JP2017063385A - Wireless connection device, connection control method and connection control program of the same, and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a wireless connection device that suppresses an increase in the number of parts while keeping security.SOLUTION: An access point (1) is associated with a plurality of SSIDs. Wireless connection using SSIDs included in the plurality of SSIDs is possible. The plurality of SSIDs include management SSIDs and managed SSIDs. A connection control unit (13) invalidates wireless connection using the managed SSIDs when there is no wireless connection using the management SSIDs.SELECTED DRAWING: Figure 2

Description

  The present invention relates to a connection control technique for a wireless connection device.

  In Patent Document 1, in a wireless connection device, (i) security in a wireless network for visitors is improved by reducing the risk of unauthorized access to the wireless network for visitors, and (ii) for visitors A technique for realizing easy use of a wireless network is described. A wireless connection device described in Patent Document 1 includes a detection unit that detects the proximity of a storage medium to the wireless connection device, and another network among a plurality of networks provided by the wireless connection device while detecting the proximity. And a limited connection unit that enables connection of a wireless terminal to a wireless network for visitors, which is a wireless network isolated from the network. The detection unit detects the proximity of the storage medium by short-range wireless communication using the NFC interface.

Japanese Patent Laying-Open No. 2015-139090 (released July 30, 2015)

  However, in the conventional technology as described above, a storage medium is detected using short-range communication using an NFC interface or the like for improving security. Therefore, in addition to the wireless LAN, a wireless communication device such as an NFC interface is added. It is necessary to equip it, and the number of parts increases.

  The present invention has been made in view of the above problems, and a main object thereof is to provide a technique for suppressing an increase in the number of components while maintaining security.

  In order to solve the above-described problem, a wireless connection device according to one aspect of the present invention has a plurality of identifiers attached thereto, and can be wirelessly connected using the identifiers included in the plurality of identifiers. The plurality of identifiers include a management identifier and a managed identifier, and when there is no wireless connection using the management identifier, a wireless connection using the managed identifier is set. A connection control unit to be invalidated is provided.

  Further, in the connection control method for a wireless connection device according to one aspect of the present invention, a plurality of identifiers are linked, and the connection control of the wireless connection device that enables wireless connection using the identifiers included in the plurality of identifiers The plurality of identifiers include a management identifier and a managed identifier, and the wireless connection using the managed identifier is determined according to whether or not the wireless connection using the management identifier exists. A connection control step of enabling or disabling, and in the connection control step, when there is no wireless connection using the management identifier, the wireless connection using the managed identifier is invalidated .

  According to one embodiment of the present invention, an increase in the number of components can be suppressed while maintaining security.

It is a figure explaining an example of the connection control of the wireless connection apparatus which concerns on one Embodiment (Embodiment 1) of this invention. It is a block diagram which shows schematic structure of the wireless connection apparatus which concerns on one Embodiment (Embodiment 1) of this invention. It is a flowchart explaining the flow of the wireless connection in the wireless connection apparatus which concerns on each embodiment of this invention. It is a flowchart explaining the flow of the connection control of the wireless connection apparatus which concerns on one Embodiment (Embodiment 1) of this invention. It is a figure explaining an example of connection control of the wireless connection apparatus which concerns on one Embodiment (Embodiment 2) of this invention. It is a block diagram which shows schematic structure of the wireless connection apparatus which concerns on one Embodiment (Embodiment 2) of this invention. It is a flowchart explaining the flow of the connection control of the wireless connection apparatus which concerns on one Embodiment (Embodiment 2) of this invention.

  The wireless connection device according to the present invention is a wireless connection device in which a plurality of identifiers are linked, and wireless connection using the identifiers included in the plurality of identifiers is possible. Such a wireless connection device may be a wireless base station. In the following, an access point corresponding to the IEEE 802.11 series will be described as an example of a wireless connection device according to the present invention, but the present invention is not limited to this.

Embodiment 1
Hereinafter, an access point (wireless connection apparatus) 1 according to an embodiment (Embodiment 1) of the present invention will be described with reference to the drawings. The access point 1 is a wireless LAN access point capable of wireless connection in accordance with the IEEE802.11 series (for example, IEEE802.11b, IEEE802.11a, IEEE802.11g, IEEE802.11n, IEEE802.11ac, etc.). The access point 1 is preferably subjected to WiFi (registered trademark) authentication. The access point 1 corresponds to a so-called multi-SSID (Service Set Identifier). That is, a plurality of SSIDs (identifiers) are linked to the access point 1, and an external wireless terminal uses one of the plurality of SSIDs linked to the access point 1 with respect to the access point 1. Wireless connection is possible.

  FIG. 1 is a diagram for explaining an example of connection control of the access point 1. In FIG. 1, as an example, a case will be described in which the user terminal 6, the user terminal 7, and the user terminal 8 try to establish a wireless connection with the access point 1. FIG. 1A illustrates a case where the access point 1 and the management terminal 5 are wirelessly connected. FIG. 1B illustrates a case where the access point 1 and the management terminal 5 are not wirelessly connected.

  In the example of FIG. 1, the wireless connection between the access point 1 and the management terminal 5 is a wireless connection using a first SSID (management identifier). For example, when the connection method is encrypted, the wireless connection using the first SSID is limited by the encryption key set only in the management terminal 5. In the example of FIG. 1, the wireless connection between the access point 1 and the user terminals 6 to 8 is a wireless connection using a second SSID (managed identifier). The wireless connection using the second SSID is not limited because the connection method is not encrypted, or if the connection method is encrypted, the wireless connection is performed using an encryption key that can be known by the guest user. Limited.

  In FIG. 1A, the administrator wirelessly connects the management terminal 5 and the access point 1 using the first SSID. In this case, since there is a wireless connection using the first SSID at the access point 1, the wireless connection using the second SSID is effective. Therefore, the guest user can wirelessly connect the user terminals 6 to 8 to the access point 1.

  In FIG. 1B, the administrator does not wirelessly connect (disconnect) the management terminal 5 and the access point 1. In this case, since there is no wireless connection using the first SSID at the access point 1, the wireless connection using the second SSID becomes invalid. Therefore, the guest user cannot wirelessly connect the user terminals 6 to 8 to the access point 1.

  As described above, in the present embodiment, when the wireless connection using the managed identifier (second SSID in the example of FIG. 1) does not exist, the wireless connection using the management identifier (first SSID in the example of FIG. 1) does not exist. It is invalidated. Therefore, the user terminals 6 to 8 cannot wirelessly connect to the access point 1 when the management terminal 5 does not exist in the vicinity. Accordingly, it is possible to reduce a risk that an inappropriate guest user uses the access point 1 in a situation where an administrator's eyes cannot reach.

  The access point 1 can perform the above control using a so-called multi-SSID function that performs wireless connection using any of a plurality of SSIDs linked to the access point 1. Thereby, the additional equipment of other authentication apparatuses (for example, NFC interface etc. which are described in patent documents 1) becomes unnecessary, and it can control the increase in a number of parts, maintaining security.

(Configuration of access point 1)
FIG. 2 is a block diagram showing a schematic configuration of the access point 1. As shown in FIG. 2, the access point 1 includes a wireless communication unit 10 and a main control unit 11. The radio communication unit 10 includes an antenna, a radio circuit unit (for example, RFIC), a baseband unit (for example, baseband LSI), and the like (not shown), and transmits and receives radio signals to and from an external radio terminal. The main control unit 11 is a control unit that comprehensively controls the operation of each unit of the access point 1, and includes a communication control unit 12, a connection control unit 13, and a setting unit (first setting unit) 14.

  The communication control unit 12 manages whether or not the wireless connection using each SSID is valid, and (i) setting information regarding each SSID stored in the setting unit 14 and (ii) using each SSID. The wireless communication unit 10 is controlled according to a protocol compliant with the IEEE802.11 series with reference to whether the received wireless connection is valid. Note that a part of protocols conforming to the IEEE 802.11 series may be controlled by the baseband unit of the wireless communication unit 10. Further, the communication control unit 12 may include a storage unit (for example, a register or a memory) (not shown) for managing whether or not the wireless connection using each SSID is valid.

  The connection control unit 13 (i) setting information related to each SSID stored in the setting unit 14 and (ii) whether or not a wireless connection using each SSID exists (the communication control unit 12 determines whether each SSID The wireless connection using each SSID is validated or invalidated based on whether or not a wireless connection using the SSID is established.

  The setting unit 14 stores setting information regarding each of a plurality of SSIDs linked to the access point 1. In the present embodiment, as an example, the setting unit 14 includes a first SSID setting 15 that is setting information related to the first SSID, a second SSID setting 16 that is setting information related to the second SSID, and a third SSID setting that is setting information related to the third SSID. 17 is stored. That is, in the present embodiment, the access point 1 is associated with the first SSID, the second SSID, and the third SSID.

  The setting unit 14 also sets (adds, modifies, or deletes information) at least a part of the setting information related to each SSID based on signals received via the wireless communication unit 10 and the communication control unit 12. It may be. In one example, the setting unit 14 may transmit information representing a UI screen for setting setting information regarding each SSID to the management terminal 5 via the wireless communication unit 10 and the communication control unit 12. In this case, the management terminal 5 presents the UI screen to the administrator based on the received information, and information indicating an operation performed on the UI screen or input via the UI screen Information indicating the set setting may be transmitted to the access point 1. And the setting part 14 should just set at least one part of the setting information regarding each SSID based on the said information received via the radio | wireless communication part 10 and the communication control part 12. FIG. The setting unit 14 may set at least a part of the setting information 15 to 17 based on a signal from a setting input unit (not shown) provided in the access point 1.

  The setting information regarding each SSID includes various setting information used for wireless connection and wireless communication using each SSID. For example, information indicating each SSID, security policy for wireless connection using each SSID (for example, , An encryption method, an encryption key, an access control method, an assignable IP address range, a connection method, a radio wave intensity, the number of connectable terminals, and the like may be included, but is not limited thereto.

  In the present embodiment, the second SSID setting 16 includes a second SSID validation condition 16a, and the third SSID setting 17 includes a third SSID validation condition 17a. For example, a value of “any” or “first SSID connection” can be set individually in the validation conditions 16a and 17a. At this time, the SSID in which “first SSID connection” is set as the validation condition is set as the managed identifier. The wireless connection using the managed identifier is validated only when there is a wireless connection using the management identifier (first SSID in this embodiment), and invalidated when there is no wireless connection using the management identifier. . In addition, an SSID in which “any” is set as an activation condition is not a managed identifier, and wireless connection using the SSID is activated while the access point 1 is in operation. In this way, the setting unit 14 can set whether or not to use the SSID as a managed identifier by setting the validation condition for each SSID other than the first SSID.

(Operation of access point 1)
First, the flow of wireless connection at the access point 1 will be described. FIG. 3 is a flowchart for explaining a wireless connection flow in the access point 1. When the wireless communication unit 10 receives a connection request from the management terminal 5 or the user terminal 6 (step S1), the communication control unit 12 first sets the SSID included in the connection request to the SSID associated with the access point 1. It is determined whether or not (step S2). When the SSID included in the connection request is the SSID linked to the access point 1 (YES in step S2), the communication control unit 12 subsequently determines whether or not the SSID included in the connection request is valid. Is determined (step S3). When the SSID included in the connection request is valid (YES in step S3), the communication control unit 12 stores the setting information (first SSID setting 15, second SSID) stored in the setting unit 14 regarding the SSID included in the connection request. The authentication process is executed with reference to the setting 16 or the third SSID setting 17) (step S4). Then, the communication control unit 12 determines whether or not the authentication is successful (step S5), and when the authentication is successful (YES in step S5), the communication control unit 12 is included in the connection request stored in the setting unit 14. With reference to the setting information regarding the SSID, a wireless connection with the management terminal 5 or the user terminal 6 is established (step S6).

  On the other hand, if the SSID included in the connection request is not the SSID linked to the access point 1 (NO in step S2), if the SSID included in the connection request is not valid (NO in step S3), and authentication fails. If so (NO in step S5), the wireless connection is not established. In addition, after the wireless connection with the management terminal 5 or the user terminal 6 is established, the wireless communication unit 10 receives a disconnection request from the management terminal 5 or the user terminal 6, or the wireless communication unit 10 5 or when the communication from the user terminal 6 has not been received for a certain period or longer, the communication control unit 12 disconnects the wireless connection.

  Next, the control (connection control) for enabling and disabling wireless connection using each SSID at the access point 1 will be described. FIG. 4 is a flowchart for explaining the flow of connection control of the access point 1. When the access point 1 is activated, the connection control unit 13 instructs the communication control unit 12 to validate the wireless connection using the first SSID (step S10). Upon receiving the activation instruction, the communication control unit 12 activates the wireless connection using the SSID instructed to activate (the same applies to the following). Next, the connection control unit 13 refers to the activation conditions 16a and 17a and instructs the communication control unit 12 to activate the wireless connection using the SSID whose activation condition is “any” (step S11). .

  Next, the communication control unit 12 determines (monitors) whether or not a wireless connection using the first SSID (management identifier) exists periodically or aperiodically, and the connection control unit 13 performs communication control. The determination result by the unit 12 is referred to (step S12). When the wireless connection using the first SSID does not exist (NO in step S12), step S12 is re-executed, and the communication control unit 12 monitors whether the wireless connection using the first SSID exists. continue. On the other hand, when a wireless connection using the first SSID exists (YES in step S12), the connection control unit 13 determines that the activation condition is “first SSID connection among a plurality of SSIDs linked to the access point 1”. The communication control unit 12 is instructed to validate the wireless connection using the SSID (managed identifier) (step S13). Specifically, if the activation condition 16a is “first SSID connection”, the communication control unit 12 is instructed to activate the second SSID, and if the activation condition 17a is “first SSID connection”, The communication control unit 12 is instructed to validate the third SSID.

  Thereafter, the communication control unit 12 monitors whether or not a wireless connection using the first SSID exists periodically or aperiodically (step S14). If a wireless connection using the first SSID exists (YES in step S14), step S14 is re-executed. On the other hand, when there is no wireless connection using the first SSID (NO in step S14), the connection control unit 13 determines that the activation condition is “first SSID connection among a plurality of SSIDs linked to the access point 1”. The communication control unit 12 is instructed to invalidate the wireless connection using the SSID "" (step S15). Specifically, when the activation condition 16a is “first SSID connection”, the communication control unit 12 is instructed to invalidate the second SSID, and when the activation condition 17a is “first SSID connection”, The communication control unit 12 is instructed to invalidate the third SSID. At this time, when receiving the invalidation instruction, the communication control unit 12 invalidates the wireless connection using the SSID instructed to be invalidated. Then, when there is a wireless connection using the invalidated SSID, the communication control unit 12 disconnects the wireless connection. Then, it returns to step S12.

[Embodiment 2]
Another embodiment of the present invention will be described below with reference to the drawings. For convenience of explanation, members having the same functions as those described in the embodiment are given the same reference numerals, and descriptions thereof are omitted.

  FIG. 5 is a diagram for explaining an example of connection control of the access point (wireless connection apparatus) 2 according to the present embodiment. Similar to the access point 1, the access point 2 is a wireless LAN access point capable of wireless connection in accordance with the IEEE 802.11 series, and corresponds to so-called multi-SSID. FIG. 5A illustrates a case where the access point 2 and the management terminal 5 are wirelessly connected using a first SSID (management identifier). FIG. 5B illustrates a case where the access point 2 and the management terminal 5 are wirelessly connected using a second SSID (management identifier).

  In the example of FIG. 5, the wireless connection between the access point 2 and the management terminal 5 is a wireless connection using the first SSID or the second SSID. In the example of FIG. 5, the wireless connection between the access point 2 and the user terminals 6 to 8 is the third SSID (managed identifier) linked to the first SSID or the second SSID linked to the second SSID. Wireless connection using 4 SSID (managed identifier).

  In FIG. 5A, the administrator wirelessly connects the management terminal 5 and the access point 2 using the first SSID. In this case, since there is a wireless connection using the first SSID at the access point 2, the wireless connection using the third SSID linked to the first SSID is effective. Therefore, the guest user can wirelessly connect the user terminals 6 to 8 to the access point 2 using the third SSID.

  In FIG. 5B, the administrator wirelessly connects the management terminal 5 and the access point 2 using the second SSID. In this case, since there is a wireless connection using the second SSID at the access point 2, the wireless connection using the fourth SSID linked to the second SSID is effective. Therefore, the guest user can wirelessly connect the user terminals 6 to 8 to the access point 2 using the fourth SSID.

  As described above, in this embodiment, the wireless connection using the managed identifier (in the example of FIG. 5, the third SSID and the fourth SSID) is the management identifier (in the example of FIG. 5, to which the managed identifier is linked). It is validated when there is a wireless connection using the first SSID for the third SSID and the second SSID for the fourth SSID), and invalidated when there is no management identifier associated with the managed identifier. Is done. Therefore, in addition to obtaining the same effect as the access point 1, the administrator selects which of the management identifiers (the first SSID and the second SSID in the example of FIG. 5) is used for wireless connection to the access point 2. Accordingly, it is possible to switch which of the managed identifiers (the third SSID and the fourth SSID in the example of FIG. 5) is to be validated. Thereby, it is possible to dynamically switch the mode of wireless connection (for example, security policy) to be provided to the guest user. The access point 2 can perform the above control using a so-called multi-SSID function.

(Configuration of access point 2)
FIG. 6 is a block diagram showing a schematic configuration of the access point 2. As shown in FIG. 6, the access point 2 includes a wireless communication unit 10 and a main control unit 21. The main control unit 21 is a control unit that comprehensively controls the operation of each unit of the access point 2, and includes a communication control unit 12, a connection control unit 23, and a setting unit (first setting unit, second setting unit, third setting). Part) 24. The operations of the wireless communication unit 10 and the communication control unit 12 and the flow of wireless connection at the access point 2 are the same as those of the access point 1.

  The connection control unit 23 includes (i) setting information related to each SSID stored in the setting unit 24, and (ii) whether or not a wireless connection using each SSID exists (the communication control unit 12 includes each SSID). The wireless connection using each SSID is validated or invalidated based on whether or not a wireless connection using the SSID is established.

  The setting unit 24 stores setting information regarding each of a plurality of SSIDs linked to the access point 2. In the present embodiment, as an example, the setting unit 24 includes a first SSID setting 25 that is setting information related to the first SSID, a second SSID setting 26 that is setting information related to the second SSID, and a third SSID setting 27 that is setting information related to the third SSID, And the 4th SSID setting 28 which is the setting information about the 4th SSID is memorized. That is, in the present embodiment, the access point 2 is associated with the first SSID, the second SSID, the third SSID, and the fourth SSID. Similar to the setting unit 14, the setting unit 24 may set at least a part of the setting information regarding each SSID.

  The setting information related to each SSID includes various setting information used for wireless connection and wireless communication using each SSID, for example, information indicating each SSID, and security policy for wireless connection using each SSID. Although information etc. may be included, it is not limited to these. In the present embodiment, the third SSID setting 27 includes a third SSID validation condition 27a and a security policy 27b, and the fourth SSID setting 28 includes a fourth SSID validation condition 28a and a security policy 28b. .

  For example, the values “any”, “first SSID connection”, or “second SSID connection” may be set individually in the validation conditions 27a and 28a. At this time, the SSID in which “first SSID connection” is set as the validation condition is set as a managed identifier linked to the first SSID that is the management identifier. The wireless connection using the managed identifier linked to the first SSID is validated only when there is a wireless connection using the first SSID, and invalidated when there is no wireless connection using the first SSID. In addition, the SSID in which “second SSID connection” is set as the validation condition is set as a managed identifier linked to the second SSID that is the management identifier. The wireless connection using the managed identifier linked to the second SSID is validated only when there is a wireless connection using the second SSID, and invalidated when there is no wireless connection using the second SSID. In addition, the SSID in which “any” is set as the activation condition is not a managed identifier, and the wireless connection using the SSID is activated while the access point 2 is in operation. As described above, the setting unit 24 can set whether or not to set the SSID as a managed identifier by setting the validation condition of each SSID other than the management identifier (first SSID and second SSID). It can be set which management identifier (first SSID and second SSID) is linked to the SSID as the managed identifier.

  The security policies 27b and 28b include, for example, at least one selected from the group consisting of an encryption method, an encryption key, an access control method, an assignable IP address range, a connection method, a radio wave intensity, the number of connectable terminals, and the like. Is included. The setting unit 24 can set a security policy for each SSID other than the management identifiers (first SSID and second SSID). Accordingly, it is possible to appropriately set each security policy group that can be dynamically switched by the administrator.

(Operation of access point 2)
FIG. 7 is a flowchart for explaining the flow of connection control of the access point 2. When the access point 2 is activated, the connection control unit 23 instructs the communication control unit 12 to validate the wireless connection using the first SSID and the wireless connection using the second SSID (step S20). Upon receiving the activation instruction, the communication control unit 12 activates the wireless connection using the SSID instructed to activate (the same applies to the following). Next, the connection control unit 23 refers to the activation conditions 27a and 28a, and instructs the communication control unit 12 to activate the wireless connection using the SSID whose activation condition is “any” (step S21). .

  Next, the communication control unit 12 determines (monitors) whether or not the wireless connection using the first SSID exists periodically or aperiodically, and the connection control unit 23 determines whether or not the communication control unit 12 determines The result is referred to (step S22). When a wireless connection using the first SSID exists (YES in step S22), the connection control unit 23 sets the activation condition to “first SSID connection” among the plurality of SSIDs linked to the access point 2. The communication control unit 12 is instructed to validate the wireless connection using a certain SSID (step S23). Specifically, when the activation condition 27a is “first SSID connection”, the communication control unit 12 is instructed to activate the third SSID. When the activation condition 28a is “first SSID connection”, The communication control unit 12 is instructed to validate the fourth SSID.

  Thereafter, the communication control unit 12 monitors whether or not a wireless connection using the first SSID exists periodically or aperiodically (step S24). If a wireless connection using the first SSID exists (YES in step S24), step S24 is executed again. On the other hand, when the wireless connection using the first SSID does not exist (NO in step S24), the connection control unit 23 sets the activation condition “first SSID connection among a plurality of SSIDs linked to the access point 2”. The communication control unit 12 is instructed to invalidate the wireless connection using the SSID "" (step S25). Specifically, when the activation condition 27a is “first SSID connection”, the communication control unit 12 is instructed to invalidate the third SSID, and when the activation condition 28a is “first SSID connection”, The communication control unit 12 is instructed to invalidate the fourth SSID. At this time, when receiving the invalidation instruction, the communication control unit 12 invalidates the wireless connection using the SSID instructed to be invalidated. Then, when there is a wireless connection using the invalidated SSID, the communication control unit 12 disconnects the wireless connection. Thereafter, the process returns to step S22.

  On the other hand, if there is no wireless connection using the first SSID in step S22 (NO in step S22), the communication control unit 12 next determines whether or not there is a wireless connection using the second SSID. The connection control unit 23 refers to the determination result by the communication control unit 12 (step S26). When the wireless connection using the second SSID does not exist (NO in step S26), the process returns to step S22, and the communication control unit 12 periodically or aperiodically sets the wireless connection and the second SSID using the first SSID. Continue monitoring whether the used wireless connection exists. On the other hand, when a wireless connection using the second SSID exists (YES in step S26), the connection control unit 23 determines that the activation condition is “second SSID connection among a plurality of SSIDs linked to the access point 2”. The communication control unit 12 is instructed to validate the wireless connection using the SSID "" (step S27). Specifically, when the activation condition 27a is “second SSID connection”, the communication control unit 12 is instructed to activate the third SSID. When the activation condition 28a is “second SSID connection”, The communication control unit 12 is instructed to validate the fourth SSID.

  Thereafter, the communication control unit 12 monitors whether a wireless connection using the second SSID exists periodically or aperiodically (step S28). If a wireless connection using the second SSID exists (YES in step S28), step S28 is executed again. On the other hand, when the wireless connection using the second SSID does not exist (NO in step S28), the connection control unit 23 determines that the activation condition is “second SSID connection among the plurality of SSIDs linked to the access point 2”. The communication control unit 12 is instructed to invalidate the wireless connection using the SSID "" (step S29). Specifically, when the activation condition 27a is “second SSID connection”, the communication control unit 12 is instructed to invalidate the third SSID, and when the activation condition 28a is “second SSID connection”, The communication control unit 12 is instructed to invalidate the fourth SSID. The communication control unit 12 invalidates the wireless connection using the SSID instructed to be invalidated, and disconnects the wireless connection using the invalidated SSID. Thereafter, the process returns to step S22.

[Example of software implementation]
The control blocks (particularly the main control unit 11 and the main control unit 21) of the access point 1 and the access point 2 may be realized by a logic circuit (hardware) formed in an integrated circuit (IC chip) or the like. It may be realized by software using (Central Processing Unit).

  In the latter case, the access point 1 and the access point 2 include a CPU that executes instructions of a program that is software that realizes each function, and a ROM (Read that records the program and various data so that the computer (or CPU) can read the program. Only Memory) or a storage device (these are referred to as “recording media”), a RAM (Random Access Memory) for expanding the program, and the like. And the objective of this invention is achieved when a computer (or CPU) reads the said program from the said recording medium and runs it. As the recording medium, a “non-temporary tangible medium” such as a tape, a disk, a card, a semiconductor memory, a programmable logic circuit, or the like can be used. The program may be supplied to the computer via an arbitrary transmission medium (such as a communication network or a broadcast wave) that can transmit the program. The present invention can also be realized in the form of a data signal embedded in a carrier wave in which the program is embodied by electronic transmission.

[Summary]
The wireless connection device (access points 1 and 2) according to the aspect 1 of the present invention has a plurality of identifiers (SSIDs) attached thereto, and wireless connection using the identifiers included in the plurality of identifiers is possible. The apparatus includes a management identifier and a managed identifier in the plurality of identifiers, and when there is no wireless connection using the management identifier, a wireless connection using the managed identifier The connection control part (13, 23) which invalidates is provided.

  According to the above configuration, the wireless connection using the managed identifier is invalidated when there is no wireless connection using the management identifier. Therefore, a person who wants to perform wireless connection using the managed identifier (for example, a guest user) establishes a wireless connection with the wireless connection apparatus only when there is an administrator who can perform wireless connection using the management identifier in the vicinity. I can't. Accordingly, it is possible to reduce a risk that an inappropriate person uses the wireless connection device in a situation where the administrator's eyes cannot reach. The wireless connection device can perform the above control using a mechanism of performing wireless connection using identifiers included in a plurality of identifiers linked to itself. Thereby, the additional equipment of other authentication apparatuses (for example, NFC interface etc. which are described in patent documents 1) becomes unnecessary, and it can control the increase in a number of parts, maintaining security.

  A wireless connection device according to aspect 2 of the present invention is the wireless communication apparatus according to aspect 1, wherein a first setting unit that sets whether or not each identifier excluding the management identifier among the plurality of identifiers is the managed identifier ( A setting unit 14, 24) may be provided. According to the above configuration, it is possible to appropriately set which identifier is the managed identifier among the identifiers included in the plurality of identifiers linked to the wireless connection device.

  In the wireless connection device (access point 2) according to aspect 3 of the present invention, in the aspect 1 or 2, the plurality of identifiers include a plurality of the management identifiers, and each of the managed identifiers includes: The connection control unit is linked to any one of the plurality of management identifiers, and the connection control unit performs a wireless connection using the management identifier linked to the managed identifier. If it does not exist, it may be invalidated. According to the above configuration, the administrator selects a managed identifier related to a wireless connection to be validated by selecting which management identifier is used to wirelessly connect to the wireless connection device from among a plurality of management identifiers. Can be switched. As a result, it is possible to dynamically switch the mode of wireless connection (for example, security policy) to be provided to a person (for example, guest user) who intends to perform wireless connection using the managed identifier.

  In the wireless connection device according to aspect 4 of the present invention, in the aspect 3, the second setting unit (setting unit 24) configured to set which of the plurality of management identifiers is linked to each of the managed identifiers. You may have. According to said structure, when the wireless connection using which management identifier exists, it can set suitably which wireless connection using which managed identifier is validated.

  The wireless connection device according to aspect 5 of the present invention is the wireless communication apparatus according to aspect 3 or 4, wherein for each of the managed identifiers, a third setting unit (setting unit 24) that sets a wireless connection security policy using the managed identifier. ) May be provided. According to said structure, it becomes possible to set suitably about each of the security policy groups which an administrator can switch dynamically.

  A wireless connection device according to aspect 6 of the present invention is the wireless connection device according to any one of aspects 1 to 5, wherein the wireless connection device is an access point, the wireless connection is a wireless connection compliant with the IEEE 802.11 series, and the identifier is SSID (Service Set Identifier). According to the above configuration, an aspect of the present invention can be realized as an access point capable of wireless connection in conformity with the IEEE 802.11 series and corresponding to a so-called multi-SSID. Thereby, an increase in the number of parts can be suppressed while maintaining security by using the multi-SSID function.

  In the connection control method for a wireless connection device according to aspect 7 of the present invention, a plurality of identifiers (SSIDs) are linked, and a wireless connection device (access) that can perform wireless connection using the identifiers included in the plurality of identifiers. In the connection control method of points 1 and 2, the plurality of identifiers include a management identifier and a managed identifier, and depending on whether or not a wireless connection using the management identifier exists, Including a connection control step of enabling or disabling wireless connection using the management identifier. In the connection control step, if there is no wireless connection using the management identifier, the managed identifier is Disable the used wireless connection. According to said structure, there exists an effect equivalent to the wireless connection apparatus which concerns on 1 aspect of this invention.

  The wireless connection device according to each aspect of the present invention may be realized using a computer. In this case, a connection control program for a wireless connection device that causes the computer to operate as each unit (software element) included in the wireless connection device. And a computer-readable recording medium on which it is recorded also fall within the scope of the present invention.

  The present invention is not limited to the above-described embodiments, and various modifications are possible within the scope shown in the claims, and embodiments obtained by appropriately combining technical means disclosed in different embodiments. Is also included in the technical scope of the present invention. Furthermore, a new technical feature can be formed by combining the technical means disclosed in each embodiment.

  1, 2: Access point (wireless connection device) 8: Management terminal 9: User terminal 10: Wireless communication unit 11, 21: Main control unit 12: Communication control unit 13, 23: Connection control unit 14: Setting unit (first Setting unit) 24: Setting unit (first setting unit, second setting unit, third setting unit)

Claims (8)

A plurality of identifiers are linked, a wireless connection device capable of wireless connection using identifiers included in the plurality of identifiers,
The plurality of identifiers include a management identifier and a managed identifier,
A wireless connection apparatus comprising: a connection control unit that invalidates a wireless connection using the managed identifier when a wireless connection using the management identifier does not exist.   The wireless connection device according to claim 1, further comprising: a first setting unit configured to set whether each of the plurality of identifiers excluding the management identifier is the managed identifier. . The plurality of identifiers include a plurality of the management identifiers,
Each of the managed identifiers is linked to one of the plurality of management identifiers,
The connection control unit invalidates a wireless connection using the managed identifier when there is no wireless connection using the management identifier linked to the managed identifier. The wireless connection device according to 1 or 2.   The wireless connection device according to claim 3, further comprising: a second setting unit that sets which of the plurality of management identifiers is linked to each of the managed identifiers.   The wireless connection device according to claim 3, further comprising a third setting unit that sets a security policy for wireless connection using the managed identifier for each of the managed identifiers. A plurality of identifiers are linked, and a connection control method for a wireless connection device capable of wireless connection using identifiers included in the plurality of identifiers,
The plurality of identifiers include a management identifier and a managed identifier,
Including a connection control step for enabling or disabling the wireless connection using the managed identifier according to the presence or absence of the wireless connection using the management identifier,
In the connection control step, when there is no wireless connection using the management identifier, the wireless connection device connection control method is characterized in that the wireless connection using the managed identifier is invalidated.   The connection control program for functioning a computer as the said connection control part of the wireless connection apparatus as described in any one of Claims 1-5.   A computer-readable recording medium on which the connection control program according to claim 7 is recorded.

Images