JP5917640B2 - Wireless communication device, authentication device, wireless communication method, authentication method, passage control device, automatic ticket gate, and base station - Google Patents

Description

  Embodiments relate to authentication using wireless communication.

  Conventionally, at a railway station or airport, authentication using wireless communication has been performed in order to efficiently manage passenger entry and exit. For example, if a passenger holds an IC card, a mobile phone equipped with an IC chip, a ticket printed with a bar code, etc. over an automatic ticket gate, the flap door provided in the automatic ticket gate is determined promptly as to whether the passenger can enter or exit. Opens and closes.

  There is also known a technique for automatically notifying address information necessary for communication based on a first wireless communication method using a second wireless communication method. According to such a technique, the communication partner can easily identify the address information as compared with a case where the first wireless communication method is used alone to attempt connection establishment. On the other hand, according to such a technique, the address information may be unintentionally leaked.

JP 2012-118592 A JP 2010-177947 A JP 2003-32176 A

  An object of the embodiment is to securely perform authentication using wireless communication.

  According to the embodiment, the wireless communication device includes a first wireless communication unit, a second wireless communication unit, and a control unit. The first wireless communication unit is assigned first address information and performs communication using the first wireless communication method. The second wireless communication unit performs communication using the second wireless communication method. The control unit controls the first wireless communication unit and the second wireless communication unit. The control unit transmits a first signal transmission instruction including the first address information, the first identification information for specifying a desired system, and the second identification information for specifying an authentication target to the second wireless communication. Give to the department. The control unit sends the first signal transmission instruction to the second wireless communication unit before the first standby time elapses by one of the first wireless communication unit and the second wireless communication unit. When the information of at least one second signal received is notified, and the second address information assigned to the authentication device that has received the first signal is included in at least one second signal. In addition, an instruction to transmit a third signal for a connection request in which the second address information is set as the receiving address is given to the first wireless communication unit.

1 is a block diagram illustrating a wireless communication device according to a first embodiment. The block diagram which illustrates the authentication device concerning a 1st embodiment. The figure which illustrates the signal exchanged between the radio | wireless communication apparatus and authentication apparatus which concern on 1st Embodiment. The figure which illustrates the format of a Probe Request frame. The figure which illustrates the format of a Probe Response frame. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 1st Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 1st Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 1st Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 1st Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 1st Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 1st Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 1st Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 1st Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 1st Embodiment. The figure which illustrates operation | movement of the control part of the authentication apparatus which concerns on 1st Embodiment. The figure which illustrates operation | movement of the control part of the authentication apparatus which concerns on 1st Embodiment. The figure which illustrates operation | movement of the control part of the authentication apparatus which concerns on 1st Embodiment. The figure which illustrates operation | movement of the control part of the authentication apparatus which concerns on 1st Embodiment. The figure which illustrates the signal exchanged between the radio | wireless communication apparatus and authentication apparatus which concern on 2nd Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 2nd Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 2nd Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 2nd Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 2nd Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 2nd Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 2nd Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 2nd Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 2nd Embodiment. The figure which illustrates operation | movement of the control part of the radio | wireless communication apparatus which concerns on 2nd Embodiment. The figure which illustrates operation | movement of the control part of the authentication apparatus which concerns on 2nd Embodiment. The figure which illustrates operation | movement of the control part of the authentication apparatus which concerns on 2nd Embodiment. The figure which illustrates operation | movement of the control part of the authentication apparatus which concerns on 2nd Embodiment.

Hereinafter, embodiments will be described with reference to the drawings.
In the following description, the term “wireless communication” is interpreted broadly. At least one device displaying image information (for example, a two-dimensional barcode) and the other device reading the image information correspond to transmission and reception in “wireless communication”, respectively. In this example, the communication range can be determined by success or failure of reading image information.

  Furthermore, hereinafter, the same or similar elements as those already described are denoted by the same or similar reference numerals, and redundant description is basically omitted.

(First embodiment)
As illustrated in FIG. 1, the wireless communication device 10 according to the first embodiment includes a control unit 100, a first wireless communication unit 101, a second wireless communication unit 102, and a user interface unit 103. Is provided.

  The wireless communication device 10 may include a third wireless communication unit (for example, a functional unit that performs wireless communication using a public line such as a third generation cellular system) (not shown). In addition, the user interface unit 103 may omit some or all of the functions to be described later as necessary.

  The first wireless communication unit 101 performs communication based on the first wireless communication method. The first wireless communication method corresponds to medium-range wireless communication such as wireless LAN (Local Area Network), but is not limited thereto. In the following description, for the sake of simplicity, it is assumed that the first wireless communication method corresponds to a wireless LAN.

  The first wireless communication unit 101 transmits various signals (for example, a frame such as a probe request frame, an association request frame, and a data frame) in accordance with a transmission instruction from the control unit 100. The first wireless communication unit 101 receives various signals (for example, a frame such as a probe response frame, an association response frame, and a data frame), and notifies the control unit 100 of information on the received signal. The first wireless communication unit 101 may have a built-in antenna for wireless LAN communication, or may be connected to an external antenna.

  The second wireless communication unit 102 performs communication based on the second wireless communication method. The second wireless communication system corresponds to, for example, communication using a contact type IC card or a non-contact type IC card, or proximity wireless communication such as NFC (Near Field Communication) which is the next generation standard, but is not limited thereto. I can't. For example, the second wireless communication method may correspond to communication realized by displaying and reading a barcode (for example, QR code (registered trademark)). The close proximity wireless communication may be read as short distance wireless communication, local communication, or the like. The second wireless communication system typically has a narrower communication range than the first wireless communication system. However, such a communication range relationship is not always required.

  Second wireless communication unit 102 transmits a signal in accordance with a transmission instruction from control unit 100. The second wireless communication unit 102 may receive some signal and notify the control unit 100 of information on the received signal. The second wireless communication unit 102 may incorporate an antenna or a coupler antenna as necessary, or may be connected to an external built-in antenna or coupler antenna. When the second wireless communication method corresponds to communication realized by displaying and reading a barcode, the second wireless communication unit 102 displays the barcode according to an instruction from the control unit 100.

The control unit 100 controls the first wireless communication unit 101, the second wireless communication unit 102, and the user interface unit 103.
Specifically, the control unit 100 includes at least elements corresponding to a wireless LAN application layer and a terminal management entity in order to control the first wireless communication unit 101. In the IEEE 802.11 wireless LAN standard, the terminal management entity is referred to as SME (Station Management Entity). The terminal management entity gives an instruction to a MAC sublayer management entity that manages a media access control (MAC) layer and a PHY sublayer management entity that manages a physical (PHY: PHYsical) layer.

  In order to control the first wireless communication unit 101, the control unit 100 may further include a MAC sublayer management entity, or may further include a PHY sublayer management entity. In the IEEE 802.11 wireless LAN standard, the MAC sublayer management entity is called MLME (MAC subLayer Management Entity), and the PHY sublayer management entity is called PLME (PHY subLayer Management Entity).

  In addition, the control unit 100 includes at least elements corresponding to the application layer of the second wireless communication method in order to control the second wireless communication unit 102. The control unit 100 may further include a terminal management entity, a MAC sublayer management entity, or a PHY sublayer management, as necessary, in order to control the second wireless communication unit 102. An entity may further be provided.

  The memory used by the first wireless communication unit 101 may or may not be shared with the memory used by the control unit 100. Similarly, the memory used by the second wireless communication unit 102 may or may not be shared with the memory used by the control unit 100. The memory used by the control unit 100 may be provided inside the control unit 100 or may be provided outside.

  The user interface unit 103 notifies the user of information according to an instruction from the control unit 100. Specifically, the user interface unit 103 can notify the user of information through, for example, voice, image, vibration, lighting pattern of the light emitting element, and the like. Also, the user interface unit 103 acquires information from the user and notifies the control unit 100 of the information. Specifically, the user interface unit 103 can acquire information from the user through, for example, software key operation, hardware key operation, voice, gesture, image, and the like.

  As illustrated in FIG. 2, the authentication device 20 according to the first embodiment includes a control unit 200, a first wireless communication unit 201, a second wireless communication unit 202, and a user interface unit 203. Prepare. Since the authentication device 20 performs authentication using wireless communication, the authentication device 20 may be referred to as the wireless communication device 20.

  The authentication device 20 typically corresponds to an automatic ticket gate (or a passage control device) that controls entry and exit of passengers at, for example, a railway station or an airport, but is not limited thereto. In the following description, for the sake of clarity, it is assumed that the authentication device 20 corresponds to an automatic ticket gate.

  Note that the authentication device 20 may include a third wireless communication unit (for example, a functional unit that performs wireless communication using a public line such as a third generation cellular system) that is not illustrated. Further, the user interface unit 203 may omit some or all of the functions described below as necessary.

  The first wireless communication unit 201 performs communication based on the first wireless communication method. The first wireless communication unit 201 transmits various signals (for example, a probe response frame, an association response frame, a data frame, etc.) in accordance with a transmission instruction from the control unit 200. In addition, the first wireless communication unit 201 receives various signals (for example, a probe request frame, an association request frame, a data frame, and the like) and notifies the control unit 200 of information on the received signal. The first wireless communication unit 201 may have an internal antenna for wireless LAN communication, or may be connected to an external antenna.

  The second wireless communication unit 202 performs communication based on the second wireless communication method. The second wireless communication unit 202 receives a signal to be described later, and notifies the control unit 200 of information on the received signal. Further, the second wireless communication unit 202 may transmit some signal according to a transmission instruction from the control unit 200. The second wireless communication unit 202 may incorporate an antenna or a coupler antenna as necessary, or may be connected to an external built-in antenna or coupler antenna. When the second wireless communication method corresponds to communication realized by displaying and reading a barcode, the second wireless communication unit 202 corresponds to a so-called barcode reader.

  The control unit 200 controls the first wireless communication unit 201, the second wireless communication unit 202, and the user interface unit 203. Furthermore, the control unit 200 can communicate directly or indirectly with a server 30 (not shown).

  Specifically, the control unit 200 includes elements corresponding to at least a wireless LAN application layer and a terminal management entity in order to control the first wireless communication unit 201. In order to control the first wireless communication unit 201, the control unit 200 may further include a MAC sublayer management entity, or may further include a PHY sublayer management entity.

  In addition, the control unit 200 includes at least elements corresponding to the application layer of the second wireless communication method in order to control the second wireless communication unit 202. The control unit 200 may further include a terminal management entity, a MAC sublayer management entity, or a PHY sublayer management, as necessary, in order to control the second radio communication unit 202. An entity may further be provided.

  The memory used by the first wireless communication unit 201 may or may not be shared with the memory used by the control unit 200. Similarly, the memory used by the second wireless communication unit 202 may or may not be shared with the memory used by the control unit 200. Further, the memory used by the control unit 200 may be provided inside the control unit 200 or may be provided outside.

  Furthermore, the control unit 200 can acquire information necessary for authentication using wireless communication from the server 30. The information includes, for example, identification information (for example, SSID (Service Set IDentifier)) assigned to the entire wireless communication system formed by one or more authentication devices including the authentication device 20, identification information (for example, identification target) For example, reservation ID and ticket information described later). The SSID can be said to be identification information assigned to the entire IEEE 802.11 wireless LAN system operated by the system administrator. Information for identifying the authentication target is given to the wireless communication apparatus 10 in advance (for example, when a ticket is purchased).

  The user interface unit 203 notifies the user of information according to an instruction from the control unit 200. Specifically, the user interface unit 203 can output information to the user through, for example, sound, images, vibrations, lighting patterns of light emitting elements, and the like. Further, the user interface unit 203 acquires information from the user and notifies the control unit 200 of the information. Specifically, the user interface unit 203 can acquire information from the user through, for example, software key operation, hardware key operation, voice, gesture, image, and the like.

  In particular, when the authentication device 20 corresponds to an automatic ticket gate, the user interface unit 203 depends on whether passengers can enter or exit (that is, the authentication result of the SSID, reservation ID, or ticket information received from the wireless communication device 10). You may provide the flap door opened and closed. In addition, the user interface unit 203 may display an image or output a sound in order to make the passenger recognize whether or not entry / exit is possible.

  In the following description, the wireless communication device 10 behaves as a ticket corresponding to an authentication target by executing a specific application (for example, a railroad express ticket, a railroad ticket, an airline ticket, etc.), and a user carrying the wireless communication device 10 It is premised on a use case of passing through an authentication device 20 corresponding to an automatic ticket gate.

  It is assumed that the user has purchased a ticket in advance and the wireless communication apparatus 10 stores identification information necessary for passing through the authentication apparatus 20 via the server 30. The information includes, for example, an SSID assigned to the entire wireless LAN system formed by one or more authentication devices (typically, a plurality of adjacent automatic ticket gates) including the authentication device 20. Further, the information includes a reservation ID corresponding to identification information uniquely assigned to the ticket (that is, the authentication target), and ticket information indicating details regarding the ticket (that is, the authentication target) specified by the reservation ID. .

  The SSID may be changed, for example, every day or every time zone. In such a case, the SSID corresponding to the date and time zone when the ticket is scheduled to be used is stored in the wireless communication apparatus 10. If the SSID is fixed, for example, the following problems may occur.

  The wireless communication device 10 may accidentally enter the wireless LAN area provided by the authentication device 20 without the SSID saved for using the ticket in the past being deleted after the use of the ticket. In this case, the wireless communication device 10 may recognize the authentication device 20 as a normal wireless LAN base station and attempt connection for wireless LAN communication. Since the ticket associated with the SSID has been used in the past, the wireless communication apparatus 10 cannot connect to the authentication apparatus 20, but a useless frame is exchanged while attempting to connect. The useless frame exchange may reduce communication capacity and prevent other users from using the appropriate ticket (for example, the time required for authentication becomes long).

  It is possible to avoid such a problem by designing the wireless communication device 10. Specifically, the wireless communication device 10 may delete the SSID temporarily stored for using the ticket after using the ticket.

  For example, the authentication device 20 acquires the SSID from the server 30 every day or every time period, and holds the SSID. Further, the authentication device 20 acquires a plurality of permissible reservation IDs, for example, every day or every time period, and holds the plurality of permissible reservation IDs. If the communication between the authentication device 20 and the server 30 is sufficiently fast, the authentication device 20 has a small effect on the time required for authentication of the wireless communication device 10. The server 30 may be inquired in real time as to whether or not the received reservation ID is permitted.

  FIG. 3 exemplifies signals exchanged between the wireless communication device 10 and the authentication device 20 according to the present embodiment. In FIG. 3, STA is an abbreviation for STATION and represents the wireless communication device 10. Similarly, AP is an abbreviation for Access Point corresponding to a base station, and represents the authentication device 20.

  First, for example, the user operates the user interface unit 103 of the wireless communication device 10, and a specific application is executed in the control unit 100 of the wireless communication device 10. Note that the application may be executed based on conditions different from user operations. Specifically, the application may be automatically executed on condition that the wireless communication device 10 enters the communication area of the second wireless communication method provided by the authentication device 20.

  When the application is executed, the control unit 100 gives the second wireless communication unit 102 an instruction to transmit a signal (S301). The signal (S301) includes the above-described SSID, reservation ID, and address information assigned to the first wireless communication unit 101. The signal (S301) is received by the second wireless communication unit 202.

  The address information assigned to the first wireless communication unit 101 is, for example, a MAC address used by the first wireless communication unit 101. The MAC address means an address of a MAC entity of the wireless LAN, and is specified as a transmission source address of a frame transmitted by the first wireless communication unit 101, for example. The transmission source address is also referred to as TA (Transmitter Address) or Transmitting STA Address.

  The second wireless communication unit 202 notifies the control unit 200 of the information of the signal (S301). The control unit 200 confirms the consistency of the signal (S301). Specifically, the control unit 200 determines whether or not the SSID included in the signal (S301) matches the SSID specified by the server 30. Further, the control unit 200 determines whether or not the reservation ID included in the signal (S301) matches any of a plurality of allowable reservation IDs specified by the server 30. If both the SSID and reservation ID included in the signal (S301) are appropriate, the authentication device 20 continues authentication. On the other hand, if at least one of the SSID and the reservation ID included in the signal (S301) is inappropriate, the authentication device 20 ends (rejects) the authentication, for example, closes the flap door and displays an image representing the passage rejection. .

  After transmitting the signal (S301), the control unit 100 gives the first wireless communication unit 101 a transmission instruction of the signal (S302) for searching for the wireless LAN system formed by the authentication device 20. The signal (S302) is called a probe request frame in the IEEE 802.11 wireless LAN standard. The Probe Request frame is a type of management frame among MAC frames.

  In the IEEE 802.11 wireless LAN standard, a MAC frame generally includes a MAC header, a frame body, and an FCS (Frame Check Sequence). The MAC header of the Probe Request frame includes, for example, a reception destination address, a transmission destination address, a BSSID, and the like. In the IEEE 802.11 wireless LAN standard, the destination address is called DA (Destination Address). In the IEEE 802.11 wireless LAN standard, the transmission source address is called SA (Source Address). However, in the management frame, SA is generally equal to the aforementioned TA.

  FIG. 4 shows an example of the format of the Probe Request frame (S302). According to the format of FIG. 4, the control unit 100 needs to set the reception destination address, the transmission source address, and the BSSID in the MAC header, and needs to set the SSID and the reservation ID in the frame body.

  In general, it is difficult to specify the authentication device 20 through which a user passes when using a ticket when purchasing the ticket. Therefore, the control unit 100 may set the broadcast address as the reception destination address of the Probe Request frame (S302). The broadcast address means an address that does not specify a receiving destination. A frame in which a broadcast address is set as a reception destination address is called a broadcast frame.

  If the authentication device 20 through which the user passes when using the ticket can be specified at the time of purchase of the ticket, the control unit 100 sets the first wireless device of the authentication device 20 as the reception destination address of the Probe Request frame (S302). Address information (typically a MAC address) assigned to the communication unit 201 may be set. The address information may be acquired together with the SSID and the reservation ID, or may be acquired when the application is installed.

  The control unit 100 sets the MAC address of the first wireless communication unit 101 included in the signal (S301) as the transmission source address of the Probe Request frame (S302).

  In the IEEE 802.11 wireless LAN standard, the base station MAC address is generally equal to BSSID. That is, if the destination address is not specified, the BSSID is also not specified. Therefore, the control unit 100 may set a wild card BSSID in the BSSID field of the Probe Request frame (S302). In the IEEE 802.11 wireless LAN standard, setting a wild card BSSID in the BSSID field means that a specific BSSID is not specified.

  If the authentication device 20 through which the user passes when using the ticket can be specified at the time of purchase of the ticket, the control unit 100 sets the first wireless communication unit of the authentication device 20 in the BSSID of the Probe Request frame (S302). A MAC address of 201 may be designated.

  Here, the BSSID is identification information for specifying a BSS (Basic Service Set) corresponding to a subgroup of the wireless LAN communication system specified by the SSID. BSS means, for example, a group formed by one base station and one or more wireless communication devices connected to the base station. In other words, the BSS means a group formed by a plurality of wireless communication devices (including base stations) whose timers are synchronized. According to the IEEE 802.11 wireless LAN standard, a BSSID that specifies a BSS (Infrastructure BSS) formed around a base station is equal to the MAC address of the base station.

  The control unit 100 sets the SSID in the frame body of the Probe Request frame (S302) in the same manner as a general Probe Request frame. Furthermore, the control unit 100 sets a reservation ID in the frame body of the Probe Request frame (S302). These SSID and reservation ID are the same as those included in the signal (S301).

  In the IEEE 802.11 wireless LAN standard, IE (Information Element) is prepared to set various information in the frame body of the management frame. The IE includes an Element ID field, a Length field, and an Information field. Information indicating the IE type is set in the Element ID field. Information indicating the length of the Information field is set in the Length field. Desired information is set in the Information field. Further, in the IEEE 802.11 wireless LAN standard, Vendor Specific IE, which is a type of IE, is prepared. Therefore, the control unit 100 may set a reservation ID using this Vendor Specific IE. Alternatively, a new Element ID may be defined to set a reservation ID.

  The Probe Request frame (S302) is received by the first wireless communication unit 201. The first wireless communication unit 201 determines whether or not the reception destination address of the Probe Request frame (S302) is appropriate. The appropriate destination address means that the value set in the destination address matches the MAC address of the first wireless communication unit 201. Here, it can be said that the MAC address itself and the broadcast address of the first wireless communication unit 201 match the MAC address of the first wireless communication unit 201. The first wireless communication unit 201 continues the reception process if the reception destination address of the Probe Request frame (S302) is appropriate. The first wireless communication unit 201 notifies the control unit 200 of the information of the Probe Request frame (S302).

  The control unit 200 confirms the consistency of the Probe Request frame (S302). Specifically, the control unit 200 determines whether or not the value set in the source address of the Probe Request frame (S302) matches the MAC address of the first wireless communication unit 101 included in the signal (S301). Determine. Further, the control unit 200 determines that the SSID and reservation ID set in the frame body of the Probe Request frame (S302) includes the SSID and reservation ID included in the signal (S301) (in other words, the SSID and reservation acquired from the server 30). ID) is determined. If all of the transmission source address, the SSID, and the reservation ID included in the Probe Request frame (S302) match those included in the signal (S301), the control unit 200 responds to the Probe Request frame (S302). The first wireless communication unit 201 is instructed to transmit the signal (S303). On the other hand, if at least one of the transmission source address, SSID, and reservation ID included in the Probe Request frame (S302) does not match that included in the signal (S301), the transmission instruction of the signal (S303) It is not given to the wireless communication unit 201.

  Note that the control unit 200 may confirm the BSSID in addition to the transmission source address, the SSID, and the reservation ID. Specifically, it may be determined whether or not the BSSID included in the Probe Request frame (S302) matches a desired value. For example, it is assumed that a wild card BSSID is expected to be set in the BSSID of the Probe Request frame (S302). Under this assumption, when a value other than the wild card BSSID is set in the BSSID, the control unit 200 may not give the first wireless communication unit 201 a transmission instruction for the signal (S303).

  The signal (S303) is called a probe response frame in the IEEE 802.11 wireless LAN standard. The Probe Response frame is a kind of management frame among MAC frames.

  FIG. 5 shows an example of the format of the Probe Response frame (S303). According to the format of FIG. 5, the control unit 200 needs to set the reception destination address, the transmission source address, and the BSSID in the MAC header, and needs to set the SSID in the frame body.

  The control unit 200 sets the MAC address of the first wireless communication unit 101 as the reception destination address of the Probe Response frame (S303). The MAC address of the first wireless communication unit 101 can be acquired from the Probe Request frame (S302) and the signal (S301).

  The control unit 200 sets the MAC address of the first wireless communication unit 201 to the transmission source address of the Probe Response frame (S303). As described above, assuming that the authentication device 20 forms an infrastructure BSS, the BSSID of the infrastructure BSS matches the MAC address of the first wireless communication unit. Therefore, the control unit 200 sets the MAC address of the first wireless communication unit 201 in the BSSID of the Probe Response frame (S303).

  The control unit 200 sets the SSID in the frame body of the Probe Response frame (S303). The SSID can be acquired from the server 30, the probe request frame (S302), and the signal (S301). Note that the control unit 200 further sets a reservation ID in the frame body of the Probe Response frame (S303) in order to make the wireless communication device 10 reconfirm that the authentication device 20 is a wireless LAN base station for ticket use. May be. The reservation ID can be acquired from the server 30, the Probe Request frame (S302), and the signal (S301).

  The Probe Response frame (S303) is received by the first wireless communication unit 101. The first wireless communication unit 101 determines whether the receiving address of the probe response frame (S303) is appropriate. The appropriate destination address means that the value set in the destination address matches the MAC address of the first wireless communication unit 101. The first wireless communication unit 101 continues the reception process if the reception destination address of the Probe Response frame (S303) is appropriate. The first wireless communication unit 101 notifies the control unit 100 of the information of the probe response frame (S303).

  When the information of the probe response frame (S303) is notified, the control unit 100 instructs the first wireless communication unit 101 to transmit a signal (S304) for requesting connection to the wireless LAN system formed by the authentication device 20. give.

  The signal (S304) is referred to as an association request frame in the IEEE 802.11 wireless LAN standard. The Association Request frame is a kind of management frame among MAC frames.

  The format of the Association Request frame (S304) is similar to the formats of the above-described Probe Request frame (S302) and Probe Response frame (S303) (that is, the formats illustrated in FIGS. 4 and 5). Specifically, the control unit 100 needs to set the reception destination address, the transmission source address, and the BSSID in the MAC header, and needs to set the SSID in the frame body. Note that the frame format of the Association Request frame (S304) may be designed so that a reservation ID is further set in the frame body.

  The control unit 100 sets the MAC address of the first wireless communication unit 201 in the reception destination address and BSSID of the Association Request frame (S304). The MAC address of the first wireless communication unit 201 can be acquired from the Probe Response frame (S303).

  The control unit 100 sets the MAC address of the first wireless communication unit 101 as the transmission source address of the Association Request frame (S304). The control unit 100 sets the SSID in the frame body of the Association Request frame (S304). The SSID can be acquired from the server 30 (at the time of ticket purchase) and the Probe Response frame (S303).

  The Association Request frame (S304) is received by the first wireless communication unit 201. The first wireless communication unit 201 determines whether or not the destination address of the Association Request frame (S304) is appropriate. The first wireless communication unit 201 continues the reception process if the reception destination address of the Association Request frame (S304) is appropriate. The first wireless communication unit 201 notifies the control unit 200 of the information on the Association Request frame (S304).

  The control unit 200 confirms the consistency of the Association Request frame (S304). Specifically, the control unit 200 determines whether the value set in the transmission source address of the Association Request frame (S304) matches the MAC address of the first wireless communication unit 101 included in the Probe Request frame (S302). Determine whether or not. Then, the control unit 200 gives the first wireless communication unit 201 an instruction to transmit a signal (S305) for a response to the Association Request frame (S304).

  In the signal (S305), a value indicating whether or not a connection request based on the Association Request frame (S304) is possible is set. Specifically, if the value set in the transmission source address of the Association Request frame (S304) matches the MAC address of the first wireless communication unit 101 included in the Probe Request frame (S302), the control unit 200 Then, a value indicating permission of the connection request is set in the signal (S305). On the other hand, if the value set in the transmission source address of the Association Request frame (S304) does not match the MAC address of the first wireless communication unit 101 included in the Probe Request frame (S302), the control unit 200 connects. A value indicating request rejection is set in the signal (S305).

  The control unit 200 may determine whether or not a connection request is possible based on the consistency of the SSID in addition to the transmission source address. For example, if the SSID set in the frame body of the Association Request frame (S304) does not match the SSID included in the Probe Request frame (S302), a value indicating rejection of the connection request is set in the signal (S305). Also good. Further, the control unit 200 may determine whether or not a connection request can be made based on the consistency of the reservation ID in addition to the transmission source address. For example, if the reservation ID set in the frame body of the Association Request frame (S304) does not match the reservation ID included in the Probe Request frame (S302), a value indicating rejection of the connection request is set in the signal (S305). May be.

  The signal (S305) is referred to as an Association Response frame in the IEEE 802.11 wireless LAN standard. The Association Response frame is a kind of management frame among MAC frames.

  The format of the Association Response frame (S305) is similar to the formats of the above-described Probe Request frame (S302) and Probe Response frame (S303) (that is, the formats illustrated in FIGS. 4 and 5). Specifically, the control unit 200 needs to set a reception address, a transmission source address, and a BSSID in the MAC header, and needs to set a value indicating whether or not a connection request can be made in the status code (Status Code) of the frame body. There is.

  The control unit 200 sets the MAC address of the first wireless communication unit 101 as the reception destination address of the Association Response frame (S305). The MAC address of the first wireless communication unit 101 can be acquired from the Association Request frame (S304), the Probe Request frame (S302), and the signal (S301).

  The control unit 200 sets the MAC address of the first wireless communication unit 201 in the transmission source address and BSSID of the Association Response frame (S305). The control unit 200 sets a value indicating whether or not a connection request can be made in the Status Code of the frame body of the Association Response frame (S305). For example, when permitting a connection request, the control unit 200 sets “0” (that is, Successful) in the Status Code. When rejecting the connection request, the control unit 200 sets a value other than “0” in the Status Code. Note that a new Status Code indicating the rejection of the connection request may be defined.

  The Association Response frame (S305) is received by the first wireless communication unit 101. The first wireless communication unit 101 determines whether or not the destination address of the Association Response frame (S305) is appropriate. The first wireless communication unit 101 continues the reception process if the reception destination address of the Association Response frame (S305) is appropriate. The first wireless communication unit 101 notifies the control unit 100 of the information on the association response frame (S305).

  The control unit 100 determines whether or not a connection request can be made from the Status Code of the Association Response frame (S305). If the connection request is permitted, the exchange of data frames via the wireless LAN is started between the wireless communication device 10 and the authentication device 20.

  In addition, the control part 100 may give the transmission instruction | indication of the confirmation response (Acknowledgment) of Association Response frame (S305) to the 1st radio | wireless communication part 101 as needed. Then, the control unit 200 receives the confirmation response via the first wireless communication unit 201 or receives the completion of transmission of the Association Response frame (S305) based on the reception of the confirmation response. Frame exchange may begin.

  In addition, security settings may be performed prior to exchanging data frames based on data generated in the application layer. The security setting may be performed after the exchange of the Association Request frame (S304) and the Association Response frame (S305). Some security is set through the exchange of data frames at the MAC layer level of the wireless LAN.

  Alternatively, various signals exchanged between the wireless communication device 10 and the authentication device 20 (that is, the above-described signal (S301) to frame (S305)) may include information necessary for security setting. The wireless communication device 10 and the authentication device 20 can set security based on information included in the received signal.

  After the exchange of data frames is started, the control unit 100 gives the first wireless communication unit 101 an instruction to transmit a data frame including ticket information (for example, purchase information and ticket information) indicating details about the ticket to be used.

  The first wireless communication unit 201 receives a data frame including ticket information and notifies the control unit 200 of information on the received data frame. The control unit 200 determines whether the ticket information included in the received data frame is appropriate. The control unit 200 gives the first wireless communication unit 201 an instruction to transmit a data frame including a value indicating the determination result (that is, information indicating whether the ticket information is authenticated). Further, the control unit 200 may transmit ticket information and a value indicating the determination result to the server 30 as entrance / exit management information of the user of the wireless communication device 10.

  The control unit 200 controls the user interface unit 203 according to the determination result. For example, if the ticket information is appropriate, the user interface unit 203 opens the flap door and displays an image indicating passage permission. On the other hand, if the ticket information is not proper, the user interface unit 203 closes the flap door and displays an image indicating passage rejection. That is, the authentication device 20 uses the ticket information as one piece of authentication information, and realizes authentication even at the data frame exchange level.

  The first wireless communication unit 101 receives a data frame including a value indicating the determination result, and notifies the control unit 100 of information on the received data frame. The control unit 100 may notify the user of the determination result via the user interface unit 103. Further, the control unit 100 may store a value indicating the determination result in the memory in association with the ticket information.

  The exchange of data frames may be used for content distribution, advertisement distribution, etc. in addition to the above authentication. Specifically, even if the user of the wireless communication device 10 passes through the authentication device 20, the wireless LAN connection is not disconnected immediately, so the authentication device 20 uses the excess communication capacity to provide a service to the user. Can do.

  The details of the operation of the control unit 100 provided in the wireless communication apparatus 10 according to the present embodiment are, as exemplified in FIGS. 6A, 6B, 6C, and 6D, a specification description language (SDL; Specification and Description Language). Can be described using

  In the following description, it is assumed that the control for the first wireless communication unit 101 is realized by the terminal management entity provided in the control unit 100 giving an instruction to the MAC sublayer management entity.

  In the examples of FIGS. 6A, 6B, 6C, and 6D, it is assumed that a mechanism for directly confirming the completion of communication is not prepared in the second wireless communication method. For example, the second wireless communication method corresponds to communication realized by displaying and reading a barcode. However, the control unit 100 can indirectly confirm the completion of the communication of the second wireless communication method by notifying the information of the Probe Response frame from the appropriate base station.

  FIG. 6A shows input / output and internal processing in the control unit 100 until the control unit 100 transitions from the Idle state (ST401) to the Scan Cfm Wait state (ST402).

  In FIG. 6A, a process start symbol is depicted. According to SDL, a process start symbol is used to indicate the start of a process. That is, in FIG. 6A, when the process starts, the control unit 100 transitions to the Idle state (ST401). The process start symbol is drawn in the same meaning in other drawings.

  When in the Idle state (ST401), the control unit 100 is notified of an application start instruction (Ticket Gate Application Start Command in FIG. 6A) based on, for example, an operation on the user interface unit 103. The control unit 100 gives a transmission instruction of a signal (Touch Info in FIG. 6A) to the second wireless communication unit 102. Touch Info includes the SSID, the reservation ID, and the MAC address of the first wireless communication unit 101.

  Further, the control unit 100 gives a probe request frame transmission instruction (Probe Request Tx Command in FIG. 6A) to the first wireless communication unit 101. The control unit 100 sets the maximum standby time for waiting for the Probe Response frame in the timer (T_AppEnd in FIG. 6A), and shifts to the Scan Cfm Wait state (ST402).

  The Probe Request frame may be repeatedly transmitted twice or more. For example, the control unit 100 may periodically and repeatedly give a transmission request for a probe request frame to the first wireless communication unit 101.

  FIG. 6B illustrates input / output in the control unit 100 until the control unit 100 transitions from the Scan Cfm Wait state (ST402) to the Asoc Cfm Wait state (ST403) or the Idle state (ST401). Further, FIG. 6B shows an output in the control unit 100 until the control unit 100 transitions from the NG label (LA405) to the Idle state (ST401).

  When the control unit 100 is in the Scan Cfm Wait state (ST402), it waits for the first wireless communication unit 101 to notify the Probe Response frame information (Scan Cfm Info in FIG. 6B).

  When Scan Cfm Info is notified, the control unit 100 determines whether or not a Probe Response frame is transmitted from an appropriate base station (authentication apparatus 20). If the Probe Response frame is transmitted from an appropriate base station, the control unit 100 instructs to synchronize to the BSS specified by the BSSID equal to the MAC address of the base station, and to transmit an Association Request frame to the base station. (In FIG. 6B, Join and Asoc Req Tx Command) is given to the first wireless communication unit 101. Control unit 100 then transitions to the Asoc Cfm Wait state (ST403).

  In FIG. 6B, the synchronization instruction and the association request frame transmission instruction are depicted as if they were simultaneously given to the first wireless communication unit 101. However, strictly speaking, the control unit 100 gives the synchronization instruction to the first wireless communication unit 101, and after the information indicating the completion of synchronization is notified from the first wireless communication unit 101, the control unit 100 issues the transmission request for the Association Request frame. The first wireless communication unit 101 is provided.

  Here, the synchronization means a process of synchronizing the timer of the first wireless communication unit 101 with the timer of the BSS specified by the instructed BSSID. The BSS timer value is included in the Beacon frame or the Probe Response frame transmitted by the base station that forms the BSS. Specifically, according to the IEEE 802.11 wireless LAN standard, the timer value is set in the Timestamp field of these frames.

  If the base station is transmitting the Beacon frame, the first wireless communication unit 101 may receive the Beacon frame and synchronize with the BSS based on the timer value included in the received Beacon frame. On the other hand, if the base station has not transmitted the Beacon frame, the control unit 100 may again give the first wireless communication unit 101 an instruction to transmit the Probe Request frame and prompt the base station to transmit the Probe Response frame. The first wireless communication unit 101 may receive the Probe Response frame and synchronize with the BSS based on the timer value included in the received Probe Response frame.

  When the control unit 100 is in the NG label (LA 405), the control unit 100 notifies the user (NG in FIG. 6B) information indicating authentication rejection on the application via the user interface unit 103, and shifts to the Idle state (ST401). To do. Note that even when the timer (T_AppEnd in FIG. 6B) times out without being notified of Scan Cfm Info from the first wireless communication unit 101, or when the Probe Response frame is not transmitted from an appropriate base station. The control unit 100 performs the same or similar operation as that in the NG label (LA405).

  FIG. 6C illustrates input / output in the control unit 100 until the control unit 100 transitions from the Asoc Cfm Wait state (ST403) to the Acceptance Wait state (ST404) or the NG label (LA405).

  When in the Asoc Cfm Wait state (ST403), control unit 100 waits for notification of Association Response frame information from first wireless communication unit 101. In general, in an association request frame transmission instruction (corresponding to the MLME-ASSOCIATE.request primitive in the IEEE 802.11 wireless LAN standard), a maximum waiting time for waiting for an association response frame is set.

  The wireless communication unit 101 waits for an association response frame from a desired base station until the maximum standby time elapses. If the wireless communication unit 101 receives an association response frame from a desired base station before the maximum standby time elapses, the wireless communication unit 101 notifies the control unit 100 of information on the received association response frame. Further, even if the maximum standby time has elapsed without the wireless communication unit 101 receiving an association response frame from a desired base station, the wireless communication unit 101 displays information indicating that the reception of the association response frame has failed. 100 needs to be notified.

  That is, regardless of whether the Association Response frame is successfully received or not, the wireless communication unit 101 is information related to the Association Response frame (in FIG. 6C, it is Asoc Cfm Info, which corresponds to MLME-ASSOCIATE.confirm primitive in the IEEE 802.11 wireless LAN standard). ) To the control unit 100. This information includes a code (Result Code in FIG. 6C) indicating a result of the transmission request for the Association Request frame. The control unit 100 can determine whether or not the connection request is permitted based on the value set in the Result Code.

  Specifically, if the first wireless communication unit 101 receives an association response frame from a desired base station, the above-described status code is converted into a result code. For example, when “0” (Successful) is set in the above-described Status Code, Success is set in the Result Code. On the other hand, when a value other than “0” is set in the aforementioned Status Code, a value other than Success is set in the Result Code. In addition, when the reception of the Association Response frame fails, a value other than Success is set in the Result Code.

  The control unit 100 can confirm that the connection request is permitted if Success is set in the Result Code. Then, the control unit 100 gives an instruction to transmit a data frame including ticket information (Ticket Info in FIG. 6C) to the first wireless communication unit 101, and shifts to the Acceptance Wait state (ST404). On the other hand, if a value other than Success is set in the Result Code, the control unit 100 shifts to the NG label (LA405).

  FIG. 6D shows input / output in the control unit 100 until the control unit 100 transitions from the Acceptance Wait state (ST404) to the Idle state (ST401) or the NG label (LA405).

  When in the Acceptance Wait state (ST404), control unit 100 waits for an authentication result for the transmitted ticket information. If the authentication apparatus 20 determines that the transmitted ticket information is appropriate, information indicating permission to pass (Acceptance in FIG. 6D) is notified to the control unit 100. Then, control unit 100 notifies the user of information (OK in FIG. 6D) indicating authentication permission on the application via user interface unit 103, and shifts to the Idle state (ST401). On the other hand, if the authentication apparatus 20 determines that the ticket information that has already been transmitted is not appropriate, information indicating rejection (rejection in FIG. 6D) is notified to the control unit 100, and the control unit 100 notifies the NG label (LA405). Transition.

  As described above, in the examples of FIGS. 6A, 6B, 6C, and 6D, it is assumed that the second wireless communication method does not have a mechanism for directly confirming the completion of communication. If a mechanism for directly confirming the completion of communication is prepared in the second wireless communication method, the control unit 100 may use FIG. 7A, FIG. 7B, FIG. 7 instead of FIG. 6A, FIG. 6B, FIG. It may operate as illustrated in 7C, 7D and 7E.

  FIG. 7A shows input / output and internal processing in the control unit 100 until the control unit 100 transitions from the Idle state (ST501) to the Touch Wait state (ST502).

  When the control unit 100 is in the Idle state (ST501), for example, based on an operation on the user interface unit 103, an application start instruction (Ticket Gate Application Start Command in FIG. 7A) is notified. The control unit 100 gives a transmission instruction of a signal (Touch Info in FIG. 7A) to the second wireless communication unit 102. Touch Info includes the SSID, the reservation ID, and the MAC address of the first wireless communication unit 101.

  Furthermore, the control unit 100 sets the maximum waiting time for waiting for the Probe Response frame to the timer (T_AppEnd in FIG. 7A), and shifts to the Touch Wait state (ST502).

  FIG. 7B illustrates input / output in the control unit 100 until the control unit 100 transitions from the Touch Wait state (ST502) to the Scan Cfm Wait state (ST503) or the Idle state (ST501). Further, FIG. 7B shows an output in the control unit 100 until the control unit 100 transitions from the NG label (LA 506) to the Idle state (ST 501).

  When the control unit 100 is in the Touch Wait state (ST502), it waits for the second wireless communication unit 102 to notify the information indicating the completion of the Touch Info communication (Touch Complete in FIG. 7B).

  When the Touch Complete is notified, the control unit 100 gives a probe request frame transmission instruction (Probe Request Tx Command in FIG. 7B) to the first wireless communication unit 101, and shifts to the Scan Cfm Wait state (ST503). .

  When the control unit 100 is in the NG label (LA 506), it notifies the user of information (NG in FIG. 7B) indicating authentication refusal on the application via the user interface unit 103, and shifts to the Idle state (ST501). To do. Even when the timer (T_AppEnd in FIG. 7B) times out without being notified of Touch Complete from the second wireless communication unit 102, the control unit 100 is the same as or similar to when the NG label (LA 506) exists. Perform the action.

  FIG. 7C illustrates input / output in the control unit 100 until the control unit 100 transitions from the Scan Cfm Wait state (ST503) to the Asoc Cfm Wait state (ST504) or the NG label (LA506).

  When in the Scan Cfm Wait state (ST503), control unit 100 waits for notification of Probe Resposne frame information (Scan Cfm Info in FIG. 7C) from first wireless communication unit 101.

  When Scan Cfm Info is notified, the control unit 100 determines whether or not a Probe Response frame is transmitted from an appropriate base station (authentication apparatus 20). If the Probe Response frame is transmitted from an appropriate base station, the control unit 100 instructs to synchronize to the BSS specified by the BSSID equal to the MAC address of the base station, and to transmit an Association Request frame to the base station. (In FIG. 7C, Join and Asoc Req Tx Command) is given to the first wireless communication unit 101. Control unit 100 then transitions to the Asoc Cfm Wait state (ST504). On the other hand, when the Probe Response frame is not transmitted from an appropriate base station, the control unit 100 moves to the NG label (LA 506).

  FIG. 7D illustrates input / output in the control unit 100 until the control unit 100 transitions from the Asoc Cfm Wait state (ST504) to the Acceptance Wait state (ST505) or the NG label (LA506). Note that FIG. 7D shows the same or similar operation as FIG. 6C described above, and a description thereof will be omitted.

  FIG. 7E illustrates input / output in the control unit 100 until the control unit 100 transitions from the Acceptance Wait state (ST505) to the Idle state (ST501) or the NG label (LA506). FIG. 7E shows the same or similar operation as FIG.

  The details of the operation of the control unit 200 provided in the authentication device 20 according to the present embodiment can be described using SDL as illustrated in FIGS. 8A, 8B, 8C, and 8D.

  In the following description, it is assumed that the control for the first wireless communication unit 201 is realized by the terminal management entity provided in the control unit 200 giving an instruction to the MAC sublayer management entity.

  FIG. 8A shows input / output and internal processing in the control unit 200 until the control unit 200 transitions from the Idle state (ST601) to the Probe Req Wait state (ST602) or the Idle state (ST601). Further, FIG. 8A shows an output in the control unit 200 until the control unit 200 transitions from the NG label (LA605) to the Idle state (ST601).

  When the control unit 200 is in the idle state (ST601), the second wireless communication unit 202 is notified of received signal information (Touch Info in FIG. 8A). Touch Info includes the SSID, the reservation ID, and the MAC address of the first wireless communication unit 101.

  When the Touch Info is notified, the control unit 200 determines whether or not the Touch Info matches the information (Server Info) acquired from the server 30. If Touch Info matches Server Info, control unit 200 sets the maximum waiting time for waiting for the Probe Request frame to a timer (T_ProbeReq in FIG. 8A), and shifts to the Probe Req Wait state (ST602).

  Server Info includes an SSID and a plurality of permissible reservation IDs. Matching Touch Info with Server Info means that the SSID included in Touch Info matches the SSID included in Server Info, and the plurality of allowable reservation IDs including SSID included in Touch Info are included in Server Info. Means that it matches any of the following.

  When the control unit 200 is in the NG label (LA605), the control unit 200 notifies the user of information (NG in FIG. 8A) indicating authentication rejection on the application via the user interface unit 203, and shifts to the Idle state (ST601). To do. For example, the user interface unit 203 closes the flap door and displays an image indicating passage rejection.

  Even when Touch Info does not match Server Info, the control unit 200 performs the same or similar operation as when it is in the NG label (LA 605). Further, the control unit 200 may perform the same or similar operation as when it is in the NG label (LA 605) when it detects the passage of a person without being notified of Touch Info.

  FIG. 8B shows the input / output in the control unit 200 until the control unit 200 transitions from the Probe Req Wait state (ST602) to the Asoc Req Wait state (ST603), the Probe Req Wait state (ST602), or the NG label (LA605). Indicates internal processing.

  When in the Probe Req Wait state (ST602), control unit 200 waits for notification of Probe Request frame information (Probe Req Info in FIG. 8B) from first wireless communication unit 201.

  When notified of the Probe Req Info, the control unit 200 determines whether the Probe Req Info matches the Touch Info. That the Probe Req Info matches the Touch Info is that the value set in the source address of the Probe Req Info matches the MAC address of the first wireless communication unit 101 included in the Touch Info, and the Probe Req Info Means that the SSID and reservation ID included in the ID match the SSID and reservation ID included in Touch Info.

  If Probe Req Info matches Touch Info, control unit 200 sets a maximum waiting time for waiting for an Association Request frame in a timer (T_AsocReq in FIG. 8B). Further, the control unit 200 gives a probe response frame transmission instruction (Probe Rsp Tx Command in FIG. 8B) to the desired wireless communication device 10 to the first wireless communication unit 201, and enters the Asoc Req Wait (ST603) state. Transition.

  If Probe Req Info does not match Touch Info, control unit 200 transitions to the Probe Req Wait state (ST602). However, if it is certain that the transmission source of the Probe Request frame is the same as the transmission source of the Touch Info, the control unit 200 may move to the NG label (LA 605). If T_ProbeReq times out without notifying the Probe Req Info from the desired wireless communication apparatus 10, the control unit 200 moves to the NG label (LA605).

  FIG. 8C shows input / output in the control unit 200 until the control unit 200 transitions from the Asoc Req Wait state (ST603) to the Ticket Info Wait state (ST604), the Asoc Req Wait state (ST603), or the NG label (LA605). Indicates internal processing.

  When in the Asoc Req Wait state (ST603), control unit 200 waits for notification of Association Request frame information (Asoc Req Info in FIG. 8C) from first wireless communication unit 201.

  When Asoc Req Info is notified, the control unit 200 determines whether or not the Asoc Req Info matches the Probe Req Info. The fact that Asoc Req Info matches Probe Req Info means that various information included in Asoc Req Info (for example, a value set in the source address) matches that included in Probe Req Info. To do.

  If Asoc Req Info matches Probe Req Info, control unit 200 sends an association response frame transmission instruction (Asoc Rsp (success) Tx Command in FIG. 8C) including the value indicating permission of the connection request to the first wireless communication. To part 201. Further, control unit 200 sets a maximum waiting time for waiting for a data frame including ticket information to a timer (T_Ticket in FIG. 8C), and shifts to a Ticket Info Wait state (ST604).

  When the authentication device 20 exchanges a data frame including content information, advertisement information, and the like in addition to the ticket information with the wireless communication device 10, the control unit 200 transmits data to elements corresponding to the wireless LAN application layer. It is desirable to give commands that enable.

  If Asoc Req Info does not match Probe Req Info, control unit 200 sends an association response frame transmission instruction (Asoc Rsp (refused) Tx Command) in FIG. 8C including the value indicating rejection of the connection request to the first. It gives to the wireless communication part 201, and transfers to an Asoc Req Wait state (ST603). However, if it is certain that the transmission source of the Association Request frame is the same as the transmission source of the Probe Request frame, the control unit 200 may move to the NG label (LA605).

  If T_AsocRep times out without notifying Asoc Req Info from the desired wireless communication apparatus 10, the control unit 200 moves to the NG label (LA605).

  FIG. 8D illustrates input / output in the control unit 200 until the control unit 200 transitions from the Ticket Info Wait state (ST604) to the Idle state (ST601).

  Control unit 200 waits for notification of ticket information (Ticket Info in FIG. 8D) from first wireless communication unit 201 when in the Ticket Info Wait state (ST604).

  When the Ticket Info is notified, the control unit 200 determines whether or not the Ticket Info is appropriate. If the Ticket Info is appropriate, the control unit 200 gives the first wireless communication unit 201 an instruction to transmit a data frame including information indicating passage permission (Acceptance in FIG. 8D). Furthermore, the control unit 200 notifies the user of information indicating authentication permission on the application (OK in FIG. 8D) via the user interface unit 203, and shifts to the idle state (ST601).

  On the other hand, if the Ticket Info is not appropriate, the control unit 200 gives the first wireless communication unit 201 an instruction to transmit a data frame including information indicating rejection (Rejection in FIG. 8D). Furthermore, the control unit 200 notifies the user of information indicating authentication rejection on the application (NG in FIG. 8D) via the user interface unit 203, and shifts to the idle state (ST601).

  If T_Ticket times out without being notified of Ticket Info, the control unit 200 gives the first radio communication unit 201 an instruction to transmit a data frame including a Rejection. Furthermore, the control unit 200 notifies the user of NG via the user interface unit 203, and shifts to the idle state (ST601). However, if T_Ticket times out, it may be difficult to exchange data frames between the authentication device 20 and the wireless communication device 10 for some reason. Therefore, the control unit 200 may save the communication capacity by omitting the transmission instruction of the data frame including the Rejection.

  The various signals described in FIGS. 6A, 6B, 6C, 6D, 7A, 7B, 7C, 7D, 7E, 8A, 8B, 8C, and 8D are IEEE 802.11. It can be associated with any of various service primitives defined in the wireless LAN standard.

  Probe Req Tx Command in FIG. 6A and FIG. 7B is MLME-SCAN. Corresponds to request. Scan Cfm Info of FIG. 6B and FIG. 7C is MLME-SCAN. Corresponds to confirm.

  Among the Join and Asoc Req Tx Command in FIG. 6B and FIG. 7C, the synchronization instruction is MLME-JOIN. Corresponds to request. Although omitted in the description of FIGS. 6B and 7C, information indicating the result of the synchronization instruction is notified from the MLME to the SME. Information indicating the result of the synchronization instruction corresponds to MLME-JOIN.confirm. Of the Join and Asoc Req Tx Command in FIG. 6B and FIG. 7C, the transmission request for the Association Request frame is MLME-ASSOCIATE. Corresponds to request.

  Asoc Cfm Info of FIG. 6C and FIG. 7D is MLME-ASSOCIATE. Corresponds to confirm. Asoc Req Info in FIG. 8C is MLME-ASSOCIATE. It corresponds to indication. Asoc Rsp (success) Tx Command and Asoc Rsp (refused) Tx Command in FIG. Corresponds to response.

  Note that, according to the IEEE 802.11-2007 wireless LAN standard, the SME does not determine whether or not to transmit a probe response frame in response to the probe request frame. That is, the transmission instruction of the Probe Response frame is given by the MLME.

  However, according to the description of FIG. 8B, the SME is notified of Probe Req Info from the MLME. Further, the SME determines whether to give the Probe Rsp Tx Command to the MLME based on the Probe Req Info.

  In general, in the IEEE 802.11-2007 wireless LAN standard, signals exchanged between the SME and the MLME are defined as service primitives. Therefore, in order to make the operation example of FIG. 8B correspond to the IEEE 802.11 wireless LAN standard, it is necessary to newly define a service primitive corresponding to the above-mentioned Probe Req Info notification and a service primitive corresponding to the Probe Rsp Tx Command. .

  6C and 7D, the Instruction Info transmission instruction, the Acceptance transmission instruction in FIG. 8D, and the Rejection transmission instruction in FIG. 8D are MA-UNITDATA. Corresponds to request. Although omitted in the description of FIGS. 6C, 7D, and 8D, MA-UNITDATA. The notification of information indicating the result of the request is MA-UNITDATA. confirm or MA-UNITDATA-STATUS. It corresponds to indication.

  The notification of Acceptance in FIGS. 6D and 7E, the notification of Rejection in FIGS. 6D and 7E, and the notification of Ticket Info in FIG. 8D are MA-UNITDATA. It corresponds to indication.

  In the description of FIGS. 3, 6A, 6B, 6C, 6D, 7A, 7B, 7C, 7D, 7E, 8A, 8B, 8C, and 8D, the frame of the association process is described. The exchange was mentioned. Based on the IEEE 802.11 wireless LAN standard, in addition to a frame related to the association process, a frame related to the authentication process (that is, an authentication frame) may be exchanged. The frame exchange related to the authentication process may be performed before or after the frame exchange related to the association process. The order in which both are performed depends on the security setting method.

  As described above, the wireless communication apparatus according to the present embodiment transmits a signal to the authentication apparatus according to the present embodiment based on the second wireless communication method. The authentication device performs first-stage authentication by comparing information of the received signal from the wireless communication device with information from the server. When the authentication apparatus receives a search signal (for example, a Probe Request frame) after the authentication in the first stage, the source address of the signal is changed to the received signal based on the second wireless communication method. A response signal (for example, a probe response frame) is transmitted only for information that matches the included information. Therefore, the wireless communication device can easily identify the reception destination address of a signal for connection request (for example, Association Request frame) from among a plurality of neighboring authentication devices. Can be sent. The authentication apparatus performs second-stage authentication by determining whether or not a connection request is possible using a received signal based on the second wireless communication method, and whether or not the ticket information included in the data frame is appropriate after the connection is completed. The third-stage authentication is performed by determining whether or not. Therefore, according to the present embodiment, authentication using wireless communication can be performed securely.

  The wireless communication device 10 in FIG. 1 can reduce power consumption through power supply control. For example, the wireless communication device 10 transmits a signal based on the first wireless communication method after transmitting a signal based on the second wireless communication method. Accordingly, even if a part or all of the power source for the operation of the first wireless communication unit 101 is turned off until signal transmission is started based on the first wireless communication method, the wireless communication device 10 Can operate without any problem.

  Also, the wireless communication device 10 transmits a signal for search and transmits a signal for connection and a signal related to a connection request only when the response signal is received from a desired authentication device before the timer times out. Start exchanging signals. Therefore, for example, in the first wireless communication unit 101, the power supply for the operation of the function unit for exchanging signals related to the search, the function unit for exchanging the signal for connection request, and the operation of the function unit for exchanging signals for data transmission If the power source for the wireless communication device 10 can be formed separately, the power consumption of the wireless communication device 10 can be reduced through these power source controls. Specifically, a function unit for exchanging signals related to connection requests and data transmission until a signal for response to a signal for search is received from a desired authentication device and address information of the authentication device is acquired. Even if a part or all of the power source for the operation of the functional unit for exchanging signals is turned off, the wireless communication device 10 can operate without any trouble.

  When the authentication device 20 receives a search signal, the authentication device 20 determines whether to transmit a response signal using information included in the received signal based on the second wireless communication method. Therefore, according to the authentication apparatus 20, an unnecessary signal (for example, a probe response frame, an association request frame, an association response frame, or the like) is not exchanged. That is, since the occupation of the medium is suppressed, it is easy to secure the communication capacity. For example, if CSMA / CA (Carrier Sense Multiple Access with Carrier Aviation) is adopted as in the IEEE 802.11 wireless LAN standard, a certain wireless communication device may occupy a frame by another wireless communication device. It means delaying transmission. If the authentication device 20 is an automatic ticket gate, it is desirable to complete the exchange of data frames by connecting to the wireless communication device 10 in a short time in order to realize smooth entrance / exit management. According to the authentication device 20, since the occupation of the medium is suppressed, the authentication can be completed in a short time as a result. That is, according to the authentication device 20, smooth entrance / exit management can be realized.

(Second Embodiment)
The wireless communication apparatus and the authentication apparatus according to the second embodiment are basically the same as or similar to the wireless communication apparatus and the authentication apparatus described in the first embodiment, but the wireless communication apparatus uses a Probe Request frame. Is omitted.

  FIG. 9 illustrates signals exchanged between the wireless communication device 10 and the authentication device 20 according to the present embodiment. In FIG. 9, STA is an abbreviation for STAtion and represents the wireless communication device 10. Similarly, AP is an abbreviation for Access Point corresponding to a base station, and represents the authentication device 20.

  First, for example, the user operates the user interface unit 103 of the wireless communication device 10, and a specific application is executed in the control unit 100 of the wireless communication device 10. Note that the application may be executed based on conditions different from user operations. Specifically, the application may be automatically executed on condition that the wireless communication device 10 enters the communication area of the second wireless communication method provided by the authentication device 20.

  When the application is executed, the control unit 100 gives a signal (S701) transmission instruction to the second wireless communication unit 102. The signal (S701) includes the SSID, the reservation ID, and the MAC address of the first wireless communication unit 101. The signal (S701) is received by the second wireless communication unit 202.

  The second wireless communication unit 202 notifies the control unit 200 of the information of the signal (S701). The control unit 200 confirms the consistency of the signal (S701). Specifically, the control unit 200 determines whether or not the SSID included in the signal (S701) matches the SSID specified by the server 30. Further, the control unit 200 determines whether or not the reservation ID included in the signal (S701) matches any of a plurality of allowable reservation IDs specified by the server 30.

  If both the SSID and the reservation ID included in the signal (S701) are appropriate, the authentication device 20 continues to authenticate the wireless communication device 10. Specifically, the control unit 200 gives a transmission instruction for a Probe Response frame (S702) to the first wireless communication unit 201. The Probe Response frame (S702) is the same as or similar to the Probe Response frame (S303) in FIG. On the other hand, if at least one of the SSID and the reservation ID included in the signal (S701) is inappropriate, the authentication device 20 ends (rejects) the authentication of the wireless communication device 10, for example, closes the flap door and rejects the passage. Display an image to represent.

  The control unit 200 sets the MAC address of the first wireless communication unit 101 as the reception destination address of the Probe Response frame (S702). The MAC address of the first wireless communication unit 101 can be acquired from the signal (S701).

  The control unit 200 sets the MAC address of the first wireless communication unit 201 in the transmission source address and BSSID of the Probe Response frame (S702). The control unit 200 sets the SSID in the frame body of the Probe Response frame (S702). The SSID can be acquired from the server 30 and the signal (S701).

  The Probe Response frame is received by the first wireless communication unit 101. The first wireless communication unit 101 determines whether or not the destination address of the Probe Response frame (S702) is appropriate. The appropriate destination address means that the value set in the destination address matches the MAC address of the first wireless communication unit 101. If the receiving address of the received frame (S702) is appropriate, the first wireless communication unit 101 continues the receiving process. The first wireless communication unit 101 notifies the control unit 100 of the information of the received probe response frame (S702).

  When the information of the probe response frame (S702) is notified, the control unit 100 gives the first wireless communication unit 101 a transmission instruction for the association request frame (S703). Note that the Association Request frame (S703) is the same as or similar to the Association Request frame (S304) of FIG.

  The control unit 100 sets the MAC address of the first wireless communication unit 201 in the reception destination address and BSSID of the Association Request frame (S703). The MAC address of the first wireless communication unit 201 can be acquired from the Probe Response frame (S702).

  The control unit 100 sets the MAC address of the first wireless communication unit 101 as the transmission source address of the Association Request frame (S703). The control unit 100 sets the SSID in the frame body of the Association Request frame (S703). The SSID can be acquired from the server 30 (at the time of ticket purchase) and the Probe Response frame (S702).

  The Association Request frame (S703) is received by the first wireless communication unit 201. The first wireless communication unit 201 determines whether or not the destination address of the Association Request frame (S703) is appropriate. If the reception destination address of the Association Request frame (S703) is appropriate, the first wireless communication unit 201 continues the reception process. The first wireless communication unit 201 notifies the control unit 200 of the information of the Association Request frame (S703).

  The control unit 200 confirms the consistency of the Association Request frame (S703). Specifically, the control unit 200 determines whether or not the value set in the transmission source address of the Association Request frame (S703) matches the MAC address of the first wireless communication unit 101 included in the signal (S701). Determine.

  Then, the control unit 200 gives an instruction to transmit an Association Response frame (S704) to the first wireless communication unit 201. Note that the Association Response frame (S704) is the same as or similar to the Association Response frame (S305) of FIG.

  In the status code of the association response frame (S704), a value indicating whether or not a connection request is possible is set. Specifically, if the value set in the transmission source address of the received frame (S703) matches the MAC address of the first wireless communication unit 101 included in the signal (S701), the control unit 200 requests connection. A value indicating permission of is set in Status Code. On the other hand, the control unit 200 rejects the connection request if the value set in the transmission source address of the received frame (S703) does not match the MAC address of the first wireless communication unit 101 included in the signal (S701). Is set in the Status Code.

  The control unit 200 may determine whether or not a connection request is possible based on the consistency of the SSID in addition to the transmission source address. For example, if the SSID set in the frame body of the Association Request frame (S703) does not match the SSID included in the signal (S701), a value indicating rejection of the connection request may be set in the Status Code. Further, the control unit 200 may determine whether or not a connection request can be made based on the consistency of the reservation ID in addition to the transmission source address. For example, if the reservation ID set in the frame body of the received frame (S703) does not match the reservation ID included in the signal (S701), a value indicating connection request rejection may be set in the Status Code.

  The control unit 200 sets the MAC address of the first wireless communication unit 101 as the reception destination address of the Association Response frame (S704). The MAC address of the first wireless communication unit 101 can be acquired from the Association Request frame (S703) and the signal (S701).

  The control unit 200 sets the MAC address of the first wireless communication unit 201 in the transmission source address and BSSID of the Association Response frame (S704). The control unit 200 sets a value indicating whether or not a connection request can be made in the Status Code of the frame body of the Association Response frame (S704). For example, when permitting a connection request, the control unit 200 sets “0” (that is, Successful) in the Status Code. When rejecting the connection request, the control unit 200 sets a value other than “0” in the Status Code. Note that a new Status Code indicating the rejection of the connection request may be defined.

  The Association Response frame (S704) is received by the first wireless communication unit 101. The first wireless communication unit 101 determines whether or not the receiving address of the Association Response frame (S704) is appropriate. The first wireless communication unit 101 continues the reception process if the reception address of the Association Response frame (S704) is appropriate. The first wireless communication unit 101 notifies the control unit 100 of the information on the Association Response frame (S704).

  The control unit 100 determines whether or not a connection request can be made from the Status Code of the Association Response frame (S704). If the connection request is permitted, the exchange of data frames via the wireless LAN is started between the wireless communication device 10 and the authentication device 20.

  The details of the operation of the control unit 100 provided in the wireless communication apparatus 10 according to the present embodiment can be described using SDL, as illustrated in FIGS. 10A, 10B, 10C, and 10D.

  In the following description, it is assumed that the control for the first wireless communication unit 101 is realized by the terminal management entity provided in the control unit 100 giving an instruction to the MAC sublayer management entity.

  In the examples of FIGS. 10A, 10B, 10C, and 10D, it is assumed that a mechanism for directly confirming the completion of communication is not prepared in the second wireless communication method. For example, the second wireless communication method corresponds to communication realized by displaying and reading a barcode. However, the control unit 100 can indirectly confirm the completion of the communication of the second wireless communication method by notifying the information of the Probe Response frame from the appropriate base station.

  FIG. 10A shows input / output and internal processing in control unit 100 until control unit 100 transitions from the Idle state (ST801) to the Scan Cfm Wait state (ST802).

  When in the Idle state (ST801), control unit 100 is notified of an application start instruction (Ticket Gate Application Start Command in FIG. 10A), for example, based on an operation on user interface unit 103. The control unit 100 gives the second wireless communication unit 102 a signal (Touch Info in FIG. 10A) transmission instruction. Touch Info includes the SSID, the reservation ID, and the MAC address of the first wireless communication unit 101.

  Furthermore, the control unit 100 gives an instruction (Scan Enable in FIG. 10A) to the first wireless communication unit 101 to wait for the Probe Response frame for a certain period and to notify the information of the received Probe Response frame.

  When the first wireless communication unit 101 is given a Scan Enable, when the first wireless communication unit 101 first receives a Probe Response frame in which the MAC address of the first wireless communication unit 101 is set as a reception destination address, the first wireless communication unit 101 receives the received probe response frame. The information (Scan Cfm Info in FIG. 10B) is notified to the control unit 100.

  Further, the first wireless communication unit 101 performs filtering of the received probe response frame based on other conditions in addition to the reception destination address, and controls the scan Cfm Info based on the probe response frame that first passed all the filtering. It may operate to notify 100.

  In order to make the operation example of FIG. 10A compatible with the IEEE 802.11 wireless LAN standard, it is necessary to newly define a service primitive corresponding to Scan Enable and a service primitive corresponding to Scan Cfm Info notification.

  The control unit 100 sets the maximum standby time for waiting for the Probe Response frame to a timer (T_AppEnd in FIG. 10A), and shifts to the Scan Cfm Wait state (ST802).

  FIG. 10B illustrates input / output in the control unit 100 until the control unit 100 transitions from the Scan Cfm Wait state (ST802) to the Asoc Cfm Wait state (ST803) or the Idle state (ST801). Further, FIG. 6B shows an output in the control unit 100 until the control unit 100 transitions from the NG label (LA805) to the Idle state (ST801). Note that FIG. 10B shows the same or similar operation as FIG.

  FIG. 10C illustrates input / output in the control unit 100 until the control unit 100 transitions from the Asoc Cfm Wait state (ST803) to the Acceptance Wait state (ST804) or the NG label (LA805). Note that FIG. 10C represents the same or similar operation as FIG. 6C and FIG.

  FIG. 10D illustrates input / output in the control unit 100 until the control unit 100 transitions from the Acceptance Wait state (ST804) to the Idle state (ST801) or the NG label (LA805). Note that FIG. 10D represents the same or similar operation as FIG. 6D and FIG.

  As described above, in the examples of FIGS. 10A, 10B, 10C, and 10D, it is assumed that the second wireless communication method does not have a mechanism for directly confirming the completion of communication. If a mechanism for directly confirming the completion of communication is prepared in the second wireless communication method, the control unit 100 may use FIGS. 11A, 11B, and 10D instead of FIGS. 10A, 10B, 10C, and 10D. 11C, FIG. 11D, and FIG. 11E may operate as illustrated.

  FIG. 11A shows input / output and internal processing in the control unit 100 until the control unit 100 transitions from the Idle state (ST901) to the Touch Wait state (ST902).

  When in the Idle state (ST901), the control unit 100 is notified of an application start instruction (Ticket Gate Application Start Command in FIG. 11A) based on, for example, an operation on the user interface unit 103. The control unit 100 gives a transmission instruction of a signal (Touch Info in FIG. 11A) to the second wireless communication unit 102. Touch Info includes the SSID, the reservation ID, and the MAC address of the first wireless communication unit 101.

  Furthermore, the control unit 100 gives an instruction (Scan Enable in FIG. 11A) to the first wireless communication unit 101 to wait for the Probe Response frame for a certain period and to notify the information of the received Probe Response frame. The control unit 100 sets the maximum waiting time for waiting for the Probe Response frame to the timer (T_AppEnd in FIG. 11A), and shifts to the Touch Wait state (ST902).

  FIG. 11B illustrates input / output in the control unit 100 until the control unit 100 transitions from the Touch Wait state (ST902) to the Scan Cfm Wait state (ST903) or the Idle state (ST901). Further, FIG. 11B shows an output in the control unit 100 until the control unit 100 transitions from the NG label (LA906) to the Idle state (ST901).

  When in the Touch Wait state (ST902), control unit 100 waits for information indicating the completion of Touch Info communication (Touch Complete in FIG. 11B) from second wireless communication unit 102. When notified of Touch Complete, control unit 100 transitions to the Scan Cfm Wait state (ST903).

  When the control unit 100 is in the NG label (LA906), the control unit 100 notifies the user (NG in FIG. 11B) information indicating authentication rejection on the application via the user interface unit 103, and shifts to the Idle state (ST901). To do. In addition, even when the timer (T_AppEnd in FIG. 11B) times out without being notified of Touch Complete from the second wireless communication unit 102, the control unit 100 is the same as or similar to that at the NG label (LA906). Perform the operation.

  FIG. 11C illustrates input / output in the control unit 100 until the control unit 100 transitions from the Scan Cfm Wait state (ST903) to the Asoc Cfm Wait state (ST904) or the NG label (LA906).

  When in the Scan Cfm Wait state (ST903), control unit 100 waits for the first wireless communication unit 101 to notify the probe response frame information (Scan Cfm Info in FIG. 11C).

  When Scan Cfm Info is notified, the control unit 100 determines whether or not a Probe Response frame is transmitted from an appropriate base station (authentication apparatus 20). If the Probe Response frame is transmitted from an appropriate base station, the control unit 100 instructs to synchronize to the BSS specified by the BSSID equal to the MAC address of the base station, and to transmit an Association Request frame to the base station. (In FIG. 11C, Join and Asoc Req Tx Command) is given to the first wireless communication unit 101, and transition is made to the Asoc Cfm Wait state (ST904).

  On the other hand, when the Probe Response frame is not transmitted from an appropriate base station, the control unit 100 moves to the NG label (LA906). Also, when the timer (T_AppEnd in FIG. 11C) times out without being notified of Scan Cfm Info from the first wireless communication unit 101, the control unit 100 shifts to the NG label (LA906).

  FIG. 11D illustrates input / output in the control unit 100 until the control unit 100 transitions from the Asoc Cfm Wait state (ST904) to the Acceptance Wait state (ST905) or the NG label (LA906). Note that FIG. 11D represents the same or similar operation as FIG. 6C, FIG. 7D, and FIG.

  FIG. 11E illustrates input / output in the control unit 100 until the control unit 100 transitions from the Acceptance Wait state (ST905) to the Idle state (ST901) or the NG label (LA906). Note that FIG. 11E represents the same or similar operation as that of FIG. 6D, FIG. 7E, and FIG.

  The details of the operation of the control unit 200 provided in the authentication device 20 according to the present embodiment can be described using SDL, as illustrated in FIGS. 12A, 12B, and 12C.

  In the following description, it is assumed that the control for the first wireless communication unit 201 is realized by the terminal management entity provided in the control unit 200 giving an instruction to the MAC sublayer management entity.

  FIG. 12A shows input / output and internal processing in control unit 200 until control unit 200 transitions from the Idle state (ST1001) to the Asoc Req Wait state (ST1002) or the Idle state (ST1001). Further, FIG. 12A shows an output in the control unit 200 until the control unit 200 transits from the NG label (LA 1004) to the Idle state (ST1001).

  When the control unit 200 is in the Idle state (ST1001), the second wireless communication unit 202 is notified of received signal information (Touch Info in FIG. 12A). Touch Info includes the SSID, the reservation ID, and the MAC address of the first wireless communication unit 101.

  The control unit 200 determines whether Touch Info matches the information (Server Info) acquired from the server 30. If Touch Info matches Server Info, control unit 200 sets a maximum waiting time for waiting for an Association Request frame in a timer (T_AsocReq in FIG. 12A). Further, the control unit 200 gives the first wireless communication unit 201 a probe response frame transmission instruction (Probe Rsp Tx Command in FIG. 12A) to the desired wireless communication device 10. Control unit 200 then transitions to an Asoc Req Wait (ST1002) state.

  When the control unit 200 is in the NG label (LA 1004), the control unit 200 notifies the user of information (NG in FIG. 12A) indicating authentication rejection on the application via the user interface unit 203, and shifts to the Idle state (ST1001). To do. For example, the user interface unit 203 closes the flap door and displays an image indicating passage rejection. Even when Touch Info does not match Server Info, the control unit 200 performs the same or similar operation as when it is in the NG label (LA 1004). Further, the control unit 200 may perform the same or similar operation as when it is on the NG label (LA 1004) when it detects the passage of a person without being notified of Touch Info.

  FIG. 12B shows the input / output in the control unit 200 until the control unit 200 transitions from the Asoc Req Wait state (ST1002) to the Ticket Info Wait state (ST1003), the Asoc Req Wait state (ST1002), or the NG label (LA1004). Indicates internal processing. Note that FIG. 12B shows the same or similar operation as FIG.

  FIG. 12C illustrates input / output in the control unit 200 until the control unit 200 transitions from the Ticket Info Wait state (ST1003) to the Idle state (ST1001). Note that FIG. 12C represents the same or similar operation as FIG. 8D described above, and a description thereof will be omitted.

(Third embodiment)
The wireless communication apparatus and the authentication apparatus according to the third embodiment are basically the same as or similar to the wireless communication apparatus and the authentication apparatus described in the second embodiment, but the wireless communication apparatus has a Probe Request frame. Don't skip sending. In the present embodiment, the authentication device 20 is the same as or similar to the second embodiment described above. That is, the authentication device 20 transmits a Probe Response frame according to the signal (S701) in FIG. 9 instead of the Probe Request frame.

  According to the present embodiment, the wireless communication device 10 can operate in accordance with the normal IEEE 802.11 wireless LAN standard. Therefore, the mounting load of the wireless communication apparatus 10 can be reduced.

  Details of the operation of the control unit 100 provided in the wireless communication apparatus 10 according to the present embodiment can be described using SDL. Specifically, the operation of the control unit 100 includes the operation examples illustrated in FIGS. 6A, 6B, 6C, and 6D, or the operation examples illustrated in FIGS. 7A, 7B, 7C, 7D, and 7E. Basically the same or similar.

  Details of the operation of the control unit 200 provided in the authentication device 20 according to the present embodiment can be described using SDL. Specifically, the operation of the control unit 200 is basically the same as or similar to the operation illustrated in FIGS. 12A, 12B, and 12C.

(Fourth embodiment)
The wireless communication device and the authentication device according to the fourth embodiment are basically the same as or similar to the wireless communication device and the authentication device described in the second embodiment, but the authentication device is a probe response frame. The substitute signal is transmitted based on the second wireless communication method.

  Specifically, in this embodiment, when the information of the signal (S701) in FIG. 9 is notified from the second wireless communication unit 202, the control unit 200 instructs the second wireless communication unit 202 to transmit a signal. give.

  Since this signal replaces the Probe Response frame (S702) of FIG. 9, it includes the same or similar information as the Probe Response frame (S702). For example, the signal includes the MAC address of the first wireless communication unit 201. As described above, the MAC address of the first wireless communication unit 201 is equal to BSSID. The transmission signal may include an SSID. The control unit 100 may determine whether or not the SSID is appropriate.

  In addition, if the second wireless communication method can uniquely identify a communication partner such as communication using a contact IC card or a non-contact IC card, NFC, etc., a receiving address (for example, The MAC address of the first wireless communication unit 101) can be omitted in the above signal.

  The second wireless communication unit 102 receives a signal instead of the Probe Response frame (S702) in FIG. 9, and notifies the control unit 100 of information on the received signal. Based on the MAC address of the first wireless communication unit 201 included in the received signal, the control unit 100 issues a transmission instruction for an Association Request frame (corresponding to the Association Request frame (S703) in FIG. 9) in the first wireless communication. Part 101 is given.

  Details of the operation of the control unit 100 provided in the wireless communication apparatus 10 according to the present embodiment can be described using SDL. Specifically, the operation of the control unit 100 includes the operation examples illustrated in FIGS. 10A, 10B, 10C, and 10D, or the operation examples illustrated in FIGS. 11A, 11B, 11C, 11D, and 11E. Basically the same or similar, but differs in some of the operations illustrated in FIGS. 10B and 11B. The control unit 100 is notified of information on a received signal in the second wireless communication unit 102 (for example, it can be called Touch Reply Info) instead of the Scan Cfm Info. Touch Reply Info includes the MAC address of the first wireless communication unit 201.

  Details of the operation of the control unit 200 provided in the authentication device 20 according to the present embodiment can be described using SDL. Specifically, the operation of the control unit 200 is basically the same as or similar to the operation illustrated in FIGS. 12A, 12B, and 12, but differs in a part of the operation illustrated in FIG. 12A. The control unit 200 gives a transmission instruction of a signal (Touch Reply Info) to the second wireless communication unit 202 instead of the Probe Rsp Tx Command. Touch Reply Info includes the MAC address of the first wireless communication unit 201.

  In the present embodiment, by including information necessary for security setting in a signal exchanged between the wireless communication device 10 and the authentication device 20, it is possible to complete the security setting before the connection is completed. . For example, the signal instead of the Probe Response frame (S702) in FIG. 9 may include an encryption key used by the first wireless communication unit 201 after the connection is completed.

(Fifth embodiment)
In each of the above-described embodiments, the authentication device 20 is assumed to correspond to an automatic ticket gate. However, the authentication device 20 uses, for example, wireless communication with restrictions on the use of communication based on the first wireless communication system at a specific location (in the following description, it is assumed to be wireless LAN communication for simplification). The base station permitted to the apparatus 10 may be used.

  According to each of the above-described embodiments, when the wireless communication device 10 transmits a signal based on the second wireless communication method, the authentication device 20 performs a series of authentication processes, and in the process, the wireless communication device 10 communicates with the authentication device 20. Connect with a wireless LAN. The authentication device 20 according to the present embodiment permits the wireless communication device 10 permitted through the above-described series of authentication processing to use wireless LAN communication (for example, Internet connection, content distribution, advertisement distribution, etc.).

  Each element of the authentication device 20 may not be provided in the same device. For example, the first wireless communication unit 201 may be provided in a device different from the second wireless communication unit 202. However, different devices are connected by wire, for example, and a series of authentication processes is executed as in the above-described embodiments. When each element of the authentication device 20 is divided into a plurality of devices, the authentication device 20 may be called an authentication system.

For example, a device including the second wireless communication unit 202 is disposed at an entrance of a specific place (for example, a wireless LAN area provided by the authentication device 20). The user of the wireless communication device 10 transmits a signal from the second wireless communication unit 102, for example, through execution of a specific application. When this signal is received by the second wireless communication unit 202, the authentication device 20 performs a series of authentication processes. If the authority is correct, the wireless communication device 10 are permitted the use of wireless LAN communication. On the other hand, if the authority is not appropriate, the wireless communication device 10 is not permitted to use wireless LAN communication.

  According to the present embodiment, it is possible to realize a base station that permits a wireless communication device to use a communication based on the first wireless communication method at a specific place with a restriction.

(Sixth embodiment)
The wireless communication device and the authentication device according to the sixth embodiment are basically the same as or similar to the wireless communication device and the authentication device described in any of the above embodiments, but the first wireless communication method is used. A buffer for further communication is further provided.

  For example, with respect to the wireless communication device 10 of FIG. 1, the buffer may be provided in the first wireless communication unit 101 or provided in a memory (not shown) used by the first wireless communication unit 101. Also good. 2, the buffer may be provided in the first wireless communication unit 201 or may be provided in a memory (not shown) used by the first wireless communication unit 201. Good.

  By providing such a buffer, it is possible to store a signal transmitted and received based on the first wireless communication method. That is, for example, retransmission processing, external output processing, and the like of these signals can be easily realized.

  In addition, the wireless communication device and the authentication device according to the present embodiment may further include a buffer for communication based on the second wireless communication method described above. For example, regarding the wireless communication device 10 of FIG. 1, the buffer may be provided in the second wireless communication unit 102 or provided in a memory (not shown) used by the second wireless communication unit 102. Also good. 2, the buffer may be provided in the second wireless communication unit 202 or may be provided in a memory (not shown) used by the second wireless communication unit 202. Good.

  By providing such a buffer, it is possible to store signals transmitted and received based on the second wireless communication method. That is, for example, retransmission processing, external output processing, and the like of these signals can be easily realized.

(Seventh embodiment)
The wireless communication device and the authentication device according to the seventh embodiment are basically the same or similar to the wireless communication device and the authentication device described in any of the above embodiments, but the firmware operates in the control unit. . According to this embodiment, the wireless communication function can be easily changed by rewriting the firmware.

(Eighth embodiment)
The wireless communication apparatus and the authentication apparatus according to the eighth embodiment are the same as or similar to the wireless communication apparatus and the authentication apparatus described in any of the previous embodiments, but the first wireless communication unit transmits a clock signal. A clock generation unit is further provided. The control unit operates based on the clock signal from the clock generation unit.

  Specifically, regarding the wireless communication device 10 of FIG. 1, the first wireless communication unit 101 includes a clock generation unit, and the control unit 100 operates based on a clock signal from the clock generation unit. 2, the first wireless communication unit 201 includes a clock generation unit, and the control unit 200 operates based on a clock signal from the clock generation unit.

  The control unit can operate in synchronization with the first wireless communication unit by operating based on the clock signal generated in the first wireless communication unit.

  In the wireless communication device and the authentication device according to the present embodiment, the second wireless communication unit may also operate based on the clock signal from the clock generation unit in the first wireless communication unit. That is, with respect to the wireless communication device 10 in FIG. 1, the second wireless communication unit 102 may operate based on the clock signal from the clock generation unit in the first wireless communication unit 101. 2, the second wireless communication unit 202 may operate based on a clock signal from a clock generation unit in the first wireless communication unit 201.

  The second wireless communication unit can operate in synchronization with the first wireless communication unit by operating based on the clock signal generated in the first wireless communication unit.

(Ninth embodiment)
The wireless communication device and the authentication device according to the ninth embodiment are basically the same as or similar to the wireless communication device and the authentication device described in any of the previous embodiments. A wireless power feeder is further provided. The power supply control unit is connected to the power supply unit and the wireless power supply unit, and selects one of the power supply unit and the wireless power supply unit as the power supply of the apparatus. According to the present embodiment, since the power source of the apparatus is appropriately controlled, low power consumption operation is possible.

(Tenth embodiment)
The wireless communication apparatus and the authentication apparatus according to the tenth embodiment are basically the same as or similar to the wireless communication apparatus and the authentication apparatus described in any of the previous embodiments, but the moving image compression / decompression unit is provided. In addition. According to the present embodiment, it is possible to easily transmit a compressed moving image and decompress a received compressed moving image.

(Eleventh embodiment)
The wireless communication device and the authentication device according to the eleventh embodiment are basically the same as or similar to the wireless communication device and the authentication device described in any of the above embodiments, but the first wireless communication unit is An LED (Light Emitting Diode) part or other lighting element is further provided. The LED unit is lit in a pattern according to the operating state of the first wireless communication unit. Accordingly, it is possible to easily notify the user of the operation state of the first wireless communication unit.

  The second wireless communication unit may further include an LED unit or another lighting element. The LED unit is lit in a pattern according to the operating state of the second wireless communication unit. Accordingly, it is possible to easily notify the user of the operation state of the second wireless communication unit.

(Twelfth embodiment)
The wireless communication device and the authentication device according to the twelfth embodiment are basically the same as or similar to the wireless communication device and the authentication device described in any of the previous embodiments, but the first wireless communication unit includes A vibrator unit to be connected is further provided. The vibrator unit vibrates in a pattern corresponding to the operating state of the first wireless communication unit. Accordingly, it is possible to easily notify the user of the operation state of the first wireless communication unit.

  The wireless communication device and the authentication device according to the present embodiment may further include a vibrator unit connected to the second wireless communication unit. The vibrator unit vibrates in a pattern corresponding to the operation state of the second wireless communication unit. Accordingly, it is possible to easily notify the user of the operation state of the second wireless communication unit.

(13th Embodiment)
The wireless communication device and the authentication device according to the thirteenth embodiment are basically the same as or similar to the wireless communication device and the authentication device described in any of the above embodiments, but the first wireless communication unit is A switching unit and a plurality of different PHY processing units are provided. The switching unit is connected to a plurality of PHY processing units and switches an effective PHY processing unit. According to this embodiment, communication based on the first wireless communication method can be executed using an appropriate PHY processing unit depending on the situation.

(Fourteenth embodiment)
The wireless communication device and the authentication device according to the fourteenth embodiment are basically the same as or similar to the wireless communication device and the authentication device described in any of the above embodiments, but the first wireless communication unit is A switching unit and a plurality of different wireless communication function units (including a PHY processing unit). For example, one of a plurality of wireless communication function units may be a function unit that executes wireless LAN communication. The switching unit is connected to a plurality of wireless communication function units and switches an effective wireless communication function unit. According to the present embodiment, it is possible to execute communication based on the first wireless communication method using an appropriate wireless communication function unit according to the situation.

(Fifteenth embodiment)
The wireless communication apparatus and authentication apparatus according to the fifteenth embodiment are basically the same as or similar to the wireless communication apparatus and authentication apparatus described in the thirteenth embodiment, but further include a switch. The switch connects an effective PHY processing unit to the antenna. According to the present embodiment, it is possible to execute communication based on the first wireless communication method using an appropriate PHY processing unit according to a situation while sharing an antenna.

(Sixteenth embodiment)
The wireless communication device and the authentication device according to the sixteenth embodiment are basically the same as or similar to the wireless communication device and the authentication device described in the fourteenth embodiment, but further include a switch. The switch connects an effective wireless communication function unit to the antenna. According to this embodiment, it is possible to execute communication based on the first wireless communication method using an appropriate wireless communication function unit according to the situation while sharing an antenna.

  At least a part of the processing in each of the above embodiments can be realized by using a general-purpose computer as basic hardware. The program for realizing the above processing may be provided by being stored in a computer-readable storage medium. The program is stored in the storage medium as an installable file or an executable file. Examples of the storage medium include a magnetic disk, an optical disk (CD-ROM, CD-R, DVD, etc.), a magneto-optical disk (MO, etc.), and a semiconductor memory. The storage medium may be any as long as it can store the program and can be read by the computer. The program for realizing the above processing may be stored on a computer (server) connected to a network such as the Internet and downloaded to the computer (client) via the network.

  Although several embodiments of the present invention have been described, these embodiments are presented by way of example and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, replacements, and changes can be made without departing from the scope of the invention. These embodiments and modifications thereof are included in the scope and gist of the invention, and are included in the invention described in the claims and the equivalents thereof.

DESCRIPTION OF SYMBOLS 10 ... Wireless communication apparatus 20 ... Authentication apparatus 30 ... Server 100, 200 ... Control part 101, 201 ... 1st wireless communication part 102, 202 ... 2nd wireless communication part 103, 203 ... User interface section

Claims (32)

First address information includes a first wireless communication unit for performing communication using a first wireless communication system Re assigned, the control unit for controlling the second wireless communication unit,
The control unit transmits a first signal transmission instruction including the first address information, first identification information for specifying a wireless communication system, and second identification information for specifying an authentication target. To the wireless communication department of
The control unit, a transmission instruction of said first signal after E given to the second wireless communication unit, is received by at least one of a pre-Symbol first wireless communication unit and the second radio communication unit and a second second address information including if the signal, the third of said first transmission instruction signal for the second address information connected is set to destination address request Give to the wireless communication department of
Wireless communication device.   The wireless communication apparatus according to claim 1, wherein the control unit gives a transmission request for a Probe Request frame to the first wireless communication unit after giving the second wireless communication unit a transmission instruction for the first signal.   The wireless communication apparatus according to claim 1, further comprising the first wireless communication unit and the second wireless communication unit.   The wireless communication apparatus according to claim 3, wherein the second wireless communication unit performs communication using a second wireless communication method corresponding to communication realized by displaying and reading a barcode.   The wireless communication apparatus according to claim 4, wherein the second wireless communication method has a narrower communication range than the first wireless communication method. The control unit is applied to said first wireless communication unit an instruction for transmission instruction or we first time to listen to the second signal until the elapse of the first signal,
When the first wireless communication unit receives the second signal in which the first address information is set as the reception destination address before the first time elapses, the first wireless communication unit transmits the information of the second signal to the first signal. Notify the control unit,
The wireless communication apparatus according to claim 1. The control unit, after giving the transmission instruction of the third signal to the first wireless communication unit, information of a fourth signal including a value indicating whether or not a connection request based on the third signal is acceptable Notified from the first wireless communication unit,
Wherein, when the fourth signal includes a value indicating the permission of the connection request, gives an instruction to the authentication device and the data exchange to the first wireless communication unit,
The wireless communication apparatus according to claim 1. First address information includes a first wireless communication unit for performing communication using a first wireless communication system Re assigned, the control unit for controlling the second wireless communication unit,
Wherein the control unit includes a second address information includes a first identification information identifying a wireless communication system, and a second identification information for identifying the authentication object, it is received by the second radio communication unit When the information of the first signal is notified, it is determined whether or not the first identification information and the second identification information are appropriate,
When the first identification information and the second identification information are appropriate, the control unit transmits at least the first wireless communication unit with an instruction to transmit a second signal including the first address information. And any one of the second wireless communication units,
Wherein, when the information of the second signal a third signal for the received connection request by the previous SL first wireless communication unit after giving a transmission instruction is notified, the third Determining whether a connection request based on the signal is possible based on the second address information;
The control unit gives a transmission instruction of a fourth signal including a value indicating whether or not the connection request is possible to the first wireless communication unit;
Authentication device.   The authentication apparatus according to claim 8, further comprising the first wireless communication unit and the second wireless communication unit.   The authentication apparatus according to claim 9, wherein the second wireless communication unit performs communication using a second wireless communication method corresponding to communication realized by displaying and reading a barcode.   The authentication apparatus according to claim 10, wherein the second wireless communication method has a narrower communication range than the first wireless communication method.   The control unit, after giving a transmission instruction of a fourth signal including a value indicating permission of the connection request to the first wireless communication unit, the wireless communication device and data to which the second address information is assigned The authentication apparatus according to claim 8, wherein an instruction for exchange is given to the first wireless communication unit.   The control unit includes: a wireless communication device to which the second address information is assigned after an acknowledgment response to a fourth signal including a value indicating permission of the connection request is received by the first wireless communication unit; 12. The authentication apparatus according to claim 8, wherein an instruction for exchanging data is given to the first wireless communication unit.   The control unit provides communication based on the first wireless communication method at a specific location after giving the first wireless communication unit an instruction to transmit a fourth signal including a value indicating permission of the connection request. The authentication device according to claim 8, wherein the wireless communication device to which the second address information is assigned is permitted to use the device.   The control unit is based on the first wireless communication method at a specific location after an acknowledgment response to a fourth signal including a value indicating permission of the connection request is received by the first wireless communication unit. The authentication device according to claim 8, wherein the wireless communication device to which the second address information is assigned is permitted to use communication. First address information is performed by assigned Re radio communication apparatus comprising a first wireless communication unit for performing communication using a first wireless communication system, a control unit for controlling the second wireless communication unit A wireless communication method,
The control unit issues a first signal transmission instruction including the first address information, first identification information for specifying a wireless communication system, and second identification information for specifying an authentication target. Giving to the wireless communication department of
Wherein the control unit is a transmission instruction of said first signal after E given to the second wireless communication unit, is received by at least one of a pre-Symbol first wireless communication unit and the second radio communication unit and a second second address information including if the signal, the third of said first transmission instruction signal for the second address information connected is set to destination address request A wireless communication method comprising: providing to the wireless communication unit. Authentication first address information is performed by assigned Re authentication apparatus comprising: a first radio communication unit that performs communication using a first wireless communication system, a control unit for controlling the second wireless communication unit A method,
Wherein the control unit, and a second address information includes a first identification information identifying a wireless communication system, and a second identification information for identifying the authentication object, it is received by the second radio communication unit When the information of the first signal is notified, determining whether the first identification information and the second identification information are appropriate;
When the first identification information and the second identification information are appropriate, the control unit transmits at least the first wireless communication unit with an instruction to transmit a second signal including the first address information. And giving to one of the second wireless communication units,
Wherein the control unit is, when the information of the second signal a third signal for the received connection request by the previous SL first wireless communication unit after giving a transmission instruction is notified, the third Determining whether a connection request based on the signal is possible based on the second address information;
An authentication method comprising: the control unit giving a transmission instruction of a fourth signal including a value indicating whether or not the connection request is possible to the first wireless communication unit. The first identification information and second identification information is obtained from the server, any of the wireless communication equipment of claim 1 to claim 7. The first wireless communication method is a wireless LAN,
The second wireless communication method is proximity wireless communication;
Wireless communication equipment according to claim 4 or claim 5. The first identification information is SSID, any of the wireless communication equipment of claim 1 to claim 7. The second signal is a Probe Response frame,
The third signal is an Association Request frame.
Any of the wireless communication equipment of claim 1 to claim 7. The second identification information are reserved ID or ticket information, any of the wireless communication equipment of claim 1 to claim 7. The application is executed on the condition that the communication area of the second wireless communication method provided by the authentication device is entered,
When the application is executed, the control unit gives an instruction to transmit the first signal to the second wireless communication unit.
The wireless communication apparatus according to claim 4 or 5.   The authentication device according to claim 8, further comprising a user interface unit that notifies the user of information.   25. The authentication device according to claim 24, wherein the user interface unit includes a flap door that is opened and closed according to whether or not the user can enter and exit depending on whether or not the connection request is possible.   26. The authentication according to claim 24 or 25, wherein the user interface unit displays an image or outputs a sound in order to make the user recognize whether or not the user can enter and exit depending on whether or not the connection request is possible. apparatus.   A passage control device including the authentication device according to any one of claims 8 to 15 and claims 24 to 26.   An automatic ticket gate including the authentication device according to any one of claims 8 to 15 and claims 24 to 26.   The first external device including the first wireless communication unit and the second external device including the second wireless communication unit are connected by wire. 26. The authentication device according to any one of 26. Including the authentication device according to any one of claims 8 to 15 and claims 24 to 26;
The first wireless communication method is a wireless LAN;
base station.   The wireless communication device according to claim 7, wherein when the fourth signal includes a value indicating permission of a connection request, Internet connection based on the first wireless communication method is permitted.   The authentication apparatus according to claim 14 or 15, wherein use of communication based on the first wireless communication method includes Internet connection.

Images