Communication device, control method, and non-transitory computer-readable storage medium

Abstract

The present disclosure relates to a communication device, a control method, and a non-transitory computer-readable storage medium. The communication device includes a transition unit configured to transition a state of the communication device to a second state based on a start of a process for connection between a predetermined external device that supports an authentication process using a predetermined authentication method with an authentication server and the communication device in a state where the communication device operates in a first state in which a processor of the communication device operates at a first operation frequency, in which the processor of the communication device operates at a second operation frequency higher than the first operation frequency in the second state; and an authentication unit configured to perform authentication using the predetermined authentication method via the predetermined external device in a state where the communication device operates in the second state.

Description

Technical Field

[0001] The present invention relates to a communication device, control method, and a non-transitory computer-readable storage medium for communicating with external devices requiring authentication. Background Technology

[0002] Communication devices can perform processing for connecting to access points existing around the device. Japanese Patent Application Laid-Open No. 2016-127545 describes an information processing device that searches for connectable access points, displays a list of SSIDs, and connects to an access point with a selected SSID. Furthermore, when switching from normal power mode to power-saving mode, the communication device can perform processing to reduce the CPU clock frequency. Japanese Patent Application Laid-Open No. 2014-106835 describes a communication device that switches to different power-saving modes based on the session state if the conditions for switching to power-saving mode are met.

[0003] In wireless communication methods using wireless LANs conforming to the IEEE 802.11 standard, it is known to protect the network by authenticating the communication devices that are to connect to the network. For example, the IEEE 802.1X / EAP authentication method is known as such an authentication method. Summary of the Invention

[0004] The present invention provides a non-transitory computer-readable storage medium for a communication device, a control method, and a stored program for dynamically switching the power state of a communication device based on a connection to an external device requiring authentication.

[0005] The present invention provides a communication device in a first aspect, comprising: a transition unit configured to transition the state of the communication device to a second state based on the commencement of processing for a connection between the communication device and a predetermined external device supporting authentication processing using a predetermined authentication method employing an authentication server, in a state where the communication device is operating in a first state, wherein in the first state the processor of the communication device operates at a first operating frequency, and in the second state the processor of the communication device operates at a second operating frequency higher than the first operating frequency; and an authentication unit configured to perform authentication using the predetermined authentication method via the predetermined external device in the state where the communication device is operating in the second state.

[0006] In a second aspect, the present invention provides a control method for a communication device, comprising: transitioning a state of the communication device to a second state based on a process initiated by a predetermined external device supporting authentication processing using a predetermined authentication method employing an authentication server, wherein in the first state the communication device operates at a first operating frequency, and in the second state the communication device's processor operates at a second operating frequency higher than the first operating frequency; and performing authentication using the predetermined authentication method via the predetermined external device while the communication device is operating in the second state.

[0007] In a third aspect, the present invention provides a non-transitory computer-readable storage medium storing a program for causing a computer of a communication device to execute: transitioning the state of the communication device to a second state based on processing used for a connection between a predetermined external device and the communication device that supports authentication processing using a predetermined authentication method employing an authentication server, in a state where the communication device is operating in a first state, wherein in the first state the processor of the communication device operates at a first operating frequency, and in the second state the processor of the communication device operates at a second operating frequency higher than the first operating frequency; and performing authentication using the predetermined authentication method via the predetermined external device in the state where the communication device is operating in the second state.

[0008] According to the present invention, the power state of a communication device can be dynamically switched based on its connection to an external device requiring authentication.

[0009] Further features of the invention will become apparent from the following description of typical embodiments with reference to the accompanying drawings. Attached Figure Description

[0010] Figure 1 This is a block diagram showing the system configuration;

[0011] Figure 2 This is a diagram showing the appearance of an MFP;

[0012] Figure 3 This is a block diagram showing the layout of the MFP;

[0013] Figures 4A to 4C Each diagram schematically illustrates the arrangement of the operation display unit of the MFP;

[0014] Figure 5 It is a diagram showing the appearance of an information processing device;

[0015] Figure 6 It is a block diagram showing the arrangement of information processing equipment;

[0016] Figure 7 This is a block diagram showing the layout of the access points;

[0017] Figure 8 This is a block diagram showing the layout of the authentication server;

[0018] Figure 9 This is a flowchart illustrating an overview of the process of connecting an MFP to a network formed by access points;

[0019] Figures 10A to 10C These are diagrams used to illustrate the network between devices;

[0020] Figures 11A to 11J It is a diagram used to illustrate the changes in the screen on the operation display unit of the MFP;

[0021] Figures 12A to 12G It is a diagram used to illustrate the changes in the screen in an information processing device;

[0022] Figure 13A and Figure 13B This is a flowchart illustrating the process of connecting an MFP to a network formed by access points;

[0023] Figure 14 This is a flowchart illustrating the process of changing the power mode of an MFP;

[0024] Figure 15 This is a flowchart illustrating the process of changing the operating frequency of the MFP; and

[0025] Figure 16 This is a flowchart illustrating the process of changing the operating frequency of the MFP. Detailed Implementation

[0026] In the following, embodiments will be described in detail with reference to the accompanying drawings. Note that the following embodiments are not intended to limit the scope of the claimed invention. Several features are described in the embodiments, but the invention is not limited to requiring all of these features, and multiple features can be appropriately combined. Furthermore, in the drawings, the same reference numerals are given the same or similar configuration, and redundant descriptions are omitted.

[0027] If authentication processing is performed while the communication device is switching from normal power mode to power-saving mode to reduce the CPU clock frequency, the authentication process may not complete within the scheduled time and may fail. On the other hand, if the communication device is always set to normal power mode, power consumption increases.

[0028] According to this disclosure, the power state of a communication device can be dynamically switched based on its connection to an external device requiring authentication.

[0029] [First Embodiment]

[0030] Figure 1 This is a block diagram illustrating an example of a system configuration according to this embodiment. Communication system 100 is a communication system in which multiple communication devices can wirelessly communicate with each other. For example... Figure 1 As shown, the communication system 100 includes an information processing device 200 (as communication equipment), an MFP (Multi-Function Peripheral Device) 300, an access point (AP) 400, and an authentication server 500. In the communication system 100, the information processing device 200 and the MFP 300 can perform processes, such as those corresponding to printing services, using wireless LAN communication.

[0031] Information processing device 200 is an information processing device with communication capabilities via wireless LAN or wired LAN. Note that wireless LAN will sometimes be referred to as WLAN below. For example, a smartphone, laptop PC, tablet computer, or PDA (personal digital assistant) may be used as information processing device 200.

[0032] MFP 300 is an example of a printing device with printing capabilities. MFP 300 may have reading (scanner), fax (FAX) and telephone functions. MFP 300 has communication capabilities that enable wireless communication with information processing device 200. In this embodiment, MFP 300 will be described, but devices of different forms can be used. For example, fax devices, scanners, projectors, portable terminals, smartphones, laptops, tablets, PDAs, digital cameras, music playback devices, televisions, smart speakers, or AR glasses, etc., with communication capabilities, can be used.

[0033] Access point 400 is a communication device that is separately configured from information processing device 200 and MFP 300 (located outside MFP 300) and operates as a base station device for WLAN. Note that access point 400 will sometimes be referred to as external access point 400 or external wireless base station below. Communication devices with WLAN communication capabilities can communicate in WLAN infrastructure mode via access point 400. Note that infrastructure mode will sometimes be referred to as "wireless infrastructure mode" below. In other words, wireless infrastructure mode is the mode in which communication devices communicate with information processing device 200 via access point 400 to which the communication devices are connected. Access point 400 communicates with communication devices (authenticated communication devices) that are allowed to connect to its own device and relays wireless communication between communication devices and other communication devices. Access point 400 connects to a wired LAN communication network to relay communication between communication devices connected to the network and other communication devices wirelessly connected to access point 400. If the authentication method of the network formed by access point 400 is the authentication method using an authentication server (if access point 400 supports authentication methods using an authentication server), then access point 400 performs access control by authenticating communication devices seeking to connect to the network in cooperation with authentication server 500. Communication devices seeking to connect to the network formed by access point 400 cannot communicate with devices other than authentication server 500 until they are authenticated. Note that access point 400 may support authentication methods without using an authentication server. Authentication methods using and without an authentication server will be described in detail later.

[0034] The authentication server 500 is a communication device that is separately configured (externally located) from the information processing device 200, MFP 300, and access point 400, and operates as an authentication server for comprehensive management of authentication information. The authentication server 500 cooperates with the access point 400 to authenticate terminals to be authenticated and performs terminal access control based on the authentication results. The authentication server 500 is configured to perform authentication processing conforming to, for example, the IEEE 802.1X standard.

[0035] Access point 400 corresponds to the authenticator in IEEE 802.1X. Additionally, information processing device 200 and MFP 300 correspond to the supplicant in IEEE 802.1X. Note that in the following text, the authentication server will sometimes be referred to as the "RADIUS server".

[0036] The authentication server 500 performs authentication in the IEEE 802.1X standard using methods such as EAP-TLS, EAP-TTLS, or PEAP. EAP-TLS (EAP-Transport Layer Security) is an authentication method using the TLS handshake protocol and employing both server and client certificates. EAP-TTLS (EAP-Tunneled TLS) is also an authentication method using the TLS handshake protocol and employing the server certificate, username, and password. In the PEAP (Protected EAP) method, authentication is performed using both a username and password. Note that the information used for IEEE 802.1X authentication will sometimes be referred to as "authentication information" below.

[0037] Information processing device 200 and MFP 300 can use their WLAN communication functions to perform wireless communication in peer-to-peer mode without the intervention of external access point 400, or in wireless infrastructure mode via external access point 400. Note that peer-to-peer mode will sometimes be referred to as "P2P mode" or "wireless direct mode" in contrast to wireless infrastructure mode. In other words, P2P mode is a mode in which the communication device communicates directly with information processing device 200 without the intervention of access point 400. P2P mode includes Wi-Fi. (Wi-Fi Direct) mode and software access point (software AP) mode. Note that Wi-Fi... The mode will sometimes be referred to as WFD mode in the following text. That is, Wireless Direct mode can be referred to as a communication mode compliant with the IEEE 802.11 series.

[0038] Figure 2 This is an example diagram showing the appearance of the MFP 300. The power button 301 is a hard key used by the user to turn the power on and off. The operation display unit 302 includes a display and buttons used by the user to operate the MFP 300. The operation display unit 302 includes keys such as character input keys, cursor keys, input keys, and cancel keys, LEDs (light-emitting diodes), and an LCD (liquid crystal display). The operation display unit 302 is configured to accept user input, for example, when activating various functions of the MFP 300 or changing various settings. The operation display unit 302 can be formed by including a touch panel display.

[0039] The print sheet insertion port 303 is a port that can accommodate sheets of various sizes. Sheets positioned at the print sheet insertion port 303 are fed one after another to the printing unit, undergo the desired printing process, and are discharged from the print sheet discharge port 304. The original document stage 305 is a transparent glass stage used for reading the set original document by the scanner. The original document cover 306 is a cover used to press the original document against the original document stage to prevent it from floating and to prevent external light from entering the scanner unit when the original document is read by the scanner.

[0040] The MFP 300 has the capability to communicate via WLAN or wired LAN, and includes a wired communication unit 321 and a wireless communication unit 307 with an antenna for wireless communication. Note that the wireless communication unit 307 and the wired communication unit 321 do not always need to be arranged for external visual identification. The USB communication unit 308 includes a USB connector and circuitry for communication between the MFP 300 and external information processing devices such as the external information processing device 200 via USB connection. The power supply unit 309 is connected to an external power source to power the MFP 300.

[0041] Figure 3 This is a block diagram illustrating an example of the arrangement of an MFP (communication device) 300. The MFP 300 includes a mainboard 310 (which controls the entire device), a power button 301, an operation display unit 302, a communication unit 322, a USB communication unit 308, and a power supply unit 309.

[0042] The motherboard 310 includes a CPU 311 in the form of a microprocessor. The CPU 311 controls the MFP 300 based on a control program stored in a program memory 313 in the form of ROM, connected via an internal bus 312, and contents stored in a data memory 314 in the form of RAM. For example, when the CPU 311 reads a program stored in the program memory 313 and executes that program, the operation of the MFP 300 described in this embodiment is implemented. The CPU 311 controls the scanning unit 317 to read the original document and stores the read data in an image memory 315 in the data memory 314. The CPU 311 controls the printing unit 316 to print an image of the read data stored in the image memory 315 in the data memory 314 onto a printing medium. The CPU 311 controls the USB communication unit 308 via the USB communication control unit 320 to perform USB communication with an external information processing device 200 via a USB connection. The CPU 311 controls the operation control unit 319 to receive operation information from the operation display unit 302 or the power button 301. CPU 311 controls operation control unit 319 to display, for example, the status or function selection menu of MFP 300 on operation display unit 302. Based on operation information received by operation display unit 302, CPU 311 controls wireless communication unit 307 and wired communication unit 321 in communication unit 322 via communication control unit 318. For example, CPU 311 changes the communication method settings and sets up network connection based on operation information. CPU 311 controls power mode control unit 325 to switch the power mode of MFP 300. The power mode switching operation will be described later.

[0043] Wireless communication unit 307 is a unit configured to provide WLAN communication functionality. That is, wireless communication unit 307 converts data into packets according to the WLAN standard and sends the packets to other communication devices. Wireless communication unit 307 also reconstructs packets from other external communication devices into raw data and outputs the data to CPU 311. Wireless communication unit 307 is configured to perform data (packet) communication in WLAN systems conforming to the IEEE 802.11 standard series (IEEE 802.11a / b / g / n / ac / ax, etc.). However, the present invention is not limited thereto, and wireless communication unit 307 can be configured to perform communication in WLAN systems conforming to other standards. Note that in this embodiment, wireless communication unit 307 can communicate in both the 2.4 GHz and 5 GHz frequency bands. Furthermore, wireless communication unit 307 can perform communication in WFD mode, software AP mode, and wireless infrastructure mode, etc. Operation in these modes will be described later. Note that information processing device 200 and MFP 300 can perform wireless communication based on WFD mode, and wireless communication unit 307 has software AP functionality or group owner functionality. That is, the wireless communication unit 307 can create a communication network in P2P mode and determine the channel to be used for communication in P2P mode.

[0044] The wired communication unit 321 is a unit used for wired communication. For example, the wired communication unit 321 can perform data (packet) communication in a wired LAN (Ethernet) system conforming to the IEEE 802.3 series. Furthermore, in wired communication using the wired communication unit 321, communication can be performed in wired communication mode. The wired communication unit 321 is connected to the motherboard 310 via a bus cable or the like.

[0045] Communication unit 322 is a unit that can provide WLAN or wired LAN communication functions, and includes wireless communication unit 307 and wired communication unit 321. Communication unit 322 performs encryption and decryption processing during authentication when establishing a connection with access point 400. For example, when authenticating via WPA2-PSK, communication unit 322 performs encryption and decryption processing during the four-way handshake. When authenticating via IEEE 802.1X / EAP, communication unit 322 performs encryption and decryption processing via RSA encryption or ECC (Elliptic Curve Cryptography) encryption during the TLS handshake. Furthermore, for communication between MFP 300 and access point 400, communication unit 322 performs encryption and decryption processing using a shared-key cryptosystem. Figure 3As shown, in addition to CPU 311 and program memory 313, communication unit 322 also includes CPU 323 and program memory 324 dedicated to communication unit 322. Note that if CPU 311 and program memory 313 also operate as CPU 323 and program memory 324 respectively, then CPU 323 and program memory 324 do not need to be provided.

[0046] Figures 4A to 4C These are schematic diagrams illustrating examples of the arrangement of the operation display unit 302 of the MFP 300. Figure 4A An example is shown where the touch panel display 331 forms the operation display unit 302. When the user presses the power button 301, the MFP 300 is powered on. After the MFP 300 is powered on, it operates in normal power mode (described later) and displays a home screen on the touch panel display 331 as the top layer of a user-operable menu. The home screen includes a copy area 335 for receiving instructions to perform copy processing, a scan area 336 for receiving instructions to perform scan processing, and a print area 337 for receiving instructions to perform print processing. The home screen also includes a status display area 332 (which indicates the connection settings and connection status of the MFP 300 in wireless infrastructure mode and wireless direct mode). Additionally, the home screen includes a connection setting mode area 333 and a setting area 334, where the user can start operation in connection setting mode at any time in connection setting mode 333, and where the user can change various settings in setting area 334.

[0047] Figure 4B An example is shown where a relatively small LCD display 341 and various hard keys 344 to 351 form an operation display unit 302. If the user presses the power button 301, the MFP 300 is powered on. After the MFP 300 is powered on, a home screen, serving as the top layer of a user-operable menu, is displayed on the LCD display 341. The user can operate the cursor displayed on the LCD display 341 by pressing the cursor movement buttons 346 or 347. If the user wants to perform an operation, he / she presses the OK button 349. If the user wants to return to the previous menu screen, he / she presses the back button 348. If the user presses the QR button 344, a QR code containing information required for direct connection to the MFP 300 is displayed. If the displayed QR code (QR code) is read from the information processing device 200... If the information processing device 200 and the MFP 300 are connected, they can directly connect for wireless communication. If the user presses the connection setup mode button 345, the connection setup mode can be initiated. In connection setup mode, the MFP 300 can connect to the access point 400 by sending connection information from the information processing device 200 to the MFP 300. If the user presses the stop button 350 during the corresponding processing performed by the MFP 300, the processing is canceled. If the user presses the copy start button 351, the original document set on the original platen 305 is scanned to perform printing.

[0048] Figure 4C An example is shown where a relatively small LCD display 361 and various hard keys 363 to 370 form an operation display unit 302. The MFP 300 is powered on when the user presses the power button 301. After the MFP 300 is powered on, a home screen, serving as the top layer of a user-operable menu, is displayed on the LCD display 361. The user can operate the items displayed on the LCD display 361 by pressing the movement buttons 364 or 365. If the user wants to perform an operation, he / she presses the OK button 367. If the user wants to return to the previous menu screen, he / she presses the back button 366. If the user presses the connection setup mode button 363, the connection setup mode can be started. In connection setup mode, the MFP 300 can connect to the access point 400 by sending connection information from the information processing device 200 to the MFP 300. During the execution of various processes by the MFP 300, the process is canceled if the user presses the stop button 368. If the user presses the copy start button 369, the original document set on the original platen 305 will be scanned to perform printing. If the user presses the settings button 370, he / she can change various settings.

[0049] Figure 5This is an example diagram showing the appearance of the information processing device 200. This embodiment illustrates the case where the information processing device 200 is a general form of smartphone (portable terminal). Note that the information processing device 200 includes, for example, a display unit 202, an operation unit 203, and a power button 204. The display unit 202 is, for example, a display including an LCD (liquid crystal display) type display mechanism. Note that the display unit 202 can use LEDs (light-emitting diodes) or the like to display information. Furthermore, instead of the display unit 202, or in addition to the display unit 202, the information processing device 200 may also have a speaker function that outputs information via audio. The operation unit 203 includes hard keys such as buttons and buttons or a touch panel to detect user operations. Note that in this embodiment, the display unit 202 and the operation unit 203 are implemented by a single device to display information on the display unit 202 and accept user operations through the operation unit 203 using a shared touch panel display. In this case, for example, the display function of the display unit 202 is used to display button icons and a soft keyboard, and the operation acceptance function of the operation unit 203 is used to detect the user's touch operations on the button icons and soft keyboard. Note that the display unit 202 and the operation unit 203 can be separated, and the display hardware components and operation receiving hardware components can be configured independently. The power button 204 is a hard button used to accept user operations for turning the power on or off the information processing device 200.

[0050] Information processing equipment 200 includes, for example Figure 6 The wireless communication unit 201 shown is for providing WLAN communication functionality. The wireless communication unit 201 is configured to perform data (packet) communication in a WLAN system conforming to, for example, the IEEE 802.11 standard family (IEEE 802.11a / b / g / n / ac / ax, etc.). However, the invention is not limited thereto, and the wireless communication unit 201 can also perform communication in WLAN systems conforming to other standards. Note that in this embodiment, the wireless communication unit 201 can communicate in both the 2.4 GHz and 5 GHz frequency bands. The wireless communication unit 201 can perform communication in WFD mode, software AP mode, and wireless infrastructure mode, etc. Operation in these modes will be described later.

[0051] Figure 6This is a block diagram illustrating an example arrangement of an information processing device 200. The information processing device 200 includes a motherboard 211 controlling the entire device, a wireless communication unit 201 for WLAN communication, a display unit 202, an operation unit 203, and a short-range wireless communication unit 205 for wireless communication different from that of the wireless communication unit 201. The motherboard 211 includes, for example, a CPU 212, ROM 213, RAM 214, image memory 215, data conversion unit 216, telephone unit 217, GPS 219, camera unit 221, non-volatile memory 222, data storage unit 223, speaker unit 224, and power supply unit 225. Note that GPS is an abbreviation for Global Positioning System. These functional units in the motherboard 211 are interconnected via a system bus 228. The motherboard 211 and the wireless communication unit 201, as well as the motherboard 211 and the short-range wireless communication unit 205, are respectively connected via, for example, dedicated buses. The motherboard 211 and the display unit 202, as well as the motherboard 211 and the operation unit 203, are also connected via, for example, a dedicated bus.

[0052] The CPU 212 serves as the system control unit and controls the entire information processing device 200. For example, when the CPU 212 reads a program stored in the ROM 213 and executes that program, the operation of the information processing device 200 described in this embodiment is implemented. Note that dedicated hardware can be prepared for each process. The ROM 213 stores control programs to be executed by the CPU 212 and embedded operating system (OS) programs, etc. Under the management of the embedded OS stored in the ROM 213, the CPU 212 executes the various control programs stored in the ROM 213, thereby performing software control such as scheduling or task switching. The RAM 214 is implemented using SRAM (Static RAM) or the like. The RAM 214 stores data such as program control variables, user-registered settings, and management data of the information processing device 200. The RAM 214 can be used as various working buffers. The image memory 215 is implemented using memory such as DRAM (Dynamic RAM). The image memory 215 temporarily stores image data received via the wireless communication unit 201 and image data read from the data storage unit 223 for processing by the CPU 212. The non-volatile memory 222 is implemented using a memory such as flash memory, and continues to store data even after the information processing device 200 is powered off. Note that the memory arrangement of the information processing device 200 is not limited to the above-described arrangement. For example, image memory 215 and RAM 214 may share memory, or data storage unit 223 may be used to back up data. In this embodiment, an example of image memory 215 is DRAM. However, other storage media such as hard disks or non-volatile memory may be used.

[0053] Data conversion unit 216 can perform analysis of data in various formats, as well as data conversion such as color conversion and image conversion. Telephone unit 217 controls the telephone line and realizes telephone communication by processing audio data input / output via speaker unit 224, which includes a microphone and a speaker. GPS 219 obtains location information such as the current latitude and longitude of information processing device 200 by receiving radio waves transmitted from satellites. Camera unit 221 has the function of electronically recording and encoding images input via the lens. Image data obtained by camera unit 221 is stored in data storage unit 223. Speaker unit 224 performs control to realize the function of inputting / outputting audio for telephone functions, as well as alarm notification functions, etc. Power supply unit 225 is, for example, a portable battery, and controls the power supply to the device. The power states of information processing device 200 include, for example, a battery depletion state with no remaining battery power, a power-off state with the power button 204 not pressed, a startup state with the device normally started, and a power-saving state with the device started but set to power-saving mode. Display unit 202 electronically controls the display content to perform controls for, for example, displaying various input content and the operating status and condition of the MFP 300. In response to receiving a user operation, operation unit 203 performs control to, for example, generate an electrical signal corresponding to the operation and output the electrical signal to CPU 212.

[0054] The information processing device 200 uses the wireless communication unit 201 for wireless communication and data communication with other communication devices such as the MFP 300. The wireless communication unit 201 converts data into packets and sends the packets to other communication devices. Furthermore, the wireless communication unit 201 reconstructs packets from other external communication devices into raw data and outputs the data to the CPU 212. The wireless communication unit 201 is a unit for implementing communication conforming to standards such as WLAN standards. The short-range wireless communication unit 205 uses a different communication method than the wireless communication unit 201 (e.g., Bluetooth). To communicate.

[0055] Figure 7 This is a block diagram illustrating an example arrangement of an access point 400 with wireless LAN access point functionality. The access point 400 includes a mainboard 410 (for controlling the access point 400), a wireless communication unit 420, a wired communication unit 421, and operation buttons 422.

[0056] A microprocessor-type CPU 411 is provided in the motherboard 410. The CPU 411 operates according to the control program stored in the ROM-type program memory 412 connected via the internal bus 418 and the contents stored in the RAM-type data memory 413. For example, when the CPU 411 reads the program stored in the program memory 412 and executes the program, the operation of the access point 400 according to this embodiment is implemented. The CPU 411 controls the wireless communication unit 420 via the wireless communication control unit 414 to conduct wireless LAN communication with other communication devices. The CPU 411 controls the wired communication unit 421 via the wired communication control unit 415 to conduct wired LAN communication with other communication devices. The CPU 411 receives user operations via the operation unit control circuit 416 through the operation button 422.

[0057] Access point 400 includes a terminal access control unit 417. The terminal access control unit 417 protects the network by authenticating communication devices that wish to connect to the network. The terminal access control unit 417 authenticates communication devices that wish to connect to the network using various methods. These methods include, for example, the PSK method using a Pre-Shared Key, the SAE method using Simultaneous Authentication of Equals (SAE), and the EAP method using an authentication server 500 compliant with IEEE 802.1X / EAP.

[0058] Figure 8 This is a block diagram illustrating an example arrangement of an authentication server 500. The authentication server 500 includes a motherboard 511 for controlling the authentication server 500, a communication unit 501 for wired LAN communication, a display unit 502, and an operation unit 503. The motherboard 511 includes a CPU 512, a ROM 513, a RAM 514, an image memory 515, a non-volatile memory 516, a data storage unit 518, and a communication control unit 517. The functional units in the motherboard 511 are interconnected via a system bus 519. The motherboard 511 and the communication unit 501, the motherboard 511 and the display unit 502, and the motherboard 511 and the operation unit 503 are respectively connected via, for example, a dedicated bus.

[0059] The CPU 512 acts as a system control unit and controls the entire authentication server 500. When, for example, the CPU 512 reads a program stored in the ROM 513 and executes that program, the operation of the authentication server 500 according to this embodiment is implemented. Note that dedicated hardware for each process can be prepared. The ROM 513 stores control programs to be executed by the CPU 512, as well as embedded operating system (OS) programs, etc. Under the management of the embedded OS stored in the ROM 513, the CPU 512 executes the various control programs stored in the ROM 513, thereby performing software control such as scheduling or task switching. The RAM 514 is implemented using SRAM (Static RAM) or the like. The RAM 514 stores data such as program control variables, user-registered settings, and management data of the authentication server 500. The RAM 514 can be used as various working buffers. The image memory 515 is implemented using memory such as DRAM (Dynamic RAM). The image memory 515 temporarily stores image data received via the communication unit 501 and image data read from the data storage unit 518 for processing by the CPU 512. The data storage unit 518 is implemented using a storage medium such as an SSD (Solid State Drive) and continues to store data even after the authentication server 500 is powered off. In this embodiment, an SSD is exemplified as an example of the data storage unit 518. However, other storage media such as hard disks or non-volatile memory can be used. The display unit 502 electronically controls the display content to perform controls for, for example, displaying various input content and status conditions. In response to accepting a user operation, the operation unit 503 performs control to, for example, generate an electrical signal corresponding to the operation and output the electrical signal to the CPU 512.

[0060] CPU 512 controls communication control unit 517 to communicate using communication unit 501, thereby enabling data communication with other communication devices such as access point 400. Communication unit 501 converts data into packets and sends the packets to other communication devices. Furthermore, communication unit 501 reconstructs packets from other external communication devices into raw data and outputs the data to CPU 512. Communication unit 501 can perform data (packet) communication in wired LAN (Ethernet) systems conforming to, for example, the IEEE 802.3 series.

[0061] The following describes the communication modes that the communication devices in the communication system 100 can operate.

[0062] [Wireless Direct Mode]

[0063] This section describes a communication method in Wireless Direct Mode, in which devices communicate directly with each other in WLAN communication without the intervention of an external access point. Several methods can be used to implement communication in Wireless Direct Mode. For example, communication devices can perform communication in Wireless Direct Mode by selectively using one of the aforementioned Wireless Direct Modes. Note that communication in Wireless Direct Mode will sometimes be referred to as "Wireless Direct Communication" or "P2P Communication" below.

[0064] For example, a communication device capable of performing wireless direct communication is configured to support at least one of software AP mode and Wi-Fi Direct (WFD) mode. On the other hand, a communication device capable of performing wireless direct communication does not need to support all modes and can be configured to support only a subset of these modes. In this embodiment, in addition to the wireless direct mode, the communication device may also support a wireless infrastructure mode.

[0065] A communication device (e.g., information processing device 200) with communication capabilities in WFD mode invokes an application program for implementing the communication function by accepting user operations via an operation unit. The communication device then performs communication in WFD mode based on the user operations accepted via the user interface screen provided by the application program. Note that in connection / communication with other devices, the MFP 300, operating in P2P mode, operates as the master device. Note that WFD mode is not limited to this, and the MFP 300 can operate as a station by performing group owner negotiation.

[0066] [Wireless Infrastructure Mode]

[0067] In contrast to the wireless direct mode, in the wireless infrastructure mode, the communication devices communicating with each other connect to an external access point (used to control the network) and communicate with each other via the external access point. In this example, the communication devices are, for example, information processing device 200 and MFP 300. In other words, communication between the communication devices is performed via a network created by the external access point. In the connection / communication with access point 400, MFP 300, operating in wireless infrastructure mode, operates as a station. In wireless infrastructure mode, each communication device searches for the external access point by sending a device search request (probe request). If each communication device receives a device search response (probe response) from the external access point, the communication device displays the SSID included in the probe response. For example, information processing device 200 and MFP 300 each discover access point 400, send a connection request to access point 400, and connect to access point 400, thereby enabling communication between these communication devices via access point 400 in wireless infrastructure mode. Note that multiple communication devices can connect to different access points. In this configuration, communication between communication devices is possible when data is transmitted between access points. Commands and parameters defined by the Wi-Fi standard are used as the commands and parameters sent / received when communicating between communication devices via the access points. In the above arrangement, access point 400 determines the frequency band and frequency channel. Therefore, access point 400 selects one of the 5GHz and 2.4GHz frequency bands for use, and selects the frequency channel to be used within that band.

[0068] When the information processing device 200 or MFP 300 connects to the wireless LAN formed by the access point 400, the access point 400 performs authentication. The information processing device 200 or MFP 300 is authenticated through the authentication method of the wireless LAN formed by the access point 400, and therefore can connect to the wireless LAN. Examples of wireless LAN authentication methods include the PSK method using PSK, the SAE method using SAE, and the EAP method using an authentication server compliant with IEEE 802.1X / EAP.

[0069] [Wired Communication Mode]

[0070] Wired communication mode is a communication mode in which communication devices communicate with each other via a wired LAN, etc. When the MFP 300 operates in wired communication mode, it cannot operate in wireless infrastructure mode. In wired communication mode, for example, data (packet) communication is performed over a wired LAN (Ethernet) compliant with the IEEE 802.3 series. When operating with IEEE 802.1X / EAP enabled, the MFP 300 performs IEEE 802.1X authentication to connect to the wired LAN formed by access point 400.

[0071] [Simultaneous wireless operation]

[0072] If communication in each of the two modes is conducted using an authentication method that does not use authentication server 500, then MFP 300 can perform communication in each mode simultaneously (in parallel). That is, it maintains connections for communication in each mode simultaneously. More specifically, for example, it can perform communication in wireless infrastructure mode and communication in P2P mode simultaneously. Therefore, MFP 300 maintains both the connection for communication in wireless infrastructure mode and the connection for communication in P2P mode. This operation can be described as "simultaneous wireless operation." In other words, simultaneous wireless operation is, for example, the following: MFP 300 simultaneously performs operations as a station in Wi-Fi communication in wireless infrastructure mode and as a master device in Wi-Fi communication in P2P mode. On the other hand, if MFP 300 communicates using the authentication method of authentication server 500, then MFP 300 does not maintain both infrastructure connection and P2P connection simultaneously.

[0073] The following describes the power modes of the MFP 300. The MFP 300's power modes include, for example, a normal power mode and a power-saving mode (which consumes less power than the normal power mode). The MFP 300 is configured to operate in multiple modes, including these modes.

[0074] In the normal power mode operation of the MFP 300, for example, power is supplied to the CPU 311, printing unit 316, operation display unit 302, and communication unit 322. Therefore, in the normal power mode operation, the MFP 300 can perform, for example, printing processing by the printing unit 316, display processing and operation acceptance processing by the operation display unit 302, and communication processing by the communication unit 322. Furthermore, in the normal power mode operation, the CPU 311 operates at a predetermined operating frequency (first operating frequency). If the communication unit 322 includes a dedicated CPU 323 for communication, then the CPU 323 operates at a predetermined operating frequency (second operating frequency). Note that the first and second operating frequencies can be the same or different. This embodiment assumes a higher first operating frequency. Note that in order for each CPU to operate at a high operating frequency, a fast clock needs to be supplied to each CPU. Therefore, in this embodiment, the CPU operating at a higher operating frequency is supplied with a faster clock.

[0075] When the MFP 300 operates in power-saving mode, for example, power is supplied to the CPU 311 and the communication unit 322. Note that, unlike normal power mode, power is not supplied to a portion of the printing unit 316 or a portion of the operation display unit 302 when the MFP 300 operates in power-saving mode. Therefore, in power-saving mode, the MFP 300 cannot perform printing processing of the printing unit 316 or display processing of the operation display unit 302, but it can perform operation acceptance processing and communication processing of the communication unit 322. Furthermore, in power-saving mode, the CPU 311 operates at a third operating frequency lower than the first operating frequency. If the communication unit 322 includes a dedicated CPU 323, the CPU 323 operates at a fourth operating frequency lower than the second operating frequency in power-saving mode. Note that the third and fourth operating frequencies can be the same or different. This embodiment assumes a higher third operating frequency.

[0076] Note that multiple power modes may include power modes other than those described above. For example, in this embodiment, a soft-off mode with lower power consumption than the power-saving mode is included. When the MFP 300 operates in soft-off mode, power is supplied to the CPU 311, but not to a portion of the printing unit 316, communication unit 322, and operation display unit 302. Therefore, when the MFP 300 operates in soft-off mode, it cannot perform, for example, printing processing by the printing unit 316, display processing or operation acceptance processing by the operation display unit 302 (excluding the power button 301), or communication processing by the communication unit 322. Then, if the power button 301 is activated while the MFP 300 is operating in soft-off mode, the MFP 300 switches to normal power mode. If the power button 301 is activated while the MFP 300 is operating in normal power mode or power-saving mode, the MFP 300 switches to soft-off mode. When the MFP 300 is operating in soft-shutdown mode, the CPU 311 operates at a fifth operating frequency, which is lower than the third operating frequency. Note that, for example, if the automatic power-on function, which automatically switches to normal power mode when the information processing device 200 sends commands via communication through the communication unit 322, is enabled, the MFP 300 can still perform communication processing of the communication unit 322 by supplying power to the communication unit 322, even when the MFP 300 is operating in soft-shutdown mode.

[0077] Multiple power modes may include an intermediate mode (in which power consumption is greater than in the power-saving mode but less than in the normal power mode). When the MFP 300 operates in intermediate mode, power is supplied to, for example, the CPU 311 and the communication unit 322. Note that, unlike in the normal power mode, when the MFP 300 operates in intermediate mode, power is not supplied to a portion of the printing unit 316 or a portion of the operation display unit 302. When the MFP 300 operates in intermediate mode, the CPU 311 operates at a seventh operating frequency, which is lower than a first operating frequency and higher than a third operating frequency. If the communication unit 322 includes a dedicated CPU 323 for the communication unit, then when the MFP 300 operates in intermediate mode, the CPU 323 operates at an eighth operating frequency, which is lower than a second operating frequency and higher than a fourth operating frequency. Note that the intermediate mode is, for example, a mode used to prepare for switching to the power-saving mode when transitioning from the normal power mode to the power-saving mode, and the conditions for switching to the intermediate mode are the same as the conditions for switching to the power-saving mode. That is, after switching from normal power mode to intermediate mode, the MFP 300 switches from intermediate mode to power-saving mode. In this way, other modes can be operated while switching from normal power mode to power-saving mode.

[0078] Reference Figure 14 This describes the process of changing the power mode of the MFP 300 according to this embodiment. Note that if the power mode of the MFP 300 is the normal power mode, the process from step S1401 is executed. If the power mode of the MFP 300 is the power saving mode, the process from step S1403 is executed. Figure 3 The power mode control unit 325 shown can control the switching of the power mode of the MFP300, and switches the power mode if the conditions for changing the power mode are met. Note that, although Figure 14 Not shown in, but if in Figure 14 If the power button 301 is pressed during the processing shown, the power mode is switched to soft-off mode as described above. That is, the condition for switching to soft-off mode is pressing the power button 301.

[0079] In step S1401, the power mode control unit 325 determines whether the state of the MFP 300 meets the conditions for switching to power-saving mode. The process in step S1401 is repeated until the conditions for switching to power-saving mode are met. The conditions for switching to power-saving mode are, for example, that no user operation has been received via the operation display unit 302 other than the power button 301 for a predetermined time. Alternatively, the conditions may be, for example, that no operation has been received using communication from the information processing device 200 via the USB communication unit 308, wireless communication unit 307, or wired communication unit 321 for a predetermined time. If the conditions for switching to power-saving mode are met, in step S1402, the power mode control unit 325 switches the power mode from normal power mode to power-saving mode. When switching to power-saving mode, the power mode control unit 325 reduces the operating frequency of the CPU 311 from a first operating frequency to a third operating frequency. If the communication unit 322 includes a CPU 323 dedicated to the communication unit, the power mode control unit 325 reduces the operating frequency of the CPU 323 from the second operating frequency to the fourth operating frequency.

[0080] In step S1403, the power mode control unit 325 determines whether the state of the MFP 300 meets the conditions for switching to normal power mode. The process in step S1403 is repeated until the conditions for switching to normal power mode are met. The conditions for switching to normal power mode are, for example, receiving user operation via the operation display unit 302 other than the power button 301. Alternatively, the conditions may be receiving operation via communication from the information processing device 200, etc., via the USB communication unit 308, wireless communication unit 307, or wired communication unit 321, etc. If the conditions for switching to normal power mode are met, the component in the operation control unit 319, USB communication control unit 320, and communication control unit 318 corresponding to the met switching conditions sends a request to the power mode control unit 325 to change the power mode to normal power mode. Upon receiving the request, the power mode control unit 325 determines that the conditions for switching to normal power mode are met and proceeds to step S1404.

[0081] In step S1404, the power mode control unit 325 switches the power mode from power saving mode to normal power mode. When switching to normal power mode, the power mode control unit 325 switches the operating frequency of the CPU 311 from a third operating frequency to a first operating frequency. If the communication unit 322 includes a dedicated CPU 323 for the communication unit, the power mode control unit 325 switches the operating frequency of the CPU 323 from a fourth frequency to a second frequency.

[0082] As described above, in this embodiment, the operating frequency of the CPU is controlled in order to switch the power mode of the MFP 300.

[0083] Next, the user interface screen displayed on the operation display unit 302 of the MFP 300 and the display unit 202 of the information processing device 200 will be described to connect the MFP 300 to the network of the access point 400 using the authentication method of the authentication server 500.

[0084] Figures 11A to 11J This is used to explain when the operation display unit 302 of the MFP 300 is accessed from... Figure 4B The image shown shows the screen changes when the LAN settings 342 option is selected in the settings menu of screen 341. Figure 11A The image shown is 1100 when... Figure 4B The screen shown in 341 is the screen that appears when "LAN settings" 342 is selected, allowing the user to change LAN settings. Figure 11B The image shown, 1110, is when... Figure 11A The screen 1100 shown is the one displayed when "Wireless LAN" 1101 is selected, allowing the user to change the wireless LAN settings. Screen 1110 displays "Wireless LAN Enable / Disable" 1111, "Wireless LAN Settings" 1112, "Wireless LAN Settings Display" 1113, and "Advanced Settings" 1114. "Wireless LAN Enable / Disable" 1111 is the area used to enable or disable the MFP 300's ability to communicate using the wireless LAN. When user operation is performed on the display screen after selecting this area, the state enabling the MFP 300 to communicate using the wireless LAN is either enabled or disabled. Note that when this state is disabled, the MFP 300 does not perform wireless LAN communication or connection.

[0085] Figure 11C The image shown, 1120, is when... Figure 11B The screen 1110 shown is the screen that appears when "Advanced Settings" 1114 is selected, allowing users to change LAN advanced settings. Figure 11D The image shown is 1130 when... Figure 11C The screen shown in 1120 is the screen that appears when "802.1X / EAP Settings" 1122 is selected, allowing the user to change the IEEE 802.1X / EAP settings.

[0086] Figure 11EThe screen 1140 shown is the screen displayed during the search for wireless access points using the authentication method of authentication server 500, which is performed when "EAP Router Search" 1132 is selected in the IEEE 802.1X / EAP settings effective screen 1130. Wireless access point search is the process of searching for access points present around the MFP 300. When in... Figure 11B During the process of selecting "Wireless LAN Settings" 1112 in screen 1110 and performing a search for wireless access points that do not use the authentication method of authentication server 500, the following also appears: Figure 11E The image shown is 1140.

[0087] Figure 11F Screen 1150 is used to display a list of wireless access point identifiers (SSIDs: Service Set Identifiers) as results of the wireless access point search. If "EAP Router Search" 1132 is selected, an EAP router search is performed, and... Figure 11F The screen 1150 shown only displays the SSIDs of wireless access points using the IEEE 802.1X / EAP authentication method. Note that in this embodiment, the access point is, for example, a router, so router search is wireless access point search. If "Wireless LAN Settings" 1112 is executed, only the SSIDs of wireless access points whose authentication method is not IEEE 802.1X / EAP authentication method are displayed.

[0088] Figure 11G The image shown is 1160 when... Figure 11F The screen shown in screen 1150 is the screen displayed during the process of selecting one of the SSIDs 1151, 1152, and 1153 of the wireless access point and performing the process of connecting to the wireless access point. Figure 11H The screen shown, 1170, is when displaying... Figure 11G The screen shown after screen 1160 indicates that the connection attempt with the access point has been completed and the connection has been successful, or the connection has progressed to a predetermined stage.

[0089] Figure 11I The image shown is 1180 when... Figure 11D The screen shown in 1130, displayed when "IEEE 802.1X / EAP Enabled / Disabled" 1131 is where the user can change the enable / disable status of the IEEE 802.1X / EAP setting. Screen 1180 displays "Enabled" 1181 and "Disabled" 1182. When the IEEE 802.1X / EAP setting is disabled, the MFP 300 does not establish a connection to the access point via IEEE 802.1X / EAP. Figure 11J The image shown, 1190, is when... Figure 11DThe screen shown in screen 1130 is the one displayed when "EAP Router Search" 1132 is selected when the IEEE 802.1X / EAP setting is invalid. That is, in this embodiment, if the IEEE 802.1X / EAP setting is invalid, a router search is not performed even if "EAP Router Search" 1132 is selected. Note that the control performed when the IEEE 802.1X / EAP setting is invalid, which prevents connection to an access point through IEEE 802.1X / EAP authentication, is not limited to the control described above. For example, the MFP 300 can perform a router search, but it does not need to display access points with valid IEEE 802.1X / EAP authentication in the list of access points discovered by the router search. Alternatively, access points with valid IEEE 802.1X / EAP authentication can be displayed in the list, but even if the user selects an access point, the MFP 300 does not need to perform the process for connecting to an access point with valid IEEE 802.1X / EAP authentication.

[0090] If the MFP 300 is connected to a network with valid IEEE 802.1X / EAP authentication, authentication is required after configuring the necessary information in the MFP 300. According to this embodiment, reference will be made to... Figure 9 This section provides an overview of the process for connecting the MFP 300 to a network with valid IEEE 802.1X / EAP authentication, formed by access point 400.

[0091] In step S901, the information processing device 200 and the MFP 300 are connected to each other via a connection method that is not certified by IEEE 802.1X / EAP. In step S901, the information processing device 200 and the MFP 300 are connected to a connection method that is not certified by IEEE 802.1X / EAP. Figure 10B The access point 400 shown forms a network where IEEE 802.1X / EAP authentication is invalid, and the network can communicate with each other via access point 400. For example, a network where IEEE 802.1X / EAP authentication is invalid is a network that does not use the authentication method of authentication server 500. The connection between information processing device 200 and MFP 300 can be achieved by connecting information processing device 200 to a network such as... Figure 10C The network shown is formed by the MFP 300 operating as the master device in wireless direct mode. That is, more specifically, in step S901, for example, the MFP 300 accepts a connection request from the information processing device 200 and establishes a connection between the information processing device 200 and the MFP 300 operating in P2P mode.

[0092] In step S902, if the reference Figures 12A to 12GAs described, the information processing device 200 sends IEEE 802.1X / EAP authentication information to the MFP 300. The MFP 300 then uses this information to perform settings related to IEEE 802.1X / EAP authentication. In step S903, as referenced... Figure 13A and Figure 13B As described, the MFP 300 connects to an IEEE 802.1X / EAP-certified network formed by access point 400. In other words, the MFP 300 establishes a connection to an IEEE 802.1X / EAP-certified access point. In step S903, the device connects to a network formed by access point 400. Figure 10A The access point 400 shown forms an IEEE 802.1X / EAP-certified network (using the authentication server 500) and can communicate with each other via access point 400.

[0093] Figures 12A to 12G It is a diagram used to illustrate the changes in the screen in the information processing device 200. Figure 12A This shows an example of the setup screen of the MFP 300 displayed on the information processing device 200. The screen is displayed when a web browser or application operating on the information processing device 200 communicates with an HTTP server operating on the MFP 300. Figure 12A The screen shown is 1200. Note that this can be displayed via the standby response of an HTTP request made in USB communication by the USB communication control unit 320 of the MFP 300. Figure 12A The image shown is 1200.

[0094] If in Figure 12A If "Security Settings" is selected in screen 1200, then the following will be displayed: Figure 12B The image shown is 1210. If in... Figure 12B If "IEEE 802.1X / EAP Settings" is selected in screen 1210, then the following will be displayed: Figure 12C The image shown is 1220.

[0095] If in Figure 12C If "Authentication Method" 1221 is selected in the displayed screen 1220, then the following will be shown. Figure 12D The image shown is 1230. When in... Figure 12D When selecting one of “EAP-TLS” 1231, “EAP-TTLS” 1232, or “PEAP” 1233 in screen 1230, the authentication method to be used for IEEE 802.1X / EAP authentication is set in the MFP 300. If a username is entered... Figure 12DThe "Username" 1234 shown in screen 1230 and the password is entered into "Password" 1235, which sets the username and password to be used for IEEE 802.1X / EAP authentication in MFP 300.

[0096] If the user is Figure 12C In the screen shown 1220, select "Key and Certificate Settings" 1222, and in... Figure 12E If you select "Key and Certificate Upload" in screen 1240, then the following will be displayed: Figure 12F Screen 1250 is shown. In screen 1250, the user can register the certificate to be used for IEEE 802.1X / EAP authentication in MFP 300. If the user... Figure 12F In the "File Selection" 1251 section of screen 1250, selecting a file allows you to choose the certificate to be used during IEEE 802.1X / EAP authentication. Then, if the user enters a password in "Password" 1252 and selects "Upload" 1253 in screen 1250, the certificate and password to be used during IEEE 802.1X / EAP authentication are set in the MFP300.

[0097] If the user is Figure 12E Selecting "Delete Key and Certificate" 1242 in screen 1240 will delete the certificate stored in the MFP 300. Alternatively, if the user... Figure 12E Selecting "Confirm Key and Certificate" in screen 1240 will display the list of certificates stored in the MFP 300.

[0098] If the user is Figure 12C If you select "IEEE 802.1X / EAP Enabled / Disabled" in screen 1220, then the following will be displayed: Figure 12G The image shown is 1260. Figure 12G In screen 1260 shown, the user can enable or disable the IEEE 802.1X / EAP settings of the MFP 300.

[0099] Through the user operations described above, the user can configure the authentication information to be used in IEEE 802.1X / EAP authentication within the MFP 300. When the authentication server 500 uses the configured authentication information to authenticate the MFP 300, the MFP 300 can connect to the network formed by the access point 400 and use the authentication server 500.

[0100] In this example, if the MFP 300 can simultaneously (in parallel) enable multiple communication modes, more specifically, if the MFP 300 maintains connections in both wireless infrastructure mode and P2P mode simultaneously, then even while the MFP 300 is connected to the network using the authentication server 500 on the infrastructure connection side, the MFP 300 can also connect to devices on the P2P connection side. In this case, a device not authenticated by the authentication server 500 can change the settings of the MFP 300 and issue a print request. If the MFP 300 is connected to the network using the authentication server 500 on the infrastructure connection side, the order of communication mode switching is preferably disregarded to prevent devices not authenticated by the authentication server 500 from changing the settings of the MFP 300 and performing print requests.

[0101] The following describes the process for dynamically switching communication modes based on the authentication method in wireless infrastructure mode and the IEEE 802.1X / EAP settings of the MFP 300. This process improves the ease of setting communication modes.

[0102] Figure 13A and Figure 13B This is a flowchart illustrating the setup process of connecting an MFP 300 to a network formed by access point 400 and using authentication server 500. Note that during the execution... Figure 13A and Figure 13B Before the settings shown are processed, it is necessary to... Figure 9 In step S902, authentication information for IEEE 802.1X / EAP authentication is set in the MFP 300. If authentication information is not set in the MFP 300, EAP authentication fails. When, for example, the CPU 311 reads the program stored in the program memory 313 and executes the program, the following is implemented: Figure 13A and Figure 13B The processing shown.

[0103] In step S1301, the CPU 311 of the MFP 300 receives an access point search request. For example, when a user... Figure 11D When “EAP Router Search” is selected in screen 1130, CPU 311 receives an access point search request.

[0104] In step S1302, CPU 311 determines whether the access point search request is an enterprise access point search request. In other words, in step S1302, it determines whether the request is for searching for access points that use the authentication method of authentication server 500. Access points using the authentication method of authentication server 500 will also be referred to as enterprise access points hereinafter. On the other hand, access points that do not use the authentication method of authentication server 500 (e.g., authentication methods using shared keys) will also be referred to as personal access points hereinafter. If the user... Figure 11D If the user selects "EAP Router Search" 1132 in screen 1130, CPU 311 determines that the search is for an enterprise access point. On the other hand, if the user... Figure 11B If "Wireless LAN Settings" 1112 is selected in screen 1110, then CPU 311 determines that the search is not an enterprise access point search. The determination process in step S1302 can be performed based on whether the search request received by MFP 300 via the communication path includes an indication to search for an enterprise access point. If it is determined in step S1302 that the access point search request is an enterprise access point search request, the process proceeds to step S1303; otherwise, the process proceeds to step S1307.

[0105] In step S1303, CPU 311 determines whether the IEEE 802.1X / EAP settings are valid. Based on, for example, in... Figure 11D The settings for "IEEE 802.1X / EAP valid / invalid" 1131 in screen 1130 are processed according to the judgment in step S1303. If the IEEE 802.1X / EAP setting is determined to be valid in step S1303, the process proceeds to step S1305; otherwise, the process proceeds to step S1304. In step S1304, CPU 311 returns a response indicating that the enterprise access point search cannot be performed, and then the process ends. Figure 13A and Figure 13B The process is shown. For example, if the IEEE 802.1X / EAP settings are invalid... Figure 11D If "EAP Router Search" is selected in screen 1130, then the following will be displayed in step S1304: Figure 11J The screen shown is like screen 1190. In step S1305, CPU 311 searches for access points that use the authentication method of authentication server 500, and in step S1306, it stores information indicating that a search for access points that use the authentication method of authentication server 500 has been performed.

[0106] If it is determined in step S1302 that the access point search request is not an enterprise access point search request, then in step S1307, CPU 311 performs a personal access point search. In step S1308, CPU 311 stores information indicating that a personal access point search has been performed. After steps S1306 and S1308, the process proceeds to step S1309.

[0107] In step S1309, CPU 311 displays as follows Figure 11F The list of SSIDs of wireless access points shown on screen 1150 is used as the result of the access point search. In step S1310, CPU 311 accepts the user's selection of the SSID of the access point to be connected.

[0108] In step S1311, the CPU 311 determines whether the wireless direct mode is valid. In this embodiment, since the valid state (on state) / invalid state (off state) of each communication mode is stored as setting information in the MFP 300, the determination process in step S1311 is performed based on, for example, the stored information of each communication mode. If the wireless direct mode is determined to be valid, the process proceeds to step S1312; otherwise, the process proceeds to step S1316.

[0109] In step S1312, CPU 311 determines whether the IEEE 802.1X / EAP settings are valid. Based on, for example, in... Figure 11D The setting content of "IEEE 802.1X / EAP valid / invalid" 1131 in the screen 1130 shown is processed in step S1312. If it is determined that the IEEE 802.1X / EAP setting is valid, the process proceeds to step S1313; otherwise, the process proceeds to step S1316.

[0110] In step S1313, CPU 311 determines whether the access point to be connected is an access point that uses the authentication method of authentication server 500. If it is determined that the access point to be connected is an access point that uses the authentication method of authentication server 500, the process proceeds to step S1314; otherwise, the process proceeds to step S1316. The determination process in step S1313 is performed based on, for example, the content stored in step S1306 or S1308.

[0111] In step S1314, CPU 311 disables the wireless direct mode. Then, in step S1315, CPU 311 enables the wireless infrastructure mode to perform a connection to the network formed by access point 400 using the authentication method of authentication server 500, using the authentication information set in step S902. Note that, more specifically, disabling the wireless direct mode sets, for example, the following state: MFP 300 stops operating as an access point or stops operating as the owner of a Wi-Fi direct group and does not establish Wi-Fi direct connections with other devices.

[0112] In step S1311 and subsequent steps, if the Wireless Direct Mode is active, the IEEE 802.1X / EAP settings are active, and the authentication method of the access point to be connected is the authentication method of the authentication server 500, then the Wireless Direct Mode is deactivated and the Wireless Infrastructure Mode is activated. If the Wireless Infrastructure Mode is active, the MFP 300 is connected to the access point 400 using the authentication information set from the information processing device 200. Note that activating the Wireless Infrastructure Mode is to initiate operation under Wireless Infrastructure Mode.

[0113] If any of the conditions in steps S1311, S1312, and S1313 are not met, then in step S1316, CPU 311 enables the wireless infrastructure mode to connect MFP 300 to access point 400. In this case, the connection in wireless infrastructure mode is a communication connection that does not use the IEEE 802.1X / EAP authentication method. If the condition is not met in step S1312 or step S1313, then both wireless direct mode and wireless infrastructure mode that does not use the IEEE 802.1X / EAP authentication method are enabled. Note that if the process proceeds to step S1315 after selecting the SSID of the access point in step S1310, then... Figure 11G The screen shown, 1160, continues until the attempt to establish a connection with the access point begins in step S1315. If processing progresses to step S1316, the following screen is displayed. Figure 11G The screen shown in 1160 continues until the connection with the access point is confirmed to be successful or unsuccessful in step S1316.

[0114] As described above, the MFP 300 can be connected to a network formed by access point 400 using the authentication method of authentication server 500.

[0115] Next, the process of appropriately switching the power mode of the MFP 300 when performing a connection to a wireless network using the authentication method of the authentication server 500 will be described.

[0116] Figure 15 This is a flowchart illustrating the process of changing the operating frequency of the MFP 300 when it attempts to establish a connection with the access point 400. This is achieved, for example, when the CPU 311 reads a program stored in the program memory 313 and executes that program. Figure 15 The processing is shown below. When the MFP 300's communication mode is wireless infrastructure mode and the MFP 300 is connected to access point 400, the following steps are performed: Figure 15 The process is illustrated. The MFP 300 connects to access point 400 in several scenarios, including when the MFP 300 reconnects after losing communication with access point 400. For example, this occurs when the MFP 300 is operating in power-saving mode, and when a target access point is specified but the MFP 300 is not connected to the access point and a wireless access point search for the target access point is currently being performed (hereinafter referred to as a specific state). Figure 15 The processing shown.

[0117] The description will be executed. Figure 15 The effect obtained by the processing shown is as follows. For example, after receiving the instruction to establish a connection with access point 400 in step S1310, MFP 300 performs a wireless access point search to discover access point 400 as the target access point, and establishes a connection with access point 400. However, if MFP 300 performs a wireless access point search while access point 400 is powered off, MFP 300 cannot discover access point 400. That is, while MFP 300 cannot connect to access point 400, a predetermined time passes, and MFP 300 switches to power-saving mode. Note that in this embodiment, this state corresponds to a specific state. Subsequently, if the power to access point 400 is turned on, access point 400 is discovered through a wireless access point search, but MFP 300 is now operating in power-saving mode. That is, in this case, MFP 300 attempts to establish a connection with access point 400 while operating in power-saving mode.

[0118] Alternatively, although the MFP 300 is connected to the access point 400 while operating in normal power mode, the MFP 300 can subsequently switch to power-saving mode, in which state the connection between the MFP 300 and the access point 400 can be disconnected. In this case, to reconnect to the access point 400 as the target access point, the MFP 300 performs a wireless access point search to discover the access point 400. Note that in this embodiment, this state also corresponds to a specific state. If the access point 400 is discovered through the search, the MFP 300 attempts to establish a connection with the access point 400 in power-saving mode. When the MFP 300 attempts to establish a connection with the access point 400, authentication by the access point 400 may be required. However, if the MFP 300 operates at a reduced frequency in power-saving mode and the encryption key length of the public-key algorithm used in the EAP authentication using the authentication server 500 is long, the access point 400 will take time to authenticate, and authentication timeout may occur. That is, if the MFP300 attempts to establish a connection with access point 400 in power-saving mode, the connection with access point 400 may fail.

[0119] To address this, in this embodiment, under specific conditions, the power mode of the MFP 300 is changed according to the communication mode of the MFP 300 and the authentication method used to connect to the access point, thereby dynamically changing the operating frequency. This arrangement can shorten the time spent on authentication, thus preventing authentication timeouts. The effectiveness of this embodiment is even more pronounced in cases where the MFP includes an embedded processor with limited processing power, or where the processor's operating frequency can be selectively changed from several operating frequency levels rather than steplessly, assuming a high probability of timeouts.

[0120] In step S1501, the CPU 311 discovers the target access point 400 through wireless access point search to determine whether authentication processing with access point 400 can be performed. If it is determined that authentication processing with access point 400 can be performed, the process proceeds to step S1502; otherwise, the wireless access point search continues until authentication processing with access point 400 can be performed, thus repeating the determination process.

[0121] In step S1502, CPU 311 determines whether the IEEE 802.1X / EAP settings of MFP 300 are valid. This can be based on, for example, in... Figure 11D The setting content of "IEEE 802.1X / EAP valid / invalid" 1131 in the screen 1130 shown is processed in step S1502. If it is determined that the IEEE 802.1X / EAP setting is valid, the process proceeds to step S1503; otherwise, the process proceeds to step S1507.

[0122] In step S1503, CPU 311 determines whether the authentication method in the wireless infrastructure mode uses the authentication method of authentication server 500. In other words, this determination process determines whether the performed wireless access point search is searching for access points that support the authentication method of authentication server 500 or searching for access points that do not use the authentication method of authentication server 500. The determination process in step S1503 can be based on, for example, the content stored in steps S1306 or S1308. If it is determined that the authentication method of authentication server 500 is used, the process proceeds to step S1504; otherwise, the process proceeds to step S1507. Note that the authentication method using authentication server 500 is the IEEE 802.1X / EAP authentication method, while the authentication method not using authentication server 500 is an authentication method other than the IEEE 802.1X / EAP authentication method.

[0123] In step S1504, CPU 311 determines that the IEEE 802.1X / EAP authentication method is either the EAP-TLS method or the EAP-TTLS method, or neither the EAP-TLS method nor the EAP-TTLS method. This can be based on, for example, in... Figure 12D The settings in screen 1230 are processed in step S1504. If the authentication method is determined to be either EAP-TLS or EAP-TTLS, the process proceeds to step S1505; otherwise, it proceeds to step S1507. Note that the case where the authentication method is neither EAP-TLS nor EAP-TTLS corresponds to the case where the authentication method is PEAP. This process is performed because the overhead of EAP-TLS or EAP-TTLS authentication is typically greater than that of PEAP authentication.

[0124] In step S1505, CPU 311 determines whether the length of the encryption key for the public-key algorithm used in IEEE 802.1X / EAP authentication is equal to or longer than a first threshold. If the encryption key length is equal to or longer than the first threshold, the process proceeds to step S1506; otherwise, the process proceeds to step S1507. The first threshold is set to, for example, 1024 bits. If the first threshold is set to 1024 bits, for example, if RSA encryption with a 1024-bit or 2048-bit encryption key is used as the public-key algorithm, the process proceeds to step S1506. On the other hand, if ECC (Elliptic Curve Cryptography) encryption with a 256-bit encryption key is used as the public-key algorithm, the process proceeds to step S1507.

[0125] In step S1506, if the power mode of the MFP 300 is power-saving mode, the communication control unit 318 sends a request to the power mode control unit 325 to switch the power mode from power-saving mode to normal power mode. Then, the power mode control unit 325 changes the power mode to normal power mode and changes the operating frequency of the CPU 311, communication control unit 318, or communication unit 322 to the operating frequency of normal power mode. After step S1506, in step S1507, the CPU 311 executes processing for connecting to the access point 400. In the processing for connecting to the access point 400, authentication processing for the access point 400 is performed. If it is determined that any of the conditions in steps S1502 to S1505 are not met, then without changing the operating frequency (i.e., without switching to normal power mode), the processing for connecting to the access point 400 is executed in step S1507 while operating in power-saving mode.

[0126] As described above, according to this embodiment, when establishing a connection with an access point 400 using the authentication method of authentication server 500, the MFP 300 can dynamically change its operating frequency. More specifically, the MFP 300 controls whether to return the power mode to normal power mode based on whether the search for the wireless access point being performed is for an access point that supports the authentication method of authentication server 500 or for an access point that does not support the authentication method of authentication server 500. More specifically, the MFP 300 controls whether to return the power mode to normal power mode based on whether the authentication method using authentication server 500 is the EAP-TLS method or the EAP-TTLS mode. More specifically, the MFP 300 controls whether to return the power mode to normal power mode based on whether the public key algorithm used for the authentication method using authentication server 500 is equal to or greater than a threshold.

[0127] Note that in Figure 15In this process, four conditions in steps S1502, S1503, S1504, and S1505 are determined as conditions for switching from power-saving mode to normal power mode. However, it is not always necessary to determine all conditions. For example, only some of the above conditions may be determined. For instance, as a condition for switching from power-saving mode to normal power mode, only the determination processes in steps S1502 and S1503 may be performed, without performing the determination processes in steps S1504 and S1505. In this case, if the determination in step S1503 is "yes", the process proceeds to step S1506. Alternatively, the switch from power-saving mode to normal power mode can be controlled by determining other factors. For example, the determination process in step S1503 may be performed by determining whether the target access point supports the authentication method of the authentication server 500. Then, if it is determined that the target access point is an access point that supports the authentication method of the authentication server 500, control can be executed to switch from power saving mode to normal power mode, and if the target access point is not an access point that supports the authentication method of the authentication server 500, the switch from power saving mode to normal power mode will not be executed.

[0128] [Second Embodiment]

[0129] In the second embodiment, the differences from the first embodiment will be described below. The first embodiment has already described the arrangement for appropriately switching the power mode of the MFP 300 when the MFP 300 is connected to the access point 400 using the authentication method of the authentication server 500. This embodiment will describe the arrangement for appropriately switching the power mode of the MFP 300 when the authenticator begins authentication.

[0130] In the communication system 100 according to this embodiment, an authentication device 400 (authenticator) is used instead of... Figure 1 The access point 400 is shown, and the authentication server 500 is a RADIUS server. That is, in addition to the router, the authentication device 400 also includes an L2 switch and a hub.

[0131] Figure 16 This is a flowchart illustrating the process of changing the operating frequency of the MFP 300 when it attempts to establish a connection with the authentication device 400. This is achieved, for example, when the CPU 311 reads a program stored in the program memory 313 and executes that program. Figure 16 The processing is shown below. When the MFP 300's communication mode is either wireless infrastructure mode or wired communication mode and the MFP300 is connected to the authentication device 400, the following steps are performed: Figure 16The process is illustrated. The MFP 300 connects to the authentication device 400 in several scenarios, including when the MFP 300 reconnects after communication with the authentication device 400 has been disconnected. For example, this occurs when the MFP 300 is operating in power-saving mode, and when a target access point has been specified but the MFP 300 is not connected to the access point and a wireless access point search for the target access point is currently being performed. Figure 16 The processing shown.

[0132] In step S1601, CPU 311 determines whether authentication processing with authentication device 400 can be performed. If the communication mode of MFP 300 is wireless infrastructure mode, the determination can be made based on the fact that MFP 300 sends a device search request and receives a device search response from authentication device 400. If the communication mode of MFP 300 is wired communication mode, the determination can be made based on the fact that MFP 300 and authentication device 400 are connected via a LAN cable to establish a communicable state. If it is determined that authentication processing with authentication device 400 can be performed, the process proceeds to step S1602; otherwise, the determination process is repeated until authentication processing with authentication device 400 can be performed.

[0133] Steps S1602 to S1604 are the same as steps S1502 to S1504, and their descriptions will be omitted.

[0134] In step S1605, CPU 311 determines whether the communication mode of MFP 300 is wireless infrastructure mode, and whether the length of the encryption key of the public key algorithm used in IEEE 802.1X / EAP authentication is equal to or longer than a first threshold. If it is determined that the length of the encryption key is equal to or longer than the first threshold, the process proceeds to step S1606; otherwise, the process proceeds to step S1608.

[0135] In step S1608, CPU 311 determines whether the communication mode of MFP 300 is a wired infrastructure mode, and whether the length of the encryption key of the public key algorithm used in IEEE 802.1X / EAP authentication is equal to or longer than a second threshold, wherein the second threshold is equal to or greater than a first threshold. If it is determined that the length of the encryption key is equal to or longer than the second threshold, the process proceeds to step S1606; otherwise, the process proceeds to step S1607.

[0136] The first threshold is set to, for example, 1024 bits. If the first threshold is set to 1024 bits, for example, if an RSA encryption with a key length of 1024 bits or 2048 bits is used as the public key algorithm, the process proceeds to step S1606. On the other hand, if an ECC encryption with a key length of 256 bits is used as the public key algorithm, the process proceeds to step S1607. The second threshold is set to, for example, 4096 bits. If the second threshold is set to 4096 bits, for example, if an RSA encryption with a key length of 4096 bits is used as the public key algorithm, the process proceeds to step S1606. On the other hand, if an RSA encryption with a key length of 1024 bits or 2048 bits is used as the public key algorithm, the process proceeds to step S1607.

[0137] In step S1606, if the power mode of the MFP 300 is power-saving mode, the communication control unit 318 sends a request to the power mode control unit 325 to switch the power mode from power-saving mode to normal power mode. Then, the power mode control unit 325 changes the power mode to normal power mode and changes the operating frequency of the CPU 311, communication control unit 318, or communication unit 322 to the operating frequency of normal power mode. After step S1606, the authentication process of the authentication device 400 is performed in step S1607. If it is determined that any of the conditions in steps S1602 to S1604 and S1608 are not met, the authentication process of the authentication device 400 is performed in step S1607 while operating in power-saving mode without changing the operating frequency (i.e., without switching to normal power mode).

[0138] As described above, according to this embodiment, when authentication of the authentication device 400 using the authentication method of RADIUS server 500 begins, MFP 300 can dynamically change the operating frequency.

[0139] Note that in Figure 16 In this process, four conditions in steps S1602, S1603, S1604, and S1605 are judged as conditions for switching from power-saving mode to normal power mode. However, it is not always necessary to judge all conditions. For example, only some of the above conditions may be judged. For instance, as a condition for switching from power-saving mode to normal power mode, only the judgment processes in steps S1602 and S1603 may be performed, without performing the judgment processes in steps S1604 and S1605. In this case, if the judgment in step S1603 is "yes", the process proceeds to step S1606. Alternatively, by judging other factors, the switch from power-saving mode to normal power mode can be controlled.

[0140] Other embodiments

[0141] The embodiments of the present invention can also be implemented by providing software (programs) that perform the functions of the above embodiments to a system or device via a network or various storage media, and the computer or central processing unit (CPU) or microprocessor unit (MPU) of the system or device reads out and executes the program.

[0142] While the invention has been described with reference to exemplary embodiments, it should be understood that the invention is not limited to the disclosed exemplary embodiments. The scope of the appended claims should be accorded the broadest interpretation to cover all such modifications and equivalent structures and functions.

Claims

1. A communication device comprising: A control unit is configured to: control the transition of the communication device's state to a second state, starting with processing used for connection between the communication device and a first external device supporting authentication processing using a first authentication method employing an authentication server, while the communication device is operating in a first state, wherein in the first state the communication device's processor operates at a first operating frequency, and in the second state the communication device's processor operates at a second operating frequency higher than the first operating frequency; and control the execution of authentication using the first authentication method via the first external device while the communication device is operating in the second state. The control unit controls the connection between the communication device and a second external device that supports authentication using a second authentication method different from the first authentication method, based on the communication device operating in the first state. The control unit then performs authentication using the second authentication method via the second external device without transitioning the communication device to the second state.

2. The communication device according to claim 1, wherein, The first state is a state in which power is supplied to a first number of units of the communication device, and the second state is a state in which power is supplied to a second number of units of the communication device that is greater than the first number.

3. The communication device according to claim 1, wherein, The first state is a state in which a first clock is supplied to the processor of the communication device, and the second state is a state in which a second clock, which is faster than the first clock, is supplied to the processor of the communication device.

4. The communication device according to claim 1, wherein, The first state is a state in which no power is supplied to the printing unit of the communication device, and the second state is a state in which power is supplied to the printing unit of the communication device.

5. The communication device according to claim 1, wherein, The authentication process using the first authentication method is an authentication process that conforms to the IEEE 802.1X standard.

6. The communication device according to claim 5, wherein, Based on the connection process used between the first external device and the communication device in the state where the communication device is operating in the first state, and the authentication process using the first authentication method in the authentication process that supports the IEEE 802.1X standard, the state of the communication device is transitioned to the second state. Based on the connection process between the second external device and the communication device in the state where the communication device is operating in the first state, which supports authentication processing using the second authentication method in accordance with the IEEE 802.1X standard, authentication using the second authentication method is performed via the second external device in the state where the communication device is operating in the first state without changing the state of the communication device to the second state.

7. The communication device according to claim 6, wherein, The first authentication method is one of the EAP-TLS method (EAP-Transport Layer Security) and the EAP-TTLS method (EAP-Tunneled TLS). The second authentication method is the PEAP method, also known as the Protected EAP method.

8. The communication device according to claim 1, wherein, The second authentication method is an authentication method that does not use the authentication server.

9. The communication device according to claim 1, wherein, Based on the processing used for connection between the first external device and the communication device, which supports authentication processing using an encryption key of a first length and the first authentication method, while the communication device is operating in the first state, the processor of the communication device is switched to the second state, where the processor operates at the second operating frequency. Based on the connection between the first external device and the communication device, which supports authentication using a second-length encryption key shorter than the first length and utilizing the first authentication method, the authentication using the first authentication method is performed via the first external device while the communication device is operating in the first state, without transitioning the state of the communication device to the second state.

10. The communication device according to claim 9, wherein, The encryption key of the first length is one of a 1024-bit encryption key and a 2048-bit encryption key, and The second-length encryption key is a 256-bit encryption key.

11. The communication device according to claim 9, wherein, The authentication process using the first authentication method with an encryption key of the first length is an authentication process using RSA encryption as the public key algorithm, and The authentication process using the first authentication method with the second-length encryption key is an authentication process that uses ECC encryption, i.e., elliptic curve cryptography, as the public key algorithm.

12. The communication device according to claim 1, further comprising a search unit configured to wirelessly search for external devices wirelessly connected to the communication device in the first state. in, The first external device and the second external device are each external devices discovered by the search unit.

13. The communication device according to claim 1, wherein, The first external device and the second external device are each one of the access point and the authenticator.

14. The communication device according to claim 1, wherein, Based on the processing used for wireless connection between the first external device and the communication device, which supports authentication processing using an encryption key of a first length and the first authentication method, while the communication device is operating in the first state, the processor of the communication device is switched to a second state where the processor operates at the second operating frequency. Based on the wireless connection between the first external device and the communication device, which supports authentication using a second-length encryption key shorter than the first length and utilizing the first authentication method, while the communication device is operating in the first state, authentication using the first authentication method is performed via the first external device without transitioning the communication device's state to the second state, while the communication device is operating in the first state. Based on the processing used for wired connection between the first external device and the communication device, which supports authentication processing using a third-length encryption key longer than the first length and utilizing the first authentication method, while the communication device is operating in the first state, the processor of the communication device is switched to the second state, where the processor operates at the second operating frequency. Based on the processing used for the wired connection between the first external device and the communication device, which supports authentication processing using a fourth-length encryption key shorter than the third length and utilizing the first authentication method, while the communication device is operating in the first state, authentication using the first authentication method is performed via the first external device without transitioning the state of the communication device to the second state, while the communication device is operating in the first state.

15. The communication device according to claim 14, wherein, The encryption key of the first length is one of a 1024-bit encryption key and a 2048-bit encryption key. The second-length encryption key is a 256-bit encryption key. The third-length encryption key is a 4096-bit encryption key, and The fourth-length encryption key is one of a 1024-bit encryption key and a 2048-bit encryption key.

16. The communication device according to claim 14, wherein, The operating frequency of the processor of the communication device can be selectively changed from several levels of operating frequency.

17. The communication device of claim 1, further comprising at least one of a printing unit configured to perform printing and a scanning unit configured to perform scanning.

18. A control method for a communication device, comprising: Control is performed to transition the state of the communication device to a second state, starting with processing used for connection between the communication device and a first external device supporting authentication processing using a first authentication method employing an authentication server, based on the communication device operating in a first state. In the first state, the processor of the communication device operates at a first operating frequency, and in the second state, the processor of the communication device operates at a second operating frequency higher than the first operating frequency. Control is performed to perform authentication using the first authentication method via the first external device while the communication device is operating in the second state. Specifically, control is performed to begin with a process used for connection between a second external device and the communication device that supports authentication processing using a second authentication method different from the first authentication method, based on the state in which the communication device is operating in the first state, so that authentication using the second authentication method is performed via the second external device without changing the state of the communication device to the second state.

19. A non-transitory computer-readable storage medium storing a program that, when executed by a computer, implements the control method according to claim 18.

20. A computer program product comprising a program that, when executed by a computer, implements the control method according to claim 18.

Images