JP2017055286A - Radio communication device, method, system and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To allow communication of an unauthorized terminal to be restricted while reducing time and labor for registration in advance.SOLUTION: When a radio communication device receives a connection request from a radio slave unit, it establishes connection, then discards a communication frame if a prescribed key is not attached to the communication frame from the radio slave unit, on the other hand starts communication if the key is attached, and transmits the key to the radio slave unit if communication propriety information on the radio slave unit indicates communication permission.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a wireless communication apparatus, method, system, and program for restricting unauthorized terminal communication.

  Wireless communication is routinely carried out with the development of wireless communication technology such as the spread of mobile terminals such as smartphones and the appearance of products equipped with IEEE (Institute of Electrical and Electronics Engineers) 802.11ac technology that realizes high-speed communication. It has been broken. However, while wireless communication is convenient, since it is possible to connect from anywhere within the reach of radio waves, there are concerns about security issues.

  One of the problems of wireless communication is an unauthorized access problem in which an unauthorized terminal that is not recognized by an administrator of a wireless LAN (Local Area Network) access point tries to access the access point. As a countermeasure against unauthorized access, many products are equipped with a MAC (Media Access Control) address filtering function. The MAC address filtering function is a function in which the MAC address of a terminal that is permitted to be connected is registered in advance in the access point, and communication of a terminal that is not registered is discarded in the access point. As a result, only registered terminals can communicate via the access point.

  However, since the MAC address can be camouflaged, if an unauthorized terminal attempts to connect by impersonating the MAC address and authentication is successful, the unauthorized terminal can connect to the access point and freely communicate.

  As a method of rejecting connection of an unauthorized terminal with a MAC address disguised, in the method described in Patent Document 1, client-specific authentication information is registered in advance in the authentication server and the client, and authentication is performed using the authentication information when a connection request is made. Is going. Since the authentication information specific to the client is not registered in the unauthorized terminal, it is possible to refuse connection of the unauthorized terminal.

JP 2004-297257 A

  However, in the method of Patent Document 1, it is necessary to register client-specific authentication information in advance in both the authentication server and the client. Therefore, it takes a lot of time and effort from the administrator for pre-registration.

  An object of the present invention is to provide a wireless communication apparatus, method, system, and program capable of reducing the effort of pre-registration and restricting communication of unauthorized terminals.

  In order to solve the above-described problem, when a wireless communication device of the present invention receives a connection request from a wireless slave, it establishes a connection and a predetermined key is added to a communication frame from the wireless slave. The communication unit discards the communication frame if not, starts communication if the key is attached, and transmits the key to the wireless slave when communication permission information on the wireless slave indicates communication permission It is characterized by providing.

  The wireless communication method of the present invention, when receiving a connection request from a wireless slave unit, establishes a connection and, if a predetermined key is not attached to the communication frame from the wireless slave unit, the communication frame is displayed. If the key is attached, communication is started, and when the communication permission / prohibition information regarding the wireless slave indicates communication permission, the key is transmitted to the wireless slave.

  In addition, the wireless communication program of the present invention establishes a connection when a connection request is received from a wireless slave unit to the computer, and the communication frame from the wireless slave unit is not attached with a predetermined key. Discard communication frame, start communication if the key is attached, and implement a communication function to transmit the key to the wireless slave device when communication permission information on the wireless slave device indicates communication permission It is characterized by.

  The wireless communication apparatus, method, system, and program of the present invention can reduce the effort of pre-registration and restrict unauthorized terminal communication.

It is a figure which shows the structural example of the radio | wireless communication apparatus of 1st embodiment of this invention. It is a figure which shows the operation example of the radio | wireless communication apparatus of 1st embodiment of this invention. It is a figure which shows the structural example of the radio | wireless communication apparatus of 2nd embodiment of this invention. It is a figure which shows the structural example of the radio | wireless subunit | mobile_unit of 2nd embodiment of this invention. It is a figure which shows the operation example of the radio | wireless communication apparatus of 2nd embodiment of this invention. It is a figure which shows the example of a sequence between the radio | wireless communication apparatus of 2nd embodiment of this invention, and a radio | wireless subunit | mobile_unit. It is a figure which shows the example of a sequence between the radio | wireless communication apparatus of 2nd embodiment of this invention, and a radio | wireless subunit | mobile_unit. It is a figure which shows the structural example of the radio | wireless communication apparatus of 3rd embodiment of this invention. It is a figure which shows the operation example of the radio | wireless communication apparatus of 3rd embodiment of this invention. It is a figure which shows the example of a sequence between the radio | wireless communication apparatus of 3rd embodiment of this invention, and a radio | wireless subunit | mobile_unit. It is a figure which shows the hardware structural example of the radio | wireless communication apparatus of each embodiment of this invention.

[First embodiment]
A first embodiment of the present invention will be described.

  FIG. 1 shows a configuration example of a wireless communication apparatus 10 according to the present embodiment. The wireless communication device 10 includes a communication unit 11.

  When the communication unit 11 receives a connection request from the wireless slave unit, the communication unit 11 establishes the connection and discards the communication frame if any of the communication frames from the wireless slave unit is not attached. If is attached, it is a part for starting communication. If the communication permission / inhibition information regarding the wireless slave unit indicates communication permission, a key is transmitted to the wireless slave unit.

  By configuring the wireless communication device 10 in this way, it is possible to reduce the effort of pre-registration and restrict communication of unauthorized terminals.

  Next, FIG. 2 shows an example of the operation of the wireless communication apparatus 10 of the present embodiment.

  First, when the communication unit 11 of the wireless communication device 10 receives a connection request from the wireless slave device (step S101), the communication unit 11 establishes the connection and attaches a predetermined key to any of the communication frames from the wireless slave device. If not, the communication frame is discarded (step S102). If a key is attached (step S103), communication is started (step S104). If the communication permission / inhibition information regarding the wireless slave unit indicates communication permission (step S105), a key is transmitted to the wireless slave unit (step S106).

  By operating the wireless communication device 10 in this way, it is possible to reduce the effort of pre-registration and restrict communication of unauthorized terminals.

  As described above, in the first embodiment of the present invention, when the communication permission / denial information indicates communication permission, a key is transmitted to the wireless slave device. Communication is started when a key is included in the communication frame from the wireless slave unit. As a result, an unauthorized terminal that is not permitted to communicate according to the communication permission information and has not received the key discards the communication frame, and thus communication is restricted. In addition, unauthorized terminals can be restricted by simply registering a key in the wireless communication device in advance. Therefore, it is possible to reduce the effort of pre-registration and restrict unauthorized terminal communication.

[Second Embodiment]
Next, a second embodiment of the present invention will be described. In the present embodiment, the wireless communication apparatus of the first embodiment will be described more specifically.

  FIG. 3 shows a configuration example of the wireless communication device 20 of the present embodiment. The wireless communication device 20 corresponds to a wireless LAN access point.

  The wireless communication device 20 includes a communication unit 21, a permission list storage unit 22, and a permission / refusal input unit 23.

  The permission / refusal input unit 23 is a part that receives input of communication permission / rejection information.

  The permission list storage unit 22 is a part that stores a permission list indicating identification information of a device permitted to communicate.

  When the communication unit 21 receives a connection request from the wireless slave unit, the communication unit 21 establishes a connection with the wireless slave unit, and if a predetermined key is not attached to any of the communication frames from the wireless slave unit, the communication unit 21 The part to be discarded. In addition, when the identification information of the wireless slave unit does not exist in the permission list and the communication permission / rejection information regarding the wireless slave unit indicates communication permission, the identification information of the wireless slave unit is added to the permission list and the wireless slave unit is keyed. Send. Furthermore, when the identification information of the wireless slave unit exists in the permission list and a key is attached to any of the communication frames from the wireless slave unit, communication is started.

  FIG. 4 shows a configuration example of the wireless slave device 30 that makes a connection request to the wireless communication device 20 of the present embodiment. The wireless slave device 30 includes a communication unit 31 and a key storage unit 32. The key storage unit 32 is a part that stores a key received from the wireless communication device 20. The communication unit 31 is a part that communicates with the wireless communication device 20 and transmits and receives management frames, data frames, and the like.

  Next, an example of the operation of the wireless communication apparatus 20 according to this embodiment will be described with reference to FIG.

  First, the communication unit 21 of the wireless communication device 20 receives a connection request from the wireless slave device 30 (step S201), and connects to the wireless slave device 30 in a communication prohibited state in which the communication frame from the wireless slave device 30 is discarded (step S201). Step S202). In response to the connection request from the wireless slave device 30, the wireless communication device 20 transmits a connection response to establish a connection. This corresponds to an exchange during a general wireless connection using an Authentication frame and an Association frame. The communication prohibited state is a state in which the communication frame is discarded by the wireless communication device 20 and is not transferred to the Internet or the like. In this communication prohibited state, the wireless slave device 30 cannot perform communication via the wireless communication device 20 even if the connection with the wireless communication device 20 is completed.

  When the identification information of the wireless slave device 30 does not exist in the permission list of the permission list storage unit 32 (step S203), the permission / refusal input unit 23 receives communication permission / non-permission information indicating whether or not to allow the wireless slave device 30 to communicate. (Step S204).

  As the identification information, for example, a MAC address included in a management frame from the wireless slave device 30 to the wireless communication device 20 can be used. As a method for accepting communication permission / inhibition information, for example, it is conceivable that the MAC address is displayed on a monitor screen or the like on the wireless communication device 20 and the administrator who sees it inputs permission / rejection. In addition, this reception method is an example and is not limited to this method. Here, when the administrator inputs permission / rejection to the wireless slave device 30, the administrator can reject communication when an unauthorized terminal with a MAC address impersonated makes a connection request.

  Next, when the communication permission information indicates permission in step S204, the wireless communication device 20 adds identification information of the wireless slave device 30 to the permission list (step S205) and transmits a key to the wireless slave device 30 (step S205). S206). The communication unit 31 of the wireless slave device 30 stores the received key in the key storage unit 32. In addition, since the wireless communication device 20 disconnects the connection with the wireless slave device 30, the wireless slave device 30 can make a connection request to the wireless communication device 20 again, so the connection is disconnected (step S209). .

  Any transmission frame may be used for transmitting the key in step S206 as long as the wireless slave unit 30 can receive the key. For example, step S206 and step S209 can be performed at a time by writing a key in the Vendor Specific field of the connection disconnection frame (Deauthentication frame) in step S209. The Vendor Specific field is a field whose value can be freely set by the vendor.

  Also, any value can be used for the key used here. For example, a method of using a key set in advance in the wireless communication device 20 by the administrator of the wireless communication device 20 can be considered.

  When the communication permission / rejection information indicates rejection in step S204, the wireless communication device 20 disconnects from the wireless slave device 30 (step S209). At this time, the key is not transmitted. For example, it is conceivable to transmit without writing a key in the connection disconnection frame. It is also possible to leave the connection in the communication frame discarding state without disconnecting the connection here.

  If the identification information of the wireless slave unit 30 exists in the permission list in step S203, it is confirmed whether there is a communication frame from the wireless slave unit 30 that includes a key (step S207). In order to add the identification information to the permission list in step S205, the identification information is present in the permission list when the wireless slave device 30 permitted to communicate in step S204 in the past requests connection to the wireless communication device 20 again. It becomes a state to do. The wireless slave device 30 transmits the key included in one of the communication frames. As long as the wireless communication device 20 can receive the key, any communication frame may be used for transmitting the key. When at least one communication frame including the key is received, the wireless slave unit 30 stops discarding the communication frame from the wireless slave unit 30 and starts communication (step S208). As a result, the wireless slave unit 30 can communicate with the Internet or the like via the wireless communication device 20.

  If a communication frame including a key cannot be received after a while (step S207), it is regarded as an unauthorized terminal pretending to be identification information of the authorized wireless slave unit 30, and the connection is disconnected (step S209). Here, it is possible to leave the communication frame discarded without disconnecting the connection. This makes it possible to restrict communication of unauthorized terminals that do not have a key.

  Next, with reference to FIG. 6 and FIG. 7, when the wireless slave device 30 not registered in the permission list makes a connection request to the wireless communication device 20, between the wireless communication device 20 and the wireless slave device 30. An example of the sequence will be described. FIG. 6 is an example when the administrator of the wireless communication device 20 permits the communication of the wireless slave device 30, and FIG.

  When the wireless slave device 30 transmits a connection request to the wireless communication device 20, the wireless communication device 20 transmits a connection response, and a connection is established (steps S301 to S303).

  The wireless slave unit 30 tries to communicate with the Internet or the like via the wireless communication device 20, but cannot communicate via the wireless communication device 20 because the communication frame is discarded (step S304). The steps so far are common to FIGS. 6 and 7.

  When the administrator of the wireless communication device 20 recognizes the connection of the wireless slave device 30 and permits the communication of the wireless slave device 30, the wireless communication device 20 adds the identification information of the wireless slave device 30 to the permission list. Also, arbitrary key information is included in the disconnection frame and transmitted to the wireless slave unit 30 (step S305). The wireless slave device 30 that has been disconnected obtains a key from the disconnected frame and stores it in the key storage unit 32.

  After the disconnection, the wireless slave device 30 makes a connection request to the wireless communication device 20 again (step S306). Then, the wireless communication device 20 responds with a connection response and establishes a connection (steps S307 and S308). This state is a state in which the wireless communication device 20 discards the communication frame from the wireless slave unit 30 as in step S304. The wireless communication device 20 checks whether the identification information of the wireless slave device 30 exists in the permission list, and the identification information of the wireless slave device 30 is added to the permission list in step S305. Check if the communication frame contains a key. After establishing the connection, the wireless slave device 30 transmits the key stored in the key storage unit 32 in any communication frame. When the wireless communication device 20 can confirm even one communication frame including the key (step S309), the wireless communication device 20 stops discarding the communication frame from the wireless slave device 30 (step S310). As a result, the wireless slave device 30 becomes communicable via the wireless communication device 20.

  When the wireless slave device 30 disconnects the connection from this state and makes a connection request again, the communication can be performed again by performing the sequence from step S306.

  When the administrator refuses the communication of the wireless slave device 30, the wireless communication device 20 transmits a disconnect frame to the wireless slave device 30 (step S311). At this time, the key is not included in the cutting frame. As a result, the wireless slave device 30 that has been refused communication is disconnected from the wireless communication device 20, and therefore cannot communicate.

  When the wireless slave device 30 that has been refused connection transmits a connection request again, the identification information of the wireless slave device 30 is not registered in the permission list, so that the communication frame is discarded as in steps S301 to S304. (Steps S312 to S415). Although the administrator inputs permission / rejection again, there is no problem even if the administrator does not perform permission input because the communication is not possible without permission permission input.

  By operating the wireless communication device 20 in this way, it is possible to reduce the effort of pre-registration and restrict communication of unauthorized terminals.

  As described above, in the second embodiment of the present invention, as in the first embodiment, when the communication permission / denial information indicates communication permission, a key is transmitted to the wireless slave device. Communication is started when a key is included in the communication frame from the wireless slave unit. As a result, an unauthorized terminal that is not permitted to communicate according to the communication permission information and has not received the key discards the communication frame, and thus communication is restricted. In addition, unauthorized terminals can be restricted by simply registering a key in the wireless communication device in advance. Therefore, it is possible to reduce the effort of pre-registration and restrict unauthorized terminal communication.

  Furthermore, in this embodiment, since the identification information of the wireless slave device whose communication permission information indicates permission is registered in the permission list, the wireless slave device once registered in the permission list is automatically processed after the second connection request. It becomes possible to permit communication.

[Third embodiment]
Next, a third embodiment of the present invention will be described.

  In this embodiment, not only the identification information of the wireless slave device that has permitted communication but also the identification information of the wireless slave device that has refused communication is stored in the wireless communication device. In the second embodiment, the communication frame of the wireless slave device that has refused communication is discarded, but the connection exchange is performed each time. In the present embodiment, by storing the identification information of the wireless slave device that has refused communication in the wireless communication device, unnecessary communication can be reduced regardless of the connection request of the wireless slave device that has refused communication. .

  FIG. 8 shows a configuration example of the wireless communication device 40 of the present embodiment. A rejection list storage unit 44 is added to the wireless communication device 20. A rejection list storage unit 44 can be added to the wireless communication device 10.

  The refusal list storage unit 44 is a part that stores a refusal list indicating identification information of a device that has refused communication.

  When the communication permission / denial information indicates rejection, the communication unit 41 adds the identification information of the wireless slave device 30 that has transmitted the connection request to the rejection list. Further, when the identification information of the wireless slave device 30 that has transmitted the connection request exists in the refusal list, the connection request from the wireless slave device 30 is not responded and the connection with the wireless slave device 30 is not performed.

  By configuring the wireless communication device 40 in this way, it is possible to reduce the effort of pre-registration and limit the communication of unauthorized terminals. In addition, it is possible to reduce unnecessary communication without connecting to a wireless slave unit existing in the rejection list.

  Next, FIG. 9 shows an example of the operation of the wireless communication device 40 of the present embodiment.

  The operation example of FIG. 9 is substantially the same as the operation example (FIG. 5) of the second embodiment. In FIG. 9, step S402 and step S408 not shown in FIG. 5 are added. Since common operations are the same, description thereof is omitted.

  When the wireless slave device 30 that is not recognized by the administrator of the wireless communication device 40 makes a connection request to the wireless communication device 40, the administrator inputs communication permission / rejection information indicating rejection of communication of the wireless slave device 30. When the communication permission / denial information indicates rejection in step S405, the wireless communication device 40 adds identification information of the wireless slave device 30 to the rejection list (step S408). Then, the connection with the wireless slave device 30 is disconnected (step S411). At this time, the key is not transmitted to the wireless slave unit 30.

  When a connection request is received from the wireless slave device 30 (step S401), it is confirmed whether the identification information of the wireless slave device 30 exists in the rejection list (step S402). If it exists in the refusal list, the wireless communication device 40 does not transmit a connection response to the wireless slave device 30. Therefore, the connection with the wireless slave device 30 is not established.

  Next, an example of a sequence between the wireless communication device 40 and the wireless slave unit 30 when the communication of the wireless slave unit 30 is rejected will be described with reference to FIG.

  When the wireless slave device 30 that does not exist in either the allow list or the reject list makes a connection request to the wireless communication device 40, the wireless communication device 40 makes a connection in a state in which the communication frame is discarded as in FIGS. Establish (steps S301 to S304).

  Then, the administrator of the wireless communication device 40 recognizes that the wireless slave device 30 is connected to the wireless communication device 40 and inputs permission / rejection of communication. When the communication permission / denial information indicates refusal, the wireless communication device 40 adds the identification information of the wireless slave device 30 to the refusal list, and transmits a disconnect frame to the wireless slave device 30 (step S311). At this time, the wireless communication device 40 does not transmit a key.

  When the wireless slave device 30 makes a connection request to the wireless communication device 40 again (step S316), since the identification information of the wireless slave device 30 is registered in the rejection list, the wireless communication device 40 does not transmit a connection response. To refuse the connection.

  By operating the wireless communication device 40 in this way, it is possible to reduce the effort of pre-registration and restrict communication of unauthorized terminals. In addition, it is possible to reduce unnecessary communication without connecting to a wireless slave unit existing in the rejection list.

  As described above, in the third embodiment of the present invention, as in the first and second embodiments, when the communication permission information indicates permission, a key is transmitted to the wireless slave device. Communication is started when a key is included in the communication frame from the wireless slave unit. As a result, an unauthorized terminal that is not permitted to communicate according to the communication permission information and has not received the key discards the communication frame, and thus communication is restricted. In addition, unauthorized terminals can be restricted by simply registering a key in the wireless communication device in advance. Therefore, it is possible to reduce the effort of pre-registration and restrict unauthorized terminal communication.

Further, in the present embodiment, when the communication permission / denial information indicates rejection, the wireless slave device identification information is added to the rejection list, and when the wireless slave device existing in the rejection list makes a connection request, the connection is rejected. . Therefore, it becomes possible to reduce unnecessary communication with the wireless slave units existing in the rejection list [Fourth Embodiment]
Next, a fourth embodiment of the present invention will be described.

  In the second and third embodiments, the mode in which the key is included in the cut frame and transmitted to the wireless slave unit has been described. However, a management frame such as a disconnected frame is transmitted as it is without being protected regardless of the encryption method at the time of connection. For this reason, if the management frame is transmitted including the key, the frame may be intercepted and the key may be obtained illegally, and there may be an unauthorized terminal having a legitimate key. In the present embodiment, a PMF (Protected Management Frames) function is used as a countermeasure.

  The PMF function is a function for protecting a management frame, and is defined in IEEE802.11w. By using this function, it is possible to protect the management frame and transmit the key in a form that cannot be analyzed by an unauthorized terminal. It should be noted that a method other than the PMF function can be used as a method for protecting the frame for transmitting the key.

  The PMF function can be used as follows, for example. First, the wireless communication device makes a connection response to the connection request from the wireless slave unit. Since the PMF function can be used only with the WPA2 (Wi-Fi Protected Access 2) (registered trademark) encryption method, after that, it connects with the WPA2 encryption method and notifies the wireless slave unit that the PMF function can be used for encryption key exchange. . When the key exchange is completed, the PMF function is activated. In the first to third embodiments, the encryption method can be arbitrarily set. However, when the PMF function is used, the encryption method is limited.

  When the PMF function is enabled, the management frame is transmitted in a protected state. Thereby, even when a management frame is intercepted by an unauthorized terminal, it is possible to prevent the contents of the frame from being analyzed and obtaining a key illegally.

  A configuration example of the wireless communication apparatus of this embodiment is the same as that of FIG. 1, FIG. 3, or FIG. The operation example of the wireless communication apparatus according to the present embodiment is the same as that shown in FIG. 2, FIG. 5, or FIG. 9 except that the management frame is protected.

  As described above, in the third embodiment of the present invention, as in the first and second embodiments, when the communication permission information indicates permission, a key is transmitted to the wireless slave device. Communication is started when a key is included in the communication frame from the wireless slave unit. As a result, an unauthorized terminal that is not permitted to communicate according to the communication permission information and has not received the key discards the communication frame, and thus communication is restricted. In addition, unauthorized terminals can be restricted by simply registering a key in the wireless communication device in advance. Therefore, it is possible to reduce the effort of pre-registration and restrict unauthorized terminal communication.

  Furthermore, in this embodiment, by protecting the management frame, when the key is included in the management frame and transmitted to the wireless slave unit, the key can be transmitted in a form that cannot be analyzed by an unauthorized terminal.

[Hardware configuration example]
A configuration example of hardware resources that realizes the wireless communication devices (10, 20, 40) in each embodiment of the present invention described above using one information processing device (computer) will be described. The wireless communication devices (10, 20, 40) may be realized using at least two information processing devices physically or functionally. The wireless communication devices (10, 20, 40) may be realized as dedicated devices.

  FIG. 11 is a diagram schematically illustrating a hardware configuration example of an information processing apparatus capable of realizing the wireless communication apparatuses according to the first embodiment to the fourth embodiment. The information processing apparatus 50 includes a communication interface 41, an input / output interface 42, an arithmetic device 43, a storage device 44, and a nonvolatile storage device 45.

  The communication interface 41 is a communication means for the wireless communication device (10, 20, 40) of each embodiment to communicate with an external device in a wired or / and wireless manner. When the wireless communication device (10, 20, 40) is realized using at least two information processing devices, the devices may be connected to each other via the communication interface 41. .

  The input / output user interface 42 is a man-machine interface such as a keyboard which is an example of an input device and a display as an output device.

  The arithmetic device 43 is an arithmetic processing device such as a general-purpose CPU (Central Processing Unit) or a microprocessor. For example, the arithmetic device 43 can read out various programs stored in the nonvolatile storage device 45 to the storage device 44 and execute processing according to the read programs.

  The storage device 44 is a memory device such as a RAM (Random Access Memory) that can be referred to from the arithmetic device 43, and stores programs, various data, and the like. The storage device 44 may be a volatile memory device.

  The nonvolatile storage device 45 is a nonvolatile storage device such as a ROM (Read Only Memory) or a flash memory, and can record various programs, data, and the like.

  In each embodiment of the present invention, for example, the information processing device 50 illustrated in FIG. 11 constitutes a wireless communication device (10, 20, 40), and the functions described in the above embodiments are provided for this wireless communication device. May be realized by supplying a program capable of realizing the above. In this case, the embodiment can be realized by the arithmetic device 43 executing the program supplied to the wireless communication device.

  Further, the program may be recorded in an external storage medium so that the program is appropriately stored in the nonvolatile storage device 45 at the time of shipment or operation of the wireless communication device. In this case, as the program supply method, a method of installing in the wireless communication apparatus using an appropriate jig may be employed in a manufacturing stage before shipment or an operation stage. The program supply method may employ a general procedure such as a method of downloading from the outside via a communication line such as the Internet.

  Each of the above-described embodiments is a preferred embodiment of the present invention, and various modifications can be made without departing from the scope of the present invention.

  A part or all of the above-described embodiment can be described as in the following supplementary notes, but is not limited thereto.

(Appendix 1)
When a connection request is received from a wireless slave unit, after establishing a connection, if the communication frame from the wireless slave unit is not attached with a predetermined key, the communication frame is discarded and the key is attached. And a communication unit that transmits the key to the wireless handset when communication permission information on the wireless handset indicates communication permission.

(Appendix 2)
The wireless communication apparatus according to appendix 1, wherein the communication unit disconnects the connection by transmitting the key when the communication permission information indicates communication permission.

(Appendix 3)
The wireless communication device according to appendix 2, wherein the communication unit transmits the cut frame with the key attached when the communication is permitted, when the communication permission / denial information indicates communication permission.

(Appendix 4)
The wireless communication device according to any one of appendix 1 to appendix 3, wherein the communication unit disconnects the connection when the communication permission / denial information indicates communication rejection.

(Appendix 5)
The wireless communication apparatus according to any one of appendix 1 to appendix 4, wherein the communication unit encrypts a frame for transmitting the key.

(Appendix 6)
The communication unit, when the identification information of the wireless slave unit does not exist in a permission list indicating identification information of a device that has permitted the communication, and when the communication permission / inhibition information indicates communication permission, When the identification information of the wireless slave device is added, the identification information of the wireless slave device exists in the permission list, and the key is attached to the communication frame from the wireless slave device, the communication The wireless communication device according to any one of appendix 1 to appendix 5, wherein the radio communication device is started.

(Appendix 7)
When the communication permission / rejection information indicates communication rejection, the communication unit adds the identification information of the wireless slave device to a rejection list indicating the identification information of the device that rejected the communication, and adds the wireless slave device to the rejection list. The wireless communication apparatus according to any one of appendix 1 to appendix 6, wherein the connection with the radio slave unit is not performed when the identification information of a machine exists.

(Appendix 8)
The wireless communication device according to any one of appendix 1 to appendix 7, further comprising: a permission / refusal input unit configured to receive input of the communication permission / rejection information.

(Appendix 9)
A wireless slave and a wireless communication device according to any one of appendix 1 to appendix 8,
The wireless slave device transmits the connection request to the wireless communication device, stores the key received from the wireless communication device in a key storage unit, and when the key is stored in the key storage unit, A wireless communication system, wherein a key is transmitted to the wireless communication device.

(Appendix 10)
When a connection request is received from a wireless slave unit, after establishing a connection, if the communication frame from the wireless slave unit is not attached with a predetermined key, the communication frame is discarded and the key is attached. If the communication permission information on the wireless slave unit indicates communication permission, the key is transmitted to the wireless slave unit.

(Appendix 11)
The wireless communication method according to appendix 10, wherein when the communication permission information indicates communication permission, the key is transmitted to disconnect the connection.

(Appendix 12)
The wireless communication method according to appendix 11, wherein when the communication permission / denial information indicates communication permission, the key is included in a disconnection frame when the disconnection is performed.

(Appendix 13)
The wireless communication method according to any one of appendix 10 to appendix 12, wherein the connection is disconnected when the communication permission / denial information indicates communication rejection.

(Appendix 14)
The wireless communication method according to any one of appendix 10 to appendix 13, wherein a frame for transmitting the key is encrypted.

(Appendix 15)
When the identification information of the wireless slave device does not exist in the permission list indicating the identification information of the device that has permitted the communication, and the communication permission / inhibition information indicates communication permission, the wireless slave device in the permission list Adding identification information, and starting the communication when the identification information of the wireless slave unit exists in the permission list and the key is attached to the communication frame from the wireless slave unit. The wireless communication method according to any one of Supplementary Note 10 to Supplementary Note 14, which is a feature.

(Appendix 16)
When the communication permission / rejection information indicates communication rejection, the identification information of the wireless slave device is added to a rejection list indicating the identification information of the device that rejected the communication, and the identification information of the wireless slave device is added to the rejection list. The wireless communication method according to any one of Supplementary Note 10 to Supplementary Note 15, wherein connection with the wireless slave device is not performed.

(Appendix 17)
The wireless communication method according to any one of Supplementary Note 10 to Supplementary Note 16, wherein input of the communication permission / denial information is accepted.

(Appendix 18)
On the computer,
When a connection request is received from a wireless slave unit, after establishing a connection, if the communication frame from the wireless slave unit is not attached with a predetermined key, the communication frame is discarded and the key is attached. And a communication function for transmitting the key to the wireless handset when communication permission information regarding the wireless handset indicates communication permission.

(Appendix 19)
The wireless communication program according to appendix 18, wherein the communication function transmits the key and disconnects the connection when the communication permission information indicates communication permission.

(Appendix 20)
The wireless communication program according to appendix 19, wherein the communication function transmits the cut frame including the key when the communication is permitted when the communication permission / rejection information indicates communication permission.

(Appendix 21)
The wireless communication program according to any one of appendix 18 to appendix 20, wherein the communication function disconnects the connection when the communication permission / denial information indicates communication rejection.

(Appendix 22)
The wireless communication program according to any one of appendix 18 to appendix 21, wherein the communication function encrypts a frame for transmitting the key.

(Appendix 23)
The communication function includes: when the identification information of the wireless slave device does not exist in a permission list indicating identification information of a device that has permitted communication; and when the communication permission / inhibition information indicates communication permission, When the identification information of the wireless slave device is added, the identification information of the wireless slave device exists in the permission list, and the key is attached to the communication frame from the wireless slave device, the communication The wireless communication program according to any one of appendix 18 to appendix 22, wherein the program is started.

(Appendix 24)
When the communication permission information indicates communication rejection, the communication function adds the identification information of the wireless slave device to a rejection list indicating the identification information of the device that rejected the communication, and the wireless device is added to the rejection list. The wireless communication program according to any one of supplementary note 18 to supplementary note 23, wherein when the identification information of a device exists, connection with the wireless slave device is not performed.

(Appendix 25)
25. The wireless communication program according to any one of appendix 18 to appendix 24, further causing a computer to realize a permission / refusal input function for receiving input of the communication permission / rejection information.

10, 20, 40 Wireless communication device 11, 21, 41 Communication unit 22 Permission list storage unit 23 Acceptance / rejection input unit 30 Wireless slave unit 31 Communication unit 32 Key storage unit 44 Rejection list storage unit 50 Information processing device

Claims (10)

When a connection request is received from a wireless slave unit, after establishing a connection, if the communication frame from the wireless slave unit is not attached with a predetermined key, the communication frame is discarded and the key is attached. And a communication unit that transmits the key to the wireless handset when communication permission information on the wireless handset indicates communication permission. The wireless communication apparatus according to claim 1, wherein the communication unit disconnects the connection by transmitting the key when the communication permission / denial information indicates communication permission. The wireless communication apparatus according to claim 2, wherein when the communication permission / denial information indicates communication permission, the communication unit transmits the cut frame including the key in the disconnection. The wireless communication apparatus according to any one of claims 1 to 3, wherein the communication unit disconnects the connection when the communication permission / denial information indicates communication rejection. The wireless communication apparatus according to claim 1, wherein the communication unit encrypts a frame for transmitting the key. The communication unit, when the identification information of the wireless slave device does not exist in a permission list indicating identification information of a device permitted to communicate, and when the communication permission / inhibition information indicates communication permission, When the identification information of the wireless slave device is added, the identification information of the wireless slave device exists in the permission list, and the key is attached to the communication frame from the wireless slave device, the communication The wireless communication device according to any one of claims 1 to 5, wherein the wireless communication device is started. When the communication permission / rejection information indicates communication rejection, the communication unit adds the identification information of the wireless slave device to a rejection list indicating the identification information of the device that rejected the communication, and adds the wireless slave device to the rejection list. The wireless communication device according to any one of claims 1 to 6, wherein when the identification information of a device exists, connection with the wireless slave device is not performed. A wireless slave device and the wireless communication device according to any one of claims 1 to 7,
The wireless slave device transmits the connection request to the wireless communication device, stores the key received from the wireless communication device in a key storage unit, and when the key is stored in the key storage unit, A wireless communication system, wherein a key is transmitted to the wireless communication device. When a connection request is received from a wireless slave unit, after establishing a connection, if the communication frame from the wireless slave unit is not attached with a predetermined key, the communication frame is discarded and the key is attached. If the communication permission information on the wireless slave unit indicates communication permission, the key is transmitted to the wireless slave unit. On the computer,
When a connection request is received from a wireless slave unit, after establishing a connection, if the communication frame from the wireless slave unit is not attached with a predetermined key, the communication frame is discarded and the key is attached. And a communication function for transmitting the key to the wireless handset when communication permission information regarding the wireless handset indicates communication permission.

Images