Communication device, control method, and storage medium

Abstract

The present application provides a communication device, a control method and a storage medium. Based on receiving a first operation for searching an access point that makes a first authentication method valid, information about an access point that supports the first authentication method is displayed, and information about an access point that supports a second authentication method different from the first authentication method is not displayed, and based on receiving a second operation for searching an access point that makes the second authentication method different from the first authentication method valid, information about an access point that supports the second authentication method is displayed, and information about an access point that supports the first authentication method is not displayed, the second operation being different from the first operation.

Description

Technical Field

[0001] This invention relates to communication devices, control methods, and storage media. Background Technology

[0002] Known technologies relate to wireless connections between communication devices and access points that support specific authentication methods.

[0003] Japanese Patent Application Publication No. 2021-100159 discusses a technique that determines the type of authentication method supported by an access point to which a communication device is to be wirelessly connected, and appropriately diagnoses the status of the wireless connection between the communication device and the access point based on the type of authentication method.

[0004] On the other hand, there have been calls for further improvements in the ease of use of technologies for wireless connections between communication devices and access points that support specific authentication methods. Summary of the Invention

[0005] According to an aspect of the present invention, a communication device includes: a receiving unit configured to receive a search instruction for an access point capable of communicating with the communication device; and a display unit configured to display information about the access point on the communication device, wherein, based on receiving a first operation for searching for an access point that enables a first authentication method, information about access points supporting the first authentication method is displayed on the display unit, but information about access points supporting a second authentication method different from the first authentication method is not displayed, and wherein, based on receiving a second operation for searching for an access point that enables a second authentication method different from the first authentication method, information about access points supporting the second authentication method is displayed on the display unit, but information about access points supporting the first authentication method is not displayed, the second operation being different from the first operation.

[0006] Further features of the invention will become apparent from the following description of exemplary embodiments with reference to the accompanying drawings. Attached Figure Description

[0007] Figure 1 This is a system structure diagram.

[0008] Figure 2 This is an external view of the communication device.

[0009] Figure 3 This is a structural diagram of a communication device.

[0010] Figures 4A to 4C Each shows an example of an operation display unit for a communication device.

[0011] Figure 5 It is an external view of the information processing device.

[0012] Figure 6 This is a structural diagram of an information processing device.

[0013] Figure 7 This is a diagram of the access point.

[0014] Figure 8 This is a diagram of the authentication server's structure.

[0015] Figure 9 This is a flowchart related to the setting and processing of the communication device.

[0016] Figures 10A to 10C These are diagrams illustrating the connection methods of the information processing device and the communication device, respectively.

[0017] Figures 11A to 11I Each shows an example of an operation display unit related to the setting process of the communication device.

[0018] Figures 12A to 12N Each shows an example of an operation display unit related to the setting process of the communication device.

[0019] Figure 13 This is a flowchart related to the setting and processing of the communication device. Detailed Implementation

[0020] In the following description, exemplary embodiments of the invention will be illustrated with reference to the accompanying drawings. It should be understood that the scope of the invention also includes variations and modifications to the exemplary embodiments described below, made appropriately based on the general knowledge of those skilled in the art without departing from the spirit of the invention. All features among the plurality of features described in the exemplary embodiments are not always necessary for the invention, and the plurality of features can be combined arbitrarily. Furthermore, in the drawings, identical or similar constructions are assigned the same reference numerals, and redundant descriptions will be omitted. Each of the embodiments of the invention described below may be implemented individually, or as a combination of multiple embodiments or features thereof, when necessary or when a combination of elements or features from a single embodiment is advantageous in a single embodiment.

[0021] Reference Figure 1The description includes an information processing device 200, a communication device 300, an access point 700, and an authentication server 800 in a communication system according to this exemplary embodiment. In this system, multiple devices are configured to communicate wirelessly with each other. In this exemplary embodiment, a smartphone is exemplified as an information processing device, but the information processing device is not limited thereto. For example, various devices such as personal computers (PCs), mobile terminals, tablet terminals, personal digital assistants (PDAs), and digital cameras can be used as information processing devices. In this exemplary embodiment, a multifunction printer (hereinafter referred to as an MFP) that can provide copying, faxing, and printing services is exemplified as a communication device, but the communication device is not limited thereto. Various devices can be used, as long as they can communicate wirelessly with the information processing device. For example, a communication device can be a printing device (printer). If the communication device is a printing device, inkjet printers, full-color laser beam printers, and monochrome printers can be used as communication devices. Furthermore, not only printers can be used, but also copiers, fax machines, mobile terminals, smartphones, laptop PCs, tablet terminals, PDAs, digital cameras, music playback devices, televisions, and smart speakers. Furthermore, multi-functional peripherals with multiple functions such as copying, faxing, and printing can be applied. Smart speakers are devices that issue processing commands to devices within the same network based on user voice input and notify the user of information retrieved via the network in response to user voice input. Additionally, single-function printers (hereinafter, SFPs) with a single function can also be applied.

[0022] Access point 700 is a communication device that is configured separately from information processing device 200 and MFP (communication device) 300 (configured externally to information processing device 200 and MFP 300) and operates as a base station device for a wireless local area network (WLAN). Access point 700 is sometimes referred to as external access point 700 or external wireless base station.

[0023] Communication devices with WLAN communication capabilities can communicate via access point 700 in WLAN infrastructure mode. Wireless infrastructure connection refers to the connection established between access point 700 and information processing device 200, and wireless infrastructure mode can be rephrased as a mode in which a communication device communicates with information processing device 200 via access point 700 connected to that communication device. Access point 700 communicates with communication devices (authenticated communication devices) permitted to connect to access point 700 and relays wireless communication between those communication devices and other communication devices. Access point 700 also connects to a wired LAN communication network and relays communication between communication devices connected to the wired LAN communication network and other communication devices wirelessly connected to access point 700.

[0024] In a network constructed by access point 700, where the authentication method uses an authentication server (RADIUS server) 800, access point 700 performs access control by authenticating communication devices connected to the network in cooperation with authentication server 800. Communication devices connected to the network constructed by access point 700 are restricted from communicating with devices other than authentication server 800 until authenticated by access point 700. This configuration establishes a highly secure connection. Access point 700 can also support authentication methods without using an authentication server. Authentication methods using and without an authentication server will be described in detail below.

[0025] The authentication server 800 is a separate device from the information processing device 200, MFP 300, and access point 700, and centrally manages authentication information. For example, the authentication server 800 can perform authentication processing conforming to the Institute of Electrical and Electronics Engineers (IEEE) 802.1X standard. In this exemplary embodiment, the authentication server 800 collaborates with the access point 700 to authenticate the target terminal or device and performs access control on the terminal or device based on the authentication result. Here, the access point 700 corresponds to the authenticator in IEEE 802.1X. Additionally, the information processing device 200 and MFP 300 correspond to the requester in IEEE 802.1X. The authentication server 800 then performs authentication using, for example, the Extensible Authentication Protocol-Transport Layer Security (EAP-TLS), EAP Tunneled TLS (EAP-TTLS), and Protected EAP (PEAP) methods from the IEEE 802.1X standard. The EAP-TLS method is an authentication method using the TLS handshake protocol and employs server and client certificates for authentication. The EAP-TTLS method is an authentication method that uses the TLS handshake protocol and employs a server certificate, username, and password for authentication. In the PEAP method, a username and password are used for authentication. Sometimes, the information used in these types of authentication, conforming to the IEEE 802.1X standard, is collectively referred to as "authentication information."

[0026] Information processing device 200 and MFP 300 use their respective WLAN communication functions to establish a wireless infrastructure connection via external access point 700, or to conduct wireless communication via a direct connection that does not involve external access point 700. Direct connection includes Wi-Fi direct connection. And Software Access Point (SoftAP) mode. In other words, the above communication is achieved through a direct connection conforming to the IEEE 802.11 series standards. The information processing device 200 and MFP 300 can use WLAN communication to perform processing suitable for multiple printing services, which will be described in detail below.

[0027] Figure 2 This is a perspective view showing an example of the external structure of the MFP 300. The MFP 300 includes an operation display unit (operation panel) 302, a print sheet insertion port 303, a print sheet discharge port 304, an original platen 305, and an original cover (upper platen cover) 306. A hardware key, a power button 301, is provided on the housing of the MFP 300 for use when turning the MFP 300 on and off. The operation display unit 302 includes a display and buttons for use when operating the MFP 300. For example, the operation display unit 302 includes: multiple keys such as character input keys, cursor keys, confirm keys, and cancel keys; light-emitting diodes (LEDs); and a light source for a liquid crystal display (LCD). The operation display unit 302 is configured to receive user input when activating various functions in the MFP 300 or when changing various settings. For example, a touch panel display is used as the operation display unit 302.

[0028] The printing sheet insertion port 303 is an insertion port for inserting sheets of any size. Sheets placed in the printing sheet insertion port 303 are fed one by one to the printing unit and printed thereon. The printed sheets are discharged from the printing sheet discharge port 304. The original platen 305 is, for example, a transparent glass plate, and is used when reading the image on the placed original using a scanning function. The original cover 306 is a cover that presses the original against the original platen 305 to prevent it from moving upwards away from the original platen 305 when reading the image using a scanning function. The original cover 306 also shields the main body of the MFP 300 from external light.

[0029] The MFP 300 also features communication capabilities via WLAN or wired LAN. In this exemplary embodiment, in addition to an antenna for wireless communication, the MFP 300 is also equipped with a communication unit 321 for wired LAN. The MFP 300 is also equipped with a Universal Serial Bus (USB) communication unit 308, which can communicate with an external information processing device 200 via USB connection.

[0030] Figure 3This is a block diagram illustrating an example of the construction of the MFP 300. In addition to a motherboard 310 for controlling the entire device, the MFP 300 also includes a wireless communication unit 307 and a USB communication unit 308. The motherboard 310 includes a central processing unit (CPU) 311, an internal bus 312, a program memory 313, a data memory 314, a printing unit 316, a scanning unit 317, a communication control unit 318, an operation control unit 319, and a USB communication control unit 320. In practice, the CPU 311 executes programs stored in the program memory 313 or the data memory 314 to implement the processes described below as to be performed by the MFP 300.

[0031] CPU 311, program memory 313, and data memory 314 are respectively a microprocessor unit, read-only memory (ROM), and random access memory (RAM). In this exemplary embodiment, CPU 311, program memory 313, and data memory 314 are connected to each other via a bus cable forming an internal bus 312. CPU 311 performs computational processing to implement the various functions described in the exemplary embodiment based on the control program stored in program memory 313 and the contents of data memory 314.

[0032] For example, CPU 311 can control scanning unit 317 to read the image on the original document and store the image (image data) in image memory 315 in data memory 314. CPU 311 can control printing unit 316 to print the image stored in image memory 315 onto a recording medium. CPU 311 can control USB communication unit 308 via USB communication control unit 320 and communicate with external information processing device 200 via USB connection. CPU 311 can control operation control unit 319 to receive information indicated by operation input via power button 301 or operation display unit 302. CPU 311 can also control operation control unit 319 to display the status and function selection menu of MFP 300 on operation display unit 302.

[0033] The wireless communication unit 307 is configured to provide WLAN communication functionality and, for example, functions similar to those of the WLAN unit 201 of the information processing device 200. More specifically, the wireless communication unit 307 transmits data packets converted from data using a method conforming to a predetermined standard to other devices, converts data packets from other devices back into raw data, and outputs the raw data to the CPU 311. The wireless communication unit 307 is configured to perform data (data packet) communication in WLAN systems conforming to the IEEE 802.11 standard family (IEEE 802.11a / b / g / n / ac / ax), but it may also be able to perform communication in WLAN systems conforming to other standards. In this example, the wireless communication unit 307 can perform communication in both the 2.4 GHz band and the 5 GHz band. The wireless communication unit 307 can also perform WFD-based communication, communication in SoftAP mode, and communication via a wireless infrastructure connection, which will be described in detail below. The information processing device 200 and MFP 300 can perform WFD-based direct wireless communication, and the wireless communication unit 307 can have SoftAP functionality or group ownership functionality. More specifically, the wireless communication unit 307 can construct a direct-connection network and determine the channel to be used for the direct connection.

[0034] The wired LAN communication unit 321 is configured to perform communication in a wired manner. For example, the wired LAN communication unit 321 can perform data (packet) communication in a wired LAN (Ethernet) system conforming to the IEEE 802.3 series standards. In wired communication performed using the wired LAN communication unit 321, wired mode communication can be performed. Here, the wired LAN communication unit 321 is connected to the motherboard 310 via a bus cable forming an internal bus 312. When performing communication via a wired connection, the MFP 300 can communicate with other communication devices via a wired interface such as the wired LAN communication unit 321. When the MFP 300 performs communication via a wired connection, communication via wireless infrastructure connections is restricted. Data (packet) communication in a wired LAN (Ethernet) conforming to the IEEE 802.3 series standards can be performed via a wired connection. When the MFP 300 is operating with IEEE 802.1X / EAP enabled, and when the MFP 300 is connected to a wired LAN constructed by access point 700, the MFP 300 performs authentication compliant with the IEEE 802.1X standard.

[0035] Figures 4A to 4C The schematic diagram illustrates a construction example of the operation display unit 302 of the MFP 300.

[0036] Figure 4AAn example is shown where the operation display unit 302 includes a touch panel display 401 as an operation display screen. The user can activate the MFP 300 by touching the power button 301. When the MFP 300 is activated, a main screen (the top layer of the menu screen) is displayed on the touch panel display 401 as a screen for user input. For example, the main screen includes a copy area 405, a scan area 406, and a print area 407. The copy area 405 receives execution instructions for copy processing. The scan area 406 receives execution instructions for scan processing. The print area 407 receives execution instructions for print processing. The main screen also includes a status display area 402, a connection setting mode area 403, and a setting area 404. The status display area 402 indicates the infrastructure connection or direct connection settings of the MFP 300 and the connection status of the MFP 300. The user can start operation in connection setting mode at any time using the connection setting mode area 403. Additionally, the user can use the setting area 404 to change various settings.

[0037] Figure 4B An example is shown in the following case: the operation display unit 302 includes a small LCD 408 as an operation display screen and various hardware keys 409 to 416 as an operation unit.

[0038] When the MFP 300 is activated, the main screen is displayed on LCD 408. The user can manipulate the cursor displayed on LCD 408 by pressing cursor movement buttons 411 and 412. The user only needs to press the OK button 414 to perform the operation and the back button 413 to return to the previous menu screen. A QR code containing information for direct connection to the MFP 300 can also be displayed by pressing the Quick Response (QR) button 409. .

[0039] The codes displayed on the LCD 408 are not limited to QR codes, and only two-dimensional codes are required.

[0040] By reading the QR code from the information processing device 200, the information processing device 200 and the MFP 300 are directly connected and become capable of wireless communication with each other. The connection setup mode can also be initiated by pressing the connection setup mode button 410. The MFP 300 can be connected to the access point 700 by sending connection information to the MFP 300 using the information processing device 200. If the stop button 415 is pressed while the MFP 300 is performing various types of processing, the various types of processing are canceled. Furthermore, by pressing the copy start button 416, the user can perform printing by scanning the original on the MFP 300.

[0041] It can be changed appropriately. Figure 4BThe layout shown. For example, as Figure 4C As shown, the layout and position of the cursor movement buttons 411 and 412 can be changed, and cursor operations can be performed in the left and right directions.

[0042] Next, Figure 5 An example of the external structure of an information processing device 200 is shown. In this exemplary embodiment, the information processing device 200 is a smartphone and includes a display unit 202, an operation unit 203, and a power button 204. The power button 204 is configured as a hardware button for turning the power of the information processing device 200 on or off. In this exemplary embodiment, the display unit 202 is a display with an LCD system display mechanism. As another exemplary embodiment, LEDs may be used to display information. The information processing device 200 may include a function that outputs information via sound in association with or in place of the display unit 202. The operation unit 203 includes a touch panel or a hardware key such as a key or button, and is configured to detect user input.

[0043] In this exemplary embodiment, a touch panel display is used as both the display unit 202 and the operation unit 203. In other words, the display unit 202 and the operation unit 203 are implemented by a single hardware component. For example, the display unit 202 is used to display button icons and a soft keyboard, and the operation unit 203 is used to detect user input to these button icons and the soft keyboard. As another exemplary embodiment, the display unit 202 and the operation unit 203 may be configured as separate hardware components.

[0044] The information processing apparatus 200 also includes a WLAN unit 201 that can provide wireless LAN (WLAN) communication capabilities. For example, the WLAN unit 201 is configured to perform data (packet) communication in a WLAN system conforming to the IEEE 802.11 series of standards (IEEE 802.11a / b / g / n / ac / ax, etc.). The WLAN unit 201 can also perform communication in WLAN systems conforming to other standards. In this example, the WLAN unit 201 can perform communication in both the 2.4 GHz and 5 GHz frequency bands. The WLAN unit 201 can also perform WFD-based communication, SoftAP mode communication, and communication via wireless infrastructure connections, which will be described in detail below.

[0045] Figure 6 The illustration shows a construction example of an information processing apparatus 200. The information processing apparatus 200 includes: (BT) unit 205, mainboard 211 for main control of the device itself, and WLAN unit 201 for WLAN communication.

[0046] In this exemplary embodiment, the motherboard 211 includes a CPU 212, a ROM 213, a RAM 214, an image memory 215, and a data conversion unit 216. The motherboard 211 also includes a telephone unit 217, a Global Positioning System (GPS) 219, a camera unit 221, non-volatile memory 222, a data accumulation unit 223, a speaker unit 224, and a power supply unit 225. These functional units in the motherboard 211 are interconnected via a system bus 228 and managed by the CPU 212. The motherboard 211 and the WLAN unit 201 are connected via a dedicated bus 226, and the motherboard 211 and the BT unit 205 are also connected via a dedicated bus 226.

[0047] The CPU 212 serves as the system control unit for controlling the various components of the information processing device 200. The CPU 212 loads the program stored in the ROM 213 into the RAM 214 and executes the program to achieve [the desired functionality]. Figure 6 The functions in the information processing device 200 illustrated herein, and the processes described below as processes to be performed by the information processing device 200.

[0048] ROM 213 stores the embedded operating system (OS) program and the control program to be executed by CPU 212. By executing the corresponding program under the embedded OS, CPU 212 performs software control such as scheduling or task switching.

[0049] RAM 214 includes static RAM (SRAM). RAM 214 stores various types of data, such as variables for program control, user-registered settings, and management data for managing the information processing device 200. RAM 214 can be used as various work buffers.

[0050] Image memory 215 includes memory such as dynamic RAM (DRAM).

[0051] Image memory 215 temporarily stores image data received via WLAN unit 201 and image data read from data accumulation unit 223, and enables the image data to be processed by CPU 212.

[0052] The non-volatile memory 222 includes, for example, memory such as flash memory, and retains the stored data even when the power to the information processing device 200 is turned off.

[0053] The memory configuration of the information processing device 200 is not limited to the examples described above. For example, the image memory 215 and RAM 214 can be configured as a common memory, and data backup can be performed using the data accumulation unit 223. DRAM has been described as an example of image memory 215, but other storage media such as hard disk drives (HDDs) or non-volatile memory can be used.

[0054] In addition to data conversion such as color conversion or image conversion, the data conversion unit 216 can also perform analysis on data in various formats.

[0055] Telephone unit 217 controls the telephone line. By processing voice data input or output via speaker unit 224, telephone unit 217 enables telephone communication.

[0056] GPS 219 receives radio waves transmitted from satellites and obtains location information such as the current latitude and longitude of the information processing device 200.

[0057] The camera unit 221 has the function of electronically recording and encoding images input through the lens. Image data obtained by capturing images through the camera unit 221 is stored in the data accumulation unit 223.

[0058] The speaker unit 224 performs voice input-output for telephone functions and control for functions such as alarm notifications.

[0059] The power supply unit 225 includes a battery and controls the power supply to the various components in the device. Examples of power states include: a battery depletion state where the remaining battery level has reached a reference value or less; a power-off state where the power button 204 has not been pressed; a power-on state (activated state) where the power button 204 has been pressed; and a power-saving state where the power consumption of the various components is suppressed.

[0060] The display unit 202 electronically controls the display content and performs control for receiving user input and displaying the operation status and state of the MFP 300.

[0061] In response to an operation input received from the user, the operation unit 203 outputs an electrical signal corresponding to the operation input to the CPU 212. (Refer to the above...) Figure 5 The touch panel display is used as both the display unit 202 and the operation unit 203.

[0062] The information processing device 200 can use the WLAN unit 201 for wireless communication and data communication with other devices such as the MFP 300. For example, the information processing device 200 converts data into data packets and sends the data packets to other external devices. In addition, the information processing device 200 receives data packets from other external devices via the WLAN unit 201, converts the data packets into raw data, and outputs the raw data to the CPU 212.

[0063] The construction of motherboard 211 is not limited to the examples described above. For example, the functions of motherboard 211 to be implemented by CPU 212 can be implemented by processing circuitry such as application-specific integrated circuits (ASICs). In other words, the functions can be implemented by either hardware or software.

[0064] Next, Figure 7 An example of the construction of an access point (AP) 700 with wireless LAN access point functionality is shown. The access point 700 includes: a mainboard 710 for system control, a wireless LAN unit 716, a wired LAN unit 718, and operation buttons 720. The mainboard 710 includes a CPU 711, a program memory 713, a data memory 714, a wireless LAN communication control unit 715, a wired LAN communication control unit 717, an operation unit control circuit 719, a terminal access control unit 721, and a channel changing unit 722. These components are connected to each other via an internal bus 712 in a manner enabling communication. In practice, the CPU 711 executes a program stored in the program memory 713 or the data memory 714 to implement the processes described below as to be performed by the access point 700.

[0065] The CPU 711 performs calculations based on the control program stored in the program memory 713 and the data stored in the data memory 714. The CPU 711 can communicate wirelessly with other communication and information processing devices via wireless LAN communication control unit 715 to control wireless LAN unit 716. The CPU 711 can also communicate wiredly with other communication and information processing devices via wired LAN communication control unit 717 to control wired LAN unit 718. The CPU 711 can receive operation input from the user using operation buttons 720 via control operation unit control circuit 719.

[0066] To protect the network, the terminal access control unit 721 authenticates communication devices connected to the encrypted access point 700. Wi-Fi Protected Access (WPA) and WPA2 are known as encryption standards. In response to the need for higher security, a standard called WPA3 emerged. Furthermore, authentication methods include the PSK method using a pre-shared key (PSK) and the SAE method using Simultaneous Authentication of Equals (SAE). Authentication methods using these methods are considered personal methods. As another authentication method, the IEEE 802.1X authentication method (IEEE 802.1X method) exists, which uses an authentication server operating according to the Extensible Authentication Protocol (EAP) as the authentication protocol. Because EAP is used in the IEEE 802.1X authentication method, it is described as the IEEE 802.1X / EAP authentication method.

[0067] In the following text, IEEE 802.1X / EAP will sometimes be simply referred to as "802.1X / EAP". Additionally, the IEEE 802.1X / EAP authentication method will also be described as the EAP method. The communication channel authenticated in this manner can be changed or switched by the channel changing unit 722. As another authentication method, there is also Wi-Fi CERTIFIED Enhanced Open, which can protect the network even in public places. TM Methods. In this exemplary embodiment, the authentication method without using an authentication server is the PSK method or the SAE method, while the authentication method using an authentication server is the EAP method. The authentication method without using an authentication server will also be referred to as the personal method, while the authentication method using an authentication server will also be referred to as the enterprise method.

[0068] Next, Figure 8 An example of the construction of an authentication server 800 is shown. The authentication server 800 includes a motherboard 811 for system control and a communication unit 801 for wired LAN communication.

[0069] The motherboard 811 includes a CPU 812, ROM 813, RAM 814, image memory 815, non-volatile memory 822, data accumulation unit 823, and communication control unit 826. The motherboard 811 also includes a display unit 802 and an operation unit 803. These components are interconnected via a system bus (bus cable) 828. Furthermore, the motherboard 811 is connected to the communication unit 801 via the communication control unit 826.

[0070] The CPU 812 serves as the system control unit that controls the entire authentication server 800. The CPU 812 loads the program stored in ROM 813 into RAM 814 and executes the program to realize the processing of the authentication server 800.

[0071] ROM 813 stores the embedded OS program and the control program to be executed by CPU 812. By executing the corresponding program under the embedded OS, CPU 812 performs software control such as scheduling or task switching.

[0072] RAM 814 includes SRAM. RAM 814 stores various types of data, such as variables for program control, user-registered settings, and management data for managing the authentication server 800. RAM 814 can be used as a various work buffer.

[0073] Image memory 815 includes memory such as DRAM. Image memory 815 temporarily stores image data received via communication unit 801 and image data read from data accumulation unit 823, and makes the image data available for processing by CPU 812.

[0074] The data accumulation unit 823 may include, for example, a storage medium such as a solid-state drive (SSD), and retains the stored data even when the power to the authentication server 800 is turned off. As another example of the data accumulation unit 823, other storage media such as HDDs or non-volatile memory may be used.

[0075] Similar to motherboard 211, the functions of motherboard 811 described here can be achieved through either hardware or software.

[0076] The display unit 802 electronically controls the display content and performs control for receiving user input and display status.

[0077] In response to an operation input received from the user, the operation unit 803 outputs an electrical signal corresponding to the operation input to the CPU 812.

[0078] The authentication server 800 can use the communication control unit 826 to communicate with the access point 700 (or other devices) via the communication unit 801. For example, the authentication server 800 converts data into data packets and sends the data packets to other external devices.

[0079] The communication unit 801 receives data packets from other external devices, converts the data packets into raw data, and outputs the raw data to the CPU 812. For example, the communication unit 801 can perform data (data packet) communication in a wired LAN (Ethernet) system conforming to the IEEE 802.3 series standards.

[0080] The following describes a wireless infrastructure connection. In a wireless infrastructure connection, communication between communication devices (e.g., information processing device 200 and MFP 300) is connected to an external access point 700 used to control the network, and communication between the communication devices is performed via access point 700. In other words, communication between communication devices is performed via a network constructed through access point 700. The MFP 300, operating in the wireless infrastructure connection, operates as a station connected to or communicating with access point 700.

[0081] In a wireless infrastructure connection, each device (e.g., MFP 300) searches for access point 700 by sending a probe request. If each device receives a probe response as beacon information sent by access point 700, each device displays the Service Set Identifier (SSID) of access point 700 included in the received probe response and accepts the selection of access point 700. Then, a connection with access point 700 is established by sending a connection request to the access point 700 selected by the user. Thus, communication between information processing device 200 and MFP 300 via access point 700 becomes feasible.

[0082] Multiple communication devices can connect to different access points 700. In this case, communication between the communication devices becomes feasible by transmitting data between different APs. In this case, it is sufficient to use Wi-Fi compliant commands and parameters as the commands and parameters to be sent and received in communication between the communication devices.

[0083] In addition, access point 700 determines the frequency band and frequency channel to be used in communication with other devices. For example, access point 700 can select the frequency band to be used and the frequency channel to be used in the selected frequency band from the 5 GHz band and the 2.4 GHz band.

[0084] Here, when the information processing device 200 and MFP 300 connect to the network constructed by access point 700, authentication is performed by access point 700 in some cases. Therefore, after performing settings for authentication according to the authentication method supported by the network constructed by access point 700, the information processing device 200 and MFP 300 connect to the network constructed by access point 700. As mentioned above, the authentication method includes a personal method. Furthermore, as an authentication method supported by both wireless LAN and wired LAN, there is an EAP method that uses an authentication server supporting IEEE 802.1X / EAP to authenticate communication devices connected to the network. In addition to the authentication processing performed during the wireless connection process as described above, authentication processing is sometimes performed between the information processing device and the printing device during communication performed via the established wireless connection.

[0085] As described above, if the MFP 300 searches for the access point 700 by sending a device probe request and receives a device probe response as beacon information from the access point 700, the MFP 300 displays the SSID included in the received device probe response.

[0086] However, because the conventional MFP 300 displays all the SSIDs of the discovered access points 700, users cannot easily identify the valid authentication method and the authentication methods supported by the access points 700 corresponding to the displayed SSIDs. Therefore, when a user wirelessly connects to the MFP 300, the user cannot easily select the access point 700 from the displayed SSIDs that supports the desired authentication method.

[0087] In view of the above, in this exemplary embodiment, the MFP 300 displays in a distinguishable manner: a setup screen to be operated when establishing a wireless connection of the MFP 300 using a specific authentication method, and a setup screen to be operated when establishing a wireless connection of the MFP 300 using an authentication method other than the specific authentication method.

[0088] In other words, the MFP 300 distinguishes between the procedures for receiving operations from the user when establishing a wireless connection using a specific authentication method and the procedures for receiving operations from the user when establishing a wireless connection using an authentication method other than the specific authentication method.

[0089] Then, when operating the setup screen to establish a wireless connection to the MFP 300 using a specific authentication method, the MFP 300 only displays the SSID of the discovered access point 700 that indicates the access point 700 that is valid for the specific authentication method. In other words, the MFP 300 does not display the SSID of the access point 700 that is valid for authentication methods other than the specific authentication method. When operating the setup screen to establish a wireless connection to the MFP 300 using an authentication method other than the specific authentication method, the MFP 300 only displays the SSID of the discovered access point 700 that indicates the access point 700 that is valid for authentication methods other than the specific authentication method. In other words, the MFP 300 does not display the access point 700 that is valid for the specific authentication method.

[0090] Using this configuration, it is unlikely that all SSIDs indicating the discovered access point 700 will be displayed, and the user can easily identify the authentication method supported by the access point 700 corresponding to the displayed SSID. Therefore, when the user wirelessly connects to the MFP 300, the user can easily select the access point 700 that enables the desired authentication method.

[0091] In this exemplary embodiment, the specific authentication method is either the IEEE 802.1X / EAP authentication method or a personal method as described above. When the specific authentication method is the IEEE 802.1X / EAP authentication method, the authentication method other than the specific authentication method is a personal method. When the specific authentication method is a personal method, the authentication method other than the specific authentication method is the IEEE 802.1X / EAP authentication method. Hereinafter, the process of wirelessly connecting the MFP 300 to the access point 700 that enables the IEEE 802.1X / EAP authentication method is referred to as the EAP setup process. The process of wirelessly connecting the MFP 300 to the access point 700 that supports the personal method will be referred to as the personal setup process.

[0092] Figure 9 This is a flowchart illustrating the process executed by the MFP 300 during EAP setup. For example, the CPU 311 loads a program stored in ROM into RAM and executes that program. Figure 9 The flowchart shown illustrates the processing. Additionally, in response to a predetermined operation being performed on the operation display unit 302, the process begins... Figure 9 The flowchart shown illustrates the processing.

[0093] When the MFP 300 is connected to the access point 700 that enables the IEEE 802.1X / EAP authentication method, the EAP setup process begins after the information required for authentication is set in the MFP 300. The processes in steps S901 and S902 instruct the process of setting the information required for authentication in the MFP 300, and the process in step S903 instructs the EAP setup process.

[0094] In step S901, the MFP 300 establishes a connection with the information processing device 200 using a connection method that does not use the IEEE 802.1X / EAP authentication method. Specifically, for example, in... Figure 10C In the configuration shown, the MFP 300 responds to a connection request from the information processing device 200 and establishes a direct connection with the information processing device 200. As another configuration, such as... Figure 10B As shown, by connecting to access point 700 via MFP 300, which does not use the IEEE 802.1X / EAP authentication method (using the personal method), communication with information processing device 200 can be performed via access point 700.

[0095] In step S902, the MFP 300 receives information about the IEEE 802.1X / EAP authentication method from the information processing device 200 and uses this information to perform settings related to the IEEE 802.1X / EAP authentication method. Information about the IEEE 802.1X / EAP authentication method is sent via the connection established in step S901.

[0096] Information regarding the IEEE 802.1X / EAP authentication method is based on user operations performed on the setup screen displayed on the information processing device 200. The following will refer to... Figures 11A to 11I Provide a detailed description.

[0097] Figures 11A to 11G Examples of setup screens for the MFP 300 to be displayed on the information processing device 200 are shown respectively. The setup screen is displayed by communication between a web browser or application operating on the information processing device 200 and a Hypertext Transfer Protocol (HTTP) server operating on the MFP 300. The screen described below may be displayed based on a pending response to an HTTP request in USB communication with the USB communication control unit 320 using the MFP 300.

[0098] Figure 11A The initial screen of the settings menu is displayed. The initial screen shows MFP status 1101, main settings 1102, LAN settings 1103, and security settings 1104.

[0099] exist Figure 11AWhen security setting 1104 is selected on the initial screen shown, the following is displayed: Figure 11B The screen shown displays Secure Sockets Layer / Transport Layer Security (SSL / TLS) setting 1111 and IEEE 802.1X / EAP setting 1112.

[0100] exist Figure 11B When the IEEE 802.1X / EAP setting 1112 is selected on the screen shown, the following is displayed: Figure 11C The screen shown displays the authentication method 1121, key and certificate settings 1122, and IEEE 802.1X / EAP validity / invalidation settings 1123.

[0101] exist Figure 11C When authentication method 1121 is selected on the screen shown, the following is displayed: Figure 11D The screen shown displays: authentication methods EAP-TLS 1131, EAP-TTLS 1132, and PEAP 1133 (as types of IEEE 802.1X / EAP authentication methods), a username (login name) input field 1134, and a password input field 1135. The MFP 300 sets the selected authentication method among authentication methods 1131 to 1133 as the authentication method to be used during authentication using the IEEE 802.1X / EAP authentication method. Additionally, the MFP 300 sets the username and password entered into input fields 1134 to 1135 as the username and password to be used during IEEE 802.1X / EAP authentication.

[0102] Furthermore, when registering the key and certificate to be used when performing authentication using the IEEE 802.1X / EAP authentication method into the MFP 300, Figure 11C On the screen shown, select key and certificate settings 1122. Afterwards, through... Figure 11E On the screen shown, select "Upload Key and Certificate 1141" to view. Figure 11F The screen shown is as follows. On the screen, select the file as the certificate and enter it into input field 1161, enter the password as the key into input field 1162, and then select upload 1163. This completes the upload (sending) of the key and certificate to the MFP 300.

[0103] Through Figure 11E On the screen shown, selecting the key and certificate deletion setting 1142 will delete the certificate stored in the MFP300. (This can be done by...) Figure 11E Selecting the confirmation setting 1143 for the key and certificate on the screen will display a list of certificates stored in the MFP 300.

[0104] Through Figure 11C The screen shown displays the IEEE 802.1X / EAP enable / disable setting 1123. Figure 11G The screen shown allows you to enable or disable the IEEE 802.1X / EAP authentication method of the MFP 300 by selecting "Enable" for setting 1151 or "Disable" for setting 1152. Enabling the IEEE 802.1X / EAP authentication method in the MFP 300 means that both authentication using the IEEE 802.1X / EAP method and authentication using the personal method are feasible. Disabling the IEEE 802.1X / EAP authentication method in the MFP 300 means that authentication using the IEEE 802.1X / EAP method is not feasible, but authentication using the personal method is feasible.

[0105] In step S902, by Figures 11A to 11G On the screen shown, the user operates the MFP 300, which receives information about the authentication method to be used in the IEEE 802.1X / EAP authentication process and performs EAP settings within the MFP 300 based on this information. In other words, the authentication information includes: the authentication method to be used in IEEE 802.1X / EAP authentication, the username and password to be used, and information from the keys and certificates used for authentication that are suitable for various authentication methods conforming to the IEEE 802.1X standard. By authenticating this information about authentication with the authentication server 800, the MFP 300 can connect to a network that supports the IEEE 802.1X / EAP authentication method and is constructed by the access point 700.

[0106] In this exemplary embodiment, the effective state (ON state) or ineffective state (OFF state) of the connection state between the MFP 300 and the information processing device 200 is managed. For example, in the MFP 300, effective connection switching and communication control can be performed by controlling the wireless communication unit 307 or the wired LAN communication unit 321.

[0107] In step S903, MFP 300 connects to the network that enables the IEEE 802.1X / EAP authentication method and has been configured by access point 700. In other words, MFP 300 establishes a connection with the access point that enables the IEEE 802.1X / EAP authentication method. Therefore, as Figure 10A As shown, in a network that supports the IEEE 802.1X / EAP authentication method, which requires cooperation between the authentication server 800 and the access point 700, communication is performed between the information processing device 200 and the MFP 300.

[0108] As described above, in a wireless infrastructure connection, if the MFP 300 searches for access point 700 and receives a device probe response as beacon information, it displays the SSID of access point 700 included in the device probe response. Then, in step S903, the access point 700 that the MFP 300 connects to is the access point 700 selected by the user from the access points 700 displayed on the MFP 300's screen. Here, Figures 12A to 12H This shows the screen to be displayed in the personal settings process. Figures 12I to 12M This shows the screen to be displayed in the EAP settings process.

[0109] First, the personal settings processing to be performed by the user will be described with reference to the screen that will be displayed in the personal settings processing.

[0110] Figure 12A The image shown is 1200 when... Figure 4B The screen shown on LCD 408 is the one displayed when selecting LAN settings, and it allows for changes to the LAN settings. Screen 1200 displays Wireless LAN Settings 1201, Wired LAN Settings 1202, Wireless Direct Settings 1203, and Public Settings 1204. In Personal Settings, the user first selects Wireless LAN Settings 1201 on screen 1200.

[0111] Figure 12B Screen 1205 is the screen displayed when wireless LAN settings 1201 are selected on screen 1200, and it is a screen where changes to the wireless LAN settings can be made. Screen 1205 includes wireless LAN enabled / disabled 1206, wireless LAN settings 1207, wireless LAN settings display 1208, and advanced settings 1209. The user selects wireless LAN settings 1207 on screen 1205.

[0112] Figure 12C The screen 1210 shown is the Wi-Fi settings screen displayed when wireless LAN settings 1207 are selected on screen 1205. Wi-Fi settings screen 1210 includes: manual connection settings 1211 on the printer (manual connection settings for printers) for performing router searches, and other connection methods 1212. These other connection methods 1212 include AirStation One-Touch Security System (AOSS), Wi-Fi Protected Settings (WPS) (PIN code assignment method, button method), connection operations from external devices such as smartphones, and direct assignment of SSIDs. The user selects manual connection settings 1211 or another connection method 1212 on screen 1210.

[0113] Figure 12DThe screen 1213 shown is the screen displayed when the user selects the printer to use manual connection setting 1211 or other connection method 1212 on screen 1210, and it is a screen indicating that a search for access point 700 is being performed.

[0114] Figure 12E Screen 1214 is the screen that transitions from screen 1213 after a search for access point 700 is performed. The SSIDs displayed as indicators of the search results for the discovered access point 700 are SSID 1215, SSID 1216, and SSID 1217, corresponding to the strings "WPA-XXX001", "WPA2-YYY001", and "WPA3-PSK002", respectively. SSID 1215, SSID 1216, and SSID 1217 are the SSIDs of the access point 700 for which the personal method is valid. A manual SSID input button (not shown) can be configured on screen 1214. When the manual SSID input button is pressed, input fields for the SSID and password are displayed. When the user enters the SSID and password, a search for the access point 700 corresponding to the entered SSID is performed. The user selects the specific SSID they wish to use on screen 1214. For example, a user selects an SSID from the displayed SSIDs 1215, 1216, and 1217.

[0115] Figure 12F Screen 1218 shown is the password input screen displayed after selecting a specific SSID on screen 1214. Screen 1218 displays an input field 1219 for entering the password and an OK button 1220 to display the entered password. The user enters the password corresponding to the selected SSID into the input field 1219 on screen 1218.

[0116] When the password is entered in the input field 1219 on screen 1218 and the OK button 1220 is selected, the following will be displayed: Figure 12G The image shown is 1221.

[0117] Figure 12H The screen shown, 1222, is the screen that appears after the MFP 300 has been connected to the selected access point 700, and the screen transitions from screen 1221 to this screen.

[0118] Next, the EAP setup process to be performed by the user will be described with reference to the screen that will be displayed during the EAP setup process. The user... Figure 12B On screen 1205, select Advanced Settings 1209.

[0119] Figure 12IScreen 1223 shown is the advanced settings screen displayed when advanced settings 1209 are selected on screen 1205. Screen 1223 includes Transmission Control Protocol / Internet Protocol (TCP / IP) settings 1224 and IEEE 802.1X / EAP settings 1225.

[0120] Figure 12J The screen 1226 shown is the IEEE 802.1X / EAP settings screen displayed when IEEE 802.1X / EAP settings 1225 are selected on screen 1223. The IEEE 802.1X / EAP settings screen 1226 includes IEEE 802.1X / EAP authentication method validity / invalidation settings 1227, searching for EAP-compliant routers 1228, and final authentication result confirmation 1229. As mentioned above, although the IEEE 802.1X / EAP authentication method validity / invalidation settings can also be set on the operation panel 302 of the MFP 300, they can also be displayed on the display unit 202 of the information processing device 200. Figure 11G The screen shown displays the settings for enabling / disabling EAP. On screen 1226, the user selects to search for router 1228 that conforms to EAP.

[0121] Figure 12K The screen 1230 shown is the screen displayed when searching for EAP-compliant routers 1228 is selected on screen 1226, and it shows that a search for access point 700 that supports IEEE 802.1X / EAP is being performed.

[0122] Figure 12L Screen 1231 is shown as follows: After the search for access point 700 is completed, the screen transitions from screen 1230 to this screen. The SSIDs displayed as indicators of the search results for the discovered access point 700 are SSID 1232, SSID 1233, and SSID 1234, corresponding to the strings "SSIDWPA-EAP001", "WPA2-EAP005", and "WPA3-EAP003", respectively. SSID 1232, SSID 1233, and SSID 1234 are the SSIDs of access point 700 that enable the IEEE 802.1X / EAP authentication method. A manual SSID input button (not shown) can be configured on screen 1231. When the manual SSID input button is pressed, input fields for the SSID and password are displayed. When the user enters the SSID and password, a search for access point 700 corresponding to the entered SSID is performed. The user selects a specific SSID on screen 1231. For example, a user selects an SSID from the displayed SSIDs 1232, 1233, and 1234.

[0123] Figure 12M The screen shown 1235 is the screen displayed when a specific SSID is selected on screen 1231.

[0124] Figure 12N The screen shown, 1236, is the screen that appears after the MFP 300 is connected to the access point 700, and the screen changes from screen 1235 to this screen.

[0125] As mentioned above, when users perform personal settings processing, the user... Figure 12B On screen 1205, select Wireless LAN Settings 1207, and on screen 1210, select Printer Manual Connection Settings 1211 or other connection methods 1212. Using this configuration, the MFP 300 displays only the SSID of the access point 700 that supports the Personal Access Method on screen 1214, and does not display the SSIDs of other access points 700 besides the one supporting the Personal Access Method on screen 1214. In other words, the MFP 300 does not display the SSID of the access point 700 that supports the EAP method on screen 1214.

[0126] When the user is performing EAP settings, the user selects Advanced Settings 1209 on screen 1205. Figure 12I On screen 1223, select 802.1X / EAP settings 1225, and on screen 1226, select search for routers compliant with EAP 1228. Using this configuration, the MFP300 displays only the SSID of access point 700 that supports the EAP method on screen 1231, and does not display the SSIDs of other access points 700 that support the EAP method on screen 1231. In other words, the MFP300 does not display the SSID of access point 700 that supports the personal method on screen 1231.

[0127] Next, we will refer to Figure 13 The flowchart describes the process to be performed by the MFP 300 in the EAP setting process or personal setting process of the MFP 300. For example, the CPU 311 loads the program stored in ROM into RAM and executes the program. Figure 13 The flowchart shown above illustrates the processing. (Refer to the above...) Figure 9 As stated above, before performing the EAP configuration process, the authentication information to be used in the IEEE 802.1X / EAP authentication method needs to be preset in the MFP 300. If the authentication information is not set in the MFP 300, the IEEE 802.1X / EAP authentication method may fail.

[0128] In step S1301, CPU 311 receives a search command (AP search request command) from the access point 700 issued by the user. Specifically, the search command from access point 700 instructs the user to... Figure 12C On screen 1210, the user selects manual connection settings for the printer (1211) or other connection methods (1212), or on screen 1226, the user selects to search for routers that comply with EAP (1228).

[0129] In step S1302, CPU 311 determines whether the user has accessed the setup screen (UI screen) to be operated when establishing a wireless connection to the MFP 300 using the IEEE 802.1X / EAP authentication method as a specific authentication method. Specifically, when the user... Figure 12J If, on screen 1226, the user selects to search for router 1228 that conforms to EAP, then the setup screen to be operated is determined if the user has operated to establish a wireless connection to the MFP 300 using the IEEE 802.1X / EAP authentication method (set to "Yes" in step S1302). When the user... Figure 12CIf the printer is set to manual connection 1211 or other connection method 1212 on screen 1210, it is determined that the user has not operated the setup screen to be operated when establishing a wireless connection to the MFP300 using the IEEE 802.1X / EAP authentication method (in step S1302, this is "No"). In other words, if the user has issued a search command for access point 700 that enables the IEEE 802.1X / EAP authentication method, it is determined in step S1302 that the user has operated the setup screen to be operated when establishing a wireless connection to the MFP300 using the IEEE 802.1X / EAP authentication method (in step S1302, this is "Yes"). If the user has issued a search command for access point 700 that enables authentication methods other than IEEE 802.1X / EAP authentication, it is determined in step S1302 that the user has not operated the setup screen to be operated when establishing a wireless connection to the MFP300 using the IEEE 802.1X / EAP authentication method (in step S1302, this is "No"). If it is determined that the user has operated the setup screen to be operated when establishing a wireless connection to the MFP 300 using the IEEE 802.1X / EAP authentication method ("Yes" in step S1302), the process proceeds to step S1303. If it is determined that the user has not operated the setup screen to be operated when establishing a wireless connection to the MFP 300 using the IEEE 802.1X / EAP authentication method ("No" in step S1302), the process proceeds to step S1313. The setup screen to be operated is determined when it is determined that the user has operated the wireless connection to the MFP 300 using the IEEE 802.1X / EAP authentication method ("Yes" in step S1302), and a similar setup screen is displayed on the information processing device 200, and the MFP 300 has received information via the communication path instructing the user to operate the setup screen to be operated when establishing a wireless connection using the IEEE 802.1X / EAP authentication method. Furthermore, the settings screen to be operated can be determined when the user has operated to establish a wireless connection for the MFP300 using the IEEE 802.1X / EAP authentication method ("Yes" in step S1302) and when an instruction to search using the IEEE 802.1X / EAP authentication method has been received from the information processing device 200.

[0130] In step S1303, CPU 311 determines whether the IEEE 802.1X / EAP authentication method is valid. Specifically, CPU 311 determines whether... Figure 11GThe screen displayed shows the operation performed to enable the IEEE 802.1X / EAP authentication method of the MFP 300, and whether settings for enabling the IEEE 802.1X / EAP authentication method were executed in the MFP 300. If it is determined that the IEEE 802.1X / EAP authentication method is enabled ("Yes" in step S1303), the process proceeds to step S1305. If it is determined that the IEEE 802.1X / EAP authentication method is disabled ("No" in step S1303), the process proceeds to step S1304. Figure 11G or Figure 12J The screen shown renders the IEEE 802.1X / EAP authentication method of the MFP 300 invalid. Figure 12J On the screen shown, the router 1228, which searches for EAP-compliant devices, may turn gray and enter an unselectable state. In this case, no start command is issued for the setup process of the MFP 300 using the IEEE 802.1X / EAP authentication method, and it cannot be determined in step S1302 that the user has operated the setup screen to be operated when establishing a wireless connection to the MFP300 using the IEEE 802.1X / EAP authentication method. Therefore, the processing in steps S1303 to S1312 is omitted.

[0131] In step S1304, CPU 311 notifies that a search for access point 700, which enables the IEEE 802.1X / EAP authentication method, is not feasible. In this case, as... Figure 11H As shown, screen 1171 is displayed to prompt the user to enable the IEEE 802.1X / EAP authentication method of the MFP 300. Even if the IEEE 802.1X / EAP authentication method is disabled, the CPU 311 can still perform a search for access point 700. In this case, even if the list of access points 700 found through the search includes access points 700 that enable the IEEE 802.1X / EAP authentication method, the CPU 311 can avoid displaying access point 700. Alternatively, if an access point 700 that enables the IEEE 802.1X / EAP authentication method has been found, the CPU 311 displays the found access point 700, but even if the user has selected the found access point 700, the MFP 300 can avoid performing connection processing with the access point 700 that enables the IEEE 802.1X / EAP authentication method.

[0132] In step S1305, CPU 311 performs a search for neighboring access points 700. During the search, not only access points 700 that support the IEEE 802.1X / EAP authentication method can be found, but also access points 700 that do not support the IEEE 802.1X / EAP authentication method (supporting the personal method) can be found. Then, CPU 311 extracts one or more access points 700 that support the IEEE 802.1X / EAP authentication method from the one or more access points found through the search. Alternatively, CPU 311 performs exclusion (filtering) on ​​one or more access points 700 that support the personal method. In step S1305, the display... Figure 12K The image shown is 1230.

[0133] In step S1306, CPU 311 stores an indication that the information extracted from access point 700 that enables the IEEE 802.1X / EAP authentication method has been executed.

[0134] In step S1307, CPU 311 displays a list of one or more access points 700 that support the IEEE 802.1X / EAP authentication method, extracted in step S1305, on the operation display unit 302. At this time, CPU 311 does not display the SSIDs of access points 700 that enable authentication methods other than IEEE 802.1X / EAP on the operation display unit 302. For example, it displays... Figure 12L The screen shown is 1231, which indicates a list of SSIDs of access point 700 that enable the IEEE 802.1X / EAP authentication method.

[0135] For example, in step S1308, CPU 311 determines whether the user has performed an operation. Figure 12L The SSID manual input button (not shown) is displayed when a scrolling operation is performed on screen 1231. If it is determined that the user has operated the SSID manual input button ("Yes" in step S1308), the process proceeds to step S1309. If it is determined that the user has not operated the SSID manual input button ("No" in step S1308), the process proceeds to step S1311.

[0136] In step S1309, CPU 311 displays input fields for SSID and password (not shown) and receives input of SSID and password from the user.

[0137] In step S1310, CPU 311 performs another search for neighboring access points 700 and determines whether the discovered access points 700 include the access point 700 corresponding to the input SSID. At this time, CPU 311 can determine whether the access points 700 discovered through the search performed in step S1305 include the access point 700 corresponding to the input SSID, without performing another search. Then, if the access point 700 includes the access point 700 corresponding to the input SSID, CPU 311 connects to the access point 700 corresponding to the input SSID.

[0138] If access point 700 does not include an access point 700 corresponding to the input SSID, CPU 311 can notify that no access point 700 corresponding to the input SSID has been found and end the processing of this flowchart. If an access point 700 corresponding to the SSID input in step S1309 has been found, but the access point 700 corresponding to the input SSID is not an access point 700 that makes the IEEE 802.1X / EAP authentication method valid, CPU 311 does not connect to the access point 700 corresponding to the input SSID. Then, CPU 311 can notify that the connection has failed.

[0139] If it is determined that the user has not activated the SSID manual input button ("No" in step S1308), in the subsequent step S1311, the CPU 311 receives a selection of any access point 700 from the list displayed on the operation display unit 302. Specifically, for example, the CPU 311 receives a selection of any access point 700 from the list displayed on the operation display unit 302. Figure 12L The screen 1231 shows the selection of one of the SSIDs 1232 to 1234 for the access point 700 that enables the IEEE 802.1X / EAP authentication method.

[0140] In step S1312, CPU 311 connects to access point 700, which corresponds to the selected SSID and enables the IEEE 802.1X / EAP authentication method. In step S1312, display... Figure 12M The screen shown is 1235, and it displays the connection to access point 700 after the connection has been completed. Figure 12N The image shown is 1236.

[0141] The processing in steps S1313 to S1320 is the processing to be performed when the user has issued a search command for the access point 700 that makes the personal method valid.

[0142] In step S1313, CPU 311 performs a search for neighboring access points 700. During the search, not only access points 700 supporting the personal method can be discovered, but also access points 700 that do not support the personal method (supporting the IEEE 802.1X / EAP authentication method) can be discovered. Then, CPU 311 extracts one or more access points 700 supporting the personal method from the one or more access points discovered through the search. Alternatively, CPU 311 performs exclusion (filtering) on ​​one or more access points 700 supporting the IEEE 802.1X / EAP authentication method. In step S1313, the display... Figure 12D The image shown is 1213.

[0143] In step S1314, CPU 311 stores an indication that the information retrieved from access point 700 supporting personal methods has been performed.

[0144] In step S1315, CPU 311 displays a list of one or more access points 700 supporting the personal method extracted in step S1313 on the operation display unit 302. At this time, CPU 311 does not display the SSIDs of the access points 700 that enable authentication methods other than the personal method on the operation display unit 302. For example, it displays... Figure 12E The screen shown is 1214, which indicates a list of SSIDs of the access point 700 that enables the personal method.

[0145] For example, in step S1316, CPU 311 determines whether the user has performed an operation. Figure 12E The SSID manual input button (not shown) is displayed when a scrolling operation is performed on screen 1214. If it is determined that the user has operated the SSID manual input button ("Yes" in step S1316), the process proceeds to step S1317. If it is determined that the user has not operated the SSID manual input button ("No" in step S1316), the process proceeds to step S1319.

[0146] In step S1317, CPU 311 displays input fields for SSID and password (not shown) and receives input of SSID and password from the user.

[0147] In step S1318, CPU 311 performs another search for neighboring access points 700 and determines whether the discovered access points 700 include the access point 700 corresponding to the input SSID. At this time, CPU 311 can determine whether the access points 700 discovered through the search performed in step S1313 include the access point 700 corresponding to the input SSID, without performing another search. Then, if the access point 700 includes the access point 700 corresponding to the input SSID, CPU 311 connects to the access point 700 corresponding to the input SSID.

[0148] If access point 700 does not include an access point 700 corresponding to the input SSID, CPU 311 can notify that no access point 700 corresponding to the input SSID was found and end the processing of this flowchart. If an access point 700 corresponding to the SSID input in step S1317 has been found, but the access point 700 corresponding to the input SSID is not an access point 700 that supports the personal method, CPU 311 does not connect to the access point 700 corresponding to the input SSID. Then, CPU 311 can notify that the connection has failed.

[0149] If it is determined that the user has not activated the SSID manual input button ("No" in step S1316), in the subsequent step S1319, the CPU 311 receives a selection of any access point 700 from the list displayed on the slave operation display unit 302. Specifically, for example, the CPU 311 receives a selection of any access point 700 from the list displayed on the slave operation display unit 302. Figure 12E The screen 1214 shows a selection of one of the SSIDs 1215 to 1217 for the access point 700 that supports the personal method. Then, the following is displayed when an SSID is selected: Figure 12F On screen 1218, CPU 311 receives the password corresponding to the selected SSID and inputs it into input field 1219.

[0150] In step S1320, CPU 311 connects to access point 700, which supports personal methods and corresponds to the selected SSID. In step S1320, display... Figure 12G The screen shown is 1221, and it displays the connection to access point 700 after the connection has been established. Figure 12H The image shown is 1222.

[0151] As described above, in this exemplary embodiment, it is unlikely that all SSIDs indicating the discovered access point 700 will be displayed, and the user can easily identify the authentication method supported by the access point 700 corresponding to the displayed SSID. Therefore, when the user wirelessly connects to the MFP 300, the user can easily select the access point 700 for which the desired authentication method is valid.

[0152] In the above construction of this exemplary embodiment, in Figure 13 In step S1305, regardless of whether access point 700 is the access point 700 that enables the IEEE 802.1X / EAP authentication method, CPU 311 performs a search for adjacent access points 700. Then, in step S1305, CPU 311 performs extraction of access points 700 that enable the IEEE 802.1X / EAP authentication method. In step S1307, based on the extraction, CPU 311 displays access points 700 that enable the IEEE 802.1X / EAP authentication method and does not display access points 700 that enable authentication methods other than IEEE 802.1X / EAP. However, if a search request for access point 700 is received in step S1301, CPU 311 may perform a search for access points 700 that enable the IEEE 802.1X / EAP authentication method. Then, CPU 311 stores information indicating whether an instruction has been issued to search for access points 700 that enable the IEEE 802.1X / EAP authentication method. CPU 311 then displays only access points 700 that enable the IEEE 802.1X / EAP authentication method and can avoid displaying access points 700 that enable authentication methods other than IEEE 802.1X / EAP. The same applies to the individual method.

[0153] In this exemplary embodiment, a configuration has been described that begins based on a search command received from the access point 700 by the user. Figure 13 The flowchart shown illustrates the processing. Specifically, the following construction has been described: [The user has already...] Figure 12C If the printer is set to manual connection 1211 or other connection method 1212 on screen 1210, or if the user has already selected to search for EAP-compliant routers 1228 on screen 1226, then flowchart processing begins. Alternatively, if the user has already selected printer set to manual connection 1211 or other connection method 1212, then only the corresponding... Figure 13 The process described in steps S1313 to S1320 of the flowchart. If the user has already selected to search for EAP-compliant routers 1228 on screen 1226, the process can begin only for routers corresponding to EAP. Figure 13 The process described in steps S1303 to S1312 of the flowchart. In other words, different procedures can be started based on whether the user performed an operation that instructed the access point 700 to be valid for the IEEE 802.1X / EAP authentication method or an operation that instructed the access point 700 to be valid for the personal method.

[0154] In addition, Figure 12A When the LAN settings shown are configured with Wireless Direct enabled and the IEEE 802.1X / EAP authentication method is active, Wireless Direct connection may sometimes be unavailable. Therefore, it can be displayed that... Figure 11I The screen shown in 1181 indicates that a direct wireless connection is unavailable.

[0155] Other embodiments

[0156] The present invention can also be implemented as follows: a computer of a system or apparatus that reads and executes computer-executable instructions (e.g., one or more programs) recorded on a storage medium (which may also be more fully referred to as a "non-transitory computer-readable storage medium") to perform one or more functions of the above-described embodiments, and / or, the system or apparatus includes one or more circuits (e.g., application-specific integrated circuits (ASICs)) for performing one or more functions of the above-described embodiments; and a method executed by the computer of the system or apparatus, for example, reading and executing the computer-executable instructions from the storage medium to perform one or more functions of the above-described embodiments, and / or, controlling the one or more circuits to perform one or more functions of the above-described embodiments. The computer may include one or more processors (e.g., a central processing unit (CPU), a microprocessor unit (MPU)) and may include separate computers or a network of separate processors to read and execute the computer-executable instructions. The computer-executable instructions may be provided to the computer, for example, from a network or a storage medium. The storage medium may include, for example, a hard disk, random access memory (RAM), read-only memory (ROM), the memory of a distributed computing system, or an optical disc (such as a compact disc (CD), a digital versatile optical disc (DVD), or a Blu-ray disc (BD)). TM One or more of the following: flash memory devices and memory cards.

[0157] The embodiments of the present invention can also be implemented by providing software (programs) that perform the functions of the above embodiments to a system or device via a network or various storage media, and the computer or central processing unit (CPU) or microprocessor unit (MPU) of the system or device reads out and executes the program.

[0158] Although the invention has been described with reference to exemplary embodiments, it should be understood that the invention is not limited to the disclosed exemplary embodiments. The scope of the appended claims should be accorded the broadest interpretation to cover all such variations and equivalent structures and functions.

Claims

1. A communication device configured to communicate with a first type of access point and a second type of access point, and having a display, wherein the first type of access point supports a first authentication method performing authentication using an authentication server, and the second type of access point supports a second authentication method performing authentication without using any authentication server, the communication device comprising: The first receiving unit is configured to receive the first operation; The second receiving unit is configured to receive a second operation that is different from the first operation; as well as The display control unit is configured as follows: Execute the first display control: When the first operation is received, information about one or more first type access points discovered by the communication device is displayed on the first screen on the display, and even if there is a second type access point near the communication device, information about the second type access point is not displayed on the first screen; as well as Execute the second display control: When the second operation is received, display information about one or more second type access points discovered via the communication device on the second screen displayed on the display, and do not display information about the first type access point on the second screen even if there is a first type access point near the communication device.

2. The communication device according to claim 1, wherein, The first authentication method is a method in which the access point uses an authentication server to perform authentication, and the first authentication method operates in accordance with a first authentication protocol.

3. The communication device according to claim 2, wherein, The first authentication protocol is an extensible authentication protocol.

4. The communication device according to claim 1, wherein, The first certification method is the IEEE 802.1X method.

5. The communication device according to claim 1, wherein, The second authentication method includes a pre-shared key method and a peer-to-peer simultaneous authentication method.

6. The communication device according to claim 1, further comprising: The first search unit is configured to search for access points in the event that the first operation or the second operation has been received. The first extraction unit is configured to extract first type access points that support the first authentication method based on receiving the first operation when one or more first type access points are discovered. as well as The second extraction unit is configured to, upon discovering one or more second-type access points, extract second-type access points that support the second authentication method based on the received second operation. Specifically, based on receiving the first operation, information about a first type of access point that supports the first authentication method and has been extracted by the first extraction unit is displayed on the screen, while information about a second type of access point that supports the second authentication method is not displayed. Specifically, based on receiving the second operation, information about a second type of access point that supports the second authentication method and has been extracted by the second extraction unit is displayed on the display, while information about a first type of access point that supports the first authentication method is not displayed.

7. The communication device according to claim 1, further comprising: The second search unit is configured to search for a first type of access point that supports the first authentication method based on receiving the first operation. as well as The third search unit is configured to search for a second type of access point that supports the second authentication method based on the received second operation. Wherein, if the second search unit has already discovered a first type of access point that supports the first authentication method, information about the first type of access point that supports the first authentication method is displayed on the display, but information about a second type of access point that supports the second authentication method is not displayed. Wherein, if the third search unit has discovered a second type of access point that supports the second authentication method, information about the second type of access point that supports the second authentication method is displayed on the display, but information about the first type of access point that supports the first authentication method is not displayed.

8. The communication device according to claim 1, wherein, To enable the first authentication method, a search for the first type of access point is performed.

9. The communication device according to claim 1, wherein, The first operation is performed on a first settings screen for searching for a first type of access point that enables the first authentication method, and the second operation is performed on a second settings screen for searching for a second type of access point that enables the second authentication method, the second settings screen being different from the first settings screen.

10. The communication apparatus of claim 1, further comprising a first connection unit configured to, upon selecting information about a first type of access point from information about the first type of access point displayed on the display, perform a connection with the first type of access point corresponding to the selected information about the first type of access point.

11. The communication apparatus of claim 1, further comprising a second connection unit configured to, in the absence of selecting information about a first type of access point from information about the first type of access point displayed on the display, and having received input of an undisplayed service set identifier and password for the access point, perform a connection with the first type of access point corresponding to the input service set identifier.

12. The communication device according to claim 11, in, Even though the first operation has been received, if no information about a first type of access point is selected from the information about one or more first type access points displayed on the first screen, and if the input of the SSID of a second type access point that is not displayed is received, then the connection to the second type access point corresponding to the input SSID is not executed. Even though the second operation has been received, if no information about a second type of access point is selected from the information about one or more second type access points displayed on the second screen, and if the input of the SSID of a first type access point that is not displayed is received, the connection to the first type access point corresponding to the input SSID will not be performed.

13. A control method for a communication device, the communication device being configured to communicate with a first type of access point and a second type of access point, and having a display, wherein the first type of access point supports a first authentication method performing authentication using an authentication server, and the second type of access point supports a second authentication method performing authentication without using any authentication server, the control method comprising: The first receiving step is configured to receive the first operation; The second receiving step is configured to receive a second operation that is different from the first operation; as well as First display control step: When the first operation is received, information about one or more first type access points discovered via the communication device is displayed on the first screen on the display, and even if there is a second type access point near the communication device, information about the second type access point is not displayed on the first screen; as well as Second display control step: When the second operation is received, information about one or more second type access points discovered via the communication device is displayed on the second screen on the display, and even if a first type access point exists near the communication device, information about the first type access point is not displayed on the second screen.

14. A storage medium storing a program for enabling a computer to function as a unit of the communication apparatus according to claim 1.

Images