JP2021190930A - Wireless communication system, communication method, wireless access point, and control program - Google Patents

Abstract

To enable a wireless device for a wireless access point 11 to easily connect to a wireless LAN without storing key information in the wireless device.SOLUTION: A wireless communication system 10 comprises a wireless access point 11 and a wireless device 12. The wireless access point 11 and the wireless device 12 share wireless setting information by performing encrypted communication with each other using key information based on first identification information of the wireless device 12. The wireless access point 11 and the wireless device 12 perform wireless data communication with each other using the shared wireless setting information.SELECTED DRAWING: Figure 4

Description

The present invention relates to wireless communication systems, communication methods, wireless access points, and control programs.

Conventionally, Wi-Fi Easy Connect has been proposed as a technique for easily connecting to a wireless LAN (Local Area Network) such as Wi-Fi. Wi-Fi is a registered trademark (see, for example, Non-Patent Document 1).

In the Wi-Fi Easy Connect, for example, by scanning a QR (Quick Response) code written on a wireless device such as an IoT (Internet of Things) device using a smartphone or the like, the wireless device is connected to a wireless LAN. It can be connected to the wireless access point by the public key encryption method. The QR code is a registered trademark.

"Wi-Fi Easy Connect", Wi-Fi Alliance, [online], [Search on May 1, 2nd year of Reiwa], Internet <URL: https: // www. wi-fi. org / ja / discover-wi-fi / wi-fi-easy-connect>

However, the proposed Wi-Fi Easy Connect has the problem that it is necessary to store the public key and private key unique to the wireless device connected to the wireless LAN, and the QR code including the public key is wirelessly stored. There is a problem that it needs to be attached to the device. Therefore, there is a problem that the manufacturing cost and the management cost of the wireless device increase.

The present invention has been made in view of the above circumstances, and an object of the present invention is to facilitate connection of a wireless device to a wireless LAN without storing key information in the wireless device.

The wireless communication system of the present invention includes a wireless access point and a wireless device, and the wireless access point and the wireless device mutually perform encrypted communication using key information based on the first identification information of the wireless device. The wireless setting information is shared, and wireless data communication is performed with each other using the wireless setting information.

The communication method of the present invention is a communication method of a wireless communication system including a wireless access point and a wireless device, and the wireless access point and the wireless device use key information based on the first identification information of the wireless device. Sharing wireless setting information by performing encrypted communication with each other,
Wireless data communication is performed with each other using the wireless setting information.

The wireless access point of the present invention shares wireless setting information with the wireless device by performing encrypted communication using the key information based on the first identification information of the wireless device with the wireless device, and the wireless setting is performed. Wireless data communication is performed with the wireless device using information.

The control program of the present invention performs encrypted communication with the wireless device using key information based on the first identification information of the wireless device on the processor of the wireless access point, thereby transmitting wireless setting information to the wireless device. The purpose is to execute a process of sharing and performing wireless data communication with the wireless device using the wireless setting information.

According to the present invention, a wireless communication system, a communication method, a wireless access point, and a control program that can facilitate connection of a wireless device to a wireless LAN without storing key information in the wireless device are provided. Can be provided.

It is a figure which shows an example of the wireless communication system 10 which is an Example of this invention. It is a figure which shows an example of the hardware composition of a wireless access point 11. It is a figure which shows an example of the hardware composition of a wireless device 12. It is a sequence diagram which shows an example of the operation in a wireless communication system 10. It is a figure which shows an example of the situation where the unique number of a wireless access point 11 is duplicated. It is a figure which shows an example of the state transition in a wireless device 12. It is a sequence diagram which shows an example of the operation in the wireless communication system 10 shown in FIG. It is a figure which shows the modification 1 of the wireless communication system 10. It is a sequence diagram which shows an example of the operation in the wireless communication system 10 shown in FIG. It is a figure which shows the modification 2 of the wireless communication system 10. It is a sequence diagram which shows an example of the operation in the wireless communication system 10 shown in FIG. It is a figure which shows the modification 3 of the wireless communication system 10. It is a sequence diagram which shows an example of the operation in the wireless communication system 10 shown in FIG. It is a sequence diagram which shows the modification of the procedure of sharing an SSID and a key.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.

(Embodiment)
<Wireless communication system 10 which is an embodiment of the present invention>
FIG. 1 is a diagram showing an example of a wireless communication system 10 which is an embodiment of the present invention. The wireless communication system 10 shown in FIG. 1 includes, for example, a wireless access point 11 and a wireless device 12.

The wireless access point 11 is a base station that forms a wireless LAN. The wireless access point 11 may be a so-called wireless LAN router having a router function in addition to the function as a wireless LAN access point. The wireless access point 11 is connected to the WAN (Wide Area Network) 2 directly or via a network such as a LAN.

The wireless device 12 is a communication device having a function of performing wireless communication with the wireless access point 11 by connecting to the wireless LAN formed by the wireless access point 11. In the example shown in FIG. 1, the wireless device 12 is a television having a wireless communication function. The remote controller 13 shown in FIG. 1 is capable of communicating with the wireless device 12 (television) by infrared rays or the like, and transmits an instruction according to the user operation to the wireless device 12.

<Hardware configuration example of wireless access point 11>
FIG. 2 is a diagram showing an example of the hardware configuration of the wireless access point 11. The wireless access point 11 shown in FIG. 1 includes, for example, a processor 21, a memory 22, a wireless communication interface 23, and a wired communication interface 24. The configurations of these wireless access points 11 are connected to each other, for example, by a bus 29.

The processor 21 is a circuit that performs signal processing, and is, for example, a CPU (Central Processing Unit) that controls the entire wireless access point 11. The processor 21 may be realized by another digital circuit such as FPGA (Field Programmable Gate Array) or DSP (Digital Signal Processor). Further, the processor 21 may be realized by combining a plurality of digital circuits.

The memory 22 includes, for example, a main memory and an auxiliary memory. The main memory is, for example, a RAM (Random Access Memory). The main memory is used as the work area of the processor 21.

The auxiliary memory is a non-volatile memory such as a magnetic disk or a flash memory. Various programs for operating the wireless access point 11 are stored in the auxiliary memory. The program stored in the auxiliary memory is loaded into the main memory and executed by the processor 21.

Further, the auxiliary memory may include a portable memory that can be removed from the wireless access point 11. Portable memories include memory cards such as USB (Universal Serial Bus) flash drives and SD (Secure Digital) memory cards, and external hard disk drives.

The wireless communication interface 23 is a communication interface that performs wireless communication with the outside of the wireless access point 11 (for example, the wireless device 12). The wireless communication interface 23 is controlled by the processor 21.

The wired communication interface 24 is a communication interface for performing wired communication with the outside of the wireless access point 11 (for example, WAN2). The wired communication interface 24 is controlled by the processor 21.

Further, the wireless access point 11 may be provided with a user interface such as an AOSS (AirStation One-Touch Sequence System) button. The AOSS button is a press button for wirelessly connecting the wireless access point 11 to another wireless device.

<Hardware configuration example of wireless device 12>
FIG. 3 is a diagram showing an example of the hardware configuration of the wireless device 12. The wireless device 12 shown in FIG. 1 includes, for example, a processor 31, a memory 32, a wireless communication interface 33, and a user interface 34. The configurations of these wireless devices 12 are connected to each other by, for example, a bus 39.

The processor 31, the memory 32, and the wireless communication interface 33 have the same configurations as the processor 21, the memory 22, and the wireless communication interface 23 shown in FIG. 2, respectively.

The user interface 34 includes an input device that accepts operation input from the user, an output device that outputs information to the user, and the like. The input device can be realized by, for example, a key (for example, a keyboard) or a remote controller. The output device can be realized by, for example, a display or a speaker. Further, both an input device and an output device may be realized by a touch panel or the like. The user interface 34 is controlled by the processor 31.

When the wireless device 12 is a television, the user interface 34 includes, as an input device, a receiving unit that receives a signal from the remote controller 13 shown in FIG. Further, in this case, the user interface 34 includes, as an output device, a display screen for displaying video, a speaker for outputting audio, and the like. Further, in this case, the processor 31 may include a GPU (Graphics Processing Unit) that performs image processing for displaying an image on a display screen.

<Operation in wireless communication system 10>
FIG. 4 is a sequence diagram showing an example of operation in the wireless communication system 10. In the example shown in FIG. 4, an example in which the processing of the present invention is applied to DPP (Device Provisioning Protocol) used in the Wi-Fi Easy Connect will be described. The user 14 in FIG. 4 is a person who sets the wireless device 12 to be connected to the wireless access point 11. The wireless device 12 is assumed to be a television here.

The wireless device 12 stores the individual ID in advance. The individual ID is identification information for identifying the wireless device 12, and is an example of the first identification information of the present invention. Since the individual ID is used for generating key information, it is desirable that the information has a large number of bits (for example, several tens of bits). As an example, the individual ID is a MAC (Media Access) address of the wireless device 12. However, the individual ID is not limited to the MAC address, and may be, for example, the serial number of the wireless device 12.

The wireless access point 11 stores the public key A1 and the private key A2 in advance. The public key A1 and the private key A2 are key information of a public key cryptosystem paired with each other. The public key A1 and the private key A2 are examples of the second public key information and the second private key information of the present invention.

Further, the wireless access point 11 stores the unique number in advance. The unique number is identification information for identifying the wireless access point 11, and is an example of the second identification information of the present invention. The unique number is preferably a number having a small number of digits (for example, a 3-digit or 4-digit number) so that the user 14 can easily input the unique number. The unique number may be a unique number that can be duplicated with other wireless access points (see, for example, FIG. 5).

First, the user 14 acquires the unique number of the wireless access point 11 (step S401). For example, the above unique number is described in the housing of the wireless access point 11, the instruction manual of the wireless access point 11, or the like, and the user 14 acquires the unique number by reading this description.

Next, the user 14 inputs the unique number acquired in step S401 to the wireless device 12 (step S402). For example, the wireless device 12 outputs a message prompting the user 14 to input a unique number on the screen or by voice. In response to this message, the user 14 inputs a unique number to the wireless device 12 by operating the remote controller 13.

Next, the wireless device 12 transmits a probe request (Probe Request) to the wireless access point 11 (step S403). Further, the wireless access point 11 includes the hash value of the unique number input in step S402 and the individual ID stored in the wireless device 12 in this probe request.

Next, the wireless access point 11 determines the unique number by comparing the hash value included in the probe request received in step S403 with the hash value derived from the unique number stored in the wireless access point 11. Collate (step S404).

If the hash values of the unique numbers do not match in step S404, the probe request received by the wireless access point 11 may have been transmitted from a wireless device of a user who does not know the correct unique number. In this case, the wireless access point 11 does not respond to the received probe request, and the process ends.

In the example of FIG. 4, it is assumed that the unique numbers match in step S404. In this case, next, the wireless access point 11 generates the public key B1 based on the unique number stored in the wireless access point 11 and the individual ID included in the Probe request received by step S403 (step). S405). Further, the wireless device 12 generates the secret key B2 based on the unique number input in step S402 and the individual ID stored in the wireless device 12 (step S406).

The public key B1 and the private key B2 are key information of each other's public key cryptosystem. The combination of the public key B1 and the private key B2 is an example of the key information of the present invention. Further, the public key B1 and the private key B2 are examples of the first public key information and the first secret key information of the present invention. For example, each of the wireless access point 11 and the wireless device 12 generates the same public key B1 and private key B2 by performing the same predetermined calculation based on the exchanged unique number and individual ID. In this case, the wireless access point 11 may destroy the private key B2, and the wireless device 12 may destroy the public key B1.

Next, the wireless access point 11 transmits a DPP authentication request (DPP Authentication Request) to the wireless device 12 (step S407). Further, the wireless access point 11 responds to the DPP authentication request with the individual ID received in step S403, the public key A1 stored in the wireless access point 11, and the public key B1 generated in step S405. Includes -nonce and. The I-nonce is a disposable random value generated by the wireless access point 11, and is an example of the first information of the present invention.

Next, the wireless device 12 collates the individual ID by comparing the individual ID included in the DPP authentication request received in step S407 with the individual ID stored in the wireless device 12 (step S408). .. The DPP authentication request transmitted in step S407 may include the hash value of the individual ID instead of the individual ID. In this case, in step S408, the wireless device 12 compares the hash value of the individual ID included in the DPP authentication request received in step S407 with the hash value derived from the individual ID stored in the wireless device 12. By doing so, the individual ID is collated.

If the individual IDs do not match in step S408, the DPP authentication request received by the wireless device 12 may have been transmitted by the wireless access point 11 to another wireless device. In this case, the wireless device 12 does not respond to the received DPP authentication response, and the process ends.

In the example of FIG. 4, it is assumed that the individual IDs match in step S408. In this case, the wireless device 12 then decodes the I-nonce included in the DPP authentication request received in step S407 with the private key B2 generated in step S406 (step S409).

Further, the wireless device 12 transmits a DPP authentication response (DPP Association Response) to the wireless access point 11 (step S410). Further, the wireless device 12 includes the R-nonce encrypted with the public key A1 included in the DPP authentication request received in step S407 in the DPP authentication response. The R-nonce is a disposable random value generated by the wireless device 12, and is an example of the second information of the present invention.

Next, the wireless access point 11 decodes the R-nonce included in the DPP authentication response received in step S410 with the private key A2 stored in the wireless access point 11 (step S411).

Next, the wireless access point 11 generates a common key ke based on the I-nonce included in the DPP authentication request transmitted in step S407 and the R-nonce decoded in step S411 (step S412). Further, the wireless device 12 generates a common key ke based on the I-nonce decoded in step S409 and the R-nonce included in the DPP authentication response transmitted in step S410 (step S413). In steps S421 and S413, each of the wireless access point 11 and the wireless device 12 generates the same common key ke by performing the same predetermined operation based on the I-nonce and the R-nonce.

Next, the wireless access point 11 transmits a DPP authentication confirmation (DPP Authentication Confirm) to the wireless device 12 (step S414). Further, the wireless access point 11 includes the authentication result encrypted with the common key ke generated in step S412 in this DPP authentication confirmation. Next, the wireless device 12 decodes the authentication result included in the DPP authentication confirmation received in step S414 with the common key ke generated in step S413 (step S415).

Next, the wireless device 12 transmits a DPP configuration request to the wireless access point 11 (step S416). Further, the wireless device 12 includes the SSID (Service Set Identifier) and the key issuance request encrypted with the common key ke generated in step S413 in the DPP setting request. The SSID and the key are wireless setting information for connecting to the wireless LAN formed by the wireless access point 11 and performing wireless data communication. The SSID is a wireless LAN identifier, and the key is an encryption key for wireless data communication.

Next, the wireless access point 11 decodes the issuance request included in the DPP setting request received in step S416 with the common key ke generated in step S412 (step S417). Next, the wireless access point 11 transmits a DPP configuration response to the wireless device 12 (step S418). Further, the wireless access point 11 includes the SSID and the key encrypted with the common key ke in this DPP setting response.

Next, the wireless device 12 decodes the SSID and key included in the DPP setting response received in step S418 with the common key ke generated in step S413, and sets the decoded SSID and key in the wireless profile of the wireless device 12. (Step S419). As a result, the SSID and the key are shared between the wireless access point 11 and the wireless device 12, and the wireless access point 11 and the wireless device 12 use the SSID and the key to perform wireless data communication with each other.

Each process by the wireless access point 11 shown in FIG. 4 is executed, for example, by the control of the processor 21 shown in FIG. Each process by the wireless device 12 shown in FIG. 4 is executed, for example, by the control of the processor 31 shown in FIG.

As described above, the wireless access point 11 and the wireless device 12 communicate by DPP using the public key B1 and the private key B2 (key information) based on the individual ID (first identification information) of the wireless device 12 (encrypted communication). SSID and key (wireless setting information) are shared by performing each other. Then, the wireless access point 11 and the wireless device 12 perform wireless data communication with each other using the shared SSID and key.

As a result, since the public key B1 and the private key B2 are generated using the individual ID of the wireless device 12, the wireless access point 11 can be accessed without having to store the public key B1 and the private key B2 in the wireless device 12. The connection of the wireless device 12 can be facilitated. Further, even if the QR code or the like is not described in the wireless device 12, the connection of the wireless device 12 to the wireless access point 11 can be facilitated. Therefore, for example, it is possible to suppress an increase in manufacturing cost and management cost of the wireless device 12.

Further, the wireless access point 11 and the wireless device 12 generate the public key B1 and the private key B2 based on the unique number (second identification information) of the wireless access point 11 and the individual ID. As a result, it is possible to prevent another person's wireless device, which does not know the unique number of the wireless access point 11, from illegally connecting to the wireless access point 11.

Regarding the sharing of the individual ID and the unique number, for example, the wireless device 12 accepts the input of the unique number, generates the private key B2 based on the input unique number and the individual ID of the wireless device 12, and the wireless device. Twelve individual IDs are transmitted to the wireless access point. The wireless access point 11 generates the public key B1 based on the individual ID transmitted by the wireless device 12 and the unique number of the wireless access point 11. This makes it possible to easily connect the wireless device 12 to the wireless access point 11 without using, for example, a smartphone for scanning the QR code.

Further, the wireless device 12 transmits the individual ID of the wireless device 12 and the hash value (information based on the second identification information) of the input unique number to the wireless access point 11. The wireless access point 11 performs communication by DPP according to the result of comparing the hash value of the unique number transmitted by the wireless device 12 and the unique number of the wireless access point 11. For example, the wireless access point 11 does not communicate by DPP when the unique numbers do not match. As a result, the wireless access point 11 can be prevented from responding to a connection request for a wireless access point different from the wireless access point 11.

Further, by using the information transmitted from the wireless device 12 to the wireless access point 11 as the hash value of the unique number, it is possible to prevent the unique number of the wireless access point 11 from being acquired even if another person intercepts this information. can. This prevents another person who intercepts the information transmitted from the wireless device 12 to the wireless access point 11 from generating the private key B2 based on the unique number of the wireless access point 11, and the other person's wireless device prevents the other person's wireless device from generating the secret key B2. It is possible to suppress unauthorized connection to.

However, the information based on the unique number transmitted from the wireless device 12 to the wireless access point 11 is not limited to the hash value of the unique number, and may be the unique number itself. In this case as well, the wireless access point 11 may not respond to a connection request for a wireless access point different from the wireless access point 11 by not performing communication by DPP when the unique numbers do not match. can.

Regarding encrypted communication from the wireless access point 11 to the wireless device 12, for example, the wireless access point 11 generates a public key B1 (first public key information) of a public key cryptosystem, and based on the generated public key B1. The encrypted I-nonce (first information) is transmitted to the wireless device 12. The wireless device 12 generates a secret key B2 (first secret key information) paired with the public key B1, and decodes the I-nonce transmitted by the wireless access point 11 based on the generated secret key B2.

The wireless access point 11 may transmit the I-nonce and the generated public key B1 (information based on the public key B1) to the wireless device 12 in the communication by DPP. In this case, the wireless device 12 also generates the public key B1 and continues the communication by DPP according to the result of comparing the public key B1 transmitted by the wireless access point 11 and the generated public key B1. For example, the wireless device 12 does not continue the communication by DPP if the compared public keys B1 do not match. As a result, it is possible to continue the communication by DPP after confirming that the public key B1 and the private key B2 that are paired with each other are shared.

The information based on the public key B1 transmitted by the wireless access point 11 to the wireless device 12 may be the hash value of the public key B1. In this case, the wireless device 12 also derives the hash value of the public key B1 and compares the hash value of the public key B1 transmitted by the wireless access point 11 with the hash value of the derived public key B1 according to the result. And continue communication by DPP.

Regarding encrypted communication from the wireless device 12 to the wireless access point 11, for example, the wireless access point 11 has a public key A1 and a private key A2 (second public key and second private key) that are paired with each other in the public key cryptosystem. And transmits the public key A1 to the wireless device 12. The wireless device 12 transmits the encrypted R-nonce (second information) based on the public key A1 received from the wireless access point 11 to the wireless access point 11. The wireless access point 11 decodes the R-nonce transmitted by the wireless device 12 based on the private key A2.

Although the process of performing the collation based on the individual ID by the wireless device 12 has been described in step S408, the wireless device 12 collates based on the public key B1 in addition to the collation based on the individual ID or instead of the collation based on the individual ID. May be done. For example, in step S406, the wireless device 12 generates the public key B1 in addition to the private key B2. In step S407, the wireless access point 11 includes the hash value of the public key B1 in the DPP authentication request. In step S408, the wireless device 12 collates the hash value derived from the public key B1 generated in step S406 with the hash value of the public key B1 included in the DPP authentication request received in step S408. conduct.

When collating based on the public key B1, the collation may be performed using the public key B1 itself instead of the hash value of the public key B1. For example, in step S407, the wireless access point 11 includes the public key B1 in the DPP authentication request. In step S408, the wireless device 12 performs collation by comparing the public key B1 generated in step S406 with the public key B1 included in the DPP authentication request received in step S408.

Further, the wireless device 12 may perform collation based on the private key B2 in addition to the collation based on the individual ID or instead of the collation based on the individual ID. For example, in step S405, the wireless access point 11 generates a private key B2 in addition to the public key B1. In step S407, the wireless access point 11 includes the hash value of the private key B2 in the DPP authentication request. In step S408, the wireless device 12 collates by comparing the hash value derived from the secret key B2 generated in step S406 with the hash value of the secret key B2 included in the DPP authentication request received in step S408. conduct.

<Situations where the unique numbers of wireless access points 11 are duplicated>
FIG. 5 is a diagram showing an example of a situation in which the unique numbers of the wireless access points 11 are duplicated. In FIG. 5, the same parts as those shown in FIG. 1 are designated by the same reference numerals and the description thereof will be omitted.

The neighborhood access point 15 shown in FIG. 5 is a wireless access point provided in the vicinity of the wireless device 12 and different from the wireless access point 11. The neighboring access point 15 forms a wireless LAN different from the wireless LAN formed by the wireless access point 11.

As described above, the connection target of the wireless device 12 is the wireless access point 11, but since the neighboring access point 15 is located near the wireless device 12, the wireless device 12 is also wireless with the neighboring access point 15. It is possible to send and receive signals.

It is assumed that the neighboring access point 15 has the same function as the wireless access point 11 and has a unique number that overlaps with the wireless access point 11. In the example of FIG. 5, each of the wireless access point 11 and the neighboring access point 15 has "1234" (4 digit number) as a unique number.

In such a case, for example, the probe request transmitted from the wireless device 12 by step S403 shown in FIG. 4 is received not only by the wireless access point 11 but also by the neighboring access point 15. Since the neighboring access point 15 has the same unique number as the wireless access point 11, the same processing as in steps S404, S405, and S407 by the wireless access point 11 is performed, and the wireless device 12 is subjected to DPP. Sends an authentication request.

On the other hand, the wireless device 12 may have a function for connecting to the wireless access point 11 separately from the neighboring access point 15. This function will be described with reference to FIGS. 6 and 7.

<State transition in wireless device 12>
FIG. 6 is a diagram showing an example of a state transition in the wireless device 12. First, the state transitions related to the operation of the wireless device 12 described with reference to FIG. 4 will be described.

When the power of the wireless device 12 is turned on, the wireless device 12 is in the initial state 61. The initial state 61 is a state in which the wireless device 12 waits for the input of the unique number from the user 14. In the initial state 61, when the unique number is input from the user 14, the wireless device 12 transmits a probe request to the wireless access point 11 and shifts to the first connection standby 62.

The first connection standby 62 is a state in which the wireless device 12 waits for the reception of the DPP authentication request from the wireless access point 11. In the first connection standby 62, the wireless device 12 returns to the initial state 61 when the user 14 performs a stop operation on the wireless device 12 or a timeout occurs after a certain period of time has elapsed. In the first connection standby 62, when the wireless device 12 receives a DPP authentication request from only a single wireless AP (for example, a wireless access point 11) within a certain period of time, the wireless device 12 shifts to the DPP authentication process 64.

The DPP authentication process 64 is, for example, the process of steps S409 to S415 in FIG. That is, in the DPP authentication process 64, the wireless device 12 generates a common key ke common to the wireless access point 11, and uses the generated common key ke to receive the authentication result from the wireless access point 11 for authentication. Determine if was successful. If the authentication fails in the DPP authentication process 64, the wireless device 12 returns to the initial state 61. If the authentication is successful in the DPP authentication process 64, the wireless device 12 shifts to the setting acquisition process 65.

The setting acquisition process 65 is, for example, the process of steps S416 to S419 in FIG. That is, in the setting acquisition process 65, the wireless device 12 shares the SSID and the key with the wireless access point 11 by using the common key ke generated in the DPP authentication process 64. As a result, the wireless device 12 enables wireless data communication with the wireless access point 11.

Next, the state transition of the wireless device 12 will be described when there is a neighboring access point 15 whose unique number overlaps with that of the wireless access point 11 in the vicinity of the wireless device 12.

In the first connection standby 62, when the wireless device 12 receives a DPP authentication request from a plurality of wireless APs (for example, a wireless access point 11 and a neighboring access point 15) within a certain period of time, the wireless device 12 shifts to the second connection standby 63. ..

In the second connection standby 63, the wireless device 12 guides the user 14 to press the AOSS button of the wireless access point (that is, the wireless access point 11) possessed by the user 14. This guidance can be performed by, for example, the user interface 34 shown in FIG. For example, when the wireless device 12 is a television, this guidance can be performed by screen output or audio output. When the AOSS button is pressed, the wireless access point 11 transmits a DPP authentication request with the AOSS flag to the wireless device 12.

In the second connection standby 63, the wireless device 12 returns to the initial state 61 when the user 14 performs a stop operation on the wireless device 12 or a timeout occurs after a certain period of time has elapsed. When the DPP authentication request with the AOSS flag is received in the second connection standby 63 within a certain period of time, the wireless device 12 shifts to the DPP authentication process 64 and is connected to the wireless access point 11 which is the receiving source of the DPP authentication request. Authenticate with.

<Operation in the wireless communication system 10 shown in FIG. 5>
FIG. 7 is a sequence diagram showing an example of the operation in the wireless communication system 10 shown in FIG. In FIG. 7, the same processing as that shown in FIG. 4 is designated by the same reference numerals and description thereof will be omitted. Further, in FIG. 7, a part of the processing shown in FIG. 4 is not shown.

In the wireless communication system 10 shown in FIG. 5, the probe request transmitted in step S403 is received not only by the wireless access point 11 but also by the neighboring access point 15.

After executing the processes of steps S404 and S405 shown in FIG. 4, the wireless access point 11 transmits a DPP authentication request to the wireless device 12 in step S407. Further, since the neighboring access point 15 also has the same unique number as the wireless access point 11, the same process as that of the wireless access point 11 is executed, and the DPP authentication request is transmitted to the wireless device 12 (step S71).

Since the wireless device 12 has received the DPP authentication request from the wireless access point 11 and the neighboring access point 15, the wireless device 12 guides the user 14 to press the AOSS button of the wireless access point (that is, the wireless access point 11) possessed by the user 14 (step). S72).

Each of the wireless access point 11 and the neighboring access point 15 repeats the transmission of the DPP authentication request in steps S407 and S71 until there is a response from the wireless device 12. Then, when the user 14 presses the AOSS button of the wireless access point 11 (step S73), the wireless access point 11 adds an AOSS flag indicating that the AOSS button has been pressed to the DPP authentication request to be transmitted. The AOSS flag is information for distinguishing the wireless access point 11 from the neighboring access point 15, and is an example of the third identification information of the present invention.

When the wireless device 12 receives the DPP authentication request with the AOSS flag, it executes the processes of steps S408 and S409 shown in FIG. 4, and then transmits the DPP authentication response to the wireless access point 11 by step S410. Since this DPP authentication response includes the R-nonce encrypted with the public key A1 of the wireless access point 11, the wireless access point 11 can be decrypted, but the neighboring access point 15 cannot be decrypted.

Upon receiving the decodable DPP authentication response from the wireless device 12, the wireless access point 11 stops the transmission of the DPP authentication request in step S407, and proceeds to step S411 shown in FIG. Subsequent processes in the wireless access point 11 and the wireless device 12 are the same as in steps S411 to S419 shown in FIG.

On the other hand, since the neighboring access point 15 does not receive the decryptable DPP authentication response from the wireless device 12, the transmission of the DPP authentication request in step S71 is continued, but the time-out occurs after a certain period of time (). Step S74), the process is terminated.

As described above, the wireless access point 11 is for distinguishing the wireless access point 11 from the neighboring access point 15 when the neighboring access point 15 having the same unique number as the unique number of the wireless access point 11 exists in the vicinity. The AOSS flag (third identification information) is transmitted to the wireless device 12.

Specifically, when the wireless device 12 receives a DPP authentication request from a plurality of wireless APs (for example, a wireless access point 11 and a neighboring access point 15) within a certain period of time, the wireless device 12 possesses a wireless access point (that is, that is). A predetermined operation (for example, pressing the AOSS button) for the wireless access point 11) is guided to the user 14. Then, when the wireless device 12 receives a predetermined operation, the wireless device 12 transmits a DPP authentication request including the AOSS flag to the wireless device 12. The predetermined operation is not limited to pressing the AOSS button, but may be pressing a button other than the AOSS button, or may be an operation for the wireless access point 11 other than pressing the button.

The wireless device 12 continues encrypted communication with the wireless access point 11 according to the AOSS flag transmitted by the wireless access point 11. As a result, even if there is a neighboring access point 15 whose unique number overlaps with that of the wireless access point 11, the wireless device 12 distinguishes from the neighboring access point 15 and continues encrypted communication with the wireless access point 11. , Can be connected to the wireless access point 11.

The third identification information for distinguishing the wireless access point 11 from the neighboring access point 15 is not limited to the AOSS flag and can be arbitrarily designed.

(Modified example of the method in which the wireless access point 11 acquires an individual ID)
As a method for the wireless access point 11 to acquire the individual ID of the wireless device 12, a method for the wireless device 12 to transmit the individual ID to the wireless access point 11 has been described. However, the wireless access point 11 acquires the individual ID of the wireless device 12. The method of doing so is not limited to this.

<Modification 1 of wireless communication system 10>
FIG. 8 is a diagram showing a modification 1 of the wireless communication system 10. As shown in FIG. 8, the wireless communication system 10 may include a user terminal 16 in addition to the configuration shown in FIG. The user terminal 16 is an information terminal possessed by the user 14, such as a smartphone, a tablet terminal, or a PC (Personal Computer).

Further, the user terminal 16 can communicate with the wireless access point 11 (BLE or wireless LAN or wired LAN). The communication between the user terminal 16 and the wireless access point 11 may be a wireless communication such as a wireless LAN or a short-range wireless communication, or may be a wired communication such as a wired LAN. Short-range wireless communication is, for example, BLE (Bluetooth Low Energy). Bluetooth is a registered trademark.

The user terminal 16 accepts the input of the individual ID by the operation from the user 14 and transmits the input individual ID to the wireless access point 11. In this case, the wireless device 12 does not have to transmit the individual ID to the wireless access point 11.

The input of the individual ID by the user terminal 16 can be performed, for example, by photographing a two-dimensional code (for example, a QR code) indicating the individual ID with a photographing device included in the user terminal 16. This two-dimensional code is described in, for example, the housing of the wireless device 12, the instruction manual of the wireless device 12, and the like.

Alternatively, the individual ID may be input by the user terminal 16 by the user 14 manually inputting the individual ID (directly inputting a number or the like by a key operation or the like) by operating the user terminal 16. The manual input is, for example, directly inputting the numerical value or the like of the individual ID recognized by the user 14 by a key operation or the like.

<Operation in the wireless communication system 10 shown in FIG. 8>
FIG. 9 is a sequence diagram showing an example of the operation in the wireless communication system 10 shown in FIG. In FIG. 9, the same processing as that shown in FIG. 4 is designated by the same reference numerals and description thereof will be omitted.

First, the user terminal 16 accepts an operation from the user 14 (step S91), and acquires an individual ID of the wireless device 12 according to the accepted operation (step S92). For example, the user terminal 16 receives a shooting operation from the user 14 and shoots a QR code written on the wireless device 12, thereby acquiring an individual ID of the wireless device 12. Alternatively, the user terminal 16 may acquire the individual ID of the wireless device 12 by accepting the operation of directly manually inputting the individual ID of the wireless device 12 from the user 14.

Next, the user terminal 16 transmits the individual ID acquired in step S92 to the wireless access point 11 (step S93). For example, the user terminal 16 transmits a probe request including an individual ID to the wireless access point 11.

Following step S93, the radio access point 11 and the radio device 12 execute steps S405 to S419 shown in FIG. However, in step S405, the wireless access point 11 generates the public key B1 based on the individual ID received in step S93. Further, in step S406, the wireless access point 11 generates the private key B2 based on the individual ID stored in the wireless access point 11.

Further, in this example, the wireless access point 11 and the wireless device 12 may generate the public key B1 and the private key B2 based on the unique number and the individual ID. For example, in the operation shown in FIG. 9, steps S401 to S403 shown in FIG. 4 may be performed together with steps S91 to S93. In this case, in step S403, the wireless device 12 does not have to include the individual ID in the probe request.

Thereby, in steps S91 to S93 and steps S401 to S403, the wireless access point 11 and the wireless device 12 can share the unique number and the individual ID. After that, the wireless access point 11 and the wireless device 12 perform the same operation as in steps S404 to S419 shown in FIG.

<Modification 2 of wireless communication system 10>
FIG. 10 is a diagram showing a modification 2 of the wireless communication system 10. As shown in FIG. 10, the wireless communication system 10 may include a server 17 in addition to the configuration shown in FIG. The server 17 may be one physical server or a virtual server (for example, a cloud server) realized by a plurality of servers.

As an example, the server 17 is a cloud service server provided by the manufacturer of the wireless access point 11. Then, the user 14 has an account for this cloud service, and the wireless access point 11 is logged in to the cloud service by this account.

The server 17 can communicate with the wireless access point 11 and the user terminal 16. In the example shown in FIG. 10, the server 17 can communicate with the wireless access point 11 and the user terminal 16 via WAN2.

The user terminal 16 can communicate with the server 17 via WAN 2. When the user terminal 16 is a smartphone or the like, for example, the user terminal 16 can be connected to WAN 2 via a mobile communication network. However, the user terminal 16 may be connectable to the WAN 2 via the wireless access point 11. The user terminal 16 does not have to be able to communicate with the wireless access point 11.

The user terminal 16 accepts the input of the individual ID by the operation from the user 14 and transmits the input individual ID to the server 17. For example, the user 14 operates the user terminal 16 to log in to the above cloud service, and performs an operation of inputting an individual ID on the input screen of the cloud service. As a result, the individual ID is transmitted from the user terminal 16 to the server 17. The server 17 receives the individual ID from the user terminal 16 and transmits the received individual ID to the wireless access point 11. The individual ID can be transmitted from the server 17 to the wireless access point 11 by, for example, a push method transmission.

<Operation in the wireless communication system 10 shown in FIG. 9>
FIG. 11 is a sequence diagram showing an example of the operation in the wireless communication system 10 shown in FIG. In FIG. 11, the same processing as that shown in FIG. 9 is designated by the same reference numerals and description thereof will be omitted.

The operation of FIG. 11 differs from the operation shown in FIG. 9 in that the transmission of the individual ID from the user terminal 16 to the wireless access point 11 in step S93 is performed via the server 17. That is, in step S93, the user terminal 16 transmits the individual ID acquired in step S92 to the server 17. The server 17 transmits the individual ID received from the user terminal 16 to the wireless access point 11.

<Modification 3 of wireless communication system 10>
FIG. 12 is a diagram showing a modification 3 of the wireless communication system 10. As shown in FIG. 12, the wireless communication system 10 may include a first server 18 and a second server 19 in addition to the configuration shown in FIG. Each of the first server 18 and the second server 19 may be one physical server or a virtual server realized by a plurality of servers.

The first server 18 can communicate with the wireless access point 11. In the example shown in FIG. 12, the first server 18 is connected to the WAN 2 and can communicate with the wireless access point 11 via the WAN 2.

As an example, the first server 18 is a server of the first cloud service provided by the manufacturer of the wireless access point 11. The user 14 has an account of the first cloud service, and the wireless access point 11 is logged in to the first cloud service by this account.

The second server 19 can communicate with the first server 18. In the example shown in FIG. 12, the second server 19 is connected to the WAN 2 and can communicate with the first server 18 via the WAN 2. Further, the second server 19 stores the individual ID of the wireless device 12 and the serial number (serial number) of the wireless device 12 in association with each other.

As an example, the second server 19 is a server of the second cloud service provided by the manufacturer of the wireless device 12. The user 14 has an account for the second cloud service, and the product of the wireless device 12 is registered in this account. This product registration includes the registration of the serial number of the wireless device 12.

Further, the second server 19 has a database including correspondence information between the serial number of the wireless device 12 and the individual ID of the wireless device 12. This correspondence information is registered in the database of the second server 19 at the time of manufacturing the wireless device 12, for example. The user 14 sets the account of the second cloud service to be linked with the account of the first cloud service. This makes it possible to inquire the individual ID of the wireless device 12 based on the serial number of the wireless device 12 to the second server 19 via the first server 18.

<Operation in the wireless communication system 10 shown in FIG. 12>
FIG. 13 is a sequence diagram showing an example of the operation in the wireless communication system 10 shown in FIG. In FIG. 13, the same processing as that shown in FIG. 4 is designated by the same reference numerals and description thereof will be omitted.

First, steps S401 to S404 shown in FIG. 4 are performed. However, in step S403, the wireless device 12 includes the serial number of the wireless device 12 in the probe request instead of the individual ID of the wireless device 12.

After step S404, the wireless access point 11 transmits the serial number included in the probe request received in step S403 to the first server 18, so that the individual ID of the wireless device 12 corresponding to the serial number of the wireless device 12 is transmitted. Is inquired (step S131).

Next, the first server 18 transmits the serial number received in step S131 to the second server 19, so that the individual ID of the wireless device 12 corresponding to the serial number of the wireless device 12 is transmitted to the second server 19. Is inquired (step S132).

Next, the second server 19 acquires the individual ID corresponding to the serial number received in step S132 based on the correspondence information between the serial number and the individual ID (step S133). Next, the second server 19 transmits the individual ID acquired in step S133 to the first server 18 (step S134). Next, the first server 18 transmits the individual ID received in step S134 to the wireless access point 11 (step S135).

In this way, the wireless access point 11 receives the individual ID via the first server 18 by making an inquiry based on the serial number to the second server 19 via the first server 18. As a result, the wireless access point 11 and the wireless device 12 can share the unique number and the individual ID without the wireless device 12 transmitting the individual ID to the wireless access point 11. After that, the wireless access point 11 and the wireless device 12 execute steps S405 to S419 shown in FIG. In FIG. 13, the processes after step S407 are not shown.

In the examples of FIGS. 12 and 13, the configuration in which the first server 18 and the second server 19 are provided has been described, but the configuration in which one server having the functions of the first server 18 and the second server 19 is provided is also possible. good. In this case, communication between the first server 18 and the second server 19, for example, steps S132 and S134 shown in FIG. 13 can be omitted, and the wireless access point 11 directly assigns a serial number to one server. Inquire about the corresponding individual ID.

<Modification 4 of wireless communication system 10>
In the process shown in FIG. 13, instead of steps S401 and S402, the user 14 may perform the process start operation on the wireless device 12. This process start operation does not have to include the input of a unique number. In this case, for example, the wireless device 12 shifts to step S403 according to the process start operation.

In step S403, the wireless device 12 includes, for example, the individual ID of the wireless device 12 in the Probe request. The wireless access point 11 proceeds to step S131 after step S403. In this example, in steps S131 and S132, the individual ID is transmitted instead of the serial number.

Further, the second server 19 stores the correspondence information between the individual ID and the unique number. For example, the second server 19 performs a process of associating the individual ID of the wireless device 12 with the unique number of the wireless access point 11 at the time of the above setting for linking the account of the second cloud service with the account of the first cloud service. By doing so, the correspondence information between the individual ID and the unique number is stored.

In step S133, the second server 19 acquires the unique number corresponding to the individual ID transmitted by step S132. In steps S134 and S135, a unique number is transmitted instead of the individual ID. After step S135, the wireless access point 11 performs the same collation as in step S404 based on the unique number received in step S135, and proceeds to step S405. As a result, the wireless access point 11 can identify and collate the unique number corresponding to the received serial number without the user 14 inputting the unique number into the wireless device 12.

In step S403, the radio device 12 may include the serial number of the radio device 12 in the probe request. The wireless access point 11 proceeds to step S131 after step S403. In this example, in steps S131 and S132, the serial number is transmitted instead of the serial number.

Further, the second server 19 stores the correspondence information between the serial number and the combination of the individual ID and the unique number. For example, the second server 19 sets the individual ID and serial number of the wireless device 12 and the unique number of the wireless access point 11 in the above setting for linking the account of the second cloud service with the account of the first cloud service. By performing the association processing, the correspondence information of the serial number and the combination of the individual ID and the unique number is stored.

In step S133, the second server 19 acquires the individual ID and the unique number corresponding to the serial number transmitted by step S132. In steps S134 and S135, a unique number is transmitted in addition to the individual ID. After step S135, the wireless access point 11 performs the same collation as in step S404 based on the unique number received in step S135, and proceeds to step S405. As a result, the wireless access point 11 can identify and collate the unique number corresponding to the received serial number without the user 14 inputting the unique number into the wireless device 12.

<Modified example of the procedure for sharing SSID and key>
The process of sharing the SSID and the key by performing encrypted communication by DPP after the wireless access point 11 and the wireless device 12 share the unique number and the individual ID has been described, but the process of sharing the SSID and the key is this. Not limited to.

FIG. 14 is a sequence diagram showing a modified example of the procedure for sharing the SSID and the key. In FIG. 14, the same processing as that shown in FIG. 4 is designated by the same reference numerals and description thereof will be omitted.

First, the wireless access point 11 and the wireless device 12 share a unique number and an individual ID by executing steps S401 to S406 shown in FIG. After that, the wireless access point 11 transmits the individual ID included in the Probe request received in step S403 and the SSID and key encrypted with the public key B1 generated in step S405 to the wireless device 12 (step S141). ..

Next, after collating in step S408, the wireless device 12 decodes the SSID and key received in step S141 with the secret key B2 generated in step S406, and wirelessly uses the decoded SSID and key for the wireless device 12. Set in the profile (step S142). As a result, the SSID and the key are shared between the wireless access point 11 and the wireless device 12, and the wireless access point 11 and the wireless device 12 use the SSID and the key to perform wireless data communication with each other.

(Notification of function)
The wireless access point 11 may be notified by a wireless signal (for example, a beacon) of information indicating that the wireless access point 11 has a function of connecting by the above method. The wireless device 12 may start connecting to the wireless access point 11 by the above method in response to receiving this information. For example, in the example shown in FIG. 4, when the wireless device 12 receives the information notified by the wireless access point 11, it outputs a message prompting the user 14 to input the unique number of the wireless access point 11 by screen display or voice. .. As a result, step S402 is started.

(Modified example of wireless device 12)
Although the case where the wireless device 12 is a television has been described, the wireless device 12 is not limited to the television, and can be various communication devices having a function of performing wireless communication with the wireless access point 11. For example, the wireless device 12 may be an information terminal such as a smartphone, a tablet terminal, a PC, or a wearable terminal. Alternatively, the wireless device 12 may be various sensor devices such as a Web camera and a microphone. Alternatively, it may be a home appliance other than television, such as a refrigerator. In addition, the wireless device 12 may be a NAS (Network Attached Storage), a printer, a scanner, a computer game machine, or the like.

(Modification example of the second identification information)
Although the unique number has been given as an example of the second identification information for identifying the wireless access point 11, the second identification information is not limited to this. For example, the second identification information may be an alphabet, a symbol, or the like.

(About the program)
The programs stored in the ROM of the memory 22 of the wireless access point 11 and the programs stored in the ROM of the memory 32 of the wireless device 12 are non-transitory storage media in which these programs can be read by a computer. Is remembered in. Such a "computer-readable storage medium" is, for example, an optical medium such as a CD-ROM (Compact Disc-ROM), a magnetic storage medium such as a USB memory or a memory card, and the like. It is also possible to provide such a program by downloading over a network.

As described above, the following matters are disclosed in the present specification.

The disclosed wireless communication system includes a wireless access point and a wireless device, and the wireless access point and the wireless device mutually perform encrypted communication using key information based on the first identification information of the wireless device. The wireless setting information is shared, and wireless data communication is performed with each other using the wireless setting information.

In the disclosed wireless communication system, each of the wireless access point and the wireless device generates the key information based on the second identification information and the first identification information of the wireless access point.

In the disclosed wireless communication system, the wireless device accepts the input of the second identification information, generates the key information based on the input second identification information and the first identification information, and the first. 1 The identification information is transmitted to the wireless access point, and the wireless access point generates the key information based on the first identification information and the second identification information transmitted by the wireless device.

In the disclosed wireless communication system, the wireless device transmits the first identification information and the input information based on the second identification information to the wireless access point, and the wireless access point is the wireless. The encrypted communication is performed according to the result of comparing the information based on the second identification information transmitted by the device and the second identification information possessed by the wireless access point.

In the disclosed wireless communication system, the information based on the second identification information is a hash value of the second identification information.

The disclosed wireless communication system uses the wireless access point when the wireless access point has another access point having the same second identification information as the second identification information of the wireless access point in the vicinity. The third identification information for distinguishing from the other access points is transmitted to the wireless device, and the wireless device continues the encrypted communication according to the third identification information transmitted by the wireless access point. It is a thing.

In the disclosed wireless communication system, the wireless access point generates the first public key information of the public key encryption method as the key information, and the encrypted communication is encrypted based on the generated first public key information. The encrypted first information is transmitted to the wireless device, and the wireless device generates first secret key information paired with the first public key information as the key information, and in the encrypted communication, the wireless device is used. The first information transmitted by the access point is decrypted based on the generated first private key information.

In the disclosed wireless communication system, the wireless access point transmits the first information and the information based on the first identification information to the wireless device in the encrypted communication, and the wireless device is said to be the same. The encrypted communication is continued according to the result of comparing the information based on the first identification information transmitted by the wireless access point and the first identification information possessed by the wireless device.

In the disclosed wireless communication system, the wireless access point transmits the first information and the generated information based on the first public key information to the wireless device in the encrypted communication, and the wireless device transmits the information. However, the encrypted communication is continued according to the result of comparing the information based on the first public key information transmitted by the wireless access point and the generated first public key information.

In the disclosed wireless communication system, the wireless access point has a second public key information and a second private key information paired with each other in a public key encryption method, and transmits the second public key information to the wireless device. Then, in the encrypted communication, the wireless device transmits the second information encrypted based on the second public key information received from the wireless access point to the wireless access point, and the wireless access point receives the second information. In the encrypted communication, the second information transmitted by the wireless device is decrypted based on the second secret key information.

The disclosed wireless communication system is capable of communicating with the wireless access point, accepts the input of the first identification information, and transmits the input first identification information to the wireless access point. The wireless access point includes a user terminal different from the wireless device, and generates the key information based on the first identification information received from the user terminal.

In the disclosed wireless communication system, the input of the first identification information by the user terminal is performed by photographing the user terminal with a two-dimensional code indicating the first identification information.

In the disclosed wireless communication system, the input of the first identification information by the user terminal is performed by the user manually inputting the first identification information by operating the user terminal.

The disclosed wireless communication system includes a server that receives the first identification information from a user terminal and transmits the received first identification information to the wireless access point, and the wireless access point receives from the server. The key information is generated based on the first identification information.

The disclosed wireless communication system includes a server that stores the first identification information of the wireless device in association with the serial number of the wireless device, and the wireless device transmits the serial number to the wireless access point. Then, the wireless access point generates the key information based on the first identification information received from the server based on the serial number transmitted by the wireless device.

In the disclosed wireless communication system, the server is capable of communicating between a first server capable of communicating with the wireless access point and the first server, and the first server of the wireless device is capable of communicating with the first server. The wireless access point makes an inquiry to the second server via the first server based on the serial number, including a second server that stores the identification information in association with the serial number of the wireless device. By performing the combination, the first identification information is received via the first server.

In the disclosed wireless communication system, the wireless setting information includes key information for encryption of the wireless data communication.

The disclosed communication method is a communication method of a wireless communication system including a wireless access point and a wireless device, and the wireless access point and the wireless device use key information based on the first identification information of the wireless device. Wireless setting information is shared by performing encrypted communication with each other, and wireless data communication is performed with each other using the wireless setting information.

The disclosed wireless access point shares the wireless setting information with the wireless device by performing encrypted communication with the wireless device using the key information based on the first identification information of the wireless device, and the wireless setting is performed. Wireless data communication is performed with the wireless device using information.

The disclosed control program transmits the wireless setting information to the wireless device by performing encrypted communication with the wireless device using the key information based on the first identification information of the wireless device to the processor of the wireless access point. The purpose is to execute a process of sharing and performing wireless data communication with the wireless device using the wireless setting information.

2 WAN
10 Wireless communication system 11 Wireless access point 12 Wireless device 13 Remote controller 14 User 15 Neighborhood access point 16 User terminal 17 Server 18 First server 19 Second server 21,31 Processor 22,32 Memory 23,33 Wireless communication interface 24 Wired communication Interface 29, 39 Bus 34 User interface 61 Initial state 62 First connection standby 63 Second connection standby 64 DPP authentication processing 65 Setting acquisition processing

Claims (20)

Including wireless access points and wireless devices
The wireless access point and the wireless device
The wireless setting information is shared by performing encrypted communication using the key information based on the first identification information of the wireless device.
Wireless data communication with each other using the wireless setting information.
Wireless communication system. The wireless communication system according to claim 1.
Each of the wireless access point and the wireless device generates the key information based on the second identification information of the wireless access point and the first identification information.
Wireless communication system. The wireless communication system according to claim 2.
The wireless device receives an input of the second identification information, generates the key information based on the input second identification information and the first identification information, and uses the first identification information as the wireless access point. Send to
The wireless access point generates the key information based on the first identification information and the second identification information transmitted by the wireless device.
Wireless communication system. The wireless communication system according to claim 3.
The wireless device transmits the first identification information and the input information based on the second identification information to the wireless access point.
The wireless access point performs the encrypted communication according to the result of comparing the information based on the second identification information transmitted by the wireless device and the second identification information possessed by the wireless access point.
Wireless communication system. The wireless communication system according to claim 4.
The information based on the second identification information is a hash value of the second identification information.
Wireless communication system. The wireless communication system according to any one of claims 2 to 5.
The wireless access point distinguishes the wireless access point from the other access point when another access point having the same second identification information as the second identification information of the wireless access point exists in the vicinity. The third identification information for the purpose is transmitted to the wireless device,
The wireless device continues the encrypted communication in response to the third identification information transmitted by the wireless access point.
Wireless communication system. The wireless communication system according to any one of claims 1 to 6.
The wireless access point generates the first public key information of the public key encryption method as the key information, and in the encrypted communication, the wireless first information encrypted based on the generated first public key information is used. Send to the device,
The wireless device generates first secret key information paired with the first public key information as the key information, and generates the first information transmitted by the wireless access point in the encrypted communication. Decrypt based on the first private key information
Wireless communication system. The wireless communication system according to claim 7.
The wireless access point transmits the first information and the information based on the first identification information to the wireless device in the encrypted communication.
The wireless device continues the encrypted communication according to the result of comparing the information based on the first identification information transmitted by the wireless access point with the first identification information possessed by the wireless device.
Wireless communication system. The wireless communication system according to claim 7 or 8.
The wireless access point transmits the first information and the generated information based on the first public key information to the wireless device in the encrypted communication.
The wireless device continues the encrypted communication according to the result of comparing the information based on the first public key information transmitted by the wireless access point with the generated first public key information.
Wireless communication system. The wireless communication system according to any one of claims 1 to 9.
The wireless access point has a second public key information and a second private key information paired with each other in the public key cryptosystem, and transmits the second public key information to the wireless device.
In the encrypted communication, the wireless device transmits the second information encrypted based on the second public key information received from the wireless access point to the wireless access point.
The wireless access point decodes the second information transmitted by the wireless device in the encrypted communication based on the second secret key information.
Wireless communication system. The wireless communication system according to any one of claims 1 to 10.
Includes a user terminal different from the wireless device, capable of communicating with the wireless access point, accepting input of the first identification information, and transmitting the input first identification information to the wireless access point. ,
The wireless access point generates the key information based on the first identification information received from the user terminal.
Wireless communication system. The wireless communication system according to claim 11.
The input of the first identification information by the user terminal is performed by taking a picture of the two-dimensional code indicating the first identification information by the user terminal.
Wireless communication system. The wireless communication system according to claim 11 or 12.
The input of the first identification information by the user terminal is performed by the user manually inputting the first identification information by operating the user terminal.
Wireless communication system. The wireless communication system according to any one of claims 1 to 13.
Includes a server that receives the first identification information from a user terminal and transmits the received first identification information to the wireless access point.
The wireless access point generates the key information based on the first identification information received from the server.
Wireless communication system. The wireless communication system according to any one of claims 1 to 13.
A server that stores the first identification information of the wireless device in association with the serial number of the wireless device is included.
The wireless device transmits the serial number to the wireless access point.
The wireless access point generates the key information based on the first identification information received from the server based on the serial number transmitted by the wireless device.
Wireless communication system. The wireless communication system according to claim 15.
The server
A first server capable of communicating with the wireless access point,
A second server capable of communicating with the first server and storing the first identification information of the wireless device in association with the serial number of the wireless device is included.
The wireless access point receives the first identification information via the first server by making an inquiry based on the serial number to the second server via the first server.
Wireless communication system. The wireless communication system according to any one of claims 1 to 16.
The wireless setting information includes key information for encryption of the wireless data communication.
Wireless communication system. A communication method for wireless communication systems including wireless access points and wireless devices.
The wireless access point and the wireless device
The wireless setting information is shared by performing encrypted communication using the key information based on the first identification information of the wireless device.
Wireless data communication with each other using the wireless setting information.
Communication method. By performing encrypted communication with the wireless device using the key information based on the first identification information of the wireless device, the wireless setting information is shared with the wireless device.
Wireless data communication is performed with the wireless device using the wireless setting information.
Wireless access point. To the processor of the wireless access point,
By performing encrypted communication with the wireless device using the key information based on the first identification information of the wireless device, the wireless setting information is shared with the wireless device.
Wireless data communication is performed with the wireless device using the wireless setting information.
A control program for executing processing.

Images