JP5111974B2 - Communication system and communication apparatus - Google Patents

Description

  The present invention relates to a communication system and a communication device that perform encrypted communication according to a protocol for performing an exchange procedure for exchanging association information before starting encrypted communication.

  In recent years, with the improvement of wireless communication technology, it has become common to use wireless communication devices in homes and offices. Unlike wired communication, wireless communication allows communication without physically connecting wireless communication devices. For this reason, a third party can intercept data. In order to prevent such interception, there is a wireless communication device that performs wireless communication (encrypted communication) by encrypting data. Among such wireless communication devices, in order to prevent data interception, before starting encrypted communication between wireless communication devices, mutual authentication information, encryption methods for encrypted communication, encryption keys, etc. Some exchange and share information. The process of establishing a safe communication path in this way is called association. There are various methods for this association. For example, there are a method in which a user inputs authentication information and a method in which wireless communication apparatuses are directly physically connected. In either method, information on association (association information) is held in both wireless communication apparatuses. However, even during secure communication, association information may be lost due to a temporary malfunction. In such a case, it was difficult to quickly return to a normal state without sacrificing safety. In recent years, a technique has been developed in which parameter information related to association information is stored in a medium, and when this association information is lost, the parameter information can be safely and promptly dealt with (see, for example, Patent Document 1). ).

Japanese Patent No. 3629237

  By the way, one of wireless communication devices that have performed encrypted communication may be replaced with a new wireless communication device due to a failure or the like. In this case, in order to start encrypted communication between the wireless communication apparatuses after replacement, it is necessary to perform association again. Although the work itself for performing the association is a work that is completed in a short time, it is necessary to perform this work for all other wireless communication devices connected to the wireless communication device. For example, dozens of devices are often connected to a printer device shared in an office or the like. When this printer device functions as a wireless communication device, every time the printer device is replaced, if a new association is made with all the devices connected to the printer device before the replacement, the replacement The work burden is large. In recent years, from the viewpoint of security, it is often the case that not only a user but also an administrator is required to perform an operation when performing association between wireless communication devices in order to prevent connection of devices other than those necessary. Similarly, when a new wireless device is added, the work load for newly performing association is large. Accordingly, when replacing or adding a wireless communication device, it has been desired to simplify the work for starting encrypted communication between the wireless communication devices without sacrificing safety.

  The present invention has been made in view of the above, and when replacing or adding a communication device, it is possible to simplify the work for starting encrypted communication between the communication devices without sacrificing safety. An object is to provide a simple communication system and communication apparatus.

In order to solve the above-described problems and achieve the object, the invention according to claim 1 is a communication system, wherein a first communication device and a second communication device are connected via a network, and the first communication is performed. A communication system capable of performing encrypted communication with an information processing device according to a protocol for performing an exchange procedure for exchanging association information before starting encrypted communication, wherein each of the first communication device and the second communication device includes: Is a key creation for creating a public key for encrypting association information used for encrypted communication with the information processing apparatus and a secret key for decrypting the association information encrypted with the public key And the public key created by the key creating means is transmitted to the second communication device, and the second communication device is encrypted using the transmitted public key. Association information acquisition means for receiving from the second communication apparatus association information that has undergone an exchange procedure before the apparatus starts encrypted communication with the information processing apparatus, and association information acquired by the association information acquisition means as the key A decryption unit that decrypts using the secret key generated by the creation unit; and a storage unit that stores association information decrypted by the decryption unit. Encryption means for encrypting association information that has been exchanged before starting encrypted communication with a device, using a public key transmitted from the first communication device;
Association information transmitting means for transmitting the association information encrypted by the encryption means to the first communication device .

According to a second aspect of the present invention, in the first aspect of the invention, the first communication device and the second communication device are connected via a wired interface.

According to a third aspect of the present invention, in the first aspect of the present invention, the first communication device and the second communication device are connected via a wireless interface.

The invention according to claim 4 is a communication device capable of encrypted communication with an information processing device in accordance with a protocol for performing an exchange procedure for exchanging association information before starting encrypted communication . A key creation unit that creates a public key for encrypting association information used for encrypted communication and a secret key for decrypting the association information encrypted by the public key, and created by the key creation unit The public key is transmitted to another communication device, and the other communication device encrypts the transmitted public key using the transmitted public key. The exchange procedure before the other communication device starts encrypted communication with the information processing device. Association information acquisition means for receiving the association information obtained from the other communication device, and the association information acquired by the association information acquisition means Having a decoding means for decoding using the private key of Deployment information generated by the key generation means, a storage means for storing the association information, wherein the decoding means has decoded, characterized by.

  According to the present invention, when replacing or adding a communication device, it is possible to simplify the work for starting encrypted communication between the communication devices without sacrificing safety.

  Exemplary embodiments of a communication system and a communication apparatus according to the present invention will be explained below in detail with reference to the accompanying drawings.

[First embodiment]
(1) Configuration <Configuration of communication system>
FIG. 1 is a diagram illustrating a configuration of a communication system according to the present embodiment. Here, a personal computer PC1, a multifunction peripheral MFP1, and a multifunction peripheral MFP2 are handled as communication devices. First, the personal computer PC1 and the MFP MFP1 perform wireless communication to form a communication system. Thereafter, the MFP MFP1 is replaced with the MFP MFP2 due to a failure or the like, and the MFP MFP2 and the personal computer PC1 perform wireless communication to form a communication system. The protocol used when these perform wireless communication uses a protocol for performing an exchange procedure for exchanging association information. For example, wireless-USB (Universal Serial Bus).

  In wireless communication using wireless-USB, when the personal computer PC1 and the MFP MFP1 start wireless communication for the first time, an association procedure is performed between the two to exchange association information. When the MFP MFP1 that is a wireless communication partner of the personal computer PC1 is replaced with the MFP MFP2, conventionally, it has been necessary to newly perform association between the personal computer PC1 and the MFP MFP2. In the present embodiment, association work performed between personal computer PC1 and MFP MFP2 is simplified by transferring association information from MFP MFP1 to MFP MFP2. As shown in FIG. 1, the transfer of the association information from the MFP MFP1 to the MFP MFP2 is performed via a removable portable storage medium such as the USB memory U1. A specific transfer method will be described later. The association and the association information are described in, for example, documents such as Patent Document 1, and thus detailed description thereof is omitted.

<Configuration of MFP>
Next, the hardware configuration of the MFPs MFP1 and MFP2 will be described. When it is not necessary to distinguish between the MFP MFP 1 and the MFP MFP 2, they are simply referred to as MFP MFP. FIG. 2 is a diagram showing a hardware configuration of the MFP MFP according to the present embodiment. When distinguishing between the constituent elements of the MFP MFP 1 and the constituent elements of the MFP MFP 2 for each of the constituent elements shown in the figure, “_1” or “_2” is added after the reference numerals of the constituent elements. Append it.

  The MFP MFP includes a controller 100, an engine unit 200, a fax control unit 203, a PCI (Peripheral Component Interconnect) bus 300 for connecting them, and an operation panel 400. The controller 100 is a controller that controls the entire MFP MFP and controls drawing, communication, and input from an operation unit (not shown). The engine unit 200 includes a scanner 201 and a plotter 202. The engine unit 200 includes an image processing unit that performs image processing such as error diffusion and gamma conversion. The operation panel 400 is formed integrally with a display device such as a CRT (Cathode Ray Tube) or a liquid crystal monitor, and an operation device including operation keys, operation buttons, a mouse, and the like for inputting operations from the user. . The operation panel 400 is connected to the controller 100 via the PCI bus 301 and transmits / receives data to / from the controller 100.

  The controller 100 includes a CPU (Central Processing Unit) 101, a North Bridge (NB) 102, a system memory (MEM-P) 103, a local memory (MEM-C) 104, an ASIC (Application Specific Integrated Circuit) 105, The hard disk drive (HDD) 106 and the interface unit 107 have a configuration in which the north bridge (NB) 102 and the ASIC 105 are connected by an AGP (Accelerated Graphics Port) bus 108.

  The CPU 101 performs overall control of the MFP MFP, and has a chip set including the NB 102 and the MEM-P 103, and is connected to other devices via this chip set.

  The NB 102 is a bridge for connecting the CPU 101, the MEM-P 103, the AGP 108, and the interface unit 107, and includes a memory controller that controls reading and writing to the MEM-P 103, a PCI master, and an AGP target.

  The interface unit 107 includes a network interface corresponding to each communication standard and an interface for peripheral devices. Specifically, the interface unit 107 includes a wireless USB 107a and IEEE (the Institute of Electrical and Electronics Engineers) 802.11b interface 107d as a network interface, and a NIC (Network Interface Card) 107b as a wired interface. Have. In the present embodiment, MFP MFP1 performs wireless communication with personal computer PC1 via WirelessUSB 107a. In addition, the controller 100 includes a USB 107c, an IEEE 1394 interface 107e, a USB host 107f, and a memory card I / F 107g, which are wired interfaces, as interfaces with peripheral devices. The USB host 107f controls communication when the removable USB memory U1 shown in FIG. 1 is connected to the MFP MFP. Memory card I / F 107g controls communication when removable memory card M1 is connected to MFP MFP.

  The MEM-P 103 is a system memory used as a memory for storing programs and data, a memory for developing programs and data, a drawing memory for printers, and the like, and includes a ROM (Read Only Memory) and a RAM (Random Access Memory). Have. The ROM is a read-only memory used as a program and data storage memory, and the RAM is a writable and readable memory used as a program and data development memory, a printer drawing memory, and the like.

  The ASIC 105 is an IC (Integrated Circuit) for image processing having hardware elements for image processing, and has a role of a bridge for connecting the AGP 108, the PCI buses 300 to 301, the HDD 106, and the MEM-C 104. The ASIC 105 is connected to the NB 102 via the AGP 108, the engine unit 200 is connected via the PCI bus 300, and the operation panel 400 is connected via the PCI bus 301. The ASIC 105 includes a PCI target and an AGP master, an arbiter (ARB) that forms the core of the ASIC 105, a memory controller that controls the MEM-C 104, and a plurality of DMACs (Direct Memory) that perform rotation of image data by hardware logic or the like. Access Controller) and a PCI unit that performs data transfer between the engine unit 200 via the PCI bus 300.

  The MEM-C 104 is a local memory used as a copy image buffer and a code buffer. An HDD (Hard Disk Drive) 106 is a storage for storing image data, programs, font data, and forms. When the MFP MFP performs an association with the personal computer PC 1, association information is stored in the HDD 106.

  The AGP 108 is a bus interface for a graphics accelerator card proposed for speeding up graphics processing. The AGP 108 speeds up the graphics accelerator card by directly accessing the MEM-P 103 with high throughput. .

  The scanner 201 reads an image under the control of the ASIC 105. The plotter 202 prints an image under the control of the ASIC 105. The fax control unit 203 controls facsimile communication with an external device under the control of the ASIC 105.

  Next, the functional configuration of the MFPs MFP1 and MFP2 will be described. FIG. 3 is a diagram illustrating a functional configuration of the MFPs MFP1 to MFP2. The components of the MFP MFP1 shown in the figure are functions realized by the CPU 101_1 of the MFP MFP1 executing various programs stored in the MEM-P 103_1. Similarly, the entity of each unit included in the MFP MFP2 is a function realized by the CPU 101_2 included in the MFP MFP2 executing various programs stored in the MEM-P103_2.

  The MFP MFP 2 to which the association information is transferred has a key creation unit 600, an association information management unit 601, and an encryption / decryption unit 602. The MFP MFP1 that is a transfer source of the association information includes an association information management unit 501 and an encryption / decryption unit 502.

  In response to an instruction input from the user, the key creation unit 600 of the MFP MFP2 creates a public key and a secret key by an encryption method such as a public key encryption method, stores the secret key in the HDD 106_2, and stores the public key as a USB Store in memory U1. The association information management unit 601 obtains the encrypted association information stored in the USB memory U1 by the function of the association information management unit 501 of the MFP MFP1, which will be described later, and has been encrypted using the secret key stored in the HDD 106_2. The encryption / decryption unit 602 is instructed to decrypt the association information. The association information management unit 601 stores the association information decrypted by the encryption / decryption unit 602 in the HDD 106_2. The encryption / decryption unit 602 decrypts the association information in response to an instruction from the association information management unit 601.

  On the other hand, association information management unit 501 of MFP 1 acquires the public key stored in USB memory U1, acquires the association information stored in HDD 106_1, and encrypts the association information using the public key. The decoding unit 502 is instructed. The encryption / decryption unit 502 encrypts the association information in response to an instruction from the association information management unit 501. The association information management unit 501 stores the association information (encrypted association information) encrypted by the encryption / decryption unit 502 in the USB memory U1.

<Configuration of personal computer>
The personal computer PC1 includes a CPU, a storage unit such as a RAM and a ROM, a communication unit that performs wireless communication, and a bus (none of which is shown) for connecting them, and hardware using a normal computer It has a configuration. The personal computer PC1 can wirelessly communicate with the MFP MFP via the communication unit.

(2) Operation Next, a procedure of processing for transferring association information according to the present embodiment will be described in order.

<Key creation process>
First, the procedure of the key creation process performed by the copying machine MFP2 to which the association information is transferred will be described with reference to FIG. The user connects the USB memory U1 to the copying machine MFP2 in advance. For example, copying machine MFP2 displays a screen as shown in FIG. 5 on operation panel 400_2. After entering the user ID and password on the screen of FIG. 5A, the user selects the item “3. Create encryption key” on the screen of FIG. An instruction is input to instruct the creation of the encryption key. In the figure, an example is shown in which login with administrator authority is necessary, but login with user authority may also be possible.

  When the copying machine MFP2 receives the instruction input (step S1), it next determines whether or not the USB memory U1 is connected via the USB host 107f_2 (step S2). If the determination result is affirmative, copying machine MFP2 creates a public key and a secret key by the function of key creation unit 600 (step S3). Here, the copying machine MFP2 creates only one set of the public key and the secret key, but a file name that can associate the public key and the secret key may be assigned to them.

  Then, the MFP 2 stores the secret key in the HDD 106_2 (step S4), and stores the public key in the USB memory U1 via the USB host 107f_2 (step S5). If the determination result in step S2 is negative, the copier MFP2 displays a message “Please connect USB memory” on the operation panel 400_2 (step S6).

<Association information collection processing>
Next, the procedure of association information collection processing performed by the copying machine MFP1 that is the transfer source of association information will be described with reference to FIG. The user removes the USB memory U1 storing the public key described above from the copying machine MFP2, and connects the USB memory U1 to the copying machine MFP1. For example, the copying machine MFP1 displays a screen as shown in FIG. 5 on the operation panel 400_1. The user inputs the user ID and password on the screen of FIG. 5A, and then performs an input to select the item “2. Move association information to USB memory” on the screen of FIG. 5B. To input an instruction to instruct the collection of association information. When the copying machine MFP2 receives the instruction input (step S10), it next determines whether or not the USB memory U1 is connected via the USB host 107f_1 (step S11). If the determination result is affirmative, copying machine MFP1 determines whether or not a public key is stored in USB memory U1 (step S12). If the determination result is affirmative, the copier MFP1 acquires the public key by reading the public key stored in the USB memory U1 via the USB host 107f_1 by the function of the association information management unit 501. (Step S13). The copying machine MFP1 reads the association information stored in the HDD 106_1, and encrypts the association information using the public key acquired in step S13 by the function of the encryption / decryption unit 502 (step S14). The copying machine MFP1 stores the association information (encrypted association information) encrypted in step S14 in the USB memory U1 via the USB host 107f_1 (step S15).

  If the determination result in step S11 is negative, the copying machine MFP1 displays a message “Please connect USB memory” on the operation panel 400_1 (step S16). If the determination result in step S12 is negative, the copying machine MFP1 displays an error message on the operation panel 400_1 (step S17).

<Association information setting process>
Next, the procedure of the association information setting process performed by the copying machine MFP2 to which the association information is transferred will be described with reference to FIG. The user removes the USB memory U1 storing the public key and the encrypted association information from the copying machine MFP1 and connects the USB memory U1 to the copying machine MFP2. For example, copying machine MFP2 displays a screen as shown in FIG. 5 on operation panel 400_2. After the user inputs the user ID and password on the screen of FIG. 5A, the user selects “4. Create (overwrite) association information from USB memory” or “5. USB memory” on the screen of FIG. 5B. By inputting to select the item “create association information (addition)”, an instruction to instruct setting of the association information is input. When copying machine MFP2 receives the instruction input (step S20), it next determines whether USB memory U1 is connected via USB host 107f_2 (step S21). If the determination result is affirmative, the copying machine MFP2 determines whether or not the encrypted association information is stored in the USB memory U1 (step S22). If the determination result is affirmative, the copying machine MFP2 uses the function of the association information management unit 601 to read encrypted association information stored in the USB memory U1 via the USB host 107f_1. The association information is acquired, and the secret key is acquired by reading the secret key from the HDD 106_2 (step S23).

  Then, MFP 2 uses the function of encryption / decryption unit 602 to decrypt the encrypted association information using the private key acquired in step S23 (step S24). Then, the MFP 2 stores the association information decrypted in step S24 in the HDD 106_2 (step S25).

  When “4. Create association information from USB memory (overwrite)” is selected in FIG. 5B, the MFP 2 stores the association information in the HDD 106_2 by overwriting. That is, when there is association information already stored in the HDD 106_2, the copying machine MFP2 rewrites the association information with the association information decrypted in step S24. When “5. Create association information from USB memory (add)” is selected in FIG. 5B, the copier MFP2 stores the association information by adding it to the HDD 106_2. That is, if there is association information already stored in HDD 106_2, copying machine MFP2 does not rewrite the association information, but newly stores association information decrypted in step S24 in HDD 106_2.

  If the determination result in step S21 is negative, the copying machine MFP1 displays a message “Please connect USB memory” on the operation panel 400_1 (step S26). If the determination result in step S22 is negative, copying machine MFP1 displays an error message on operation panel 400_1 (step S12).

  With the configuration described above, the association information is transferred by transferring the association information from the transfer source MFP 1 to the transfer destination MFP 2 via a storage medium such as a USB memory. That is, the MFP MFP2 takes over the association information exchanged by association between the personal computer PC1 and the MFP MFP1. For this reason, it is not necessary to newly perform association between the personal computer PC1 and the multifunction peripheral MFP2, and the work burden on the user or the administrator is reduced, and wireless communication is started between the personal computer PC1 and the multifunction peripheral MFP2. Can be simplified. Further, since the information is passed through the storage medium, the association information is less likely to leak, and the association information can be transferred without sacrificing safety.

  Further, the MFP MFP 2 that is the transfer destination creates a public key and a secret key, and the MFP MFP 1 that is the transfer source encrypts the association information using the public key, thereby creating the public key and the secret key. Only the MFP 2 can decrypt the encrypted association information. Therefore, association information can be transferred without further sacrificing safety, and wireless communication can be started between the personal computer PC1 and the MFP MFP2.

[Second Embodiment]
Next, a second embodiment of the communication system will be described. In addition, about the part which is common in the above-mentioned 1st Embodiment, it demonstrates using the same code | symbol or abbreviate | omits description.

(1) Configuration FIG. 8 is a diagram illustrating a configuration of a communication system. In the above-described embodiment, the encrypted association information is exchanged via the USB memory U1, but in this embodiment, the MFP MFP1 and the MFP MFP2 are connected to perform encryption. Exchange of completed association information. The MFPs MFP1 and MFP2 are physically connected by a cable c1 and connected via a wired interface. Specifically, for example, as a wired interface, both MFPs exchange the encrypted association information by communication performed by connection via the NIC 107b, the USB 107c, or the IEEE 1394 interface 107e shown in FIG.

  FIG. 9 is a diagram illustrating a functional configuration of the MFPs MFP1 to MFP2. In response to an instruction input from the user, key generation unit 600 of MFP 2 generates a public key and a secret key by a public key cryptosystem, stores the secret key in HDD 106_2, and transmits the public key to MFP MFP1. . Association information management unit 601 obtains the encrypted association information transmitted by the function of association information management unit 501 of MFP MFP1, and decrypts the encrypted association information using the private key stored in HDD 106_2. The encryption / decryption unit 602 is instructed. The association information management unit 601 stores the association information decrypted by the encryption / decryption unit 602 in the HDD 106_2. The encryption / decryption unit 602 decrypts the association information in response to an instruction from the association information management unit 601.

  On the other hand, the association information management unit 501 of the MFP MFP1 acquires the public key transmitted from the MFP MFP2, acquires the association information stored in the HDD 106_1, and encrypts the association information using the public key. The decoding unit 502 is instructed. The encryption / decryption unit 502 encrypts the association information in response to an instruction from the association information management unit 501. Association information management unit 501 then transmits association information (encrypted association information) encrypted by encryption / decryption unit 502 to MFP 2.

(2) Operation Next, a procedure of processing for transferring association information according to the present embodiment will be described in order.

<Key creation process>
First, the procedure of key generation processing performed by the copying machine MFP2 to which the association information is transferred will be described with reference to FIG. Here, the user does not have to connect the USB memory U1 to the copying machine MFP2 in advance. The processing in step S1 is the same as that in the first embodiment. After step S1, copying machine MFP2 performs steps S3 to S4. Then, copying machine MFP2 transmits the public key created in step S3 to copying machine MFP1 (step S5 ').

<Association information collection processing>
Next, the procedure of association information collection processing performed by the copying machine MFP1 that is the transfer source of association information will be described with reference to FIG. Again, the user need not have the USB memory U1 connected to the copier MFP1. The copying machine MFP1 displays, for example, a screen as shown in FIG. 5 on the operation panel 400_1 as in the first embodiment described above. After entering the user ID and password on the screen of FIG. 5A, the user performs an input to select the item “6. Transfer association information to connected device” on the screen of FIG. 5B. As a result, an instruction is input to instruct the collection of association information. Then, copying machine MFP1 receives the instruction input (step S10), and determines whether or not the public key transmitted from copying machine MFP1 has been received (step S12 '). If the determination result is affirmative, the copying machine MFP1 has acquired the public key (step S13). The copying machine MFP1 acquires the association information by reading the association information stored in the HDD 106_1 by the function of the association information management unit 501, and acquires the public key acquired in step S13 by the function of the encryption / decryption unit 502. Is used to encrypt the association information (step S14). Then, copying machine MFP1 transmits the association information (encrypted association information) encrypted in step S14 to copying machine MFP2 by the function of association information management unit 501 (step S15 '). If the determination result in step S12 ′ is negative, the process proceeds to step S17.

<Association information setting process>
Next, the procedure of the association information setting process performed by the copying machine MFP2 to which the association information is transferred will be described with reference to FIG. Again, the user does not have to connect the USB memory U1 to the copier MFP2 in advance. The copying machine MFP2 displays a screen as shown in FIG. 5 on the operation panel 400_2, for example, as in the first embodiment described above. After entering the user ID and password on the screen of FIG. 5A, the user performs an input to select the item “7. Take over association information from connected device” on the screen of FIG. 5B. Thus, an instruction input for instructing setting of association information is performed. Upon receiving the instruction input (step S20), copying machine MFP2 determines whether or not the encrypted association information transmitted from copying machine MFP1 has been received (step S22 ′). If the determination result is affirmative, copying machine MFP2 has acquired the encrypted association information. The copying machine MFP2 acquires the secret key by reading the secret key from the HDD 106_2 by the function of the association information management unit 601 (step S23). The subsequent steps are the same as in the first embodiment described above. If the determination result in step S22 ′ is negative, an error message is displayed on the operation panel 400_1 (step S27).

  Even with the configuration as described above, there is no need for a new association between the personal computer PC1 and the MFP MFP2, which reduces the work load on the user and the administrator, and between the personal computer PC1 and the MFP MFP2. The work for starting the wireless communication can be simplified. Further, since the MFPs MFP1 and MFP2 are connected by wire to exchange association information, the possibility of leakage of association information can be further reduced.

  The association information is not transferred by connecting the cable C1 and connecting via the wired interface. For example, the wireless USB 107a shown in FIG. 2 or the IEEE (the Institute of Electrical and Electronics Engineers) 802.11b interface 107d is used. Alternatively, the connection may be performed through a wireless interface. According to such a configuration, it is possible to exchange associations without physical connection, and it is possible to cope with cases where physical connection is difficult.

[Modification]
Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Moreover, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, constituent elements over different embodiments may be appropriately combined. Further, various modifications as exemplified below are possible.

<Modification 1>
In the above-described second embodiment, the configuration in which the MFP MFP1 is replaced with the MFP MFP2 has been described. However, the configuration of the above-described second embodiment may be applied to a mode in which the MFP 2 is newly added. FIG. 13 is a diagram illustrating a configuration of a communication system according to this modification. It is assumed that a plurality of personal computers PC1 newly start wireless communication with the MFP MFP2. As a protocol used when performing wireless communication, for example, wireless-USB is used as in the above-described embodiments. In this case, conventionally, the MFP MFP2 needs to associate with each of the plurality of personal computers PC1. In the present embodiment, a portable proxy association device DR1 is used instead. The proxy association device DR1 has substantially the same configuration as that of the personal computer PC1, and includes a CPU, a storage unit such as a RAM and a ROM, a communication unit having a wireless communication function, and a bus connecting them (not shown). And wireless communication is possible via the communication unit. The proxy association apparatus DR1 has the same functions of the association information management unit 501 and the encryption / decryption unit 502 as those of the MFP MFP1 described in the second embodiment.

  That is, the proxy association apparatus DR1 having such a configuration associates with each of the plurality of personal computers PC1 and stores each association information generated each time the association is performed. Thereafter, the user connects the proxy association apparatus DR1 to the MFP MFP2 by wire. Then, similar to MFP MFP1 in the second embodiment described above, proxy association apparatus DR1 transfers each association information stored in itself to MFP MFP2. As a result, the MFP MFP2 and each of the plurality of personal computers PC1 can start wireless communication without performing association.

  According to such a configuration, it is possible to easily set association information without having to move a large device such as the MFP MFP2 close to the personal computer PC1.

  Conventionally, the work load for performing the association is large and it is necessary to move a large device such as the MFP 2 for the following reasons. There are mainly two ways to perform association. One is a method that is performed in response to a user input in both the MFP 2 and each personal computer PC1 to be associated. One is a method in which both the MFP 2 and the personal computer PC1 to be associated with each unit are directly connected by wire. In the former method, the user performs an operation for associating with the multifunction peripheral MFP2, the user himself / herself stores information output from the multifunction peripheral MFP2, and inputs on the personal computer PC1 to be associated based on the information. After the input, it is necessary to perform the operation of finishing the association information setting process in the MFP 2 again. If the distance between the personal computer PC1 and the multifunction peripheral MFP2 is large, or if the number of personal computers PC1 to be associated is large, a considerable amount of time is required for the work. For this reason, there was a possibility that a user's work burden might become large. In the latter method, there is a USB cable as a wire connecting both. However, communication is guaranteed within 5 m with the USB cable. When both sides are separated by 5 m or more, it is necessary to move at least one of them in order to perform the association.

<Modification 2>
Conversely, the configuration of the first embodiment described above may also be applied to a mode in which the MFP 2 is moved and used. In this case, the USB memory U1 is used for backup of association information. FIG. 14 is a diagram illustrating a configuration of a communication system according to the present modification. For example, the MFP MFP2 is normally installed in the A room and is in a state where it can wirelessly communicate with the personal computers PC1a and PC1b. It is assumed that the MFP MFP2 is temporarily moved to a room B different from the room A and performs wireless communication with the personal computers PC1c and PC1d. Then, the MFP MFP2 is again returned to the room A and returned to a state in which wireless communication with the personal computers PC1a and PC1b is possible.

  In this case, association information related to the association performed between the MFP MFP2 and the personal computers PC1a and PC1b is stored in the USB memory U1 from the HDD 106_2. Then, when the MFP 2 is moved to the room B, and is associated with the personal computers PC1c and PC1d for wireless communication and then returned to the room A, the association information stored in the USB memory U1 is stored. You may make it memorize | store by overwriting in HDD106_2.

  Specifically, for example, on the screen shown in FIG. 5B displayed on the operation panel 400_2 of the copying machine MFP2 before the MFP MFP2 is moved to the room B, the user selects “1. Association”. By inputting to select the item “save information in USB memory”, an instruction is input to instruct to save association information. When receiving the instruction input, copying machine MFP2 stores the association information stored in HDD 106_2 in USB memory U1. When MFP MFP2 is moved to room B and MFP MFP2 associates with personal computers PC1c and PC1d, association information relating to each association is stored in HDD 106_2. When the MFP MFP2 is returned to the room A again, the item “4. Create association information from USB memory (overwrite)” is displayed on the screen of FIG. 5B displayed on the operation panel 400_2. By performing selection input, instruction input for instructing setting of association information is performed. Thereafter, the processing is performed in the same manner as in the first embodiment described above, so that the association information stored in the USB memory U1, that is, the MFP 2 and the personal computers PC1a and PC1b is performed. The association information related to the association is stored again in the HDD 106_2.

  According to such a configuration, the association information can be easily backed up, and the setting state of the association information can be easily returned to the state before the MFP 2 is moved to the B room. Further, when the MFP MFP2 is returned to the room A, the association information set when the MFP MFP2 moves to the room B cannot be used again by storing the association information in the HDD 106_2 by overwriting. Therefore, association information can be handled without sacrificing safety.

<Modification 3>
In the first embodiment described above, after the encrypted association information stored in the USB memory U1 is transferred to the MFP MFP2, the encrypted association information stored in the USB memory U1 is deleted. Also good. For example, in response to an instruction input from the user via the operation panel 400-2, the MFP MFP2 is encrypted by the function of the association information management unit 601 and stored in the USB memory U1 connected to the MFP MFP2. Delete association information.

  In the MFP 1 as the transfer source, the association information stored in the HDD 106_1 may be deleted after the encrypted association information is stored in the USB memory U1. For example, in response to an instruction input from the user via the operation panel 400_1, the MFP MFP1 deletes the encrypted association information stored in the HDD 106_1 by the function of the association information management unit 501.

  According to such a configuration, it is possible to prevent the association information from being duplicated. For this reason, safety can be further improved.

  Similarly, in the second embodiment described above, the transfer source MFP MFP1 transmits the encrypted association information to the transfer destination MFP MFP2, and then deletes the association information stored in the HDD 106_1. May be.

<Modification 4>
In the first embodiment described above, a USB memory is used as a portable storage medium used for transfer of association information. However, the present invention is not limited to this, and a memory card such as an SD card, a CD-ROM, a flexible disk ( FD), CD-R, DVD (Digital Versatile Disk), or other computer-readable recording media may be used.

<Modification 5>
In each of the above-described embodiments, the hardware configuration of the MFP MFP is not limited to the above. For example, instead of the PCI buses 300 to 301, PCI-express may be used. Further, the interface unit 107 is not limited to the above-described one, and for example, an interface that performs wireless communication by Bluetooth may be provided.

  Further, in each of the above-described embodiments, as shown in FIG. 3 or FIG. 9, the MFP MFP 1 and the MFP MFP 2 are configured so that their functional configurations are partially different, but these functional configurations are different. You may comprise so that it may become the same. That is, the association information management unit 501 of the MFP MFP1 may further have the function of the association information management unit 601 of the MFP MFP2 in addition to the above-described functions, and vice versa. Also, the encryption / decryption unit 502 may further have the function of the encryption / decryption unit 602, and vice versa. Furthermore, the MFP MFP 1 may be configured to have the function of the key creation unit 600.

  The MFP MFP1 does not have the encryption / decryption unit 502, the MFP MFP2 does not have the encryption / decryption unit 602, stores the association information in the USB memory U1 without encryption, and transfers the association information. You may do it.

<Modification 6>
In each of the above-described embodiments, the association information is stored in the HDD 106 when the MFP MFP associates with the personal computer PC1. However, the present invention is not limited to this, and the MEM-P103 or MEM- C104 may be used. Similarly, the secret key used for decrypting the encrypted association information may be stored not only in the HDD 106 but also in the MEM-P 103 or MEM-C 104.

  In addition, various programs executed by the MFPs MFP1 and MFP2 can be installed in a file in an installable or executable format, such as a CD-ROM, flexible disk (FD), CD-R, DVD (Digital Versatile Disk), etc. It may be configured to be recorded on a readable recording medium. The various programs may be provided or distributed via a network such as the Internet.

<Modification 7>
In each of the above-described embodiments, the personal computer PC1 and the MFP MFP are handled as communication devices. However, the communication device is not limited to this, and the communication device may be a printer device, a fax device, a scanner device or an information processing device having a wireless communication function. Any of the devices may be used.

It is a figure which shows the structure of the communication system concerning 1st Embodiment. 2 is a diagram illustrating a hardware configuration of the MFP MFP according to the embodiment. FIG. 3 is a diagram illustrating a functional configuration of MFPs MFP1 and MFP2 according to the embodiment. FIG. It is a flowchart which shows the procedure of the key creation process concerning the embodiment. It is a figure which shows the example of a screen displayed on the operation panel 400_2 concerning the embodiment. It is a flowchart which shows the procedure of the association information collection process concerning the embodiment. It is a flowchart which shows the procedure of the association information setting process concerning the embodiment. It is a figure which shows the structure of the communication system concerning 2nd Embodiment. 3 is a diagram illustrating a functional configuration of MFPs MFP1 and MFP2 according to the embodiment. FIG. It is a flowchart which shows the key creation process concerning the embodiment. It is a flowchart which shows the procedure of the association information collection process concerning the embodiment. It is a flowchart which shows the procedure of the association information setting process concerning the embodiment. It is a figure which illustrates the structure of the communication system concerning one modification. It is a figure which illustrates the structure of the communication system concerning one modification.

Explanation of symbols

101_1 CPU (first input receiving means, first storage control means)
101_2 CPU (second input receiving means, second storage control means)
106_1 HDD (first storage means)
106_2 HDD (second storage means)
400_1 operation panel 400_2 operation panel 501 association information management unit (key acquisition means, first information storage control means)
502 Encryption / decryption unit (encryption means)
600 Key creation unit (key creation means)
601 Association information management unit (key storage control means, information acquisition means, second information storage control means)
602 Encryption / decryption unit (decryption means)
MFP, MFP1, MFP2 MFP 1, PC1a, PC1b, PC1c, PC1d Personal computer U1 USB memory

Claims (4)

The first communication device and the second communication device are connected via a network, and each of the first communication device and the second communication device performs an exchange procedure for exchanging association information before starting encrypted communication. A communication system capable of encrypted communication with an information processing device according to a protocol ,
The first communication device is
Key generation means for generating a public key for encrypting association information used for encrypted communication with the information processing apparatus and a secret key for decrypting the association information encrypted by the public key; ,
The public key created by the key creating means is transmitted to the second communication device, and the second communication device encrypts the encrypted communication with the information processing device by the second communication device using the transmitted public key. Association information acquisition means for receiving association information from which the exchange procedure has been performed before starting the second communication device;
Decryption means for decrypting the association information acquired by the association information acquisition means using a secret key generated by the key generation means;
And SL憶means you store association information that the decoding unit has decoded,
Have,
The second communication device is
Encryption means for encrypting association information, which has been exchanged before starting encrypted communication with the information processing apparatus, using a public key transmitted from the first communication apparatus;
Association information transmitting means for transmitting association information encrypted by the encryption means to the first communication device;
Having
A communication system characterized by the above. Wherein the first communication device and the second communication device, a communication system according to claim 1, characterized in that it is connected via a wired interface. Wherein the first communication device and the second communication device, a communication system according to claim 1, characterized in that connected via a wireless interface. A communication device capable of encrypted communication with an information processing device according to a protocol for performing an exchange procedure for exchanging association information before starting encrypted communication ,
Key creation means for creating a public key for encrypting association information used for encrypted communication with the information processing apparatus and a secret key for decrypting the association information encrypted by the public key;
The public key created by the key creating means is transmitted to another communication device, and the other communication device encrypts using the transmitted public key, and the other communication device performs encrypted communication with the information processing device. Association information acquisition means for receiving association information that has been exchanged before starting from the other communication device;
Decryption means for decrypting the association information acquired by the association information acquisition means using a secret key generated by the key generation means;
Storage means for storing association information decoded by the decoding means;
Having
A communication device characterized by the above.

Images