JP2017169002A - Communication device, communication method, system, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To further improve network security of an ad hoc radio communication system.SOLUTION: A communication unit, within a second communication range narrower than a first communication range in which radio communication of a first communication system is performed, performs radio communication of a second communication system differing from the first communication system. An acquisition unit, in radio communication of the second communication system being performed with an apparatus, acquires identification information from the apparatus. A transmission unit, from a storage unit in which setup information assigned, for each identification information, to a plurality of access point apparatuses is stored, reads setup information corresponding to the identification information acquired from the apparatus and transmits the setup information to the apparatus. When the apparatus moves to the outside of the second communication range, a disconnection unit disconnects a communication channel of the first communication system, the communication channel having been established between the apparatus and an access point apparatus by the apparatus using the setup information. A range in which the apparatus is permitted to perform radio communication using the first communication system can be changed depending on identification information. Furthermore, network security can be improved.SELECTED DRAWING: Figure 15

Description

  The present invention relates to a communication device, a communication method, a system, and a program.

  2. Description of the Related Art Nowadays, a wireless LAN that enables wireless communication with a remote computer using electromagnetic waves via a network access point is known. LAN is an abbreviation for “Local Area Network”. Wireless LAN is a highly convenient network and is widely used. In addition, short-range wireless communication such as Bluetooth (registered trademark), which has a narrower communication range than a wireless LAN, is also widely used.

  Here, in a wireless communication network having a medium reach such as a wireless LAN, an ad hoc wireless that permits the use of the wireless LAN is limited to a short-range wireless communication range such as Bluetooth (registered trademark). Build a communication system. In the case of such a wireless communication system, security of the wireless LAN is ensured by permitting the use of the wireless LAN within the wireless communication range of Bluetooth (registered trademark).

  However, even in such an ad hoc wireless communication system, further improvement in network security is desired.

  The present invention has been made in view of the above-described problems, and an object thereof is to provide a communication device, a communication method, a system, and a program that can further improve the network security of an ad hoc wireless communication system.

  In order to solve the above-described problem, the present invention provides a second communication range that is different from the first communication method within a second communication range that is narrower than the first communication range in which wireless communication of the first communication method is performed. A communication unit that performs wireless communication of a communication method and an acquisition unit that acquires identification information from the device when wireless communication of the second communication method is performed between the device and a plurality of access point devices A storage unit that stores setup information assigned to each piece of identification information; a transmission unit that reads setup information corresponding to the identification information acquired from the device from the storage unit and transmits the setup information to the device; and the device uses the setup information. And a disconnecting unit that disconnects the communication line of the first communication method established with the access point device when the device moves out of the second communication range.

  According to the present invention, the network security of an ad hoc wireless communication system can be further improved.

FIG. 1 is a system configuration diagram showing a basic configuration of a wireless LAN communication system. FIG. 2 is a hardware configuration diagram of a communication range limiting device provided in a wireless LAN communication system as a basic configuration. FIG. 3 is a hardware configuration diagram of a smartphone provided in a wireless LAN communication system as a basic configuration. FIG. 4 is a hardware configuration diagram of a printer device provided in a wireless LAN communication system as a basic configuration. FIG. 5 is a hardware configuration diagram of a projector apparatus provided in a wireless LAN communication system as a basic configuration. FIG. 6 is a functional block diagram of a communication range limiting device provided in a wireless LAN communication system as a basic configuration. FIG. 7 is a functional block diagram of a smartphone provided in a wireless LAN communication system as a basic configuration. FIG. 8 is a functional block diagram of a printer device provided in a wireless LAN communication system as a basic configuration. FIG. 9 is a sequence diagram illustrating a flow in which a smartphone that has moved into a BLE communication area of a wireless LAN communication area establishes a wireless LAN communication line in a basic wireless LAN communication system. FIG. 10 is a sequence diagram illustrating a flow in which a printer device located in the BLE communication area of the wireless LAN communication area establishes a wireless LAN communication line in the basic wireless LAN communication system. FIG. 11 is a flowchart showing a flow of printing a printed matter by remotely operating a printer device from a smartphone connected to the wireless LAN in a wireless LAN communication system having a basic configuration. FIG. 12 shows a wireless LAN communication line (and a BLE communication line) when a smartphone connected to the printer device in the BLE communication area moves out of the BLE communication area in the basic wireless LAN communication system. It is a sequence diagram which shows the flow which is cut | disconnected. FIG. 13 is a system configuration diagram showing an example in which at least a part of the BLE communication area is located outside the wireless LAN communication area in the basic wireless LAN system. FIG. 14 is a system configuration diagram of the wireless LAN communication system according to the embodiment. FIG. 15 is a sequence diagram illustrating a flow of wireless LAN setup processing in the wireless LAN communication system according to the embodiment. FIG. 16 is a sequence diagram illustrating a flow in which the third device establishes a wireless LAN communication line in the fifth communication range. FIG. 17 is a sequence diagram illustrating a flow of a wireless LAN communication line disconnection process in the wireless LAN communication system according to the embodiment. FIG. 18 is a sequence diagram illustrating an operation flow of disconnecting an established wireless LAN communication line at a specified time in the wireless LAN communication system according to the embodiment. FIG. 19 is a detailed system configuration diagram of the wireless LAN communication system according to the embodiment. FIG. 20 is a functional block diagram for explaining the function of each part of the communication range restriction system. FIG. 21 is a flowchart for explaining an operation of determining a network to be connected based on a user ID in the wireless LAN communication system of the embodiment. FIG. 22 is a flowchart for explaining an operation of determining a network that is permitted to be connected based on the time at which communication connection is started with respect to the network in the wireless LAN communication system according to the embodiment. FIG. 23 is a flowchart for explaining an operation of determining a network that permits connection based on the current position of the device in the wireless LAN communication system according to the embodiment. FIG. 24 is a flowchart for explaining an operation of determining a network that permits connection based on voice acquired (received) by a device in the wireless LAN communication system according to the embodiment. FIG. 25 is a flowchart for explaining an operation of determining a network that is allowed to be connected based on an entrance place such as a concert hall or a baseball field in the wireless LAN communication system of the embodiment. FIG. 26 is a flowchart for explaining a disconnection operation of a wireless LAN communication line in the wireless LAN communication system of the embodiment.

  Hereinafter, a wireless LAN (Local Area Network) communication system according to an embodiment to which the present invention is applied will be described in detail with reference to the accompanying drawings.

(Basic configuration)
First, a basic configuration of a wireless LAN communication system according to an embodiment described below will be described. FIG. 1 is a system configuration diagram showing a basic configuration of a wireless LAN communication system. As shown in FIG. 1, the wireless LAN communication system includes a communication range limiting device 1, a smartphone 2 as a first device, a printer device 3 as a second device, and a projector device 4 as a third device. Yes. Each device shown in FIG. 1 is an example, and any device may be used as long as it has a communication function to be described later. For example, instead of the smartphone 2, a portable communication device such as a tablet terminal device, a portable game machine, or a notebook personal computer device may be used.

(Basic configuration of communication range restriction device)
The communication range restriction device 1 is a device that forms a wireless LAN access point, such as a wireless LAN router. The communication range restriction device 1 forms a wireless LAN communication area 5 indicated by a solid oval in FIG. 1 as an example of a local area network. Further, the communication range restriction device 1 enables communication of each device only in an area narrower than the wireless LAN communication area 5 in the wireless LAN communication area 5. For example, the communication range control device 1 enables communication of each device only in a personal area network (PAN) that is narrower than the wireless LAN communication area 5 in the wireless LAN communication area 5.

  As an example, a Bluetooth (registered trademark) PAN that performs BLE (Bluetooth (registered trademark) Low Energy) communication with extremely low power can be used as a personal area network. In FIG. 1, a communication range indicated by a dotted ellipse is a BLE communication area 6 by Bluetooth (registered trademark) PAN. The description will be made assuming that the personal area network is Bluetooth PAN. However, instead of Bluetooth, for example, contactless wireless (NFC), millimeter wave wireless communication, QR code (registered trademark), visible light, environmental sound, or ultrasonic waves may be used.

(Basic hardware configuration of communication range restriction device)
FIG. 2 shows a basic hardware configuration of the communication range restriction device 1. As shown in FIG. 2, the communication range limiting device 1 includes a CPU (Central Processing Unit) 11, a ROM (Read Only Memory) 12, a RAM (Random Access Memory) 13, an HDD (Hard Disk Drive) 14, and an input / output interface. (Input / output I / F) 15, wireless LANAP unit 16 (AP is an access point), and BLE communication unit 17. The CPU 11 to BLE communication unit 17 are connected to each other via a bus line 18.

  The ROM 12 stores a communication control program for enabling communication of each device only in the BLE communication area 6 in the wireless LAN communication area 5. The communication control program may be stored in another storage unit such as the RAM 13 or the HDD 14. The CPU 11 controls the wireless LANAP unit 16 and the BLE communication unit 17 by operating according to the communication control program, and performs control that enables communication of each device only in the BLE communication area 6 in the wireless LAN communication area 5. .

  1 and 2, the communication range limiting device 1 is illustrated as a single device. However, the communication range restriction device 1 may be incorporated in each device. For example, it may be incorporated in a device such as a printer device or a multifunction peripheral (MFP).

(Basic hardware configuration of smartphone)
FIG. 3 shows a basic hardware configuration of the smartphone 2. As illustrated in FIG. 3, the smartphone 2 includes a CPU 21, a ROM 22, a RAM 23, a display unit 24, a microphone unit 25, and a speaker unit 26. The smartphone 2 also includes an input / output I / F 28, a wireless communication unit 29, a camera unit 30, a wireless LAN communication unit 31, and a BLE communication unit 32. The CPU 21 to BLE communication unit 32 are connected to each other via a bus line 33.

  The ROM 22 stores a communication control program for enabling communication of each device only in the BLE communication area 6 in the wireless LAN communication area 5. The communication control program may be stored in another storage unit such as the RAM 23. The CPU 21 controls the wireless LAN communication unit 31 and the BLE communication unit 32 by operating according to the communication control program. This enables BLE communication in the BLE communication area 6 in the wireless LAN communication area 5.

  The display unit 24 is a so-called touch panel display unit in which a touch panel formed of transparent electrodes and a display panel are integrally formed. The wireless communication unit 29 performs communication such as telephone and e-mail via a wireless base station of a predetermined carrier.

(Basic hardware configuration of printer)
FIG. 4 shows a basic hardware configuration of the printer apparatus 3. As shown in FIG. 4, the printer apparatus 3 includes a CPU 41, a ROM 42, a RAM 43, an operation panel 44, and a printer mechanism 45. The printer apparatus 3 includes an HDD 46, a wireless LAN communication unit 47, a BLE communication unit 48, a wired communication unit 49, and an input / output I / F 50. The CPU 41 to the input / output I / F 50 are connected to each other via the bus line 51.

  The ROM 42 stores a communication control program for enabling communication of each device only in the BLE communication area 6 in the wireless LAN communication area 5. The communication control program may be stored in another storage unit such as the RAM 43 or the HDD 46. The CPU 41 controls the wireless LAN communication unit 47 and the BLE communication unit 48 by operating according to the communication control program. This enables BLE communication in the BLE communication area 6 in the wireless LAN communication area 5. In addition, the printer mechanism 45 prints an image, text, and the like with print settings designated from the smartphone 2.

(Basic hardware configuration of projector device)
FIG. 5 shows a basic hardware configuration of the projector device 4. As shown in FIG. 5, the projector device 4 includes an input interface unit (input IF unit) 61, an image processing unit 62, an illumination optical system 63, a RAM 64, and an operation unit 65. Further, the projector device 4 includes a receiving unit 66 that receives a command transmitted from the remote controller 70 via infrared, a wireless LAN communication unit 67, a BLE communication unit 68, and a CPU 69.

  In such a projector device 4, image information corresponding to the projected image is supplied to the input IF unit 61. Image information is subjected to predetermined image processing such as distortion correction by the image processing unit 62, and then projected onto a screen or the like by the illumination optical system 63.

  The RAM 64 stores a communication control program for enabling each device to communicate only in the BLE communication area 6 in the wireless LAN communication area 5. The communication control program may be stored in another storage unit such as a ROM or an HDD. The CPU 69 controls the wireless LAN communication unit 67 and the BLE communication unit 68 by operating according to the communication control program. This enables BLE communication in the BLE communication area 6 in the wireless LAN communication area 5.

(Basic software configuration of communication range restriction device)
Next, FIG. 6 is a functional block of each function realized by the CPU 11 of the communication range restriction device 1 operating according to the communication control program. As shown in FIG. 6, the CPU 11 of the communication range restriction device 1 executes a communication control program, whereby a device connection unit 75, a peripheral device connection unit 76, a disconnection detection unit 77, a wireless LANAP control unit 78, and BLE communication. It functions as the control unit 79.

  In this example, the device connection unit 75 to the BLE communication control unit 79 will be described as being realized by software by a communication control program. However, part or all of the device connection unit 75 to BLE communication control unit 79 may be realized by an IC (Integrated Circuit), or part or all may be realized by hardware.

  The communication control program of the communication range restriction device 1 is provided as a file in an installable or executable format recorded on a recording medium readable by a computer device such as a CD-ROM or a flexible disk (FD). May be. Further, the program may be provided by being recorded on a recording medium readable by a computer device such as a CD-R, a DVD (Digital Versatile Disk), a Blu-ray Disc (registered trademark), or a semiconductor memory. The communication control program of the communication range restriction device 1 may be provided by being installed via a network such as the Internet. Further, the communication control program of the communication range restriction device 1 may be provided by being incorporated in advance in a ROM or the like in the device.

(Basic smartphone software configuration)
Next, FIG. 7 is a functional block of each function realized by the CPU 21 of the smartphone 2 operating according to the communication control program. As illustrated in FIG. 7, the CPU 21 of the smartphone 2 operates according to the communication control program, thereby realizing each function as the print request unit 81, the wireless LAN communication control unit 82, and the BLE communication control unit 83. The print request unit 81 has a function of printing a desired image, characters, and the like by remotely operating the printer device 3 through BLE communication.

  In this example, the print request unit 81 to BLE communication control unit 83 will be described as being realized by software by a communication control program. However, part or all of the print request unit 81 to BLE communication control unit 83 may be realized by an IC (Integrated Circuit), or part or all may be realized by hardware.

  Further, the communication control program of the smartphone 2 may be provided by being recorded in a recording medium that can be read by a computer device such as a CD-ROM or a flexible disk (FD) as a file in an installable or executable format. . Further, the program may be provided by being recorded on a computer-readable recording medium such as a CD-R, a DVD (Digital Versatile Disk), a Blu-ray Disc (registered trademark), or a semiconductor memory. Further, the communication control program of the smartphone 2 may be provided by being installed via a network such as the Internet. The communication control program of the smartphone 2 may be provided by being incorporated in advance in a ROM or the like in the device.

(Basic software configuration of printer device)
Next, FIG. 8 is a functional block of each function realized by the CPU 41 of the printer apparatus 3 operating according to the communication control program. As shown in FIG. 8, the CPU 41 of the printer apparatus 3 operates according to a communication control program, thereby realizing functions as a printing unit 85, a wireless LAN communication control unit 86, and a BLE communication control unit 87. The printing unit 85 is a function that controls the printer mechanism 45 so as to print images, characters, and the like requested from the smartphone 2 on paper.

  In this example, the printing unit 85 to BLE communication control unit 87 will be described as being realized by software. However, part or all of the printing unit 85 to BLE communication control unit 87 may be realized by an IC (Integrated Circuit), or part or all may be realized by hardware.

  Further, the communication control program of the printer apparatus 3 may be provided by being recorded in a computer-readable recording medium such as a CD-ROM or a flexible disk (FD) as an installable or executable file. Good. Further, the program may be provided by being recorded on a computer-readable recording medium such as a CD-R, a DVD (Digital Versatile Disk), a Blu-ray Disc (registered trademark), or a semiconductor memory. The communication control program of the printer apparatus 3 may be provided by being installed via a network such as the Internet. The communication control program of the printer apparatus 3 may be provided by being incorporated in advance in a ROM or the like in the device.

(Outline of basic operation of wireless LAN communication system)
In such a wireless LAN communication system, an outer ellipse indicated by a solid line in FIG. 1 indicates a wireless LAN communicable range (wireless LAN communication area 5) formed by the wireless LAN AP unit 16 of the communication range restriction device 1. Yes. In this wireless LAN communication area 5, the smartphone 2, the printer device 3, and the projector device 4 are located.

  The smartphone 2 communicates with peripheral devices such as the printer device 3 and the projector device 4 provided with a wireless LAN communication function, and performs remote operation such as printing of desired images and characters, or image projection via the wireless LAN. Is possible.

  Peripheral devices such as the printer device 3 and the projector device 4 have BLE communication units 48 and 68 as well as wireless LAN communication units 47 and 67. Thereby, BLE communication is possible between the BLE communication parts 17 of communication range restriction device 1. However, the BLE communication area 6 is narrower than the wireless LAN communication area 5 as indicated by a dotted ellipse in FIG. For this reason, it is possible to perform BLE communication between the smartphone 2 and the printer device 3 located in the BLE communication area 6 and the communication range restriction device 1. However, it is impossible to perform BLE communication between the projector device 4 located outside the BLE communication area 6 and the communication range restriction device 1.

  That is, the wireless LAN communication system performs wireless LAN setting using BLE communication, as will be described later. For this reason, only the smartphone 2 and the printer device 3 capable of BLE communication can actually communicate with each other via a wireless LAN, and the projector device 4 that cannot perform BLE communication can be wirelessly connected even in the wireless LAN communication area 5. LAN setting cannot be performed, and wireless LAN communication is disabled.

(Basic connection operation for smartphones)
FIG. 9 is a sequence diagram illustrating a flow in which the smartphone 2 that has moved into the BLE communication area 6 of the wireless LAN communication area 5 establishes a wireless LAN communication line. The device connection unit 75 of the communication range restriction device 1 transmits, for example, an advertisement packet of three advertisement channels from the BLE communication control unit 79 via the BLE communication unit 17, so that its own device is transmitted to the peripheral device. Informing the existence. The advertisement packet includes communication range information indicating the BLE communication area 6. Step S1 shows transmission of an advertisement packet including communication range information indicating the BLE communication area 6.

  When the smartphone 2 is located in the BLE communication area 6, the BLE communication unit 32 of the smartphone 2 receives the advertisement packet (communication range information) transmitted from the communication range restriction device 1. The smartphone 2 determines whether the smartphone 2 itself is located in the BLE communication area 6 by referring to the received communication range information. And this discrimination | determination result is transmitted to the communication range restriction | limiting apparatus 1 by BLE communication as a response shown to step S2. When the smartphone 2 is located in the BLE communication area 6, the BLE communication unit 32 of the smartphone 2 and the BLE communication unit 17 of the communication range restriction device 1 perform the BLE communication pairing process (BLE pairing) in step S3. )I do. Thereby, BLE communication is enabled between the smartphone 2 and the communication range restriction device 1.

  Next, when the BLE pairing is completed, the device connection unit 75 of the communication range restriction device 1 in step S4, a WPS PIN code (unique identification) that facilitates wireless LAN connection standardized by the Wi-Fi alliance. Information) is transmitted to the smartphone 2 by BLE communication. In step S6, the device connection unit 75 of the communication range restriction apparatus 1 transfers the PIN code transmitted to the smartphone 2 to the wireless LANAP unit 16 and issues a WPS communication start preparation instruction. In step S8, the wireless LANAP unit 16 of the communication range restriction device 1 sets up the WPS method using the PIN code transmitted to the smartphone 2.

  On the other hand, in step S5, the BLE communication unit 32 of the smartphone 2 that has received the WPS PIN code from the communication range restriction device 1 transfers the received PIN code to the wireless LAN communication unit 31, and issues a WPS communication start preparation instruction. I do. In step S7, the wireless LAN communication unit 31 sets up the WPS system using the PIN code transferred from the communication range restriction device 1. Thereby, in step S9, the smartphone 2 and the communication range restriction device 1 are Wi-Fi connected (wireless LAN connection) by the WPS method using the PIN code.

  In this way, in the wireless LAN communication system, when the smartphone 2 is located in the BLE communication area 6 of the communication range restriction device 1, the Wi-Fi connection (wireless LAN connection) is automatically completed. This eliminates the need for the user's setting knowledge for the wireless LAN and troublesome PIN code input operation. In BLE communication, since encrypted information is transmitted and received between devices, PIN code can be transmitted and received while ensuring safety.

  Next, the BLE communication control unit 83 of the smartphone 2 and the BLE communication control unit 79 of the communication range restriction device 1 temporarily disconnect BLE communication in step S10 in order to enable connection of a new device. Thereafter, in step S11, the device connection unit 75 of the communication range restriction apparatus 1 transmits an advertisement packet including communication range information indicating the BLE communication area 6, as described in step S1. And the device connection part 75 of the communication range restriction | limiting apparatus 1 aims at establishment of a wireless LAN communication line with devices, such as the smart phone 2 located in the BLE communication area 6, by BLE communication as mentioned above.

(Basic connection operation to the printer)
Next, FIG. 10 is a sequence diagram illustrating a flow in which the printer device 3 located in the BLE communication area 6 of the wireless LAN communication area 5 establishes a wireless LAN communication line. The printer device 3 as a peripheral device is a device that functions effectively by receiving a print request from a device such as the smartphone 2 that requests printing. For this reason, when establishing wireless LAN communication with the printer apparatus 3, it is preferable that the smart phone 2 etc. which control the printer apparatus 3 are connected to the wireless LAN beforehand. The sequence diagram of FIG. 10 is based on the premise that the smartphone 2 has already been connected to the wireless LAN (see the description of FIG. 9). The sequence diagram of FIG. 10 shows that in step S10 of FIG. 9, the BLE communication between the smartphone 2 and the communication range restriction device 1 is temporarily disconnected, and the transmission of the advertisement packet becomes possible. The process is started.

  The printer device 3 is a stationary device and is provided in the BLE communication area 6 of the communication range restriction device 1. In step S21, the printer device 3 advertises including connection inquiry information for asking whether or not a device that requests printing such as the smartphone 2 is connected to the wireless LAN via the above-described three advertisement channels. Sent to the communication range limiting device 1 periodically via the BLE communication unit 48. In step S22, the peripheral device connection unit 76 of the communication range restriction device 1 illustrated in FIG. 6 transmits a response indicating whether or not a device that requests printing is connected to the printer device 3 via the BLE communication unit 17. .

  When a device that requests printing such as the smartphone 2 is connected to the wireless LAN, the peripheral device connection unit 76 of the communication range restriction device 1 and the BLE communication unit 48 of the printer device 3 perform a BLE communication pair in step S23. Ring processing (BLE pairing) is performed. As a result, BLE communication is possible between the printer device 3 and the communication range limiting device 1.

  Next, when the BLE pairing is completed, the peripheral device connection unit 76 of the communication range restriction apparatus 1 prints a WPS PIN code for facilitating the wireless LAN connection standardized by the Wi-Fi alliance in step S24. Transmit to device 3. Further, in step S26, the communication range restriction device 1 transfers the PIN code transmitted to the printer device 3 to the wireless LANAP unit 16 and issues a WPS communication start preparation instruction. In step S28, the wireless LAN AP unit 16 of the communication range restriction apparatus 1 sets up the WPS system using the PIN code transmitted to the printer apparatus 3.

  On the other hand, the BLE communication unit 48 of the printer device 3 that has received the WPS PIN code from the communication range restriction device 1 transfers the received PIN code to the wireless LAN communication unit 47 in step S25, and prepares to start WPS communication. Give instructions. In step S27, the wireless LAN communication unit 47 sets up the WPS system using the PIN code transferred from the BLE communication unit 48. Thereby, in step S29, the printer device 3 and the communication range restriction device 1 are connected by Wi-Fi (wireless LAN connection) by the WPS method using the PIN code.

  Next, the BLE communication unit 48 of the printer device 3 and the BLE communication unit 17 of the communication range restriction device 1 temporarily disconnect BLE communication in step S30 in order to enable connection of a new device. Thereafter, in step S31, the BLE communication unit 48 of the printer apparatus 3 transmits an advertisement packet including connection inquiry information as described in step S21. Then, the communication range restriction device 1 communicates with the printer device 3 located in the BLE communication area 6 and the wireless LAN communication line by BLE communication as described above when a device requesting printing is connected to the wireless LAN. Establish.

(Printing operation)
Next, the flowchart of FIG. 11 shows a flow of printing a printed material by remotely operating the printer device 3 from the smartphone 2 connected to the wireless LAN. As described above, when the smartphone 2 and the printer device 3 are connected to each other via the wireless LAN communication units 31 and 47 in the wireless LAN, the smartphone 2 can remotely operate the printer device 3.

  When remotely operating the printer device 3 with the smartphone 2, the user activates a print application program stored in a storage unit such as the ROM 22 of the smartphone 2. When the print application program is activated, the print request unit 81 of the smartphone 2 illustrated in FIG. 7 issues a print request to the printer device 3 via the wireless LAN communication control unit 82 and the wireless LAN communication unit 31 in step S41. . When receiving the print request, the printing unit 85 of the printer device 3 illustrated in FIG. 8 makes an inquiry about the device used for printing to the smartphone 2 via the wireless LAN communication unit 47 in step S42. When printing data stored in the smartphone 2, the user notifies the printer device 3 by wireless LAN communication that the device used for printing is the smartphone 2. Alternatively, when printing an image or the like projected by the projector device 4, the user notifies the printer device 3 by wireless LAN communication that the device used for printing is the projector device 4.

  Next, in step S43, the printing unit 85 of the printer device 3 inquires of the smartphone 2 about data to be printed by wireless LAN communication. When the user prints data such as an image or text stored in the smartphone 2, the user notifies the printer device 3 by wireless LAN communication that the data to be printed is data stored in the smartphone 2. . Alternatively, when the image or the like projected by the projector device 4 is data to be printed, the user determines that the data to be printed is data projected by the projector device 4 by wireless LAN communication. Notify Finally, in step S44, the printing unit 85 of the printer device 3 acquires data designated by the user from the device (smart phone 2 or the projector device 3) designated by the user by wireless LAN communication, and executes printing. To do.

(Device disconnection operation)
Next, FIG. 12 shows that the wireless LAN communication line (and the BLE communication line) is disconnected when the smartphone 2 connected to the printer 3 in the BLE communication area 6 moves out of the BLE communication area 6. It is a sequence diagram which shows the flow performed. In step S51, the communication range information indicating the communication range corresponding to the BLE communication area 6 as described above is transmitted from the BLE communication unit 17 of the communication range restriction device 1 to the smartphone 2 by BLE communication. The smartphone 2 compares the own device position detected by the own device with GPS (Global Positioning System) or the like and the BLE communication area 6 indicated by the communication range information. When the smartphone 2 detects that its own position is outside the BLE communication area 6, in step S52, the smartphone 2 issues a wireless LAN disconnection instruction (Wi-Fi disconnection instruction) to the wireless LAN communication unit 31. Do.

  In this example, communication range information is transmitted from the communication range restriction device 1 side to the smartphone 2, and the smartphone 2 compares the current position of its own device with the BLE communication area 6 indicated by the communication range information. Therefore, the presence / absence of separation from the BLE communication area 6 is detected. However, the current position of the own device detected by the smartphone 2 by GPS or the like is transmitted to the communication range restriction device 1 by BLE communication, and the communication range restriction device 1 compares the current position of the smartphone 2 with the BLE communication area 6. Whether or not a device such as the smartphone 2 is detached from the BLE communication area 6 may be detected. In this case, the detachment detection unit 77 illustrated in FIG. 6 detects the presence / absence of detachment of a device such as the smartphone 2 with respect to the BLE communication area 6.

  When the wireless LAN communication unit 31 of the smartphone 2 is instructed to disconnect the wireless LAN from the BLE communication unit 32, in step S53, the wireless LAN communication unit 31 sends a wireless LAN disconnection request to the communication range restriction device 1 using the wireless LAN communication. Do. Upon receiving the wireless LAN disconnection request, the communication range restriction device 1 disconnects the wireless LAN communication line related to the device that has made the wireless LAN disconnection request, as shown in step S54. As a result, not only the smartphone 2 but also the wireless LAN communication line of the printer device 3 is disconnected.

  When the wireless LAN communication line is established again after the wireless LAN communication line is disconnected, the communication range restriction device 1 updates the PIN code to a new one. For this reason, when the smartphone 2 that has moved out of the BLE communication area 6 moves into the BLE communication area 6 again, a wireless LAN communication line is established using a PIN code different from the previous one.

  Thus, the wireless LAN communication system can automatically disconnect the wireless LAN communication line and the BLE communication line when the smartphone 2 moves out of the BLE communication area 6. For this reason, the range in which the smartphone 2 can be connected to the wireless LAN can be limited to a certain range (within the BLE communication area 6). Further, not only the smartphone 2 that has moved outside the BLE communication area 6 but also the wireless LAN communication line of the printer device 3 that has been communicating with the smartphone 2 is disconnected. Therefore, by disconnecting the wireless LAN communication line with the smartphone 2, it is possible to prevent the inconvenience that the connection of the printer device 3 to the wireless LAN communication line that is no longer used is wasted, and higher communication. Security can be obtained. In other words, even for users who do not have permission to connect to a local network such as an in-house LAN, the user's device can be temporarily and easily connected to the local network while ensuring the safety of the local network. Can be used.

  Further, when the wireless LAN communication line is established again after the wireless LAN communication line is disconnected, the PIN code is updated to a new one. For this reason, the smart phone 2 which moved outside the BLE communication area 6 can prevent the fraudulent act which tries to intercept the wireless LAN communication of another device by reusing the PIN code used at the time of the previous connection.

  When the smartphone 2 moves outside the BLE communication area 6, not only the smartphone 2 but also the wireless LAN communication line of the printer device 3 communicating with the smartphone 2 is disconnected. Thereby, by disconnecting the wireless LAN communication line with the smartphone 2, it is possible to prevent the inconvenience that the connection of the printer device 3 to the wireless LAN communication line that is no longer used is wasted, and higher communication. Security can be obtained.

  When establishing a wireless LAN communication line, a public key may be distributed instead of the WPS PIN code distributed from the communication range restriction device 1 to a device such as the smartphone 2 by BLE communication. Instead of the WPS PIN code, for example, a public key by a Diffie-Hellman key exchange method may be distributed to establish a wireless LAN communication line. In this case, since the public key is transmitted / received in the BLE communication area 6, the public key is transmitted / received within a range that can be seen by the administrator of the wireless LAN. For this reason, the device that transmits the public key, the device that receives the public key, the user, and the like are clear. Therefore, unauthorized communication due to so-called impersonation such as unauthorized users and unauthorized devices can be prevented. In addition, when the established wireless LAN communication line is disconnected and the wireless LAN communication line is established again, a new public key different from the previous one may be used, as in the case of the above PIN code. Would be preferred.

  Further, a PIN code or a public key may be transmitted from the communication range restriction device 1 to a device such as the smartphone 2 or the printer device 3 by sound (acoustic output propagating in space). In this case, since the acoustic output has a lower space transmission than radio waves used in BLE communication, the transmission / reception range of PIN codes or the like can be limited to a range in which voice can be transmitted and received between devices. For this reason, a PIN code or the like is transmitted and received within a narrow range that can be reached by a system administrator or the like. Therefore, unauthorized communication due to so-called impersonation, such as the above-described unauthorized user and unauthorized device, can be more strongly prevented.

  Moreover, you may monitor the presence or absence of the device in the BLE communication area 6 using the received signal strength (RSSI) of the BLE communication part 17 instead of communication range information. Further, by setting the reception signal strength of the BLE communication regarded as the exit RSSI area and the entrance RSSI area to a desired reception signal strength, a range that can be connected to the wireless LAN within the range of the BLE communication area 6 (entrance RSSI area Can be adjusted dynamically.

  The example in which the BLE communication area is included in the wireless LAN communication area has been described above. For example, as shown in FIG. 13, at least a part of the BLE communication area is a wireless LAN communication area. The state located outside may be sufficient. In FIG. 13, the area where the wireless LAN communication line can be established is the BLE communication area 6 '. This is because in the BLE communication area 7 outside the wireless LAN communication area, communication range information can be received by BLE communication, but setup for wireless LAN communication cannot be performed in the first place. The state as shown in FIG. 13 is, for example, when the wireless LANAP unit 16 and the BLE communication unit 17 are arranged at different positions, or when the communicable range protrudes in one direction due to the directivity of communication. Conceivable.

(Improvements)
Here, in the wireless LAN communication system having such a basic configuration, the distance that each device can communicate using wireless LAN communication is limited to a short distance in the BLE communication area 6. When a plurality of the above-described wireless LAN communication systems exist at locations physically separated from each other, if communication between devices located in each wireless LAN communication system becomes possible, convenience is improved. That is, for example, when there is no printer device in one wireless LAN communication system, printing is performed from a smart device located in one wireless LAN communication system by operating a printer device located in the other wireless LAN communication system. Can be done.

  However, the wireless LAN communication system described above sets the BLE communication area 6 in the wireless LAN communication area 5 to permit the use of the wireless LAN limited to a part of the range in the wireless LAN communication area 5, In addition, high security is achieved through management. For this reason, it is necessary to maintain such high security even when communication is possible between devices of each wireless LAN communication system that are physically separated.

  For this reason, the wireless LAN communication system of the embodiment distributes IPv6 (Internet Protocol Version 6) addresses having different prefixes in each network of a plurality of wireless LAN communication systems, and VPN (Virtual Private Network) between them. ) Connect. In addition, the device list information held by each wireless LAN communication system is exchanged during VPN connection. In each wireless LAN communication system, communication management of each device is performed using the list information. Thereby, while maintaining high security, it is possible to enable communication between devices in the wireless LAN communication system that are physically separated from each other.

(System configuration of wireless LAN communication system of embodiment)
Next, in the wireless LAN communication system of the embodiment, in the BLE communication area 6 in which wireless LAN communication is permitted, the wireless LAN that is the connection destination can be changed according to user information or time, The network security of the ad hoc wireless communication system is further improved.

  FIG. 14 shows a system configuration of the wireless LAN communication system of such an embodiment. In FIG. 14, the first communication range 101 is formed by the first communication device 106, and the second communication range 102 is formed by the second communication device 107. The third communication range 103 is formed by the third communication device 108, the fourth communication range 104 is formed by the fourth communication device 109, and the fifth communication range 105 is the fifth communication. The device 110 is formed. The first communication range 101 is, for example, the BLE communication area 6 described above, and the second communication range 102 to the fifth communication range 105 are the wireless LAN communication area 5 described above.

  That is, in the case of the wireless LAN communication system of this embodiment, one (or a plurality of) BLE communication areas (first communication range 101) and a plurality of wireless LAN communication areas (second to fifth communication ranges). 102-105). The BLE communication area (first communication range 101) is narrower than each wireless LAN communication area (second to fifth communication ranges 102 to 105). The BLE communication area (first communication range 101) is included in each wireless LAN communication area (second to fifth communication ranges 102 to 105).

  In the first communication range 101, the first device 111 and the second device 112 that are also included in the second communication range 102 to the fifth communication range 105 are located. A third device 113 is located in the fourth communication range 104 and the fifth communication range 105. Further, the wireless LAN communication system of this embodiment has a device 114 located outside the first to fifth communication ranges 101 to 105. Note that the first communication device 106 may form all of the first to fifth communication ranges 101 to 105.

  In the first communication range 101 corresponding to the BLE communication area 6, the first device 111 and the second device 112 are the second to fifth communication devices 107 to 110 corresponding to the wireless LAN communication area 5. A connectable communication device is determined based on the user information. For example, when the first device 111 is permitted to connect to the third communication device 108 based on the user information, the first device 111 establishes a communication connection to the third communication device 108, and BLE Wireless LAN communication corresponding to the third communication range 103 is performed within the first communication range 106 corresponding to the communication area 6. Similarly, when the second device 112 is permitted to connect to the fifth communication device 110 according to the user information, the second device 112 attempts communication connection to the fifth communication device 110, Wireless LAN communication corresponding to the fifth communication range 110 is performed within the first communication range 106 corresponding to the BLE communication area 6.

  The first device 111 is a communication device other than the connection destination (the above-described third communication device 108) determined based on the user information, the second communication device 107, the fourth communication device 109, and The fifth communication device 110 cannot make a communication connection. Similarly, the second device 112 is a communication device other than the connection destination (the above-described fifth communication device 110) determined based on the user information, and the second communication device 107 to the fourth communication device 109. Can not make a communication connection.

  Since the first device 111 has established a communication line with the third communication device 108, it can communicate with a network device existing in the third communication range 103. However, the first device 111 cannot communicate with network devices existing in the second communication range 102, the fourth communication range 104, and the fifth communication range 105 in which a communication line is not established. Similarly, the second device 112 has established a communication line with the fifth communication apparatus 110. Therefore, the second device 112 can communicate with the network device existing in the fifth communication range 105, but the second communication range 102 to the fourth communication range 104 in which no communication line is established. Cannot communicate with existing network devices.

  Outside the first communication range 101 and outside the first and fifth communication ranges 101 to 105 and the third device 113 located within the fourth communication range 104 and the fifth communication range 105 The fourth device 114 that is positioned cannot establish a communication line, and therefore cannot communicate with network devices that exist in the first to fifth communication ranges 101 to 105.

(Wireless LAN setup process based on user information)
FIG. 15 is a sequence diagram illustrating a flow of wireless LAN setup processing in the wireless LAN communication system according to the embodiment. FIG. 15 shows a flow in which the first device 111 establishes a communication line in the third communication range 103 corresponding to the wireless LAN communication area 5 in the first communication range 101 corresponding to the BLE communication area 6. ing.

  In FIG. 15, first, the first device 111 moves within the first communication range 101 to receive the communication range information transmitted by the first communication device 106 in the first communication range 101. (Step S61), it is determined whether it is within the first communication range 101 or not. The communication range information is information (such as RSSI) indicating the current distance between the first device 111 and the first communication device 106. The first device 111 compares the communication range information with a predetermined threshold value, and determines whether or not the first device 111 is located within the first communication range 101. The threshold value may be transmitted to the first device 111 together with the communication range information. If it is within the communication range, the first device 111 transmits user information to the first communication device 106 using BLE communication (step S62).

  Upon receiving the user information, the first communication device 106 transmits setup information for establishing a wireless LAN communication line in the third communication range 103 to the first device 111 (step S63). The first device 111 transfers setup information to the third communication device 108 and makes a setup request (instruction) (step S64). The third communication device 108 performs setup processing for wireless LAN communication corresponding to the third communication range 103 using the received setup information (step S66). In addition, the first device 111 performs setup processing for a wireless LAN communication line corresponding to the third communication range 103 using the setup information received from the first communication device 106 (step S65). Thereby, it is possible to establish a wireless LAN communication line that enables wireless LAN communication within the first communication range 101, limited to the third communication range 103 determined by the user information of the first device 111.

  The first communication device 106 (first communication range 101) and the third communication device 108 (third communication range 103) may be formed as separate modules or as the same module. Also good. In the case of the same module, the above-described operation of the first communication device 106 and the third communication device 108 is performed by one module.

(Other setup process of wireless LAN based on user information)
FIG. 16 is a sequence diagram illustrating a flow in which the third device 113 establishes a wireless LAN communication line in the fifth communication range 105 corresponding to the wireless LAN communication area 5. In FIG. 16, first, the third device 113 moves within the first communication range 101, thereby receiving the communication range information transmitted by the first communication device 106 in the first communication range 101. (Step S71), by comparing with a predetermined threshold, it is determined whether or not it is within the first communication range 101. If within the communication range, the third device 113 transmits user information to the first communication device 106 using BLE communication (step S72).

  When receiving the user information, the first communication device 106 transmits setup information for establishing a wireless LAN communication line in the fifth communication range 105 to the third device 113 (step S73). The third device 113 transfers setup information to the fifth communication device 110 and makes a setup request (instruction) (step S74). The fifth communication device 110 performs a wireless LAN communication setup process corresponding to the fifth communication range 110 using the received setup information (step S76). In addition, the third device 113 performs setup processing for the wireless LAN communication line corresponding to the fifth communication range 110 using the setup information received from the first communication device 106 (step S75). As a result, a wireless LAN communication line enabling the third device 113 to perform wireless LAN communication corresponding to the fifth communication range 110 within the first communication range 101 is established.

(Wireless LAN communication line disconnection process)
FIG. 17 is a sequence diagram showing the flow of disconnection processing for the wireless LAN communication line established as described above. As described above, the communication range information indicating the communication range is transmitted intermittently or continuously from the first communication device 106 forming the first communication range 101. When the first device 111 recognizes that the first device 111 has moved out of the first communication range 101 by comparing the communication range information received in step S81 with a predetermined threshold value, A disconnection instruction signal for disconnecting the communication device 108 is transmitted to the third communication device 108 (step S82). Note that it may be determined that the first device 111 has moved out of the first communication range 101 when the first device 111 cannot receive communication range information from the first communication device 106.

  When receiving the disconnection instruction, the third communication device 108 disconnects the wireless LAN communication line (step S83). Note that the third communication apparatus 108 may execute the disconnection process after confirming the communication range information of the first device 111. The third communication apparatus 108 transmits a wireless LAN communication line disconnection instruction signal to the first device 111 after the wireless LAN communication line disconnection process (step S84). When receiving the disconnection instruction, the first device 111 disconnects the wireless LAN communication line (step S85). As a result, when the first device 111 moves outside the first communication range 101 formed by the first communication device 106, the third communication device 108 and the first device 111 use the wireless LAN. The communication line can be disconnected. For this reason, the network security of the wireless LAN communication system can be maintained.

(Wireless LAN communication line disconnection processing by time specification)
FIG. 18 is a sequence diagram showing an operation flow for disconnecting the wireless LAN communication line established as described above at a specified time. As described above, the communication range information indicating the communication range is transmitted intermittently or continuously from the first communication device 106 forming the first communication range 101. The first device 111 monitors the distance between the first communication device 106 and the first device 111 by comparing the communication range information received in step S91 with a predetermined threshold.

  In the case of the example in FIG. 18, the first communication means 106 checks the internal timer (step S92), and the designated time elapses after the wireless LAN communication line is established, or at the designated time. When it is detected that the wireless LAN communication line has been reached, a wireless LAN communication line disconnection instruction signal is transmitted to the first device 111 (step S93). When the first one device 111 receives the disconnection instruction signal, a disconnection instruction signal for disconnecting the wireless LAN communication line corresponding to the third communication range 103 is transmitted from the first device 111 to the third communication apparatus 108. (Step S94), and the third communication device 108 performs a disconnection process of the wireless LAN communication line corresponding to the third communication range 103 (step S95). When the disconnection process is performed, the third communication device 108 transmits a disconnection instruction signal for the wireless LAN communication line to the first device 111 (step S96). Upon receiving the disconnection instruction signal, the first device 111 disconnects the wireless LAN communication line. As a result, use of the wireless LAN communication line can be permitted for a limited time.

(Detailed operation of wireless LAN communication system of embodiment)
Next, the wireless LAN communication system of the embodiment will be described in detail with reference to FIG. FIG. 19 is a detailed system configuration diagram of the wireless LAN communication system according to the embodiment. A communication range restriction system 201 (an example of a communication device) illustrated in FIG. 19 has a normal BLE communication function 221 (an example of a communication unit). The wireless LAN communication is an example of wireless communication of the first communication method, and the BLE communication is an example of wireless communication of the second communication method. When the communication range restriction system 201 forms a wireless LAN communication range, a wireless LAN access point function 220 is also provided. In addition, a timer function 222 is provided when changing the wireless LAN communication area to be connected according to time or changing the connectable time for the wireless LAN communication line.

  The first communication range 101 formed by the BLE communication function 221 of the communication range restriction system 201 is a BLE communication area and a communication range in which wireless LAN communication is possible in this BLE communication area. In the case of the example in FIG. 19, a device (for example, a smartphone) 206 and a personal computer device (PC) 207 are located within the first communication range 101 that is a BLE communication area.

  The communication range restriction system 201 has a user interface function (UI function) such as a smartphone or a tablet terminal, and can communicate with an intelligent device 206 serving as a control subject. Also. The communication range restriction system 201 is located in a wireless LAN communication area formed by the access point device 208 and the access point device 209 that establish communication connection when the device 206 and the PC 207 perform wireless LAN communication. In the example of FIG. 19, a fifth communication range 105 corresponding to the wireless LAN communication area 5 is formed by the access point device 208, and a third communication range corresponding to the wireless LAN communication area 5 is formed by the access point device 209. 103 is formed. As an example, the communication range restriction system 201 is located in a range where the fifth communication range 105 and the third communication range 103 overlap.

  Further, the communication range restriction system 201 has a communication information list 202 indicating connection destinations of the access point device 208 or the access point device 209 or the like. When the communication information list is managed by an external server, a communication information server 212 is provided. The communication information server 212 manages a communication information list 213 similar to the communication information list 202.

(Function of communication range restriction system)
FIG. 20 is a functional block diagram for explaining the function of each part of the communication range restriction system 201. As shown in FIG. 20, the communication range restriction system 201 has a wireless LAN access point function 220, a BLE communication function 221, a communication information list storage function 242, and a timer function 222. Further, the communication range restriction system 201 has a device / equipment removal detection function 241. In the wireless LAN access point function 220, the communication range restriction system 201 forms a wireless LAN communicable range.

  The device 206 (smartphone) and the device 207 (PC) that communicate with the communication range restriction system 201 have user information in the wireless LAN communication functions 225 and 227, the BLE communication functions 226 and 228, and the RAMs 243 and 252. ing. The access point devices 208 and 209 have a wireless LAN access point function 250.

  Further, when making an inquiry to the communication information server 212 without providing the communication information list storage function 242 in the communication range restriction system 201, the communication information server 212 has the communication information list 251.

(Communication information list)
Table 1 below shows an example of the communication information list 202 (and the communication information list 213).

  As shown in Table 1, the communication information list 202 includes a user identification number (user ID: an example of identification information) of each user, device information indicating a device permitted to be connected for each user, and a wireless LAN permitted for each user. The WPA information (setup information) of the communication area and the WPS information (setup information) of the wireless LAN communication area permitted for each user are in an associated list. The communication information list 202 is stored in a storage unit such as the ROM 12, the RAM 13, or the HDD 14 shown in FIG.

(Operation to change connection destination using user ID)
For example, when the device 206 detects the communication range limitation system 201 through BLE communication and transmits user information, the communication information list storage function 242 (an example of an acquisition unit) of the communication range limitation system 201 acquires the transmitted user information. To do. Then, the communication information list storage function 242 refers to the communication information list 202 shown in Table 1 and searches for setup information (WPA information or WPS information) corresponding to the user ID included in the user information. The BLE communication function 226 (an example of a transmission unit) transmits the searched setup information to the device 206.

  When the communication range limitation system 201 makes an inquiry about setup information to the communication information server 212, the communication range limitation system 201 transmits user information to the communication information server 212. The communication information server 212 detects setup information corresponding to the user ID from the communication information list 202 (see Table 1) stored on the communication information server 212 side, and transmits the setup information to the communication information server 212. The communication information server 212 transmits the setup information received from the communication information server 212 to the device 206. The setup information may be transmitted directly from the communication information server 212 to the device 206.

  The communication information list 202 stores setup information (WPA information and WPS information) of connection destinations (access point devices 208, 209, etc. that form a wireless LAN communication area used by the user) for each user ID. For this reason, the connection destination is determined based on the user ID, and setup information corresponding to the connection destination is transmitted to the device 206. The device 206 performs a setup process based on the setup information, and also issues a setup instruction to the access point device 208, for example. The access point device 208 performs a wireless LAN communication line setup process with the device 206 in accordance with the setup instruction. As a result, a wireless LAN communication line is established between the device 206 and the access point device 208.

  When the device 206 moves outside the BLE communication area 6, the device 206 instructs the access point device 208 to disconnect the wireless LAN communication line. Thereby, the range in which the wireless LAN communication line can be used can be limited to the BLE communication area formed by the communication range limiting system 201, and an ad hoc wireless LAN communication system can be constructed. Further, the wireless LAN communication area can be changed according to the user ID. For this reason, a wireless LAN communication area can be set for each user, and the network security of the wireless LAN communication system can be further improved.

  Also, since both WPA information and WPS information are stored, WPS information is transmitted as setup information to devices that support WPS, and for devices that support WPA information, Setup information corresponding to the device can be transmitted, such as transmitting WPA information as setup information. Alternatively, both WPA information and WPS information may be transmitted, and either one may be selected on the device side.

  Note that either one of WPA information and WPS information may be stored in the communication information list 202. If the device corresponding to the user ID is fixed, the device information item is deleted from the communication information list 202 and either one of WPA information or WPS information is included in the communication information list as connection information. Also good.

(Change connection destination using time information)
Next, in the communication information list described above, a connection information request time threshold for changing the connection destination according to time is stored as shown in Table 2 below.

  In this case, for example, the device 206 detects the communication range limitation system 201 by BLE communication, and from the communication information list 202 included in the communication range limitation system 201 or the communication information list 213 included in the communication information server 212, Get setup information corresponding to user information. At this time, the communication range limiting system 201 or the communication information server 212 searches the communication information list 202 or the communication information list 213 for the setup information of the connection destination corresponding to the time when the device 206 requested the setup information transmission. , To device 206. That is, the access point devices 208, 209 and the like that are the connection destinations are changed according to the time when the device 206 makes a setup information transmission request.

  As shown in Table 2, the communication information list 202 (and the communication information list 213) stores connection information request time threshold values indicating the access point devices 208, 209 and the like as connection destinations for each setup information transmission request time. Yes. In the communication information list 202 (and the communication information list 213), WPA information and WPS information of the access point devices 208 and 209 that are connection destinations are stored in association with each connection information request time threshold value. The communication range limiting system 201 transmits the setup information of the access point devices 208, 209, etc. corresponding to the time at which the device 206 requested the setup information transmission to the device 206. Accordingly, the wireless LAN communication area used by the device 206 can be changed according to the time when the setup information transmission request is received.

  In the communication information list 202 (and the communication information list 213), for example, the setup information of the access point device 209 that forms the fifth communication range 105 with respect to the connection information request time threshold value from 6:00 am to 7:00 am Is assigned, and the communication range limitation system 201 receives the setup information transmission request from the device 206 at 6:30 am, the communication range limitation system 201 transmits the setup information of the access point device 209 to the device 206. Send to. As a result, the device 206 establishes a wireless LAN communication line with the access point device 209 and performs wireless LAN communication within the fifth communication range 105.

  In contrast, in the communication information list 202 (and the communication information list 213), for example, an access point that forms the third communication range 103 with respect to the connection information request time threshold value from 7:00 am to 8:00 am When the setup information of the device 208 is assigned and the communication range limitation system 201 receives a setup information transmission request from the device 206 at 7:50 am, the communication range limitation system 201 Setup information is transmitted to the device 206. As a result, the device 206 establishes a wireless LAN communication line with the access point device 208 and performs wireless LAN communication within the third communication range 103.

  It should be noted that by providing a connection information request time threshold value for designating a connection impossible time, communication connection to the access point devices 208 and 209 may be disabled except for a determined time.

(Change connection destination using location information)
Next, as shown in Table 3 below, position information for changing a connection destination according to a geographical location is stored in the communication information list described above.

  In this case, for example, the device 206 detects the communication range limitation system 201 by BLE communication, and from the communication information list 202 included in the communication range limitation system 201 or the communication information list 213 included in the communication information server 212, Setup information corresponding to the user (user ID) is acquired. At this time, the device 206 detects the current position of its own device using a current position measuring device such as a GPS (Global Positioning System) sensor or an IMES (Indoor Messaging System) sensor, and sends this setup information as a setup information transmission request. At the same time, it is transmitted to the communication range limiting system 201. When the setup information is transmitted from the communication information server 212 to the device 206, the communication range limiting system 201 transfers the current position information to the communication information server 212.

  The communication range limiting system 201 or the communication information server 212 searches the communication information list 202 or the communication information list 213 for connection destination setup information corresponding to the location of the device 206 that has transmitted the setup information transmission request. Send to. That is, the access point devices 208 and 209 to be connected are changed in accordance with the current location (position) of the device 206 that has requested setup information transmission.

  As shown in Table 3, in the communication information list 202 (and the communication information list 213), WPA information and WPS information of the access point devices 208 and 209 that are connection destinations are stored in association with each other by location. Yes. The communication range limiting system 201 transmits the setup information of the access point devices 208, 209, etc. corresponding to the position where the device 206 has requested the setup information transmission to the device 206. Thus, the wireless LAN communication area used by the device 206 can be changed according to the current position of the device 206 that has requested setup information transmission.

  Note that location information that designates a geographical range for which connection is prohibited may be provided, and communication connection to the access point devices 208 and 209 may be prohibited except for a determined location. Thereby, the further security improvement can be aimed at.

(Change connection destination using voice etc.)
Next, in the wireless LAN communication system according to the embodiment, the connection destination is changed according to sound waves such as the sound collected by the device. In this case, the above-described communication information list 202 stores flag information assigned to each sound wave as shown in Table 4 below. Each flag information is associated with setup information of access points corresponding to different wireless LAN communication areas.

  Similarly to Table 4, the device 206 has a flag list in which flag information assigned to each sound wave is stored. The device 206 reads flag information corresponding to the collected sound wave from the flag list and transmits the flag information to the communication range limiting system 201. The communication range limiting system 201 reads the setup information of the access point that forms the wireless LAN communication area corresponding to the flag information received from the device 206 from the communication information list 202 and transmits it to the device 206.

  For example, when the flag information “1” is transmitted from the device 206, the communication range limiting system 201 transmits the setup information of the access point device 209 that forms the fifth communication range 105 to the device 206. Similarly, when the flag information “2” is transmitted from the device 206, for example, the communication range limiting system 201 transmits the setup information of the access point device 208 that forms the third communication range 103 to the device 206. Thereby, the wireless LAN communication area of the device 206 can be changed and set according to the sound collected by the device 206.

  The device 206 transmits a user ID together with a connection request to the communication range limitation system 201, and the communication range limitation system 201 obtains setup information corresponding to the flag information associated with the user ID from the communication information list 202. It may be read and transmitted to the device 206.

  Further, in the device 206, the position information of the entrance place of the predetermined venue is detected by using a GPS sensor or an IMES sensor, and flag information corresponding to the detected current position is set, and the communication range limiting system 201 is set. Send flag information. Then, the communication range limiting system 201 may acquire setup information corresponding to the flag information from the communication information list 202 and transmit it to the device 206.

(Details of user information)
Table 5 below shows details of user information transmitted from the device 206 to the communication range limiting system 201.

  As shown in Table 5, the user information includes information such as a user ID, a device type, a user access authority, and a network connection start time. Note that some of these pieces of information may be included in the user information.

  Such user information is held (stored) in a storage unit such as an HDD of the device 206. Then, when the device 206 attempts to connect to the network, it is transmitted to the communication range limiting system 201 together with authentication information such as a password input from the user via the user interface of the device 206. In addition, when the connection application on the device 206 automatically acquires the user ID, the device type, the user access authority, the connection start time for the network, and the like, and transmits it to the communication range limitation system 201, the user There is no need to keep information.

(Operation for determining the network to be connected based on the user ID)
FIG. 21 is a flowchart for explaining an operation of determining a network to be connected based on a user ID in the wireless LAN communication system of the embodiment. For example, when the device 206 moves into the BLE range of the communication range limiting system 201, the device 206 performs BLE communication with the communication range limiting system 201 and receives the RSSI threshold value and the RSSI value (step S101). The device 206 compares the received RSSI threshold value with the RSSI value to determine whether or not the device has moved into the BLE communication area of the communication range limiting system 201 (step S102).

  When the device 206 determines that the device 206 is located within the BLE communication area, the device 206 BLE-transmits user information (see Table 5) stored in the device 206 to the communication range limiting system 201 (steps S103 and S104). The communication range limiting system 201 refers to the communication information list (see Table 1), and obtains connection destination setup information associated with the user ID included in the user information (step S105).

  Next, the communication range limiting system 201 transmits BLE the acquired setup information to the device 206 (step S106). Using the received setup information, the device 206 establishes a wireless LAN communication line based on WPA or WPA2 with the access point device 208 or the access point device 209 (step S107). At this time, Diffie-Hellman key exchange is performed, and the public key is exchanged. The smart device 206 and the access point device 209 exchange this public key by BLE communication.

  Thereby, a wireless LAN communication area can be allocated for each user ID, and the network security of the wireless LAN communication system according to the embodiment that is an ad hoc wireless LAN communication system can be further improved.

(Operation to determine the network to connect based on the connection start time)
FIG. 22 is a flowchart for explaining an operation of determining a network that is permitted to be connected based on the time at which communication connection is started with respect to the network in the wireless LAN communication system according to the embodiment. For example, when the device 206 moves into the BLE range of the communication range limiting system 201, the device 206 performs BLE communication with the communication range limiting system 201 and receives the RSSI threshold value and the RSSI value (step S111). The device 206 compares the received RSSI threshold value with the RSSI value to determine whether or not the device has moved into the BLE communication area of the communication range limiting system 201 (step S112).

  When determining that the device 206 is located in the BLE communication area, the device 206 BLE-transmits user information (see Table 5) stored in the device 206 to the communication range limiting system 201 (step S113). Further, the device 206 BLE-transmits connection time information indicating a time for performing communication connection to the network to the communication range limiting system 201 (step S114).

  The communication range limiting system 201 refers to the communication information list (see Table 1 and Table 2), and acquires the setup information of the connection destination associated with the user ID and the connection time information included in the user information (Step S115). . Then, the communication range limiting system 201 transmits BLE the acquired setup information to the device 206 (step S116).

  The device 206 uses the received setup information to establish a wireless LAN communication line based on WPA or WPA2 with the access point device 208 or the access point device 209 (step S117). At this time, Diffie-Hellman key exchange is performed, and the public key is exchanged. The smart device 206 and the access point device 209 exchange this public key by BLE communication.

  Thereby, the wireless LAN communication area can be allocated according to the user ID and the connection time to the network, and the network security of the wireless LAN communication system according to the embodiment that is an ad hoc wireless LAN communication system can be further improved. it can.

(Operation to determine the network to connect based on the current location)
FIG. 23 is a flowchart for explaining an operation of determining a network that permits connection based on the current position of the device in the wireless LAN communication system according to the embodiment. For example, when the device 206 moves into the BLE range of the communication range limiting system 201, the device 206 performs BLE communication with the communication range limiting system 201 and receives the RSSI threshold value and the RSSI value (step S121). The device 206 compares the received RSSI threshold value with the RSSI value to determine whether or not the device has moved into the BLE communication area of the communication range limiting system 201 (step S122).

  When determining that the device 206 is located in the BLE communication area, the device 206 transmits the user information (see Table 5) stored in the device BLE to the communication range limiting system 201 (step S123). Further, the device 206 measures the current position of its own device using a GPS sensor or an IMES sensor (step S124), and BLE-transmits the current position information to the communication range limiting system 201 (step S125).

  The communication range limiting system 201 refers to the communication information list (see Tables 1 and 3), and acquires the setup information of the connection destination associated with the user ID included in the user information and the current position information of the device 206. (Step S126). Then, the communication range limiting system 201 transmits BLE the acquired setup information to the device 206 (step S127).

  Using the received setup information, the device 206 establishes a wireless LAN communication line based on WPA or WPA2 with the access point device 208 or the access point device 209 (step S128). At this time, Diffie-Hellman key exchange is performed, and the public key is exchanged. The smart device 206 and the access point device 209 exchange this public key by BLE communication.

  Thereby, the wireless LAN communication area can be allocated according to the user ID and the current position of the device 206, and the network security of the wireless LAN communication system according to the embodiment that is an ad hoc wireless LAN communication system is further improved. Can do.

(Operation to determine the network to connect based on voice, etc.)
FIG. 24 is a flowchart for explaining an operation of determining a network that permits connection based on voice acquired (received) by a device in the wireless LAN communication system according to the embodiment. For example, when the device 206 moves into the BLE range of the communication range limiting system 201, the device 206 performs BLE communication with the communication range limiting system 201 and receives the RSSI threshold value and the RSSI value (step S131). The device 206 compares the received RSSI threshold value with the RSSI value to determine whether or not the device has moved into the BLE communication area of the communication range limiting system 201 (step S132).

  If the device 206 is located within the BLE communication area, the device 206 acquires (receives) voice (or sound waves) transmitted continuously or intermittently from the communication range limiting system 201 (step S133). The device 206 has a flag list in which different flag information is associated with each voice. The device 206 detects flag information (connection flag) corresponding to the received voice from the flag list, and transmits the flag information together with the user information to the communication range limiting system 201 (steps S134 to S136).

  The communication range limiting system 201 refers to the communication information list (see Tables 1 and 4), sets up the connection destination associated with the user ID included in the user information and the flag information (connection flag) received from the device 206. Information is acquired (step S137). Then, the communication range limiting system 201 transmits BLE the acquired setup information to the device 206 (step S138).

  Using the received setup information, the device 206 establishes a wireless LAN communication line using WPA or WPA2 with the access point device 208 or the access point device 209 (step S139). At this time, Diffie-Hellman key exchange is performed, and the public key is exchanged. The smart device 206 and the access point device 209 exchange this public key by BLE communication.

  Thereby, the wireless LAN communication area can be allocated according to the user ID and the voice acquired by the device 206, and the network security of the wireless LAN communication system according to the embodiment which is an ad hoc wireless LAN communication system is further improved. be able to.

(Operation to determine the network to connect based on the entrance location)
FIG. 25 is a flowchart for explaining an operation of determining a network that is allowed to be connected based on an entrance place such as a concert hall or a baseball field in the wireless LAN communication system of the embodiment. For example, when the device 206 moves into the BLE range of the communication range limiting system 201, the device 206 performs BLE communication with the communication range limiting system 201 and receives the RSSI threshold value and the RSSI value (step S141). The device 206 compares the received RSSI threshold value with the RSSI value to determine whether or not the device has moved into the BLE communication area of the communication range limiting system 201 (step S142).

  When determining that the device 206 is located in the BLE communication area, the device 206 measures the current position corresponding to the entrance place by using a GPS sensor or an IMES sensor (step S143). The device 206 has a flag list in which different flag information (connection flag) is associated with each entrance place. The device 206 detects flag information corresponding to the measured location information of the entrance place from the flag list, and transmits the flag information together with the user information to the communication range limiting system 201 (step S144, step S145).

  The communication range limiting system 201 refers to the communication information list (see Tables 1 and 3), and sets up the connection ID setup information associated with the user ID included in the user information and the location of the entrance where the device 206 is located. Obtain (step S146). Then, the communication range limiting system 201 transmits BLE the acquired setup information to the device 206 (step S147).

  The device 206 uses the received setup information to establish a wireless LAN communication line based on WPA or WPA2 with the access point device 208 or the access point device 209 (step S148). At this time, Diffie-Hellman key exchange is performed, and the public key is exchanged. The smart device 206 and the access point device 209 exchange this public key by BLE communication.

  Thereby, the wireless LAN communication area can be allocated for each entrance place where the user ID and the device 206 are located, and the network security of the wireless LAN communication system according to the embodiment that is an ad hoc wireless LAN communication system is further improved. Can be improved.

(Wireless LAN communication line disconnection operation)
FIG. 26 is a flowchart for explaining the disconnection operation of the wireless LAN communication line established as described above. Based on the RSSI value of the communication range information that is intermittently or continuously transmitted from the communication range limiting system 201 located in the wireless LAN communication area where the wireless LAN communication line is established, It is determined whether or not the device 206 is located within the BLE communication area formed by the communication range limiting system 201 (step S151, step S152).

  If it is determined that the device 206 has moved (leaved) out of the BLE communication area formed by the communication range limitation system 201 (step S152: Yes), the device 206 transmits a wireless LAN to the communication range limitation system 201. A disconnection instruction (Wi-Fi (registered trademark) disconnection instruction) for disconnecting the communication line is issued (step S153).

  When the communication range limitation system 201 receives the disconnection instruction, the disconnection detection function 241 (an example of a disconnection unit) disconnects the wireless LAN communication line (step S154). As a result, when the device 206 moves out of the BLE communication area formed by the communication range limiting system 201, for example, the wireless LAN communication line for the wireless LAN communication area formed by the access point device 209 can be disconnected. . For this reason, the network security of the wireless LAN communication system can be maintained.

  Note that when the communication range limiting system 201 detects that the device 206 has moved (leaved) out of the BLE communication area, for example, when the RSSI value with the device 206 is equal to or less than a predetermined value, the disconnection shown in FIG. The detection function 241 may disconnect the wireless LAN communication line established by the device 206.

(Effect of embodiment)
As is apparent from the above description, the wireless LAN communication system according to the embodiment includes the communication range limiting system 201 provided in the wireless LAN communication area formed by the wireless LAN access point devices 208 and 209, respectively. BLE transmission of communication range information is performed within the communication area. By moving into the BLE communication area, the device 206 having received the communication range information by BLE transmits user information including the user ID to the communication range limiting system 201. The communication range limiting system 201 has a communication information list in which setup information of access points forming a wireless LAN communication area that is permitted to be used is stored for each user ID. The communication range limiting system 201 reads the setup information of the access point corresponding to the user ID from the communication information list and transmits it to the device 206. The device 206 establishes a wireless LAN communication line with the access point. Further, when the device 206 moves out of the BLE communication area formed by the communication range limiting system 201, the device 206 disconnects the wireless LAN communication line.

  Thereby, the range in which the wireless LAN communication line can be used can be limited within the BLE communication area formed by the communication range limiting system 201. Thereby, an ad hoc wireless LAN communication system can be constructed.

  Further, the wireless LAN communication area can be changed according to the user ID. For this reason, a wireless LAN communication area can be set for each user, and the network security of the wireless LAN communication system can be further improved.

  In the wireless LAN communication system according to the embodiment, the connection start time that is the time when the device 206 attempted to connect the wireless LAN communication line, the current position of the device 206, the voice or sound wave acquired by the device 206, or the device The wireless LAN communication area to which connection is permitted can be changed according to the entrance place to a predetermined building or the like where 206 is located. For this reason, the wireless LAN communication area permitted to be used by the user can be changed according to the location and time, and the network security of the wireless LAN communication system can be further improved.

  The above-described embodiments are presented as examples, and are not intended to limit the scope of the present invention. This novel embodiment can be implemented in various other forms. Various omissions, replacements, and changes may be made without departing from the scope of the invention.

  For example, in the above description of the embodiment, the BLE communication area 6 using Bluetooth communication is generated as the second communication range in the wireless LAN communication area 5. However, instead of Bluetooth communication, ultrasonic waves (sound) having a predetermined frequency such as ultrasonic waves having a frequency close to an audible wave may be used. In this case, each device outputs an ultrasonic wave via the speaker unit, and collects an ultrasonic wave output from another device by the microphone unit.

  In this case, the second communication range can be easily adjusted by adjusting the output level of the ultrasonic wave (sound). In addition, since the ultrasonic wave (sound) is easily shielded, the possibility of eavesdropping by a third party can be extremely low.

  Further, instead of Bluetooth communication, optical communication using light of a predetermined wavelength such as infrared light or visible light may be used. In this case, each device emits light of a predetermined wavelength via the light emitting unit, and receives light from other devices via the light receiving unit. Even in this case, the second communication range can be easily adjusted by adjusting the output level of the light emitted from the light emitting unit. In addition, since light is easily shielded, the possibility of eavesdropping by a third party can be extremely low.

  Such embodiments and modifications of the embodiments are included in the scope and gist of the invention, and are included in the invention described in the claims and the equivalents thereof.

DESCRIPTION OF SYMBOLS 1 Communication range limitation apparatus 2 Smartphone 3 Printer apparatus 4 Projector apparatus 5 Wireless LAN communication area 6 BLE communication area 6 'BLE communication area 7 Wireless LAN communication impossible area 15 Input / output I / F
16 Wireless LANAP unit 17 BLE communication unit 31 Wireless LAN communication unit 32 BLE communication unit 47 Wireless LAN communication unit 48 BLE communication unit 67 Wireless LAN communication unit 68 BLE communication unit 75 Device connection unit 76 Peripheral device connection unit 77 Detachment detection unit 78 Wireless LANAP control unit 79 BLE communication control unit 81 print request unit 82 wireless LAN communication control unit 83 BLE communication control unit 85 printing unit 86 wireless LAN communication control unit 87 BLE communication control unit 201 communication range restriction system 206 device (smart phone)
207 devices (PC)
208 Access Point Device 209 Access Point Device 212 Communication Information Server 220 Access Point Function 221 BLE Communication Function 222 Timer Function 225 Wireless LAN Communication Function 226 BLE Communication Function 227 Wireless LAN Communication Function 228 BLE Communication Function 241 Disconnection Detection Function 242 Communication Information List Storage Function 250 Wireless LAN access point function 251 Communication information list

JP 2014-060479 A JP 2013-236316 A

Claims (8)

A communication unit that performs wireless communication of a second communication method different from the first communication method within a second communication range that is narrower than the first communication range that performs wireless communication of the first communication method;
An acquisition unit that acquires identification information from the device when wireless communication of the second communication method is performed with the device;
For a plurality of access point devices, a storage unit that stores setup information assigned for each identification information;
Setup information corresponding to the identification information acquired from the device is read from the storage unit and transmitted to the device;
A disconnecting unit that disconnects the communication line of the first communication method established between the device and the access point device using the setup information when the device moves out of the second communication range. And a communication device. The disconnection unit disconnects the communication line of the first communication method when a predetermined time has elapsed since the establishment of the communication line of the first communication method. Communication device. The storage unit stores setup information of the access point device assigned for each connection start time that is a start time of wireless communication of the second communication method among the plurality of access point devices. ,
The communication apparatus according to claim 1, wherein the transmission unit transmits setup information of the access point device corresponding to the connection start time to the device. In the storage unit, among the plurality of access point devices, setup information of the access point device assigned for each current position of the device is stored,
The communication according to any one of claims 1 to 3, wherein the transmission unit transmits the setup information corresponding to the current position of the device acquired from the device to the device. apparatus. The storage unit stores flag information to which different values are assigned for each sound wave collected by the device,
The said transmission part reads the setup information corresponding to the flag information transmitted according to the sound wave which the said apparatus collected the sound from the said memory | storage part, and transmits to the said apparatus. The communication device according to any one of the above. Communication in which the communication unit performs wireless communication of a second communication method different from the first communication method within a second communication range narrower than the first communication range in which wireless communication of the first communication method is performed. Steps,
An obtaining step for obtaining identification information from the device when wireless communication of the second communication method is performed with the device;
A transmission unit reads setup information corresponding to the identification information acquired from the device from a storage unit in which setup information assigned for each identification information is stored for a plurality of access point devices, and A sending step to send;
When the device moves out of the second communication range, the disconnection unit disconnects the communication line of the first communication method established between the device and the access point device using the setup information. And a disconnecting step. A plurality of access point devices forming a first communication range, each having a different communication range, for performing wireless communication of the first communication method;
A device that establishes a wireless communication line of the first communication method using setup information with the access point device;
A communication unit configured to perform wireless communication of a second communication method different from the first communication method within a second communication range narrower than the first communication range of performing wireless communication of the first communication method; A communication system comprising:
The communication device
An acquisition unit that acquires identification information from the device when wireless communication of the second communication method is performed with the device by the communication unit;
A storage unit that stores setup information assigned to each of the identification information for a plurality of the access point devices;
A setup unit that reads setup information corresponding to the identification information acquired from the device from the storage unit, and transmits the setup information to the device;
A disconnecting unit that disconnects the communication line of the first communication method established between the device and the access point device using the setup information when the device moves out of the second communication range; A communication system comprising: Computer
A communication unit that performs wireless communication of a second communication method different from the first communication method within a second communication range that is narrower than the first communication range that performs wireless communication of the first communication method;
An acquisition unit that acquires identification information from the device when wireless communication of the second communication method is performed with the device;
A transmission unit that reads setup information corresponding to the identification information acquired from the device from a storage unit that stores setup information assigned to each identification information for a plurality of access point devices, and transmits the setup information to the device When,
A disconnecting unit that disconnects the communication line of the first communication method established between the device and the access point device using the setup information when the device moves out of the second communication range. Communication program to make it function.

Images