JP2021184577A - Computer program for terminal device and communication device - Google Patents

Abstract

To provide a new technique in a situation where wireless connection is established between a communication device and an external device.SOLUTION: A terminal device acquires first identification information for identifying a first communication device, generating a first public key of the first communication device by using the acquired first identification information, transmits, to the first communication device, a first authentication request for which the generated first public key is used, and transmits first connection information to the first communication device when a first authentication response is received from the first communication device. The first connection information is information for establishing first wireless connection between the first communication device and the external device.SELECTED DRAWING: Figure 4

Description

This specification discloses a technique in a situation where a wireless connection is established between a communication device and an external device.

Patent Document 1 and Non-Patent Document 1 disclose a technique for establishing a Wi-Fi connection between a device and an access point according to the DPP (Device Provisioning Protocol) method of the Wi-Fi standard.

Japanese Unexamined Patent Publication No. 2017-11430

"Device Provisioning Protocol Specification Version 1.1.13" Wi-Fi Alliance, 2019

This specification discloses a novel technique in a situation where a wireless connection is established between a communication device and an external device.

This specification discloses a computer program for a terminal device. The terminal device may include a wireless interface for performing wireless communication and a computer. The computer program uses the following parts, that is, a first acquisition unit for acquiring the first identification information for identifying the first communication device, and the acquired first identification information. Therefore, a first authentication request using the generated first public key via the wireless interface and the first generation unit that generates the first public key of the first communication device. The radio from the first communication device in response to the first authentication request transmitting unit transmitting to the first communication device and the first authentication request being transmitted to the first communication device. The first connection information transmission unit that transmits the first connection information to the first communication device when the first authentication response is received via the interface, and the first connection information is It may function as the first connection information transmitting unit, which is information for establishing a first wireless connection between the first communication device and the external device.

According to the above configuration, the terminal device acquires the first identification information that identifies the first communication device, and uses the first identification information to generate the first public key of the first communication device. .. Therefore, the terminal device can transmit the first authentication request using the first public key to the first communication device, and further transmit the first connection information to the first communication device. Can be done. As a result, the first wireless connection is established between the first communication device and the external device. In this way, the terminal device can appropriately establish a first wireless connection between the first communication device and the external device.

Also disclosed herein are other computer programs for terminal devices. The terminal device may include a wireless interface for performing wireless communication and a computer. The computer program sends the computer to the following units, that is, a probe request transmission unit that transmits a probe request via the wireless interface, and a first communication device in response to the transmission of the probe request. To the first Probe response receiving unit that receives the first Probe response including the first related information related to the first public key of the first communication device via the wireless interface, and the first When the first probe response is received from the communication device, the first public key related to the first related information included in the first probe response is transmitted via the wireless interface. The first authentication request transmitting unit that transmits the used first authentication request to the first communication device, and the first authentication request being transmitted to the first communication device. It is a first connection information transmission unit that transmits the first connection information to the first communication device when the first authentication response is received from the first communication device via the wireless interface. The first connection information functions as the first connection information transmission unit, which is information for establishing a first wireless connection between the first communication device and the external device. You may.

According to the above configuration, the terminal device sends a probe request and receives a first probe response containing the first relevant information related to the first public key from the first communication device. Therefore, the terminal device can transmit the first authentication request using the first public key related to the first related information to the first communication device, and further, the first connection information is transmitted to the first communication device. It can be transmitted to one communication device. As a result, the first wireless connection is established between the first communication device and the external device. In this way, the terminal device can appropriately establish a first wireless connection between the first communication device and the external device.

Also disclosed herein are communication devices. The communication device has a wireless interface for executing wireless communication, a probe request receiving unit that receives a probe request from the terminal device via the wireless interface, and the probe request is received from the terminal device. Accordingly, a probe response transmission unit that transmits a probe response including related information related to the public key of the communication device to the terminal device via the wireless interface, and a case where the probe response is transmitted to the terminal device. In addition, an authentication request receiving unit that receives an authentication request using the public key related to the related information included in the Probe response from the terminal device via the wireless interface, and the authentication from the terminal device. In response to the request being received, the authentication response transmission unit that transmits an authentication response to the terminal device via the wireless interface, and the terminal device when the authentication response is transmitted to the terminal device. The connection information receiving unit that receives connection information via the wireless interface, and the connection information is information for establishing a wireless connection between the communication device and the external device. When the connection information is received from the receiving unit and the terminal device, the connection information is used to establish the wireless connection between the communication device and the external device via the wireless interface. It may be provided with an establishment part.

According to the above configuration, the communication device sends a probe response including relevant information related to the public key to the terminal device in response to receiving the probe request from the terminal device. Therefore, the communication device can receive the authentication response using the public key related to the related information from the terminal device, and can further receive the connection information from the terminal device. Therefore, the communication device can establish a wireless connection with the external device by using the connection information. In this way, the communication device can appropriately establish a wireless connection with the external device.

A computer-readable recording medium for storing the computer program for the terminal device, the terminal device itself, and a method executed by the terminal device are also new and useful. Computer programs for the above-mentioned communication devices, computer-readable recording media for storing the computer programs, and methods executed by the communication devices are also new and useful. Further, a communication system including the above two or more devices (for example, a terminal device and a first communication device) is also new and useful.

The configuration of the communication system is shown. The hardware configuration of each device is shown. The sequence diagram of the process executed by each device is shown. The sequence diagram which continued with FIG. 3 is shown. The sequence diagram which continued with FIG. 4 is shown. The sequence diagram which continued with FIG. 5 is shown.

(Configuration of communication system 2: FIG. 1)
As shown in FIG. 1, the communication system 2 includes a terminal 10, an AP (abbreviation of Access Point) 80, a plurality of printers 100A to 100E, a confirmation server 200, and a service providing server 300.

The terminal 10, AP80, and printers 100D and 100E exist in the company XXX. The terminal 10 is used by the network administrator of the company XXX. Each printer 100D, 100E has established a wireless connection (hereinafter, referred to as "Wi-Fi connection") according to the Wi-Fi standard with AP80. The AP80 is connected to the Internet 4. The confirmation server 200 and the service providing server 300 are installed on the Internet 4. Hereinafter, the service providing server 300 will be referred to as "SP (abbreviation of Service Providing) server 300".

The printers 100A to 100C are purchased by the company XXX and delivered to the company XXX. In this embodiment, a situation will be described in which a Wi-Fi connection is established between each printer 100A to 100C and AP80 by using the terminal 10 and the confirmation server 200. Then, after that, the information about each printer 100A to 100C is registered in the service providing server 300.

(Configuration of terminal 10: FIG. 2)
Subsequently, the hardware configurations of the devices 10, 100A, and 200 will be described with reference to FIG. The terminal 10 is a portable terminal device such as a mobile phone (for example, a smartphone), a PDA, or a tablet PC. In the modified example, the terminal 10 may be a stationary PC, a notebook PC, or the like. The terminal 10 includes an operation unit 12, a display unit 14, a camera 16, a Wi-Fi interface 20, and a control unit 30. Each unit 12 to 30 is connected to a bus line (reference numeral omitted).

The operation unit 12 includes a plurality of keys. The user can input various instructions to the terminal 10 by operating the operation unit 12. The display unit 14 is a display for displaying various information. The camera 16 is a device for photographing an object. In this embodiment, the camera 16 is used to capture the QR code® of the AP80.

The Wi-Fi interface 20 is a wireless interface for executing Wi-Fi communication in accordance with the Wi-Fi standard. The Wi-Fi standard is, for example, the IEEE (Institute of Electrical and Electronics Engineers, Inc.) 802.11 standard and the equivalent standard (for example, 802.11a, 11b, 11g, 11n, 11ac, etc.). According to the above, it is a wireless communication standard for executing wireless communication. In particular, the Wi-Fi interface 20 supports the DPP (abbreviation of Device Provisioning Protocol) method developed by the Wi-Fi Alliance. Details of the DPP method are described in the standard "Device Provisioning Protocol Specification Version 1.1.13" prepared by Wi-Fi Alliance.

The control unit 30 includes a CPU 32 and a memory 34. The CPU 32 executes various processes according to the programs 40 and 42 stored in the memory 34. The memory 34 is composed of a volatile memory, a non-volatile memory, and the like. The OS (abbreviation of Operating System) program 40 is a program for executing basic operations. The printer application 42 (hereinafter, simply referred to as “application 42”) executes processing according to the DPP method to establish a Wi-Fi connection between the terminal 10 and the AP80, or each printer 100A to 100C. This is a program for establishing a Wi-Fi connection between the printer and the AP80. The application 42 is installed in the terminal 10 from a server (not shown) on the Internet provided by the vendors of the printers 100A to 100C, for example.

(Configuration of printer 100A)
The printer 100A is a peripheral device (for example, a peripheral device of the terminal 10) capable of executing a printing function. The printer 100A is manufactured by vendor V1 (see FIG. 1). The printer 100A has a serial number "123" which is information for identifying the printer (see FIG. 1). The printer 100A includes an operation unit 112, a display unit 114, a print execution unit 118, a Wi-Fi interface 120, and a control unit 130. Each unit 112 to 130 is connected to a bus line (reference numeral omitted).

The operation unit 112 includes a plurality of keys. The user can input various instructions to the printer 100A by operating the operation unit 112. The display unit 114 is a display for displaying various information. The print execution unit 118 includes a printing mechanism such as an inkjet method and a laser method. The Wi-Fi interface 120 is the same as the Wi-Fi interface 20 of the terminal 10. That is, the Wi-Fi interface 120 supports the DPP method. The Wi-Fi interface 120 has a MAC address "AAA" which is information for identifying the Wi-Fi interface (in other words, information for identifying the printer) (see FIG. 1). The MAC address is information used when a device having the MAC address communicates with another device.

The control unit 130 includes a CPU 132 and a memory 134. The CPU 132 executes various processes according to the program 140 stored in the memory 134. The memory 134 is composed of a volatile memory, a non-volatile memory, and the like.

The printers 100B and 100C are also manufactured by the vendor V1. Each of the printers 100B and 100C has the same hardware configuration as the printer 100A. The printer 100B has a serial number "234" and a MAC address "BBB". The printer 100C has a serial number "345" and a MAC address "CCC".

The printer 100D and the printer 100E installed in the company XXX are manufactured by the vendor V1 and the vendor V2, respectively. Each printer 100D and 100E has the same hardware configuration as the printer 100A. The printer 100D has a MAC address "DDD". The printer 100E has a MAC address "EEE".

(Configuration of confirmation server 200)
The confirmation server 200 is a server used by the terminal 10 to confirm whether or not the printer should establish a Wi-Fi connection with the AP80. The confirmation server 200 is installed on the Internet 4 by the vendor V1. The confirmation server 200 includes a communication interface 220 and a control unit 230. Each part 220, 230 is connected to a bus line (reference numeral omitted).

The communication interface 220 is connected to the Internet 4. The control unit 230 includes a CPU 232 and a memory 234. The CPU 232 executes various processes according to the program 240 stored in the memory 234. The memory 234 is composed of a volatile memory, a non-volatile memory, and the like.

The memory 234 stores the management table 250. The management table 250 is a table for storing the MAC addresses "AAA" and the like of the newly delivered printers 100A to 100C.

(Configuration of SP server 300)
The SP server 300 is a server that provides services to printer users. In this embodiment, the service is a service of shipping a new consumable to the user when the remaining amount of the consumable of the printer (for example, the ink in the ink cartridge) is low. In the modification, the SP server 300 may provide other services (for example, Internet connection service, mail printing service, cloud printing service, etc.). The SP server 300 is installed on the Internet 4 by the vendor V1. Although not shown, the SP server 300 includes a communication interface and a control unit, similarly to the confirmation server 200.

(Processes executed by each device: FIGS. 3 to 6)
Subsequently, with reference to FIGS. 3 to 6, the processes executed by the respective devices 10, 80, 100A to 100E, 200, 300 will be described. In the following, for the sake of facilitation of understanding, the operation executed by the CPU (for example, CPU 32 or the like) of each device will be described mainly for each device (for example, terminal 10) without describing the CPU as the main body. Further, all communication executed by the terminal 10 and the printer 100A is executed via the Wi-Fi interfaces 20 and 120, and all communication executed by the confirmation server 200 is executed via the communication interface 220. Therefore, in the following, when explaining communication, the description "via Wi-Fi interface (or communication interface)" will be omitted.

(Establishment of Wi-Fi connection between terminal 10 and AP80: Fig. 3)
As described above, each printer 100A to 100C is delivered to the company XXX. A Wi-Fi connection is established between the terminal 10 and the AP80 before the Wi-Fi connection is established between the printers 100A to 100C and the AP80 in the company XXX. A process for establishing a Wi-Fi connection between the terminal 10 and the AP80 will be described with reference to FIG.

In the T100, the terminal 10 receives an operation of invoking the application 42 from the user (that is, the network administrator of the company XXX). All of the following processes executed by the terminal 10 are realized by the application 42.

A QR code is affixed to the housing of the AP80. The QR code is a coded version of information such as the public key PKap of the AP80 and the MAC address of the AP80. At T102, the terminal 10 accepts an operation of reading a QR code from the user using the camera 16.

At T104, the terminal 10 reads the QR code and decodes the QR code. As a result, the terminal 10 acquires information such as the public key PKap of the AP80 and the MAC address of the AP80. The processing of T104 corresponds to Bootstrapping of the DPP method.

In the T110, the terminal 10 transmits the Authentication Request using the public key PKap acquired in the T104 to the AP80 with the MAC address acquired in the T104 as the transmission destination. In the following, Authentication will be referred to as "Out", and Request will be referred to as "Req". The Next Req is a signal requesting the execution of authentication. Specifically, the terminal 10 first generates a shared key by using the private key of the terminal 10 and the public key PKap of the AP80, and encrypts the encrypted data by using the shared key to encrypt the random value. To generate. Then, the terminal 10 transmits an After Req including the public key of the terminal 10, the encrypted data, and the Capability of the terminal 10 to the AP80. The Capability of the terminal 10 includes a value indicating that it can operate only as a DPP type Configurator.

When the AP80 receives the Auth Req from the terminal 10 in the T110, the AP80 executes the authentication of the encrypted data contained in the Auth Req in the T111. Specifically, the AP80 uses the public key of the terminal 10 included in the Auth Req and the private key of the AP80 to perform a shared key, and uses the shared key to decrypt the encrypted data. The AP80 executes the processing after T112 when the decryption of the encrypted data is successful, that is, when the authentication is successful.

At T112, the AP80 transmits an Next Response containing the Capability of the AP80 to the terminal 10. In the following, Response will be referred to as "Res". The Capability of AP80 includes a value indicating that it can operate only as an Enrollle of the DPP method.

When the terminal 10 receives the Auth Res from the AP80 in the T112, the terminal 10 determines that the Capability (that is, Enrollle) of the AP80 contained in the Auth Res does not collide with the Capability (that is, the Configurator) of the terminal 10 itself. Then, the terminal 10 determines to operate as a Configurator at T114. The Configurator is a device that plays a role of transmitting a Configuration Object (hereinafter referred to as "CO") described later to the Enrollle.

The AP80 also determines to operate as an Enrollle at T116. The Enrollee is a device responsible for receiving CO from the Configurator. The processing of T110 to T116 corresponds to the DPP method Out.

The terminal 10 receives the Cofiguration Req from the AP80 at the T120. In the following, Cofiguration will be referred to as "Config". The Config Req is a signal requesting the transmission of CO.

When the terminal 10 receives the Config Req from the AP80, the terminal 10 generates CO for AP. Specifically, the terminal 10 first generates a Signed Connector for AP (hereinafter referred to as "SC"), which is information to be used by the AP 80 to establish a Wi-Fi connection. The SC for AP includes, for example, a group ID which is an identifier for identifying a wireless network. Then, the terminal 10 generates an AP CO including an AP SC, and at T122, transmits a Cofi Res containing the AP CO to the AP 80. The processing of T120 and T122 corresponds to Cofi of the DPP method.

The terminal 10 then generates a terminal SC, which is information that should be used by the terminal 10 to establish a Wi-Fi connection. The terminal SC includes the same group ID as the group ID included in the AP SC. Then, the terminal 10 transmits a Discovery Req including the SC for the terminal to the AP80 at the T130. The Discovery Req is a signal requesting transmission of the other party's SC.

When the AP80 receives the Discovery Req from the terminal 10 in the T130, the AP80 uses the AP SC to authenticate the terminal SC included in the Discovery Req. The AP80 generates a connection key when the authentication of the SC for the terminal is successful. Then, the AP80 transmits the Discovery Res including the SC for AP to the terminal 10 at the T132.

When the terminal 10 receives the Discovery Res from the AP80 in the T132, the terminal 10 uses the terminal SC to authenticate the AP SC included in the Discovery Res. The terminal 10 generates a connection key when the authentication of the AP SC is successful. The connection key generated here is the same as the connection key generated by AP80. That is, the connection key is shared by the terminal 10 and the AP80. The processing of T130 and T132 corresponds to the Network Access of the DPP method.

Next, the terminal 10 uses the connection key to execute 4-way-handshake communication with the AP80. As a result, in T140, a Wi-Fi connection is established between the terminal 10 and the AP80. As a result, a wireless network in which the AP80 operates as a master station is formed, and the terminal 10 belongs to the wireless network as a slave station.

(Public key generation: Figure 4)
Subsequently, with reference to FIG. 4, a process in which the terminal 10 generates a public key for each of the printers 100A to 100C will be described. When each printer 100A to 100C is purchased by the company XXX, an employee of a store such as the printer 100A inputs the MAC addresses "AAA" to "CCC" of each printer 100A to 100C into the confirmation server 200. From this, the confirmation server 200 acquires the three MAC addresses "AAA" to "CCC" and registers these information in the management table 250 (see FIG. 2).

The terminal 10 broadcasts the Probe Req at the T150. As a result, the Probe Req is received by all the printers 100A to 100E existing in the company XXX. The Probe Req is a signal requesting the transmission of the Probe Res. In the modified example, the Probe Req may be transmitted by multicast in which the range of the IP address is specified, instead of broadcasting.

In response to receiving the Probe Req from the terminal 10 in the T150, the printer 100A transmits the Probe Res including the MAC address "AAA" of the printer 100A and the vendor information indicating the vendor V1 to the terminal 10 in the T151.

Similarly, at T152 to T154, each printer 100B to 100D transmits a Probe Res including the MAC address of the printer and the vendor information indicating the vendor V1 to the terminal 10. Further, in T155, the printer 100E transmits a Probe Res including the MAC address "EEE" of the printer 100E and the vendor information indicating the vendor V2 to the terminal 10.

The terminal 10 acquires the MAC address and vendor information of each printer 100A to 100E by receiving the Probe Res from each printer 100A to 100E in T151 to T155. Next, the terminal 10 determines in the T160 whether or not each of the printers 100A to 100E is a device (hereinafter referred to as a “target device”) for newly establishing a Wi-Fi connection with the AP80. Specifically, the terminal 10 determines that each printer 100A to 100D of the source of the Probe Res including the vendor information indicating the vendor V1 is the target device, and the transmission source of the Probe Res including the vendor information indicating the vendor V2. It is determined that the printer 100E of the above is not the target device. As a result, the terminal 10 uses the application 42 provided by the vendor V1 to perform subsequent processing on the printer (that is, the printer 100E manufactured by the vendor V2) that cannot establish a Wi-Fi connection with the AP80. You don't have to do it.

The terminal 10 transmits a confirmation request including the MAC addresses "AAA" to "DDD" of the printers 100A to 100D determined to be the target device to the confirmation server 200 via the AP80 in the T170. The confirmation request is a signal for requesting confirmation of whether or not the MAC address "AAA" or the like included in the confirmation request is the MAC address of the newly delivered printer.

When the confirmation server 200 receives the confirmation request from the terminal 10 in the T170, the MAC addresses of the MAC addresses "AAA" to "DDD" included in the confirmation request are already registered in the management table 250 (see FIG. 2). Determine if it exists. In this case, the confirmation server 200 determines that the three MAC addresses "AAA" to "CCC" have been registered. That is, the confirmation server 200 determines that each of the three printers 100A to 100C having the three MAC addresses is the target device. Further, the confirmation server 200 determines that the MAC address "DDD" has not been registered (that is, the printer 100D is not the target device).

At T172, the confirmation server 200 transmits a confirmation response including the above determination result to the terminal 10. The acknowledgment includes three MAC addresses "AAA" to "CCC" associated with the registered information, and one MAC address "DDD" associated with the unregistered information. including.

When the terminal 10 receives the confirmation response from the confirmation server 200 via the AP80 in the T172, the terminal 10 identifies the target printer for the subsequent processing (that is, T180, T210 in FIG. 5, etc.) based on the information contained in the confirmation response. do. Specifically, the terminal 10 determines that each printer 100A to 100C having each MAC address "AAA" to "CCC" associated with the information indicating registration is the target device. As a result, the terminal 10 can execute the subsequent processing on the printer 100D (that is, the printer 100D for which the Wi-Fi connection with the AP80 has been established) that does not need to newly establish the Wi-Fi connection with the AP80. You don't have to.

The terminal 10 generates a public key for each of the printers 100A to 100C determined to be the target device in the T180. Specifically, the terminal 10 first identifies the MAC address "AAA" of the printer 100A associated with the information indicating registration in the acknowledgment, and uses a predetermined first arithmetic expression. Then, the public key PKpa of the printer 100A is generated from the specified MAC address "AAA". Then, the terminal 10 stores the MAC address “AAA” in association with the generated public key PKpa. Similarly, the terminal 10 generates the public key PKpb of the printer 100B from the MAC address “BBB”, and stores the MAC address “BBB” and the generated public key PKpb in association with each other. Further, the terminal 10 generates the public key PKpc of the printer 100C from the MAC address "CCC", and stores the MAC address "CCC" and the generated public key PKpc in association with each other.

(Establishment of Wi-Fi connection between each printer 100A-100C and AP80: FIG. 5)
Subsequently, the continuation process of FIG. 4 will be described with reference to FIG. The process of FIG. 5 is a process for connecting each printer 100A to 100C to the AP80 by using the terminal 10.

In T200, the printer 100A accepts the operation of the automatic connection button from the user. The button may be, for example, a hard button or a soft button (for example, a button displayed on the display unit 114).

When the printer 100A accepts the operation of the T200, the printer 100A shifts from the state in which the Next Res cannot be transmitted in response to the reception of the Next Req to the state in which the Next Res can be transmitted (that is, the standby state of the Next Req). Then, the printer 100A generates the secret key SKpa of the printer 100A from the MAC address "AAA" of the printer 100A by using the second arithmetic expression determined in advance in T202. The private key SKpa generated here is paired with the public key PKpa of the printer 100A.

As described above, in T140 of FIG. 3, the terminal 10 has already established a Wi-Fi connection with the AP80. Therefore, it is highly possible that the printer 100A can also establish a Wi-Fi connection with the AP80. Since the terminal 10 executes the following processing after T210 after establishing the Wi-Fi connection with the AP80, the Wi-Fi connection can be appropriately established between the printer 100A and the AP80.

At T210, the terminal 10 first acquires the MAC address "AAA" and the public key PKpa associated with the MAC address "AAA" from the information stored in T180 of FIG. Then, the terminal 10 transmits the acquired Req using the acquired public key PKpa to the printer 100A with the acquired MAC address "AAA" as the transmission destination. The processing of T210 is the same as that of T110 in FIG. 3, except that the MAC address “AAA” and the public key PKpa are used. Here, the Out Req is transmitted without going through the AP80 (that is, without using the wireless network). This point is the same for the following Auto Res, Config Req, and Config Res.

When the printer 100A receives the Next Req from the terminal 10 in the T210, the printer 100A authenticates the encrypted data contained in the Auth Req in the T211. The processing of T211 is the same as the processing of T111 in FIG. That is, the printer 100A generates a shared key by using the public key of the terminal 10 included in the Auth Req and the private key SKpa generated by the T202. Then, the printer 100A decrypts the encrypted data by using the shared key.

T212 to T220 are the same as T112 to T120 in FIG. 3, except that the printer 100A is used instead of AP80. The terminal 10 generates a printer SC110A including the same group ID as the group ID in the AP SC of T122 of FIG. 3, and in T222, transmits Cofi Res including the printer SC110A to the printer 100A.

T230 to T240 are the same as T130 to T140 in FIG. 3 except that the printer 100A is used instead of the terminal 10 and the printer SC110A is used instead of the terminal SC. As a result, a Wi-Fi connection is established between the printer 100A and the AP80. That is, the printer 100A belongs to the wireless network in which the AP80 operates as a master station as a slave station.

When the printer 100A establishes a Wi-Fi connection with the AP80 at the T240, it indicates that the establishment of the Wi-Fi connection is completed at the T250 without going through the AP80. ) Is transmitted to the terminal 10. As a result, it is possible to notify the terminal 10 that the establishment of the Wi-Fi connection is completed.

The printer 100A erases the private key SKpa generated in T202 at T252. As a result, it is possible to prevent a third party from accessing the printer 100A and acquiring the private key SKpa.

When the printer 100B receives the same operation as the T200 from the user, the printer 100B executes the same processing as the T202 and shifts to the standby state of Next Req. Then, when the terminal 10 receives the Result from the printer 100A in the T250, the terminal 10 transmits the Next Req to the printer 100B in the same manner as the T210. As described above, the terminal 10 starts the process for establishing the Wi-Fi connection between the printer 100B and the AP80 after the Wi-Fi connection is established between the printer 100A and the AP80. Therefore, it is possible to suppress the occurrence of an event in which a plurality of printers 100A to 100C simultaneously execute Network Access (that is, processing of T230 and T232) with AP80. If the event occurs, the communication load and processing load of the AP80 become high, and as a result, the AP80 may not be able to establish a Wi-Fi connection with any of the printers. According to this embodiment, since it is possible to suppress the occurrence of the event, it is possible to appropriately establish a Wi-Fi connection between each printer 100A to 100C and AP80.

The printer 100B establishes a Wi-Fi connection with the AP80 at T260 by executing the same processing as T200 to T252. After that, the printer 100C establishes a Wi-Fi connection with the AP80 at the T270 by executing the same processing as the T200 to T252. As a result, a state in which the three printers 100A to 100C belong to the same wireless network is constructed. As a result, each of the printers 100A to 100C can receive print data from, for example, the terminal 10 via the AP80 and print the image represented by the print data. Further, each printer 100A to 100C can communicate with the SP server 300 on the Internet 4 via the AP80.

(Registration of information of each printer 100A to 100C: FIG. 6)
Subsequently, a process of registering the information of each printer 100A to 100C in the SP server 300 will be described with reference to FIG. The SP server 300 stores the account information AC of the user of each printer 100A to 100C (that is, the network administrator of the company XXX). The SP server 300 further stores the address of the company XXX in association with the account information AC.

The terminal 10 accepts an operation requesting a login to the SP server 300 from the user at the T300. The operation includes inputting the URL (abbreviation of Uniform Resource Locator) of the SP server 300 and the account information AC.

In T302, the terminal 10 transmits a login request including the input account information AC to the SP server 300 via the AP80 with the input URL as the transmission destination.

When the SP server 300 receives the login request from the terminal 10 in the T302, it determines that the account information AC included in the login request has been stored (that is, determines that the authentication is successful), and in the T304, the SP server 300 gives an OK notification to the terminal 10. Send to.

When the terminal 10 receives the OK notification from the SP server 300 at the T304 via the AP80, the terminal 10 transmits a PIN (abbreviation for Personal Identification Number) code request to the SP server 300 via the AP80 at the T310. The PIN code request is a signal requesting transmission of the PIN code.

When the SP server 300 receives the PIN code request from the terminal 10 in the T310, the SP server 300 generates the PIN code P1 in the T312 and stores the PIN code P1 in association with the account information AC. Then, the SP server 300 transmits the PIN code P1 to the terminal 10 at T314.

When the terminal 10 receives the PIN code P1 from the SP server 300 at T314 via AP80, the terminal 10 transmits a registration request including the received PIN code P1 to the printer 100A via AP80 at T320. The registration request is a signal requesting registration of information in the SP server 300.

When the printer 100A receives the registration request from the terminal 10 in the T320, the printer 100A transmits the PIN code P1 included in the registration request and the serial number "123" of the printer 100A to the SP server 300 via the AP80 in the T322. do.

When the SP server 300 receives the PIN code P1 and the serial number "123" from the printer 100A in the T322, it determines that the received PIN code P1 is stored (see T312) (that is, the authentication is successful). ), T324 stores the received serial number "123" in association with the account information AC.

Next, the SP server 300 generates the token Ta, and at T326, transmits the token Ta to the printer 100A. The token Ta is authentication information for establishing an XMPP (abbreviation of eXtensible Messaging and Presence Protocol) connection described later.

When the printer 100A receives the token Ta from the SP server 300 at the T326 via the AP80, the printer 100A uses the token Ta at the T330 to make a so-called always-on XMPP connection with the SP server 300 via the AP80. Establish. As a result, the SP server 300 can transmit the signal to the printer 100A over the firewall of the wireless network formed by the AP 80 without receiving the signal from the printer 100A.

Although not shown, the SP server 300 uses the XMPP connection to transmit timing information indicating the transmission timing of the remaining amount information of consumables to the printer 100A. As a result, the printer 100A periodically transmits the remaining amount information and the serial number "123" of the printer 100A to the SP server 300 according to the received timing information. Then, the SP server 300 determines whether or not the remaining amount indicated by the received remaining amount information is equal to or less than the threshold value. When the SP server 300 determines that the remaining amount is equal to or less than the threshold value, the SP server 300 identifies the account information AC associated with the received serial number "123" and is associated with the identified account information AC. Perform processing to ship new consumables to your address. As a result, the consumables shipping service is provided to the user of the printer 100A.

As described above, the terminal 10 receives the Result from the printer 100A in the T250 of FIG. 5, and then transmits the registration request to the printer 100A in the T320 of FIG. Therefore, after the Wi-Fi connection is established between the printer 100A and the AP80, the terminal 10 uses the Wi-Fi connection (that is, via the AP80) to set the serial number "123" to the SP server 300. The printer 100A can be made to execute the process of transmitting to. Therefore, the terminal 10 can appropriately make the printer 100A register the serial number "123" in the SP server 300.

In T320, the terminal 10 transmits the registration request to the printer 100A, and then sequentially transmits the registration request including the PIN code P1 to the other printers 100B and 100C. As a result, the same processing as for T320 to T330 is executed for each of the printers 100B and 100C. As a result, as shown in T340, in the SP server 300, a state in which the account information AC and the three serial numbers "123" of the three printers 100A to 100C are associated with each other is constructed. For this purpose, the SP server 300 can provide a consumables shipping service for each of the three printers 100A to 100C.

(Effect of Examples)
According to this embodiment, the terminal 10 transmits a Probe Req (T150 in FIG. 4) and receives a Probe Res from each printer 100A or the like (T151 to T155), thereby transmitting the MAC address “AAA” of each printer 100A or the like. "Etc. Then, the terminal 10 uses the MAC addresses "AAA" to "CCC" to generate the public keys PKpa to PKpc of the printers 100A to 100C (T180). Therefore, the terminal 10 can transmit the Next Req using the public key PKpa to the printer 100A (T210 in FIG. 5), and can further transmit the printer SC110A to the printer 100A (T222). As a result, a Wi-Fi connection is established between the printer 100A and the AP80 (T240). Further, the terminal 10 can transmit the Next Req using the public key PKpb to the printer 100B (T210 cited for the printer 100B), and can further transmit the SC for the printer to the printer 100B (printer 100B). T222). As a result, a Wi-Fi connection is established between the printer 100B and the AP80 (T260). Similarly, a Wi-Fi connection is established between the printer 100C and the AP80 (T270). In this way, the terminal 10 can appropriately establish a Wi-Fi connection between each printer 100A to 100C and the AP80.

For example, assume a comparative example in which a user of a terminal 10 displays a public key PKpa or the like on each printer 100A to 100C and causes the terminal 10 to read the displayed public key PKpa or the like. Even in the configuration of the comparative example, the terminal 10 can acquire the public key PKpa and the like of each printer 100A to 100C, and can transmit the Next Req and the printer SC to each printer 100A to 100C. However, according to the configuration of the comparative example, the user must perform an operation for displaying the public key and an operation for reading the displayed public key for each of the plurality of printers 100A to 100C. It doesn't become. Therefore, the workload of the user is high. On the other hand, according to the present embodiment, since the user does not have to perform these operations, it is easy to make a Wi-Fi connection between the plurality of printers 100A to 100C and the AP80 by using the terminal 10. Can be established in.

Further, according to this embodiment, the terminal 10 further transmits a registration request to each printer 100A to 100C (T320 in FIG. 6). As a result, each printer 100A to 100C can register the serial number "123" or the like in the SP server 300 by using the Wi-Fi connection with the AP80 (T322). In particular, the terminal 10 transmits a registration request including the PIN code P1 to each printer 100A to 100C (T320). Therefore, the user does not have to execute the operation of inputting the PIN code P1 into each of the printers 100A to 100C, and the serial number "123" or the like can be easily registered in the SP server 300. In particular, in this embodiment, one PIN code P1 common to each printer 100A to 100C is used. Therefore, the SP server 300 does not have to generate and manage a PIN code unique to each of the plurality of printers 100A to 100C. Therefore, the processing load of the SP server 300 can be reduced.

(Correspondence)
The terminal 10, the printer 100A, the printer 100B, and the AP80 are examples of a "terminal device", a "first communication device (or communication device)", a "second communication device", and an "external device", respectively. The confirmation server 200 and the SP server 300 are examples of the "first server" and the "second server", respectively. The public key PKap is an example of a "specific public key". The MAC address "AAA" is an example of "first identification information (or identification information)" and "first related information (or related information)". The MAC address "BBB" is an example of "second identification information" and "second related information". The public key PKpa and the public key PKpb are examples of the "first public key (or public key)" and the "second public key", respectively. The serial number "123" and the serial number "234" are examples of "first device information" and "second device information", respectively. Vendor information is an example of "specific information". The MAC address associated with the registered information in the acknowledgment is an example of "response information". The PIN code P1 is an example of a "registration code". Result of T250 in FIG. 5 is an example of "establishment information".

The AS Req of T110, the Out Res of T112, and the AP SC of T122 in FIG. 3 are examples of "specific authentication request", "specific authentication response", and "specific connection information", respectively. The Ath Req of T210, the Aus Res of T212, and the SC110A for the printer of T222 of FIG. 5 are "first authentication request (or authentication request)", "first authentication response (or authentication response)", and "first authentication response", respectively. It is an example of "1 connection information (or connection information)". The T210's Out Req, the T222's Out Res, and the T222's printer SC cited for the printer 100B are examples of "second authentication request", "second authentication response", and "second connection information", respectively. be. The Wi-Fi connection of T140 in FIG. 3, the Wi-Fi connection of T240 in FIG. 5, and the Wi-Fi connection of T260 are "specific wireless connection" and "first wireless connection (or wireless connection)", respectively. This is an example of a "second wireless connection". The registration request of T320 in FIG. 6 is an example of the “first registration request”. The registration request of T320 cited for the printer 100B is an example of the "second registration request".

The processing of T110, the processing of T122, and the processing of T140 in FIG. 3 are examples of processing executed by the “specific authentication request transmission unit”, the “specific connection information transmission unit”, and the “establishment unit”, respectively. The processing of T150, the processing of T151, the processing of T152, the processing of T160, the processing of T170, and the processing of T172 in FIG. 4 are the "Probe request transmission unit", the "first acquisition unit", and the "second acquisition", respectively. This is an example of processing executed by the "unit", "judgment unit", "identification information transmission unit", and "response information reception unit". The process of T180 is an example of the process executed by the "first generation unit" and the "second generation unit". The processing of T210, the processing of T222, and the processing of T250 in FIG. 5 are the processes executed by the "first authentication request transmitting unit", the "first connection information transmitting unit", and the "establishment information receiving unit", respectively. This is just one example. The process of T210 and the process of T222 of FIG. 5 cited for the printer 100B are examples of processes executed by the “second authentication request transmission unit” and the “second connection information transmission unit”, respectively. The process of T314 and the process of T320 in FIG. 6 are examples of processes executed by the "registration code receiving unit" and the "first registration request transmitting unit", respectively. The process of T320 cited for the printer 100B is an example of the process executed by the “second registration request transmitter”.

The processing of T150 and the processing of T151 in FIG. 4 are examples of processing executed by the “Probe request receiving unit” and the “Probe response transmitting unit”, respectively. The processing of T202, the processing of T210, the processing of T211, the processing of T212, the processing of T222, the processing of T240, and the processing of T252 in FIG. 5 are the "secret key generation unit", "authentication request receiving unit", and "authentication", respectively. This is an example of processing executed by the "execution unit", "authentication response transmission unit", "connection information reception unit", "establishment unit", and "erasure unit".

Although specific examples of the present invention have been described in detail above, these are merely examples and do not limit the scope of claims. The techniques described in the claims include various modifications and modifications of the specific examples exemplified above. Modifications of the above embodiment are listed below.

(Modification 1) In the management table 250, the confirmation server 200 has a serial number (for example, “123”) of the printer and a MAC address (for example, “AAA”) of the printer for each of the plurality of printers 100A to 100C. And may be stored in association with each other. In this case, the terminal 10 may execute the following instead of executing T150 to T160 in FIG. That is, when the terminal 10 accepts the input of the serial number "123" or the like of each printer 100A to 100C from the user, the terminal 10 transmits a request including the serial number "123" or the like of each printer 100A to 100C to the confirmation server 200. , The confirmation server 200 receives a response including the MAC address "AAA" or the like associated with the serial number "123" or the like. Then, the terminal 10 uses each MAC address "AAA" or the like included in the received response to generate the public key PKpa or the like of each printer 100A to 100C. In this modification, receiving a response from the confirmation server 200 is an example of "receiving the first identification information from the outside".

(Modification 2) Instead of executing T150 to T160 in FIG. 4, the terminal 10 is connected to each printer 100A to 100E via a USB cable, for example, and has a MAC address from each printer 100A to 100E via a USB cable. You may receive "AAA" and the like. In this modification, receiving the MAC address "AAA" or the like via the USB cable is an example of "receiving the first identification information from the first communication device".

(Modification 3) Instead of executing T150 to T160 in FIG. 4, the terminal 10 may receive an e-mail including the MAC address “AAA” of each printer 100A to 100C from the confirmation server 200. Then, the terminal 10 uses each MAC address "AAA" or the like included in the received e-mail to generate the public key PKpa or the like of each printer 100A to 100C. In this modification, receiving an e-mail from the confirmation server 200 is an example of "receiving the first identification information from the outside".

(Modification 4) Instead of executing T150 to T160 in FIG. 4, the terminal 10 may accept input from the user such as the MAC address “AAA” of each printer 100A to 100C. Then, the terminal 10 generates the public key PKpa of each printer 100A to 100C by using each of the input MAC addresses "AAA" and the like. In this modification, accepting an input such as a MAC address "AAA" is an example of "acquiring the first identification information".

(Modification 5) In T150 of FIG. 4, the terminal 10 receives a Probe response including the public key PKpa of the printer from each printer 100A to 100C in T151 to T153 in response to transmitting the Probe Req. You may. In this case, the terminal 10 does not have to execute the process of T180. In this modification, the public key PKpa and the public key PKpb are examples of "first related information (or related information)" and "second related information", respectively. Further, in this modification, the "first generation unit" and the "second generation unit" can be omitted.

(Modification 6) In T151 to T155 of FIG. 4, the terminal 10 may receive Probe Res including vendor information from each of the printers 100A to 100E. In this case, the terminal 10 does not have to execute the process of T160. In this modification, the "judgment unit" can be omitted. Further, in another modification, the terminal 10 identifies the vendor of each printer 100A to 100E based on each MAC address included in each Probe Res, and executes the processing of T160 based on the identified vendor. You may.

(Modification 7) The terminal 10 does not have to execute the processes of T170 and T172 of FIG. In this modification, the "identification information transmitting unit" and the "response information receiving unit" can be omitted.

(Modification 8) In T170 of FIG. 4, the terminal 10 may transmit a transmission request requesting transmission of the management table 250 to the confirmation server 200 instead of the confirmation request. In this case, the terminal 10 receives the management table 250 from the confirmation server 200 in place of the confirmation response at T172. Next, the terminal 10 determines whether or not the MAC addresses "AAA" to "DDD" are registered in the management table 250, so that each printer 100A to 100D establishes a Wi-Fi connection with the AP80. Determine if it is a device that should be used. Then, the terminal 10 is not a device that should establish a Wi-Fi connection with the AP80 by transmitting an After Req to a printer (for example, 100A) determined to be a device that should establish a Wi-Fi connection with the AP80. Do not send the Next Req to the determined printer (eg 100D). In this modification, the "identification information transmitting unit" and the "response information receiving unit" can be omitted.

(Modification 9) The terminal 10 does not have to execute each process of FIG. In this modification, the "first registration request transmitting unit", the "second registration request transmitting unit", and the "registration code receiving unit" can be omitted.

(Modification 10) T250 in FIG. 5 can be omitted. That is, the terminal 10 may transmit the registration request to the printer 100A at the T320 of FIG. 6 without receiving the Reset from the printer 100A after transmitting the Config Res to the printer 100A at the T222 of FIG. In this modification, the "establishment information receiving unit" can be omitted.

(Modification 11) T140 in FIG. 3 can be omitted. In this case, the terminal 10 confirms the communication of T170 and 172 in FIG. 4 with the confirmation server 200, for example, via a cellular interface (that is, using 3G, 4G, 5G, etc.) or via a wired interface. You may do it. In this modification, the "establishment part" of the "terminal device" can be omitted. Further, the terminal 10 may execute communication with the SP server 300 via the cellular interface or the wired interface in T302 to T314 of FIG. Generally speaking, the communication method between the "terminal device" and the "first (or second) server" is not particularly limited.

(Modification 12) The printers 100B and 100C may not be used, and only the printer 100A may be used. That is, in T150 of FIG. 4, the terminal 10 receives the Probe Res only from the printer 100A in response to transmitting the Probe Req. In this case, T200 to T252 in FIG. 5 and T260 and T270 in FIG. 5 cited for the printers 100B and 100C can be omitted. Further, T320 to T330 in FIG. 6 and T340 in FIG. 6 cited for the printers 100B and 100C can be omitted. In this modification, the "second probe response receiving unit", "second acquisition unit", "second generation unit", "second authentication request transmitting unit", and "second connection information transmitting unit" , And the "second registration request transmission unit" can be omitted.

(Modification 13) The terminal 10 transmits a PIN code request requesting transmission of three PIN codes for the three printers 100A to 100C to the SP server 300 in T310 of FIG. 6, and SP in T314. You may receive 3 PIN codes from the server 300. In this case, the terminal 10 sends a registration request including the first PIN code to the printer 100A, and sends a registration request including a second PIN code different from the first PIN code to the printer 100B, and sends the first and the first. A registration request including a third PIN code different from the second PIN code is transmitted to the printer 100C. Generally speaking, only "one registration code" does not have to be used.

(Modification 14) The printer 100A may store the private key SKpa in advance from the shipping stage of the printer 100A. In this case, T202 in FIG. 5 can be omitted. Also, T252 does not have to be executed. In this modification, the "secret key generation unit" and the "erasing unit" can be omitted.

(Modification 15) The confirmation server 200 and the SP server 300 may be the same server.
Generally speaking, the "second server" may be a server different from the "first server" as in the embodiment, or the same as the "first server" as in the present modification. It may be a server.

(Modification 16) In T322 of FIG. 6, the printer 100A may transmit other information of the printer 100A to the SP server 300 instead of the serial number “AAA”. The other information may be, for example, a printer name, a model name, a MAC address, or the like of the printer 100A. In this modification, the other information is an example of "first device information (or second device information)".

(Modification 17) The public key PKpa and the private key SKpa of the printer 100A do not have to be generated from the MAC address "AAA" of the printer 100A. The public key PKpa and the private key SKpa may be generated from, for example, the serial number "AAA" of the printer 100A. In this modification, the serial number "AAA" is an example of "first identification information (or identification information)".

(Modification 18) The “first communication device (or communication device)” may not be a printer, but may be another device such as a scanner, a multifunction device, a mobile terminal, a PC, or a server.

(Variation Example 19) The “external device” does not have to be the AP80, and may be, for example, the terminal 10. That is, in this modification, a Wi-Fi connection is established between the terminal 10 and the printer 100A.

(Modification 20) In each of the above embodiments, each process of FIGS. 3 to 6 is realized by software (that is, programs 40, 42, 140, 240). Instead of this, at least one of each of these processes may be realized by hardware such as a logic circuit.

Further, the technical elements described in the present specification or the drawings exhibit technical usefulness alone or in various combinations, and are not limited to the combinations described in the claims at the time of filing. In addition, the techniques exemplified in the present specification or the drawings achieve a plurality of purposes at the same time, and achieving one of the purposes itself has technical usefulness.

2: Communication system, 4: Internet, 10: Terminal, 12: Operation unit, 14: Display unit, 16: Camera, 20: Wi-Fi interface, 30: Control unit, 32: CPU, 34: Memory, 40: OS Program, 42: Printer application, 100A-100E: Printer, 112: Operation unit, 114: Display unit, 118: Print execution unit, 120: Wi-Fi interface, 130: Control unit, 132: CPU, 134: Memory, 140 : Program, 200: Confirmation server, 220: Communication interface, 230: Control unit, 232: CPU, 234: Memory, 240: Program, 250: Management table

Claims (20)

A computer program for terminal equipment
The terminal device includes a wireless interface for performing wireless communication, a computer, and the like.
The computer program puts the computer into the following parts, that is,
A first acquisition unit that acquires the first identification information that identifies the first communication device, and
A first generation unit that generates a first public key of the first communication device by using the acquired first identification information, and a first generation unit.
A first authentication request transmission unit that transmits a first authentication request using the generated first public key to the first communication device via the wireless interface.
When the first authentication response is received from the first communication device via the wireless interface in response to the transmission of the first authentication request to the first communication device, the first authentication response is received. A first connection information transmission unit that transmits the connection information of 1 to the first communication device, wherein the first connection information is a first radio between the first communication device and the external device. The first connection information transmission unit, which is information for establishing a connection, and
A computer program that functions as. The computer program according to claim 1, wherein the first acquisition unit acquires the first identification information by receiving the first identification information from the outside. The computer program according to claim 2, wherein the first acquisition unit acquires the first identification information by receiving the first identification information from the first communication device. The computer program further comprises the computer.
It functions as a Probe request transmitter that transmits a Probe request via the wireless interface.
In response to the transmission of the Program request, the first acquisition unit receives the first Probe response including the first identification information from the first communication device via the wireless interface. The computer program according to claim 3, wherein the first identification information is acquired by the method. The first acquisition unit receives the first identification information and specific information about the first communication device from the first communication device, thereby receiving the first identification information and the identification. Get information and
The computer program further comprises the computer.
Using the acquired specific information, the first communication device is made to function as a determination unit for determining whether or not the device should establish a wireless connection with the external device.
The first authentication request transmitting unit sends the first authentication request to the first communication when it is determined that the first communication device is a device for establishing a wireless connection with the external device. Send to the device,
The computer program according to claim 3 or 4, wherein the first authentication request is not transmitted when it is determined that the first communication device is not a device for establishing a wireless connection with the external device. The computer program further comprises the computer.
An identification information transmission unit that transmits the acquired first identification information to the first server, and
A response information receiving unit that receives response information from the first server in response to the transmission of the first identification information to the first server, wherein the response information is the first identification. The response information receiving unit, which is information indicating that the first communication device identified by the information is a device for establishing the first wireless connection with the external device,
To function as
When the response information is received from the first server, the first authentication request transmission unit transmits the first authentication request to the first communication device.
The computer program according to any one of claims 1 to 5, wherein the first authentication request is not transmitted when the response information is not received from the first server. The computer program further comprises the computer.
A registration request transmitting unit that transmits a first registration request to the first communication device via the wireless interface after the first connection information is transmitted to the first communication device. The first registration request is a signal requesting the first communication device to execute the first registration process, and the first registration process is performed by the first communication device of the first communication device. The first device information regarding the first communication device is transmitted to the second server, and the first device information is transmitted to the second server via the external device. The computer program according to any one of claims 1 to 6, which is a process for registering and functions as the first registration request transmission unit. The computer program further comprises the computer.
It functions as a registration code receiving unit that receives a registration code to be used for registration of the first device information from the second server.
The first registration request transmitting unit includes the registration code after the first connection information is transmitted to the first communication device and the registration code is received from the second server. The first registration request is transmitted to the first communication device, and the first registration request is transmitted to the first communication device.
The first registration process comprises transmitting the first device information and the registration code included in the first registration request to the second server by the first communication device. Item 7. The computer program according to item 7. The computer program further comprises the computer.
After the first connection information is transmitted to the first communication device, the establishment information indicating that the first wireless connection has been established from the first communication device via the wireless interface is provided. Functions as an established information receiver to receive
The first registration request transmission unit according to claim 7 or 8, wherein the first registration request transmission unit transmits the first registration request to the first communication device after receiving the establishment information from the first communication device. Computer program. The computer program further comprises the computer.
A specific authentication request transmission unit that transmits a specific authentication request using a specific public key of the external device, which is an access point, to the external device via the wireless interface.
When a specific authentication response is received from the external device via the wireless interface in response to the specific authentication request being transmitted to the external device, the specific authentication response is received via the wireless interface. A specific connection information transmission unit that transmits connection information to the external device, and the specific connection information is information for establishing a specific wireless connection between the terminal device and the external device. With the specific connection information transmitter
After the specific connection information is transmitted to the external device, the specific connection information is used to establish a specific wireless connection between the terminal device and the external device via the wireless interface. To function as an established part,
The first authentication request transmitting unit transmits the first authentication request to the first communication device when the specific wireless connection is established and the first identification information is acquired. , The computer program according to any one of claims 1 to 9. The computer program further comprises the computer.
A second acquisition unit that acquires a second identification information that identifies a second communication device different from the first communication device, and a second acquisition unit.
A second generation unit that generates a second public key of the second communication device by using the acquired second identification information, and a second generation unit.
A second authentication request transmission unit that transmits a second authentication request using the generated second public key to the second communication device via the wireless interface.
When the second authentication response to the second authentication request is received from the second communication device via the wireless interface, the second connection information is transmitted to the second communication device. 2. The connection information transmitting unit, wherein the second connection information is information for establishing a second wireless connection between the second communication device and the external device. Connection information transmitter and
The computer program according to any one of claims 1 to 10. The computer program further comprises the computer.
It functions as a Probe request transmitter that transmits a Probe request via the wireless interface.
The first acquisition unit receives the first probe response including the first identification information from the first communication device via the wireless interface in response to the transmission of the probe request. By doing so, the first identification information is acquired, and
In response to the transmission of the Program request, the second acquisition unit receives a second Program response including the second identification information from the second communication device via the wireless interface. The computer program according to claim 11, wherein the computer program obtains the second identification information. The computer program according to any one of claims 1 to 12, wherein the first identification information is information used when the first communication device communicates with another device. The computer program according to any one of claims 1 to 13, wherein the first identification information is a MAC address of the first communication device. A computer program for terminal equipment
The terminal device includes a wireless interface for performing wireless communication, a computer, and the like.
The computer program puts the computer into the following parts, that is,
A probe request transmission unit that transmits a probe request via the wireless interface,
A first containing the first relevant information related to the first public key of the first communication device from the first communication device via the wireless interface in response to the transmission of the Probe request. The first Probe response receiver that receives the Probe response of
When the first probe response is received from the first communication device, the first disclosure related to the first related information included in the first probe response via the wireless interface. A first authentication request transmission unit that transmits a first authentication request using a key to the first communication device, and a first authentication request transmission unit.
When the first authentication response is received from the first communication device via the wireless interface in response to the transmission of the first authentication request to the first communication device, the first authentication response is received. A first connection information transmission unit that transmits the connection information of 1 to the first communication device, wherein the first connection information is a first radio between the first communication device and the external device. The first connection information transmission unit, which is information for establishing a connection, and
A computer program that functions as. The computer program further comprises the computer.
In response to the transmission of the Probe request, the second communication device different from the first communication device relates to the second public key of the second communication device via the wireless interface. A second Probe response receiver that receives a second Probe response containing the second relevant information, and a second Probe response receiver.
When the second probe response is received from the second communication device, the second disclosure related to the second related information included in the second probe response via the wireless interface. A second authentication request transmission unit that transmits a second authentication request using the key to the second communication device, and a second authentication request transmission unit.
When the second authentication response is received from the second communication device via the wireless interface in response to the transmission of the second authentication request to the second communication device, the second authentication response is received. A second connection information transmission unit that transmits the connection information of 2 to the second communication device, wherein the second connection information is a second connection between the second communication device and the external device. The second connection information transmission unit, which is information for establishing a wireless connection, and
15. The computer program of claim 15. The computer program further comprises the computer.
A registration request transmitting unit that transmits a first registration request to the first communication device via the wireless interface after the first connection information is transmitted to the first communication device. The first registration request is a signal requesting the first communication device to execute the first registration process, and the first registration process is performed by the first communication device of the first communication device. The first device information regarding the first communication device is transmitted to the second server, and the first device information is transmitted to the second server via the external device. The first registration request transmission unit, which is a process for registering,
A second registration request transmission unit that transmits a second registration request to the second communication device via the wireless interface after the second connection information is transmitted to the second communication device. The second registration request is a signal requesting the first communication device to execute the second registration process, and the second registration process is performed by the second communication device by the second communication device. The second device information regarding the second communication device is transmitted to the second server, and the second device information is transmitted to the second server via the external device. The second registration request transmission unit, which is a process for registering in
The computer program according to claim 11 or 16. The computer program further comprises the computer.
It functions as a registration code receiving unit that receives one registration code that should be commonly used for registration of the first device information and registration of the second device information from the second server.
The first registration request transmitting unit is the one after the first connection information is transmitted to the first communication device and the one registration code is received from the second server. The first registration request including the registration code of the above is transmitted to the first communication device.
In the first registration process, the first communication device transmits the first device information and the one registration code included in the first registration request to the second server. Including,
The second registration request transmitting unit is the one after the second connection information is transmitted to the second communication device and the one registration code is received from the second server. The second registration request including the registration code of the above is transmitted to the second communication device.
In the second registration process, the second communication device transmits the second device information and the one registration code included in the second registration request to the second server. 17. The computer program of claim 17. It ’s a communication device,
A wireless interface for performing wireless communication and
A probe request receiving unit that receives a probe request from the terminal device via the wireless interface.
A probe response transmission unit that transmits a probe response including related information related to a public key of the communication device to the terminal device via the wireless interface in response to receiving the probe request from the terminal device. ,
When the Probe response is transmitted to the terminal device, an authentication request using the public key related to the related information included in the Probe response is received from the terminal device via the wireless interface. Authentication request receiver and
An authentication response transmission unit that transmits an authentication response to the terminal device via the wireless interface in response to receiving the authentication request from the terminal device.
A connection information receiving unit that receives connection information from the terminal device via the wireless interface when the authentication response is transmitted to the terminal device, and the connection information is the communication device and the external device. The connection information receiving unit, which is information for establishing a wireless connection between the two, and
When the connection information is received from the terminal device, the establishment unit that establishes the wireless connection between the communication device and the external device via the wireless interface by using the connection information.
A communication device. The communication device further
A generation unit that generates a private key corresponding to the public key by using the identification information that identifies the communication device.
When the authentication request is received from the terminal device, the authentication execution unit that executes the authentication of the information included in the authentication request by using the generated private key is provided.
When the authentication is successful, the authentication response transmission unit transmits the authentication response to the communication device.
The communication device further
19. The communication device according to claim 19, further comprising an erasing unit that erases the private key from the communication device when the authentication is successful.

Images