WO2004039008A1

WO2004039008A1 - Data communication system

Info

Publication number: WO2004039008A1
Application number: PCT/JP2003/011772
Authority: WO
Inventors: Nobuo Ariga; Yutaka Nakamura
Original assignee: Logitec Corporation
Priority date: 2002-10-22
Filing date: 2003-09-16
Publication date: 2004-05-06
Also published as: AU2003264445A1

Abstract

A communication adapter is firstly connected to a communication relay device. The communication relay device registers the communication adapter connected and creates/issues communication setting information and a digital certificate to the communication adapter. After this, the communication adapter is connected to a terminal device. The terminal device reads the communication setting information from the communication adapter, sets a communication parameter according to the communication setting information, and starts an authentication request for communication.

Description

Specification

U evening communication system

The present invention relates to a data communication system having at least one terminal device and a relay device that relays communication between the terminal device and another device based on communication setting information. Background art

An example of a conventional data communication system is a wireless LAN (Local Area Network). In a wireless LAN, there are at least one terminal device capable of wireless data communication and a communication relay device called an access point.

Such a wireless LAN access point has, for example, an HTTP (Hypertext Transfer Protocol) server function and has a web page for setting parameters. Then, in the management server that can access the access point, the HTTP browser specifies the URL (Uniform Resource Locator) of the web page, displays the web page, and displays various web pages input according to a predetermined user interface. Set the parameter to the access point.

These parameters include the identification code of the wireless LAN terminal (ie, wireless communication interface) used for the terminal device, and communication setting information including security information.

As the individual identification code, for example, a MAC (Medium Access Control) address is used. In addition, the communication setting information includes an SSID (Service Set Identifier) indicating the network name, encryption (that is, WEP ( W ed Equ iv a l ent (Privacy)) on / off, encryption key (ie WEP key), channel number, etc. are included.

As described above, it is necessary to manually input and set the individual identification code and communication setting information for the wireless LAN card of each terminal device using the management server as described above. is there. In addition, it is necessary to set communication parameters in the terminal device in accordance with the setting of the access point.

Therefore, every time a new terminal device is added or added, it is necessary to manually set the access point and the terminal device. As described above, in a conventional data communication system, much manual work is required for setting communication parameters. This becomes more pronounced as the number of terminal devices increases. Also, since the parameters are input manually, there is a possibility that an error may occur. If there is an error, a problem may occur in data communication.

Further, since the communication setting information including the security information is also input by the user, depending on the user, the security function may not be enabled, or the password key with a small number of digits may be used. For this reason, manual input of communication setting information may cause a decrease in security level.

The present invention has been made in view of the above-described problems, and enables a user to set communication parameters without manually inputting communication parameters, thereby suppressing a decrease in security level. The purpose is to obtain a data communication system. Disclosure of the invention

A data communication system of the present invention is a data communication system including a communication relay device and at least one terminal device to which at least one communication adapter for performing data communication with the communication relay device can be connected. The communication adapter, the communication relay device, and the terminal device have the following features. The communication adapter has a first memory that stores an individual identifier unique to each individual, and a second memory that can store communication setting information of the terminal device. The communication relay device includes a first connector connectable to the communication adapter, first reading means for reading an individual identifier of the communication adapter, and communication setting information used by the terminal device for communication with the communication relay device. Issuing means for issuing the communication adapter, registering means for registering the communication adapter as a communication partner by storing the individual identifier of the communication adapter, and writing means for writing the communication setting information issued by the issuing means to the communication adapter. And The terminal device further includes a second connector connectable to the communication adapter, second reading means for reading communication setting information written in the communication adapter, and communication setting information read by the second reading means. Setting means for setting communication parameters for communication with the communication relay device based on

As a result, the communication parameters can be set without the user manually inputting the communication parameters, and the security level can be prevented from lowering. Further, a data communication system of the present invention has the following features in a communication adapter, a communication relay device, and a terminal device in addition to the data communication system of the above invention. The second memory of the communication adapter can store erasure necessity information for specifying whether to erase the communication setting information after setting the communication parameters by the terminal device. The writing means of the communication relay device is The erasure necessity information is written into the second memory of the communication adapter together with the setting information, and the second reading means of the terminal device reads the communication setting information and the erasure necessity information written in the communication adapter. Further, the setting means of the terminal device deletes the communication setting information written in the communication adapter in accordance with the deletion necessity information after setting the communication parameters for communication with the communication relay device.

As a result, even if the communication adapter is obtained by a malicious third party due to loss, theft, etc., since the communication setting information does not remain in the communication adapter, it is possible to suppress the occurrence of unauthorized use of the communication relay device. Can be. Therefore, the security level of the data communication system can be improved. Furthermore, a data communication system of the present invention has the following features in a communication relay device in addition to any of the data communication systems of the above invention. The registration unit of the communication relay device registers the date and Z or time of registration by the registration unit or the date and Z or time of issue of communication setting information by the issuing unit, together with the individual identifier of the communication adapter.

As a result, it is possible to prompt the periodic updating of the communication setting information, and it is possible to suppress a temporal decrease in the security level. In addition, it is possible to construct a network that permits access to access points for a limited time. Further, the data communication system of the present invention has the following features in the communication adapter and the communication relay device in addition to any of the above-described data communication systems. The first memory of the communication adapter stores setting method identification information indicating a setting method of communication parameters of the terminal device. The first reading means of the communication relay device reads the setting method identification information from the communication adapter, The issuing means of the communication relay device issues communication setting information only when the value of the setting method identification information is a predetermined value. Furthermore, a data communication system of the present invention has the following features in a communication relay device in addition to any of the data communication systems of the above invention. The registration means of the communication relay device registers the communication adapter only when the value of the setting method identification information is a predetermined value. Furthermore, a data communication system of the present invention has the following features in a communication relay device in addition to any of the data communication systems of the above invention. The communication relay device has a first notifying unit for notifying in a predetermined manner when the issuing unit does not issue the communication setting information.

This makes it possible to know that the communication setting information is not issued to the communication adapter connected to the communication relay device. Furthermore, a data communication system of the present invention has the following features in a communication relay device in addition to any of the data communication systems of the above invention. The communication relay device has a second notifying unit for notifying in a predetermined manner when the writing of the communication setting information to the communication adapter by the writing unit is completed. Furthermore, a data communication system according to the present invention performs wireless data communication between a communication relay device and a terminal device in addition to any one of the data communication systems according to the present invention. Furthermore, a data communication system of the present invention has the following features in a communication relay device in addition to any of the data communication systems of the above invention. connecting The issuing means of the relay device includes an identifier indicating the network name, wireless data communication encryption ON / OFF, an encryption key, a digital certificate, a type of encryption method, and a channel number of a channel used in wireless data communication. Issue communication setting information that includes at least one of them. A communication relay device of the present invention is a communication relay device that performs data communication with at least one terminal device to which at least one communication adapter can be connected. The communication relay device issues a connector connectable to the communication adapter, reading means for reading an individual identifier of the communication adapter, and communication setting information used by the terminal device for communication with the communication relay device. Issuing means, registration means for registering the communication adapter as a communicable partner by storing the individual identifier of the communication adapter, and writing means for writing the communication setting information issued by the issuing means to the communication adapter. Is provided. Furthermore, the communication relay device of the present invention has the following features in addition to the communication relay device of the above invention. The writing means of the communication relay device writes, to the communication adapter, erasure necessity information for specifying whether or not to erase the communication setting information after setting the communication parameters by the terminal device, together with the communication setting information. Further, the communication relay device of the present invention has the following features in addition to any one of the communication relay devices of the above invention. The registration unit registers the date and / or time of registration by the registration unit, or the date and Z or time of the issuance of communication setting information by the issuing unit, together with the individual identifier of the communication adapter. Further, the communication relay device of the present invention may include any one of the communication relay devices of the above invention. In addition to the above, it has the following features. The reading means reads, from the communication adapter, the setting method identification information indicating the setting method of the communication parameters of the terminal device together with the individual identifier. The issuing unit issues the communication setting information only when the value of the setting method identification information is a predetermined value. Further, the communication relay device of the present invention has the following features in addition to any one of the communication relay devices of the above invention. The registration unit registers the communication adapter only when the value of the setting method identification information is a predetermined value. Furthermore, the communication relay device of the present invention includes, in addition to any one of the communication relay devices of the above invention, a first notifying unit that notifies in a predetermined manner when the issuing unit does not issue the communication setting information. Furthermore, the communication relay device of the present invention may further include, in addition to any one of the communication relay devices of the above-described invention, a second notification unit that notifies in a predetermined manner when the writing of the communication setting information to the communication adapter by the writing unit is completed. Is provided. Further, a communication relay device of the present invention performs wireless data communication with a terminal device in addition to any of the communication relay devices of the above invention. Further, the communication relay device of the present invention has the following features in addition to any one of the communication relay devices of the above invention. The issuing means is a small identifier among the identifier indicating the network name, the encryption key for wireless data communication, the encryption key, and the channel number of the channel used for wireless data communication I.

Issue communication setting information containing <and ¾ 1 The communication adapter according to the present invention comprises: a communication relay device; a connector connectable to any of the terminal devices that perform data communication with the communication relay device; and an individual identifier unique to each individual that can be read through the connector. Remember the first

1 memory, and a second memory for storing communication setting information of the terminal device readable via the connector. Furthermore, the communication adapter of the present invention has the following features in addition to the communication adapter of the above invention. The second memory is capable of storing erasure necessity information for specifying whether to erase the communication setting information after the communication parameters are set by the terminal device. Furthermore, the communication adapter of the present invention has the following features in addition to the communication adapter of the above invention. The first memory stores setting method identification information indicating the setting method of the communication parameters of the terminal device. The terminal device of the present invention is a terminal device to which a communication adapter that performs data communication with a communication relay device can be connected. The communication adapter includes a connector connectable to the communication adapter, reading means for reading communication setting information written on the communication adapter, and a communication relay device based on the communication setting information read by the reading means. Setting means for setting the communication parameters of the communication. Furthermore, the terminal device of the present invention has the following features in addition to any of the terminal devices of the above-described invention. The reading unit reads the communication setting information written in the communication adapter and the deletion necessity information for specifying whether to delete the communication setting information after setting the communication parameters by the terminal device. . Then, the setting means deletes the communication setting information written in the communication adapter in accordance with the deletion necessity information after setting communication parameters for communication with the communication relay device. Further, the terminal device of the present invention performs wireless data communication with a communication relay device in addition to any of the terminal devices of the present invention. The computer readable recording medium of the present invention is a computer readable recording medium that stores a program for causing a computer to function in a terminal device to which a communication adapter that performs data communication with a communication relay device can be connected. Then, the program causes the computer to read communication setting information written to the communication adapter, and, based on the communication setting information read by the reading means, to communicate communication parameters for communication with the communication relay device. Function as setting means for setting. BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is a block diagram showing a configuration of a data communication system according to Embodiment 1 of the present invention.

FIG. 2 is a block diagram showing a configuration of a personal computer in the data communication system according to Embodiment 1 of the present invention.

FIG. 3 is a block diagram showing a configuration of a wireless LAN card in the data communication system according to Embodiment 1 of the present invention.

FIG. 4 is a block diagram showing a configuration of an access point in the data communication system according to Embodiment 1 of the present invention.

FIG. 5 is a flowchart illustrating an operation of the access point according to the first embodiment. FIG. 6 is a flowchart illustrating an operation of the personal computer according to the first embodiment.

FIG. 7 is a flowchart illustrating an operation of an access point according to the second embodiment.

FIG. 8 is a flowchart illustrating an operation of the personal computer according to the second embodiment. BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of the present invention will be described with reference to the drawings.

Embodiment 1.

The data communication system according to the first embodiment of the present invention is a wireless LAN system. FIG. 1 is a block diagram showing a configuration of a data communication system according to Embodiment 1 of the present invention.

In FIG. 1, a personal computer 1 — i (i = 1,..., N, n≥1) has a slot 11 1 into which a wireless LAN card 2 _ i can be inserted and a wireless LAN card 2 — i. A terminal device having a connectable connector 11a (see FIG. 2). The wireless LAN card 2_i (i = 1,..., N) is in the form of a PC card, for example, and is a network interface for wireless data communication and a portable communication adapter. The access point 3 has a slot 31 into which the wireless LAN card 2-i can be inserted, and a connector 31a (see FIG. 4) to which the wireless LAN card 2-i can be connected. This is a communication relay device that performs wireless data communication with a personal computer 11-1 to 1-n equipped with wireless LAN terminals 2_1 to 2_n. PC 4 is a personal computer that can be connected to access point 3 via wired network 5.

In the state shown in Fig. 1, the wireless LAN card 2-i is a personal computer. Attached to l-i and ready for wireless data communication. Before executing the wireless data communication, the communication parameters of the personal computer 1i and the access point 3 are set, and the wireless AN card 2i is connected to the access point 3 as appropriate. It is attached to the personal computer 11i.

FIG. 2 is a block diagram showing a configuration of the personal computer 11 i in the data communication system according to Embodiment 1 of the present invention.

The personal computer 11 i has a slot 11 having a connector 11 a for PC card 11, a CPU (Central Processing Unit) 12, a R〇M (Read Only Memory) 13, and a RAM (Random Access Memory) 14 It has an interface circuit 16 for PC cards such as a hard disk drive (HDD) 15 and PCICIA, a drawing circuit 17 and a display 18.

The connector 11 a is provided at the end of the slot 11, is capable of mechanically and electrically connecting a wireless LAN card, and is a connector (second connector) electrically connected to the interface circuit 16. Connector).

The HDD 19 stores a program 19 which is executed by the CPU 12 and executes the setting of communication parameters described later. In the HDD 15, in addition to the program 19, another program for controlling data communication is stored, and at the time of communication, the program is executed by the CPU 12.

FIG. 3 is a block diagram showing a configuration of the wireless LAN card 2-i in the data communication system according to Embodiment 1 of the present invention.

In the wireless LAN card 2—i shown in FIG. 3, the connector 21 is electrically and mechanically connected to the connector 11 a of the personal computer 11 i and the connector 3 la of the access point 3 (see FIG. 4). Connectable Connector. The interface circuit 22 is an interface circuit capable of performing data communication with the interface circuit 16 of the personal computer 1-i or the interface circuit 32 of the access point 3 (see FIG. 4).

The ROM 23 is a non-volatile memory that stores a MAC address 28, which is an individual identifier unique to the wireless LAN card 2-i, and a setting method identifier 29, which is a wireless LAN card 2-i. Memory (first memory). The setting method identifier 29 is setting method identification information indicating the type of the setting method of the communication parameters of the personal computer 11i. As the setting method identifier 29, a vendor code or the like is used. The setting method identification information determines whether or not the wireless LAN card 2_i supports the communication parameter setting method provided in the data communication system according to the first embodiment. Used to The memory 24 is a non-volatile memory (second memory) in which predetermined information (such as communication setting information described later) is read and written by the access points 3 and Z or the personal computer 11i. The ROM 23 and the memory 24 can be externally accessed via the connector 21 and the interface 22.

The wireless circuit 25 is a circuit that performs wireless data communication with the access point 3 by a predetermined communication method. The control circuit 26 is a circuit that controls each unit in the wireless LAN card 2-i. The light emitting diode (LED) 27 is an element that functions as a notification unit that is turned on when connected to another device or blinks during communication.

FIG. 4 is a block diagram showing a configuration of access point 3 in the data communication system according to Embodiment 1 of the present invention.

In access point 3 shown in FIG. 4, slot 31 is a slot into which AN card 2-i can be inserted wirelessly. Connector 3 1 a A wireless LAN card is provided at the end of the slot 31 and can be connected mechanically and electrically to the wireless LAN card. The connector (first connector) electrically connected to the interface circuit 32 is there. The interface circuit 32 is an interface circuit capable of performing data communication with the interface circuit 22 of the wireless LAN card 2-i.

Further, the network interface circuit 33 is a circuit that can be connected to the wired network 5. The wireless circuit 34 is a circuit that performs wireless data communication with the wireless LAN card 21i by a predetermined communication method. The control circuit 35 is a circuit that controls each unit in the access point 3.

The memory 36 is a non-volatile memory, and includes communication setting information previously supplied from the PC 4, the MAC address of the wireless LAN card 2-i, and the wireless LAN card 2-i. This memory stores the correspondence between the MAC address and the communication setting information used by the personal computer 1_i to which the communication adapter is attached as a communication management table. Note that other semiconductor storage media or magnetic recording media may be used as the memory 36.

The communication setting information includes the SSID indicating the network name, encryption (ie, WEP (Wired Equivalent Privacy)) on / off, encryption key (ie, WEP key), channel number, and the like. It is. In addition, the communication setting information may include a digital certificate (Digital Identification) having a user-specific public key. Alternatively, the access point 3 may function as a digital certificate issuing / certification authority (CA (Certification Authority) authority).

The timer 37 is a circuit for outputting the current date and time.

The light emitting diode (LED) 38 is an element that functions as first notification means for notifying completion of a predetermined process. In addition, LED 38 It may be made to blink at the time of communication. The light emitting diode (LED) 39 is an element that functions as a second notification unit that notifies the abnormal end of the predetermined process.

The control circuit 35 communicates the first reading means for reading the MAC address from the wireless LAN card 2-i, the issuing means for issuing communication setting information, and the wireless LAN card 2-i. A registration means for registering as a possible partner is realized. In addition, the CPU 12 executes the program 19 to execute communication with the access point 3 based on the second reading means for reading the communication setting information written in the wireless LAN card 2-i and the communication setting information. The setting means for setting the communication parameters is realized. Next, the operation of each device in the data communication system will be described. That is, an embodiment of a communication parameter setting method will be described.

First, processing regarding the access point 3 will be described. FIG. 5 is a flowchart illustrating the operation of access point 3 in the first embodiment.

First, the user or the system administrator uses the PC 4 to supply a start command signal to the access point 3. Upon receiving the start command signal, the access point 3 starts the registration mode (step S1). At that time, in the access point 3, the network interface circuit 33 receives the start command signal, and the control circuit 35 starts the processing in the registration mode. Note that the processing in the registration mode can be executed in parallel with the communication processing.

In the registration mode, the access point 3 waits until the wireless LAN card 2-1 is inserted (step S2). At that time, access boy In the interface 3, the control circuit 35 monitors the interface circuit 32 as a process of the registration mode, and the wireless LAN card 2-1 is connected to the interface circuit 32 via the connector 31a. Wait for electrical connection.

Next, the user or system administrator inserts the wireless LAN card 2-1 into the slot 31 of the access point 3. When detecting the insertion of the wireless LAN card 2-1, the access point 3 reads the setting method identifier 29 from the wireless LAN card 2-1 (step S3). At that time, the control circuit 35 controls the interface circuit 32, and the interface circuit 32 accesses the R〇M 23 of the wireless LAN card 2-1 to set the setting method identifier 29. Read.

Then, upon reading the setting method identifier 29, the control circuit 35 of the access point 3 determines whether or not the setting method identifier 29 has a predetermined value (step S4). That is, it is determined based on the setting method identifier 29 whether or not the wireless LAN terminal 2-1 corresponds to the communication parameter setting processing provided by the access point 3.

When the access point 3 determines that the setting method identifier 29 is a predetermined value and is appropriate, the access point 3 obtains the MAC address 28 of the wireless LAN card 2-1 from the wireless LAN card 2_1. Is read (step S5). At that time, the control circuit 35 controls the interface circuit 32, and the interface circuit 32 accesses the ROM 23 of the wireless LAN card 2-1 and reads the MAC address 28.

Next, the access point 3 stores the MAC address 28 in the communication management table, and registers the wireless LAN card 2-1 as a communicable communication partner (step S5). At that time, in the access point 3, the control circuit 35 accesses the memory 36, and adds the MAC address 28 of the wireless LAN card 2-1 to the communication management table. When the access point 3 registers the wireless LAN card 2-1, the communication setting information corresponding to the wireless LAN card 2-1 (MAC address 28) is read from the communication setting information supplied in advance. Select and write the communication setting information to the wireless LAN card 2_1 (step S6). At that time, at the access point 3, the control circuit 35 controls the interface circuit 32, and the interface circuit 32 accesses the memory 24 of the wireless LAN card 2-1 and writes the communication setting information. .

At this time, the control circuit 35 stores a code indicating the type of the selected communication setting information in the communication management table in association with the MAC address 28. Further, the control circuit 35 stores the date and / or time of registration of the wireless LAN card 2_1, or the date and / or time of issuance of the communication setting information, or the certificate and its expiration date in the MAC address. It may be stored in the communication management table in association with 28. The output from the timer 37 is used as the date and / or time.

After the registration, the data communication between the wireless LAN card 2-1 and the access point 3, which is used in the lower layer of the data communication between the personal computer 11 and the access point 3, is executable. State. For example, a second-layer network is established between the wireless LAN card 2-1 and the access point 3 as described above, and then the communication parameters on the personal computer 11i are completely set. Then, a network of the third layer or higher is established between the personal computer 11 i and the access point 3.

When the control circuit 35 of the access point 3 writes the communication setting information to the wireless LAN card 211, that is, issues the communication setting information to the wireless LAN card 2-1 normally, the LED 3 Turn on 8 (Step S7). This notifies that the issuance of the communication setting information to the wireless LAN card 2-1 has been completed normally.

On the other hand, if the setting method identifier 29 is not the predetermined value, the control circuit 35 of the access point 3 stops the registration processing. Then, the control circuit 35 of the access point 3 skips the processing of steps S5 to S7 and turns on the LED 39 (step S8). This notifies that the issuance of the communication setting information to the wireless LAN card 2-1 has ended abnormally.

Then, after turning on the LED 38 or the LED 39, the access point 3 sets a state where the wireless LAN card 2-1 can be disconnected from the connector 31a.

Then, the user or system administrator removes wireless LAN card 2-1 from access point 3. If the user or the system administrator does not execute the same processing for another wireless LAN card 2-i, in order to shift from the registration mode to the communication mode, an unillustrated device installed at the access point 3 is not shown. Operate operation means such as an operation button.

Then, after the LED 38 or the LED 39 lights up, the control circuit 35 of the access point 3 determines whether or not to cancel the registration mode (Step S9). That is, the access point 3 releases the registration mode when there is no wireless LAN card 2-i to be registered and issued. At this time, the control circuit 35 of the access point 3 determines whether or not to cancel the registration mode based on whether or not an operation on an operation means (not shown) has been performed.

Instead of providing an operating means such as an operating button (not shown) at the access point 3, such an operating means is provided at the PC 4, and a signal corresponding to an operation on the operating means is supplied to the access point 3. You can do it No. In that case, the control circuit 35 of the access point 3 determines whether to cancel the registration mode based on the signal. Instead of providing such operation means on the PC 4 of the system administrator, a graphical user interface of the PC 4 of the system administrator may be used.

In this way, the control circuit 35 of the access point 3 determines whether or not to cancel the registration mode. If the control circuit 35 determines that the registration mode is to be released (that is, if there is another wireless LAN card 2-i to be processed), the control circuit 35 does not release the registration mode and proceeds to step S. Return to step 2 and wait until the next wireless LAN card 2_2 is connected. Then, when the next wireless LAN card 2-2 is inserted by the user or the system administrator, the access point 3 performs the same processing for the wireless LAN card 2-2 (steps S3 to S8). ).

Thereafter, insertion and removal of the wireless LAN card 2_j (j = 3 to n) to the access point 3 are repeated in the same manner until the newly installed or expanded wireless LAN card 2-i disappears. Then, registration and issuance processing for all wireless LAN cards 2_1 to 2-n are executed.

When the registration and issuance processing for all the wireless LAN cards 2-1 to 2-n is completed, there is no other wireless LAN card 2-i to be processed. In step S9, when the control circuit 35 of the access point 3 determines that there is no other radio LAN code 2_i to be processed based on the presence or absence of an operation on the above-described operation means. First, the registration mode is canceled and the operation mode is set to the communication mode (step S10). In the communication mode, the access point 3 is in a state where it can communicate with the wireless LAN card 2-i (and thus the personal computer 11 i) registered in the communication management table. Next, processing relating to the personal computers 11 1 to 11 n will be described. FIG. 6 is a flowchart for explaining the operation of the personal computer 1-i in the first embodiment.

The user or system administrator places the wireless LAN card 2-i (i = l, · '·, η), for which communication setting information has been issued from the access point 3, in the slot 11 of the personal computer 1-i. insert. As a result, the wireless LAN card 2-i having received the communication setting information is connected to the connector 11a of the personal computer 11i.

When the personal computer 11i detects that the wireless LAN card 2—i has been connected (step S21), the personal computer 11i transmits the MAC address 28, which is the individual identifier, and the communication setting information to the wireless LAN card. Read from force 2-i (steps S 2 2, S 2 3) At that time, in personal computer 1-i, CPU 12 operates according to 'predetermined program 19, and CPU 12 Monitors the interface circuit 16 and detects that the wireless LAN card 2-i is connected. Then, the CPU 12 controls the interface circuit 16, and the interface circuit 16 accesses the ROM 23 of the wireless LAN card 2-i through the connector 11 a, and the MAC address is obtained. Read out the second 28. The interface circuit 16 accesses the memory 24 of the wireless LAN card 2-i via the connector 11a and reads out the communication setting information.

Next, the personal computer 11i decodes the communication setting information read from the wireless LAN card 2-i and edits the communication setting (that is, the communication parameter value) based on the communication setting information. . At that time, in the personal computer 1-i, the CPU 12 determines the communication settings (that is, the values of the communication parameters) based on the communication setting information according to a predetermined program 19, and stores the communication settings. Edit the file that contains the file. Note that the communication The file storing the settings is stored, for example, in the HDD 15 and is referred to when performing overnight communication. Alternatively, the personal computer 11i may store the communication setting information as a file storing the communication settings.

Then, in the personal computer 1_i, when the communication setting is completed and the authentication protocol for starting the communication is started, the fact is displayed on the display 18 and then the result is displayed (step S25). At that time, in the personal computer 1-i, when the CPU 12 completes the editing of the communication settings (that is, the values of the communication parameters) in accordance with the predetermined program 19, the text and Z or The image data is output to the drawing circuit 17. When receiving the data, the drawing circuit 17 displays a text and a Z or an image corresponding to the data on the display 18.

Thus, the communication setting information issued by the access point 3 is reflected on the personal computer 1-i via the wireless LAN card 2-i. As a result, data communication (test communication or main communication) between the personal computers 1-i and the access point 3 becomes possible. For example, when the access point 3 issues communication setting information to n wireless LAN cards 2-1 to 2-n, the n wireless LAN cards 2-1 to 2-n are transferred to n personal computers. 1 to n, each of the n personal computers 1-1 to 1-n can perform data communication with the access point 3.

The access point 3 issues the issue date and Z or time based on the issue date and Z or time stored in association with the MAC address 28 of the wireless LAN card 2-i, or the registration date and Z or time. / Or time, or registration date and Z or time In this case, the registration expiration warning and the Z or registration expiration notification may be transmitted to the personal computer 11 i connected to the wireless LAN card 2-i. In that case, the Personal Consumer 1/11, upon receiving the registration expiration warning and / or notification of expiration of the registration, displays on the display 18 the text indicating the registration expiration warning and / or Z or the registration expiration notification. And Z or an image are displayed to restrict data communication with Access Point 3. In addition, the access point 3 writes the issue date and Z or time or the registration date and Z or time to the wireless LAN card 2_i, and the personal computer 11i issues the issue date and / or time or The registration date and Z or time are read from the wireless LAN card 2-i. Similarly, when a certain period of time has elapsed, text and / or an image indicating that the registration has expired are displayed, and data communication with the access point 3 is performed. May be limited. In this way, it is possible to prompt the periodic updating of the communication setting information, the encryption key, the password, and the like, and it is possible to suppress the security level from decreasing over time. In addition, it is possible to construct a network that permits access to the access point 3 for a limited time.

Also, the access point 3 encrypts the communication setting information, the wireless LAN card 2-i stores the encrypted communication setting information, and the personal combination user 1-1 i stores the encrypted communication setting information. May be decoded.

The program 19 of the personal computer 11i may be distributed in a state of being recorded on various recording media, and may be installed on the personal computer 11i from the recording medium. As described above, according to the first embodiment, the wireless LAN card 2 — i is composed of R 0 M 23 that stores an individual identifier unique to each individual, and R 0 M 23, which is a personal computer. And memory 24 capable of storing communication setting information. The access point 3 has a connector 31 a connectable to the wireless LAN card 2-i and a control circuit 35. The control circuit 35 reads the individual identifier of the wireless LAN card 2-i, issues communication setting information, and stores the individual identifier in the communication management table to communicate the wireless LAN card 2-i. Register as a possible partner and write the communication setting information to wireless LAN card 2-i. The personal computer 1 — i has a connector 11 a that can be connected to the wireless LAN card 2 — i and a CPU 12 that executes a program 19. The CPU 12 reads the communication setting information written in the wireless LAN card 2-i in accordance with the program 19 and sets communication parameters for communication with the access point 3 based on the communication setting information. I do.

As a result, the communication parameters can be set without the user manually inputting the communication parameters, and a reduction in the security level can be suppressed. That is, the wireless LAN card 2-i connected to the personal computer 11-i is first inserted into the access point 3, and then the wireless LAN card 2-i is replaced with the personal computer 11-i. Automatic setting of communication parameters can be performed without inputting parameter values. In addition, long random symbols and characters, and even hexadecimal encryption keys that do not become characters can be used for the simple task of installing a card, and security can be maintained at a high level while maintaining convenience. Furthermore, in the past, issuing and maintaining digital certificates required costs, time and procedures for operating them, and further costs.However, according to the present embodiment, there is an automatic certificate issuing function. The car The TCO can be reduced by simply installing the hardware. Further, since the registration of the wireless LAN card 2-i to the access point 3 and the setting of the communication parameters are performed in a series of processing, the setting of the communication parameters can be surely performed.

Note that the access point 3 may accumulate communication statistics such as throughput in a communication management table or the like. In addition, the access point 3 regards the completion of the communication parameter setting processing in the personal computer 1-i as the start of the main communication, and determines whether the test communication state or the main communication state is set for each wireless LAN card 21i. You may make it memorize | store in a communication management table etc. at any time. By doing so, the workload of the user or the system administrator can be reduced. Embodiment 2

The data communication system according to the second embodiment of the present invention is different from the data communication system according to the first embodiment in that a function of deleting communication setting information in the wireless LAN card 2-i after setting communication parameters. Is added. Note that the data communication system according to the second embodiment is similar to the data communication system according to the first embodiment, and includes a personal computer 11-1 to 11 n, a wireless LAN card 2-1 to 2-n, and an access point. 3, and PC 4. The basic configuration of each device is the same as that of the first embodiment. Therefore, the description of the configuration of the data system according to the second embodiment is omitted. However, the personal computers 1-1 to 1-n and the access point 3 execute the operation related to the function to delete the communication setting information in the wireless LAN card 2-i after setting the communication parameters. The wireless LAN cards 2-1 to 2-n have a function to delete the communication setting information in the wireless LAN card 2-i after setting the communication parameters. (Deletion necessity information described later) is written. Next, the operation of each device in the data communication system will be described.

First, processing regarding the access point 3 will be described. FIG. 7 is a flowchart illustrating the operation of access point 3 in the second embodiment.

The access point 3 operates as follows in connection with the function to delete the communication setting information in the wireless LAN card 21i after the communication parameters are set. The wireless LAN card is set after the communication parameters are set by the personal computer 1-i. Write the necessity information indicating whether or not to erase the communication setting information in 2-i together with the communication setting information to the wireless LAN card 2-i (step S6a). At that time, at the access point 3, the control circuit 35 controls the interface circuit 32, and the interface circuit 32 accesses the memory 24 of the wireless LAN card 2-1 to obtain the communication setting information and the erasure necessity information. Write '

The other operations of the access point 3 are the same as those in the first embodiment (FIG. 5), and thus description thereof is omitted.

Next, processing relating to the personal computer 1-i will be described. FIG. 8 is a flowchart illustrating an operation of personal computer 1-i according to the second embodiment.

In connection with the function of deleting the communication setting information in the wireless LAN card 2-i after setting the communication parameters, the personal computer 1-i performs the following operations.

After reading the communication setting information from the wireless LAN card 2 i, the personal computer 11 i sends (Step S31). At that time, in the personal computer 11 i, the CPU 12 operates according to a predetermined program 19, controls the interface circuit 16, and the interface circuit 16 connects the connector 11 a Access the memory 24 of the wireless LAN card 2-i via the PC, and read the information about whether or not to erase.

Next, the personal computer 1_i determines whether the erasure necessity information indicates a request to erase the communication setting information (step S32). When the erasure necessity information indicates a request to erase the communication setting information, the personal computer 11i stores the information in the memory 24 of the connected wireless LAN card 2-i. On the other hand, the personal computer 1_i deletes the communication setting information if the deletion necessity information does not indicate a request to delete the communication setting information (step S33). Absent.

At that time, in the personal computer 11 i, the CPU 12 determines whether the erasure necessity information has a predetermined value according to a predetermined program 19, and when the erasure necessity information has the predetermined value. Only the interface circuit 16 is controlled to erase the communication setting information in the memory 24 of the wireless LAN card 2-i.

The other operations of the personal computer 1-i are the same as those in the first embodiment (FIG. 6), and thus description thereof is omitted. As described above, according to the second embodiment, the memory 24 of the wireless LAN card 2-i specifies whether to delete the communication setting information after setting the communication parameters by the personal computer 1-i-evening. Erasure information to be erased can be stored. Also, the control circuit 3 5 of the access point 3 Then, the erasure necessity information is written to the memory 24 of the wireless LAN card 2-i together with the communication setting information. Then, the CPU 12 of the personal computer 1-i operates according to a predetermined program 19, and the CPU 12 reads the communication setting information and the erasure necessity information written in the wireless LAN card 2-i, After setting the communication parameters for communication with Access Point 3, the communication setting information written to the wireless LAN card 2-i is deleted according to the deletion necessity information.

As a result, even if the wireless LAN card 2-i is obtained by a malicious third party due to loss, theft, etc., since no communication setting information remains in the wireless LAN card 2-i, the access point 3 It is possible to suppress the occurrence of unauthorized use. Therefore, the security level of the data communication system can be improved.

In the case of the second embodiment, and when the value of the erasure necessity information does not indicate the necessity of erasure, one wireless LAN card 2_i is selected for a plurality of personal computers l-i. As a result, the same communication setting information can be distributed to a plurality of personal computers 1-i, which is convenient, but the communication setting information may remain in the wireless LAN card 2-i. It is necessary to strictly manage the wireless LAN card 2_i.

In the second embodiment, after the personal computer 11 i reads the communication setting information from the wireless LAN card 2-i and before setting the communication parameters, the communication setting information of the wireless LAN card 2-i is set. May be deleted. In the second embodiment, when the personal computer 11i deletes the communication setting information of the wireless LAN card 2-i, the personal computer 11i may delete the deletion necessity information at the same time. Each of the above embodiments is a preferred example of the present invention. However, the present invention is not limited to these, and various modifications and changes can be made without departing from the scope of the present invention.

For example, each of the embodiments described above is in the form of a wireless LAN system, but may of course be in the form of a wired LAN system. Further, the form of the communication medium is not particularly limited, and may not be the form of the LAN.

In each of the above-described embodiments, data communication can be performed between a plurality of personal computers 11 i via the access point 3. In addition, other communication devices are connected to the wired network 5 or the like. Alternatively, it may be possible to connect to a wide area network such as the Internet.

Further, in each of the above-described embodiments, the access point 3 and the wireless LAN card 2-i are configured to be connected by the slot 31 for the PC card. The interface circuits 16 and 32 are not limited to the form of a simple PC card and slot. For example, each of the interface circuits 16 and 32 is an interface for a peripheral device such as a USB (Universal Serial Bus). Both may be connected. At this time, a cable may be connected between the access point 3 and the wireless LAN card 2-i. Further, the access point 3 may have a connector for an interface for a peripheral device together with the slot 31 and the connector 3la. Similarly, the connection between the personal computer 1-i and the wireless LAN card 2-i can also take the various forms described above.

Further, in each of the above-described embodiments, a light emitting diode (LED) is used as a notification means at the access point 3, but other notification means using light as a medium such as a liquid crystal display is used instead. Alternatively, a notification means using sound such as an electronic buzzer as a medium may be used. In addition, the PC 4 and / or personal computer Means for reporting the spray may be used. In this case, a message indicating the content of the notification is transmitted from the access point 3 to the PC 4 and / or the personal computer 11i. Industrial applicability

The present invention can be applied to, for example, a data communication system such as a wireless LAN system.

Claims

The scope of the claims

1. In a data communication system including a communication relay device and at least one terminal device capable of connecting at least one communication adapter for performing data communication with the communication relay device,

The communication adapter has a first memory that stores an individual identifier unique to each individual, and a second memory that can store communication setting information of the terminal device,

The communication relay device,

A first connector connectable to the communication adapter,

First reading means for reading the individual identifier of the communication adapter; issuing means for issuing communication setting information used by the terminal device for communication with the communication relay device;

Registration means for registering the communication adapter as a communicable partner by storing the individual identifier of the communication adapter;

Writing means for writing the communication setting information issued by the issuing means to the communication adapter;

The terminal device includes: a second connector connectable to the communication adapter; second reading means for reading communication setting information written in the communication adapter;

Setting means for setting communication parameters for communication with the communication relay device based on the communication setting information read by the second reading means,

A data communication system, characterized by:

2. The second memory of the communication adapter is capable of storing deletion necessity information for specifying whether to delete communication setting information after setting communication parameters by the terminal device,

The writing unit of the communication relay device writes the deletion necessity information together with the communication setting information in a second memory of the communication adapter,

The second reading means of the terminal device reads the communication setting information and the erasure necessity information written in the communication adapter,

The setting means of the terminal device, after setting communication parameters for communication with the communication relay device, deletes the communication setting information written in the communication adapter according to the deletion necessity information,

2. The data communication system according to claim 1, wherein:

3. The registration means of the communication relay device may be configured to register and / or time the registration by the registration means, or issue and / or time the communication setting information by the issuing means, or a certificate and its expiration date. 2. The data communication system according to claim 1, wherein the information is registered together with the individual identifier of the communication adapter.

4. The first memory of the communication adapter stores setting method identification information indicating a setting method of communication parameters of the terminal device,

The first reading means of the communication relay device reads the setting method identification information from the communication adapter,

The issuing means of the communication relay device issues the communication setting information only when the value of the setting method identification information is a predetermined value,

2. The data communication system according to claim 1, wherein:

5. The data communication system according to claim 4, wherein the registration unit of the communication relay device registers the communication adapter only when a value of the setting method identification information is a predetermined value. .

6. The communication relay device according to claim 4, wherein the communication relay device has a first notifying unit for notifying in a predetermined manner when the issuing unit does not issue the communication setting information. Data communication system.

7. The communication relay device, further comprising: a second notification unit for notifying in a predetermined manner when the writing of the communication setting information to the communication adapter by the writing unit is completed. The data communication system according to paragraph 4.

8. The data communication system according to claim 1, wherein the communication relay device and the terminal device perform wireless data communication.

9. The issuing means of the communication relay device is used for an identifier indicating a network name, on / off of encryption of wireless data communication, an encryption key, a digital certificate, a type of an encryption method, and wireless data communication. 9. The data communication system according to claim 8, wherein communication setting information including at least one of the channel numbers of the selected channels is issued.

10. In a communication relay device that performs data communication with at least one terminal device to which at least one communication adapter can be connected,

A connector connectable to the communication adapter,

Reading means for reading the individual identifier of the communication adapter; Issuing means for issuing communication setting information used by the terminal device for communication with the communication relay device;

A communication relay device comprising:

11. The writing means of the communication relay device writes to the communication adapter together with the communication setting information, erasure necessity information for specifying whether to erase the communication setting information after setting the communication parameters by the terminal device. 10. The communication relay device according to claim 10, wherein:

1 2. The registration means sets the date and Z or time of registration by the registration means, or the date and time or time of issuance of the communication setting information by the issuing means, or the certificate and its expiration date. 10. The communication relay device according to claim 10, wherein registration is performed together with an individual identifier of the communication adapter.

13. The reading means reads, from the communication adapter, setting method identification information indicating a setting method of communication parameters of the terminal device together with the individual identifier,

The issuing unit issues the communication setting information only when the value of the setting method identification information is a predetermined value;

10. The communication relay device according to claim 10, wherein:

14. The communication relay device according to claim 13, wherein the registration unit registers the communication adapter only when a value of the setting method identification information is a predetermined value.

15. The communication relay device according to claim 10, further comprising: a first notifying unit for notifying in a predetermined manner when the issuing unit does not issue the communication setting information.

16. A second notifying means for notifying in a predetermined manner when the writing of the communication setting information to the communication adapter by the writing means is completed, the second notifying means being provided. A communication relay device according to any one of the preceding claims.

17. The communication relay device according to claim 10, wherein the communication relay device performs wireless data communication with the terminal device.

18. The issuing means includes at least one of an identifier indicating a network name, on / off of encryption of wireless data communication, an encryption key, and a channel number of a channel used in wireless data communication. The communication relay device according to claim 17, wherein communication setting information is issued.

1 9. A connector that can be connected to both the communication relay device and a terminal device that performs data communication with the communication relay device.

A first memory for storing an individual identifier unique to each individual that is readable via the connector;

Communication setting information of the terminal device that can be read through the connector A second memory for storing information

Communication adapter characterized by comprising:

20. The second memory, wherein the second memory can store erasure necessity information for specifying whether to erase communication setting information after setting communication parameters by the terminal device. Communication adapter described in clause 9.

21. The communication adapter according to claim 19, wherein said first memory stores setting method identification information indicating a setting method of a communication parameter of said terminal device.

2 2. In a terminal device that can connect a communication adapter that performs data communication with a communication

A connector connectable to the communication adapter,

Reading means for reading communication setting information written in the communication adapter; setting means for setting communication parameters for communication with the communication relay device based on the communication setting information read by the reading means;

A terminal device comprising:

23. The reading means reads the communication setting information written in the communication adapter and the deletion necessity information for specifying whether to delete the communication setting information after setting the communication parameters by the terminal device. ,

The setting means, after setting communication parameters for communication with the communication relay device, before writing to the communication adapter according to the erasure necessity information Deleting communication setting information;

The terminal device according to claim 22, characterized in that:

24. The terminal device according to claim 22, wherein the terminal device performs wireless data communication with the communication relay device.

25. In a computer-readable recording medium storing a program for causing a computer to function on a terminal device connectable to a communication adapter for performing data communication with a communication relay device,

Computer

Reading means for reading communication setting information written in the communication adapter; and

A computer-readable recording medium storing a program to function as setting means for setting communication parameters for communication with the communication relay device based on the communication setting information read by the reading means.