Electronic device, control method, storage medium, and computer program product

Abstract

The invention provides an electronic device, a control method, a storage medium, and a computer program product. The electronic device includes: a connection unit configured to connect to a first access point (AP) based on a first security mode; a changing unit configured to change the AP serving as the connection destination based on a change request of the AP serving as the connection destination, the change request being received from the currently connected AP; and a control unit configured to perform control so as to suppress a situation in which an AP to be changed by the changing unit among candidate APs serving as candidates is connected due to a change to the AP serving as a connection destination by the changing unit, the AP using a security mode that is weaker in security strength than the first security mode.

Description

Technical Field

[0001] The present invention relates to an electronic device capable of changing an access point (AP) serving as a connection destination based on a request to change the connection destination received from the AP, a control method of the electronic device, a computer-readable storage medium storing a program, and a computer program product. Background Art

[0002] In an extended service set (ESS) composed of multiple access points (APs), there is a technology for dynamically switching the connection destination AP so that the AP and the station (STA) can efficiently exchange data. When it is determined that the connection destination AP should be switched based on congestion of the AP to which the STA is connected, availability of other APs, radio wave conditions, etc., the currently connected AP sends a connection AP change request to the STA. Upon receiving the AP change request, the STA can connect to an appropriate AP by switching the connection destination AP according to the request.

[0003] Japanese Patent Publication No. 2021-175068 discloses the following processing, in which a router with AP function makes a request to change the connection destination to the currently connected wireless sub-device. A mobile router (MR1) that can be connected to multiple wireless sub-devices confirms whether the wireless sub-device terminal supports IEEE 802.11v. Whether the wireless sub-device terminal supports IEEE 802.11v can be determined based on the association request frame sent when the wireless sub-device terminal is wirelessly connected to MR1. If the wireless sub-device terminal supports IEEE 802.11v, a BSS transition management (BTM) request frame is sent to the corresponding wireless sub-device terminal. The BSS transition candidate list entry field of the BTM request frame specifies the BSSID of the parent router RT2 as the connection destination. This prompts the sub-device terminal to switch the connection destination, and the wireless sub-device terminal switches the connection destination from MR1 to RT2 based on the received BTM request frame. Summary of the invention

[0004] The present invention provides an electronic device capable of performing more appropriate control in response to a request to change a connection destination received from an AP, a control method of the electronic device, a computer-readable storage medium storing a program, and a computer program product.

[0005] In its first aspect, the present invention provides an electronic device comprising: a connection unit configured to connect to a first access point (AP) based on a first security mode; a change unit configured to change the AP used as a connection destination based on a change request of the AP used as a connection destination, the change request being received from a currently connected AP; and a control unit configured to perform control to suppress a situation in which an AP among candidate APs used as candidates and to be changed to by the change unit is connected due to a change of the AP used as a connection destination performed by the change unit, the AP using a security mode weaker in security strength than the first security mode.

[0006] In its second aspect, the present invention provides a control method for an electronic device, the control method comprising: connecting to a first access point (AP) based on a first security mode; changing the AP used as a connection destination based on a change request of the AP used as a connection destination, the change request being received from a currently connected AP; and controlling to suppress the following situation: an AP to be changed to among candidate APs used as candidates due to a change in the AP used as a connection destination made during the change uses a security mode that is weaker in security strength than the first security mode.

[0007] In its third aspect, the present invention provides a computer-readable storage medium storing a program configured to cause a computer to: connect to a first access point (AP) based on a first security mode; change the AP used as a connection destination based on a change request of the AP used as a connection destination, the change request being received from a currently connected AP; and perform control to suppress a situation in which an AP to be changed to among candidate APs used as candidates due to a change in the AP used as a connection destination made during the change uses a security mode weaker in security strength than the first security mode.

[0008] In its fourth aspect, the present invention provides a computer program product, which is constructed to cause a computer to: connect to a first access point (AP) based on a first security mode; change the AP used as a connection destination based on a change request of the AP used as a connection destination, and receive the change request from the currently connected AP; and control to suppress the following situation: due to the change of the AP used as a connection destination made in the change, an AP to be changed to among candidate APs used as candidates is connected, and the AP uses a security mode weaker in security strength than the first security mode.

[0009] According to the present invention, more appropriate control can be performed in response to a request to change a connection destination received from an AP.

[0010] Further features of the present invention will become apparent from the following description of exemplary embodiments with reference to the attached drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] Figure 1 is a diagram showing a configuration example of a system.

[0012] Figure 2A and Figure 2B is a diagram showing a configuration example of an MFP.

[0013] Figure 3A , Figure 3B , Figure 3C and Figure 3D is a diagram showing an example of display performed in the console unit of the MFP.

[0014] Figure 4A and Figure 4B is a diagram showing the configuration of a mobile terminal device.

[0015] Figure 5 is a diagram showing the structure of an access point.

[0016] Figure 6 is a sequence diagram showing processing based on a request to change a connection destination.

[0017] Figure 7 is a flowchart illustrating an example of processing performed in response to a measurement request, a change request, and the like.

[0018] Figure 8 is a flowchart illustrating an example of a process for storing a security pattern.

[0019] Fig. 9 is a flowchart illustrating an example of a process based on determination of a security mode.

[0020] Fig.10 is a diagram showing an example of a screen for setting security mode restrictions. DETAILED DESCRIPTION

[0021] Hereinafter, the embodiments will be described in detail with reference to the accompanying drawings. Note that the following embodiments are not intended to limit the scope of the claimed invention. A plurality of features are described in the embodiments, but are not limited to the invention requiring all of these features, and such a plurality of features may be appropriately combined. In addition, in the accompanying drawings, the same reference numerals are given to the same or similar configurations, and redundant descriptions thereof will be omitted.

[0022] Incidentally, APs that are connection destination switching candidates in a connection destination AP change request from an AP may include APs that are not preferred as connection destinations of STAs. Therefore, it is necessary to devise a way to switch STAs to appropriate APs.

[0023] System Configuration

[0024] Figure 1 An example of the configuration of a system according to the present embodiment is shown. In one example, the system is a wireless communication system in which a plurality of communication devices can wirelessly communicate with each other. Figure 1 In the example shown, a mobile terminal device 104 and an MFP 100 used as communication devices, APs 101 and 102 as access points, a DHCP server 103, a DNS server 105, and a network 110 are provided. Note that AP 101 and AP 102 may be referred to as "AP 1" and "AP 2", respectively. The mobile terminal device 104 is a device having a wireless communication function using a wireless LAN or the like. "Wireless LAN" may be referred to as "WLAN" hereinafter. The mobile terminal device 104 may be a personal information terminal such as a personal digital assistant (PDA), a mobile phone (smartphone), a digital camera, a personal computer, or the like.

[0025] MFP 100 is an electronic device and an information processing apparatus. MFP 100 is also a printing device having a printing function, and may also have a reading function (scanner), a fax function, a telephone function, and the like. MFP 100 according to the present embodiment also has a communication function that enables wireless communication with a mobile terminal device 104. Although the present embodiment describes the case where MFP 100 is used as an example, the construction is not limited thereto. For example, a scanner device, a projector, a mobile terminal, a smart phone, a laptop computer, a tablet terminal, a PDA, a digital camera, a music playback device, a television, a smart speaker, and the like having a communication function may be used instead of MFP 100. Please note that "MFP" is an abbreviation for "Multi Function Peripheral".

[0026] AP 101 is separately configured from mobile terminal device 104 and MFP 100 (configured outside mobile terminal device 104 and MFP 100), and is used as a WLAN base station device. A communication device with a WLAN communication function can communicate in WLAN infrastructure mode via AP 101. Please note that the access point below may be referred to as "AP". Infrastructure mode may also be referred to as "wireless infrastructure mode". AP 101 communicates wirelessly with a communication device that has been allowed (authenticated) to connect to itself, and relays wireless communications between the communication device and other communication devices. For example, AP 101 can be connected to a wired communication network, and can relay communications between a communication device connected to the wired communication network and another communication device wirelessly connected to AP 101.

[0027] The AP 102 has the same function as the AP 101, and the MFP 100 switches its connection from the AP 101 to the AP 102 as needed. The DHCP server 103 is connected to the MFP 100 via the AP 101 and the network 110, and provides services to the MFP 100 by responding to requests from the MFP 100. Figure 1 A configuration is shown in which the DHCP server 103 is connected as a device separate from the AP 101 and the AP 102, but the configuration may be a configuration in which the AP 101 and the AP 102 have a DHCP server function. The DNS server 105 is connected to the MFP 100, the mobile terminal device 104, etc. via the AP 101 and the network 110, and provides a service for name resolution by responding to requests from the MFP 100, the terminal device 104, etc. Here, the network 110 may be the Internet, or may be a private network in business, a mobile phone network, etc.

[0028] External structure of MFP

[0029] Figure 2A An example of the external configuration of the MFP 100 is shown. For example, the MFP 100 includes a manuscript table 201, a manuscript cover 202, a printing paper insertion port 203, a printing paper discharge port 204, and a console unit 205. The manuscript table 201 is a table for placing a manuscript to be read. The manuscript cover 202 is a cover for securing the manuscript placed on the manuscript table 201 and for ensuring that the light from the light source illuminating the manuscript does not leak to the outside when the manuscript is read. The printing paper insertion port 203 is an insertion port where various sizes of paper can be set. The printing paper discharge port 204 is a discharge port for discharging printed paper. The paper set in the printing paper insertion port 203 is conveyed to the printing unit one sheet at a time, where the paper is printed and then discharged from the printing paper discharge port 204. The console unit 205 is configured to include keys such as a text input key, a cursor key, an OK key, a cancel key, etc., as well as an LED, an LCD, etc., and is configured so that the user can start various functions of the MFP, manipulate various settings, etc. The console unit 205 can also be configured to include a touch panel display. The MFP 100 has a WLAN wireless communication function, and is therefore also configured to include a wireless communication antenna 206 for the wireless communication, but the antenna 206 is not necessarily visible from the outside. Like the mobile terminal device 104, the MFP 100 can perform wireless communication via WLAN in a frequency band such as a 2.4 GHz band, a 5 GHz band, etc.

[0030] MFP structure

[0031] Figure 2BAn example of the configuration of the MFP 100 is shown. The MFP 100 is configured to include: a main unit 211, which performs main control of the device itself, and a wireless unit 226, which is a single communication module that performs WLAN communication using at least one common antenna. For example, the MFP 100 is also configured to include a modem 229 for wired communication. The main unit 211 is simply a unit that includes functional blocks other than the wireless unit 226 and the modem 229. The main unit 211 is configured to include, for example, a CPU 212 (central processing unit), a ROM 213, a RAM 214, a nonvolatile memory 215, an image memory 216, a reading control unit 217, a data conversion unit 218, a reading unit 219, and an encoding / decoding processing unit 221. The main unit 211 also includes, for example, a printing unit 222, a sheet feeding unit 223, a printing control unit 224, and a console unit 220. The functional units in the main unit 211 are connected to each other through a system bus 230 managed by the CPU 212. Furthermore, for example, the main unit 211 and the wireless unit 226 are connected via a dedicated bus 225 , and the main unit 211 and the modem 229 are connected via a bus 228 .

[0032] The CPU 212 is a system control unit including at least one processor, and controls the MFP 100 as a whole. For example, the processing performed by the MFP 100 described below is realized by the CPU 212 executing the program stored in the ROM 213. Note that dedicated hardware for each processing may be provided. The ROM 213 stores a control program executed by the CPU 212, an embedded OS program, and the like. In the present embodiment, the CPU 212 performs software control such as scheduling, task switching, and the like by executing each control program stored in the ROM 213 under the management of the embedded OS also stored in the ROM 213.

[0033] The RAM 214 is composed of an SRAM or the like. The RAM 214 stores data such as program control variables, data such as setting values ​​registered by a user, and management data of the MFP 100, etc. In addition, the RAM 214 can be used as various types of work buffers. The nonvolatile memory 215 is composed of a memory such as a flash memory, for example, and continues to store data even when the MFP 100 is powered off. The image memory 216 is composed of a memory such as a DRAM. The image memory 216 stores image data received through the wireless unit 226, image data processed by the encoding / decoding processing unit 221, etc. Note that the memory configuration of the MFP 100 is not limited to the above configuration. The data conversion unit 218 analyzes data in various formats, converts the image data into print data, etc.

[0034] The reading control unit 217 controls the reading unit 219 (e.g., a contact image sensor (CIS)) to optically read the document placed on the document table 201. The reading control unit 217 converts the image obtained by optically reading the document into electrical image data (image signal) and outputs the image data. At this time, the reading control unit 217 may perform various types of image processing such as binarization, halftone processing, etc. before outputting the image data.

[0035] The console unit 220 is a reference Figure 2A The described console unit 205 displays items in the display under the display control of the CPU 212, generates signals and the like in response to accepting user operations.

[0036] The encoding / decoding processing unit 221 performs encoding processing, decoding processing, scaling processing, and the like on image data (JPEG, PNG, and the like) processed by the MFP 100 .

[0037] The sheet feeding unit 223 holds sheets for printing. The sheet feeding unit 223 can supply sheets set in the sheet feeding unit under the control of the print control unit 224. The sheet feeding unit 223 may include a plurality of sheet feeding units to hold a plurality of types of sheets in a single device, and may control from which sheet feeding unit a sheet is fed under the control of the print control unit 224.

[0038] The print control unit 224 applies various types of image processing such as smoothing processing, print darkness correction processing, color correction, etc. to the image data to be printed, and outputs the processed image data to the print unit 222. The print unit 222 is configured to be able to perform, for example, inkjet printing processing, so that ink supplied from an ink tank is ejected from the print head, and an image is recorded on a recording medium such as paper. Note that the print unit 222 may be configured to be able to perform other types of print processing such as electrophotographic printing. The print control unit 224 may also periodically read out information about the print unit 222, and update status information including the remaining amount in the ink tank, the status of the print head, etc. stored in the RAM 214, etc.

[0039] The wireless unit 226 is a unit capable of providing a WLAN communication function, and is capable of providing, for example, a function equivalent to a combination of the WLAN unit 401 of the mobile terminal device 104. In other words, according to the WLAN standard, the wireless unit 226 converts data into packets and sends the packets to other devices, and also restores packets from other external devices to their original data and outputs the data to the CPU 212. The wireless unit 226 is capable of communicating as a station compliant with the IEEE 802.11 standard series. The wireless unit 226 is particularly capable of communicating as a station compliant with IEEE 802.11a / b / g / n / ac / ax. "Station" may be referred to as "STA" hereinafter. The wireless unit 226 is also capable of communicating as a STA supporting Wi-Fi Agile Multiband (registered trademark).

[0040] The wireless unit 226 supports IEEE 802.11ax, i.e., Wi-Fi 6 (registered trademark), and is capable of processing in accordance with IEEE802.11ax. In other words, the MFP 100 is capable of processing as a STA supporting (compliant with) OFDMA, and / or operating (processing) as a STA supporting (compliant with) TWT. "OFDMA" is an abbreviation for "Orthogonal Frequency-Division Multiple Access". "TWT" is an abbreviation for "Target Wake Time". Supporting TWT means adjusting the timing of data communication from the parent device to the STA. When there is no need to standby for signal reception, the wireless unit 226 (MFP 100) used as a STA turns the communication function into a sleep state. This makes it possible to suppress power consumption. The wireless unit 226 also supports Wi-Fi 6E (registered trademark). In other words, the wireless unit 226 is also capable of communicating in the 6GHz band (5.925GHz to 7.125GHz). Unlike the 5 GHz band, the 6 GHz band does not have a band for dynamic frequency selection (DFS). Therefore, in communications in the 6 GHz band, communications are not interrupted due to DFS standby time, which is expected to improve communications.

[0041] Note that the mobile terminal device 104 and the MFP 100 can perform P2P (WLAN) communication based on WFD, and the wireless unit 226 has a software access point (software AP) function or a group owner function. In other words, the wireless unit 226 can build a P2P communication network, set a channel used in P2P communication, etc.

[0042] MFP console unit

[0043] FIG. 3A to FIG. 3DAn example of a screen displayed in the display (touch screen) included in the console unit 220 of the MFP 100 is schematically shown. Figure 3A An example of a home screen displayed when the MFP 100 is powered on and an operation such as printing, scanning, etc. is not in progress ("idle state" or "standby state") is shown. Figure 3A In the display items indicating "copy", "scan", and "cloud" (menu items) are displayed. "Cloud" is a menu item related to a cloud function using Internet communication. By operating a key, a touch panel, etc., one of the menu items can be selected to make settings in MFP 100, to start executing a function, etc. Figure 3A The main screen shown in the figure accepts operations such as keys and touch panel, and the MFP 100 can display the Figure 3A The screen shown in the figure is different from the screen shown in the figure.

[0044] Figure 3B is an example of display of another part of the main screen, and is in response to Figure 3A The screen to which the user switches by performing an operation (swiping left or right) to display another page of the main screen in the state shown. Figure 3B , display items (menu items) indicating "communication setting", "printing" and "photographing" are displayed. When one of these menu items is selected, a function corresponding to the selected menu item, ie, one of the printing function, the photo function and the communication setting, is executed.

[0045] Figure 3C is when Figure 3B An example of a display of a menu screen for communication settings that is displayed when "Communication Settings" is selected in the screen shown. In the communication settings menu screen, "Wireless LAN", "Wired LAN", "Wireless Direct", "Bluetooth", and "General Settings" are displayed as menu items (options). "Wireless LAN", "Wired LAN", and "Wireless Direct" are menu items for LAN settings, and these items can be used to set settings such as wired connection settings, settings for enabling and disabling wireless infrastructure mode, settings for enabling or disabling P2P modes such as WFD and software AP mode, and the like. When the "Wireless LAN" item is selected and the wireless LAN is enabled by user operation, the wireless infrastructure mode is enabled. When the "Wireless Direct" item is selected and the wireless direct connection is enabled by user operation, the P2P (WLAN) mode is enabled. A general settings menu for each connection form is also displayed in this screen. In addition, the user can set the frequency band, frequency channel, etc. of the wireless LAN from this screen.

[0046] Figure 3D is when Figure 3CAn example of display of a menu screen for wireless LAN settings that is displayed when "Wireless LAN" is selected in the screen shown. "Enable / disable wireless LAN", "Wireless LAN settings", "Wireless LAN information display", and "Wireless LAN advanced settings" are displayed as menu items (options) in the wireless LAN settings menu screen. Settings such as enabling / disabling wireless infrastructure mode, wireless LAN settings, displaying wireless LAN information, wireless LAN advanced settings, etc. can be made using these items. These items are displayed as an interface that can accept selection instructions made by the user.

[0047] External structure of mobile terminal equipment

[0048] Figure 4A 4 is a diagram showing an example of the external configuration of the mobile terminal device 104. For example, the present embodiment will describe a case where the mobile terminal device 104 is a typical smart phone. Note that the mobile terminal device 104 is configured to include, for example, a display unit 402, an operation unit 403, and a power key 404. The display unit 402 is a display having a display mechanism based on, for example, a liquid crystal display (LCD). Note that the display unit 402 can display information using, for example, a light emitting diode (LED), etc. In addition to or in place of the display unit 402, the mobile terminal device 104 may also have a function of outputting information through audio. The operation unit 403 is configured to include physical keys such as keys, buttons, etc., a touch panel for detecting user operations, etc. Note that in this example, a common touch panel display is used to perform information display in the display unit 402 and acceptance of user operations through the operation unit 403, so the display unit 402 and the operation unit 404 are implemented as a single device. In this case, for example, a button icon or a soft keyboard is displayed using the display function of the display unit 402, and a user's touch on these positions is detected using the operation receiving function of the operation unit 403. Note that the display unit 402 and the operation unit 403 may be separate, and hardware for display and hardware for receiving operations may be separately provided. The power key 404 is a physical key for receiving a user operation to power on and off the mobile terminal device 104.

[0049] The mobile terminal device 104 includes a WLAN unit 401, which provides a WLAN communication function, but is not necessarily visible from the outside. For example, the WLAN unit 401 is constructed to be able to perform data (packet) communication in a WLAN system that complies with the IEEE 802.11 standard series (IEEE 802.11a / b / g / n / ac / ax, etc.). The WLAN unit 401 can also communicate as an AP supporting Wi-Fi AgileMultiband (registered trademark). However, the construction is not limited to this, and the WLAN unit 401 can communicate in a WLAN system that complies with another standard. This example assumes that the WLAN unit 401 can communicate in both the 2.4GHz band and the 5GHz band. It is also assumed that the WLAN unit 401 can communicate based on WFD, communicate using software AP mode, communicate using wireless infrastructure mode, etc. The operations performed in these modes will be described later.

[0050] The structure of mobile terminal equipment

[0051] Figure 4B An example of the configuration of the mobile terminal device 104 is shown. For example, the mobile terminal device 104 includes a main unit 411 that performs main control of the device itself and a WLAN unit 429 that performs WLAN communication. The main unit 411 is only a unit that includes functional blocks other than the WLAN unit 429. The main unit 411 includes, for example, a CPU 412, a ROM 413, a RAM 414, an image memory 415, a data conversion unit 416, a telephone unit 417, a GPS 419, a camera unit 421, a nonvolatile memory 422, a data storage unit 423, a speaker unit 424, and a power supply unit 425. Here, CPU is an abbreviation of "Central Processing Unit", ROM is an abbreviation of "Read Only Memory", RAM is an abbreviation of "Random Access Memory", and GPS is an abbreviation of "Global Positioning System". The mobile terminal device 104 also includes a display unit 420 and an operation unit 418. The functional units in the main unit 411 are connected to each other via a system bus 628 managed by the CPU 412. Furthermore, the main unit 411 and the WLAN unit 429 (the above-described WLAN unit 401) are connected via a dedicated bus 426, for example.

[0052] The CPU 412 is a system control unit including at least one processor, and controls the mobile terminal device 104 as a whole. For example, the processing of the mobile terminal device 104 described below is realized by the CPU 412 executing the program stored in the ROM 413. Note that dedicated hardware for each process may be provided. The ROM 413 stores: a control program executed by the CPU 412, an embedded operating system (OS) program, and the like. In the present embodiment, the CPU 412 performs software control such as scheduling, task switching, and the like by executing the various control programs stored in the ROM 413 under the management of the embedded OS also stored in the ROM 413.

[0053] The RAM 414 is composed of a static RAM (SRAM) or the like. The RAM 414 stores data such as program control variables, data such as setting values ​​registered by the user, and management data of the mobile terminal device 104. In addition, the RAM 414 can be used as various types of work buffers. The image memory 415 is composed of a memory such as a dynamic RAM (DRAM) or the like. The image memory 415 temporarily stores image data received through the WLAN unit 429, image data read out from the data storage unit 423, etc., for processing by the CPU 412. The non-volatile memory 422 is composed of a memory such as a flash memory, and continues to store data even when the mobile terminal device 104 is powered off. Note that the memory configuration of the mobile terminal device 204 is not limited to the above configuration. For example, the image memory 415 and the RAM 414 may be implemented by the same memory, and data may be backed up using the data storage unit 423, etc. In addition, although the present embodiment describes DRAM as an example of the image memory 415, other storage media such as a hard disk, a non-volatile memory, etc. may be used instead.

[0054] The data conversion unit 416 analyzes data in various formats, performs data conversion such as color conversion and image conversion, etc. The telephone unit 417 controls a telephone line, and realizes telephone communication by processing audio data input and output through the speaker unit 424. The GPS 419 receives radio waves transmitted from a satellite, and obtains position information such as the current latitude, longitude, etc. of the mobile terminal device 104.

[0055] The camera unit 421 has a function of electronically recording and encoding an image input through a lens. The image data captured by the camera unit 421 is stored in the data storage unit 423. The speaker unit 424 performs control for realizing a function for inputting or outputting audio for a telephone function, other functions such as an alarm notification, etc. The power supply unit 425 is, for example, a portable battery, and controls the supply of power to the inside of the device. The power supply state includes, for example, a "battery exhaustion state" in which there is no remaining power in the battery, a "power-off state" in which the power key 404 is not pressed, an "operating state" in which the battery is operating normally, and a "power saving state" in which the battery is operating but in a power saving state.

[0056] The display unit 420 is a reference Figure 4A The display unit 402 described above displays various types of input operations, the operating state and status of the MFP 100, etc. under the control of the CPU 412. The operation unit 418 is a display unit 402 described above. Figure 4A The operating unit 403 described above, and when accepting a user operation, performs control such as generating an electric signal corresponding to the operation, outputting the electric signal to the CPU 412, and the like.

[0057] The mobile terminal device 104 uses the WLAN unit 429 for wireless communication and data communication with other devices such as the MFP 100. The WLAN unit 429 converts data into packets and sends the packets to other devices. The WLAN unit 429 also restores packets from other external devices to original data and outputs the data to the CPU 412. The WLAN unit 429 is a unit for implementing communications that conform to various WLAN standards. The WLAN unit 429 can operate in at least two communication modes at the same time, and the at least two communication modes include a wireless infrastructure mode and a P2P (WLAN) mode. Note that the frequency bands used in these communication modes may be limited by the functions and performance of the hardware.

[0058] Access point configuration

[0059] Figure 5 1 is a block diagram showing the construction of the AP 101 having a wireless LAN access point function. The main unit 510 controlling the AP 101 is constructed to include a wireless LAN unit 516, a wired LAN unit 518, and an operation button 520. The main unit 510 is a unit that includes only functional blocks other than the wireless LAN unit 516, the wired LAN unit 518, and the operation button 520.

[0060] The microprocessor type CPU 511 arranged in the main unit 510 operates according to the control program stored in the ROM type program memory 513 and the data in the RAM type data memory 514, and the ROM type program memory 513 and the RAM type data memory 514 are connected to the CPU 511 through the internal bus 512. The CPU 511 communicates with other communication terminal devices on the wireless LAN by controlling the wireless LAN unit 516 via the wireless LAN communication control unit 515. The CPU 511 also communicates with other communication terminal devices on the wired LAN by controlling the wired LAN unit 518 via the wired LAN communication control unit 517. The CPU 511 can accept an operation performed by a user manipulating the operation button 520 by controlling the operation unit control circuit 519. The CPU 511 includes at least one processor.

[0061] The AP 101 further includes an interference wave detection unit 521 and a channel change unit 522. When wireless communication is performed in a frequency band implementing dynamic frequency selection (DFS), the interference wave detection unit 521 performs interference wave detection processing. When wireless communication is performed in a frequency band implementing DFS, the channel change unit 522 performs processing for changing the channel used when an interference wave is detected, when an immediate change to an idle channel is required, and the like.

[0062] Note that AP 102 has the same configuration as AP 101 .

[0063] P2P communication method

[0064] Next, an overview of a P2P (WLAN) communication method will be given, which is used for devices to directly communicate with each other wirelessly without passing through an external access point in WLAN communication. P2P (WLAN) communication can be implemented by various methods, for example, a communication device can support multiple P2P (WLAN) communication modes and selectively perform P2P communication (WLAN) using one of the multiple modes.

[0065] Assume that the following two modes are P2P modes.

[0066] Software AP mode

[0067] Wi-Fi Direct (WFD) mode

[0068] A communication device capable of P2P communication may be configured to support at least one of these modes. However, even a communication device capable of P2P communication does not necessarily support all of these modes, but may be configured to support only some of the modes.

[0069] In a communication device having a WFD communication function (e.g., mobile terminal device 104), in response to a user operation accepted through an operation unit of the device, an application (in some cases, a dedicated application) for implementing the communication function is called. The communication device can then display a screen of a user interface (UI) provided by the application to prompt the user to perform an operation, and then perform WFD communication based on the user operation accepted in response thereto.

[0070] Software AP mode

[0071] In software AP mode, a communication device (e.g., mobile terminal device 104) operates in the role of a client requesting various types of services. Another communication device (e.g., MFP 100) operates as a software AP capable of performing WLAN AP functions through software settings. Note that the commands, parameters, etc. sent and received when a wireless connection is established between a client and a software AP can be anything specified by the Wi-Fi (registered trademark) standard, and therefore will not be described again. The MFP 100 operating in software AP mode also determines the frequency band and frequency channel as a parent station. Therefore, the MFP 100 can select which frequency band to use from 5 GHz and 2.4 GHz, and which frequency channel to use in the frequency band.

[0072] WFD mode

[0073] The MFP 100 can be started to be fixed as the parent station (Autonomous Group Owner) of the WFD mode. In this case, the GO negotiation process for determining the role is not required. In addition, in this case, the MFP 100 also determines the frequency band and frequency channel to be used as the parent station. Therefore, the MFP 100 can select which frequency band to use from 5 GHz and 2.4 GHz, and which frequency channel to use in the frequency band.

[0074] Wireless Infrastructure Mode

[0075] In the wireless infrastructure mode, the communication devices (e.g., mobile terminal device 104 and MFP100) that communicate with each other are connected to an external AP (e.g., AP 101) that manages the network, and the communication devices communicate with each other through the AP. In other words, the communication between the communication devices is performed on the network constructed by the external AP. Both the mobile terminal device 104 and the MFP 100 discover the AP 101, and these communication devices can communicate in the wireless infrastructure mode via the AP 101 by sending a connection request and connecting to the AP 101. Note that multiple communication devices can be connected to each individual AP. In this case, the communication devices can communicate through data transmitted between the APs. The commands, parameters, etc. sent and received during the communication between the communication devices via the access point can be any commands, parameters, etc. specified by the Wi-Fi standard, so they will not be described. In this case, the AP 101 also determines the frequency band and the frequency channel. Therefore, the AP 101 can select which frequency band to use from 5GHz, 2.4GHz, and 6GHz, and which frequency channel to use in the frequency band.

[0076] Processing in response to a request from an AP to a STA to change a connection destination

[0077] The mobile terminal device 104 and the MFP 100 support a function disclosed as Wi-Fi Agile Multiband (registered trademark). Wi-Fi Agile Multiband is a function that enables the selection of an optimal environment in response to changing conditions of a Wi-Fi network. More specifically, STAs such as the mobile terminal device 104 and the MFP 100 and APs such as the AP 101 exchange information about the network environment using the IEEE802.11 series of communication standards. By exchanging information in this way, when the network is congested, the AP can guide the STA (change the connection destination) to another AP, frequency band, channel, or even another cellular service.

[0078] Figure 6 1 is a sequence diagram showing a case where the MFP 100 switches the connection destination AP from the AP 101 to the AP 102 according to a connection destination change request (a change request for the access point serving as the connection destination) from the AP 101. The processing performed by each device in the sequence is realized by the CPU of each device reading out various programs stored in a memory (such as a ROM, etc.) provided in the device into a RAM and executing the programs.

[0079] exist Figure 6In the initial state of the illustrated process, it is assumed that the MFP 100 has established a connection in the wireless infrastructure mode with the AP 101. When the MFP 100 and the AP 101 are connected in the wireless infrastructure mode, the AP 101 obtains information on whether the MFP 100 supports IEEE 802.11v. Assuming that when the AP 101 has successfully obtained information indicating that the MFP 100 supports IEEE 802.11v, the following process is then performed.

[0080] In step S601, AP 101 sends an inquiry (measurement request) to MFP 100 about the radio wave strength of APs around MFP 100. For example, the inquiry is sent as a beacon frame request or a beacon report request. In other words, the mechanism defined in the IEEE802.11k standard can be used for this request.

[0081] In step S602, the MFP 100 receives frames transmitted by surrounding APs in response to the request received in step S601 and measures the radio wave strength thereof. As a result, the radio wave strength of each of the plurality of APs including the AP 101 and the AP 102 is measured. This process is called "AP search".

[0082] In step S603, the MFP 100 transmits a list of radio wave strengths of the APs around the MFP 100 measured in step S602 as a response to the request received in step S601. In addition to or instead of the information measured in step S602, the radio wave strengths provided in the response may be information stored in the RAM 214, the nonvolatile memory 215, etc. of the MFP 100. For example, the response is transmitted as a beacon report or a measurement report.

[0083] In step S604, the AP 101 determines whether the connection destination of the MFP 100 needs to be switched based on the congestion state in the network that the AP 101 has ascertained and the radio wave strength received from the MFP 100 in step S603. The following are factors that cause the AP 101 to determine that switching of the connection is necessary.

[0084] Many STAs connected to AP 101 (at least reaching the threshold)

[0085] The amount of communication between the STAs connected to the AP 101 and the AP 101 is high (at least reaching the threshold)

[0086] Determine whether there is interference wave based on signal-to-noise ratio, etc.

[0087] AP function stopped

[0088] In addition, whether it is necessary to switch the connection destination can be determined based on the congestion level of each AP determined by using communication between APs (number of STA connections, communication volume). When it is determined that the connection destination of MFP 100 needs to be switched, and the SSID, channel, and frequency band of the other AP designated by MFP 100 to be switched to are determined, the sequence moves to step S605. Note that in this embodiment, the extended service set identifier (ESSID) of another AP designated (recommended) as the switching destination is the same as the ESSID of the switching source AP (the BSSID is different for each AP). However, the switching destination may be recommended to be an AP with an ESSID different from that of the switching source AP. "BSSID" is an abbreviation for "Basic Service Set Identifier", which is equivalent to the MAC address of the AP (i.e., the identification information of the AP).

[0089] In step S605, AP 101 sends an AP change request (connection destination switching request) to MFP 100. The connection destination change request includes the BSSID, channel, and band information of the other AP (hereinafter referred to as "recommended AP") designated as the switching destination by MFP 100 as determined in step S604. Note that multiple BSSIDs can be specified. In other words, multiple APs can be recommended as recommended APs for the switching destination. For example, the connection destination change request is sent as a BTM request. In other words, a BSS transition management (BTM) request frame defined in the IEEE 802.11v standard is sent. Figure 6 The illustrated example assumes that the AP 102 is specified as the switching destination (recommended AP) included in the connection destination change request.

[0090] In step S606, if the connection destination change request received in step S605 is to be followed, the MFP 100 sends a response indicating approval of the switching to the AP 101. If the connection destination change request is not to be followed, a switching rejection may be sent as a response. The response is sent as a BTM response. Figure 6 The examples in assume that a response is sent indicating approval.

[0091] In step S607, the AP 101 and the MFP 100 terminate the connection in the wireless infrastructure mode.

[0092] In step S608 , the MFP 100 transmits a connection request to the AP 102 to connect to the AP 102 specified in the connection destination change request received in step S605 .

[0093] As a result, in step S609, the connection in the wireless infrastructure mode between the MFP 100 and the AP 102 is established.

[0094] Using this mechanism, the MFP 100 as the STA can change the connection destination from the AP 101 to the AP 102 based on the connection destination change request from the AP 101 (the AP before the connection destination change) to which the MFP 100 was originally connected. The AP 101 and the AP 102 may be APs installed at different locations. In other words, the MFP 100 can change the connection destination from the AP 101 to the AP 102 by Figure 6 The process shown in the figure can switch to another AP installed at a different location from the AP to which the MFP 100 is initially connected. There is also a case where the AP handles different frequency bands from each other among a plurality of frequency bands (two or three of the 2.4 GHz band, the 5 GHz band, or the 6 GHz band) provided by the same device. In other words, the MFP 100 switches to another AP installed at a different location from the AP to which the MFP 100 is initially connected. Figure 6 The process shown can switch to another frequency band provided by the same device as the AP to which the MFP 100 was originally connected. For example, the connection destination can be changed to an AP using the 6 GHz frequency band based on the connection destination change request.

[0095] Although the present embodiment describes an example in which a measurement request and a connection destination change request from an AP are sent using a mechanism compliant with Wi-Fi Agile Multiband, and the STA responds thereto, the configuration is not limited thereto. This embodiment can also be applied even if the STA responds to a measurement request or a connection destination change request sent from an AP using a mechanism different from that in the above example, changes the connection destination AP (switches, deletes, or adds an AP to be used as a connection destination), etc.

[0096] There are situations where changing the connection destination AP based on a change request for changing the connection destination AP sent from the currently connected AP does not cause a problem, and situations where it is not desirable to do so. In a situation where it is not desirable to change the connection destination AP based on the change request, one or more of the following types of processing may be combined as processing for suppressing the change of the connection destination in response to the change request. The following processing is processing that prevents or makes it difficult to change the connection destination AP based on the change request.

[0097] (Inhibition treatment 1)

[0098] Even if the change request described with reference to step S605 is received, the connection destination AP will not be changed based on the received change request, and the change request will not be responded to; or a response indicating that the change request has been rejected (the connection destination AP will not be changed) is sent to the currently connected AP. When a rejection response is sent, the priority of the connection destination change of another STA connected to the AP currently connected to the MFP 100 is increased, and the priority of the connection destination point change of the MFP 100 that returns the rejection response is lowered. As a result, the connection with the connected AP can be maintained. If no response is returned (i.e., the request is ignored), it is considered that the currently connected AP will maintain the connection with the MFP 100 to wait for the response until the timeout after the response standby time. Therefore, in the case where the connection is terminated immediately according to a certain response to the change request from the MFP 100, the connection with the currently connected AP can be maintained for a longer time by not responding instead of returning a certain response. Therefore, for example, based on information indicating the reason for the change included in the change request, the processing can be made different according to the reason, such as rejecting the request if the reason is weak, or ignoring the request if the reason is strong. The change reason may be determined based on information included in the request pattern in the BTM request, for example, indicating which of several reasons is applicable. For example, if the Disassociation Imminent bit or the BSS Termination Included bit of the request pattern is 1, then the change request may be determined to be a request with a strong change reason. Otherwise, the change request may be determined to be a request with a weak change reason.

[0099] (Suppression treatment 2)

[0100] In response to the measurement request described with reference to step S601, information indicating that the radio wave reception condition (signal reception condition) of an unconnected AP other than the currently connected AP is different from the actual measurement condition (low signal quality) is provided as a response (false response). In this case, the response can be made after the actual measurement is performed in response to the reception of the measurement request, or the response can be made without actually performing the measurement. Specifically, in the response (beacon report, etc.) described with reference to step S603, a value indicating a lower received signal strength and / or a value indicating a higher noise (signal-to-noise ratio) is provided as a response to the signal quality measured for the signal received from the unconnected AP. Alternatively, the response may be a response that does not include at least one piece of information about the unconnected AP. The following processing may also be performed: based on information measured in the past for the unconnected AP, the received signal strength is set to an extremely low value or the noise is set to an extremely high value to provide a response. Even if a measurement request is received, a response indicating a good received signal strength or noise condition of only the currently connected AP may be provided without performing an actual measurement (AP search), and without including information about the unconnected AP. The response to the measurement request that does not include information about the unconnected AP in the response corresponds to content indicating that no other unconnected APs are found even after the AP search is performed. In other words, not including information about the unconnected AP in the response indicates that the signal quality from the unconnected AP is at least a result different from the result of the AP search actually performed.

[0101] By doing so, it can be expected that a connection destination change request sent from the currently connected AP to other APs is suppressed. Thus, a connection destination change in response to a connection destination change request is suppressed.

[0102] (Suppression treatment 3)

[0103] The currently connected AP is temporarily disconnected, information indicating that the change request is not supported is provided, and then the same AP is reconnected. Specifically, the wireless connection with the currently connected AP is temporarily terminated, and data of an association request frame including information indicating that IEEE802.11v is not supported is generated as a preparation for reestablishing the wireless connection. The generated association request frame data is then used to perform processing for connecting to the AP. As a result, if an association request frame including information indicating that IEEE 802.11v is not supported is generated, the AP is connected to the MFP100, which is an electronic device that does not support the Agile Multiband function. As a result, the currently connected AP recognizes that the MFP 100 does not support IEEE 802.11v, and does not send a wireless connection destination change request to the MFP 100. As a result, a request to change the wireless connection is no longer issued to the MFP 100, so that the wireless connection between the MFP 100 and the currently connected AP is easier to maintain. In addition, if the currently connected AP recognizes that the MFP 100 does not support IEEE802.11v, the measurement request (refer to the request described in step S601) sent from the currently connected AP to the MFP 100 is also stopped. Therefore, measurement (AP search) in response to the measurement request and response to the measurement request (processing of step S603) can also be suppressed in the MFP 100. The processing load and power consumption can be reduced by that amount. Resources can also be allocated to other processing.

[0104] For example, receiving print data corresponds to a state where the connection destination AP is not desired to be changed based on a change request. The MFP 100 receiving print data corresponds to a state where the mobile terminal device 104 as a partner device has received some print data of an image to be printed, but has not yet received the remaining print data. After receiving some print data equivalent to printing on a single page, the MFP 100 prints by repeating the following operation: receiving some print data and then printing (for example, receiving one line of print data in printing), and then receiving the next data and printing. If the connection destination AP is changed based on a connection destination change request while receiving print data, a time delay will be generated in the process for switching the connection destination, which may cause a decrease in print quality, for example, by generating uneven printing. In addition, after the connection destination is switched, the communication quality with the mobile terminal device 104 as a partner device may be degraded, so that subsequent data cannot be received and printing fails. Therefore, it is preferable that at least one of the above-mentioned processes (suppression process 1) and (suppression process 2) is performed as a process for suppressing the change of the connection destination in response to a change request while receiving print data, or the above-mentioned process (suppression process 3) is performed before starting to receive print data.

[0105] Incidentally, APs that are candidates for connection destination switching in a connection destination change request from a currently connected AP may include APs that are not preferred as connection destination APs of the STA.

[0106] For example, it is conceivable that the APs that are candidates for connection destination switching include an AP whose security strength is lower than that of the currently connected AP. In this case, if the connection destination AP is switched based on a request to change the connection destination from the currently connected AP, the security strength of the connection with the AP may decrease. Therefore, it is necessary to design a way to switch the STA to an appropriate connection destination AP.

[0107] Therefore, in the present embodiment, the MFP 100 is connected to the AP based on the security mode used as the standard. Specifically, control is performed to suppress connection to an AP that uses a security mode lower in security strength than the security mode used as the standard among the candidate APs that are candidates for the change destination in the change request. Such a configuration makes it possible to switch the STA to an appropriate connection destination AP.

[0108] There are also cases where, for example, APs serving as candidates for connection destination switching include APs that use a security mode that is not supported by the MFP 100, a security mode that is restricted according to the setting of the MFP 100, or the like. In this case, there are cases where, when the MFP 100 switches the connection destination AP to a switching candidate AP based on the connection destination change request, connection with the switching destination AP fails. Therefore, it is necessary to devise a way to switch the STA to an appropriate connection destination AP.

[0109] Therefore, in the present embodiment, the MFP 100 performs control to suppress processing of changing the connection destination AP to an AP that cannot be connected using the security mode that the MFP 100 can use, among candidate APs that are change destination candidates in the change request.

[0110] There is also a case where, for example, APs that are candidates for connection destination switching include APs having an authentication mode different from the authentication mode used before the switching. Specifically, when the authentication mode of the currently connected AP is the personal mode, an AP in the enterprise mode may be included in the recommended APs. On the contrary, if the authentication mode of the currently connected AP is the enterprise mode (the authentication mode using the authentication server), an AP having an authentication mode different from the enterprise mode (for example, an AP in the personal mode) may be included in the recommended APs. In this case, there is a case where, when the MFP 100 switches the connection destination AP to the switching candidate AP based on the connection destination change request, the security conditions expected by the user cannot be maintained, or the connection with the switching destination AP fails. Therefore, it is necessary to design a way to switch the STA to an appropriate connection destination AP. Therefore, in the present embodiment, control is performed to suppress the case where the connection destination is changed to an AP having an authentication mode different from that of the currently connected AP.

[0111] Note that the connection destination AP change request received by the MFP 100 from the currently connected AP may be referred to as a "connection destination change request," "change request," etc. Furthermore, in this specification, the connection destination AP change request may also be referred to as a "request to change the connection destination AP."

[0112] (Processing based on request from currently connected AP)

[0113] Figure 7 2 is a flowchart showing an example of processing corresponding to an AP search request, a connection destination change request, etc. performed by the MFP 100. In the flowchart, the processing performed by the MFP 100 is realized by the CPU 212 reading out various programs stored in a memory such as the ROM 213 into the RAM 214 and executing the programs.

[0114] In step S701, the CPU 212 starts wireless LAN settings. Specifically, the CPU 212 receives an instruction to start wireless infrastructure mode settings. The instruction to start wireless infrastructure mode settings may be, for example, based on the Figure 3D The instruction of the user operation performed in the wireless LAN setting menu screen shown. The user operation may be, for example, the user selecting "Wireless LAN Setting" in the wireless LAN setting menu screen. For example, the instruction to start the wireless infrastructure mode setting may also be receiving a specific signal from an external device (such as the mobile terminal device 104).

[0115] In step S702, CPU 212 obtains AP information required for wireless infrastructure mode setting. Specifically, for example, CPU 212 obtains AP information through AP search. For example, in step S702, CPU 212 starts AP search by sending a device search request (probe request). Then, by receiving wireless signals such as device search response (probe response), beacon (information actively sent by AP at regular intervals) sent from AP, CPU 212 searches out and finds AP. The AP information obtained from AP through such AP search includes information indicating at least one of the SSID, radio wave strength, frequency band, MAC address, authentication mode, encryption mode, etc. of AP. The content of AP information varies according to AP model, model number, settings, etc.

[0116] For example, if the security mode (authentication mode, encryption mode) used by the AP is not a security mode supported by the MFP 100, the CPU 212 can exclude the AP information from the results of the AP search. Even if the security mode used by the AP is only a security mode that is not supported and / or restricted by the MFP 100, the CPU 212 can exclude such AP information from the results of the AP search.

[0117] In step S702, after the AP search is completed, the CPU 212 displays a list of APs found in the AP search in the console unit 220 of the MFP 100. The list of APs is a content indicating the result of the AP search. For example, the list of APs is displayed as an interface capable of accepting a selection instruction made by a user. For example, the CPU 212 can display a list of AP identification information obtained through the AP search in the console unit 220 as a list of APs. The AP identification information can be, for example, an SSID, a device name, etc. For example, if the AP selected by the user uses a security mode that requires authentication information such as a password, the CPU 212 accepts input of a password for the AP selected by the user. In this way, the CPU 212 can obtain the password of the AP selected by the user by accepting the user's input of the password of the AP. If the security mode of the AP selected by the user does not require a password, the CPU 212 does not accept input of a password in step S702. The OPEN mode, the EAP mode, etc., which will be described later, can be given as examples of modes that do not require a password.

[0118] Although the present embodiment describes the CPU 212 as displaying the result of the AP search in the console unit 220 of the MFP 100 and accepting the input of the password of the AP selected by the user as an example, the configuration is not limited to this. For example, the AP information in step S702 can be obtained from the AP using a function called Wi-Fi Protected Setup (hereinafter referred to as "WPS") (registered trademark). Alternatively, the AP information in step S702 can be obtained from an external device such as the mobile terminal device 104 using a function called Wi-Fi Easy Connect (hereinafter referred to as "WEC") (registered trademark). In addition, the AP information in step S702, an instruction from the user to select an AP, and the like can be obtained by receiving a specific signal from an external device such as the mobile terminal device 104.

[0119] In step S703, the CPU 212 performs control (recording control) for recording AP information required for wireless infrastructure mode setting in the RAM 214 and / or the nonvolatile memory 215 based on the AP information obtained in step S702. Figure 8 The process is described in detail. When AP information is stored in the process, information indicating the authentication mode and encryption mode of the AP is also stored therein as "security mode". The AP information required for the wireless infrastructure mode setting stored in step S703 includes, for example, at least one of SSID, password, security mode (authentication mode and / or encryption mode), frequency band, channel, communication standard, certificate information, and user name. SSID is one or both of ESSID and BSSID. The information is stored based on operations performed by the user in the console unit 220 of the MFP 100, specific signals received from external devices such as AP or mobile terminal device 104, and the like.

[0120] In step S704, the CPU 212 performs connection processing for connecting to an AP according to the IEEE 802.11 standard using the AP information obtained in step S702. The AP connected to in step S704 is the AP for which the user has selected a selection instruction in step S702.

[0121] In step S705, the CPU 212 determines whether a measurement request has been received from the currently connected AP. If it is determined that the measurement request has been received, the sequence moves to step S706, and if the measurement request has not been received, the sequence moves to step S713. Here, the measurement request is the same as the inquiry about the radio wave strength described above with reference to step S601. In other words, the measurement request is a request for the AP search result, and is also a request for the measurement result of the radio wave condition (signal quality) of the AP around the MFP 100.

[0122] In step S706, the CPU 212 performs the AP search as described above with reference to steps S602 and S702. The CPU 212 stores in the RAM 214 a list of AP information found by the AP search.

[0123] The processing of steps S707 to S711 described below is performed on each AP found by the AP search. The AP found by the AP search can be included in the change request received from the currently connected AP as an AP recommended as a connection destination AP. In other words, the AP found by the AP search can also be said to be a candidate AP that is a candidate for the connection destination AP of the MFP 100. The processing of steps S708 and S709 is a processing for determining whether the AP found by the AP search is an AP that is suitable as a candidate for the connection destination of the MFP 100. Meanwhile, the processing of step S710 is a processing for suppressing the situation in which a change request including an unsuitable connection destination AP is sent by making a false response as described in the suppression processing 2 above for information of an AP that is unsuitable as a connection destination. In other words, the processing of steps S707 to S711 is a processing for suppressing connection with an AP that is unfavorable as a connection destination of the MFP 100. In other words, the processing of steps S707 to S711 can be said to be a processing for changing the MFP 100 to a suitable connection destination AP. Note that, instead of the AP search performed in step S706, the CPU 212 may perform the processing of steps S707 to S711 using AP information searched and stored in the past.

[0124] In step S707 , the CPU 212 starts a processing loop of steps S708 to S710 for each AP found by the AP search performed in step S706 .

[0125] In step S708, the CPU 212 determines whether the AP found by the AP search satisfies a predetermined condition, and stores the result of the determination. The predetermined condition is a target condition for determining whether the AP is a favorable AP as a target for connection destination change. In other words, in step S708, the CPU 212 determines whether the AP found by the AP search is a favorable AP as a target for connection destination change. This will be referred to later. Fig. 9 This process is described in detail.

[0126] In step S709, the CPU 212 determines whether the AP satisfies the target condition of the AP after the connection destination AP is changed based on the determination result in step S708. If it is determined that the target condition is satisfied, the sequence moves to step S711. However, if it is determined that the target condition is not satisfied, the sequence moves to step S710. Specifically, the CPU 212 makes a determination based on the information (determination result) stored in step S905 or step S906 (described later). In other words, if the determination is made as indicated in step S905 (described later), the sequence moves to step S711, and if the determination is made as indicated in step S906 (described later), the sequence moves to step S710.

[0127] In step S710, the CPU 212 generates a list having contents different from the list of AP information stored in step S706. For example, the CPU 212 excludes (deletes) information of APs that do not satisfy the target condition from the list of AP information. Alternatively, the CPU 212 sets the information of APs that do not satisfy the target condition from the list of AP information stored in step S706 to information different from the conditions actually measured. "Different information" is information indicating that the signal quality is lower than the signal quality actually measured in the AP search. This processing is the processing described in the suppression processing 2 above. "Signal quality" refers to radio wave conditions, and is radio wave strength, etc.

[0128] In this way, if the AP found by the AP search is an AP that does not satisfy the AP connection destination condition, the CPU 212 excludes the AP that does not satisfy the condition from the result of the AP search. Alternatively, the CPU 212 sets information different from the actual measurement result for the AP that does not satisfy the condition. This makes it possible to suppress a situation where an AP that does not satisfy the target condition is included as a recommended AP in a connection destination change request sent from the AP currently connected to the MFP 100. In other words, it is possible to suppress a situation where the connection destination of the MFP 100 is changed to an AP that does not satisfy the security mode condition.

[0129] In step S711, the CPU 212 repeats the processing of steps S708 to S709 or the processing of steps S708 to S710 for other APs found by the AP search performed in step S706. However, if the processing of all APs found by the AP search performed in step S706 has ended, the sequence moves to step S712.

[0130] In step S712, the CPU 212 sends a response to the measurement request to the currently connected AP, as shown in FIG. Figure 6For example, if the processing of step S710 has been performed, the content is different from the result of the AP search, so in step S712, the AP information list is sent as a false response.

[0131] In step S713, the CPU 212 determines whether a connection destination change request has been received from the currently connected AP. The change request corresponds to the AP 101 receiving the connection destination change request from the currently connected AP. Figure 6 If it is determined that a change request has been received, the CPU 212 moves the sequence to step S714, and if no change request has been received, the sequence moves to step S718.

[0132] In steps S714 to S716, the CPU 212 determines whether the connection destination should be changed to the recommended AP included in the change request, and if such a change is not preferred, performs processing for suppressing the connection destination change in response to the change request. This processing corresponds to the suppression processing 1 described above.

[0133] In step S714, the CPU 212 determines whether the recommended AP included in the received change request satisfies a predetermined condition. The predetermined condition is a target condition for determining whether the AP is a favorable (suitable) AP as a target for the connection destination change. In other words, in step S714, the CPU 212 determines whether the recommended AP is a favorable AP as a target for the connection destination change. This will be referred to later. Fig. 9 This process is described in detail.

[0134] In step S715, the CPU 212 determines whether the recommended AP included in the change request satisfies the target condition of the AP after the connection destination AP is changed based on the determination result in step S714. If the target condition is satisfied, the sequence moves to step S716, and if the target condition is not satisfied, the sequence moves to step S718. Specifically, if the determination is made as indicated in step S905 (described later), the sequence moves to step S716, and if the determination is made as indicated in step S906 (described later), the sequence moves to step S718.

[0135] If it is determined in step S715 that the target condition is not satisfied (step S715 is "No"), the CPU 212 may send a response indicating rejection to the currently connected AP without connecting to the recommended AP, as described in the above-mentioned suppression process 1. In other words, the indication of "rejection" is an indication that the connection destination AP will not be changed. In addition, if it is determined that the target condition is not satisfied, the CPU 212 may ignore the change request and skip returning a response.

[0136] In step S716, the CPU 212 sends a response indicating that the received connection destination change request is to be followed to the currently connected AP, and moves the sequence to step S717. This processing corresponds to Figure 6 The processing is performed in step S606.

[0137] In step S717, the CPU 212 terminates the connection with the currently connected AP and performs processing for connecting to the recommended AP included in the connection destination change request (the recommended AP determined to satisfy the target condition in step S714). This processing corresponds to Figure 6 The processing is performed in steps S607 and S608.

[0138] In this way, if the recommended AP is an AP that does not satisfy the conditions of the connection destination AP, the CPU 212 performs control for sending a response of rejecting the change request to the AP currently connected to the MFP 100, control for ignoring the change request, and the like ("No" in step S715). This makes it possible to suppress a situation in which the connection destination AP is changed to an AP that uses a security mode that is unfavorable to the MFP 100 among the recommended APs used as candidates for the AP to be changed to. On the other hand, if the recommended AP is an AP that satisfies the conditions of the connection destination AP, a response indicating that the change request is to be followed is sent, and processing for connecting to the recommended AP is performed ("Yes" in steps S715, S716, and S717). Such control by the CPU 212 enables the MFP 100 to connect to an appropriate AP.

[0139] In step S718, the CPU 212 determines whether to terminate the connection with the currently connected AP. If it is determined that the connection is to be terminated, Figure 7 The sequence shown ends. However, if it is determined that the connection is not to be terminated, the sequence moves to step S705. Specifically, for example, the CPU 212 determines whether an instruction to power off the MFP 100 has been received. The instruction to power off the MFP 100 may be an instruction based on that the console unit 220 of the MFP 100, etc. has not been operated within a predetermined time, an instruction based on that a power button (not shown) of the MFP 100 has been operated, etc.

[0140] although Figure 7 An example is shown in which the processing of steps S707 to S711 (suppression processing 2) and the processing of steps S714 to S716 (suppression processing 1) are performed, but the configuration is not limited thereto. For example, one of the processing of steps S707 to S711 (suppression processing 2) and the processing of steps S714 to S716 (suppression processing 1) may be performed, and the other may not be performed.

[0141] Process for storing the security mode used when connecting to an AP

[0142] Figure 8 702 is a flowchart showing an example of a process for storing information indicating an authentication mode and an encryption mode of an AP together as a security mode used when connecting to an AP when the wireless infrastructure mode is set for the MFP 100. In the flowchart, the process performed by the MFP 100 is realized by the CPU 212 reading out various programs stored in a memory such as the ROM 213 into the RAM 214 and executing the programs. This process is performed in step S703 based on the AP information that has been obtained in step S702.

[0143] The security mode will be described here. The following security mode has been used for wireless communication using a wireless LAN based on the IEEE 802.11 series of standards.

[0144] Authentication Mode

[0145] The following are examples of the types of authentication modes supported by wireless APs.

[0146] (1) PSK mode using pre-shared key

[0147] (2) SAE mode using simultaneous authentication of peer entities (SAE)

[0148] (3) EAP mode that uses an authentication server that supports IEEE 802.1X / EAP to authenticate communication devices connected to the network

[0149] Among them, (1) For example, the security mode using PSK includes the following modes.

[0150] (1-1) WPA (Wi-Fi Protected Access)-PSK

[0151] (1-2)WPA2-PSK

[0152] The PSK mode is a personal mode, and the authentication mode (authentication type, authentication system, security type) is different from that of the enterprise mode.

[0153] Furthermore, (2) for example, the safety mode using SAE includes the following modes.

[0154] (2-1)WPA3-SAE

[0155] Furthermore, (3) for example, the security mode using the authentication server includes the following modes.

[0156] (3-1)WPA-EAP

[0157] (3-2)WPA2-EAP

[0158] (3-3)WPA3-EAP

[0159] The security mode using the authentication server is the authentication mode in the enterprise mode, and the authentication mode (authentication type, authentication system, security type) is different from the personal mode.

[0160] Encryption Mode

[0161] For example, the encryption mode includes the following modes.

[0162] CCMP (Counter Mode using CBC-MAC protocol) using AES (Advanced Encryption Standard)

[0163] Temporal Key Integrity Protocol (TKIP) using RC4

[0164] WEP

[0165] Please note that "EAP" in this manual stands for "Extensible Authentication Protocol." "WEP" stands for "Wired Equivalent Privacy."

[0166] For example, among the above security modes (authentication mode and encryption mode), (2-1), WPA3-SAE and (3-1)-(3-3), WPA / WPA2 / WPA3-EAP are relatively secure security modes. The modes with the second-lowest security are (1-1) and (1-2), WPA / WPA2-PSK. WEP is a relatively insecure security mode. OPEN (no authentication) is a mode that does not provide security. Regarding encryption mode, the mode using AES is a relatively secure mode, TKIP is a relatively insecure mode, and no encryption is a mode that does not provide security.

[0167] The security modes supported by the MFP 100 vary depending on the model, model number, settings, etc. of the MFP 100. It is assumed that the security modes supported by the MFP 100 according to the present embodiment are WPA-PSK, WPA2-PSK, WPA3-SAE, WPA-EAP, WPA2-EAP, WPA3-EAP, and OPEN (no authentication and no encryption). It is assumed that the security mode not supported by the MFP 100 is a mode for encryption using TKIP or WEP, for example.

[0168] In step S801, the CPU 212 determines whether the authentication mode used to connect to the AP is the WPA3-SAE method. For example, the CPU 212 determines that the authentication mode used by the AP for which the selection instruction made by the user is accepted based on the AP information obtained in step S702. If it is determined that the mode is WPA3-SAE, the sequence moves to step S802. However, if it is determined that the mode is not WPA3-SAE, the sequence moves to step S803.

[0169] In step S802 , the CPU 212 stores the relatively secure mode (WPA3-SAE) as the security mode in the RAM 214 and / or the nonvolatile memory 215 .

[0170] In step S803, the CPU 212 determines whether the authentication mode used to connect to the AP is at least one of WPA-EAP, WPA2-EAP, and WPA3-EAP. For example, the CPU 212 determines that the authentication mode used by the AP for which the user makes a selection instruction is accepted based on the AP information obtained in step S702. If it is determined that the authentication mode used to connect to the AP is at least one of WPA-EAP, WPA2-EAP, and WPA3-EAP, the sequence moves to step S804. On the other hand, if it is determined that the authentication mode used to connect to the AP is neither WPA-EAP, WPA2-EAP nor WPA3-EAP, the sequence moves to step S805.

[0171] In step S804 , the CPU 212 stores “relatively secure mode (WPA / WPA2 / WPA3-EAP)” as the security mode in the RAM 214 and / or the nonvolatile memory 215 .

[0172] In step S805, the CPU 212 determines whether the authentication mode used to connect to the AP is at least one of WPA-PSK and WPA2-PSK. For example, the CPU 212 determines that the authentication mode used by the AP for which the user makes a selection instruction is accepted based on the AP information obtained in step S702. If it is determined that the mode is at least one of WPA-PSK and WPA2-PSK, the sequence moves to step S806. On the other hand, if it is determined that neither the WPA-PSK method nor the WPA2-PSK method is used, the process moves to S807.

[0173] In step S806 , the CPU 212 stores “Medium security mode (WPA / WPA2-PSK)” as the security mode in the RAM 214 and / or the nonvolatile memory 215 .

[0174] In step S807, CPU 212 determines whether the authentication mode for connecting to the AP is OPEN (no encryption). For example, CPU 212 determines that the authentication mode used by the AP for which the user makes a selection instruction is accepted based on the AP information obtained in step S702. If CPU 212 determines that the mode is OPEN mode, the sequence moves to step S808. However, if CPU 212 determines that the mode is not OPEN mode, the sequence moves to step S809.

[0175] In step S808 , the CPU 212 stores the “unsafe mode (OPEN mode)” as the safe mode in the RAM 214 and / or the nonvolatile memory 215 .

[0176] In step S809, the CPU 212 records other setting information (setting details) of the wireless infrastructure mode in the RAM 214 and / or the nonvolatile memory 215. The setting information is, for example, AP information required for the wireless infrastructure mode setting. In this process, the security mode is stored together with the type of authentication mode of the AP. As a result, if the security strength of the security mode of the recommended AP is the same as the security strength of the security mode of the MFP 100, it is possible to connect to the same AP using settings such as ESSID, password, etc.

[0177] Note that the security mode used by the MFP 100 to connect to the AP may be limited by the user operating the console unit 220 of the MFP 100 , receiving a specific signal from an external device such as the mobile terminal device 104 , or the like.

[0178] Fig. 9 1 is a flowchart showing an example of processing for determining whether the AP targeted for the determination satisfies a predetermined condition as a connection destination AP. Fig. 9 An example of processing for determining whether the AP targeted for the determination is an AP suitable as the connection destination AP after the connection destination is changed is shown. In this flowchart, the processing performed by MFP 100 is implemented by CPU 212 reading various programs stored in a memory such as ROM 213 into RAM 214 and executing these programs.

[0179] Note that Figure 7 Step S708 and step S714 are performed Fig. 9 In other words, this processing is performed on the AP found by the AP search based on the measurement request, the recommended AP included in the change request, etc. That is, this processing is performed when it is determined whether to change the connection destination AP.

[0180] In step S901, the CPU 212 determines whether the security mode of the AP (for which determination is made and which is a candidate for switching the connection destination) (hereinafter referred to as the "candidate AP") is a mode that can be used by the MFP 100. If the mode is determined to be an available mode, the sequence moves to step S902. However, if it is determined that the mode is not an available mode, the sequence moves to step S906. Specifically, for example, if the MFP 100 supports a security mode used on a network formed by the candidate AP and the MFP 100 is not restricted from using the mode, the CPU 212 determines that the security mode is an available mode. If the mode is at least one of a mode that is not supported by the MFP 100 and a mode that is restricted from using the MFP 100, the CPU 212 also determines that the security mode used by the candidate AP is not an available mode. As described above, the security mode supported by the MFP 100 varies depending on the model, model number, settings, etc. of the MFP 100. In addition, for example, the security modes supported by the MFP 100 are pre-stored in the non-volatile memory 215. In addition, for example, as will be referred to later Fig.10 As described above, the security mode that can be used by the MFP 100 may be limited by settings based on user operations.

[0181] Thus, when, in addition to the condition of whether or not the MFP 100 is supported, even if the MFP 100 is supported, use is restricted due to settings, etc., step S901 is processed as a "No" determination. Thus, when the MFP 100 receives a change request from the currently connected AP, if the security mode of the candidate AP is not a mode available to the MFP 100, a situation in which the connection destination AP is changed can be suppressed.

[0182] Although the present embodiment describes an example in which the determination in step S901 is performed based on whether the MFP 100 supports the mode and whether the use of the mode is restricted in the MFP 100, the determination is not limited thereto. For example, in step S901, the CPU 212 may determine whether the MFP 100 supports the mode without determining whether the use of the MFP 100 is restricted. For example, if it is determined that the security mode of the determined AP is a mode supported by the MFP, the CPU 212 may move the sequence to step S902, and if it is not a mode supported by the MFP, the sequence may be moved to step S906.

[0183] In step S902, the CPU 212 determines whether the security strength of the security mode of the candidate AP is at least Figure 7 The security strength of the security mode stored in step S703 (see Figure 8 ). If it is determined that the security strength is at least the security strength of the stored security mode, the sequence moves to step S903. Otherwise, the sequence moves to step S906.

[0184] A specific example of step S902 will be described. For example, if Figure 7 If "WPA1 / 2-PSK" is stored as the security mode in step S703 of the candidate AP, and the security strength of the security mode of the candidate AP is "WPA3-SAE" or "WPA1 / 2-PSK", the CPU 212 moves the sequence to step S903. If "WPA1 / 2-PSK" is stored in step S703, and the security strength of the security mode of the candidate AP is "OPEN", the CPU 212 moves the sequence to step S906. If "WPA3-SAE" is recorded in step S703, and the security strength of the security mode of the candidate AP is "WPA3-SAE", the CPU 212 moves the sequence to step S903. If "WPA3-SAE" is recorded in step S703, and the security strength of the security mode of the candidate AP is "WPA1 / 2-PSK", the CPU 212 moves the sequence to step S906.

[0185] In this way, if the candidate AP is an AP that uses a security mode lower in security strength than the security mode of the currently connected AP, it is determined that the AP does not satisfy the condition of the connection destination AP. This makes it possible to suppress a situation in which the connection destination AP is changed to an AP lower in security strength than the currently connected AP when the MFP 100 receives a change request from the currently connected AP. On the other hand, if the candidate AP is an AP that uses a security mode at least equal in security strength to the security mode of the currently connected AP, it is determined that the AP satisfies the condition of the connection destination AP.

[0186] In step S903, the CPU 212 determines whether the type of the candidate AP's authentication mode (e.g., PSK, SAE, EAP, or OPEN) is the same as the type of the stored authentication mode. If the authentication mode is the same type, the CPU 212 moves the sequence to step S905, and if not, moves the sequence to step S904.

[0187] For example, suppose in Figure 8 The security mode stored in the process of (the security mode set when the wireless infrastructure mode is set) is the (1-1) WPA-PSK or (1-2) WPA2-PSK. In this case, if the security mode of the candidate AP is (1-1) WPA-PSK or (1-2) WPA2-PSK, the type of authentication mode is the same, that is, PSK, so it is determined as "yes" in step S903. In other words, if, for example, Figure 8If the security mode stored in the process is the (1-1) WPA-PSK, and the security mode of the candidate AP is (1-2) WPA2-PSK, it is determined as "yes" in step S903.

[0188] At the same time, for example, assuming Figure 8 The security mode stored in is the aforementioned (1-1) WPA-PSK or (1-2) WPA2-PSK. In this case, if the security mode of the candidate AP is (2-1) WPA3-SAE, the authentication mode type is PSK and SAE, so it is determined as "No" in step S903. Similarly, if, for example, Figure 8 If the mode stored in the process is the (1-1) WPA-PSK or (1-2) WPA2-PSK, and the mode of the candidate AP is (3-1) WPA-EAP or (3-2) WPA2-EAP, then the determination is "No" in step S903. Figure 8 The security mode stored in the process corresponds to one of the personal mode and the enterprise mode, and the type of the security mode of the candidate AP corresponds to the other of the personal mode and the enterprise mode, then the types of authentication modes are different.

[0189] In step S904, the CPU 212 determines whether a setting value corresponding to the authentication mode (e.g., SAE, PSK, EAP, or OPEN) of the candidate AP is recorded. If it is determined that the value is not stored, the sequence moves to step S905. However, if it is determined that the value is stored, the sequence moves to step S906.

[0190] Next, the setting values ​​corresponding to the authentication mode will be described. The setting values ​​required for SAE are, for example, a password. The setting values ​​required for PSK are, for example, a password and a PSK (pre-shared key). The setting values ​​required for EAP are, for example, a user name, a login name, a certificate, etc. EAP is an enterprise mode. In other words, depending on the type of authentication mode, the setting value is information required when the MFP 100 is connected to the AP. For example, the setting value corresponding to the authentication mode is stored in the process of step S703. For example, in Figure 8 The setting value is stored in step S809, which is executed as the processing of step S703. In this way, even if the type of authentication mode used by the MFP 100 and the currently connected AP is different from the type of authentication mode of the candidate AP, if the information required for connection using the different type of mode is obtained, it is assumed that the AP to which the connection destination is to be changed satisfies the target condition despite the difference in type.

[0191] For example, if the security mode of the currently connected AP is "WPA1 / 2-PSK", but the security mode of the candidate AP is "WPA1 / 2EAP", it is determined in step S903 that the types of authentication modes are different. Meanwhile, if it is determined in step S904 that the EAP setting value (user name, login name, certificate, etc. required for EAP authentication) is stored, the candidate AP is not excluded as a target for connection destination change. In other words, changing the connection destination based on a change request for the candidate AP is not suppressed.

[0192] Although the present embodiment has described an example in which the sequence moves to step S904 when it is determined as "No" in step S903, the configuration is not limited thereto. For example, when it is determined as "No" in step S903, the processing of step S904 may be skipped, and the sequence may move to step S905. In other words, when the type of authentication mode of the currently connected AP is different from the type of authentication mode of the candidate AP, the CPU 212 may uniformly determine that the target condition is not satisfied.

[0193] In step S905, the CPU 212 determines whether the AP is suitable for the connection destination change based on the change request. In other words, it determines whether the candidate AP satisfies the target condition of the AP after the connection destination change. The CPU 212 stores the result of this determination in the RAM 214 and / or the nonvolatile memory 215.

[0194] In step S906, the CPU 212 determines that the AP is not suitable for the connection destination change based on the change request. In other words, it is determined that the candidate AP does not meet the target condition of the AP after the connection destination change. The CPU 212 stores the result of this determination in the RAM 214 and / or the nonvolatile memory 215.

[0195] Setting screen for limiting the security mode used when connecting to an AP

[0196] Fig.10 is an example of a setting screen for limiting the security mode used when the MFP 100 is connected to an AP in the wireless infrastructure mode. Figure 3D When “Wireless LAN Advanced Settings” is selected in the screen shown in FIG. 1 , the CPU 212 displays a Fig.10 Although the setting screen displayed in the console unit 220 of the MFP 100 is described as an example, the configuration is not limited thereto. Fig.10 The setting screen shown may be displayed in, for example, an external device such as the mobile terminal device 104 by an application capable of performing settings in the MFP 100 , a web browser, or the like.

[0197] The setting items (options) 1001 to 1004 for the security mode used when connecting to an AP in wireless infrastructure mode are displayed in the setting screen. For example, the setting items 1001 to 1004 can be displayed as an interface capable of accepting instructions for setting a lower limit for the security mode. In other words, the setting screen is a screen in which a lower limit can be set for the security mode used by the MFP 100 when connected to the AP. The setting screen can also be referred to as a screen in which the security mode that can be used when the MFP 100 is connected to the AP can be set. In other words, the setting screen can be referred to as a "security setting screen." In other words, the "lower limit" of the security mode is the standard for the security mode when the MFP 100 is connected to the AP. Setting the standard for the security mode in the setting screen in this way makes it possible to suppress a situation in which the connection destination of the MFP 100 is changed to an AP that uses a security mode that does not meet the standard.

[0198] A relatively secure security mode is displayed in the setting item 1001. For example, WPA3-SAE (AES) and WPA1 / 2 / 3-EAP (AES) are relatively secure modes.

[0199] The medium security mode is displayed in the setting item 1002. For example, WPA1 / 2-PSK (AES) is the medium security mode.

[0200] A relatively unsafe security mode is displayed in the setting item 1003. For example, WPA-PSK (TKIP) is a relatively unsafe mode.

[0201] An unsafe security mode is displayed in the setting item 1004. For example, a mode that does not require authentication when connecting to an AP is an unsafe mode. For example, an OPEN mode is a mode that does not require authentication.

[0202] When one of the security mode setting items 1001 to 1004 is selected in the setting screen by a user operation, the CPU 212 stores the security mode corresponding to the selected setting item in the RAM 214 and / or the nonvolatile memory 215. In other words, the security mode corresponding to the setting item selected by the user is set as the lower limit of the security mode used when the MFP 100 is connected to the AP. As a result, when the MFP 100 is connected to the AP in the wireless infrastructure mode, the MFP 100 is restricted from connecting to the AP in a mode less secure than the security mode selected by the user. This makes it possible to suppress a situation in which the MFP 100 is connected to the AP in a security mode that is not intended by the user.

[0203] Specifically, if, for example, the setting item 1001 is selected, when the MFP 100 is connected to the AP in the wireless infrastructure mode, the security mode corresponding to the setting item 1001 can be used. On the other hand, the use of the security modes corresponding to the setting items 1002 to 1004 is restricted. Meanwhile, if, for example, the setting item 1002 is selected, when the MFP 100 is connected to the AP in the wireless infrastructure mode, the security modes corresponding to the setting items 1001 and 1002 can be used. On the other hand, the use of the security modes corresponding to the setting items 1003 and 1004 is restricted.

[0204] The security mode setting items 1001 to 1004 selected by the user in the setting screen may be used to determine whether to change the connection destination AP ( Fig. 9 In step S902), whether to limit the security mode used when connecting to the AP.

[0205] If in Figure 7 In step S702, step S706, etc., if the security mode used by the AP obtained through the AP search is only the mode restricted in the setting screen, these modes can be excluded from the results of the AP search to limit the security mode used when connecting to the AP.

[0206] Meanwhile, for example, an item with a higher security strength among the setting items 1001 to 1004 may be preferentially displayed in the setting screen. For example, in the setting screen, an item with a higher security strength may be displayed at a higher position, or may be highlighted.

[0207] Although the present embodiment describes an example of storing the security modes corresponding to the setting items 1000 to 1004 selected by the user through the console unit 220 of the MFP 100, the configuration is not limited thereto. For example, if the security mode corresponding to the setting items 1000 to 1004 selected by the user through the console unit 220 of the MFP 100 is displayed in the external device such as the mobile terminal device 104 as described above, Fig.10 , the security mode setting can be stored based on a specific signal sent from an external device.

[0208] As described above, according to the step S708 in this embodiment, Fig. 9 In the process of step S902 of , when a measurement request is received from the currently connected AP, the MFP 100 performs an AP search. Then, the MFP 100 performs control so that, in accordance with the above-mentioned suppression process 2, a false response is provided for information about an AP having a security strength lower than that of the currently connected AP among the APs found by the AP search. This suppresses a situation in which a change request is sent from the currently connected AP to request a change of the connection destination to an AP having a lower security mode.

[0209] In addition, according to the step S714 in this embodiment, Fig. 9 In the processing of step S902, when a connection destination AP change request is received from the currently connected AP, the MFP 100 performs control based on the security strength of the security mode of the recommended AP. If the recommended AP is an AP that uses a security mode with a security strength lower than the security strength of the currently connected AP, the MFP 100 performs control in accordance with suppression processing 1 so that the connection destination AP is not changed to the recommended AP. In other words, the MFP 100 does not change the connection destination to the recommended AP, and does not respond to the change request, or makes a response indicating that the connection destination AP will not be changed. This suppresses the situation where the security strength of the connection to the AP decreases due to changing the connection destination based on the connection destination change request. In other words, it can be easier to connect to an AP with a better communication environment while maintaining a secure connection with the AP.

[0210] According to the step S708 in this embodiment, Fig. 9 In the processing of step S901, when the APs found as a result of the AP search include an AP not supported by the MFP 100 or an AP whose use is restricted, the MFP 100 performs the following control. According to the above-mentioned suppression processing 2, control is performed so that information of the AP not supported by the MFP 100 or the AP whose use is restricted is provided as a false response in the beacon report (response to the measurement request). This suppresses the situation in which a change request is sent to change the connection destination to an AP using a security mode not supported by the MFP 100, an AP using a security mode restricted by the MFP, or the like.

[0211] In addition, according to the step S714 in this embodiment, Fig. 9 In the processing of step S901, when a connection destination AP change request is received, the MFP 100 performs the following control. If the security mode of the recommended AP is a security mode that the MFP 100 does not support or a security mode with limited use, control is performed according to suppression processing 1 so that the connection destination is not changed to the recommended AP. In other words, the MFP 100 does not respond to the change request, or makes a response indicating that the connection destination AP will not be changed. This makes it possible to suppress the occurrence of a situation in which the MFP 100 attempts to change the connection destination based on the connection destination change request and terminates the connection with the currently connected AP, but cannot connect to the recommended AP (connection with the recommended AP fails).

[0212] Assume that the MFP 100 does not perform the processing of step S901 as in the present embodiment, but terminates the connection with the currently connected AP according to the connection destination change request, and attempts to connect to the recommended AP using a security mode that the MFP 100 does not support or using a limited security mode. If the MFP 100 fails to connect to the recommended AP, the following problem occurs.

[0213] The first problem is that the disconnection from the AP before switching causes a period of time during which the MFP 100 cannot communicate with the AP. In addition, processing time is required to connect to the recommended AP, and processing time is required to connect to another AP after the connection with the recommended AP fails. This prolongs the period of time during which communication is impossible. Therefore, stable communication is hindered. The second problem is that if the MFP 100 terminates the connection with the AP before switching based on a connection destination AP change request and does not store the information required to connect to the AP before switching, it will not be able to reconnect to the AP before switching. The information required for the connection is connection information including at least one of an SSID and a password, other setting information, and the like. In order to prevent such a problem from occurring, in the present embodiment, more stable communication can be performed while reducing unnecessary disconnections from the AP, and control can be performed based on a change request to connect to an AP with a better communication environment.

[0214] According to the step S708 in this embodiment, Fig. 9 In the process of step S903 of , when a measurement request is received from the currently connected AP, the MFP 100 performs an AP search. Then, according to the above-mentioned suppression process 2, the MFP 100 makes a false response in the beacon report (response to the measurement request) for information of an AP of a security mode type different from that of the currently connected AP among the APs found by the AP search. This suppresses the situation where a change request is sent requesting to change the connection destination to an AP with a different type of security mode.

[0215] In addition, according to the step S714 in this embodiment, Fig. 9In the processing of step S903, when a connection destination AP change request is received from the currently connected AP, the MFP 100 performs control based on the type of authentication mode of the recommended AP. If the type of authentication mode of the recommended AP is different from the authentication mode of the currently connected AP, the MFP 100 performs control in accordance with suppression processing 1 so that the connection destination is not changed to the recommended AP. In other words, the MFP 100 does not respond to the change request of the currently connected AP, or makes a response indicating that the connection destination AP will not change. In this way, it is easier to connect to an AP with a better communication environment while maintaining the same type of authentication mode used to connect to the AP as used in the wireless infrastructure mode setting. In other words, it is easier to connect to an AP with a better communication environment based on a change request while suppressing problems such as a decrease in security or security becoming too strong due to an unintentional change in the authentication mode type of the AP.

[0216] In addition, by performing the processing of step S904 of the present embodiment, if the setting value corresponding to the authentication mode type of the recommended AP is stored, the connection destination AP is changed based on the change request even if the type of the authentication mode is different. By doing so, it is easier to connect to an AP with a better communication environment while maintaining the connection with the currently connected AP for as long as possible.

[0217] Although it has been described that the security model of the candidate AP and the security model of the AP stored when the wireless infrastructure mode is set and started are compared in the determination of step S902, Figure 7 The method of comparing the security mode with the predetermined security mode may be described in step S703 of FIG. 1 , but the structure is not limited thereto. For example, the security mode may be compared with the predetermined security mode. Specifically, as shown in FIG. Fig.10 As described above, the security mode may be compared with a security mode stored as a result of a user operating the console unit 220 of the MFP 100. The security mode may also be compared with a security mode stored in response to receiving a specific signal from an external device such as the mobile terminal device 104. Furthermore, if the security mode is compared with a security mode specified in advance in the process of step S902, the security mode may be specifically compared with available security modes stored in one or more of the ROM 213, the RAM 214, and the nonvolatile memory 215 of the MFP 100.

[0218] Furthermore, although a method for determining whether the security mode of the candidate AP is supported or restricted by the MFP 100 in the determination of step S901 has been described, the configuration is not limited thereto. In the determination of step S901, the CPU 212 may determine whether the MFP 100 and the candidate AP are connectable based on information obtained from the candidate AP and capability information of the MFP 100. For example, the determination may be made based on at least one of a security mode (authentication mode and / or encryption mode), a frequency band, a channel, and a communication standard.

[0219] According to the present embodiment described so far, more appropriate control can be performed in response to a request to change the connection destination received from an AP. In other words, the MFP 100 as a STA can be switched to an appropriate AP.

[0220] The above-described various types of control by the CPU 212 may be performed by a single hardware, or control over the apparatus as a whole may be performed by dividing the processing among a plurality of hardware (eg, a plurality of processors or circuits).

[0221] Although the preferred embodiments of the present invention are described above, the present invention is not intended to be limited to the specific embodiments, and all modifications that do not depart from the basic spirit of the present invention are intended to be included in the scope of the present invention. In addition, the above embodiments are only embodiments of the present invention, and different embodiments can be appropriately combined.

[0222] In addition, although the above embodiment describes the case where the present invention is applied to an MFP as an example, the present invention is not limited to this example, and the present invention can be applied to any wireless device as follows, which serves as a STA capable of processing in response to a request to change the connection destination from an AP. In other words, the present invention can be applied to a personal computer, a PDA, a tablet terminal, a mobile phone terminal such as a smartphone, a music player, a game console, an e-book reader, a smart watch, various measuring devices (sensor devices) such as a thermometer and a hygrometer, etc. The present invention can also be applied to a digital camera (including a still camera, a video camera, a web camera, and a security camera), a printer, a scanner, and a drone. The present invention can also be applied to a video output device, an audio output device (such as a smart speaker), a streaming media player, a wireless LAN client device (adapter) to which a USB terminal, a LAN cable terminal, etc. can be connected, etc. The video output device includes, for example, a device such as a set-top box, which obtains (downloads) a moving image or a still image specified by a URL provided by an electronic device on the Internet, and outputs the moving image or the still image to a display device connected via a video output terminal such as an HDMI (registered trademark) terminal. In this way, streaming playback, mirroring display (the content displayed in the electronic device is also displayed on the display of the display device), etc. are realized in the display device. Video output devices also include media players such as televisions, hard disk recorders, blue-ray recorders, DVD recorders, etc., as well as head-mounted displays, projectors, televisions, display devices (monitors), signage devices, etc. The present invention can also be applied to devices that can be connected via Wi-Fi, or so-called "smart appliances" such as air conditioners, refrigerators, washing machines, vacuum cleaners, ovens, microwave ovens, lighting equipment, heating equipment, cooling equipment, etc.

[0223] Other embodiments

[0224] The embodiments of the present invention may also be implemented by reading and executing computer executable instructions (e.g., one or more programs) recorded on a storage medium (which may also be more completely referred to as a "non-transitory computer-readable storage medium") to perform one or more functions in the above-mentioned embodiments, and / or a computer of a system or device including one or more circuits (e.g., an application-specific integrated circuit (ASIC)) for performing one or more functions in the above-mentioned embodiments, and the embodiments of the present invention may be implemented by, for example, reading and executing the computer executable instructions from the storage medium by the computer of the system or device to perform one or more functions in the above-mentioned embodiments, and / or controlling the one or more circuits to perform one or more functions in the above-mentioned embodiments. The computer may include one or more processors (e.g., a central processing unit (CPU), a microprocessing unit (MPU)), and may include a network of separate computers or separate processors to read and execute the computer executable instructions. The computer executable instructions may be provided to the computer, for example, from a network or the storage medium. The storage medium may include, for example, a hard disk, a random access memory (RAM), a read-only memory (ROM), a memory of a distributed computing system, an optical disk (such as a compact disc (CD), a digital versatile disc (DVD), or a Blu-ray disc (BD) TM ), flash memory devices, memory cards, etc.

[0225] The embodiments of the present invention may also be implemented by providing software (program) for performing the functions of the above-described embodiments to a system or device via a network or various storage media, and a computer or a central processing unit (CPU) or a microprocessing unit (MPU) of the system or device reads and executes the program.

[0226] While the present invention has been described with reference to exemplary embodiments, it is to be understood that the invention is not limited to the disclosed exemplary embodiments.The scope of the following claims is to be accorded the broadest interpretation so as to encompass all such modifications and equivalent structures and functions.

Claims

1. An electronic device, comprising: a connecting unit configured to connect to a first access point AP based on a first security mode; a changing unit configured to change the AP serving as the connection destination based on a change request of the AP serving as the connection destination, the change request being received from the currently connected AP; as well as A control unit configured to perform control to suppress a situation in which, due to a change of an AP used as a connection destination performed by a changing unit, an AP among candidate APs used as candidates to be changed to by the changing unit uses a security mode weaker in security strength than the first security mode.

2. The electronic device according to claim 1, wherein: The control unit performs control to suppress a situation in which an AP using a security mode weaker in security strength than the first security mode among the candidate APs is disconnected from the currently connected first AP as a connection destination after the change.

3. The electronic device according to claim 1, further comprising: a receiving unit configured to receive a measurement request sent from the first AP requesting a measurement result of measuring a signal quality of an AP near the electronic device; a measuring unit configured to measure signal quality of nearby APs upon receiving the measurement request; as well as a sending unit configured to send a response to the first AP based on the measurement result measured by the measuring unit, When the measurement result from the measuring unit includes the signal quality of a second AP using a security mode weaker than the first AP in security strength, the control unit controls the sending unit to send the response as content having a signal quality lower than the signal quality of the second AP or as content that does not include the signal quality of the second AP.

4. The electronic device according to claim 1, in, when the recommended AP which is one of the candidate APs and is recommended to be changed to in the change request is a third AP using a security mode which is equal to or stronger than the first security mode in security strength, the control unit controls the change unit to change the connection destination so that the third AP is the changed connection destination, and When the recommended AP is a second AP using a security mode weaker in security strength than the first security mode, the control unit controls the changing unit not to change the connection destination so that the second AP is the changed connection destination.

5. The electronic device according to claim 4, in, When the recommended AP is the second AP, the control unit controls the changing unit not to change the AP serving as the connection destination, and controls to transmit a response indicating rejection of change of the connection destination to the first AP based on the change request as a response to the change request.

6. The electronic device according to claim 4, in, When the recommended AP is the second AP, the control unit controls the changing unit not to change the AP serving as the connection destination, and controls not to transmit a response to the change request to the first AP.

7. The electronic device according to claim 1, further comprising: a recording control unit configured to perform control to record a security mode used in connection with the first AP, The control unit controls the change of the connection destination based on the change request according to the security mode used in the connection with the first AP recorded by the recording control unit.

8. The electronic device according to claim 7, in, The security mode recorded by the recording control unit is information identifying at least one of an authentication mode and an encryption mode.

9. The electronic device according to claim 1, further comprising: a setting unit configured to set a security mode that can be used in connection with the AP, The first security mode is a security mode based on a security mode set by the setting unit.

10. The electronic device according to claim 1, in, The control unit also controls to suppress a situation in which the changing unit changes the AP serving as the connection destination so that an AP communicating using a security mode not supported by the electronic device or a use-limited security mode of the electronic device is the changed connection destination.

11. The electronic device according to claim 1, in, The control unit also controls to suppress a situation in which the changing unit changes the AP serving as the connection destination so that an AP connected using a second authentication mode different from the first authentication mode used to connect to the first AP is the changed connection destination.

12. The electronic device according to claim 1, in, The first security mode is at least one of the first mode, the second mode with a security strength lower than the first mode, the third mode with a security strength lower than the second mode, and the fourth mode with a security strength lower than the third mode.

13. The electronic device according to claim 12, in, The first mode is at least one of a mode using peer entity simultaneous authentication SAE, a mode using an authentication server compliant with IEEE 802.1X / Extensible Authentication Protocol EAP, and a mode using Advanced Encryption Standard AES.

14. The electronic device according to claim 12, in, The second mode is a mode using a pre-shared key PSK.

15. The electronic device according to claim 12, in, The third mode is a mode using the Temporal Key Integrity Protocol TKIP.

16. The electronic device according to claim 12, in, The fourth mode is the OPEN mode which does not require authentication and encryption.

17. The electronic device according to claim 1, in, The electronic device is connected to the AP and processes according to the IEEE 802.11ax standard.

18. The electronic device according to claim 1, in, The electronic device is capable of performing at least one of a process compliant with Orthogonal Frequency Division Multiple Access (OFDMA) and a process compliant with a Target Wake Time (TWT).

19. The electronic device according to claim 1, in, The electronic device is able to change the connection destination to an AP using a 6 GHz frequency band by changing the AP serving as the connection destination based on the change request.

20. The electronic device according to claim 1, further comprising: A printing unit is configured to be capable of executing a printing process based on the printing data received via the AP.

21. The electronic device according to claim 1, in, The control unit performs control so that the suppression is performed based on the security strength of the candidate AP.

22. A control method for an electronic device, the control method comprising: Connecting to a first access point AP based on a first security mode; changing the AP serving as the connection destination based on a change request of the AP serving as the connection destination, the change request being received from the currently connected AP; as well as Control is performed to suppress a situation in which an AP to be changed to in the change among candidate APs used as candidates is connected due to a change of the AP used as a connection destination in the change, the AP using a security mode weaker in security strength than the first security mode.

23. A computer-readable storage medium storing a program configured to cause a computer to: Connecting to a first access point AP based on a first security mode; changing the AP serving as the connection destination based on a change request of the AP serving as the connection destination, the change request being received from the currently connected AP; as well as Control is performed to suppress a situation in which an AP to be changed to in the change among candidate APs used as candidates is connected due to a change of the AP used as a connection destination in the change, the AP using a security mode weaker in security strength than the first security mode.

24. A computer program product configured to cause a computer to: Connecting to a first access point AP based on a first security mode; changing the AP serving as the connection destination based on a change request of the AP serving as the connection destination, the change request being received from the currently connected AP; as well as Control is performed to suppress a situation in which an AP to be changed to in the change among candidate APs used as candidates is connected due to a change of the AP used as a connection destination in the change, the AP using a security mode weaker in security strength than the first security mode.

Images