JP5515879B2 - Communication system and communication control method - Google Patents

Description

  The present invention relates to a communication system in which a plurality of devices communicate with each other, and more particularly to a technique for performing wireless encrypted communication.

  In wireless communication represented by wireless LAN (Wireless Local Area Network), main communication is based on information exchanged between devices using a communication path (sub-communication path) different from the communication path (main communication path) for actual data communication. It is known to perform communication settings such as a communication method and an encryption method in a communication path. Examples of the communication setting standard include WPS (Wi-Fi Protected Setup). WPS is a standard for easily executing connection and security settings of wireless LAN compatible devices.

  For example, Cited Document 1 discloses wireless LAN communication using NFC (Near Field Communication) for the purpose of easily setting communication of IEEE (The Institute of Electrical and Electronics Engineers, Inc.) 802.11b. A method for setting a method and an encryption method is disclosed. NFC is one of the standards for short-range wireless communication.

  As described above, conventionally, communication setting of the main communication path using short-range wireless communication as the sub communication path is performed, and encrypted communication is performed using the main communication path.

  However, in the conventional method of performing communication setting using NFC, it is assumed that the device configuration for performing communication setting (device configuration for performing data transmission / reception) is one-to-one, so one communication for performing data transmission Communication setting cannot be performed between the apparatus and a plurality of communication apparatuses that receive data. Therefore, encrypted communication according to a common communication setting cannot be performed between one-to-many devices.

  The present invention has been proposed in view of the above-described problems of the prior art, and an object of the present invention is to provide a communication system capable of performing communication settings common to one-to-many devices and performing encrypted communication based on the communication settings. An apparatus and a communication control method are provided.

In order to achieve the above object, a communication system according to the present invention is configured such that a plurality of communication devices are wirelessly connected via a first communication path for performing encrypted communication and a second communication path different from the first communication path. a communication system for performing communication among the plurality of communication devices, communication device that performs data transmission via the first communication path, connection information and said for connecting together said plurality of communication devices Whether to start encrypted communication between the plurality of communication devices and setting information management means for writing and storing communication setting information including encrypted information for performing encrypted communication in an external storage device And determining means for starting the encrypted communication when the setting information managing means detects connection or proximity of the external storage device after writing and storing the communication setting information in the external storage device. And have , Among the plurality of communication devices, a plurality of communication apparatus for performing data reception, from said external storage device has a setting information reading hand stage reading said communication setting information, communication apparatus and said data perform the data transmission receiving a plurality of communication devices for performing, via the external storage device, based on the communication setting information shared among the plurality of communication devices, characterized in that starting the encrypted communication.

  With such a configuration, in the communication system according to the present invention, the first communication device that transmits data includes connection information such as an access point identifier, a communication method, and an encryption method, an encryption key, an encryption key change condition, and the like. Communication setting information necessary for data communication including encryption information is stored in an external storage device. The stored communication setting information is read and set by the second and third communication devices that receive data via the external storage device. As a result, in the communication system, based on the communication setting information shared by the first, second, and third communication devices, the second communication device with the first communication device, the first communication device, and the third communication device. Encrypted communication is started with a communication device (between one-to-many devices).

  As a result, the communication system according to the present invention can perform common communication settings between one-to-many devices and perform encrypted communication based on the communication settings.

  In order to achieve the above object, a communication control method according to the present invention includes a plurality of communication devices via a first communication path that performs encrypted communication and a second communication path that is different from the first communication path. A communication control method in a communication system that performs wireless communication, wherein a communication device that performs data transmission connects connection information for connecting devices via the first communication path and the first communication path. A plurality of communication devices that write and store communication setting information including encryption information for performing the encrypted communication in an external storage device, and receive data, read the communication setting information from the external storage device The communication device that performs the data transmission and the plurality of communication devices that perform the data reception start encrypted communication based on the communication setting information shared between devices via the external storage device. And

  Through such a procedure, the communication control method according to the present invention enables connection information stored in an external storage device such as an access point identifier, a communication method, and an encryption method, and an encryption key and an encryption key change condition. The communication setting information necessary for data communication including the encryption information is read, and encrypted communication is started between one-to-many devices in data transmission / reception based on the read communication setting information.

  Accordingly, the communication control method according to the present invention can provide an environment in which communication settings common to one-to-many devices are performed and encrypted communication based on the communication settings is possible.

  According to the present invention, a plurality of devices that perform data transmission / reception share communication setting information necessary for performing encrypted communication, thereby performing common communication settings between one-to-many devices and performing encryption based on the communication settings. It is possible to provide a communication system, a communication apparatus, and a communication control method that can perform the communication.

It is a figure which shows the structural example of the communication system which concerns on the 1st Embodiment of this invention. It is a figure which shows the hardware structural example of the information processing apparatus which concerns on the 1st Embodiment of this invention. It is a figure which shows the operation | movement outline | summary of the communication control function which concerns on the 1st Embodiment of this invention. It is a figure which shows the function structural example of the communication system which concerns on the 1st Embodiment of this invention. It is a figure which shows the example of data of the communication setting information which concerns on the 1st Embodiment of this invention. It is a sequence diagram which shows the example of a control processing procedure of the encryption communication performed between the some apparatuses which concern on the 1st Embodiment of this invention. FIG. 6 is a sequence diagram showing an example of a data management processing procedure (part 1) in the external storage device according to the first embodiment of the present invention. It is a sequence diagram showing a processing procedure example (part 2) of data management in the external storage device according to the first embodiment of the present invention. FIG. 7 is a sequence diagram showing an example of a data management processing procedure (part 3) in the external storage device according to the first embodiment of the present invention. It is a figure which shows the operation | movement outline | summary of the communication control function which concerns on the modification of this invention. It is a figure which shows the function structural example of the communication system which concerns on the 2nd Embodiment of this invention. It is a sequence diagram which shows the process sequence example of the encryption communication performed between the some apparatuses which concern on the 2nd Embodiment of this invention. It is a figure which shows the operation | movement outline | summary of the communication control function which concerns on the 3rd Embodiment of this invention. It is a figure which shows the function structural example of the communication system which concerns on the 3rd Embodiment of this invention. It is a sequence diagram which shows the process sequence example of the encryption communication performed between the some apparatuses which concern on the 3rd Embodiment of this invention.

  DESCRIPTION OF EMBODIMENTS Hereinafter, preferred embodiments of the present invention (hereinafter referred to as “embodiments”) will be described in detail with reference to the drawings.

[First Embodiment]
<System configuration>
FIG. 1 is a diagram illustrating a configuration example of a communication system 1 according to the present embodiment.
FIG. 1 shows a configuration example in which a plurality of information processing apparatuses 100 ₁ , 100 ₂ , 100 ₃ (hereinafter, collectively referred to as “information processing apparatus 100”) such as a PC (Personal Computer) performs data communication. It is shown.

  In the communication system 1 shown in FIG. 1, a wireless LAN that can perform encrypted communication is a main communication path C1 (encrypted communication path that actually performs data communication), and data communication between devices is realized. In the communication system 1, NFC is used as a sub communication path C2 (communication path different from the main communication path), information is exchanged between devices, and various communication settings in the main communication path C1 such as a communication method and an encryption method are performed. Is called. Therefore, each information processing apparatus 100 serves as a first wireless communication unit as a device 10w, 20w, 30w (hereinafter referred to as “W-LAN device”) that performs data communication by wireless LAN, and as a second wireless communication unit. , Devices 10n, 20n, and 30n (hereinafter referred to as “NFC devices”) that perform short-range wireless communication using NFC. In addition, about the said wireless LAN, communication systems, such as IEEE802.11a / b / g / n, shall not be ask | required.

Further, in FIG. 1, the information processing apparatus ₁₀₀ 1, 100 _2, and incorporates a W-LAN device 10w and the NFC apparatus 10n, the information processing apparatus 100 _3, not a built-in NFC device 20n, predetermined A configuration example in which an external device is connected via a data transmission path is shown. As described above, the W-LAN devices 10w, 20w, and 30w and the NFC devices 10n, 20n, and 30n have either a configuration built in the information processing device 100 or a configuration that can be expanded as an external device. There may be.

  In the communication system 1, the device configuration example in which data communication is performed between the information processing apparatuses is shown, but the present invention is not limited to this. For the configuration of the device that performs data communication, for example, various configurations of devices that include the information processing device 100 and a communication device such as a mobile information terminal (not shown) such as a mobile phone or a PDA (Personal Digital Assistant) are considered. It is done.

  In the communication system 1, the example in which communication is performed using the wireless LAN for the main communication path C1 and NFC for the sub-communication path C2 has been described. Examples of the main communication path C1 include Bluetooth (trademark or registered trademark: abbreviated below), wireless USB (Wireless Universal Serial Bus), and the like. The sub-communication path C2 includes evanescent communication, TransferJet (trademark or registered trademark: hereinafter abbreviated), infrared communication, etc., if it is difficult to intercept at a short distance.

  As described above, the communication system 1 can provide a wireless data communication service with the above system configuration.

<Hardware configuration>
Next, the hardware configuration of the information processing apparatus 100 will be described.
FIG. 2 is a diagram illustrating a hardware configuration example of the information processing apparatus 100 according to the present embodiment.
As shown in FIG. 2, the information processing apparatus 100 includes an input device 101, a display device 102, a drive device 103, a RAM (Random Access Memory) 104, a ROM (Read Only Memory) 105, a CPU (Central Processing Unit) 106, a communication. A control device 107, an HDD (Hard Disk Drive) 108, an external I / F device 109, an external storage I / F device 110, and the like are provided and are connected to each other via a bus B.

  The input device 101 includes a keyboard and a mouse, and is used to input each operation signal to the information processing device 100. The display device 102 includes a display or the like, and displays a processing result or the like by the information processing apparatus 100.

  The communication control apparatus 107 is an interface that connects the information processing apparatus 100 to another device via a predetermined communication path. The communication control apparatus 107 controls data communication between the information processing apparatus 100 and other devices. As a result, the information processing apparatus 100 can perform data communication with other information processing apparatuses 100 via the communication control apparatus 107. Note that the communication controlled by the communication control device 107 may be wired or wireless. However, in the present embodiment, wireless data communication is taken as an example. Examples of the communication control device 107 include W-LAN devices 10w, 20w, and 30w built in the information processing device 100, and NFC devices 10n, 20n, and 30n.

  The HDD 108 is a non-volatile storage device that stores various programs and data. The stored programs and data include, for example, an information processing system (“Windows (trademark or registered trademark))” or “UNIX (trademark or registered trademark: hereinafter omitted)” that controls the entire information processing apparatus 100. There are OS (Operating System) which is basic software, and applications that provide various functions on the information processing system. The HDD 108 manages stored programs and data using a predetermined file system and / or DB (Data Base).

  The external I / F device 109 is an interface that connects the information processing device 100 to the external device 109a. The external I / F device 109 controls data exchange between the information processing device 100 and the external device 109a. Examples of the external device 109a include W-LAN devices 10w, 20w, 30w and NFC devices 10n, 20n, 30n that are not incorporated in the information processing apparatus 100.

  The external storage I / F device 110 is an interface that connects the information processing apparatus 100 to the external storage device 110a. The external storage I / F device 110 controls the exchange of data between the information processing device 100 and the external storage device 110a. Examples of the external storage device 110a include an SD memory card (SD Memory Card) and a USB (Universal Serial Bus) memory.

  The drive device 103 is an interface with a removable recording medium 103a. As a result, the information processing apparatus 100 can read and / or write the recording medium 103 a via the drive apparatus 103. The recording medium 103a includes a floppy (registered trademark) disk, a CD (Compact Disk), a DVD (Digital Versatile Disk), and the like.

  The ROM 105 is a nonvolatile semiconductor memory (storage device) that can retain internal data even when the power is turned off. The ROM 105 stores data such as a basic input / output system (BIOS) that is executed when the information processing apparatus 100 is activated, and system settings and network-related settings of the information processing apparatus 100.

  The RAM 104 is a volatile semiconductor memory (storage device) that temporarily stores programs and data read from the various storage devices. The CPU 106 implements the overall control of the information processing apparatus 100 and the operation of various functions by executing the program read out on the RAM 104.

  As described above, the information processing apparatus 100 can provide various information processing services including data communication by the hardware.

  In the following description, since the information processing apparatus 100 includes the communication control apparatus 107 and can communicate data between devices, the information processing apparatus 100 is replaced with “communication apparatus 100”.

<Communication control function>
A communication control function according to the present embodiment will be described.
In the communication system 1 according to this embodiment, the first communication device 100 ₁ for data transmission, encryption, such as the access point identifier, communication system, and connection information such as encryption method, an encryption key and cipher key change condition Communication setting information necessary for data communication including information is stored in the external storage device 110a. The stored communication setting information is read and set by the second and third communication devices 100 ₂ and 100 ₃ that receive data via the external storage device 110a. As a result, in the communication system 1, the second communication with the first communication device 100 ₁ is performed based on the communication setting information shared by the first, second, and third communication devices 100 ₁ , 100 ₂ , 100 _3. 100 ₂ and the first communication apparatus 100 ₁ to start encrypted communication with the third communication device 100 _3. The communication system 1 has such a communication control function.

  In the conventional method of performing communication setting using NFC and performing encrypted communication between devices, it is assumed that the device configuration for performing communication setting is one-to-one in data transmission / reception. Communication settings cannot be made. Therefore, encrypted communication according to a common communication setting cannot be performed between one-to-many devices.

  Therefore, in the communication system 100 according to the present embodiment, communication setting information necessary for performing encrypted communication can be shared among a plurality of communication apparatuses 100 that perform data transmission and reception.

FIG. 3 is a diagram showing an outline of the operation of the communication control function according to the present embodiment.
3 shows, the first communication device 100 ₁ writes the communication setting information to the external storage device 110a, the second and third communication device ₁₀₀ 2, 100 _3, through the external storage device 110a written An operation example is shown in which the communication setting information is shared by the second and third communication devices 100 ₂ and 100 ₃ by reading the communication setting information. The communication device 100 can write / read data via the external storage I / F device 110 when the external storage device 110a is an SD memory card or a USB memory. When the external storage device 110a is an NFC card, short-range wireless communication can be performed between the NFC devices 10n, 20n, and 30n and the NFC card to perform data writing / reading.

  Thereby, in the communication system 1 which concerns on this embodiment, the communication setting common between one-to-many apparatuses can be performed, and the encryption communication based on a communication setting can be performed.

The configuration and operation of the communication control function will be described below.
FIG. 4 is a diagram illustrating a functional configuration example of the communication system 1 according to the present embodiment.
As shown in FIG. 4, in the communication system 1 according to this embodiment, the first communication device 100 _1, NFC communication control unit 11n, W-LAN communication control unit 11 w, setting information management unit 41, change necessity determination Unit 42, encryption key change control unit 43, and the like. The second communication device 100 ₂ has NFC communication control unit 21n, W-LAN communication control unit 21w, and setting information read unit 51 _2. The third communication device 100 ₃ has the NFC communication control unit 31n, W-LAN communication control unit 31w, and setting information read unit 51 _3.

In the present embodiment, for convenience of explanation, the data transmitting communication apparatus 100 to the first communication device 100 _1, the device is sometimes referred to as "master unit". Also, the communication device 100 on the data receiving side may be referred to as second and third communication devices 100 ₂ and 100 _3, and these devices may be referred to as “child devices”.

First, common functions of the first, second, and third communication devices 100 ₁ , 100 ₂ , 100 ₃ will be described.

  The communication device 100 includes functional units that control the NFC devices 10n, 20n, and 30n and the W-LAN devices 10w, 20w, and 30w included in the device. These functional units correspond to the NFC communication control units 11n, 21n, 31n and the W-LAN communication control units 11w, 21w, 31w.

  The NFC communication control units 11n, 21n, and 31n are functional units that control short-range wireless communication (sub-communication path C2) using NFC performed between devices.

  Between the NFC communication control units 11n, 21n, 31n, communication control such as start / end of short-range wireless communication is performed, and a sub communication path C2 between devices is established. Further, when the sub communication path C2 is established, the encryption keys used in the main communication path C1 are exchanged between the NFC communication control units 11n, 21n, and 31n. For example, when the NFC communication control unit 11n of the parent device makes a request for changing the encryption key via the sub-communication channel C2, the encryption used by the NFC communication control units 21n and 31n of the child devices on the main communication channel C1 in response to the request Change the key settings.

  The W-LAN communication control units 11w, 21w, and 31w are functional units that control data communication (main communication path C1) using a wireless LAN performed between devices.

  Between the W-LAN communication control units 11w, 21w, 31w, communication control such as start / end of data communication is performed, and the main communication path C1 between the devices is established. In addition, when the main communication channel C1 is established between the W-LAN communication control units 11w, 21w, and 31w, an actual encryption key that is set / updated via the sub communication channel C2 is used according to the communication method. Data communication (encrypted communication) is performed.

Next, functional units included in each of the first, second, and third communication devices 100 ₁ , 100 ₂ , and 100 ₃ will be described.

  The setting information management unit 41 is a functional unit that manages communication setting information 61D necessary for performing encrypted communication between devices. That is, the setting information management unit 41 manages setting information related to the communication method and the encryption method in the main communication channel C1.

  The setting information management unit 41 mainly manages the communication setting information 61D by generating setting information, storing setting information, deleting setting information, and the like.

FIG. 5 is a diagram illustrating a data example of the communication setting information 61D according to the present embodiment.
For example, the setting information management unit 41 generates communication setting information 61D as shown in FIG. Thus communication setting information 61D that is generated by, for example, stored in a predetermined storage area of the storage device (e.g., "RAM") the first communication device 100 ₁ is provided, is temporarily held. Thus, the first communication device 100 _1, the communication settings for encrypted communication is performed.

Communication setting information 61D includes a connection information 61D ₁ and the encrypted information 61D _2.
Connection information 61D ₁ is a main channel C1 through the connecting device between (access control between devices) information for. Specifically, an access point identifier (SSID: Service Set ID), a communication method (IEEE802.11a / b / g / n), and an encryption method (WEP: Wired Equivalent Privacy, WPA: Wi-Fi Protected Access, WPA2) ) Etc. The connection information 61D ₁ includes an access point identifier, a communication method, and an encryption method as one information set, and the communication setting information 61D includes one set of such connection information 61D ₁ .

Encrypted information 61D ₂ is information for performing the actual data communication (encrypted communication) with the main channel C1. Specifically, the encryption key and the encryption key change condition. Encryption key is information that is generated according to the encryption method of connection information 61D _1. The encryption key change condition is information (encryption key change information) in which a condition for changing the encryption key used in the main communication channel C1 is defined. The defined conditions (conditions for changing the encryption key) include, for example, when the accumulated upper limit of the communication data volume (number of packets) exceeds the set upper limit [communication data volume condition], and the set upper limit is exceeded. For example, when the time is exceeded [communication time condition] or when communication data includes a magic packet [communication data condition]. Encrypted information 61D ₂ has a plurality of information sets associated with the encryption key and a cipher key change condition, the communication setting information 61D has such encrypted information 61D ₂ 1 set.

Returning to the description of FIG. The setting information management unit 41 stores the generated communication setting information 61D in the external storage device 110a. For example, when the external storage device 110a is an SD memory card or a USB memory, the external storage device 110a connected to the _first communication device 1001 is accessed via the external storage I / F device 110, and the data Write and save. Further, when the external storage device 110a is NFC card, via the NFC device 10n, the first communication apparatus 100 close to ₁ (closer to the short-range wireless communication coverage distance range) external storage device 110a and the near Perform distance wireless communication, write and save data.

  Thus, in the communication system 1, the communication setting information 61D shared between the devices is managed using the external storage device 110a.

  The change necessity determination unit 42 is a functional unit that determines whether it is necessary to change the encryption key used in the main communication channel C1. The change necessity determination unit 42 determines whether the encryption key needs to be changed according to the encryption key change condition of the communication setting information 61D. For example, when the encryption key change condition is [communication data amount condition], the following determination is performed. The change necessity determination unit 42 compares the cumulative value of the communication data amount using the same encryption key in the main communication channel C1 with the preset upper limit value of the communication data amount, and from the comparison result, It is determined whether the key needs to be changed. The change necessity determination unit 42 determines that the encryption key needs to be changed when the accumulated value of the communication data amount exceeds the upper limit value.

  The encryption key change control unit 43 is a functional unit that controls the change of the encryption key used in the main communication channel C1. The encryption key change control unit 43 requests the NFC communication control unit 11n to change the encryption key when the change necessity determination unit 42 determines that the encryption key needs to be changed. As a result, the setting of the encryption key used in the main communication path C1 is changed between the devices via the sub communication path C2. In addition, when the encryption key change control unit 43 makes an encryption key change request, the encryption key change control unit 43 resets the accumulated value of communication data used when determining whether or not to change the encryption key, the communication elapsed time, and the like.

  The communication control process including the encryption key change necessity determination by the change necessity determination unit 42 and the encryption key change by the encryption key change control unit 43 performs data communication between the W-LAN communication control units 11w, 21w, 31w. It is continuously performed while it is performed (while data communication is performed through the main communication path C1). Therefore, the encryption key change control unit 43 returns the result of changing the encryption key (change result response from the NFC communication control units 21n and 31n) to the change necessity determination unit 42. As a result, the change necessity determination unit 42 continues the encryption key change necessity determination process based on the change result of the encryption key and the data communication state in the main communication path C1 from the W-LAN communication control unit 11w. .

  Thus, in the communication system 1, data communication is performed between devices while changing the encryption key. Thereby, in the communication system 1, it is difficult to decrypt the encryption key during communication, and data communication can be performed while maintaining high confidentiality.

Incidentally, transmission and reception to perform data communication while changing the encryption key, the number of the encryption key included in the change interval and communication setting information 61D encryption key (number of sets of encrypted information 61D _2), the encrypted communication The amount of possible data changes. Therefore, when all the encryption keys prepared at the time of communication are used up, the encryption key change control unit 43 may perform the following processing. For example, the encryption key change control unit 43 continues the encrypted communication without changing the encryption key, and notifies the user of a warning during that time. The encryption key change control unit 43 disconnects the encrypted communication and notifies the user of a warning. The encryption key change control unit 43 reuses the encryption key, changes the encryption key, and continues the encrypted communication. The encryption key change control unit 43 interrupts the encrypted communication and requests the user to add new communication setting information 61D.

  Next, functional units included in the second and third communication apparatuses 1002 and 1003 will be described.

The setting information reading units 51 ₂ and 51 ₃ (hereinafter collectively referred to as “setting information reading unit 51”) are functional units that read communication setting information 61D stored in the external storage device 110a. For example, when the external storage device 110 a is an SD memory card or a USB memory, the external storage device connected to the second and third communication devices 100 ₂ and 100 ₃ via the external storage I / F device 110. 110a is accessed and data is read. If the external storage device 110a is an NFC card, short-range wireless communication is performed with the external storage device 110a adjacent to the second and third communication devices 100 ₂ and 100 ₃ via the NFC device 30n. Read data. Thus communication setting information 61D acquired, for example, stored in a predetermined storage area of the storage device (e.g., "RAM") in which the second and third communication device 100 _2, 100 ₃ are provided, temporarily Retained. As a result, communication settings for encrypted communication are performed in the second and third communication devices 100 ₂ and 100 ₃ .

  Thus, in the communication system 1, the communication setting information 61D is shared between devices that perform data transmission / reception via the external storage device 110a.

In the communication system 1 according to the present embodiment, the parent device that performs data transmission writes the communication setting information 61D to the external storage device 110a, and the child device that receives data receives the communication setting information 61D via the external storage device 110a. read. Thereby, in the communication system 1, communication setting information 61D necessary for performing encrypted communication is shared. As a result, in the communication system 1, the environment for encrypted communication between devices can be quickly constructed because of the ease of handling information by the external storage device 110a. In each of the communication devices 100 ₁ , 100 ₂ , 100 ₃ , common communication settings are performed based on the shared communication setting information 61D, and encrypted communication can be started between one-to-many devices. Note that the communication setting information 61D held by each of the communication devices 100 ₁ , 100 ₂ , 100 ₃ is deleted from the storage area by the setting information management unit 41 and the setting information reading unit 51 when the encrypted communication between the devices is completed. (First erasing means).

  As described above, the communication control function according to the present embodiment is realized by the above-described functional units linking to each other.

  Next, detailed operation of the communication control function according to the present embodiment (linking operation of functional unit groups) will be described using a sequence diagram showing a processing procedure.

  As for the communication control function, a program (software component for realizing the communication control function) installed (installed) in the communication apparatus 100 is read from the storage destination (for example, “HDD”) onto the RAM 105 by the CPU 106, and the following processing is performed. It is realized by executing.

<< Control processing of encrypted communication >>
FIG. 6 is a sequence diagram illustrating a control processing procedure example of encrypted communication performed between a plurality of devices according to the present embodiment. In FIG. 6, the parent device (first communication device) requests the two child devices (second and third communication devices) to establish the main communication path C1 and the sub communication path C2. An example of a control processing procedure when performing encrypted communication between devices is shown.

As illustrated in FIG. 6, the first communication device 100 ₁ generates communication setting information 61D for performing encrypted communication with the second and third communication devices 100 ₂ and 100 ₃ by the setting information management unit 41. (Step S11). The setting information management unit 41 writes and saves the generated communication setting information 61D in the external storage device 110a (step S12).

On the other hand, the second and third communication devices 100 ₂ and 100 ₃ read the communication setting information 61D stored in the external storage device 110a by the setting information reading units 51 ₂ and 51 ₃ (steps S21 ₂ and 21 ₃ ). Then, it is held in a predetermined storage area of the storage area provided in the device, and communication settings are made (steps S22 ₂ and 22 ₃ ).

  In this way, in the communication system 1, communication setting information 61D for performing encrypted communication is shared between devices that perform data transmission and reception, and communication settings are performed in each device.

In response, the first communication device 100 ₁ (by NFC communication control unit 11n) via the NFC device 10n to which the device comprises, for the second and third communication device ₁₀₀ 2, 100 _3, Requests the start of NFC communication (near field communication). Thereby, the second and third communication devices 100 ₂ and 100 ₃ accept the start request via the NFC devices 20n and 30n included in the devices (by the NFC communication control units 21n and 31n). As a result, between the first communication apparatus 100 ₁ and the second communication apparatus 100 ₂ and the first communication apparatus 100 ₁ and the third communication device 100 _3, established sub-channel C2 short-distance wireless communication Is done.

Subsequently, the first communication device 100 ₁ (by W-LAN communication control unit 11 w) via a W-LAN device 10w that the device comprises, for the second and third communication device ₁₀₀ 2, 100 ₃ And requesting the start of wireless LAN communication (start of data communication through the main communication path C1). Thus, the second and third communication devices 100 ₂ and 100 ₃ accept the start request via the W-LAN devices 20w and 30w included in the devices (by the W-LAN communication control units 21w and 31w). Consequently, the main communication channel C1 is established between the first communication apparatus 100 ₁ and the second communication apparatus 100 ₂ and the first communication apparatus 100 ₁ and the third communication apparatus 100 _3.

In response, actual data communication (encrypted communication) using the set encryption key is started between the devices in accordance with the communication method included in the shared communication setting information 61D (steps S31 ₂ and 31 ₃ ). That is, wireless LAN communication by the main communication unit C1 is performed between devices (steps S41 ₂ and 41 ₃ ). Meanwhile, in the first communication device 100, the change necessity determination unit 42 performs encryption key change necessity determination processing on the main communication path C1 based on the encryption key change condition included in the communication setting information 61D.

When it is determined that the encryption key needs to be changed, the first communication device 100 is controlled by the encryption key change control unit 43 from the NFC device 10n via the sub communication path C2 to the second and third communication devices. 100 ₂ and 100 ₃ are requested to change the encryption key (steps S 32 ₂ and 32 ₃ ). Accordingly, the second and third communication devices 100 ₂ and 100 ₃ change the encryption key setting in the W-LAN devices 20w and 30w in response to the change request, and the result (change result) is changed to the NFC device. 20n, via the sub communication passage C2 from 30n, responsive to the first communication device 100 ₁ is requesting (cipher key change process).

In response to this, wireless LAN communication is continued between devices using an encryption key (changed encryption key) different from the data communication processing in steps S41 ₂ and 41 ₃ (steps S42 ₂ and 42 ₃ ). Meanwhile, the first communication device 100, the cipher key change control unit 43, based on the number of sets of encrypted information 61D ₂ included in the communication setting information 61D, performs user corresponding processing when used up the encryption key.

In this way, when the first communication device 100 ₁ data transmission is completed for the second and third communication device ₁₀₀ 2, 100 _3, from W-LAN device 10w of the first communication device 100 ₁ is provided The end of wireless LAN communication (end of data communication through the main communication path C1) is notified to the W-LAN devices 20w and 30w included in the second and third communication devices 100 ₂ and 100 ₃ (step S33 _2). , 33 ₃ ). Thereby, the second and third communication devices 100 ₂ and 100 ₃ accept the end notification via the W-LAN devices 20w and 30w. As a result, the first communication apparatus 100 ₁ and the second communication apparatus 100 ₂ and the first communication apparatus 100 ₁ and the third communication apparatus 100 ₃ and the main channel C1 established between is cut.

Subsequently, when the first communication device 100 ₁ notifies the end of the wireless LAN communication, the NFC device 10n sends the second and third communication devices 100 ₂ and 100 ₃ via the sub communication path C2. The end of NFC communication (end of short-distance wireless communication via sub-communication path C2) is notified (steps S34 ₂ and 34 ₃ ). Thereby, the second and third communication devices 100 ₂ and 100 ₃ accept the end notification via the NFC devices 20n and 30n. As a result, the sub-channel short-range wireless communication by which is established between the first communication apparatus 100 ₁ and the second communication apparatus 100 ₂ and the first communication apparatus 100 ₁ and the third communication device 100 ₃ C2 Is disconnected.

Finally, the first communication apparatus 100 _1, when notified of the termination of the short-range wireless communication, the setting information managing unit 41 deletes the communication setting information 61D that is temporarily stored in the storage area (step S23 _1). When the second and third communication devices 100 ₂ and 100 ₃ receive the short-range wireless communication end notification, the setting information reading units 51 ₂ and 51 ₃ temporarily store the communication setting information in the storage area. 61D is erased (steps S23 ₂ and 23 ₃ ).

<< Data management process in external storage device >>
From here, a data management method of the communication setting information 61D by the external storage device 110a will be described. The external storage device 110a described here includes a control device such as a CPU in addition to the storage device, and it is assumed that the external storage device itself performs data management of the communication setting information 61D. The data management mentioned here mainly means the erasure processing of the communication setting information 61D. It is important to delete the communication setting information 61D from the external storage device 110a in order to maintain the confidentiality of encrypted communication performed between devices.

  Based on the above points, three processing procedure examples will be described below. Note that the processing procedure related to encrypted communication between devices is the same as the processing shown in FIG. 6, so description thereof will be omitted and processing until communication setting is performed in the communication apparatus 100 will be described. .

FIG. 7 is a sequence diagram showing a processing procedure example (part 1) of data management in the external storage device according to the present embodiment.
As illustrated in FIG. 7, the first communication device 100 ₁ generates communication setting information 61D for performing encrypted communication with the second and third communication devices 100 ₂ and 100 ₃ by the setting information management unit 41. (Step S11). The setting information management unit 41 writes and saves the generated communication setting information 61D in the external storage device 110a (step S12). At this time, the setting information management unit 41 sets a timed timer indicating the storage period of the communication setting information 61D in the external storage device 110a.

  The external storage device 110a determines that the set time timer has overflowed (step S13), and when it is determined that the timer has overflowed, it erases the communication setting information 61D from the storage area (step S14). That is, the external storage device 110a deletes the communication setting information 61D when the preset storage period of the communication setting information 61D is exceeded (second deleting unit).

Therefore, in the second and third communication devices 100 ₂ and 100 ₃ , the setting information reading units 51 ₂ and 51 ₃ read information while the communication setting information 61D is stored in the external storage device 110a (step S21 ₂ , 21 ₃ ), the data is held in a predetermined storage area of the storage area of the device, and communication settings are performed (steps S22 ₂ , 22 ₃ ).

  As described above, the external storage device 110a shown in FIG. 7 realizes the timed timer function by controlling the internal clock by the control device included in the device.

FIG. 8 is a sequence diagram showing an example (part 2) of a data management processing procedure in the external storage device according to the present embodiment.
As shown in FIG. 8, the first communication device 100 ₁ generates communication setting information 61D for performing encrypted communication with the second and third communication devices 100 ₂ and 100 ₃ by the setting information management unit 41. (Step S11). The setting information management unit 41 writes and saves the generated communication setting information 61D in the external storage device 110a (step S12). At this time, the setting information management unit 41 sets the number of times the reading of the communication setting information 61D is permitted for the external storage device 110a.

On the other hand, the second and third communication devices 100 ₂ and 100 ₃ read information while the communication setting information 61D is stored in the external storage device 110a by the setting information reading units 51 ₂ and 51 ₃ (Step S1). S21 ₂ , 21 ₃ ), the data is held in a predetermined storage area of the storage area of the device, and communication settings are made (steps S22 ₂ , 22 ₃ ).

Meanwhile, in the external storage device 110a, the set number of times is subtracted every time the communication setting information 61D is read from other communication devices (for example, “second and third communication devices 100 ₂ , 100 ₃ ”) ( Step S13).

  As a result, the external storage device 110a determines the remaining number of times (the presence or absence of the remaining number of permitted times) (step S14), and erases the communication setting information 61D from the storage area when the number is determined to be “0”. (Step S15). That is, the external storage device 110a deletes the communication setting information 61D when the number of times of reading the communication setting information 61D set in advance is exceeded (second deleting means).

  As described above, the external storage device 110a shown in FIG. 8 performs the arithmetic processing by the control device included in the device and realizes the countdown function.

FIG. 9 is a sequence diagram illustrating a third example of a data management processing procedure in the external storage device according to the present embodiment.
As illustrated in FIG. 9, the first communication device 100 ₁ generates communication setting information 61D for performing encrypted communication with the second and third communication devices 100 ₂ and 100 ₃ by the setting information management unit 41. (Step S11). The setting information management unit 41 writes and saves the generated communication setting information 61D in the external storage device 110a (step S12). However, the communication setting information 61D can be written only when the switch of the external storage device 110a is being pressed.

On the other hand, the second and third communication devices 100 ₂ and 100 ₃ read information while the communication setting information 61D is stored in the external storage device 110a by the setting information reading units 51 ₂ and 51 ₃ (Step S1). S21 ₂ , 21 ₃ ), the data is held in a predetermined storage area of the storage area of the device, and communication settings are made (steps S22 ₂ , 22 ₃ ).

  Meanwhile, the external storage device 110a determines whether the switch included in the device is pressed (switch on / off) (step S13), and stores the communication setting information 61D when it is determined that the switch is not pressed. Erasing from the area (step S14: second erasing means).

  As described above, the external storage device 110a shown in FIG. 9 detects a signal when the switch is pressed by the control device included in the device, and realizes a data writing / reading limiting function.

  As described above, the external storage device 110a can prevent leakage of setting information due to loss or theft by temporarily setting the state in which the communication setting information 61D is held.

<Summary>
As described above, according to the communication system 1 according to this embodiment, the data first communication device 100 ₁ for data transmission, including the setting information managing unit 41, and a connection information 61D ₁ and the encrypted information 61D ₂ Communication setting information 61D necessary for communication is stored in the external storage device 110a. The saved communication setting information 61D is read and set by the setting information reading units 51 ₂ and 51 ₃ of the second and third communication devices 100 ₂ and 100 ₃ that receive data via the external storage device 110a. The As a result, in the communication system 1, the second communication with the first communication device 100 ₁ is performed based on the communication setting information shared by the first, second, and third communication devices 100 ₁ , 100 ₂ , 100 _3. 100 ₂ and the first communication apparatus 100 ₁ to start encrypted communication with the third communication device 100 _3.

  As a result, the communication system according to the present invention can perform common communication settings between one-to-many devices and perform encrypted communication based on the communication settings.

<Modification>
From here, the modification of the said embodiment is demonstrated.
In the above embodiment, the communication setting information 61D is shared via the external storage device 110a between devices that perform data transmission / reception. For example, information sharing may be performed using a device other than the external storage device 110a illustrated in FIG.

FIG. 10 is a diagram showing an outline of the operation of the communication control function according to this modification.
(A) shows an operation example in which communication setting information 61D is shared between devices via a reader / writer 200 that writes / reads data on a recording medium instead of the external storage device 110a. Examples of the reader / writer 200 include NFC R / W.

  (B) shows a hardware configuration example of the reader / writer 200 assumed in the present modification. The reader / writer 200 includes a RAM 201, a ROM 202, a CPU 203, an external I / F device 204, an R / W device 205, etc., which are mutually connected by a bus B. Since the reader / writer 200 includes a storage device such as the RAM 201, the reader / writer 200 can hold the communication setting information 61D. In addition, since the reader / writer 200 includes the external I / F device 204, it can be connected to the communication device 100. Therefore, the reader / writer 200 corresponds to the external device 109a of the communication device 100.

  As described above, the reader / writer 200 can be used as an alternative to the external storage device 110a when sharing the communication setting information 61D with the above hardware configuration.

[Second Embodiment]
In the present embodiment, a communication control function that controls the start of encrypted communication between one-to-many devices in response to sharing of communication setting information between devices that perform data transmission and reception will be described. In the description of the present embodiment, only differences from the first embodiment will be described. Therefore, the same matters are denoted by the same reference numerals, and the description thereof is omitted.

FIG. 11 is a diagram illustrating a functional configuration example of the communication system 1 according to the present embodiment.
As shown in FIG. 11, the difference between the functional configuration shown in the first embodiment, in that the first communication device 100 ₁ for performing data transmission, and a W-LAN communication start determination unit 44 is there.

The W-LAN communication start determination unit 44 is a functional unit that determines whether to start wireless LAN communication (encrypted communication) with the second and third communication devices 100 ₂ and 100 ₃ by the W-LAN device 10w. is there. The W-LAN communication start determination unit 44 determines whether communication can be started based on the detection information of the external storage device 110a.

External storage device 110a, when communication setting information 61D may be saved from the first communication device 100 ₁ is read in the second and third communication device ₁₀₀ 2, 100 _3. Thereafter, the first communication apparatus 100 _1, when the connection or proximity of the external storage device 110a is detected, between devices transmitting and receiving data, it can be determined that the sharing of the communication setting information 61D is completed. Therefore, if the W-LAN communication start determination unit 44 detects the connection or proximity of the external storage device 110a after the communication setting information 61D is written, the W-LAN communication start determination unit 44 determines that the sharing of the communication setting information 61D has been completed, It is determined that communication can be started. As a result, the W-LAN communication start determination unit 44 instructs the W-LAN communication control unit 11w to start communication according to the determination result. In addition, the W-LAN communication start determination unit 44 instructs the setting information management unit 41 to delete the communication setting information 61D in the external storage device according to the determination result.

A specific processing procedure is as shown in FIG.
FIG. 12 is a sequence diagram illustrating a processing procedure example of encrypted communication performed between a plurality of devices according to the present embodiment. Note that the processing procedure related to encrypted communication between devices is the same as the processing shown in the first embodiment, and therefore description thereof is omitted, and wireless communication (encrypted communication) is performed in the communication apparatus 100. The process until it is started will be described.

As shown in FIG. 12, the first communication device 100 _1, the setting information managing unit 41, generates the communication setting information 61D for performing the second and third communication device ₁₀₀ 2, 100 ₃ encrypted communication (Step S11). The setting information management unit 41 writes and saves the generated communication setting information 61D in the external storage device 110a (step S12).

On the other hand, the second and third communication devices 100 ₂ and 100 ₃ read the communication setting information 61D stored in the external storage device 110a by the setting information reading units 51 ₂ and 51 ₃ (steps S21 ₂ and 21 ₃ ). Then, it is held in a predetermined storage area of the storage area provided in the device, and communication settings are made (steps S22 ₂ and 22 ₃ ).

  In this way, in the communication system 1, communication setting information 61D for performing encrypted communication is shared between devices that perform data transmission and reception, and communication settings are performed in each device.

The first communication device 100 ₁ is then the W-LAN communication start determination unit 44, based on the connection or proximity of the detection information of the external storage device 110a, W-LAN device 10w of the second and third communication device 100 ₂ , 100 ₃ and whether or not to start wireless LAN communication (encrypted communication) is determined (step S13).

The first communication apparatus 100 _1, when the connection or proximity of the external storage device 110a is detected by the W-LAN communication start determination unit 44, and instructs the communication initiated for W-LAN communication control unit 11 w (step S14). At this time, the W-LAN communication start determination unit 44 instructs the setting information management unit 41 to delete the communication setting information 61D in the external storage device (step S15).

In response, actual data communication (encrypted communication) using the set encryption key is started between the devices in accordance with the communication method included in the shared communication setting information 61D (steps S31 ₂ and 31 ₃ ). . In the external storage device 110a, the stored communication setting information 61D is deleted. In other words, in the communication control function according to the present embodiment, sharing and setting completion of the communication setting information 61D between devices that perform data transmission / reception and the start of encrypted communication between one-to-many devices are synchronized.

  As described above, in the communication system 1 according to the present embodiment, it is possible to perform the encrypted communication based on the communication setting by performing the common communication setting between the one-to-many devices, which is clarified in the first embodiment. In addition, the communication setting information 61D is not shared between devices that perform data transmission / reception, and it is possible to prevent a communication disabled state due to unset common communication settings.

[Third Embodiment]
In the present embodiment, a communication system that generates communication setting information in a device different from the communication device 100 and shares the generated communication setting information between one-to-many devices that perform data transmission and reception will be described. In the description of the present embodiment, only differences from the first embodiment will be described. Therefore, the same matters are denoted by the same reference numerals, and the description thereof is omitted.

FIG. 13 is a diagram showing an outline of the operation of the communication control function according to the present embodiment.
(A) shows an operation example in which the communication setting information 61D is shared between devices via the setting information generating apparatus 300 that generates the communication setting information 61D.

  (B) shows a hardware configuration example of the setting information generating apparatus 300 assumed in the present embodiment. The setting information generation device 300 includes a RAM 301, a ROM 302, a CPU 303, an external I / F device 304, and the like, and these are mutually connected by a bus B. Since the setting information generating apparatus 300 includes the RAM 301, the ROM 302, and the CPU 303, for example, the communication setting information 61D can be generated by reading the program from the ROM 302 to the RAM 301 and executing the program by the CPU 303. In addition, since the setting information generation device 300 includes the external I / F device 304, the setting information generation device 300 can be connected to the communication device 100. Therefore, the setting information generation device 300 corresponds to the external device 109a of the communication device 100.

  As described above, the setting information generation device 300 can generate the communication setting information 61D and provide the communication setting information 61D to the communication device 100 with the above hardware configuration.

FIG. 14 is a diagram illustrating a functional configuration example of the communication system 1 according to the present embodiment.
As shown in FIG. 14, the difference from the functional configuration shown in the first embodiment is that the setting information management device 41 has the setting information generation device 300 instead of the _first communication device 1001. It is. Instead, the first communication device 100 ₁ includes a setting information reading unit 51 ₁ , similarly to the second and third communication devices 100 ₂ and 100 ₃ .

  In the setting information generation device 300, the communication setting information 61D generated by the setting information management unit 41 is held in a predetermined storage area of a storage device included in the device.

  As described above, in the communication system 1, the communication setting information 61D provided from the setting information generation device 300 is read by the communication device 100, so that the communication setting information 61D is shared between the devices.

  In the communication system 1 according to the present embodiment, the setting information generation device 300 generates the communication setting information 61D, and the parent device that transmits data and the child device that receives data access the setting information generation device 300 to generate the communication setting information 61D. The communication setting information 61D thus read is read. Thereby, in the communication system 1, communication setting information 61D necessary for performing encrypted communication is shared between devices that perform data transmission and reception.

A specific processing procedure is as shown in FIG.
FIG. 15 is a sequence diagram illustrating a processing procedure example of encrypted communication performed between a plurality of devices according to the present embodiment. Note that the processing procedure related to encrypted communication between devices is the same as the processing shown in the first embodiment, and therefore the description here is omitted, and processing until communication setting is performed in the communication device 100. Will be described.

The setting information generation device 300 uses the setting information management unit 41 to obtain communication setting information 61D for performing encrypted communication with the first, second, and third communication devices 100 ₁ , 100 ₂ , 100 _3. Generate (step S11).

On the other hand, the first, second, and third communication devices 100 ₁ , 100 ₂ , 100 ₃ are generated by accessing the setting information generating device 300 by the setting information reading units 51 ₁ , 51 ₂ , 51 ₃ . The communication setting information 61D is read (steps S21 ₁ , S21 ₂ , 21 ₃ ), held in a predetermined storage area of the storage area of the device, and communication settings are made (steps S22 ₁ , S22 ₂ , 22 ₃ ).

  In this way, in the communication system 1, communication setting information 61D for performing encrypted communication is shared between devices that perform data transmission and reception, and communication settings are performed in each device.

  In the setting information generation device 300, the setting information management unit 41 deletes the communication setting information 61D retained after generation (step S12).

  As described above, also in the communication system 1 according to the present embodiment, it is possible to perform communication settings common to one-to-many devices, which are clarified in the first embodiment, and perform encrypted communication based on the communication settings. .

  The above-described embodiment has been described so far. The “communication control function” is a program in which each processing procedure described with reference to the drawings is coded in a programming language suitable for the operating environment (platform). Is implemented by a control device (for example, “CPU”) included in each device.

  For example, in the case of the communication apparatus 100, the program can be stored in a computer-readable recording medium 103a. Therefore, the communication apparatus 100 can read the program from the recording medium 103a via the drive apparatus 103 and install it in the apparatus. The program can also be stored in the external storage device 110a. Therefore, the communication device 100 can read the program from the external storage device 110a via the external storage I / F device 110 and install it in the device.

  Further, since the communication device 100 includes the communication control device 107, the program can be downloaded using an electric communication line and installed in the device.

Moreover, although the said embodiment demonstrated the structure which requests | requires the start of the data communication by the main communication path C1 from the _1st communication apparatus 1001 (parent | mobile_unit), it is not this limitation. The start request may be issued from the second and third communication devices 100 ₂ and 100 ₃ (slave devices).

  In the above embodiment, the communication setting function (communication method, encryption method, and encryption key) has been changed by the communication control function. However, the present invention is not limited to this. For example, the structure which changes a communication means may be sufficient. The communication means mentioned here includes a wireless USB, Bluetooth, etc. in addition to the wireless LAN. Therefore, in the communication control function, the communication means in the communication setting may be changed (switched) from wireless LAN to wireless USB, Bluetooth, or the like. However, in this case, devices that perform data communication must have the above-described plurality of types of communication means in common.

  In the above embodiment, the configuration in which the communication method, the encryption method, and the encryption key in the main communication channel C1 are simultaneously changed by the communication control function has been described. You may change at a different timing, respectively.

  Finally, the present invention is not limited to the requirements shown here, such as combinations of other elements with the shapes and configurations described in the above embodiments. With respect to these points, the present invention can be changed within a range that does not detract from the gist of the present invention, and can be appropriately determined according to the application form.

1 Communication control system 10n, 20n, 30n NFC device (10: master unit, 20: first slave unit, 30: second slave unit)
10w, 20w, 30w W-LAN devices 11n, 21n, 21n NFC communication control units 11w, 21w, 31w W-LAN communication control unit 41 Setting information management unit 42 Change necessity determination unit 43 Encryption key change control unit 44 W-LAN Communication start determination unit 51 Setting information reading unit ( ₁ : parent device, ₂ : first child device, ₃ : second child device)
61D communication setting information ( ₁ : connection information, ₂ : encryption information)
100 Information processing device (communication device, ₁ : parent device, ₂ : first child device, ₃ : second child device)
101 Input Device 102 Display Device 103 Drive Device (a: Recording Medium)
104 RAM (volatile semiconductor memory)
105 ROM (nonvolatile semiconductor memory)
106 CPU (Central Processing Unit)
107 Communication controller (NIC: Network I / F Card)
108 HDD (nonvolatile storage device)
109 External I / F device (a: External device)
110 External storage I / F device (a: external storage device)
200 reader / writer (external storage reading / writing device)
201 RAM
202 ROM
203 CPU
204 External I / F device 205 R / W device 300 Setting information generation device (information processing device)
301 RAM
302 ROM
303 CPU
304 External I / F device C communication path (1: main communication path, 2: sub communication path)
B bus

JP 2007-166538 A

Claims (7)

A communication system in which a plurality of communication devices perform wireless communication via a first communication path that performs encrypted communication and a second communication path that is different from the first communication path,
Among the plurality of communication devices, a communication device that performs data transmission is :
Write and save communication setting information including connection information for connecting the plurality of communication devices and encryption information for performing the encrypted communication to an external storage device via the first communication path. Setting information management means to
It is determined whether to start encrypted communication between the plurality of communication devices, and after the setting information management means writes and stores the communication setting information in the external storage device, connection of the external storage device or Determination means for determining to start the encrypted communication when proximity is detected, and
Among the plurality of communication devices, the plurality of communication devices that receive data are :
From said external storage device has a setting information reading hand stage reading said communication setting information,
Wherein the plurality of communication devices for performing communication apparatus and the data receiving performs data transmission,
A communication system , wherein encrypted communication is started based on the communication setting information shared between the plurality of communication devices via the external storage device. The setting information management means includes
Access to the external storage device close to the communication device that performs the data transmission by short-range wireless communication, write and save the communication setting information,
The setting information read hand stage,
The short-range wireless communication, the communication system according to claim 1, wherein accessing the external storage device proximate to a plurality of communication apparatus for performing data reception, characterized in that reading said communication setting information. The setting information management means includes
First erasure means for erasing the communication setting information stored in the external storage device;
The first erasing means includes
When it is determined by the determination means to start encrypted communication between the plurality of communication devices ,
The communication system according to claim 1 , wherein the communication setting information is deleted. The external storage device is
A second erasure unit for erasing the communication setting information stored in the external storage device;
The second erasing means includes
When the preset retention period is exceeded,
The communication system according to claim 1, wherein the communication setting information is deleted. The second erasing means includes
When the number of reading of the communication setting information set in advance is exceeded,
The communication system according to claim 4 , wherein the communication setting information is deleted. The external storage device is
It has a switch that controls the state in which data can be written and read.
While the switch is pressed,
Writing of the communication setting information by the setting information management unit, and permits the reading of the communication setting information by the setting information read hand stage,
The second erasing means includes
If the switch is no longer pressed,
The communication system according to claim 4 , wherein the communication setting information is deleted. A communication control method in a communication system in which a plurality of communication devices perform wireless communication via a first communication path that performs encrypted communication and a second communication path that is different from the first communication path,
Among the plurality of communication devices, communication device that performs data transmission, encryption for performing the first through the communication path, connection information and the encrypted communication for connecting together said plurality of communication devices Communication setting information including information is written and saved in an external storage device,
After writing and storing the communication setting information in the external storage device, it is determined to start encrypted communication when the connection or proximity of the external storage device is detected,
Among the plurality of communication devices, a plurality of communication apparatus for receiving data from said external storage device, reads the communication setup information,
A plurality of communication devices for performing communication apparatus and the data receiving performs the data transmission via the external storage device, based on the communication setting information shared among the plurality of communication devices, to start encrypted communication A communication control method characterized by the above.

Images