JP2016174326A - Information processing device, information processing program, and information processing system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To determine the validity of a wireless communication device that performs communication by a first wireless communication system when connection information transmitted by the wireless communication device is acquired to make connection by a second wireless communication system by using the connection information.SOLUTION: An information processing device requests, from a first transmission/reception unit to an apparatus, connection information used when making connection with the apparatus by a second wireless communication system and validity confirmation information used when confirming the validity of a wireless communication device that is connected with the apparatus and that transmits/receives a first wave. The information processing device is connected with the apparatus by the second wireless communication system, by using the connection information acquired from the first transmission/reception unit. The information processing device requests the validity confirmation information from the second transmission/reception unit to the apparatus. In a case where the first validity confirmation information acquired from the first transmission/reception unit and the second validity confirmation information acquired from the second transmission/reception unit by the request from a second request unit are accorded with each other, the information processing device determines that the wireless communication device is valid.SELECTED DRAWING: Figure 6

Description

  The present invention relates to an information processing system.

  When connecting to the image forming apparatus, an information processing apparatus such as a wireless communication terminal acquires connection information using the first wireless communication method, and connects using the connection information using the second wireless communication method.

  With respect to the wireless communication terminal, the first wireless communication means obtains access information to the image forming apparatus and the secret key issued by the image forming apparatus, and the first wireless communication means obtains the access information of the portable terminal from the image forming apparatus that has obtained the information. 2. A technology is known in which when a connection request is issued by two wireless communication means, the first wireless communication means checks the secret key generated by the image forming apparatus and permits the connection (see, for example, Patent Document 1). ).

  Consider a case where a malicious person prepares a wireless communication device such as a terminal device capable of wireless communication by the first wireless communication method and a server capable of wireless communication by the second wireless communication method and stealing information. A wireless communication device such as a termination device transmits connection information similar to the connection information transmitted by the image forming apparatus to the wireless communication terminal.

  The wireless communication terminal obtains connection information by connecting to a wireless communication device such as a terminal device using the first wireless communication method, and uses the connection information to send a server, not an image forming device, using the second wireless communication method. I will connect. As a result, information stored in the wireless communication terminal may be stolen by the server.

  Therefore, the present invention acquires connection information transmitted by a wireless communication apparatus that performs communication using the first wireless communication method, and uses the connection information to connect to the wireless communication device using the second wireless communication method. The purpose is to determine the legitimacy of the device.

An information processing apparatus according to an embodiment of the disclosure
An information processing apparatus that can be connected to a device,
A first transmission / reception unit that transmits / receives a first radio wave to / from the device by a first wireless communication method;
A second transmission / reception unit for transmitting / receiving a second radio wave to / from the device by a second wireless communication method;
Connection information used when connecting to the device from the first transmission / reception unit using the second wireless communication method, and wireless communication with the device and transmission / reception of the first radio wave A first request unit for requesting validity confirmation information used when confirming the validity of the communication device;
A connection processing unit that obtains connection information requested by the first request unit from the first transmission / reception unit, and uses the connection information to connect to the device by the second wireless communication method;
A second requesting unit that requests validity confirmation information from the second transmitting / receiving unit to the device;
First validity confirmation information acquired from the first transmission / reception unit by a request from the first request unit, and second acquired from the second transmission / reception unit by a request from the second request unit A legitimacy confirmation processing unit that judges that the wireless communication device is legitimate when the legitimacy confirmation information matches.

  According to an embodiment of the disclosure, when acquiring connection information transmitted by a wireless communication device that performs communication using a first wireless communication method and using the connection information to connect using a second wireless communication method, The validity of the wireless communication device can be determined.

1 is a diagram illustrating a configuration example of an image forming system according to an embodiment. 1 is a diagram illustrating a hardware configuration example of an image forming apparatus according to an embodiment. 2 is a diagram illustrating a hardware configuration example of an operation unit of the image forming apparatus according to the embodiment. FIG. 2 is a functional block diagram of an operation unit of the image forming apparatus according to the embodiment. FIG. It is a figure which shows the hardware structural example of the radio | wireless communication terminal which concerns on one embodiment. It is a functional block diagram of the radio | wireless communication terminal which concerns on one embodiment. It is a figure which shows an example of operation | movement of the image forming system which concerns on one embodiment.

Next, the form for implementing this invention is demonstrated, referring drawings based on the following Examples. Examples described below are merely examples, and embodiments to which the present invention is applied are not limited to the following examples.
In all the drawings for explaining the embodiments, the same reference numerals are used for those having the same function, and repeated explanation is omitted.

<Overview>
<Image forming system>
FIG. 1 shows a configuration example of an image forming system according to the present embodiment. The image forming system includes an image forming apparatus 100 and a wireless communication terminal 200.

  The image forming apparatus 100 can be applied to a multifunction peripheral, a printer, and the like, and executes image forming processing according to a job for requesting image forming processing such as printing and scanning from the outside of the wireless communication terminal 200 or the like. The image forming apparatus 100 is connected to a wireless communication device such as a terminal device having a first wireless communication unit (hereinafter referred to as “wireless terminal device 400”), and is directly connected to the wireless communication terminal 200 by the wireless terminal device 400. . The wireless terminal device 400 may be connected to the outside of the image forming apparatus 100 or may be built in. The image forming apparatus 100 includes a second wireless communication unit, and is connected to the wireless communication terminal 200 via the wireless access point 300 by the second wireless communication unit.

  As the wireless communication terminal 200, a smartphone, a tablet terminal, or the like can be applied. The wireless communication terminal 200 includes a first wireless communication unit and a second wireless communication unit, and is directly connected to the wireless termination device 400 connected to the image forming apparatus 100 by the first wireless communication unit. The wireless communication unit 2 connects to the image forming apparatus 100 via the wireless access point 300. Instead of the wireless termination device 400, an NFC reader / writer can be applied.

  The wireless access point 300 establishes a communication path between the image forming apparatus 100 and the wireless communication terminal 200. The wireless access point 300 is connected to a LAN (Local Area Network) 50 such as Ethernet (registered trademark) and communicates with the wireless communication terminal 200 in accordance with a wireless LAN standard such as IEEE802.11. Here, the image forming apparatus 100 may include a Wi-Fi module that operates in the infrastructure mode or a Wi-Fi direct module that can directly connect to and communicate with the wireless communication terminal 200. In this case, since the wireless communication terminal 200 can directly connect and communicate without going through the wireless access point 300, the wireless access point can be made unnecessary.

<Image forming apparatus 100>
FIG. 2 shows a hardware configuration example of the image forming apparatus 100 according to the present embodiment.

  The image forming apparatus 100 includes a controller 102, an operation unit 122, a facsimile control unit (FCU: Facsimile control unit) 126, a USB (Universal Serial Bus) 128, an IEEE (Institute of Electrical and Electronic Engineers) 1394 interface 130, and The engine unit 132 is provided. In the image forming apparatus 100, a portion other than the operation unit 122 may be referred to as a main body unit.

  The controller 102 includes a CPU (Central Processing Unit) 104, a North Bridge (NB) 106, a system memory (MEM-P) 108, a South Bridge (SB) 114, an ASIC (Application Specific Integrated Circuit) 116, a local A memory (MEM-C) 118, an HDD 120, and a network interface card (NIC) 121 are provided. The system memory 108 includes a ROM (Read Only Memory) 110 and a RAM (Random Access Memory) 112.

  The CPU 104 controls the entire image forming apparatus 100 and constitutes a chip set together with the north bridge 106, the system memory 108, and the south bridge 114. The CPU 104 is connected to other devices via this chip set. The north bridge 106 is a bridge that connects the CPU 104 to the system memory 108, the south bridge 114, and an AGP (Accelerated Graphics Port) bus 60. The north bridge 106 includes a memory controller that controls reading and writing to the system memory 108, a PCI (Peripheral Component Interface) master, and an AGP target.

  The AGP bus 60 is a bus interface for a graphic accelerator card proposed for speeding up graphics processing, and directly accesses the system memory 108 with high throughput to speed up the graphics accelerator card.

  The ROM 110 of the system memory 108 is a read-only memory that stores the image forming apparatus program and data. The RAM 112 of the system memory 108 is a memory that can be used for developing an image forming apparatus program and data and can be written and read when a drawing process is performed by a printer. The south bridge 114 is a bridge that connects the north bridge 106 and a peripheral device such as a PCI device. The south bridge 114 is connected to the north bridge 106 via a PCI bus, and a network interface (I / F) or the like can be connected to the PCI bus.

  The ASIC 116 is an IC (Integrated Circuit) for image processing having hardware elements for image processing, and has a role of a bridge for connecting the AGP bus 60, the PCI bus 70, the HDD 120, and the local memory 118, respectively. The ASIC 116 includes a PCI target and an AGP master, an arbiter (ARB) that forms the core of the ASIC 116, a memory controller that controls the local memory 118, and a plurality of DMACs (Direct Memory Access) that rotate image data using hardware logic or the like. Controller) and a PCI unit that performs data transfer between the engine unit 132 via the PCI bus 70. An operation unit 122, a facsimile control unit 126, a USB 128, an IEEE 1394 interface 130, and an engine unit 132 are connected to the ASIC 116 via the PCI bus 70.

  The local memory 118 is used as an image buffer and a code buffer for copying. The HDD 120 stores image data, programs, font data, and forms. In addition, the HDD 120 stores a license file for an application executed on the image forming apparatus 100. The NIC 121 is an interface connected to a network such as the LAN 50.

  The operation unit 122 is an interface for an operator who is directly connected to the ASIC 116 and operates the image forming apparatus 100. By operating the operation unit 122, data input, job execution, and display can be performed.

  The facsimile control unit 126 is connected to the PCI bus 70 and controls communication with an external apparatus such as a FAX apparatus or a copying apparatus having a modem function through a public line. The USB 128 and the IEEE 1394 interface 130 are each connected to the PCI bus 70 and can connect peripheral devices. The engine unit 132 is connected to the PCI bus 70, and a printer engine such as a monochrome plotter, a one-drum color plotter, a four-drum color plotter, a scanner, or a fax unit can be applied. The engine unit 132 may include an image processing unit such as error diffusion or gamma conversion.

<Operation unit 122>
FIG. 3 shows a hardware configuration example of the operation unit 122 of the image forming apparatus 100 according to the present embodiment. The operation unit 122 can be a general information processing terminal, and includes a CPU 152, a memory (MEM) 154, a nonvolatile memory 160, I / Fs 162 and 164, a second wireless communication unit 166, a USB 168, A sensor 170 and a touch panel 172 are provided. The CPU 152, the memory 154, the nonvolatile memory 160, the I / Fs 162 and 164, the second wireless communication unit 166, the USB 168, the sensor 170, and the touch panel 172 are connected via the bus 80.

  The CPU 152 controls the operation of the entire operation unit 122. The memory 154 includes a ROM 156 and a RAM 158. The ROM 156 is a read-only nonvolatile storage medium and stores programs such as firmware. The RAM 158 is a volatile storage medium capable of reading and writing information at high speed, and is used as a work area when the CPU 152 processes information.

  The non-volatile memory 160 is a non-volatile storage medium capable of reading and writing information such as NAND type, and stores an OS (Operating System), various control programs, application programs, and the like. The I / Fs 162 and 164 connect between the bus 80 and various kinds of hardware, a network such as the LAN 50, and the like.

  The I / F 164 is connected to the wireless terminal device 400. The second wireless communication unit 166 is connected to the wireless access point 300 via a network such as the LAN 50. The second wireless communication unit 166 uses the wireless access point 300 to perform high-speed wireless communication as compared with the first wireless communication method according to the second wireless communication method standard such as a wireless LAN. Process.

  The USB 168 can connect peripheral devices. The sensor 170 is a sensor realized by hardware such as an acceleration sensor. The touch panel 172 is a visual user interface for the user to check the state of the image forming apparatus 100, and is also used when operating.

  The operation unit 122 and the ASIC 116 can be connected via the I / F 162 or can be connected via the USB 168.

  The I / F 164 and the second wireless communication unit 166 may be provided in the main body instead of the operation unit 122, or may be provided in both the operation unit 122 and the main body.

<Wireless Termination Device 400>
The wireless terminal device 400 includes a first wireless communication unit 401 and is connected to the image forming apparatus 100. The first wireless communication unit 401 includes second field communication (Near Field Communication (NFC)) such as Bluetooth 4.0 (Bluetooth Low Energy: BLE) and Felica (registered trademark), ultrasonic wireless communication, and the like. Wireless communication is performed by the first wireless communication method, which is slower than the wireless communication method.

<Functional configuration of the embodiment>
Next, the functional configuration of the present embodiment will be described. FIG. 4 is a functional block diagram of the operation unit 122 constituting the image forming apparatus 100.

  The operation unit 122 includes a first transmission / reception unit 402, a second transmission / reception unit 404, a validity confirmation information creation unit 406, a validity confirmation information encoding unit 408, a device information public packet creation unit 410, and a connection information request processing unit 412. A connection processing unit 414, a validity confirmation information request processing unit 416, a job processing unit 418, and a storage / reading processing unit 420. Each of these units is a function or means realized by any of the components shown in FIG. 3 operating according to a command from the CPU 152 according to the operation unit program stored in the nonvolatile memory 160. It is. The operation unit 122 includes a storage unit 422 constructed by the nonvolatile memory 160 illustrated in FIG.

(Device information disclosure packet management table)
In the storage unit 422, a device information public packet management DB 424 configured by a device information public packet management table as shown in Table 1 is constructed.

デバイス情報公開パケット管理テーブルは、デバイス名、動作モード、出力電力レベル、受信信号強度などを紐付けることによって対応付けたものである。デバイス名は、画像形成装置１００のプラグアンドプレイに使用されるものである。動作モードは、第１の無線通信部４０１によってサポートされている規格を表す。例えば、第１の無線通信部４０１がBluetooth 4.0に対応するものである場合に、デュアルモードおよびシングルモードのいずれかが格納される。出力電力レベルは、画像形成装置１００によって発信される電波の出力強度を示す。この出力電力レベルは固定値とすることも変動値とすることもできる。

The device information disclosure packet management table associates device names, operation modes, output power levels, received signal strengths, and the like. The device name is used for plug and play of the image forming apparatus 100. The operation mode represents a standard supported by the first wireless communication unit 401. For example, when the first wireless communication unit 401 is compatible with Bluetooth 4.0, either the dual mode or the single mode is stored. The output power level indicates the output intensity of the radio wave transmitted by the image forming apparatus 100. This output power level can be a fixed value or a variable value.

(Connection information management table)
In the storage unit 422, a connection information management DB 426 configured by a connection information management table as shown in Table 2 is constructed.

接続情報管理テーブルは、無線通信端末２００が、第２の無線通信部１６６との間で第２の無線通信方式によって接続する際に使用するＳＳＩＤ(Service Set Identifier)、セキュリティ方式、パスワードなどのネットワークの情報、ＩＰアドレス、ポート番号などのアドレス情報などの接続情報を紐付けることによって対応付けたものである。ＳＳＩＤは無線ＬＡＮの識別情報であり、セキュリティ方式はＷＥＰ、ＷＰＡ、ＷＰＡ２、ＷＰＡ２−ＴＫＩＰ、ＡＥＳなどの暗号化方式の規格によって表される。

The connection information management table is a network such as an SSID (Service Set Identifier), a security method, and a password used when the wireless communication terminal 200 connects to the second wireless communication unit 166 by the second wireless communication method. Are associated with each other by connecting connection information such as address information such as IP address and port number. The SSID is identification information of the wireless LAN, and the security method is represented by an encryption method standard such as WEP, WPA, WPA2, WPA2-TKIP, or AES.

<Functional units of operation unit 122>
Next, each part of the operation unit 122 will be described in detail.

  The first transmission / reception unit 402 of the operation unit 122 is realized by an instruction from the I / F 164 and the CPU 152 shown in FIG. The first transmission / reception unit 402 transmits / receives various data (information) to / from the first wireless communication unit 401 of the wireless terminal device 400.

  The second transmission / reception unit 404 of the operation unit 122 is realized by a command from the second wireless communication unit 166 and the CPU 152 shown in FIG. The second transmission / reception unit 404 transmits / receives various data (information) to / from the wireless communication terminal 200 according to the second wireless communication method.

  The storage / read processing unit 420 of the operation unit 122 is realized by a command from the CPU 152 shown in FIG. 3 and a program for the operation unit stored in the nonvolatile memory 160. The storage / reading processing unit 420 stores various data in the storage unit 422 and performs processing for reading out various data stored in the storage unit 422.

  The validity confirmation information creation unit 406 of the operation unit 122 is realized by a command from the CPU 152 shown in FIG. The validity confirmation information creating unit 406 creates information (hereinafter referred to as “validity confirmation information”) for confirming the validity of the wireless terminal device 400 connected to the operation unit 122. An electronic signature certificate, an image forming apparatus identification number, random data, or the like can be applied as the validity confirmation information. The validity confirmation information creating unit 406 inputs the validity confirmation information to the validity confirmation information encoding unit 408.

  The correctness confirmation information encoding unit 408 of the operation unit 122 is realized by a command from the CPU 152 shown in FIG. The validity confirmation information encoding unit 408 encodes the validity confirmation information input by the validity confirmation information creation unit 406. An encoding method and a decoding method are set in advance between the image forming apparatus 100 and the wireless communication terminal 200. The validity confirmation information encoding unit 408 may generate a hash value using a hash function such as MD5 (Message Digest Algorithm 5), or encode it using a predetermined algorithm such as SHA 1 (Secure Hash Algorithm 1) or SHA 256. May be. Further, the validity confirmation information encoding unit 408 may encrypt the validity confirmation information by lossless encryption. Further, the validity confirmation information encoding unit 408 may calculate a hash value from the validity confirmation information and encrypt the hash value with a secret key. In this case, the secret key is shared between the image forming apparatus 100 and the wireless communication terminal 200.

  In the first wireless communication unit 401 of the wireless terminal device 400, the encoding method of the validity confirmation information is not set, so that the encoded validity confirmation information input by the image forming apparatus 100 has been tampered with by the wireless terminal device 400. Even if it is done, the wireless communication terminal 200 can detect that it has been tampered with because it cannot decode the tampered one. The validity confirmation information encoding unit 408 inputs the encoded validity confirmation information to the connection information request processing unit 412.

  The device information public packet creation unit 410 of the operation unit 122 is realized by a command from the CPU 152. The device information disclosure packet creation unit 410 creates a device information disclosure packet such as an advertisement packet attached with information stored in the device information disclosure packet management table of the device information disclosure packet management DB 424, and the first transmission / reception unit 402 Send from. The device information disclosure packet is a packet for disclosing the presence of a device such as the image forming apparatus 100 to other devices such as the wireless communication terminal 200.

  The connection information request processing unit 412 of the operation unit 122 is realized by a command from the CPU 152. When the connection information request transmitted by the wireless communication terminal 200 that has received the device information disclosure packet is input from the first transmission / reception unit 402, the connection information request processing unit 412 receives the connection information management DB 426 in accordance with the connection information request. The connection information including the information stored in the connection information management table and the encoded validity confirmation information input by the validity confirmation information encoding unit 408 is generated and transmitted from the first transmission / reception unit 402. To do.

  The connection processing unit 414 of the operation unit 122 is realized by a command from the CPU 152. When a connection request transmitted by the wireless communication terminal 200 that has received the connection information is input from the second transmission / reception unit 404, the connection processing unit 414 performs a connection process with the wireless communication terminal 200 according to the connection request. I do.

  The validity confirmation information request processing unit 416 of the operation unit 122 is realized by a command from the CPU 152. When the validity confirmation information request transmitted from the wireless communication terminal 200 connected by the connection processing unit 414 is input from the second transmission / reception unit 404, the validity confirmation information request processing unit 416 responds to the validity confirmation information request. Therefore, the legitimacy information encoded from the legitimacy confirmation information encoder 408 is acquired and transmitted from the second transmitter / receiver 404 to the radio communication terminal 200.

  The job processing unit 418 of the operation unit 122 is realized by a command from the CPU 152. When a job requested by the wireless communication terminal 200 is input from the second transmission / reception unit 404, the job processing unit 418 processes the job.

<Wireless communication terminal 200>
FIG. 5 shows a hardware configuration example of radio communication terminal 200 according to the present embodiment. The wireless communication terminal 200 includes a CPU 202, a RAM 204, a ROM 206, an HDD 208, an I / F 210, a sensor 212, an LCD (Liquid Crystal Display) 214, an operation unit 216, a first wireless communication unit 218, 2 wireless communication units 220. The CPU 202, RAM 204, ROM 206, HDD 208, I / F 210, and sensor 212 are connected by a bus 90.

  The CPU 202 controls the entire wireless communication terminal 200. The ROM 206 is a read-only nonvolatile storage medium and stores a program such as firmware. The RAM 204 is a volatile storage medium capable of reading and writing information at high speed, and is used as a work area when the CPU 202 processes information. The HDD 208 is a non-volatile storage medium that can read and write information, and stores an OS, various control programs, application programs, and the like.

  The I / F 210 connects the bus 90 to various hardware and networks. The sensor 212 is a sensor realized by hardware such as an acceleration sensor. The LCD 214 is a visual user interface for the user to check the state of the wireless communication terminal 200. The operation unit 216 is a user interface for a user such as a keyboard and a mouse to input information to the wireless communication terminal 200. The LCD 214 and the operation unit 216 may be configured by a touch panel, and the keyboard may be realized by software.

  The first wireless communication unit 218 is a first wireless communication method that is slower than the second wireless communication method, such as short-range wireless communication such as Bluetooth 4.0 and Felica (registered trademark), ultrasonic wireless communication, and the like. To perform wireless communication.

  The second wireless communication unit 220 performs high-speed wireless communication as compared with the first wireless communication method in accordance with a second wireless communication method standard such as a wireless LAN.

<Functional configuration of the embodiment>
Next, the functional configuration of the present embodiment will be described. FIG. 6 is a functional block diagram of the wireless communication terminal 200.

  The wireless communication terminal 200 includes a first transmission / reception unit 252, a second transmission / reception unit 254, a connection target identification unit 256, a connection information acquisition unit 258, a connection processing unit 260, a validity confirmation information request unit 262, and a validity confirmation processing unit. H.264, a job request unit 266, and a storage / read processing unit 268. Each of these units is a function or means realized by any one of the constituent elements shown in FIG. 5 operating according to a command from the CPU 202 according to the wireless terminal device program stored in the HDD 208. . Further, the wireless communication terminal 200 includes a storage unit 270 constructed by the HDD 208 shown in FIG.

<Each functional unit of wireless communication terminal 200>
Next, each part of the wireless communication terminal 200 will be described in detail. The first transmission / reception unit 252 of the wireless communication terminal 200 is realized by a command from the first wireless communication unit 218 and the CPU 202 shown in FIG. The first transmission / reception unit 252 transmits / receives various data (information) to / from the wireless termination device 400 according to the first wireless communication method.

  The second transmission / reception unit 254 of the wireless communication terminal 200 is realized by a command from the second wireless communication unit 220 and the CPU 202 shown in FIG. The second transmission / reception unit 254 transmits / receives various data (information) to / from the image forming apparatus 100 according to the second wireless communication method.

  The storage / reading processing unit 268 of the wireless communication terminal 200 is realized by a command from the CPU 202 shown in FIG. 5 and a program for the wireless communication terminal stored in the HDD 208. The storage / reading processing unit 268 stores various data in the storage unit 270 and performs processing for reading out various data stored in the storage unit 270.

  The connection target specifying unit 256 of the wireless communication terminal 200 is realized by a command from the CPU 202 and a wireless communication terminal program stored in the HDD 208. The connection target specifying unit 256 determines whether or not the wireless termination device 400 exists in the vicinity of the wireless communication terminal 200 based on the output power level and the received signal strength attached to the device information disclosure packet transmitted by the wireless termination device 400. Determine whether. Here, the received signal strength is measured when the first wireless communication unit 218 receives the device information disclosure packet. When it is determined that the wireless terminal device 400 is present in the vicinity of the wireless communication terminal 200, the connection target specifying unit 256 subtracts the received signal strength from the output power level to calculate a path loss for each device information disclosure packet. Ask. Then, when there is a device information disclosure packet whose path loss exceeds a predetermined threshold, the connection target identification unit 256 identifies a connection target based on the device name attached to the device information disclosure packet. The connection target specifying unit 256 notifies the connection information acquisition unit 258 of the device name to be connected.

  The connection information acquisition unit 258 of the wireless communication terminal 200 is realized by a command from the CPU 202 and a wireless communication terminal program stored in the HDD 208. The connection information acquisition unit 258 creates a connection information request with the device name as a destination based on the device name input by the connection target specifying unit 256 and transmits the connection information request from the first transmission / reception unit 252. When connection information is input from the first transmission / reception unit 252 as a response to the connection information request, the connection information acquisition unit 258 inputs the connection information to the connection processing unit 260 and is attached to the connection information. The correctness confirmation information is input to the storage / read processing unit 268 to be stored in the storage unit 270.

  The connection processing unit 260 of the wireless communication terminal 200 is realized by a command from the CPU 202 and a wireless communication terminal program stored in the HDD 208. Based on the connection information input by the connection information acquisition unit 258, the connection processing unit 260 performs a process of connecting between the connection target image forming apparatus and the second transmission / reception unit 254 by performing a handover. Here, handover generally refers to acquiring connection information necessary for a high-speed communication function using a low-speed communication function and using it for a high-speed communication connection. A combination of an NFC reader / writer and Wi-Fi, or a combination of Bluetooth (registered trademark) and Wi-Fi is known. By sharing the encryption key between the image forming apparatus 100 and the wireless communication terminal 200, the image forming apparatus 100 encrypts and transmits connection information, and the wireless communication terminal 200 transmits the encrypted connection information. Can be decrypted.

  The validity confirmation information request unit 262 of the wireless communication terminal 200 is realized by a command from the CPU 202 and a wireless communication terminal program stored in the HDD 208. The validity confirmation information request unit 262 creates validity confirmation information request information for requesting validity confirmation information from the image forming apparatus 100 connected by the connection processing unit 260 and transmits the information from the second transmission / reception unit 254. .

  The validity confirmation processing unit 264 of the wireless communication terminal 200 is realized by a command from the CPU 202 and a wireless communication terminal program stored in the HDD 208. When the validity confirmation information transmitted from the image forming apparatus 100 that has received the validity confirmation information request information is input from the second transmission / reception unit 254, the validity confirmation processing unit 264 stores the information in the storage / reading processing unit 268. The validity confirmation information stored in the unit 270 is read. The validity confirmation processing unit 264 determines whether the validity confirmation information stored in the storage unit 270 matches the validity confirmation information input from the second transmission / reception unit 254, thereby determining whether or not the image forming apparatus 100 is satisfied. It is determined whether or not the wireless terminal device 400 connected to is valid. The validity confirmation processing unit 264 notifies the job request unit 266 whether or not the wireless terminal device 400 is valid.

  The job request unit 266 of the wireless communication terminal 200 is realized by a command from the CPU 202 and a wireless communication terminal program stored in the HDD 208. The job request unit 266 sends a job requested by the user from the second transmission / reception unit 254 to the connected image forming apparatus 100 when the validity check processing unit 264 notifies that the wireless termination device 400 is valid. Send.

<Operation of image forming system>
FIG. 7 shows the operation of the image forming system according to the present embodiment. FIG. 7 mainly shows processing for verifying the validity of the wireless terminal device 400.

  In step S <b> 702, the device information disclosure packet creation unit 410 of the operation unit 122 of the image forming apparatus 100 creates a device information disclosure packet attached with the information stored in the device information disclosure packet management DB 424 of the storage unit 422.

  In step S <b> 704, the validity confirmation information creating unit 406 of the operation unit 122 of the image forming apparatus 100 creates validity confirmation information.

  In step S706, the validity confirmation information encoding unit 408 of the operation unit 122 of the image forming apparatus 100 encodes the validity confirmation information.

  In step S708, the device information disclosure packet creation unit 410 of the operation unit 122 of the image forming apparatus 100 inputs the device information disclosure packet to the wireless terminal device 400, and the validity confirmation information encoding unit 408 receives the encoded validity confirmation information. Input to the wireless terminal 400.

  In step S710, the first wireless communication unit 401 of the wireless terminal device 400 is initialized when the device information disclosure packet is input by the device information disclosure packet creation unit 410, and transmits the device information disclosure packet.

  In step S712, the connection target specifying unit 256 of the wireless communication terminal 200 searches for the wireless terminal device based on the device information disclosure packet received by the first transmission / reception unit 252.

  In step S714, the connection target specifying unit 256 of the wireless communication terminal 200 determines whether a wireless terminal device is detected. If no wireless terminal device is detected, the process returns to step S712.

  In step S716, the connection information acquisition unit 258 of the wireless communication terminal 200 transmits a connection information request for requesting connection information and validity confirmation information to the wireless terminal device 400 detected in step S712.

  In step S718, the first wireless communication unit 401 of the wireless terminal device 400 receives the connection information request transmitted by the wireless communication terminal 200.

  In step S720, the first wireless communication unit 401 of the wireless terminal device 400 transmits connection information accompanied by encoded validity confirmation information as a response to the connection information request.

  In step S722, the connection information acquisition unit 258 of the wireless communication terminal 200 receives the connection information transmitted by the wireless terminal device 400.

  In step S724, the connection processing unit 260 of the wireless communication terminal 200 performs connection between the second wireless communication unit 220 and the image forming apparatus 100 using the connection information.

  In step S726, the validity confirmation information request unit 262 of the wireless communication terminal 200 requests the validity confirmation information from the image forming apparatus 100 using the connection information.

  In step S728, the second transmission / reception unit 404 of the operation unit 122 of the image forming apparatus 100 receives the validity confirmation information request transmitted by the wireless communication terminal 200.

  In step S730, the validity confirmation information request processing unit 416 of the operation unit 122 of the image forming apparatus 100 is encoded from the validity confirmation information encoding unit 408 in accordance with the validity confirmation information request transmitted by the wireless communication terminal 200. The correctness confirmation information is acquired and transmitted from the second transmission / reception unit 404.

  In step S <b> 732, the second transmission / reception unit 254 of the wireless communication terminal 200 receives the encoded validity confirmation information transmitted by the image forming apparatus 100.

  In step S <b> 734, the validity confirmation processing unit 264 of the wireless communication terminal 200 performs the encoded validity confirmation information acquired from the first transmission / reception unit 252 and the encoded validity confirmation information acquired from the second transmission / reception unit 254. Decode.

  In step S736, the validity confirmation processing unit 264 of the wireless communication terminal 200 determines whether the two pieces of decoded validity confirmation information are equal. If it is determined that the two pieces of decoded validity information are not equal, the process returns to step S712.

  In step S738, when it is determined that the two pieces of decoded validity confirmation information are equal, the job request unit 266 of the wireless communication terminal 200 starts an instruction to the image forming apparatus 100.

  According to the image forming system according to the present embodiment, the image forming apparatus creates validity confirmation information, encodes the validity confirmation information, and inputs the encoded validity confirmation information together with the connection information to the wireless terminal device. To do. The wireless terminal transmits the encoded validity confirmation information and connection information input by the image forming apparatus to the wireless communication terminal using the first wireless communication method. The wireless communication terminal receives the encoded validity confirmation information and connection information transmitted by the wireless terminal device, connects to the image forming apparatus by the second wireless communication method using the connection information, and encodes the correctness Request confirmation information. The wireless communication terminal receives the encoded validity confirmation information transmitted by the image forming apparatus by the second wireless communication method, and receives the encoded validity confirmation information and the second wireless communication received by the first wireless communication method. The encoded validity confirmation information received by the method is decoded, and when the two validity confirmation information matches, the job is requested to the image forming apparatus. The encoded validity confirmation information received by the first wireless communication method and the encoded validity confirmation information received by the second wireless communication method are decoded, and the two validity confirmation information matches, thereby the wireless communication terminal On the side, it can be detected that the wireless termination device has been impersonated. In other words, since the validity of the wireless terminal device can be verified before requesting a job from the wireless communication terminal, it is possible to prevent the contents of the job and information stored in the wireless communication terminal from being stolen.

  It can be determined by the authentication process using the public key cryptosystem whether or not the other party to be connected with the second radio communication scheme is impersonated using the connection information acquired by the first radio communication scheme. However, when judging by authentication processing using a public key cryptosystem, an expiration date is set for the private key or the public key. Therefore, every time the expiration date expires, the secret key is installed in the image forming apparatus. Or a public key must be installed in the wireless communication terminal. According to the above-described embodiment, it is possible to determine whether or not a partner to be connected by the second wireless communication method is impersonated while saving the trouble of reinstalling the key.

<Modification>
1 to 6 can be applied to the image forming system according to this modification.

  The image forming apparatus 100 according to the present modification corresponds to a plurality of types of encoding methods, and encodes the validity confirmation information by any of the plurality of types of encoding methods. The image forming apparatus 100 notifies the wireless communication terminal 200 of the encoded validity confirmation information and the encoding method.

  Specifically, the validity confirmation information encoding unit 408 of the image forming apparatus 100 performs encoding by generating a hash value using a hash function such as MD5, or encoding using a predetermined algorithm such as SHA 1 or SHA 256. Identification information is given to the method, and the encoding method is periodically changed. The validity confirmation information encoding unit 408 notifies the encoded validity confirmation information and the encoding method identification information from the second transmission / reception unit 404.

  The validity confirmation processing unit 264 of the wireless communication terminal 200 decodes the encoded validity confirmation information based on the encoded validity confirmation information transmitted by the image forming apparatus 100 and the identification information of the encoding method. . Accordingly, since the encoding method is periodically changed, it can be verified with higher accuracy whether or not the wireless terminal device 400 is valid.

  In the above-described embodiments, the image forming system is an example of an information processing system, the wireless communication terminal is an example of an information processing apparatus, and the image forming apparatus is an example of a device. The connection information acquisition unit is an example of a first request unit, and the validity confirmation information request unit is an example of a second request unit. The connection information request processing unit is an example of a first request processing unit, and the validity confirmation information request processing unit is an example of a second request processing unit.

  Although the present invention has been described with reference to specific embodiments and modifications, each embodiment and modification is merely an example, and those skilled in the art will recognize various modifications, modifications, alternatives, substitutions, and the like. Will understand. For convenience of explanation, an apparatus according to an embodiment of the present invention has been described using a functional block diagram, but such an apparatus may be implemented in hardware, software, or a combination thereof. The present invention is not limited to the above-described embodiments, and various variations, modifications, alternatives, substitutions, and the like are included without departing from the spirit of the present invention.

50 LAN
DESCRIPTION OF SYMBOLS 100 Image forming apparatus 122 Operation part 200 Wireless communication terminal 300 Wireless access point 400 Wireless termination device 252 1st transmission / reception part 254 2nd transmission / reception part 256 Connection object specific | specification part 258 Connection information acquisition part 260 Connection processing part 262 Validity confirmation information Request unit 264 Validity confirmation processing unit 266 Job request unit 268 Storage / reading processing unit 270 Storage unit 272 Validity confirmation information 400 Wireless terminal device 401 First wireless communication unit 402 First transmission / reception unit 404 Second transmission / reception unit 406 Validity confirmation information creation unit 408 Validity confirmation information encoding unit 410 Device information public packet creation unit 412 Connection information request processing unit 414 Connection processing unit 416 Validity confirmation information request processing unit 418 Job processing unit 420 Storage / read processing unit 422 Storage unit 424 Device information disclosure packet Capital management DB
426 connection information management DB

JP 2010-41563 A

Claims (5)

An information processing apparatus that can be connected to a device,
A first transmission / reception unit that transmits / receives a first radio wave to / from the device by a first wireless communication method;
A second transmission / reception unit for transmitting / receiving a second radio wave to / from the device by a second wireless communication method;
Connection information used when connecting to the device from the first transmission / reception unit using the second wireless communication method, and wireless communication with the device and transmission / reception of the first radio wave A first request unit for requesting validity confirmation information used when confirming the validity of the communication device;
A connection processing unit that obtains connection information requested by the first request unit from the first transmission / reception unit, and uses the connection information to connect to the device by the second wireless communication method;
A second requesting unit that requests validity confirmation information from the second transmitting / receiving unit to the device;
First validity confirmation information acquired from the first transmission / reception unit by a request from the first request unit, and second acquired from the second transmission / reception unit by a request from the second request unit An information processing apparatus comprising: a validity confirmation processing unit that determines that the wireless communication apparatus is valid when the validity confirmation information matches.   The validity confirmation processing unit decodes the encoded first validity confirmation information acquired from the first transmitting / receiving unit in response to a request from the first request unit, and in response to a request from the second request unit. 2. The information processing according to claim 1, wherein the encoded second validity confirmation information acquired from the second transmission / reception unit is decoded, and the wireless communication apparatus determines that the wireless communication apparatus is valid when the two match. apparatus. A job request unit configured to request a job from the second transmission / reception unit to the device when a predetermined operation is performed by a user and the wireless communication device is determined to be valid by the validity check processing unit; The information processing apparatus according to claim 1 or 2. A first transmission / reception unit that transmits / receives a first radio wave to / from the device by a first wireless communication method;
An information processing apparatus including: a second transmitting / receiving unit configured to transmit / receive a second radio wave to / from the device by a second wireless communication method;
Connection information used when connecting to the device from the first transmission / reception unit using the second wireless communication method, and wireless communication with the device and transmission / reception of the first radio wave Request the validity confirmation information used when confirming the validity of the communication device,
Obtaining the connection information from the first transmission / reception unit, using the connection information, connecting to the device by the second wireless communication method,
Request the validity confirmation information from the second transmission / reception unit to the device,
By the first validity confirmation information acquired from the first transmission / reception unit by the request for the validity confirmation information used when confirming the validity of the wireless communication device, and by the request from the second transmission / reception unit An information processing program for causing the wireless communication device to determine that the wireless communication device is valid when the second validity confirmation information acquired from the second transmission / reception unit matches. An information processing system having a device and an information processing apparatus connectable to the device,
The information processing apparatus includes:
A first transmission / reception unit that transmits / receives a first radio wave to / from the device by a first wireless communication method;
A second transmission / reception unit for transmitting / receiving a second radio wave to / from the device by a second wireless communication method;
Connection information used when connecting to the device from the first transmission / reception unit using the second wireless communication method, and wireless communication with the device and transmission / reception of the first radio wave A first request unit for requesting validity confirmation information used when confirming the validity of the communication device;
A first connection processing unit that acquires connection information requested by the first request unit from the first transmission / reception unit, and uses the connection information to connect to the device by the second wireless communication method. When,
A second requesting unit that requests validity confirmation information from the second transmitting / receiving unit to the device;
First validity confirmation information acquired from the first transmission / reception unit by a request from the first request unit, and second acquired from the second transmission / reception unit by a request from the second request unit A validity confirmation processing unit that judges that the wireless communication device is valid when the validity confirmation information matches, and
The equipment is
A third transmission / reception unit for transmitting / receiving a second radio wave to / from the information processing apparatus by the second wireless communication method;
A correctness confirmation information creating unit for creating the correctness confirmation information;
When the connection information and the validity confirmation information are requested from the information processing apparatus by the first wireless communication method, the connection information and the validity confirmation information are transmitted from the wireless communication apparatus. A first request processing unit to
A second connection processing unit connected to the first connection processing unit by the second wireless communication method;
A second request processing unit that transmits the validity confirmation information from the third transmission / reception unit when the validity confirmation information is requested from the information processing apparatus by the second wireless communication method. Information processing system.

Images