JP2004180010A - Wireless communication terminal - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a terminal unit for radio communication that easily joins a network, even if identification information of a radio access point, with which the unit desires to communicate with, is changed. <P>SOLUTION: When a radio station terminal STA1 sends an authentication requesting message by using SS-ID "11111", a radio access point AP1 holding "11111" conducts authentication processing between the terminal STA1 and the point. However, since the WEP keys, respectively set to the terminal and the point, are different from each other, an authentication-denying message is returned. Then, the terminal STA1 receives beacon signals sent from a plurality of radio access points AP, keeps SS-IDs and receiving electric field intensities contained in the signals in a data base 801, and selects the SS-ID having the strongest receiving electric field strength among the SS-IDs except erroneously authenticated SS-IDs as a new SS-ID. In addition, the terminal makes an authentication request, using the newly set SS-ID. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a technique for performing data communication with a wireless access point.
[0002]
[Prior art]
2. Description of the Related Art Conventionally, a wireless communication terminal device that performs confidential communication with a wireless access point using the same encryption key such as a WEP (Wired Equivalent Privacy) key is known.
[0003]
For example, in Patent Document 1 below, after a wireless access point performs “Shared Key authentication” from a wireless station terminal, the network manager obtains the final permission of authentication, thereby improving the security level of authentication processing. The technique for causing this is shown.
[0004]
That is, in the wireless LAN system, as shown in FIG. 2, three wireless access points AP1, AP2, and AP3 are operating, and a wireless station terminal STA1, which is a wireless communication terminal device, is about to communicate. Suppose. The wireless access points AP1, AP2, and AP3 have different SS-IDs (Service Set Identifiers) as system identification information. Each SS-ID is “11111” for the wireless access point AP1, “22222” for the wireless access point AP2, and “33333” for the wireless access point AP3. The respective wireless areas (ranges where wireless signals reach) of the wireless access points AP1 to AP3 are indicated by 206, 207 and 208. It is assumed that the wireless station terminal STA1 currently exists within the range of all wireless areas 206, 207, and 208.
[0005]
Now, assuming that the SS-ID set in the wireless station terminal STA1 is “11111”, the wireless station terminal STA1 can communicate with the wireless access point AP1 having the same SS-ID, and assume that it is “22222”. If the wireless access point AP2 is "33333", it can communicate with the wireless access point AP3. If another SS-ID is used, a communication partner cannot be found. Such is known by using an authentication sequence.
[0006]
There are two types of authentication sequences defined by the wireless LAN standard IEEE802.11, which are called "Open System authentication" and "Shared Key authentication", respectively. The major difference is whether or not to use confidential communication using WEP (Wired Equivalent Privacy) at the time of authentication. “Open System authentication” can perform an authentication sequence without using WEP, and “Shared Key authentication” uses WEP.
[0007]
Here, the IEEE 802.11 WEP algorithm will be described with reference to FIGS.
[0008]
FIG. 6 is a diagram showing a configuration of an encryption device in the WEP algorithm. FIG. 7 is a diagram showing a configuration of a decoding device in the WEP algorithm. These encryption device and decryption device are provided in the wireless station terminal STA and the wireless access point AP.
[0009]
As shown in FIG. 6, the encryption device includes combiners 601 and 604 that combine two input bit strings into one bit string. The pseudo-random number generator 602 uses the result of the combiner 601 as a seed, and generates a longer bit sequence (key sequence) using a pseudo-random number generation algorithm. The CRC device 603 uses a CRC (Cyclic Redundancy Check) algorithm to generate a bit string (ICV) for checking whether an error exists in the bit string. The XOR device 605 calculates the exclusive OR of the two input bit sequences. As the pseudorandom number generation algorithm, an RC4 pseudorandom number generation algorithm of RSA Security is used.
[0010]
The encryption device shown in FIG. 6 receives an initialization sequence, an encryption key, and data to be encrypted, which are arbitrary bit strings. The initialization sequence and the encryption key are input to the combiner 601, and a kind of bit sequence obtained by combining the initialization sequence and the encryption key is output. This seed is input to the pseudo-random number generator 602, and a key sequence which is a bit sequence having a length obtained by adding the length of data and the length of ICV is generated. The data is input to the CRC device 603 to generate an ICV. The data and the generated ICV are input to the combiner 604 and combined. The combination of the ICV and the data output from the combiner 604 and the key sequence output from the pseudo-random number generator 602 are input to the XOR device 605, where exclusive OR is obtained for each bit. The result of the exclusive OR operation performed by the XOR device 605 becomes the encrypted data. Then, the initialization sequence and the encrypted data are output as one set.
[0011]
Further, as shown in FIG. 7, the decoding apparatus includes a combiner 701 that combines two input bit strings into one bit string. The pseudo-random number generator 702 uses the result of the combiner 701 as a seed, and generates a longer bit sequence (key sequence) using a pseudo-random number generation algorithm. The XOR device 703 calculates the exclusive OR of the two input bit sequences. The separator 704 separates the input bit string into two bit strings of data and ICV by a predetermined method. The CRC device 705 generates an ICV using a CRC algorithm. The determiner 706 determines whether the data is correct by comparing the ICV generated by the separator 704 with the ICV generated by the CRC device 705. As the pseudo-random number generation algorithm, an RC4 pseudo-random number generation algorithm of RSA Security Inc. or the like is used.
[0012]
The decryption device shown in FIG. 7 receives a pair of encrypted data and an initialization sequence and an encryption key. The initialization sequence and the encryption key are input to the combiner 701, and a kind of bit sequence obtained by combining the initialization sequence and the encryption key is output. This seed is input to the pseudo-random number generator 702, and a key sequence which is a bit sequence having a length obtained by adding the data length and the ICV length is generated. The key sequence and the encrypted data are input to the XOR device 703, and the exclusive OR of each bit is calculated. The calculation result of the XOR device 703 is input to the separator 704 and divided by a predetermined method to generate data and ICV. This data is output and input to the CRC device 705 to calculate the ICV. The ICV calculated by the CRC device 705 and the ICV generated by the separator 704 are input to the determination device 706. The determination device 706 outputs a flag indicating normal decoding as a determination flag if the two ICVs are equal, and outputs a flag indicating decoding failure if not equal.
[0013]
The sequence of “Shared Key authentication” using this WEP for the authentication process, and the association sequence performed after the authentication sequence will be described with reference to FIG.
[0014]
First, the wireless station terminal STA transmits an authentication request message 301 to the wireless access point AP. The message 301 describes that "Shared Key authentication" is used as the authentication algorithm.
[0015]
The wireless access point AP that has received it transmits an authentication response message 302 to the wireless station terminal STA. In the message 302, a numerical operation is performed in accordance with the algorithm of WEP PRNG (Pseudorandom Number Generator) using an IV (Initialization Vector) that can be arbitrarily determined and a WEP key value as parameters each time the authentication procedure is performed. , 128 octets of uniquely determined Challenge Text values.
[0016]
Upon receiving the message 302 including the Challenge Text, the wireless station terminal STA encrypts the Challenge Text data according to the WEP encryption algorithm, and transmits the encrypted data as an authentication request message 303 to the wireless access point AP. I do.
[0017]
Upon receiving the message 303, the wireless access point AP decrypts the encrypted data based on the notified IV and the WEP key data known in advance. If the output ICV at the time of decryption and the notified ICV are the same, authentication is permitted, and the ICV is transmitted as an authentication response message 304 to the wireless station terminal STA.
[0018]
As a result, if the authentication is permitted, the wireless station terminal STA can enter the next association procedure. If the authentication is rejected, the wireless station terminal STA cannot perform the association procedure because the authentication has failed.
[0019]
Next, an association sequence performed after the authentication sequence will be described.
[0020]
As shown in FIG. 3, the wireless station terminal STA transmits an association request message 305 to the wireless access point AP.
[0021]
The wireless access point AP that has received the SS-ID in the association request message 305 identifies the wireless station terminal STA by the SS-ID, and determines whether or not to permit the association according to a predetermined association permission rule. . Then, when permitting, an association response message 306 of association permission is transmitted to the wireless station terminal STA.
[0022]
By performing such processing, a wireless link is established between the wireless access point AP and the wireless station terminal STA (data link establishment 307), and communication becomes possible. That is, according to this authentication / association method, the wireless access point AP and the wireless station terminal STA hold the SS-ID and the WEP key in advance, so that the wireless access point AP can communicate with the specific wireless station terminal STA. A mechanism for permitting authentication and association is realized.
[0023]
[Patent Document 1]
JP 2001-345819 A
[0024]
[Problems to be solved by the invention]
However, in the conventional authentication / association method disclosed in Patent Document 1 or the like, wireless communication can be performed by holding the same SS-ID and WEP key between the wireless access point AP and the wireless station terminal STA. Actually, the setting of the SS-ID in the wireless access point AP may be changed because the SS-ID overlaps with another SS-ID when the wireless access point AP is installed. Even in such a case, since the wireless station terminal STA usually does not know the change, it is impossible to perform wireless communication, and there is a problem that participation in a network is not easy. .
[0025]
The present invention has been made to solve the above-mentioned problems of the prior art, and an object of the present invention is to make it possible to easily participate in a network even if the identification information of a wireless access point with which communication is desired is changed. It is to be.
[0026]
[Means for Solving the Problems]
In order to achieve the above object, a wireless communication terminal device according to claim 1 of the present invention uses the same encryption key as that held by a desired wireless access point among a plurality of wireless access points, and A wireless communication terminal device performing confidential communication with an access point, comprising: identification information setting means for setting identification information for authentication processing; and identification information set by the identification information setting means among the plurality of wireless access points. Authentication request means for making an authentication request to a wireless access point corresponding to the above, and receiving a broadcast signal transmitted from the plurality of wireless access points and including a broadcast signal including identification information set in each wireless access point If the authentication processing fails, the setting is changed to the identification information received by the notification signal receiving means, and the authentication processing is performed. It is characterized in.
[0027]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[0028]
FIG. 1 is a block diagram showing a configuration of a wireless communication terminal device according to one embodiment of the present invention. The wireless station terminal STA, which is a wireless communication terminal device, includes a wireless transmission / reception unit 102 (broadcast signal receiving unit), a storage unit 103 (identification information storage unit), a network interface processing unit 104, a clock unit 105, and a control unit 106 (identification information setting unit). Means, an authentication requesting means) and a display unit 107 (identification information displaying means).
[0029]
The wireless station terminal STA and the wireless access point AP have the encryption device and the decryption device shown in FIGS. Each wireless station terminal STA and each wireless access point AP are similarly configured.
[0030]
FIG. 2 is a configuration diagram of a wireless LAN system constructed by the wireless station terminals STA and the wireless access points AP. In this embodiment, an example in which a wireless LAN is used as a wireless conference system will be described.
[0031]
Although not shown, the wireless station STA2 is connected to a personal computer (PC) and is also connected to a projector, so that the PC screen can be projected on a screen or the like.
[0032]
Each participant of the wireless conference has a wireless station terminal STA connected to the PC, but in the following description, it is assumed that the participant is only one user of the wireless station terminal STA1. Further, the wireless access point of the wireless conference system is assumed to be the wireless access point AP3, and the wireless access points AP1 and AP2 are operating as other wireless access points.
[0033]
In the present embodiment, when a user of the wireless station terminal STA1 makes a presentation using a projector connected to the wireless station terminal STA2 via the wireless access point AP3, the wireless access point AP3 and the wireless station terminal STA1 The authentication and association procedure will be described. In this wireless conference, “11111” is initially used as the SS-ID set in the wireless access point AP3.
[0034]
In the present embodiment, authentication is performed by “Shared Key authentication” using WEP (Wired Equivalent Privacy), which is one of the authentication sequences defined by the wireless LAN standard IEEE 802.11. The encryption device and the decryption device shown in FIGS. 6 and 7 are provided in each wireless station terminal STA and each wireless access point AP. The WEP algorithm is as described above with reference to FIGS.
[0035]
First, prior to the conference, the wireless access point AP3 and the wireless station terminal STA1 each set necessary items. The necessary setting items are an SS-ID, a WEP key (encryption key), and the like. The same WEP key is set for the wireless access point AP3 and the wireless station terminal STA1. Various methods can be used for the setting, and the wireless access point AP3 and the wireless station terminal STA1 can perform the setting separately. It is possible to set even if it is not a meeting place.
[0036]
Here, “11111” is set as the SS-ID in the wireless access point AP3 until the user goes to the conference place, but the SS-ID “11111” is used by the wireless access point AP1 near the conference place. It is assumed that the SS-ID of the wireless access point AP3 has been changed to "33333" in a hurry. As a result, the SS-ID of each wireless access point AP is “11111” for the wireless access point AP1, “22222” for the wireless access point AP2, and “33333” for the wireless access point AP3. The change of the SS-ID at the wireless access point AP3 is, of course, not notified to the wireless station terminal STA1.
[0037]
In such a situation, a process when the wireless station terminal STA1 participates in a wireless conference will be described with reference to FIGS.
[0038]
FIG. 4 shows a sequence of the authentication / association process, and FIG. 5 shows a flowchart of the authentication / association process. 5 is executed by the control unit 106. Hereinafter, description will be made with reference to both.
[0039]
In a state where the wireless access point AP3 is installed at the conference location and the wireless access point AP3 is operating, first, the wireless station terminal STA1 comes to the conference location and turns on its power (401, step S501). If the SS-ID, the WEP key, and the like have not been set in advance in the wireless station terminal STA1, they are set (step S502).
[0040]
Next, the wireless station terminal STA1 displays "communication setting" on the display unit 107 in order to notify the user of the wireless station terminal STA1 that the user is preparing to establish a wireless link with the wireless access point AP. "Medium" is displayed (step S503). Further, all the contents of a database 801 (see FIG. 8) described later stored in the storage unit 103 are erased. Here, the SS-ID of the wireless station terminal STA1 is set to “11111” as originally planned.
[0041]
FIG. 8 is a diagram illustrating an example of the database 801. The database 801 stores the received electric field strength in association with the SS-ID of the wireless access point AP obtained by receiving a beacon signal (broadcast signal) described later, and uses the SS-ID. If the authentication processing has failed, information indicating that the authentication processing has failed is stored in association with the authentication processing.
[0042]
Referring back to FIGS. 4 and 5, next, the wireless station terminal STA1 issues an authentication request to establish a wireless link (402). These processes are performed according to the procedure described above with reference to FIG. That is, shared key authentication is selected, and an authentication request message is transmitted with SS-ID "11111" (402). Then, it is determined whether the authentication and the association have been permitted (step S504).
[0043]
On the other hand, the wireless access point AP1 holding the SS-ID “11111” receives the transmitted authentication request message (402) and performs authentication processing with the wireless station terminal STA1.
[0044]
However, since the WEP key set for each of the wireless station terminal STA1 and the wireless access point AP1 is different, the wireless access point AP1 transmits an authentication reject message to the wireless station terminal STA1 (403).
[0045]
Therefore, in this case, the result of the determination in step S504 is "NO". Then, the SS-ID “11111” of the wireless access point AP1 for which authentication has failed is stored in the database 801 in the storage unit 103 of the wireless station terminal STA1 together with a check for authentication processing failure. Then, timing is started by the timing unit 105 (404).
[0046]
Next, the wireless station terminal STA1 performs a scanning (Scanning) operation (407) of receiving a beacon signal transmitted from a plurality of wireless access points AP until the timer ends (409). Here, beacon signals transmitted from all of the wireless access points AP1 to AP3 are received.
[0047]
In this scanning operation (407), the SS-ID of the wireless access point AP and the received field strength included in the received beacon signal are stored in the database 801 in the storage unit 103 of the wireless station terminal STA1 (405, 406, 408). ). If there is data in the database 801, an OR is performed with the data.
[0048]
In step S505, it is determined whether or not a beacon signal has been received. If a beacon signal cannot be received, “out of service” is displayed on the display unit 107 (step S512), and the wireless station AP is notified that there is no wireless access point AP. Notify the user of the terminal STA1.
[0049]
On the other hand, when the beacon signal is successfully received, the SS-IDs are sorted in the order of the received electric field strength (step S508), and the SS-ID having the highest received electric field strength is selected as the SS-ID to be set in the wireless station terminal STA1. And set (step S507). However, if there is an SS-ID checked in the column of the authentication process failure of the database 801, the authentication process using the SS-ID is not performed. In the example of FIG. 8, the authentication process using the SS-ID “11111” is not performed. That is, the SS-ID with the highest received electric field strength is selected from among those excluding the SS-ID related to the authentication processing failure. As a result, in the example of FIG. 8, the SS-ID “22222” is selected and set.
[0050]
Next, the wireless station terminal STA1 issues an authentication request using the newly set SS-ID to establish a wireless link (410). That is, shared key authentication is selected, and an authentication request message is transmitted with SS-ID “22222” (410). Then, it is determined whether the authentication and the association have been permitted (step S508).
[0051]
On the other hand, the wireless access point AP2 holding the SS-ID “22222” receives the transmitted authentication request message (410) and performs authentication processing with the wireless station terminal STA1.
[0052]
However, since the WEP keys set for the wireless station terminal STA1 and the wireless access point AP2 are different from each other, the wireless access point AP2 sends the wireless station terminal STA1 the same as the wireless access point AP1. Sends an authentication rejection message (411).
[0053]
Therefore, in this case, the result of the determination in step S508 is "NO". Then, the SS-ID “22222” of the wireless access point AP2 for which authentication has failed is stored in the database 801 in the storage unit 103 of the wireless station terminal STA1 together with a check for authentication processing failure. If there is data in the database 801, OR it with that data.
[0054]
Next, referring to the database 801, it is determined whether or not the next SS-ID candidate exists (step S509). That is, it is checked whether or not there is another SS-ID in the database 801 that is not checked for authentication processing failure.
[0055]
As a result of the determination, when the next SS-ID candidate does not exist, the display unit 107 displays “out of service area” (step S512), thereby notifying that the wireless access point AP with which communication is possible does not exist. Notify the user.
[0056]
Next, in step S513, the out-of-service timer is started by the timer 105, and it is determined whether or not the out-of-service timer has timed out (step S514).
[0057]
The determination is repeated until the out-of-service timer times out. If the out-of-service timer times out, the process returns to step S503, and the display unit 107 displays “communication is being set”, thereby shifting to the authentication process again. I do. Thereby, even when the wireless station terminal STA1 goes out of the service area due to the out-of-service timer, the re-authentication process is not performed immediately, and the elapse of a certain time is waited.
[0058]
If it is determined in step S509 that there is a next SS-ID candidate, the process returns to step S507. In this case, the SS-ID “33333” is selected and set. Then, similarly, the wireless station terminal STA1 shifts to authentication and association processing (412). These processes are performed according to the procedure described above with reference to FIG. First, an authentication request is made to establish a wireless link. That is, shared key authentication is selected, an authentication request message is transmitted with SS-ID "33333", and it is determined whether authentication and association are permitted (step S508).
[0059]
On the other hand, the wireless access point AP3 holding the SS-ID “33333” receives the transmitted authentication request message and performs authentication processing with the wireless station terminal STA1.
[0060]
Here, since the WEP key set in each of the wireless station terminal STA1 and the wireless access point AP3 is the same, the wireless access point AP3 transmits an authentication permission message to the wireless station terminal STA1. Further, the wireless station terminal STA1 and the wireless access point AP3 perform an association process. Thereby, a wireless data link is established (413).
[0061]
Then, "YES" is determined in the step S508, and the wireless station terminal STA1 displays the "selected SS-ID" on the display unit 107 (step S510). After that, “communicating” is displayed on the display unit 107 (step S511), and the process ends.
[0062]
If the result of the determination in step S504 is "YES", steps S510 and S511 are executed, and the process ends.
[0063]
According to the present embodiment, when the wireless station terminal STA receives the SS-ID in the beacon signal transmitted from the wireless access point AP, the SS-ID set in the wireless access point AP is known, and the IEEE 802 .11, the correctness of the WEP key can be determined, so that even if the SS-ID of the wireless access point AP with which communication is desired to be changed, the authentication and association with the wireless access point AP can be easily secured. be able to. Therefore, there is no need to set the SS-ID, and it is possible to easily participate in the network.
[0064]
In the present embodiment, the case of the wireless conference system has been described as an example, but the same method can be applied to wireless communication in the case of not being a wireless conference system. It is also effective in a wireless station having no timer or display unit.
[0065]
In addition to the method of selecting the SS-ID having the highest received electric field strength as the newly set SS-ID, a method of randomly selecting the received SS-ID as the newly set SS-ID may be considered. Can be
[0066]
Note that, in the present embodiment, the authentication and association processing between the wireless station terminal STA1 and the wireless access point AP3 has been exemplified, but the same processing is performed between the other wireless station terminal STA and the wireless access point AP. .
[0067]
Another object of the present invention is to supply a storage medium storing program codes of software for realizing the functions of the embodiments to a system or an apparatus, and a computer (or CPU, MPU, or the like) of the system or the apparatus stores the storage medium. It is also achieved by reading and executing the program code stored in the.
[0068]
In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiment, and the storage medium storing the program code constitutes the present invention.
[0069]
Further, as a storage medium for supplying the program code, for example, a floppy (registered trademark) disk, hard disk, magneto-optical disk, CD-ROM, CD-R, CD-RW, DVD-ROM, DVD-RAM, DVD -RW, DVD + RW, magnetic tape, nonvolatile memory card, ROM, and the like can be used.
[0070]
When the computer executes the readout program code, not only the functions of the above-described embodiment are realized, but also an OS (Operating System) running on the computer based on the instruction of the program code. This also includes a case where some or all of the actual processing is performed and the functions of the above-described embodiments are realized by the processing.
[0071]
Further, after the program code read from the storage medium is written into a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer, the function expansion is performed based on the instruction of the program code. This also includes the case where the CPU or the like provided in the board or the function expansion unit performs part or all of the actual processing, and the processing realizes the functions of the above-described embodiments.
[0072]
While various examples and embodiments of the present invention have been shown and described, those skilled in the art will recognize that the spirit and scope of the present invention is not limited to the specific description and figures herein, but rather to the claims herein. Will be understood to cover the various modifications and changes all set forth in the scope.
[0073]
Examples of embodiments of the present invention are listed below.
[0074]
[Embodiment 1] A wireless communication terminal device that performs confidential communication with the desired wireless access point using the same encryption key as the encryption key held by the desired wireless access point among the plurality of wireless access points, Identification information setting means for setting identification information for authentication processing; and authentication request means for performing an authentication request to a wireless access point corresponding to the identification information set by the identification information setting means among the plurality of wireless access points And a notification signal receiving means for receiving a notification signal transmitted from the plurality of wireless access points and including identification information set for each wireless access point, wherein the identification information setting means includes the notification information The identification information in the notification signal received by the signal receiving means is set as identification information for the authentication processing. Line communication terminal equipment.
[0075]
[Embodiment 2] The broadcast signal receiving unit receives the broadcast signal when the authentication is not obtained from the wireless access point in response to the authentication request by the authentication request unit. The wireless communication terminal device according to claim 1.
[0076]
[Embodiment 3] When the notification signal is received from a plurality of wireless access points, the identification information setting means determines the identification information for the authentication processing based on a received electric field strength when the notification signal is received. 3. The wireless communication terminal device according to the first or second embodiment, wherein identification information used for setting is selected.
[0077]
[Embodiment 4] An identification information storage unit for storing identification information in the notification signal received by the notification signal receiving unit, wherein the identification information setting unit responds to the authentication request by the authentication requesting unit by the wireless When the authentication is not obtained from the access point, the identification information different from the identification information set as the identification information for the authentication processing before last time is newly added to the identification information stored in the identification information storage unit. The wireless communication terminal device according to any one of the first to third embodiments, wherein the wireless communication terminal device is reset as identification information for a proper authentication process.
[0078]
[Embodiment 5] The identification information setting means resets all of the identification information stored in the identification information storage means as identification information for the new authentication processing, and the authentication requesting means performs authentication. As a result of making the request, if no authentication is obtained from any of the wireless access points, the notification signal receiving means restarts receiving the notification signal after a lapse of a predetermined time. The wireless communication terminal device according to claim 1.
[0079]
[Sixth Embodiment] In the case where authentication is obtained from the wireless access point in response to the authentication request by the authentication request unit, identification information display means for displaying the identification information set by the identification information setting means at that time. The wireless communication terminal device according to any one of the first to fifth embodiments, comprising:
[0080]
[Seventh Embodiment] The wireless communication terminal device according to any one of the first to sixth embodiments, wherein the authentication by the wireless access point is performed in accordance with Shared Key Authentication specified by the wireless standard IEEE 802.11.
[0081]
[Eighth Embodiment] The wireless communication terminal device according to any one of the first to seventh embodiments, wherein the confidential communication is performed by WEP (Wired Equivalent Privacy) defined by the wireless standard IEEE 802.11.
[0082]
[Embodiment 9] Secret communication with the desired wireless access point is performed using a plurality of wireless access points and an encryption key that is the same as the encryption key held by the desired wireless access point among the plurality of wireless access points. In a wireless communication system connected to a wireless communication terminal device, the plurality of wireless access points, in response to an authentication request from the wireless communication terminal device, authentication means for performing authentication using the encryption key, A notification signal transmitting means for transmitting a notification signal including identification information set to each wireless access point, the wireless communication terminal device, identification information setting means for setting identification information for authentication processing, An authentication request is sent to a wireless access point corresponding to the identification information set by the identification information setting means, among the plurality of wireless access points. Authentication requesting means, and a notification signal receiving means for receiving the notification signal transmitted from the plurality of wireless access points, wherein the identification information setting means, in the notification signal received by the notification signal receiving means Wireless communication system, wherein the identification information is set as identification information for the authentication processing.
[0083]
[Embodiment 10] A communication method in a wireless communication terminal device that performs confidential communication with the desired wireless access point using the same encryption key as the encryption key held by the desired wireless access point among the plurality of wireless access points. An identification information setting step of setting identification information for authentication processing; and an authentication request to a wireless access point corresponding to the identification information set in the identification information setting step, among the plurality of wireless access points. An authentication requesting step, and a notification signal receiving step of receiving a notification signal including identification information set for each wireless access point, which is transmitted from the plurality of wireless access points, the identification information setting step includes: The identification information in the notification signal received in the notification signal receiving step for the authentication processing. A communication method characterized in that the communication method is set as identification information.
[0084]
[Embodiment 11] A communication program in a wireless communication terminal device that performs confidential communication with the desired wireless access point using the same encryption key as the encryption key held by the desired wireless access point among the plurality of wireless access points. An identification information setting step of setting identification information for authentication processing; and an authentication request to a wireless access point corresponding to the identification information set in the identification information setting step, among the plurality of wireless access points. An authentication requesting step, a program transmitted from the plurality of wireless access points, a notification signal receiving step of receiving a notification signal including identification information set to each wireless access point, a program for causing a computer to execute, The identification information setting step includes receiving the notification signal in the notification signal receiving step. A communication program for setting identification information in a received notification signal as identification information for the authentication processing.
[0085]
[Embodiment 12] A communication program in a wireless communication terminal device that performs confidential communication with the desired wireless access point using the same encryption key as the encryption key held by the desired wireless access point among the plurality of wireless access points. A stored computer-readable storage medium, the identification information setting step of setting identification information for an authentication process, and the plurality of wireless access points corresponding to the identification information set by the identification information setting step. An authentication requesting step of performing an authentication request for a wireless access point, and a notification signal receiving step of receiving a notification signal including identification information set for each wireless access point, transmitted from the plurality of wireless access points. Storing a program to be executed by a computer; A storage medium, wherein the step of setting the identification information in the notification signal received in the notification signal receiving step as the identification information for the authentication process.
[0086]
[Thirteenth Embodiment] A wireless communication terminal device that performs confidential communication with the desired wireless access point using the same encryption key as the encryption key held by the desired wireless access point among the plurality of wireless access points, Identification information setting means for setting identification information for authentication processing; and authentication request means for performing an authentication request to a wireless access point corresponding to the identification information set by the identification information setting means among the plurality of wireless access points And a notification signal receiving means for receiving a notification signal including identification information set for each wireless access point, transmitted from the plurality of wireless access points, and when the authentication process fails, the A wireless communication terminal device that performs authentication processing by changing a setting to identification information received by a notification signal receiving unit.
[0087]
[Embodiment 14] A wireless communication terminal device performing confidential communication with the wireless access point using the same encryption key as the encryption key held by the wireless access point, wherein identification information for setting identification information for authentication processing is provided. Setting means, authentication request means for requesting authentication to a wireless access point corresponding to the identification information set by the identification information setting means, and a notification signal including identification information set to another wireless access point. A notification signal receiving means for receiving, and when the authentication processing with the wireless access point fails, the authentication processing is performed by changing the setting to the identification information received by the notification signal receiving means. Wireless communication terminal device.
[0088]
[Embodiment 15] A communication method in a wireless communication terminal device that performs confidential communication with the desired wireless access point using the same encryption key as the encryption key held by the desired wireless access point among the plurality of wireless access points. An identification information setting step of setting identification information for authentication processing; and an authentication request to a wireless access point corresponding to the identification information set in the identification information setting step, among the plurality of wireless access points. An authentication requesting step, a notification signal receiving step of receiving a notification signal including identification information set for each wireless access point, transmitted from the plurality of wireless access points, and when the authentication processing has failed, An authentication processing step of changing the setting to the identification information received by the notification signal receiving means and performing an authentication processing; A communication method in a wireless communication terminal device, comprising:
[0089]
[Embodiment 16] A communication program in a wireless communication terminal device that performs confidential communication with the desired wireless access point using the same encryption key as the encryption key held by the desired wireless access point among the plurality of wireless access points. An identification information setting step of setting identification information for authentication processing; and an authentication request to a wireless access point corresponding to the identification information set in the identification information setting step, among the plurality of wireless access points. An authentication requesting step, a notification signal receiving step of receiving a notification signal including identification information set for each wireless access point, transmitted from the plurality of wireless access points, and when the authentication processing has failed, An authentication processing step of changing the setting to the identification information received by the notification signal receiving means and performing authentication processing. A communication program causing a computer to execute the steps.
[0090]
[Embodiment 17] A communication program in a wireless communication terminal device that performs confidential communication with the desired wireless access point using the same encryption key as that held by the desired wireless access point among the plurality of wireless access points. A stored computer-readable storage medium, the identification information setting step of setting identification information for an authentication process, and the plurality of wireless access points corresponding to the identification information set by the identification information setting step. An authentication requesting step of requesting authentication to the wireless access point, and a notification signal receiving step of receiving a notification signal including identification information set for each wireless access point, transmitted from the plurality of wireless access points, If the authentication process fails, the identification information received by the A storage medium storing a program for causing a computer to execute an authentication processing step of performing an authentication processing by changing a setting of the information.
[0091]
【The invention's effect】
As described above, according to the present invention, even if the identification information of the wireless access point with which communication is desired is changed, it is possible to easily participate in the network by obtaining authentication using the identification information obtained from the broadcast signal. Can be.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of a wireless communication terminal device according to one embodiment of the present invention.
FIG. 2 is a configuration diagram of a wireless LAN system constructed by a wireless station terminal STA and a wireless access point AP.
FIG. 3 is a diagram illustrating a sequence of “Shared Key authentication” using WEP for authentication processing, and an association sequence performed following the authentication sequence.
FIG. 4 is a diagram showing a sequence of an authentication / association process.
FIG. 5 is a diagram illustrating a flowchart of an authentication / association process.
FIG. 6 is a diagram showing a configuration of an encryption device in a WEP algorithm.
FIG. 7 is a diagram illustrating a configuration of a decoding device in the WEP algorithm.
FIG. 8 is a diagram illustrating an example of a database.
[Explanation of symbols]
102 wireless transmitting / receiving section (report signal receiving means)
103 storage unit (identification information storage means)
105 Timing section
106 control unit (identification information setting means, authentication request means)
107 display unit (identification information display means)
SS-ID (identification information)
WEP key (encryption key)
STA wireless station terminal (wireless communication terminal device)
AP wireless access point

Claims (1)

A wireless communication terminal device that performs confidential communication with the desired wireless access point using the same encryption key as the encryption key held by the desired wireless access point among the plurality of wireless access points,
Identification information setting means for setting identification information for authentication processing;
Among the plurality of wireless access points, authentication requesting means for performing an authentication request for a wireless access point corresponding to the identification information set by the identification information setting means,
Broadcast signal receiving means for receiving a broadcast signal including identification information set for each wireless access point, transmitted from the plurality of wireless access points,
If the authentication processing has failed, the wireless communication terminal apparatus changes the setting to the identification information received by the notification signal receiving means and performs the authentication processing.

Images