JP2008227660A - Wireless communication setting device, wireless communication setting method, and program - Google Patents

Abstract

[PROBLEMS] To improve security without an input error of authentication key such as terminal identification information.
A wireless LAN setting method is provided.
A wireless communication setting device performs setting for wireless connection to a management server for managing a wireless LAN. The terminal identification information generation unit 401 generates identification information unique to the wireless communication setting device 100. The high-strength authentication key generation unit 402 generates a high-strength authentication key converted from the identification information into graphic pattern data that can be read by the management server. The print engine 14 outputs a printed matter on which the identification information and the high-strength authentication key are printed. The management server reads the identification information printed on the printed matter and the high-strength authentication key and registers them. The authentication processing unit 404 causes the management server to perform authentication processing using the identification information or the high-strength authentication key. When the authentication is established, the setting processing unit 403 performs setting for enabling wireless communication with the management server.
[Selection] Figure 1

Description

  The present invention relates to a technique for setting a wireless LAN.

Various standards for realizing wireless data communication between terminals such as printers, digital cameras, mobile phones, and personal computers are known. For example, wireless LAN such as IEEE 802.11
There are standard standards. Also, standards for strengthening the security functions of these standards are known. For example, there is a standard using IEEE802.1x.

When using the wireless LAN security function, it is necessary to set setting information such as information on the network (network type, SSID, etc.) and information on encryption (WEP, WPA, password, etc.) in each terminal. The setting operation is complicated. For this, an industry group has proposed an easy setting standard that simplifies the setting of the security function of the wireless LAN. For example, the setting method using this standard includes WPS (Wi-Fi Pro).
There is a technique called “tagged Setup”. As one method of WPS, terminal identification information for identifying a terminal (for example, PIN (Personal Identifier)
n Number) code). This is done by registering terminal identification information generated by a terminal newly connected to the wireless LAN (hereinafter referred to as “Enrollee”) with a terminal (hereinafter referred to as “Registrar”) that manages the wireless LAN.
Setting information for enabling communication in accordance with the above-described standard is automatically transmitted and set, and a connection using a security function is established. For example, Non-Patent Document 1 describes a technique for setting wireless LAN communication by a method using the above PIN code.

Scott Manchester, Drow To Use Windows Connect Now To Enable Simple Setup For Consumer Wi-Fi NetworksFiA [online], [Search January 25, 2007], Internet <URL: http://download.microsoft.com /download/5/b/9/5b97017b-e28a-4bae-ba48-174cf47d23cd/CON044_WH06.ppt>

When setting the wireless LAN by the above-described method using terminal identification information, the user must manually input the terminal identification information in order to register the terminal identification information in the Registrar. The terminal identification information is defined as an 8-digit number string by the standard, and input mistakes of the terminal identification information can occur sufficiently. Further, in the authentication using the above-described method using the terminal identification information, the terminal identification information is data that can be understood by humans, and thus there is a problem that security is low.

SUMMARY OF THE INVENTION An object of the present invention is to provide a wireless LAN setting method that improves security without causing an error in inputting an authentication key such as terminal identification information when setting a wireless LAN in accordance with the WPS standard. And

(Claim 1 is stated)
In order to solve the above-described problem, in the present invention, a wireless communication setting device that performs settings for wireless connection to a management server for managing a wireless LAN includes communication that performs wireless communication for the settings with the management server. A storage unit that stores data, and a control unit that controls the setting, the control unit generating identification information unique to the wireless communication setting device, and managing the identification information A process for generating a high-strength authentication key converted into graphic pattern data readable by a server; a process for outputting a printed matter on which the identification information and the high-strength authentication key are printed; and the identification information and the high-strength authentication key. And the identification information stored in the storage unit in the management server that stores the identification information printed on a printed matter or the high-strength authentication key. A process to perform an authentication process by sending via the serial communication unit,
It is characterized by performing.

According to the wireless communication setting device of the present invention, when setting a wireless LAN according to the WPS standard, an input error of an authentication key such as terminal identification information does not occur, and security can be improved.

  The best mode for carrying out the present invention will be described below with reference to the drawings.

The wireless communication setting apparatus 100 applied to the embodiment of the present invention is, for example, an information processing apparatus having a printing function such as a printer or a multifunction peripheral.

An example of the functional configuration of the wireless communication setting device 100 applied to the embodiment of the present invention is shown in the block diagram of FIG. As illustrated, the wireless communication setting device 100 includes a control unit 10 and a storage unit 1.
1, the first interface unit 12, the second interface unit 13, and the print engine 1
4 and.

The wireless communication setting device 100 is used in a wireless communication setting system 50 as shown in FIG. As illustrated, the wireless communication setting system 50 includes a wireless communication setting device 100, a management device 200, and an access point 300. The wireless communication setting system 50 performs settings for constructing a wireless LAN that enables wireless data communication between devices. Wireless L
An AN has an “ad hoc mode” in which each device directly communicates and an “infrastructure mode” in which communication is performed via an access point. In the present embodiment, the case of the “infrastructure mode” will be described. . However, the wireless LAN of the present invention may be in “ad hoc mode”.

Here, the management device 200 manages the wireless LAN in the wireless communication system 50.
It is a device that plays a role as an egistrar. Access point 3 on management device 200
When registering 00, the management device 200 and the access point 300 are connected to each other via the wire 150. After registration of the access point 300 to the management apparatus 200 is completed, the management apparatus 20
0 and the access point 300 can communicate with each other by the radio 160.

The access point 300 is a general access point (AP), and the management device 20
0 is a radio wave relay that connects 0 and the wireless communication setting device 100.

The wireless communication setting device 100 is a device that plays a role as an Enrollee that is newly connected to a wireless LAN constructed between the management device 200 and the access point 300 in the wireless communication system 50. The wireless communication setting device 100 communicates with the management device 100 through the access point 300 by the wireless 170 at the time of connection setting and after the connection setting is completed.

The setting for registering the access point 300 in the management apparatus 200 is performed by the wired 150,
The setting for registering the wireless communication setting device 100 in the management device 200 is performed by the wireless 170, but both settings are performed according to the same protocol. Therefore, in the following, the management apparatus 200
Only the case of registering the wireless communication setting apparatus 100 will be described.

The setting method here uses the WPS described above. When the wireless communication setting device 100 is newly registered in the management device 200, the wireless communication setting device 100 can identify terminal identification information (for example, information called a PIN code) for identifying the wireless communication setting device 100, or wireless communication. A high-strength authentication key (for example, a bar code, a two-dimensional code (QR code, etc.)) including terminal specifying information for specifying the setting device 100 is generated. By registering the generated terminal identification information or the high-strength authentication key in the management apparatus 200, wireless communication in accordance with a predetermined standard is automatically performed between the wireless communication setting apparatus 100 and the management apparatus 200. Transmission / reception and setting of setting information for enabling is performed, and a connection is established.

When the wireless communication setting device 100 is registered in the management device 200, the user causes the wireless communication setting device 100 to output an image including both terminal identification information and a high-strength authentication key as a printed matter, and manage this. The image is read by an image reading device provided in the device 200. The management device 300 analyzes the read image and extracts terminal identification information included in the terminal identification code and the high-strength authentication key. At this time, if the management apparatus 200 is not provided with an image reading device, the terminal identification code is used for authentication, and if the image reading device is provided,
A high-strength authentication key is used for authentication. The image reading apparatus here is a bar code reader for reading a bar code or an OCR (Optical C) for reading a two-dimensional code.
A general device such as a character reader) may be used. Further, when the wireless communication setting device 100 is registered using the terminal identification information, the user can manually input the terminal identification information into the management device 300.

Returning to FIG. 1, the first interface unit 12 of the wireless communication setting device 100 is an interface for transmitting and receiving wireless communication data to and from the management device 200 via the access point 300. Here, the wireless communication data is WPS, IP (Internet Protocol).
col), etc. The first interface unit 12 has a function of acquiring a MAC address uniquely assigned to each network card such as a NIC. Further, the first interface unit 12 is an interface capable of transmitting / receiving communication data to / from an external information processing apparatus (for example, a personal computer, a digital camera, a mobile phone, etc.) regardless of wired or wireless. Also good.

The second interface unit 13 is an interface for receiving data from an input device such as a keyboard and outputting data to an output device such as a display.

The storage unit 11 includes a terminal identification information storage table 409 and a high-strength authentication key storage table 41.
0 is stored.

The terminal identification information storage table 409 stores terminal identification information (for example, information called a PIN code) for the management apparatus 200 to identify the wireless communication setting apparatus 100. By registering the terminal identification information stored in the terminal identification information storage table 409 in the management apparatus 200, the wireless communication setting apparatus 100 can wirelessly communicate with the management apparatus 200.

Here, the terminal identification information consists of a numeric string having a predetermined number of digits. For example, when the terminal identification information is a PIN code, it consists of an 8-digit number string. The terminal identification information is a numeric string randomly generated by the wireless communication setting device 100 based on the date and time, the MAC address, and the like.

For example, in the present embodiment, the terminal identification information storage table 409 includes a terminal identification information column 501 and an expiration date column 502, as shown in FIG.

Terminal identification information is stored in the terminal identification information column 501. For example, an 8-digit number string such as a PIN code is stored.

The expiration date field 502 stores information indicating the date and time after a predetermined period after the wireless communication setting device 100 generates the terminal identification information.

The terminal identification information and the expiration date are entered into the terminal identification information storage table 409 in association with one line when the wireless communication setting apparatus 100 generates the terminal identification information. The wireless communication setting device 100 indicates that the date and time stored in the expiration date field 502 is the wireless communication setting device 100.
If it is past the internal clock of the terminal, the terminal identification information entered in association with this date and time is not used. For example, when the terminal identification information cannot be used, the wireless communication setting device 10
If the terminal identification information is generated again and entered in the terminal identification information storage table 409, 0 increases the security.

Further, although the terminal identification information storage table 409 is described as storing a plurality of terminal identification information, the present invention is not limited to this, and the terminal identification information newly generated by the wireless communication setting device 100 May be overwritten on the terminal identification information already stored in the terminal identification information storage table 409.

The high-strength authentication key storage table 410 stores a high-strength authentication key for specifying the wireless communication setting device 100. Similar to the terminal identification information, the high-strength authentication key storage table 410
The terminal specifying information included in the high-strength authentication key stored in is registered in the management device 200, so that the wireless communication setting device 100 can wirelessly communicate with the management device 200.

Here, as described above, the high-strength authentication key includes terminal specifying information for specifying the wireless communication setting device 100. For example, the terminal identification information is the same information as the terminal identification information stored in the terminal identification information storage table 409.

The high-strength authentication key stored in the high-strength authentication key storage table 410 is composed of graphic patterns that cannot be understood by humans, such as barcodes and two-dimensional codes. Therefore, the high-strength authentication key may be referred to as a graphic pattern authentication code.

For example, in the present embodiment, the high-strength authentication key storage table 410 includes a high-strength authentication key column 601 and an expiration date column 602, as shown in FIG.

The high-strength authentication key column 601 stores a high-strength authentication key. For example, data consisting of a graphic pattern such as a QR code is stored.

The expiration date field 602 stores information indicating the date and time after a predetermined period after the wireless communication setting device 100 generates the high-strength authentication key.

The terminal identification information and the expiration date are entered in the high-strength authentication key storage table 410 in association with one row when the wireless communication setting apparatus 100 generates a high-strength authentication key. In the wireless communication setting device 100, the date and time stored in the expiration date column 602 indicates that the wireless communication setting device 1
If it is past the internal clock of 00, the high-strength authentication key entered in association with this date and time is not used. For example, if the high-strength authentication key cannot be used, the wireless communication setting apparatus 100 can generate a high-strength authentication key again and enter the high-strength authentication key storage table 410 to increase security.

Further, the high strength authentication key storage table 410 is described as storing a plurality of high strength authentication keys, but the present invention is not limited to this, and the high strength authentication key storage table 410 is newly generated by the wireless communication setting device 100. The strength authentication key may be overwritten on the high strength authentication key already stored in the high strength authentication key storage table 410.

Returning to FIG. 1, the control unit 10 includes an input reception unit 400, a terminal identification information generation unit 401, a high-strength authentication key generation unit 402, a setting processing unit 403, an authentication processing unit 404, and an error detection unit 4.
05, a message screen generation unit 406, an image processing unit 407, and a display control unit 408.

The input reception unit 400 performs a process of receiving various instruction signals such as an instruction signal for setting a wireless LAN, an instruction signal for printing terminal identification information and a high-strength authentication key, and the like via the second interface unit 13. .

For example, when receiving an instruction signal for setting a wireless LAN via the second interface unit 13, the input receiving unit 400 notifies the setting processing unit 403 of instruction information for starting a wireless LAN setting process. In addition, when receiving an instruction signal for printing the terminal identification information and the high-strength authentication key, the input receiving unit 400 sends the instruction information for executing the printing process of the terminal identification information and the high-strength authentication key to the setting processing unit 403. Notice.

The terminal identification information generation unit 401 performs processing for generating terminal identification information. For example, when the instruction information for generating the terminal identification information is notified from the setting processing unit 403, the terminal identification information generation unit 401 acquires time information at that time from the internal clock of the wireless communication setting device 100. Further, the wireless communication setting device 100 receives the first interface unit 12 from
Get the MAC address of the network card. At this time, the terminal identification information generation unit 401
Generates a random 8-digit number string based on the acquired time information and MAC address. Any method may be used as the method for generating the numeric string here.

The terminal identification information generation unit 401 accesses the storage unit 11 to generate the generated terminal identification information.
Stored in the terminal identification information column 501 of the terminal identification information storage table 409. At this time, the terminal identification information generation unit 401 stores time information obtained by adding a predetermined time (for example, one hour) to the acquired time information in the expiration date column 502 in association with the generated terminal identification information.

When the terminal identification information is normally stored in the terminal identification information storage table 409, the terminal identification information generation unit 401 indicates that the terminal identification information generation process has been completed.
2 is notified.

The high-strength authentication key generation unit 402 performs processing for generating a high-strength authentication key. For example, the high-strength authentication key generation unit 402 starts a process of generating a high-strength authentication key when notified from the terminal identification information generation unit 401 that information indicating that the terminal identification information generation process has been completed. Specifically, first, the high-strength authentication key generation unit 402 accesses the terminal identification information storage table 409 in the storage unit 11 and acquires the terminal identification information in the terminal identification information column 501. Then, the high strength authentication key generation unit 402 generates a high strength authentication key based on the acquired terminal identification information. At this time, the generation method of the high-strength authentication key may be any method, for example, QR
When generating the code, the QR code may be generated based on the terminal identification information by a general method.

The high strength authentication key generation unit 402 accesses the storage unit 11 and stores the generated high strength authentication key in the high strength authentication key column 601 of the high strength authentication key storage table 410. At this time, the high-strength authentication key generation unit 402 associates the generated high-strength authentication key with the expiration date field 6.
In 02, time information obtained by adding a predetermined time (for example, one hour) to the acquired time information is stored.

When the high-strength authentication key is normally stored in the high-strength authentication key storage table 410, the high-strength authentication key generation unit 402 indicates that the high-strength authentication key generation processing has been completed.
Notify

The setting processing unit 403 performs processing for controlling the entire wireless LAN setting processing. For example, the setting processing unit 403 starts the wireless LAN setting process when instruction information for instructing the start of the setting process is notified from the input receiving unit 400. When the setting processing unit 403 starts the setting process,
The setting process is executed in a predetermined order according to a program (not shown) stored in advance in the storage unit 11 or the like. When executing the setting process, the setting processing unit 403 appropriately includes a terminal identification information generation unit 401, a high-strength authentication key generation unit 402, an authentication processing unit 404, an error detection unit 405,
The instruction information is notified to each of the message screen generation unit 406, the image processing unit 407, and the display control unit 408, and the processing result in each unit is acquired. The setting processing unit 403 executes predetermined various processes based on the result acquired here.

For example, when the setting process is started, the setting processing unit 403 causes the terminal identification information generating unit 401 and the high strength authentication key generating unit 402 to generate terminal identification information and a high strength authentication key. In response to the notification from the input receiving unit 400, the terminal identification information and the high-strength authentication key are printed on the print engine 14 via the image processing unit 407. Furthermore, the setting processing unit 403 causes the authentication processing unit 404 to perform authentication processing on the terminal identification information or the high-strength authentication key input to the management device 200 with the management device 200. In addition, when the error detection unit 405 is notified of an error indicating that the authentication process could not be performed, the setting processing unit 403 determines the cause of the error and displays a different message according to the error cause in the message screen. Generation unit 4
06 is generated. At this time, the setting processing unit 403 causes the display control unit 408 to output the generated message to an output device such as a display.

The authentication processing unit 404 performs authentication processing on the access point 300, the wireless communication setting device 100, and terminal identification information or a high-strength authentication key input to the management device 200 according to a general authentication protocol. When the authentication process is normally completed, the authentication processing unit 404 sets the setting information (network type, SSID, WEP, WPA, password, etc.) received from the management apparatus 200 via the first interface unit 12. The data is passed to the processing unit 403. On the other hand, when the authentication process cannot be performed, an error notification is received from the error detection unit 405. In this case, the authentication processing unit 404 stops the authentication processing and notifies the setting processing unit 403 of this.

Specifically, upon receiving a notification from the setting processing unit 403, the authentication processing unit 404 starts preprocessing for authentication processing. After starting the preprocessing of the authentication process, the authentication processing unit 404 first notifies the error detection unit 405 that the preprocessing of the authentication process has started.

After that, the authentication processing unit 404 uses a device (access point 3) compatible with the WPS standard.
00) exists. For example, the authentication processing unit 404 uses the access point 3
The beacon signal periodically output from 00 is received via the first interface unit 12, and flag information indicating whether the beacon signal is compatible with the WPS standard is included in the error. It passes to the detection part 405.

In addition, the authentication processing unit 404 transmits the terminal identification information stored in the terminal identification information storage table 409 of the storage unit 11 to the management device 200 via the first interface unit 12, whereby the management device 200. To authenticate the authentication key.

Further, the authentication processing unit 404 starts a pre-process of the authentication process for a predetermined time (for example, 3
Minutes), a time-out process is performed in response to a notification from the error detection unit 405.

When the authentication processing unit 404 completes the authentication process without receiving an error notification from the error detection unit 405, the authentication processing unit 404 passes the setting information received during authentication to the setting processing unit 403. At the same time, the authentication processing unit 404 notifies the error detection unit 405 that the authentication processing has ended.

The error detection unit 405 performs processing for detecting that the authentication processing could not be performed as an error. Further, when an error is detected, the error detection unit 405 notifies the authentication processing unit 404 and stops the authentication processing. Furthermore, the error detection unit 405 notifies the setting processing unit 403 of the cause of the error when the authentication process cannot be performed.

Specifically, the error detection unit 405 receives a notification indicating that the authentication processing pre-processing has been started from the authentication processing unit 404, and starts time measurement processing. The error detection unit 405 has a predetermined time (e.g., before the authentication processing unit 404 is notified of the end of the authentication process) before the authentication process ends.
When 3 minutes have elapsed, this is notified to the authentication processing unit 404. Further, when the error detection unit 405 receives flag information indicating whether it is compatible with the WPS standard from the authentication processing unit 404, the error detection unit 405 determines whether or not the flag information is off and receives the flag information within a predetermined time. When all the flag information is off, an error is notified to the authentication processing unit 404. Further, the error detection unit 4
05 receives the above-described input error information from the authentication processing unit 404, the authentication processing unit 40
4 is notified of the error.

When the error detection unit 405 notifies the authentication processing unit 404 of an error, the error detection unit 405 causes the error (1
. 1. There is no access point corresponding to the WPS standard. Information indicating any one of timeout) is notified to the setting processing unit 403. The information indicating the cause of this error may be a numeric string such as “0” or “1”, for example.

The message screen generation unit 406 includes information to notify the user during the wireless LAN setting process,
A process of generating an image including a selection button for receiving an instruction from the user is performed.
Then, the message screen generation unit 406 supplies the generated image to the display control unit 408.

For example, the message screen generation unit 406 receives the notification from the setting processing unit 403 and receives the notification shown in FIG.
Screens as shown in (A) to (E) are displayed on the output device (display,
Etc.) is generated. The message screen generation unit 406 supplies the generated image to the display control unit 408 and displays it on the output device.

The screen shown in FIG. 5A is a screen for notifying the user that the wireless LAN setting process has started. Along with this, this screen includes a Yes button 801 and a No button 802 for accepting an instruction to generate terminal identification information and a high-strength authentication key to the user.

The screen shown in FIG. 5B is a screen for notifying the user of terminal identification information. Along with this, this screen includes a Yes button 803 and a No button 804 for receiving an instruction as to whether or not to print the terminal identification information and the high-strength authentication key to the user.

The screen shown in FIG. 5C is a screen for notifying the user of an access point corresponding to the WPS standard in the pre-processing of the authentication process. At the same time, this screen includes an end button 805 and a retry button 806 for accepting an instruction to end or retry the setting of the wireless LAN.

The screen shown in FIG. 5D is a screen for notifying the user of this when the authentication process cannot be normally terminated due to a timeout. At the same time, this screen
It includes an end button 808 and a retry button 808 for accepting an instruction to end AN setting or retry.

The screen shown in FIG. 5E is a screen for notifying the user that the wireless LAN setting process has been successful. At the same time, this screen includes an end button 809 for ending the setting of the wireless LAN.

Returning to FIG. 1, the image processing unit 407 performs processing for generating print data for printing the terminal identification information and the high-strength authentication key.

For example, when the image processing unit 407 receives a print instruction from the second interface unit 13, the image processing unit 407 first accesses the storage unit 11 and acquires the terminal identification information stored in the terminal identification information storage table 409. . Further, the high strength authentication key stored in the high strength authentication key storage table 410 is acquired. Subsequently, the acquired terminal identification information and high-strength authentication key data are converted into print data, print command data and the like are added to the print data, and the print data is transmitted to the print engine 14.

The display control unit 408 performs control to display the image (screen) generated by the message screen generation unit 406 on an output device such as a display.

For example, when an image (screen) is supplied from the message screen generation unit 406, the display control unit 408 converts the image into data that can be displayed on the output device, and outputs the data to the output device.

The print engine 14 has a function of controlling a toner cartridge, a photosensitive drum, a laser light irradiation mechanism, a paper feed mechanism, a paper supply / discharge mechanism for performing a paper supply / discharge process of the print medium, and the like. The print engine 14 interprets the print command included in the print data transmitted from the image processing unit 407, and prints the print data according to the interpretation.

The wireless communication setting device 100 configured as described above is configured as shown in FIG.
U701, main storage 702, external storage 703 such as HDD, CD-ROM or D
Reading device 70 for reading information from portable storage medium 707 having portability such as VD-ROM
5, a printing mechanism for the print engine 14 to output a printed matter, an input / output device 706 such as a display, a keyboard and a mouse, and a NIC (Network
And a communication device 204 such as an interface card. However, if the main storage device 702 is provided, the external storage device 703 and the reading device 705 are not necessarily provided.

For example, the storage unit 11 can be realized by the external storage device 703, and the control unit 10 loads a predetermined program stored in the external storage device 703 into the main storage device 702 and executes C
The first interface unit 12 can be realized by the communication device 704, and the second interface unit 13 can be realized by the input / output device 706.

This predetermined program is downloaded from the portable storage medium 707 via the reading device 705 or from the network via the communication device 704 to the external storage device 703.
Then, it may be loaded onto the main storage device 702 and executed by the CPU 701. Further, from the portable storage medium 707 via the reading device 705 or the communication device 7.
The program may be directly loaded onto the main storage device 702 from the network via the network 04 and executed by the CPU 701.

The access point 300 also has a hardware configuration as shown in FIG. However, as with the wireless communication setting device 100, the access point 300 is also an external storage device 703,
The reading device 705 is not necessarily provided with.

Further, for example, as shown in FIG. 7, the management device 200 includes an image reading device 708 in addition to the devices shown in FIG. 6. The image reading device 708 is a scanner, a barcode reader, or the like for reading the terminal identification information and the high-strength authentication key output as printed matter by the wireless communication setting device 100.

With the above-described configuration, the wireless communication setting system 50 can easily register the wireless communication setting device when the user sets the wireless LAN.

FIG. 8 is a flowchart for explaining a wireless LAN setting process performed by the wireless communication setting device 100.

When the setting processing unit 403 of the wireless communication setting apparatus 100 receives the instruction information for setting the wireless LAN, the setting process is started. Specifically, the setting processing unit 403 waits until receiving a notification from the input receiving unit 400 when an instruction signal for setting the wireless LAN is received via the second interface unit 13 (step S40). S101; No). Setting processing unit 403
When the instruction signal for setting the wireless LAN is received from the input receiving unit 400 (step S101; Yes), the wireless LAN setting process is started. Upon receiving the instruction information, the setting processing unit 403 reads a predetermined program stored in the storage unit 11 and starts a wireless LAN setting process.

The setting processing unit 403 that has started the setting process causes an output device such as a display to display a screen for notifying the user that the setting process of the wireless LAN has been started. For example, the setting processing unit 403 first causes the message screen generation unit 406 to generate an image as shown in FIG. 5A for notifying the user that the setting processing has started. Message screen generator 406
Supplies the generated image to the display control unit 408 for display on the output device.

The image displayed here includes a button for accepting an instruction as to whether to generate an authentication key. Here, when the user wants to generate an authentication key, the user can input data instructing selection of the Yes button 801 into the second interface unit 12 by operating a mouse or the like. If the user does not want to generate an authentication key, the user can enter the second interface unit 12
Data instructing selection of the No button 802 can be input.

At this time, the setting processing unit 403 receives information instructing selection of the Yes button 801 or the No button 802, and determines whether to generate an authentication key. If it is determined that the terminal identification information is to be generated, an instruction signal for generating terminal identification information is supplied to the terminal identification information generation unit 401. On the other hand, if it is determined not to be generated, the setting processing unit 403 ends the setting process. Note that the process of displaying FIG. 5A is not necessarily provided in the setting process, and may be shifted to a process of generating an authentication key immediately after starting the setting process.

When receiving an instruction signal for generating terminal identification information, terminal identification information generation section 401 generates terminal identification information (step S102). Specifically, the terminal identification information generation unit 4
01 generates a random 8-digit number string based on the time information and the MAC address. Subsequently, the terminal identification information generation unit 401 stores the generated terminal identification information in the terminal identification information column 501 of the terminal identification information storage table 409. After the storage, the terminal identification information generation unit 401 notifies the high-strength authentication key generation unit 402 that the terminal identification information generation process has been completed.

Upon receiving this notification, the high-strength authentication key generation unit 402 generates a high-strength authentication key. Specifically, when receiving the notification, the high-strength authentication key generation unit 402 receives the terminal identification information storage table 4.
The terminal identification information stored in the terminal identification information column 501 of 09 is acquired. The high-strength authentication key generation unit 402 generates a high-strength authentication key based on the acquired terminal identification information. For example, the high-strength authentication key generation unit 402 creates a code word by converting the acquired terminal identification into a bit character string according to a rule, and further performs error correction coding, block division, block arrangement, mask processing, etc. To generate a QR code. Subsequently, the high-strength authentication key generation unit 402
Stores the generated high strength authentication key in the high strength authentication key column 601 of the high strength authentication key storage table 409. After the storage, the high strength authentication key generation unit 402 notifies the setting processing unit 403 that the high strength authentication key generation processing has been completed.

Subsequently, the setting processing unit 403 displays the terminal identification information generated in step S102 on an output device such as a display (step S103). Specifically, the setting processing unit 403 first causes the message screen generation unit 406 to generate an image for notifying the user of terminal identification information. At this time, the message screen generation unit 406 displays the terminal identification information storage table 40.
The terminal identification information generated from 9 is acquired, and an image as shown in FIG. 5B including the terminal identification information is generated. The message screen generation unit 406 displays the generated image on the display control unit 408.
To be displayed on the output device. Thereby, the user can confirm the unique terminal identification information generated by the wireless communication setting device 100.

The image displayed in step S103 includes a button for receiving an instruction as to whether or not to print the terminal identification information being displayed. Here, when the user wants to print the terminal identification information, the user operates the mouse or the like to display the Yes button 8 on the second interface unit 12.
Data instructing selection of 03 can be input. If it is not necessary to print, the user
The data for instructing the selection of the No button 804 can be input to the interface unit 12.

At this time, the setting processing unit 403 receives information instructing selection of the Yes button 803 or the No button 804, and determines whether or not to print the terminal identification information (step S104).
. For example, here, the input receiving unit 400 sends a Yes button 8 to the second interface unit 12.
When an instruction to select 03 is input, “1” is supplied to the setting processing unit 402, and when an instruction to select the No button 804 is input, “0” is supplied. At this time, the setting processing unit 402 determines that the terminal identification information is to be printed when “1” is supplied, and determines that the terminal identification information is not printed when “0” is supplied.

If the setting processing unit 403 determines in step S104 to print the terminal identification information (
In step S104, Yes), the terminal identification information and the high-strength authentication key are printed on the print engine 14 (step S105). For example, the setting processing unit 403 supplies an instruction signal for printing the terminal identification information and the high-strength authentication key to the image processing unit 407. At this time, the image processing unit 407
Accesses the storage unit 11 and acquires the terminal identification information stored in the terminal identification information storage table 409 and the high-strength authentication key stored in the high-strength authentication key storage table 410. Further, the image processing unit 407 can print the terminal identification information and the high-strength authentication key by converting the acquired terminal identification information and the high-strength authentication key into print data and supplying the print data to the print engine 14. .

After supplying the instruction signal to be printed to the image processing unit 407, the setting processing unit 403 shifts the processing to step S106.

On the other hand, if it is determined in step S104 that the terminal identification information and the high-strength authentication key are not printed (step S104; No), the setting processing unit 403 waits until a print request is received. Here, the setting process may be terminated.

In step S106, the setting processing unit 403 causes the authentication processing unit 404 to perform authentication processing according to the authentication protocol (step S106). For example, as described above, the authentication processing unit 404 cooperates with the error detection unit 405 to acquire setting information necessary for setting the wireless LAN from the management apparatus 200 if no error is notified from the error detection unit 405. . Further, when the error detection unit 405 detects an error, the error detection unit 405 notifies the setting processing unit 403 of information specifying the cause of the error.

Subsequently, the authentication processing unit 404 determines whether or not the authentication process is successful (step S10).
7). Specifically, the authentication processing unit 404 determines that the authentication process has been successful when all the setting information necessary for setting the wireless LAN has been acquired. On the other hand, the authentication processing unit 404 determines that the authentication process has not succeeded when an error is notified from the error detection unit 405 during the authentication process.

If it is determined in step S107 that the authentication processing unit 404 has succeeded in the authentication processing (step S107; Yes), the setting processing unit 403 shifts the processing to step S108 and causes the display control unit 408 to display FIG. A message for notifying the user that the setting as shown in FIG. At this time, the setting processing unit 403 receives an end button 80 from the user.
The information instructing the selection of 9 is received, and the wireless LAN setting process is terminated. Specifically, the authentication processing unit 404 passes the acquired setting information to the setting processing unit 403. Setting processing unit 403
In order to enable wireless communication with the management apparatus 200 via the access point 300,
Register the passed setting information. Then, the setting processing unit 403 ends the setting of the wireless LAN.

On the other hand, if it is determined in step S107 that the authentication processing unit 404 has not succeeded in the authentication processing (step S107; No), the setting processing unit 403 shifts the processing to step S109 and causes the display control unit 408 to generate an error. Display a message according to the cause.

Specifically, when the error detection unit 405 detects an error in step S106, the error detection unit 405 identifies the cause of the error (1. No access point corresponding to the WPS standard, 2. Timeout). Information is notified to the setting processing unit 403. Therefore, the setting processing unit 403 identifies the cause of the error by referring to the information identifying the cause of the error notified in step S106. If it is determined that the cause of the error is that there is no access point corresponding to the WPS standard, the message screen generation unit 406 is notified to the user that there is no access point corresponding to the WPS standard. To generate an image. At this time, the message screen generation unit 406 generates an image as shown in FIG. If the setting processing unit 403 identifies that the cause of the error is due to a timeout, the setting processing unit 403 notifies the message screen generation unit 406 that the authentication processing could not be terminated normally due to the timeout. Is generated. At this time, the message screen generation unit 406 generates an image as shown in FIG. Then, the message screen generation unit 406 supplies the generated image to the display control unit 408 and causes the output device to display the generated image.

The images shown in FIGS. 5C and 5D displayed in step S109 include a button for regenerating the terminal identification information and receiving an instruction as to whether or not to retry the authentication process. Yes. Here, when the user wants to retry the authentication process, the user can input data instructing selection of the retry buttons 806 and 808 to the second interface unit 12 by operating a mouse or the like. If the user does not want to retry the authentication process, the user can input data instructing selection of the end buttons 807 and 809 to the second interface unit 12.

At this time, when the setting processing unit 403 receives data instructing selection of the retry buttons 806 and 808, the setting processing unit 403 may shift the processing to step S102. The setting processing unit 40
3, when data instructing selection of the end buttons 807 and 809 is received,
The setting process of N is terminated.

Next, a wireless LAN setting process when the wireless communication setting device 100 is registered in the management device 200 in the entire wireless communication setting system 50 shown in FIG. 2 will be described. FIG. 9 is a sequence diagram showing the setting process at that time.

In the wireless communication setting system 50, when the wireless communication setting device 100 is newly connected to a LAN constructed by the management device 200 and the access point 200, the wireless communication setting device 1
When a setting start instruction signal is input at 00 (S1), the wireless communication setting device 100 starts a wireless LAN setting process. First, the wireless communication setting device 100 generates terminal identification information and a high-strength authentication key (S2). Subsequently, the wireless communication setting device 100 prints the terminal identification information and the high strength authentication key (S3). At this time, the user uses the wireless communication setting device 100.
The terminal identification information and the high-intensity authentication key printed by are read using an image reading device such as a scanner or a barcode reader of the management device 200. After the processing in step S3, authentication processing according to the authentication protocol is performed between the wireless communication setting device 100 and the management device 200. Specifically, as pre-processing for authentication processing, first, the wireless communication setting device 100 searches for an access point 300 corresponding to the WPS standard (S4). When the access point 300 corresponding to the WPS standard is found, the management apparatus 200 determines the terminal identification information extracted from the terminal identification information or the high-strength authentication key read in step S3 and the terminal transmitted from the wireless communication setting apparatus 100 The authentication information is compared with the identification information (S5). When this authentication process is successful, the management apparatus 200 transmits the setting information necessary for setting the wireless LAN to the wireless communication setting apparatus 100.
(S6). Receiving this, the wireless communication setting device 100 registers various information based on the received setting information, and notifies the user that the setting has been completed (S7).

In addition, this invention is not limited to the said embodiment, A various deformation | transformation and application are possible.
For example, in the above embodiment, the management apparatus 200 and the access point 300 are described as separate apparatuses. However, the present invention is not limited to this. For example, the management device 2
00 and the access point 300 may be a single device.

In the above embodiment, the terminal identification information storage table 409 includes a terminal identification information column 50.
1 and an expiration date column 502 are provided. However, the present invention is not limited to this, and the terminal identification information column 501 may be provided in the terminal identification information storage table 409. Similarly, in the above embodiment, the high strength authentication key storage table 410 is provided with a high strength authentication key column 601 and an expiration date column 602. However, the present invention
However, the present invention is not limited to this, and the high-strength authentication key storage table 410 may be provided with the high-strength authentication key column 601.

Furthermore, in the above-described embodiment, as a cause of an error when the authentication process cannot be performed, WP
1. There is no access point corresponding to the S standard. Three reasons for timeout are listed. However, the present invention does not limit the cause of errors when authentication processing cannot be performed.

It is a functional block diagram of the radio | wireless communication setting apparatus which concerns on embodiment of this invention. It is a block diagram which shows an example of a structure of the radio | wireless communication setting system which concerns on embodiment of this invention. It is explanatory drawing which showed notionally the data structure of the terminal identification information storage table. It is explanatory drawing which showed notionally the data structure of the high intensity | strength authentication key storage table. (A)-(E) is explanatory drawing which showed the example of the layout of the screen displayed on a radio | wireless communication setting apparatus. It is explanatory drawing which shows an example of the hardware constitutions of terminal identification information and an access point. It is explanatory drawing which shows an example of the hardware constitutions of a management apparatus. It is a flowchart of the setting process performed with a radio | wireless communication setting apparatus. It is a timing chart in the case of performing a setting process with a wireless communication setting system.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... Control part, 11 ... Memory | storage part, 12 ... 1st interface, 13 ... 2nd interface, 50 ... Wireless communication setting system, 100 ... Wireless communication setting apparatus, 200 ... Management apparatus, 30
DESCRIPTION OF SYMBOLS 0 ... Access point 400 ... Input reception part 401 ... Terminal identification information generation part 402 ... High strength authentication key generation part 403 ... Setting process part 404 ... Authentication process part 405 ... Error detection part 406 ... Message screen Generation unit 407 ... Image processing unit 408 ... Display control unit 409 ...
Terminal identification information storage table, 501... Terminal identification information column, 601... High strength authentication key column, 70
1 ... CPU, 702 ... main storage device, 703 ... external storage device, 704 ... communication device 801 ... Y
es button, 802 ... No button, 803 ... end button, 804 ... retry button.

Claims (4)

A wireless communication setting device for performing a setting for wireless connection to a management server for managing a wireless LAN,
The wireless communication setting device includes a communication unit that performs wireless communication for the setting with the management server, a storage unit that stores data, and a control unit that controls the setting.
The controller is
Processing for generating identification information unique to the wireless communication setting device;
Processing for generating a high-strength authentication key by converting the identification information into graphic pattern data readable by the management server;
A process of outputting a printed matter in which the identification information and the high-strength authentication key are printed;
Storing the identification information and the high-strength authentication key in the storage unit;
Processing for transmitting the identification information stored in the storage unit to the management server storing the identification information printed on the printed matter or the high-strength authentication key via the communication unit to perform authentication processing When,
To do the
A wireless communication setting device. A wireless communication setting device according to claim 1,
The high-strength authentication key is a bar code or a two-dimensional code.
A wireless communication setting device. A wireless communication setting method in a wireless communication setting device configured to perform wireless connection to a management server that manages a wireless LAN,
The wireless communication setting device includes a communication unit that performs wireless communication for the setting with the management server, a storage unit that stores data, and a control unit that controls the setting.
The controller is
An identification information generation process for generating identification information unique to the wireless communication setting device;
A high-strength authentication key generation process for generating a high-strength authentication key, wherein the identification information is converted into graphic pattern data readable by the management server;
A printing process for outputting a printed matter in which the identification information and the high-strength authentication key are printed;
A storage process of storing the identification information and the high-strength authentication key in the storage unit;
A process of transmitting the identification information stored in the storage unit to the management server storing the identification information printed on a printed matter or the high-strength authentication key via the communication unit to perform an authentication process. When,
Having
A wireless communication setting method. A program that causes a computer to function as a wireless communication setting device that performs settings for wireless connection to a management server that manages a wireless LAN,
The computer
The wireless communication setting device functions as a communication unit that performs wireless communication for the setting with the management server, a storage unit that stores data, and a control unit that controls the setting,
The control means includes
Processing for generating identification information unique to the wireless communication setting device;
Processing for generating a high-strength authentication key by converting the identification information into graphic pattern data readable by the management server;
A process of outputting a printed matter in which the identification information and the high-strength authentication key are printed;
Processing for storing the identification information and the high-strength authentication key in the storage means;
Processing for transmitting the identification information stored in the storage means to the management server storing the identification information printed on the printed matter or the high-strength authentication key via the communication means to perform authentication processing When,
To do the
A program characterized by

Images