JP2021175069A - Wireless communication system, wireless communication device, wireless connection method and program - Google Patents

Abstract

To provide a wireless communication system capable of achieving easy wireless connection using an encryption method with high cipher strength.SOLUTION: A wireless communication system comprises a wireless communication device 20 and a wireless communication terminal 10. The wireless communication device 20 includes: an analysis unit 203 that analyzes a connection request received from a wireless communication terminal 10 to obtain an encryption method included in the connection request; a comparison unit 207 that compares security strength of the obtained encryption method with security strength of a plurality of available encryption methods; and a generation unit 204 that generates a connection response including the plurality of available encryption methods having security strength higher than that of the obtained encryption method if such encryption methods having higher security strength are available for the wireless communication device 20. The wireless terminal 10 includes: an analysis unit 103 that analyzes the connection response received from the wireless communication device 20 to obtain the encryption methods included in the connection response; and a determination unit 106 that determines whether the obtained encryption methods are available for the wireless communication terminal 10.SELECTED DRAWING: Figure 1

Description

The present invention relates to wireless communication systems, wireless communication devices, wireless connection methods and programs.

In recent years, with the spread of wireless LAN (Wireless Local Area Network), various communication terminals are connected to the network via wireless LAN. When connecting a wireless communication terminal to a network via a wireless LAN, it is necessary to connect the wireless communication terminal (station) to a wireless communication device (access point). At this time, the user sets the SSID (Service Set Identifier), which is an identifier of the access point, and the key information in the station.

From the viewpoint of security, it is preferable that both the station and the access point can be used and the wireless LAN is encrypted by a strong encryption method. For example, Patent Document 1 discloses a technique for wirelessly connecting using a stronger encryption method.

Japanese Unexamined Patent Publication No. 2011-151541

The inventor has found the following problems with respect to the wireless communication system.
In the technique disclosed in Patent Document 1, security is improved by connecting a station to an access point by a stronger encryption method. However, in the technique disclosed in Patent Document 1, it is necessary to connect the station to the access point once and then reconnect it by a strong encryption method.

The present disclosure has been made in view of such problems, and an object of the present disclosure is to provide a wireless communication system, a wireless communication device, a wireless connection method, and a program that can be easily wirelessly connected by a high-strength encryption method. ..

The wireless communication system according to one aspect of the present disclosure is
Wireless communication device and
A wireless communication terminal capable of wirelessly connecting to the wireless communication device is provided.
The wireless communication device is
A wireless communication unit that wirelessly communicates with a wireless communication terminal,
An analysis unit that analyzes the connection request received from the wireless communication terminal and acquires the encryption method included in the connection request.
A comparison unit that compares the security strength of the acquired encryption method with the security strength of a plurality of available encryption methods.
When the wireless communication device can use an encryption method having a security strength higher than that of the acquired encryption method, a creation unit for creating a connection response including the plurality of encryption methods having a higher security strength is provided. ,
The wireless communication terminal is
A wireless communication unit that wirelessly communicates with the wireless communication device,
An analysis unit that analyzes the connection response received from the wireless communication device and acquires the encryption method included in the connection response.
A determination unit for determining whether or not the acquired encryption method can be used by the wireless communication terminal is provided.

The wireless communication device according to one aspect of the present disclosure is
A wireless communication unit that wirelessly communicates with a wireless communication terminal,
An analysis unit that analyzes the connection request received from the wireless communication terminal and acquires the encryption method included in the connection request.
A comparison unit that compares the security strength of the acquired encryption method with the security strength of a plurality of available encryption methods.
When an encryption method having a higher security strength than the acquired encryption method can be used, a creation unit for creating a connection response including the plurality of encryption methods having a higher security strength is provided.

The wireless connection method according to one aspect of the present disclosure is
The wireless communication device
The process of analyzing the connection request received from the wireless communication terminal and acquiring the encryption method included in the connection request, and
A step of comparing the security strength of the acquired encryption method with the security strength of a plurality of encryption methods that can be used by the wireless communication device.
The wireless communication terminal
When the wireless communication device can use an encryption method having a higher security strength than the acquired encryption method, a step of creating a connection response including the plurality of encryption methods having a higher security strength, and
The process of analyzing the connection response received from the wireless communication device and acquiring the encryption method included in the connection response, and
A step of determining whether or not the acquired encryption method can be used by the wireless communication terminal is provided.

The program according to one aspect of the present disclosure is
The process of analyzing the connection request received from the wireless communication terminal and acquiring the encryption method included in the connection request, and
A process of comparing the security strength of the acquired encryption method with the security strength of a plurality of encryption methods that can be used by the wireless communication device.
When the wireless communication device can use an encryption method having a higher security strength than the acquired encryption method, a step of creating a connection response including the plurality of encryption methods having a higher security strength, and
Let the computer run.

According to the present disclosure, it is possible to provide a wireless communication system, a wireless communication device, a wireless connection method and a program that can be easily wirelessly connected by a high-strength encryption method.

It is a block diagram which shows the structure of the wireless communication system which concerns on 1st Embodiment. It is a flowchart which shows the flow of the wireless connection method which concerns on 1st Embodiment. It is a block diagram which shows the structure of the wireless communication system which concerns on 2nd Embodiment. It is a schematic diagram which shows an example of exchange of an access point. It is a sequence chart which shows the flow of connection request response processing. This is an example of information stored in a wireless frame. It is a sequence chart which shows the flow of connection response processing.

Hereinafter, embodiments of the present disclosure will be described in detail with reference to the drawings. In each drawing, the same or corresponding elements are designated by the same reference numerals, and duplicate explanations are omitted as necessary for the sake of clarity of explanation.

<Embodiment 1>
FIG. 1 is a block diagram showing a configuration of a wireless communication system according to the first embodiment. The wireless communication system 1 includes a wireless communication terminal 10 and a wireless communication device 20. The wireless communication terminal 10 can be wirelessly connected to the wireless communication device. The wireless communication terminal 10 includes a wireless communication unit 101, an analysis unit 103, and a determination unit 106. The wireless communication device 20 includes a wireless communication unit 201, an analysis unit 203, a creation unit 204, and a comparison unit 207.

The wireless communication unit 101 wirelessly communicates with the wireless communication device 20. The wireless communication unit 101 performs wireless communication by transmitting and receiving a wireless frame to and from the wireless communication unit 201. The radio frame includes, for example, a connection request or connection response. The analysis unit 103 analyzes the connection response received from the wireless communication device 20 and acquires the encryption method included in the connection response. The determination unit 106 determines whether or not the wireless communication terminal 10 can use the encryption method acquired by the analysis unit 103.

The wireless communication unit 201 performs wireless communication with the wireless communication terminal 10. The analysis unit 203 analyzes the connection request received from the wireless communication terminal 10 and acquires the encryption method included in the connection request. The comparison unit 207 compares the security strength of the encryption method acquired by the analysis unit 203 with the security strength of the encryption method that can be used by the wireless communication device 20. When the wireless communication device 20 can use an encryption method having a higher security strength than the encryption method acquired by the analysis unit 203, the creation unit 204 creates a connection response including the encryption method having a higher security strength. ..

FIG. 2 is a flowchart showing the flow of the wireless connection method according to the first embodiment. When the wireless communication terminal 10 is wirelessly connected to the wireless communication device 20, the wireless communication terminal 10 first transmits a connection request from the wireless communication unit 101 to the wireless communication device 20. The wireless communication device 20 receives the transmitted connection request in the wireless communication unit 201. Next, the analysis unit 203 analyzes the connection request received from the wireless communication terminal 10 and acquires the encryption method included in the connection request (step S101). Next, the comparison unit 207 compares the security strength of the encryption method acquired by the analysis unit 203 with the security strength of the encryption method that can be used by the wireless communication device 20 (step S102). When the wireless communication device 20 can use an encryption method having a higher security strength than the encryption method acquired by the analysis unit 203, the creation unit 204 creates a connection response including the encryption method having a higher security strength. (Step S103). The wireless communication unit 201 transmits the connection response created by the creation unit 204 to the wireless communication unit 101.

The wireless communication unit 101 receives the connection response transmitted by the wireless communication unit 201. The analysis unit 103 analyzes the connection response received by the wireless communication unit 101 and acquires the encryption method included in the connection response (step S104). Next, the determination unit 106 determines whether or not the wireless communication terminal 10 can use the encryption method acquired by the analysis unit 103 (step S105). When the wireless communication terminal 10 can use the encryption method acquired by the analysis unit 103, the wireless communication terminal 10 makes a wireless connection by the encryption method. As described above, the wireless connection method according to the present embodiment can easily make a wireless connection by a high-strength encryption method.

The wireless communication device 20 includes a processor, a memory, and a storage device as a configuration (not shown). Further, the storage device stores a computer program in which the wireless connection process performed by the wireless communication device 20 is implemented. Then, the processor reads the computer program from the storage device into the memory and executes the computer program. As a result, the processor realizes the functions of the wireless communication unit 201, the analysis unit 203, the creation unit 204, and the comparison unit 207.

Alternatively, the wireless communication unit 201, the analysis unit 203, the creation unit 204, and the comparison unit 207 may each be realized by dedicated hardware. Further, a part or all of each component of each device may be realized by a general-purpose or dedicated circuitry, a processor, or a combination thereof. These may be composed of a single chip or may be composed of a plurality of chips connected via a bus. A part or all of each component of each device may be realized by a combination of the above-mentioned circuit or the like and a program. Further, as a processor, a CPU (Central Processing Unit), a GPU (Graphics Processing Unit), an FPGA (field-programmable gate array), or the like can be used.

Further, when a part or all of each component of the wireless communication device 20 is realized by a plurality of information processing devices and circuits, the plurality of information processing devices and circuits may be centrally arranged. It may be distributed. For example, the information processing device, the circuit, and the like may be realized as a form in which each of the client-server system, the cloud computing system, and the like is connected via a communication network. Further, the function of the wireless communication device 20 may be provided in the SaaS (Software as a Service) format.

<Embodiment 2>
The second embodiment is a specific example of the first embodiment described above. FIG. 3 is a block diagram showing a configuration of a wireless communication system according to the second embodiment. The wireless communication system 2 includes a station 10a and an access point 20a. The station 10a is an example of the wireless communication terminal 10. The access point 20a is an example of the wireless communication device 20. The description that overlaps with the first embodiment will be omitted as appropriate.

The station 10a includes a wireless communication unit 101, a communication control unit 102, a wireless control unit 105, and a wireless setting storage unit 108. The communication control unit 102 includes a frame analysis unit 103a and a frame creation unit 104a. The frame analysis unit 103a is an example of the analysis unit 103. The wireless control unit 105 includes an encryption method comparison unit 106a and a wireless setting storage unit 107a. The encryption method comparison unit 106a is an example of the determination unit 106. The station 10a is an information processing device that can be wirelessly connected to the access point 20a, and is realized by a computer.

The wireless communication unit 101 can transmit and receive wireless frames. For example, the wireless communication unit 101 transmits a wireless frame including a connection request to the access point 20a, and receives the wireless frame including the connection response from the access point 20a. The connection response includes an encryption method and an SSID that the access point 20a notifies the station 10a. The frame analysis unit 103a analyzes the wireless frame received by the wireless communication unit 101, and acquires the information of the encryption method included in the wireless frame and the available SSID. The frame creation unit 104a creates a wireless frame for connecting to the access point 20a. The wireless communication unit 101 transmits the wireless frame created by the frame creation unit 104a.

The encryption method comparison unit 106a determines whether or not the station 10a can use the encryption method notified from the access point 20a. The wireless setting storage unit 107a records the setting for connecting to the access point 20a in the wireless setting storage unit 108. The wireless setting storage unit 108 stores the settings for the station 10a to connect to the access point 20a. For example, when the station 10a can use the encryption method notified from the access point 20a, the wireless setting storage unit 107a stores the setting for connecting by the encryption method in the wireless setting storage unit 108.

The access point 20a includes a wireless communication unit 201, a communication control unit 202, and a setting management unit 205. The communication control unit 202 includes a frame analysis unit 203a and a frame creation unit 204a. The frame analysis unit 203a is an example of the analysis unit 203. The frame creation unit 204a is an example of the creation unit 204. The setting management unit 205 includes a setting acquisition unit 206a and a setting comparison unit 207a. The setting comparison unit 207a is an example of the comparison unit 207. The access point 20a is an information processing device that can be wirelessly connected to the station 10a, and is realized by a computer.

The wireless communication unit 201 can transmit and receive wireless frames. The wireless communication unit 201 receives, for example, a wireless frame including a connection request from the station 10a, and transmits a wireless frame including a connection response to the station 10a. The connection request includes an SSID for which the station 10a requests a connection. The frame analysis unit 203a analyzes the wireless frame received by the wireless communication unit 201 and acquires the SSID information included in the wireless frame. The frame creation unit 204a creates a wireless frame for connecting to the station 10a. The frame creation unit 204a stores, for example, the encryption method information and the SSID in the wireless frame. The wireless communication unit 201 transmits the wireless frame created by the frame creation unit 204a.

The setting acquisition unit 206a acquires the wireless LAN setting information of the access point 20a. The setting comparison unit 207a compares the information acquired by the setting acquisition unit 206a with the SSID requested to be connected from the station 10a. As a result, the setting comparison unit 207a determines whether or not the access point 20a can use an encryption method having a higher security strength than the encryption method requested to be connected from the station 10a.

Hereinafter, processing when connecting the station 10a to the access point 20a will be described. FIG. 4 is a schematic diagram showing an example of exchanging access points. As shown in FIG. 4, a case where the station 10a wirelessly connected to the old access point 20b is connected to the new access point 20a will be described. The new access point 20a can use an encryption method having a higher security strength than the old access point 20b. Specifically, for example, the old access point 20b can be connected by WEP (Wired Equivalent Privacy), and the new access point 20a can be connected by WEP or WPA2 (Wi-Fi Protected Access 2). WPA2 is an encryption method with higher security strength than WEP. In the example shown in FIG. 4, the wireless setting of the old access point 20b is taken over and wirelessly connected to the new access point 20a.

When connecting the station 10a to the new access point 20a, the station 10a transmits a connection request to the access point 20a. The operation of the access point 20a at the time of connection response processing will be described with reference to FIG. FIG. 5 is a sequence chart showing the flow of connection request response processing. The station 10a is set to connect to the SSID (AP-SSID-1) of the old access point 20b. When the station 10a connects to the new access point 20a, the station 10a first transmits a probe request (connection request) to the access point 20a (step S201). The Probe request includes AP-SSID-1 as SSID information.

The access point 20a receives the probe request and acquires the SSID information included in the probe request (step S202). Next, the access point 20a compares the SSID that can be used by itself with the SSID information acquired in step S202 (step S203). The access point 20a has AP-SSID-1 and AP-SSID-2 as SSIDs that can be used by itself. The encryption method corresponding to AP-SSID-1 is WEP. The encryption method corresponding to AP-SSID-2 is WPA2. That is, the access point 20a can use an encryption method having higher security strength than the encryption method corresponding to the SSID for which the connection request has been made.

When it is possible to use an encryption method having a higher security strength than the encryption method corresponding to the SSID for which the connection request has been made (step S204Yes), the access point 20a uses AP-SSID-2 as the SSID information in the Probe response. Store in the wireless frame (step S205). When it is not possible to use an encryption method having a higher security strength than the encryption method corresponding to the SSID for which the connection request has been made (step S204No), the access point 20a uses the wireless frame for the SSID information for which the connection request has been made. Store in. Next, the access point 20a transmits a probe response (connection response) to the station 10a (step S206).

FIG. 6 is an example of the information stored in the probe response by the access point 20a. For example, in step S205, the access point 20a stores SSID information and information such as an encryption method as one of the Vendor Specification Tags in the probe response.

Next, the operation of the access point 20a at the time of connection response processing will be described with reference to FIG. 7. FIG. 7 is a sequence chart showing the flow of connection response processing. Upon receiving the Probe response, the station 10a confirms the Vendor Specification Tag in the Probe response and confirms whether or not the AP SSID Information Tag is set. The AP SSID Information Tag is information indicating that the access point 20a can use an encryption method having a higher security strength than the AP-SSID-1. When the AP SSID Information Tag is set (step S301Yes), the station 10a acquires SSID information and information such as an encryption method from the AP SSID Information Tag (step S302). When the AP SSID Information Tag is not set (step S301No), the station 10a performs a process for connecting to the AP-SSID-1 (step S303).

Next, the station 10a determines whether or not the access point 20a can be connected based on the AP SSID Information information (AP-SSID-2) acquired in step S302 (step S304). When it is possible to connect to the AP-SSID-2 (step S305Yes), the station 10a connects to the AP-SSID-2 (step S306). If the AP-SSID-2 cannot be connected (step S305No), the station 10a connects to the AP-SSID-1 (step S307). After connecting to the AP-SSID-2 (step S306), the station 10a sends a probe request to the access point 20a (step S308). At this time, the probe request shall include AP-SSID-2 as SSID information. Next, the station 10a performs a connection process of WPA2, which is an encryption method corresponding to AP-SSID-2 (step S309). Next, the station 10a saves the connection setting to the AP-SSID-2 (step S310).

In this way, the station 10a can be easily wirelessly connected to the access point 20a by a high-strength encryption method. In step S309, the station 10a and the access point 20a exchange authentication information and the like for connecting with WPA2. At this time, the station 10a uses the pre-authentication key of AP-SSID-2 as the key information. AP-SSID-2 may have the same key information as AP-SSID-1. For example, the WEP key of AP-SSID-1 may be set as the pre-authentication key of AP-SSID-2. As a result, it is possible to avoid the wireless connection setting at the station 10a. Therefore, the user can wirelessly connect with a higher security encryption method without performing an additional operation. Further, the key information different from that of AP-SSID-1 may be set in AP-SSID-2.

<Other embodiments, etc.>
In the above-described embodiment, the case where there is one station (communication terminal) has been described, but wireless connection is also possible when there are a plurality of stations. Also, when there are a plurality of access points (wireless communication devices), wireless connection is possible in the same manner. The encryption method that can be used by the access point is not particularly limited, and methods other than WEP and WPA2 can be similarly implemented. In the above-described embodiment, the case where the access point can use two encryption methods has been described, but the access point may be able to use three or more encryption methods. Further, the access point may use one frequency band or may use a plurality of frequency bands. The access point can also store various information in a tag other than the Vendor Specification Tag and notify the station of the information.

In the above-described embodiment, the description is made as a hardware configuration, but the present invention is not limited to this. The present disclosure can also be realized by causing the CPU to execute a computer program.

In the above example, the program can be stored and supplied to a computer using various types of non-transitory computer readable medium. Non-transitory computer-readable media include various types of tangible storage media. Examples of non-temporary computer-readable media include magnetic recording media (eg, flexible discs, magnetic tapes, hard disk drives), magneto-optical recording media (eg, magneto-optical discs), CD-ROMs (Read Only Memory), CD-Rs. CD-R / W, DVD (Digital Versatile Disc), semiconductor memory (for example, mask ROM, PROM (Programmable ROM), EPROM (Erasable PROM), flash ROM, RAM (Random Access Memory)) are included. The program may also be supplied to the computer by various types of transient computer readable medium. Examples of temporary computer-readable media include electrical, optical, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire and an optical fiber, or a wireless communication path.

The present disclosure is not limited to the above embodiment, and can be appropriately modified without departing from the spirit. Further, the present disclosure may be carried out by appropriately combining the respective embodiments.

1, 2 Wireless communication system 10 Wireless communication terminal 20 Wireless communication device 10a Station 20a, 20b Access point 101 Wireless communication unit 102 Communication control unit 103 Analysis unit 103a Frame analysis unit 104a Frame creation unit 105 Wireless control unit 106 Judgment unit 106a Encryption Method Comparison unit 107a Wireless setting storage unit 108 Wireless setting storage unit 201 Wireless communication unit 202 Communication control unit 203 Analysis unit 203a Frame analysis unit 204 Creation unit 204a Frame creation unit 205 Setting management unit 206a Setting acquisition unit 207 Comparison unit 207a Setting comparison unit

Claims (9)

Wireless communication device and
A wireless communication terminal capable of wirelessly connecting to the wireless communication device is provided.
The wireless communication device is
A wireless communication unit that wirelessly communicates with a wireless communication terminal,
An analysis unit that analyzes the connection request received from the wireless communication terminal and acquires the encryption method included in the connection request.
A comparison unit that compares the security strength of the acquired encryption method with the security strength of a plurality of available encryption methods.
When the wireless communication device can use an encryption method having a security strength higher than that of the acquired encryption method, a creation unit for creating a connection response including the plurality of encryption methods having a higher security strength is provided. ,
The wireless communication terminal is
A wireless communication unit that wirelessly communicates with the wireless communication device,
An analysis unit that analyzes the connection response received from the wireless communication device and acquires the encryption method included in the connection response.
A determination unit for determining whether or not the acquired encryption method can be used by the wireless communication terminal is provided.
Wireless communication system. The wireless communication system according to claim 1, wherein the key information used for wireless connection by the encryption method having high security strength is the same as the key information of the encryption method included in the connection request. The wireless communication device is
Further, a setting acquisition unit for acquiring wireless setting information that can be used by the wireless communication device is provided.
By comparing the information acquired by the setting acquisition unit with the information requested for connection, the wireless communication device performs an encryption method having higher security strength than the acquired encryption method. Determine if it is available,
The wireless communication system according to claim 1 or 2. When the wireless communication terminal can use the acquired encryption method, the wireless communication terminal connects to the wireless communication device by the acquired encryption method.
The wireless communication system according to any one of claims 1 to 3. When the wireless communication terminal cannot use the acquired encryption method, the wireless communication terminal connects to the wireless communication device by the encryption method requested for connection.
The wireless communication system according to any one of claims 1 to 4. A wireless communication unit that wirelessly communicates with a wireless communication terminal,
An analysis unit that analyzes the connection request received from the wireless communication terminal and acquires the encryption method included in the connection request.
A comparison unit that compares the security strength of the acquired encryption method with the security strength of a plurality of available encryption methods.
When an encryption method having a higher security strength than the acquired encryption method can be used, a creation unit for creating a connection response including the plurality of encryption methods having a higher security strength is provided.
Wireless communication device. The wireless communication device according to claim 6, wherein the key information used for wireless connection by the encryption method having high security strength is the same as the key information of the encryption method included in the connection request. The wireless communication device
The process of analyzing the connection request received from the wireless communication terminal and acquiring the encryption method included in the connection request, and
A step of comparing the security strength of the acquired encryption method with the security strength of a plurality of encryption methods that can be used by the wireless communication device.
When the wireless communication device can use an encryption method having a higher security strength than the acquired encryption method, a step of creating a connection response including the plurality of encryption methods having a higher security strength, and
The wireless communication terminal
The process of analyzing the connection response received from the wireless communication device and acquiring the encryption method included in the connection response, and
A step of determining whether or not the acquired encryption method can be used by the wireless communication terminal is provided.
Wireless connection method. The process of analyzing the connection request received from the wireless communication terminal and acquiring the encryption method included in the connection request, and
A process of comparing the security strength of the acquired encryption method with the security strength of a plurality of encryption methods that can be used by the wireless communication device.
When the wireless communication device can use an encryption method having a higher security strength than the acquired encryption method, a step of creating a connection response including the plurality of encryption methods having a higher security strength, and
A program that causes a computer to run.

Images