FIG. 2, may proceed to S12, and may not execute the notification process of FIG. That is, the “mode setting unit” and the “display control unit” can be omitted.

(Modification 8) In the above embodiment, the printer PR determines the high security protocol or the low security protocol in S30 to S34 of FIG. 2 depending on whether or not the high security condition is satisfied. In the modification, the printer PR may determine the high security protocol regardless of whether the high security condition is satisfied. In this case, the printer PR can execute wireless communication using a communication protocol with high security by using the wireless NW. In another variation, the printer PR may determine a low security protocol regardless of whether high security conditions are met. In this case, the printer PR can execute wireless communication using a highly convenient protocol using the wireless NW. That is, the “second determining unit” can be omitted.

(Modification 9) The “communication device” is not limited to the printer PR, and may be, for example, a scanner, a multi-function device, a PC, a server, a mobile terminal (such as a mobile phone, a smartphone, or a PDA). That is, the “communication device” includes any device that can belong to a network and can establish a wireless connection with another device.

(Modification 10) In each of the above embodiments, the CPU 32 of the printer PR executes the program (that is, software), thereby realizing the processes shown in FIGS. 2, 3, and 6. Instead of this, at least one of the processes of FIGS. 2, 3, and 6 may be realized by hardware such as a logic circuit.

  The technical elements described in this specification or the drawings exhibit technical usefulness alone or in various combinations, and are not limited to the combinations described in the claims at the time of filing. In addition, the technology illustrated in the present specification or the drawings achieves a plurality of objects at the same time, and has technical utility by achieving one of the objects.

  4: wired cable, 12: operation unit, 14: display unit, 16: print execution unit, 20: wired interface, 22: wireless interface, 30: control unit, 32: CPU, 34: memory, 36: program, 38: Registered device list, 40: wireless connection rejection flag, 41a: authentication server flag, 41b: authentication server information, 42a: proxy server flag, 42b: proxy server information, 44a: relationship information flag, 44b: relationship information, 45a: SFL flag 45b: SFL table, 70, 80, 90: terminal device, 100: authentication server, 100: authentication server, 110: proxy server, 120: NetBIOS Name server, 130: SNTP server, 140: DHCP server, PR: printer

Claims (10)

Communication equipment,
A request receiver for receiving a wireless connection request from an external device;
When the wireless connection request is received from the external device, it is determined whether or not the external device is allowed to execute a specific communication process using a wireless connection between the communication device and the external device. A first determining unit;
A predetermined process execution unit that executes a predetermined process according to the result of the determination,
The first determination unit includes:
In a situation where a predetermined high security condition is not satisfied, the specific communication process is executed regardless of whether the device identification information included in the wireless connection request is stored in the memory of the communication device. Decide to allow external equipment,
In a situation where the high security condition is satisfied and the device identification information is stored in the memory, it is determined to allow the external device to execute the specific communication process,
In a situation where the high security condition is satisfied and the device identification information is not stored in the memory, it is determined that the external device is not allowed to execute the specific communication process,
The high security condition is:
(1) The communication device belongs to a network including an authentication server different from the communication device,
(2) the communication device belongs to a network including a proxy server different from the communication device;
(3) The communication device belongs to a network including an IP address assignment server different from the communication device, and the communication device belongs to the network from the IP address assignment server. Have received affiliation information related to
(4) The communication device is in a situation where the functions of the communication device that can be used by each user should be restricted according to each function information corresponding to each user of the communication device.
A communication device including at least one of the conditions. The predetermined process execution unit includes:
When it is determined that the external device is allowed to execute the specific communication process, the predetermined process that is a connection process for establishing the wireless connection with the external device is executed.
The communication device according to claim 1, wherein when it is determined that the external device is not allowed to execute the specific communication process, the predetermined process that is the connection process is not executed. The communication device further includes:
When the wireless connection is established with the external device in a situation where the wireless connection request is received from the external device while the communication device belongs to a specific network and the high security condition is not satisfied. Relay the communication between the specific device belonging to the specific network and the external device,
The wireless connection with the external device is established in a situation where the wireless connection request is received from the external device while the communication device belongs to the specific network and the high security condition is satisfied. The communication device according to claim 2, further comprising a first relay unit that does not relay communication between the specific device and the external device. The communication device further includes:
When authentication information is received from the external device in a state where the communication device belongs to the specific network including the authentication server, the authentication information is transmitted to the authentication server using the specific network. An authentication information transmission unit;
In the authentication server, when the authentication of the external device using the authentication information is successful, the success notification is received from the authentication server using the specific network,
In the authentication server, when the authentication of the external device using the authentication information does not succeed, a success notification receiving unit that does not receive the success notification from the authentication server using the specific network, and
The first relay unit is
In a situation where the high security condition is satisfied due to the communication device belonging to the specific network including the authentication server, the wireless connection with the external device is established, and the success notification is received When received, relay communication between the specific device and the external device,
In a situation where the high security condition is satisfied due to the communication device belonging to the specific network including the authentication server, the wireless connection with the external device is established, and the success notification is received The communication device according to claim 3, wherein communication between the specific device and the external device is not relayed when not received. The communication device further includes:
Authentication for transmitting the authentication information to the authentication server using the specific network when authentication information is received from the external device in a state where the communication device belongs to the specific network including the authentication server An information transmitter;
In the authentication server, when the authentication of the external device using the authentication information is successful, the success notification is received from the authentication server using the specific network,
In the authentication server, when the authentication of the external device using the authentication information is not successful, the success notification receiving unit that does not receive the success notification from the authentication server using the specific network;
In response to establishment of the wireless connection with the external device, a wireless network is constructed in which the communication device operates as a master station and the external device operates as a slave station, and the success notification is sent from the authentication server. Is received, relays wireless communication between two or more slave station devices operating as slave stations of the wireless network,
The wireless network is constructed in which the communication device operates as the master station and the external device operates as the slave station in response to establishment of the wireless connection with the external device, and from the authentication server A second relay unit that does not relay wireless communication between the two or more slave station devices when the success notification is not received;
The communication apparatus according to any one of claims 2 to 4, further comprising: The communication device further includes:
As an operation mode of the communication device, a mode setting unit that sets one of a first operation mode and a second operation mode different from the first operation mode,
The first determination unit includes:
Execution of the specific communication process based on the high security condition and the device identification information when the wireless connection request is received from the external device while the first operation mode is set Whether or not to allow the external device,
When the wireless connection request is received from the external device in the state where the second operation mode is set, whether the high security condition is satisfied or not, and the device identification information is The communication device according to any one of claims 2 to 5, wherein it is determined that the external device is allowed to execute the specific communication process regardless of whether or not the information is stored in the memory. The communication device further includes:
Authentication for transmitting the authentication information to the authentication server using the specific network when authentication information is received from the external device in a state where the communication device belongs to the specific network including the authentication server An information transmitter;
In the authentication server, when the authentication of the external device using the authentication information is successful, the success notification is received from the authentication server using the specific network,
In the authentication server, when the authentication of the external device using the authentication information is not successful, the success notification receiving unit that does not receive the success notification from the authentication server using the specific network;
When the second operation mode is set and the device identification information is not stored in the memory and the success notification is received from the authentication server, the device identification information is stored in the memory. A message prompting the user to store the message on the display unit of the communication device,
When the second operation mode is set and the device identification information is stored in the memory and the success notification is received from the authentication server, the message is displayed on the display unit. A display controller not to display,
The communication device according to claim 6, comprising: The communication device further includes:
A first communication protocol is determined as a communication protocol to be used for communication with the external device when the wireless connection with the external device is established in a situation where the high security condition is not satisfied. ,
Used in communication with the external device when the wireless connection with the external device is established in a situation where the high security condition is satisfied and the device identification information is stored in the memory The communication device according to any one of claims 2 to 7, further comprising a second determination unit that determines a second communication protocol having higher security than the first communication protocol as a communication protocol to be performed. The first determination unit includes:
A condition determination unit that determines whether or not the high security condition is satisfied when the wireless connection request is received from the external device;
An information determining unit that determines whether the device identification information is stored in the memory when it is determined that the high security condition is satisfied;
With
The first determination unit includes:
When it is determined that the high security condition is not satisfied, it is determined to allow the external device to execute the specific communication process;
When it is determined that the high security condition is satisfied and it is determined that the device identification information is stored in the memory, it is determined to allow the external device to execute the specific communication process. ,
When it is determined that the high security condition is satisfied and it is determined that the device identification information is not stored in the memory, it is determined that the external device is not allowed to execute the specific communication process. The communication device according to any one of claims 1 to 8. A computer program for a communication device,
In the computer mounted on the communication device, each of the following processes:
A request reception process for receiving a wireless connection request from the external device;
When the wireless connection request is received from the external device, it is determined whether or not the external device is allowed to execute a specific communication process using a wireless connection between the communication device and the external device. A first determination process;
A predetermined process according to the result of the determination, and
In the first determination process,
In a situation where a predetermined high security condition is not satisfied, the specific communication process is executed regardless of whether the device identification information included in the wireless connection request is stored in the memory of the communication device. Decide to allow external equipment,
In a situation where the high security condition is satisfied and the device identification information is stored in the memory, it is determined to allow the external device to execute the specific communication process,
In a situation where the high security condition is satisfied and the device identification information is not stored in the memory, it is determined that the external device is not allowed to execute the specific communication process,
The high security condition is:
(1) The communication device belongs to a network including an authentication server different from the communication device,
(2) the communication device belongs to a network including a proxy server different from the communication device;
(3) The communication device belongs to a network including an IP address assignment server different from the communication device, and the communication device belongs to the network from the IP address assignment server. Have received affiliation information related to
(4) The communication device is in a situation where the functions of the communication device that can be used by each user should be restricted according to each function information corresponding to each user of the communication device.
A computer program comprising at least one of the conditions.

Images