Information processing apparatus, information processing system, method, and program

Abstract

To appropriately avoid a risk of communicating with an unintended device.SOLUTION: A reception unit (second signal reception unit) 42 that receives a plurality of pieces of identification information from an electronic device that transmits the plurality of pieces of identification information corresponding to a plurality of authentication methods having different avoidance performances for a risk of communicating with an unintended device to an information processing apparatus 3 that executes an authentication process for wireless communication with the electronic device according to a predetermined wireless communication standard; And a selection part 46 for selecting an authentication system having the avoidance performance according to the acquired predetermined information, and an authentication part (second pairing part) 47 for performing the authentication processing with the electronic device by the selected authentication system.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] The present disclosure relates to a technique for making a wireless connection. [Background technology]

[0002] Conventionally, an information processing device (see Patent Document 1) has been proposed that includes a wireless communication interface that complies with the BLE standard, a means for intermittently transmitting a first beacon signal that does not include predetermined information via the wireless communication interface, a means for transmitting a second beacon signal that includes the predetermined information via the wireless communication interface based on a predetermined condition being satisfied, and a means for executing communication according to the predetermined information with a terminal that sent the response based on a response to the second beacon signal, wherein the predetermined information is information for identifying a process to be executed via BLE wireless communication with which a connection relationship has been established. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent No. 6911084 Summary of the Invention [Problem to be solved by the invention]

[0004] Conventionally, wireless communication has been performed in accordance with wireless communication standards such as Bluetooth (registered trademark). However, such wireless communication may pose a risk of communicating with an unintended device.

[0005] In view of the above-mentioned problems, an object of the present disclosure is to appropriately avoid the risk of communicating with unintended devices. [Means for solving the problem]

[0006] An example of the present disclosure is an information processing device that performs authentication processing for wireless communication conforming to a predetermined wireless communication standard with an electronic device, and includes: a receiving means that receives multiple pieces of identification information from the electronic device that transmits the multiple pieces of identification information corresponding to multiple authentication methods with different avoidance capabilities against the risk of communicating with an unintended device; an acquiring means that acquires predetermined information that can estimate the risk of communicating with an unintended device; a selecting means that selects, from the multiple authentication methods corresponding to the received multiple pieces of identification information, an authentication method that has the avoidance capability according to the acquired predetermined information; and an authenticating means that performs the authentication processing with the electronic device using the selected authentication method.

[0007] Another example of the present disclosure is an information processing device that receives multiple pieces of identification information corresponding to multiple authentication methods from an electronic device, selects an authentication method to be used for authentication processing of the electronic device from the multiple authentication methods based on predetermined information that can estimate the risk of communicating with an unintended device, and authenticates the electronic device using the selected authentication method.

[0008] Another example of the present disclosure is an information processing system including an electronic device and an information processing device that executes authentication processing for wireless communication conforming to a predetermined wireless communication standard with the electronic device, wherein the electronic device is equipped with a transmitting means that transmits a plurality of identification information corresponding to a plurality of authentication methods having different avoidance capabilities against the risk of communicating with an unintended device, and the information processing device is equipped with a receiving means that receives the plurality of identification information, an acquiring means that acquires predetermined information that can estimate the risk of communicating with an unintended device, a selecting means that selects, from the plurality of authentication methods corresponding to the received plurality of identification information, an authentication method having the avoidance capability according to the acquired predetermined information, and an authenticating means that executes the authentication processing with the electronic device using the selected authentication method.

[0009] The present disclosure can be understood as an information processing device, a system, a method executed by a computer, or a program executed by a computer. The present disclosure can also be understood as such a program recorded on a recording medium readable by a computer or other device, machine, etc. Here, a recording medium readable by a computer, etc. refers to a recording medium that stores information such as data and programs by electrical, magnetic, optical, mechanical, or chemical action and can be read by a computer, etc. [Effects of the Invention]

[0010] According to the present disclosure, it is possible to appropriately avoid the risk of communicating with unintended devices. [Brief explanation of the drawings]

[0011] [Figure 1] 1 is a schematic diagram illustrating a configuration of a system according to an embodiment. [Figure 2] 1 is a diagram illustrating an outline of the functional configuration of an electronic device (scanner) according to an embodiment. [Figure 3] 1 is a diagram illustrating an outline of the functional configuration of an information processing device (user terminal) according to an embodiment. [Figure 4] FIG. 10 is a diagram illustrating an example of a model selection screen according to the embodiment. [Figure 5] FIG. 10 is a diagram illustrating an example of a scanner search screen according to the embodiment. [Figure 6] FIG. 10 is a diagram showing an example of an approach instruction screen according to the embodiment. [Figure 7] 1 is a flowchart showing an outline of a pairing process flow according to an embodiment and a communication sequence (1). [Figure 8] 10 is a flowchart showing an outline of a pairing process flow according to an embodiment and a communication sequence (2). [Figure 9] 10 is a flowchart showing an outline of a pairing process flow according to an embodiment and a communication sequence (3). [Figure 10]FIG. 10 is a diagram illustrating an outline of the functional configuration of an information processing device (user terminal) according to Variation 1. [Figure 11] 10 is a flowchart showing an outline of a pairing process flow and a communication sequence according to Variation 1. [Figure 12] 10 is a flowchart showing an outline of a pairing process flow and a communication sequence according to Variation 2. [Figure 13] 10 is a flowchart showing an outline of a pairing process flow and a communication sequence according to Variation 3. DETAILED DESCRIPTION OF THE INVENTION

[0012] Hereinafter, embodiments of an information processing device, a system, a method, and a program according to the present disclosure will be described with reference to the drawings. However, the embodiments described below are merely examples, and the information processing device, the information processing system, the method, and the program according to the present disclosure are not limited to the specific configurations described below. In implementing the present disclosure, a specific configuration according to the embodiment may be appropriately adopted, and various improvements and modifications may be made.

[0013] In the present embodiment, an information processing device, a system, a method, and a program according to the present disclosure will be described as being implemented in a system for performing wireless communication according to Bluetooth. However, the information processing device, the information processing system, the method, and the program according to the present disclosure can be widely used in technologies for performing wireless communication according to any wireless communication standard, and the application of the present disclosure is not limited to the examples shown in the embodiments.

[0014] Conventionally, pairing is performed between an information processing device (such as a smartphone or a PC (Personal Computer)) and an electronic device (such as a peripheral device, such as a scanner) when wireless communication conforming to a wireless communication standard, such as Bluetooth is performed. However, facilitating user operations in the authentication process (authentication procedure) for such pairing increases the risk of communication with an unintended device (such as security risks related to wireless communication, such as spoofing, man-in-the-middle attacks, and promiscuous connections, and the risk of erroneous selection (mistake) of an electronic device). Conversely, avoiding the risk of communication with an unintended device increases the complexity of user operations for pairing, which increases the user's workload. In other words, it is difficult to simultaneously reduce user effort, ensure security, and prevent communication when an electronic device is erroneously selected.

[0015] For pairing using Bluetooth and other technologies, multiple pairing methods (authentication methods, association models) are available. For example, four authentication methods are available: Just Works, Passkey Entry, Numeric Comparison, and Out-of-Band (OOB). Just Works is an authentication method that does not require user operation, such as entering a passkey (PIN (Personal Identification Number) code). Just Works typically automatically authenticates the connection partner without user operation. However, some scanners (models) require a confirmation operation to determine whether pairing should be performed (for example, entering Yes / No in response to the question "Do you want to pair?"). Therefore, Just Works can be considered an authentication method that does not require any operation other than the input operation to allow pairing. Furthermore, Just Works is an authentication method that does not require any operation (user operation) to confirm that the connection partner is correct, and is sometimes referred to as an authentication method without authentication under the Bluetooth standard (a pairing method without authentication). Passkey Entry is an authentication method that displays a six-digit PIN code (numbers) on one device, prompting the user to confirm the PIN code and then enter it on the other device. Numeric Comparison is an authentication method that displays a six-digit PIN code (numbers) on both devices, prompting the user to confirm whether the two PIN codes are the same and enter the confirmation result. Out-of-Band is an authentication method that passes authentication information using a method other than Bluetooth, such as NFC (Near Field Communication) or USB (Universal Serial Bus). Therefore, Out-of-Band is an authentication method that requires a different communication method or medium.

[0016] In this case, it is preferable to use Just Works because it facilitates user operation (user convenience) and because scanners do not necessarily have screens with sufficient display capabilities. However, with Just Works, pairing is completed without, for example, verifying that the scanner selected by the user on their smartphone is the one the user actually wants to pair with. In other words, there is no verification that the connection destination is correct. As a result, there is a risk that a user may not realize that they have selected the wrong scanner or that their scanner has been spoofed. While it is possible for a user to verify in advance that they have selected the correct scanner by carefully checking the serial number, etc., printed on the scanner, in reality, checking the back and bottom of each scanner would be time-consuming and impractical for the user.

[0017] For this reason, the system described in this embodiment selects an authentication method with avoidance capabilities according to predetermined information that can estimate the risk of communicating with an unintended device, and performs authentication processing with the electronic device using the selected authentication method. This makes it possible to select an authentication method according to the risk of communicating with an unintended device. In other words, it is possible to appropriately avoid the risk of communicating with an unintended device. Furthermore, this makes it possible to reduce the risk of communicating with an unintended device while reducing the user's effort involved in wireless connection (pairing).

[0018] <System configuration> FIG. 1 is a schematic diagram showing the configuration of a system according to this embodiment. The system according to this embodiment is a system including one or more electronic devices 1 and an information processing device 3. In this embodiment, a system including three electronic devices 1 (electronic device 1a, electronic device 1b, and electronic device 1c) is illustrated. However, the number of electronic devices 1 included in the system may be any number. When a user operates the information processing device 3, wireless communication (wireless connection) in accordance with a predetermined wireless communication standard is performed between the information processing device 3 and at least one electronic device 1. Note that each electronic device 1 can be connected (paired) with multiple information processing devices 3 (not shown).

[0019] The electronic devices 1 (electronic devices 1a, 1b, and 1c) are devices capable of wireless connection (wireless communication) with the information processing device 3. In this embodiment, a scanner is exemplified as the electronic device 1. Hereinafter, the electronic devices 1 (electronic devices 1a, 1b, and 1c) are referred to as scanners 1 (scanners 1a, 1b, and 1c). The scanners 1 are devices (peripheral devices) that acquire image data by capturing an image of a document, business card, receipt, photograph, illustration, or other document set by a user. Each scanner 1 is a computer that includes a central processing unit (CPU) 11, a read-only memory (ROM) 12, a random access memory (RAM) 13, a storage device 14 such as an electrically erasable and programmable read-only memory (EEPROM) or a hard disk drive (HDD), an input device 15 such as a touch panel, an output device 16 such as a display, a communication unit 17 such as a network interface card (NIC), and an imaging unit 18 that captures an image of a medium such as a document. However, the specific hardware configuration of the scanner 1 can be omitted, replaced, or added as appropriate depending on the embodiment. Furthermore, the scanner 1 is not limited to a device consisting of a single housing. The scanner 1 may be realized by multiple devices using so-called cloud or distributed computing technology, etc.

[0020] Furthermore, the scanner 1 may be a scanner having only one of the input device 15 and the output device 16, or a scanner having neither the input device 15 nor the output device 16. The scanners 1a, 1b, and 1c may be the same model or different models. While the present embodiment illustrates the scanner 1 as the electronic device 1, the electronic device 1 wirelessly connected to the information processing device 3 is not limited to a scanner and may be other peripheral devices (output devices such as a printer or a display, input devices such as a mouse or a keyboard, auxiliary storage devices, etc.). The electronic device 1 illustrated here is merely an example, and may be any other device capable of wireless connection with the information processing device 3. The electronic devices 1a, 1b, and 1c may be the same type of electronic device (e.g., all electronic devices are scanners) or different types of electronic devices (e.g., the electronic device 1a is a scanner and the electronic device 1b is a printer).

[0021] The information processing device 3 is a computer including a CPU 31, a ROM 32, a RAM 33, a storage device 34, an input device 35 such as a keyboard, a mouse, or a touch panel, an output device 36 such as a display, and a communication unit 37 such as a network interface card (NIC). The information processing device 3 is, for example, a PC, a smartphone, or a tablet. However, the specific hardware configuration of the information processing device 3 may be omitted, replaced, or added as appropriate depending on the embodiment. Furthermore, the information processing device 3 is not limited to a device consisting of a single housing. The information processing device 3 may be realized by multiple devices using so-called cloud or distributed computing technology, etc. In this embodiment, the information processing device 3 is a terminal device used by a user, and hereinafter, the information processing device 3 will be referred to as a "user terminal 3."

[0022] As described above, wireless communication (wireless connection) is performed between the electronic device (scanner) 1 and the information processing device (user terminal) 3 in accordance with a predetermined wireless communication standard (hereinafter referred to as the “first wireless communication standard”). In this embodiment, the “first wireless communication standard” is exemplified by Bluetooth, a short-range wireless communication standard. In this case, the “first wireless communication standard” may be, for example, Bluetooth Classic or Bluetooth Low Energy (BLE). In Bluetooth, to perform secure communication, a procedure (process) called “pairing” is performed in which a master device and a slave device register with each other and exchange a key (encryption key) for data encryption. The procedure (process) of storing (saving) the encryption key exchanged through pairing is called “bonding.” Once bonded, when reconnecting with the same device, the stored encryption key can be used to connect the devices without re-pairing. However, the electronic device 1 and the information processing device 3 according to this embodiment may or may not have a bonding function. Furthermore, in this embodiment, Bluetooth is exemplified as the first wireless communication standard, but the first wireless communication standard may be another wireless communication standard such as ZigBee (registered trademark) as long as it is a wireless communication standard that involves pairing.

[0023] 2 is a diagram showing an outline of the functional configuration of electronic device (scanner) 1 according to this embodiment. Electronic device 1 includes a first transmitting unit 21 (corresponding to the "transmitting means" of electronic device 1 of the present application), a first signal receiving unit 22, a first distance measuring unit 23 (corresponding to the "distance measuring means" of electronic device 1 of the present application), a memory unit 24, and a first pairing unit 25 (corresponding to the "disconnecting means" of electronic device 1 of the present application) as a result of a program recorded in storage device 14 being read into RAM 13 and executed by CPU 11, thereby controlling each piece of hardware included in electronic device 1. Note that in this embodiment and other embodiments described below, each function included in electronic device 1 is executed by CPU 11, which is a general-purpose processor; however, some or all of these functions may be executed by one or more dedicated processors.

[0024] The first transmitter 21 transmits a predetermined signal (radio wave for connection (advertisement (signal))). The advertisement is a wireless signal for informing the surrounding area of ​​the existence of the device (scanner 1) (information about the device). This advertisement can include a service UUID (Universally Unique Identifier) ​​that can identify (indicate) what functions (services) the device has. In this embodiment, two authentication methods (Just Works and Passkey Entry) are exemplified as services provided by the scanner 1. In other words, the advertisement transmitted by the scanner 1 includes two service UUIDs: a service UUID that identifies Just Works and a service UUID that identifies Passkey Entry. In this embodiment, these two UUIDs are stored in advance in the scanner 1, and the two stored service UUIDs are included in the advertisement before being transmitted.

[0025] Here, Just Works is an example of an "authentication method that does not require any operation to confirm that the connection destination is correct," and Passkey Entry is an example of an "authentication method that requires an operation to confirm that the connection destination is correct." While Just Works does not require any operation to confirm that the connection destination is correct, Passkey Entry is an authentication method that can prevent spoofing and indiscriminate connections because the user cannot enter a PIN code unless the user is in a position where he or she can see the scanner's display. Therefore, Just Works is an authentication method that is less effective than Passkey Entry at preventing the risk of communicating with an unintended device (such as security risks related to wireless communication (spoofing, etc.) and the risk of misidentifying a scanner). In this embodiment, "unintended device" refers to a device that the user does not intend to connect (pair), such as a spoofing device, a device that performs a man-in-the-middle attack, or a device that connects indiscriminately. Furthermore, "unintended device" may include a device that the user mistakenly selected (mistaken device) In other words, the "risk of communicating with an unintended device" may include the risk of a user communicating with a wrongly selected (mistaken) scanner. Thus, in this embodiment, the first transmitter 21 transmits multiple pieces of identification information corresponding to multiple authentication methods with different capabilities for avoiding the risk of communicating with an unintended device. In this embodiment, the "multiple authentication methods" include at least a first authentication method and a second authentication method with lower avoidance capabilities than the first authentication method. Passkey Entry corresponds to the "first authentication method" in this application, and Just Works corresponds to the "second authentication method" in this application. However, the first authentication method may also be numeric comparison, out-of-band, or the like. Numeric comparison and out-of-band, like Passkey Entry, are examples of "authentication methods that involve an operation to confirm that the connection destination is correct."

[0026] The first authentication method may also be a combination of Just Works and a method of requesting a predetermined operation on the intended correct scanner (an operation that cannot be performed unless the user is near the scanner). The "predetermined operation" refers to an operation performed by the user on the correct electronic device that the user intends to connect to (pair with), and is an operation that the user is instructed to perform. For example, after pairing using Just Works is completed, the user is instructed to perform the predetermined operation. The predetermined operation is an operation performed on the user's own device (scanner 1) or the user terminal 3. Note that the "correct electronic device that the user intends to connect to" refers to an electronic device that the user actually wants to connect to the user terminal 3, such as an electronic device whose location the user knows (e.g., an electronic device whose location the user can visually recognize in front of the user). The user can select the scanner 1 to connect to the user terminal 3 on a scanner selection screen, but the user may mistakenly select a scanner on the scanner selection screen (selecting a scanner other than the intended scanner). In such a case, the scanner 1 selected by the user on the scanner selection screen does not correspond to the "correct electronic device (scanner) intended by the user to connect" in this embodiment. In this way, by combining Just Works with a method that requires the user to perform a predetermined operation after pairing is complete, it becomes possible to confirm whether the scanner 1 that has completed pairing with the user terminal 3 is the "correct scanner intended by the user to connect."

[0027] The predetermined operation may be, for example, pressing a button on the correct scanner (e.g., a scan button). The button to be pressed may be a button displayed on the display unit of the scanner 1 or a button that is part of the scanner 1. The predetermined operation may be, for example, placing (setting up) a medium such as a document on the correct scanner (platen), or placing a medium such as a document on the correct scanner and then scanning (activating a specific function). The predetermined operation may be activating a specific function of the scanner 1 in addition to activating the scan function. The predetermined operation may also be restarting the correct scanner. For example, for a scanner 1 that is turned off by closing the paper feed cover and turned on by opening the paper feed cover, the user may restart the scanner by opening and closing the paper feed cover. The predetermined operation may also be bringing the user terminal 3 closer to the correct scanner (bringing the correct scanner and the user terminal 3 within a specific distance). The predetermined operation may be an operation for performing wireless communication (e.g., NFC communication) between the correct scanner and the user terminal according to a wireless communication standard other than the first wireless communication standard. The predetermined operation may be an operation in which the user inputs the result of checking whether the correct scanner is generating a predetermined output (e.g., output of a specific light, display of a specific screen, output of a specific sound, generation of a specific vibration) indicating that the scanner has completed pairing with the user terminal 3. The predetermined operation may be an operation for photographing the correct scanner (identification information of the correct scanner). This authentication method can be implemented, for example, even by a scanner that does not have an output device such as a display. Even with a scanner that does not have an output device, combining a predetermined operation with Just Works enables secure pairing even with Just Works. However, the authentication method illustrated in this embodiment is merely an example, and other authentication methods may be adopted.

[0028] The service UUID is a 128-bit value and is represented by a string consisting of a hexadecimal string and a hyphen. In this embodiment, the service UUID identifying Just Works and the service UUID identifying Passkey Entry are also 128-bit values. However, for convenience, the service UUID identifying Just Works will be referred to as "UUID A" and the service UUID identifying Passkey Entry will be referred to as "UUID B." In addition to the service UUID, the advertisement may include any other information, such as the address or device name of the device itself (scanner 1). The first transmitter 21 transmits advertisements periodically (at a predetermined interval, such as every second), but the transmission cycle may be arbitrary. The first transmitter 21 may also transmit two signals: an advertisement signal including UUID A and an advertisement signal including UUID B. Furthermore, the number of UUIDs (corresponding to authentication methods) that identify the authentication methods (the number of authentication methods) transmitted from the scanner is not limited to two, and three or more UUIDs may be transmitted. Furthermore, the identification information corresponding to the authentication method is not limited to the service UUID, and other identification information may be used.

[0029] The first signal receiving unit 22 receives a signal from another device. For example, the first signal receiving unit 22 receives a signal that is transmitted by the user terminal 3 (second transmitting unit 41) and that can be used for distance measurement.

[0030] The first distance measurement unit 23 measures the distance between its own device (scanner 1) and another device. For example, the first distance measurement unit 23 measures the distance between its own device and the user terminal 3 by using a signal received by the first signal receiving unit 22 (a signal transmitted from the user terminal 3).

[0031] The storage unit 24 stores information about the user terminal 3 for which the distance measured by the first distance measurement unit 23 satisfies a predetermined condition (information that allows the user terminal 3 to be identified). For example, information about the user terminal 3 for which the distance measured by the first distance measurement unit 23 is less than a predetermined distance (for example, 10 cm) is stored. The information about the user terminal 3 may be, for example, the device name, serial number, address information, etc. of the user terminal 3.

[0032] The first pairing unit 25 receives a pairing request from the user terminal 3, which requests pairing for wireless communication conforming to a first wireless communication standard (Bluetooth). When the first pairing unit 25 receives the pairing request, it performs pairing (including authentication processing) between its own device (scanner 1) and the user terminal 3 that is the requester of the pairing request, and completes (establishes) the pairing. For example, when the first pairing unit 25 receives a pairing request specifying UUID A from the user terminal 3, it performs pairing (authentication processing) using an authentication method (Just Works) corresponding to UUID A. Also, when the first pairing unit 25 receives a pairing request specifying UUID B from the user terminal 3, it performs pairing (authentication processing) using an authentication method (Passkey Entry) corresponding to UUID B. At this time, the first pairing unit 25 transmits a pairing response to the user terminal 3 that is the requester of the pairing request. This establishes a wireless communication (first wireless communication) connection between the scanner 1 and the user terminal 3 in accordance with the first wireless communication standard. The first pairing unit 25 also cancels the pairing as necessary. For example, the first pairing unit 25 terminates the wireless communication if the distance measured by the first distance measurement unit 23 does not satisfy a predetermined condition. For example, the user terminal 3 determines that the distance between the user terminal 3 and the scanner 1 is less than a predetermined distance, and thus an authentication process based on Just Works is executed between the scanner 1 and the user terminal 3. However, in such a case, if the distance between the two devices measured by the scanner 1 (first distance measurement unit 23) is not determined to be less than the predetermined distance (as a result, if the storage unit 24 does not store information about the user terminal 3), the first pairing unit 25 may terminate the wireless communication based on the authentication process based on Just Works. In this way, the first pairing unit 25 performs various processes related to pairing (which may include, in addition to the above processes, an exchange process of encryption information (encryption keys) and the like).

[0033] 3 is a diagram illustrating an outline of the functional configuration of an information processing device (user terminal) 3a according to this embodiment. A program recorded in a storage device 34 is loaded into a RAM 33 and executed by a CPU 31, which controls each piece of hardware included in the information processing device 3. The information processing device 3 includes a second transmitting unit 41 (corresponding to the "transmitting means" of the information processing device 3 in this application), a second signal receiving unit 42 (corresponding to the "receiving means" of the information processing device 3 in this application), an acquiring unit 43, a display control unit 44, a user notification unit 45 (corresponding to the "notifying means" of the information processing device 3 in this application), a selecting unit 46, and a second pairing unit 47 (corresponding to the "authentication means" of the information processing device 3 in this application). In this embodiment and other embodiments described later, each function included in the information processing device 3 is executed by the CPU 31, which is a general-purpose processor. However, some or all of these functions may be executed by one or more dedicated processors.

[0034] The second transmitting unit 41 transmits a signal. The second transmitting unit 41 may transmit any signal (advertisement, etc.) as long as it is a radio wave (signal) that can be used for distance measurement. If the user terminal 3 is not a mobile terminal, the second transmitting unit 41 may not be provided.

[0035] The second signal receiving unit 42 receives signals from other devices. In this embodiment, the second signal receiving unit 42 receives advertisements (signals) transmitted by the scanner (first transmitting unit 21). For example, the second signal receiving unit 42 receives advertisements from each of the scanners 1a, 1b, and 1c shown in FIG. 1. This enables the user terminal 3 to obtain information about surrounding electronic devices and to know what electronic devices are present in the vicinity. In this embodiment, the second signal receiving unit 42 receives multiple pieces of identification information (a service UUID (UUID A) that identifies Just Works and a service UUID (UUID B) that identifies Passkey Entry) corresponding to multiple authentication methods from the scanner 1 (first transmitting unit 21).

[0036] The acquisition unit 43 acquires predetermined information (hereinafter referred to as "predetermined information") that can estimate the risk of communicating with an unintended device (security risk related to wireless communication or risk of mistaking an electronic device). The acquisition unit 43 includes a second distance measurement unit 431 and a selection acceptance unit 432.

[0037] The second distance measurement unit 431 measures the distance between the user terminal 3 and another device (apparatus). For example, the second distance measurement unit 431 measures the distance between the user terminal 3 and the scanner 1 using a signal (a signal transmitted from the scanner 1) received by the second signal receiving unit 42. The second distance measurement unit 431 measures the distance to one or more scanners (e.g., scanner 1a, scanner 1b, and scanner 1c) that can perform authentication processing for wireless communication according to a predetermined wireless communication standard. Generally, the degree of security risk and risk of misidentifying a scanner varies depending on the distance between the user terminal 3 and the scanner 1. For example, when the user terminal 3 connects (pairs) with the scanner 1 via Bluetooth, there is a risk that a malicious user may pose as the scanner and eavesdrop on or tamper with communication data transmitted from the user terminal 3. However, if the distance between the user terminal 3 and the scanner 1 is short (close), others cannot interrupt, or if someone does interrupt, it can be visually confirmed, making it possible to detect spoofing. Furthermore, for example, if the distance between the scanner 1 and the user terminal 3 is short, it can be inferred that the user has approached (is nearby) the scanner 1 as the scanner they wish to connect (pair) with. Therefore, if the distance between the scanner 1 and the user terminal 3 is short, it can be inferred that the risk of communicating with a scanner other than the one the user intends to connect to is low. Therefore, if the distance between the user terminal 3 and the scanner 1 is short, it can be inferred that the risk of communicating with an unintended device (risk of being spoofed or mistaking the scanner) is lower than if the distance between the user terminal 3 and the scanner 1 is long (long). In other words, the distance between the user terminal 3 and the scanner 1 can be considered information that can be used to estimate the risk of communicating with an unintended device. Therefore, the distance between the user terminal 3 and the scanner 1 is an example of predetermined information. In this way, the acquisition unit 43 can acquire the distance between its own device and the scanner 1 as predetermined information by measuring the distance using the second distance measurement unit 431.

[0038] The selection receiving unit 432 receives a selection (designation) of a scanner to be wirelessly connected (paired (including authentication processing)) with the user terminal 3 in accordance with a first wireless communication standard (Bluetooth). The selection receiving unit 432 receives a user's selection of a scanner to be wirelessly connected. For example, the selection receiving unit 432 receives a scanner selection input from the user on a scanner selection screen or the like displayed by the display control unit 44. Here, when a scanner to be connected (used) by the user is selected on the scanner selection screen or the like, it is estimated that there is a risk that the user will mistakenly select the scanner to be used. On the other hand, when the scanner selection is also performed by bringing the user terminal 3 closer to the scanner 1, it is estimated that there is a lower risk that the user will mistakenly select the scanner to be used. Therefore, when a scanner to be subjected to authentication processing is selected (designated) on the scanner selection screen or the like, it can be estimated that there is a higher risk of communication with an unintended device (risk of erroneously selecting a scanner) than when a scanner is not selected on the screen or the like. In other words, information indicating whether a scanner has been selected (designated) as a scanner to be subjected to authentication processing with the own device can be said to be information that can be used to estimate the risk of communication with an unintended device. Therefore, the information indicating whether or not a scanner has been selected (designated) as a scanner that will perform authentication processing with the device itself is an example of predetermined information. In this way, the acquisition unit 43 can acquire, as predetermined information, information indicating whether or not a scanner has been selected (designated) as a scanner that will perform authentication processing with the device itself by accepting a scanner selection from the user via the selection acceptance unit 432.

[0039] The display control unit 44 displays various screens via the output device 36. For example, the display control unit 44 displays a screen that allows the user to select the type (model) of scanner that the user wants to use (not a screen for selecting an individual scanner).

[0040] FIG. 4 is a diagram illustrating an example of a model selection screen according to this embodiment. FIG. 4 illustrates a model selection screen 50 displayed on the display unit (output device 36) of the user terminal 3. The model selection screen 50 is displayed on the display unit of the user terminal 3, for example, when the user launches a scanner application (such as an initial setup wizard) on the user terminal 3. As shown in FIG. 4, the model selection screen 50 displays information about one or more scanner models (scanner models). Specifically, the model selection screen 50 displays a display 51 of information about scanner model AAA, a display 52 of information about scanner model BBB, a display 53 of information about scanner model CCC, a display 54 of information about scanner model DDD, and a display 55 of information about scanner model EEE. Displays 51 to 55 may include any information, such as the model name of the corresponding scanner model and an external view (exterior photo). However, the model selection screen is not limited to the example of FIG. 4 and may be a screen composed of any elements. Furthermore, the model selection screen may be displayed as needed, and in embodiments where model selection is not required, the model selection screen need not be displayed.

[0041] FIG. 5 is a diagram showing an example of a scanner searching screen according to this embodiment. FIG. 5 illustrates a scanner searching screen 60 displayed on the display unit (output device 36) of the user terminal 3. The scanner searching screen 60 is a screen that is displayed, for example, when a model is selected on the model selection screen 50. As shown in FIG. 5, the scanner searching screen 60 displays a message ("Searching for scanner") indicating that a scanner is being searched for, an image 61 indicating that a scanner is being searched for, a button 62 for interrupting the scanner search (the "Cancel searching" button in FIG. 5), and the like. However, the scanner searching screen may be displayed as needed. Furthermore, the scanner searching screen is not limited to the example of FIG. 5 and may be a screen composed of any elements.

[0042] The display control unit 44 also displays information about connectable scanners (for example, a list of connectable scanners). The display control unit 44 displays information about the scanner 1 (for example, scanner 1a, scanner 1b, and scanner 1c shown in FIG. 1) that is the source of the advertisement received by the second signal receiving unit 42. The list of connectable scanners may be displayed on a screen (scanner selection screen) from which a scanner can be selected. The displayed "scanner information" may be any information such as the product name, identification number, or external view (photograph of the external view) of the scanner 1. The display control unit 44 may also display a screen for connecting to Wi-Fi (registered trademark) (such as a screen for inputting an SSID (Service Set Identifier) ​​and password information), a screen indicating that Wi-Fi settings have been completed, etc.

[0043] The user notification unit 45 notifies the user of various information. As an example, the user notification unit 45 notifies (instructs) the user to move closer to the scanner that the user wants to use (intended scanner). For example, the user notification unit 45 notifies the user to move closer to the scanner that the user wants to use by displaying, via the output device 36, a message urging the user to move the user terminal 3 closer to the scanner that the user wants to use.

[0044] FIG. 6 is a diagram showing an example of an approach instruction screen according to this embodiment. FIG. 6 illustrates an approach instruction screen 70 displayed on the display unit (output device 36) of the user terminal 3. The approach instruction screen 70 is displayed, for example, when a scanner corresponding to the model selected by a scanner search is found. As shown in FIG. 6, the approach instruction screen 70 displays a message ("Move your device closer to scanner.") urging the user to move the user terminal 3 closer to the scanner 1, an image 71 indicating that the user terminal 3 should be moved closer to the scanner 1, a button 72 to be pressed when the user is unable to move closer to the scanner 1 (to move the user terminal 3 closer), and the like. However, the approach instruction screen is not limited to the example of FIG. 6 and may be a screen composed of any elements.

[0045] Furthermore, the user notification unit 45 may notify the user that an error has occurred (error notification). For example, the user notification unit 45 may notify the user of the error if the distance between the scanner 1 and the scanner 1 measured using the signal received by the scanner 1 does not satisfy a predetermined condition. For example, if the distance between the scanner 1 and the scanner 1 measured by the scanner 1 is not less than a predetermined distance (e.g., 10 cm), and as a result, the storage unit 24 does not store information about the user terminal 3 as being in close proximity, the user terminal 3 may notify the user of the error. Note that the "predetermined condition" may be the same as or different from the "condition related to distance" described below.

[0046] Any method may be used to notify the user. For example, a message urging the user to move closer to the scanner they want to use or information about an error may be displayed on the output device 36. In this case, the display control unit 44 may function as the user notification unit 45. Alternatively, the message urging the user to move closer to the scanner they want to use or information about an error may be output as audio to notify the user.

[0047] The selector 46 selects an authentication method (service UUID) to be used in the authentication process. Specifically, the selector 46 selects an authentication method to be used in the authentication process from among multiple authentication methods corresponding to the multiple pieces of identification information received by the second signal receiver 42, based on a predetermined criterion. In this embodiment, the selector 46 selects from the multiple authentication methods an authentication method with evasion capabilities corresponding to the predetermined information acquired by the acquirer 43. In this embodiment, similar to the scanner 1, the user terminal 3 also stores in advance a service UUID associated with information indicating the service identified by the service UUID. For example, UUID A is associated with the service "Just Works," and UUID B is associated with "Passkey Entry." This enables the selector 46 to determine the service UUID to be used in the authentication process. In this embodiment, selecting an authentication method is synonymous with selecting a service UUID. In this embodiment, the scanner 1 and the user terminal 3 store the service UUID in association with the service in advance, but the user terminal 3 may obtain the service identified by the service UUID by other methods. Specific examples of methods for selecting an authentication method are described below.

[0048] <Method for selecting authentication method based on distance> The selection unit 46 selects an authentication method with evasion performance according to the distance between the scanner 1 and the device itself, which is acquired (measured) by the acquisition unit 43 (second distance measurement unit 431). For example, as described above, when the distance between the scanner 1 and the device itself is short, it is highly likely that the scanner 1 is the scanner the user wants to use (the user has approached the scanner they want to use), and it can be estimated that the risk of communicating with an unintended scanner is low (or non-existent). When it is possible to estimate that the risk of communicating with an unintended scanner is low, it is possible to determine that an authentication method with low (lower) evasion performance can be used. Note that, in the case of an authentication method with low evasion performance, such as Just Works, user operations related to the authentication process (pairing) are often easy. Therefore, when it is possible to estimate that the risk of communicating with an unintended scanner is low, it is possible to facilitate (simplify) the user operations related to pairing by using an authentication method with low evasion performance. In this way, the selection unit 46 may select an authentication method with evasion performance (an authentication method with lower evasion performance) according to the short distance between the device itself and the scanner 1 (when it is possible to estimate that the risk of communicating with an unintended device is low). In this embodiment, when the distance between the scanner 1 and the device itself satisfies the distance-related condition, the selector 46 selects an authentication method with lower avoidance performance (second authentication method) as the authentication method to be used for authentication processing with the scanner 1. The "distance-related condition" may be, for example, a condition that the distance is less than (or equal to or less than) a predetermined distance, or that the distance is within a predetermined distance range.

[0049] The "predetermined distance" and "predetermined distance range" may be set arbitrarily. For example, the "predetermined distance" may be a distance at which a third party cannot cut in line or at which a third party can visually confirm the distance if they do cut in line, and may be set arbitrarily, such as 10 cm or 1 meter. In this embodiment, the second authentication method is selected when the distance between the scanner 1 and the user terminal 3 satisfies a distance condition within a predetermined period (e.g., a predetermined time (short period) such as several tens of seconds or several minutes from the time when an instruction to bring the user terminal 3 closer to the scanner 1 is issued). Here, the "predetermined period (predetermined time)" may be stored in the user terminal 3 in advance or may be received from the scanner 1. The "predetermined period" and "predetermined time" may be fixed, or may be dynamically changeable by at least the scanner 1 or the user terminal 3 depending on the user's characteristics, the settings of the user terminal 3, or the settings of the user terminal 3. For example, as an example of dynamically changing the specified time (wait time) depending on the user's characteristics, if a user is extremely slow at operating the initial setup wizard of a scanner application, it is assumed that the user is unfamiliar with the device, and in such a case the specified time (wait time) may be changed to be longer (for example, doubled).

[0050] Furthermore, for example, as described above, when the distance between the scanner 1 and the device itself is long, it can be estimated that there is a higher risk of communicating with an unintended scanner than when the distance between the scanner 1 and the device itself is short. When it is possible to estimate that the risk of communicating with an unintended scanner is high (or exists), it is possible to determine that it is more appropriate to use an authentication method with a higher (higher) evasion performance. When it is possible to estimate that the risk of communicating with an unintended scanner is high, it is possible to prioritize risk avoidance by using an authentication method with a higher evasion performance. In this way, the selection unit 46 may select an authentication method with a higher evasion performance (an authentication method with a higher evasion performance) that corresponds to the long distance between the device itself and the scanner 1 (when it is possible to estimate that there is a high risk of communicating with an unintended device). In this embodiment, when the distance between the scanner 1 and the device itself does not satisfy the distance condition (for example, when the two devices are farther apart than a predetermined distance), the selection unit 46 selects an authentication method with a higher evasion performance (a first authentication method) as the authentication method to be used for authentication processing with the scanner 1. For example, when a user selects a scanner on a scanner selection screen, the user terminal 3 measures the distance between the selected scanner and the user terminal 3, and if the measured distance is greater than a predetermined distance, it may be determined (selected) that authentication processing with the selected scanner will be performed using the first authentication method. Also, for example, if the distance between the scanner 1 and the user terminal 3 within a predetermined period of time does not satisfy a condition regarding the distance, the first authentication method may be selected as the authentication method to be used in authentication processing with the scanner 1.

[0051] The scanner to be paired with may be determined by bringing the user terminal 3 closer to the scanner 1 in accordance with an approach instruction (an instruction urging the user to approach the scanner 1). In other words, the scanner 1 that the user approaches while holding the user terminal 3, or the scanner 1 that is originally located near the user terminal 3, may be determined as the scanner to be paired with the user terminal 3.

[0052] <Method for selecting authentication method based on whether or not a scanner is specified> The selection unit 46 selects an authentication method with evasion capabilities according to information acquired by the acquisition unit 43 (selection acceptance unit 432) indicating whether the scanner 1 has been designated as a target device for pairing (authentication processing) with the user terminal 3 (whether the scanner 1 has been designated (selected) as a connection target). As described above, when a scanner to be subjected to authentication processing is selected (designated) on a scanner selection screen or the like, it can be estimated that there is a high risk that the user will erroneously select a scanner (risk of communicating with an unintended device). When the risk is high in this way, it is desirable to use an authentication method with high (higher) evasion capabilities. Therefore, when the scanner 1 is designated by the user on a scanner selection screen or the like, the selection unit 46 selects an authentication method with high (higher) evasion capabilities as the authentication method to be used for authentication processing with the scanner 1.

[0053] In this way, the selection unit 46 may select the second authentication method when the acquisition unit 43 acquires information from which it can be estimated that there is no risk of communicating with an unintended device or that the risk is low. In other words, when it can be estimated that there is no risk or that the risk is low, connection may be made using a pairing method that prioritizes facilitating user operation. Furthermore, when the acquisition unit 43 acquires information from which it can be estimated that there is a risk of communicating with an unintended device or that the risk is high, the selection unit 46 may select the first authentication method. In other words, connection may be made using a pairing method that prioritizes avoiding (reducing) the risk of communicating with an unintended device (ensuring security, etc.).

[0054] The second pairing unit 47 performs pairing (including authentication processing) with the scanner 1 for wireless communication in accordance with a predetermined wireless communication standard. In this embodiment, the second pairing unit 47 performs authentication processing with the scanner 1 using the authentication method selected by the selection unit 46. For example, the second pairing unit 47 transmits a pairing request to the scanner 1 by specifying a service UUID (e.g., UUID A) that identifies the authentication method (e.g., Just Works) selected by the selection unit 46, and performs authentication processing (pairing) with the scanner 1 using the selected authentication method (e.g., Just Works). Furthermore, the second pairing unit 47 may determine, among one or more connectable scanners 1, a scanner whose distance acquired (measured) by the acquisition unit 43 satisfies a distance-related condition (e.g., a scanner whose distance from the second pairing unit 47 is less than 10 cm), as a scanner to be paired (authentication processing) with the second pairing unit 47's own device. In other words, the scanner 1 to be paired with the user terminal 3 may be determined by bringing the user terminal 3 close to the scanner 1 to be used. In this way, the second pairing unit 47 performs various processes related to pairing (which may include, in addition to the above processes, an exchange process of encrypted information (encryption keys) and the like).

[0055] 7 to 9 are flowcharts and communication sequences outlining the pairing process flow according to this embodiment. In this embodiment, it is assumed that the scanner 1 always maintains a state in which Bluetooth pairing is possible, or that a very simple operation (for example, a long press on the Bluetooth icon) can put the scanner 1 into a pairing-ready state. The process shown in this flowchart is initiated when a user launches a scanner application (such as an initial setup wizard) on the user terminal 3. For example, the process shown in this flowchart may be initiated when a scanner model is selected on the model selection screen of FIG. 4. In addition, the "user" in FIGS. 7 to 9 and 11 to 13 refers to a user of the "user terminal." In the following, the scanner 1 to be paired with the user terminal 3 will be referred to as "scanner A." Scanner A may be, for example, scanner 1a.

[0056] In steps S101 and S102, an advertisement (signal) is transmitted from each of the scanner 1 and the user terminal 3, and each of the scanner 1 and the user terminal 3 receives an advertisement transmitted from another device (equipment), and starts measuring the distance between the device itself and the other device (distance measurement by the first distance measurement unit 23, distance measurement by the second distance measurement unit 431). The distance measurement is performed, for example, multiple times within a predetermined period (for example, each time a signal is received). In step S101, the first transmission unit 21 transmits an advertisement, and the second signal reception unit 42 receives the advertisement transmitted by the first transmission unit 21. The user terminal 3 (second signal reception unit 42) receives an advertisement from each of one or more scanners 1 (for example, scanner 1a, scanner 1b, and scanner 1c shown in FIG. 1). In step S102, the second transmitter 41 transmits an advertisement, and the first signal receiver 22 receives the advertisement transmitted by the second transmitter 41. However, the first transmitter 21 and the second transmitter 41 may transmit advertisements before the user launches the scanner application. The scanner 1 and the user terminal 3 may also transmit advertisements periodically. If the user terminal 3 is not a mobile terminal, the process of step S102 may not be performed. This flowchart illustrates an example in which an advertisement including a service UUID (UUID A) identifying Just Works and a service UUID (UUID B) identifying Passkey Entry is transmitted from at least scanner A (scanner 1a). Note that the timing at which distance measurement is started may be different from the timing at which an approach instruction is issued to the user. For example, scanner A may perform distance measurement when it receives a pairing request from the user terminal 3. Steps S101 and S102 are not in any particular order. After that, the process proceeds to steps S103 and S105.

[0057] In step S103, the user terminal 3 notifies the user (instructs the user to approach) the scanner they wish to use. For example, the user notification unit 45 displays a message urging the user to approach the scanner they wish to use via the output device 36 (see FIG. 6). Instructed in step S103 to approach the scanner they wish to use, the user performs an operation (motion) to approach the scanner (step S104). Specifically, the user approaches scanner A they wish to use while still holding the user terminal 3. However, since there may be cases where the user does not approach the scanner (step S104 is not performed) for some reason even when notified to approach the scanner, the processing of step S104 is indicated by a dotted line in FIG. 7. Then, the processing proceeds to step S106.

[0058] In step S105, information about user terminals 3 that are within a predetermined distance from the scanner 1 (scanner A) is stored. The storage unit 24 stores information about user terminals 3 whose distances measured by the first distance measurement unit 23, which started in step S102, satisfy a predetermined condition (for example, are within the predetermined distance).

[0059] In step S106, it is determined whether the keep-out button has been pressed on the user terminal 3. The selection unit 46 determines whether the button to be pressed when the user cannot bring the user terminal 3 close to the scanner that the user wants to use (see button 72 in FIG. 6) has been pressed. If the keep-out button has been pressed (Yes in step S106), the process proceeds to step S201. On the other hand, if the keep-out button has not been pressed (No in step S106), the process proceeds to step S107.

[0060] In step S107, the user terminal 3 determines whether the distance between the scanner 1 and the user terminal 3 satisfies the distance condition (whether it is less than the predetermined distance). The selection unit 46 determines whether the distance measured by the distance measurement by the second distance measurement unit 431 started in step S101 is less than the predetermined distance. For example, it determines whether the distance between the user terminal 3 and the scanner 1a, the distance between the user terminal 3 and the scanner 1b, and the distance between the user terminal 3 and the scanner 1c are each less than the predetermined distance. If the distance between the user terminal 3 and any of the scanners is less than the predetermined distance (Yes in step S107), the process proceeds to step S301. Note that this flow illustrates an example in which the distance between the user terminal 3 and the scanner A is less than the predetermined distance. On the other hand, if the distance between the user terminal 3 and any of the scanners is not less than the predetermined distance (No in step S107), the process proceeds to step S108. In addition, the "predetermined distance" used for distance determination in scanner A and user terminal 3 may be the same distance or different distances, as long as it is possible to determine that the device itself and the other device are close to each other.

[0061] In step S108, the user terminal 3 determines whether a predetermined time has elapsed. The selection unit 46 checks whether a predetermined time has elapsed since the approach instruction was issued in step S103. If the predetermined time has not elapsed (No in step S108), the process returns to step S106. On the other hand, if the predetermined time has elapsed (Yes in step S108), the process proceeds to step S109.

[0062] In step S109, an error notification is sent to the user terminal 3. The user notification unit 45 notifies the user that an error has occurred. However, in step S109, instead of notifying the user of the error, a notification may be sent again urging the user to move closer to the scanner they want to use, or a display may be displayed urging the user to select a scanner from a list of connectable scanners. After that, the processing shown in this flowchart ends.

[0063] In step S201, a list of scanners is displayed on the user terminal 3. The display control unit 44 displays information (scanner list) about the scanner 1 (for example, scanner 1a, scanner 1b, and scanner 1c shown in FIG. 1) that is the source of the advertisement received by the second signal receiving unit 42. Note that in step S201, a list of connectable scanners that correspond to the scanner model selected on the model selection screen 50 may be displayed. Also, instead of displaying the scanner list in the scanner application, connectable scanners may be displayed on a Bluetooth setting screen or the like. Thereafter, the process proceeds to step S202.

[0064] In step S202, the user selects a device to which the user wishes to connect. From the list of scanners displayed in step S201, the user manually selects the scanner 1 to be connected wirelessly (the scanner 1 the user wishes to use). This causes the selection receiving unit 432 to receive the selection of the scanner to be connected wirelessly. Note that this flow illustrates an example in which scanner A is selected by the user. Thereafter, the process proceeds to step S203.

[0065] In step S203, the user terminal 3 transmits a pairing request to the selected scanner using UUID B. First, in response to the user's selection (designation) of scanner A as the device to be connected, the selection unit 46 determines to perform authentication processing with scanner A using an authentication method with higher evasion performance. Specifically, of the two authentication methods corresponding to the two UUIDs received from scanner A in step S101, the selection unit 46 determines (selects) to perform authentication processing with scanner A using Passkey Entry (UUID B), which is the authentication method with higher evasion performance. In other words, a pairing that prioritizes avoiding (reducing) the risk of communicating with an unintended device is selected. As a result, the second pairing unit 47 transmits a pairing request to scanner A specifying UUID B. Note that in this case, the selection may be made to perform authentication processing using Passkey Entry (UUID B) because the distance between scanner A and the user terminal 3 did not become less than the predetermined distance within a predetermined time. Alternatively, the user may select to perform authentication processing using Passkey Entry (UUID B) by pressing a button that is pressed when the user cannot bring the user terminal 3 close to the scanner that the user wants to use. Then, the processing proceeds to step S204 and step S205.

[0066] In step S204, the PIN code is displayed on scanner A. The first pairing unit 25 of scanner A displays the PIN code via the output device 16. In this way, the first pairing unit 25 of scanner A performs authentication processing using Passkey Entry based on the fact that the pairing request specifying UUID B was received in step S203. Thereafter, the processing proceeds to step S206.

[0067] In step S205, a PIN code input screen is displayed on the user terminal 3. The second pairing unit 47 displays a screen for inputting a PIN code via the output device 36. After that, the process proceeds to step S206.

[0068] In step S206, the user inputs a PIN code. The user approaches the scanner they want to use and inputs the PIN code displayed on the scanner via the input device 35 of the user terminal 3. The process then proceeds to step S207.

[0069] In step S207, a PIN code is transmitted from the user terminal 3. The second pairing unit 47 transmits the PIN code input in step S206 to the scanner A. After that, the process proceeds to step S208.

[0070] In step S208, scanner A determines whether the PIN code is correct. The first pairing unit 25 determines whether the PIN code transmitted in step S207 is correct. Specifically, it determines whether the PIN code transmitted in step S207 matches the PIN code displayed in step S204 (the PIN code held in scanner A). If the PIN code is incorrect (does not match) (No in step S208), the process proceeds to step S209. On the other hand, if the PIN code is correct (matches) (Yes in step S208), the process proceeds to step S210.

[0071] In step S209, scanner A notifies the user terminal 3 of an error. The first pairing unit 25 notifies the user terminal 3 that authentication (pairing) has failed (that an error has occurred). After that, the process proceeds to step S211.

[0072] In step S210, scanner A notifies the user terminal 3 of success. The first pairing unit 25 notifies the user terminal 3 that authentication (pairing) has been successful (transmits a pairing response). After that, the process proceeds to step S211.

[0073] In step S211, it is determined whether there is an error or success. The user terminal 3 determines whether the content notified from scanner A is an error or success. If there is an error ("Error" in step S211), the process proceeds to step S212. On the other hand, if there is success ("Success" in step S211), the process proceeds to step S213.

[0074] In step S212, an error notification is performed in the user terminal 3. The user notification unit 45 notifies the user that authentication (pairing) has failed (that an error has occurred). After that, the processing shown in this flowchart ends.

[0075] In step S213, the user terminal 3 transmits Wi-Fi setting information (e.g., SSID, password, etc.) to the scanner A. A setting information transmission unit (not shown) of the user terminal 3 transmits setting information for wireless communication conforming to a wireless communication standard (second wireless communication standard (e.g., Wi-Fi)) different from the first wireless communication standard (Bluetooth communication) to the scanner A. Specifically, a setting information acquisition unit (not shown) of the user terminal 3 acquires setting information for wireless communication conforming to the second wireless communication standard by reading the setting information stored in the user terminal 3, accepting input of the setting information by a user, or reading a code (one-dimensional code, two-dimensional code, etc.) that can identify the setting information, and the setting information transmission unit transmits the setting information acquired by the setting information acquisition unit to the scanner A. Then, the process proceeds to step S214.

[0076] In step S214, scanner A configures and connects to Wi-Fi. A configuration unit (not shown) of scanner A uses the configuration information transmitted in step S213 to configure wireless communication (Wi-Fi communication) conforming to the second wireless communication standard, thereby connecting scanner A to Wi-Fi. In this way, configuring Wi-Fi configuration information using Bluetooth communication can reduce the effort required of the user to configure Wi-Fi. Then, the process shown in this flowchart ends.

[0077] In step S301, the user terminal 3 transmits a pairing request using UUID A to a scanner (scanner A) that is within a predetermined distance from the user terminal 3. First, in step S107, the selection unit 46 determines to perform authentication processing with scanner A using an authentication method with lower evasion performance in response to determining that the distance between the user terminal 3 and scanner A is less than the predetermined distance. When the distance between the two devices is short, as described above, the risk of spoofing is low. Furthermore, since the user terminal 3 approached (was close to) scanner A after receiving an instruction to approach the scanner it wants to use, it is possible to estimate that the risk of misidentification is low. In step S101, the selection unit 46 determines (selects) to perform authentication processing with scanner A using Just Works (UUID A), which is the authentication method with lower evasion performance, of the two authentication methods corresponding to the two UUIDs received from scanner A. In other words, pairing that prioritizes simplification of user operations is selected. In this case, the proximity to less than the predetermined distance also serves as scanner selection. As a result, the second pairing unit 47 transmits a pairing request to scanner A, specifying UUID A. When pairing using Just Works is performed, the second pairing unit 47 may display a screen via the output device 36 in advance, asking the user whether or not to perform pairing, and may receive the user's permission to perform pairing. Then, the process proceeds to step S302.

[0078] In step S302, pairing is permitted in scanner A. The first pairing unit 25 receives the pairing request transmitted in step S301, and performs pairing between its own device (scanner A) and the user terminal 3 using Just Works based on the pairing request, thereby completing the pairing. At this time, the first pairing unit 25 transmits a pairing response to the user terminal 3. Furthermore, scanner A and the user terminal 3 may each store encrypted information generated and exchanged during the pairing. Thereafter, the process proceeds to step S303.

[0079] In step S303, it is determined whether information about the user terminal 3 is stored in scanner A. The first pairing unit 25 determines whether information about the user terminal 3 that sent the pairing request in step S301 has been stored in step S105. Note that the determination of whether information about the user terminal 3 is stored may be made by another functional unit (determination unit (not shown)). If information about the user terminal 3 is not stored (No in step S303), the process proceeds to step S304. On the other hand, if information about the user terminal 3 is stored (Yes in step S303), the process proceeds to step S306.

[0080] In steps S304 and S305, scanner A cancels pairing and notifies the user terminal 3 of an error. The first pairing unit 25 cancels pairing with the user terminal 3 and notifies the user terminal 3 that an error has occurred (scanner A has determined that the user terminal 3 is not close (not located within a predetermined distance)). This makes it possible to prevent malicious users from indiscriminately connecting to the scanner (connecting and changing settings, etc.). Then, the process proceeds to step S307.

[0081] In step S306, scanner A notifies the user terminal 3 of success. The first pairing unit 25 notifies the user terminal 3 that scanner A has also confirmed that the user terminal 3 is approaching (success). Then, the process proceeds to step S307. Note that in step S302, step S306, etc., the user terminal 3 may notify the user that pairing is complete. However, the process of step S306 may be omitted, and in that case, the process may proceed to step S309 if no error is determined in the process of step S307.

[0082] In step S307, it is determined whether there is an error or success. The user terminal 3 determines whether the content notified from scanner A is an error or success. If there is an error ("Error" in step S307), the process proceeds to step S308. On the other hand, if there is success ("Success" in step S307), the process proceeds to step S309.

[0083] In step S308, an error notification is performed in the user terminal 3. The user notification unit 45 notifies the user that pairing has failed (that an error has occurred). After that, the processing shown in this flowchart ends.

[0084] In steps S309 and S310, the user terminal 3 transmits Wi-Fi setting information to the scanner A, and the scanner A performs Wi-Fi setting and connection. The processes in steps S309 and S310 are generally similar to the processes in steps S213 and S214, and therefore their explanations are omitted. Thereafter, the process shown in this flowchart ends.

[0085] In this flowchart, if the user terminal 3 approaches the scanner in accordance with the instructions (guidance) to do so, pairing without authentication (pairing that prioritizes user convenience) is performed, and if the user does not approach (for example, if the user notifies the user of this), pairing with authentication (pairing that prioritizes reducing the risk of communicating with an unintended device (security, etc.)) is performed.

[0086] As described above, according to this embodiment, by selecting an authentication method with evasion capabilities based on predetermined information that can estimate the risk of communicating with an unintended device and performing authentication processing with an electronic device using the selected authentication method, it is possible to appropriately avoid the risk of communicating with an unintended device. Furthermore, as described above, authentication methods with low evasion capabilities often require simple user operations for the authentication process, while authentication methods with high evasion capabilities often require complex user operations (increasing user effort). Therefore, by selecting an authentication method with evasion capabilities based on predetermined information that can estimate the risk of communicating with an unintended device and performing authentication processing with an electronic device using the selected authentication method, it is possible to reduce the user's effort required for wireless connection (pairing) while also reducing the risk of communicating with an unintended device (ensuring security and preventing communication with an erroneously selected scanner, etc.). For example, as described above, the risk of communicating with an unintended device varies depending on the distance between the user (user terminal 3) and the scanner 1. Therefore, if the user terminal 3 can be brought close to the scanner 1, the risk of misidentification or spoofing is extremely low, making it possible to perform pairing with ease (user convenience) by connecting using the second authentication method (e.g., Just Works). On the other hand, if the user terminal 3 cannot be brought close to the scanner 1, the risk of misidentification or spoofing increases. Therefore, it is possible to perform pairing with a priority on reducing the risk of communicating with an unintended device (security) by connecting using the first authentication method (e.g., Passkey Entry). As described above, according to this embodiment, by selecting an authentication method according to distance, etc., it is possible to optimize the user's effort and the reduction of the risk of communicating with an unintended device. In other words, it is possible to select a pairing method (authentication method) that achieves an optimal balance between ease of user operation and security.

[0087] <Variation 1> In the embodiment described above, the authentication method is selected based on the distance between the scanner 1 and the user terminal 3 and whether the user has selected a scanner, but the authentication method may also be selected based on the model of the user terminal 3. Therefore, this variation illustrates a case in which the authentication method is selected based on the model of the user terminal 3, the distance between the scanner 1 and the user terminal 3, and whether the user has selected a scanner. Note that in this variation, a description of the configuration common to the embodiment described above will be omitted, and differences will be described.

[0088] 10 is a diagram showing an outline of the functional configuration of an information processing device (user terminal) 3b according to Variation 1. In this variation, the acquisition unit 43 includes a terminal information acquisition unit 433 in addition to a second distance measurement unit 431 and a selection acceptance unit 432.

[0089] The terminal information acquisition unit 433 acquires information about the user terminal 3. Specifically, the terminal information acquisition unit 433 acquires the type of the user terminal 3 (information indicating the type of the user terminal 3). As an example, the terminal information acquisition unit 433 acquires information indicating whether the user terminal 3 is a mobile terminal (a portable terminal (device)). For example, the terminal information acquisition unit 433 acquires information indicating whether the user terminal 3 is a mobile terminal (such as a smartphone) or a non-mobile terminal (such as a desktop PC). Here, if the user terminal 3 is not a mobile terminal, it is difficult for the user to approach the intended scanner 1 while holding the user terminal 3. In this case, even if someone else intervenes between the user terminal 3 and the intended scanner 1 and spoofs the user terminal 3, the user may not notice the spoofing. On the other hand, if the user terminal 3 is a mobile terminal, the user can approach the intended scanner while holding the user terminal 3, and thus the user can notice the spoofing. Therefore, if the user terminal 3 is not a mobile terminal, it can be estimated that the risk of spoofing (the risk of communicating with an unintended device) is higher than if the user terminal 3 is a mobile terminal. In other words, the information indicating whether the user terminal 3 is a mobile terminal or not can be said to be information that makes it possible to estimate the risk of communicating with an unintended device. Therefore, the information indicating whether the user terminal 3 is a mobile terminal or not is an example of predetermined information.

[0090] Furthermore, the terminal information acquisition unit 433 may acquire, as the type of the user terminal, information indicating whether the user terminal 3 is a predetermined (specific) model (e.g., a model with a higher risk of communicating with an unintended device). For example, the acquisition unit 433 acquires information indicating whether the user terminal 3 is a device that only supports Bluetooth versions earlier than 4.2. Generally, versions earlier than Bluetooth 4.2 are more likely to be exposed to security risks (including the risk of communicating with an unintended device) than versions later than Bluetooth 4.2. Therefore, if the user terminal 3 is a predetermined model (e.g., a model that only supports Bluetooth versions earlier than 4.2), it can be estimated that the risk of communicating with an unintended device is higher than if the user terminal 3 is not a predetermined model. In other words, information indicating whether the user terminal 3 is a predetermined model can be said to be information that can estimate the risk of communicating with an unintended device. Therefore, information indicating whether the user terminal 3 is a predetermined model is an example of predetermined information. In this way, the acquisition unit 43 can acquire the type of the user terminal 3 as predetermined information by acquiring the type of the user terminal 3 using the terminal information acquisition unit 433. A method for selecting an authentication method according to the type of the user terminal 3 will be described below.

[0091] <Method for selecting an authentication method based on the type of device> The selection unit 46 selects an authentication method with evasion capabilities according to the type of the device acquired by the acquisition unit 43 (terminal information acquisition unit 433). This variation illustrates a case where an authentication method with evasion capabilities according to the type of device is selected without using the type of scanner. For example, as described above, if the device is not a mobile terminal, it can be estimated that there is a high (or likely to be) risk of spoofing (the risk of communicating with an unintended device). When the risk is estimated to be high, it is desirable to use an authentication method with high (higher) evasion capabilities. An authentication method with high evasion capabilities, such as Passkey Entry, often requires user operation for authentication processing (pairing), which complicates the user operation. In such cases, risk reduction is prioritized. In this way, the selection unit 46 may select an authentication method with evasion capabilities (the first authentication method, which is an authentication method with higher evasion capabilities) according to the fact that the device is not a mobile terminal (it can be estimated that there is a high risk of communicating with an unintended device). Furthermore, for example, as described above, if the device itself is a predetermined model (a model with a higher risk of communicating with unintended devices), it is highly likely to be exposed to security risks (including the risk of communicating with unintended devices). In such cases where it can be estimated that the risk is high, it is desirable to use an authentication method with high (higher) evasion performance. In other words, the selection unit 46 may select an authentication method with evasion performance (a first authentication method, which is an authentication method with higher evasion performance) that corresponds to the fact that the device itself is a predetermined model (a model with a higher risk of communicating with unintended devices).

[0092] 11 is a flowchart and communication sequence showing an overview of the pairing process flow according to Variation 1. The process shown in this flowchart is initiated when the user launches a scanner application on the user terminal 3 or selects a scanner model on a model selection screen.

[0093] In step S401, a signal is transmitted from scanner A. Each scanner 1 (first transmitting unit 21) transmits an advertisement, and the user terminal 3 (second signal receiving unit 42) receives the advertisement transmitted by the first transmitting unit 21. The processing of step S401 is generally similar to the processing of step S101. Thereafter, the processing proceeds to step S402.

[0094] In step S402, the user terminal 3 determines whether or not the own device is a mobile terminal. First, the terminal information acquisition unit 433 acquires information about the own device (type of the own device), and the selection unit 46 determines whether or not the own device is a mobile terminal based on the acquired information about the own device. If the own device is not a mobile terminal (No in step S402), the process proceeds to step S201. If it is determined that the own device is not a mobile terminal in this way, the selection unit 46 may select (determine) an authentication method (first authentication method) having higher evasion performance accordingly. On the other hand, if the own device is a mobile terminal (Yes in step S402), the process proceeds to step S403.

[0095] In step S403, a signal is transmitted from the user terminal 3. The user terminal 3 (second transmitting unit 41) transmits an advertisement, and the scanner 1 (first signal receiving unit 22) receives the advertisement transmitted by the second transmitting unit 41. The processing of step S403 is generally similar to the processing of step S102. Thereafter, the processing proceeds to steps S404 and S406. The processing of steps S404 to S410 is generally similar to the processing of steps S103 to S109, and therefore description thereof will be omitted.

[0096] As in this variation, if it is determined that the device is not a mobile terminal (No in step S402), pairing may be performed using an authentication method with higher evasion capabilities (e.g., evasion capabilities with higher security).

[0097] <Variation 2> In the embodiment described above, the scanner list (scanner selection screen) is displayed when an input is received from the user indicating that the user cannot get close to the scanner or when the user terminal 3 does not get close to the scanner 1 within a predetermined period of time, but this variation illustrates a case where the scanner list is displayed when an advertisement is received from the scanner 1. Note that in this variation, a description of the configuration common to the embodiment described above will be omitted, and differences will be described.

[0098] 12 is a flowchart and communication sequence showing an overview of the pairing process flow according to Variation 2. The process shown in this flowchart is initiated when the user launches a scanner application on the user terminal 3 or selects a scanner model on a model selection screen.

[0099] In steps S501 and S502, an advertisement (signal) is transmitted from each of the scanner 1 and the user terminal 3. The processing in steps S501 and S502 is generally similar to the processing in steps S101 and S102, and therefore a detailed description thereof will be omitted. Thereafter, the processing proceeds to steps S503 and S505.

[0100] In step S503, a list of scanners is displayed on the user terminal 3, and the user is notified to approach the scanner they wish to use or to select the scanner they wish to use. The display control unit 44 displays information (scanner list) about the scanner 1 that is the source of the advertisement received by the second signal receiving unit 42. The user notification unit 45 also displays, via the output device 36, a message prompting the user to approach the scanner they wish to use or to select the scanner they wish to use from the scanner list. Thereafter, the process proceeds to step S504. The processes of steps S504 and S505 are generally similar to the processes of steps S104 and S105, and therefore description thereof will be omitted.

[0101] In step S506, it is determined whether a scanner has been selected. The selection unit 46 determines whether a scanner selection has been accepted by the selection accepting unit 432. If a scanner has been selected (Yes in step S506), the process proceeds to step S203. On the other hand, if a scanner has not been selected (No in step S506), the process proceeds to step S507. Note that the processes in steps S507 to S509 are generally similar to the processes in steps S107 to S109, and therefore description thereof will be omitted.

[0102] As in this variation (step S503), the scanner list may be displayed when an advertisement is received from the scanner 1.

[0103] <Variation 3> In the embodiment described above, when a scanner is selected by the user, the first authentication method (authentication method with higher evasion performance) is selected, but in this variation, even when a scanner is selected by the user, when the user terminal 3 is brought close to the selected scanner, the second authentication method (authentication method with lower evasion performance) is selected. Note that in this variation, explanations of the configurations common to the embodiment described above will be omitted, and differences will be explained.

[0104] 13 is a flowchart and communication sequence showing an overview of the pairing process flow according to Variation 3. The process shown in this flowchart is initiated when the user launches a scanner application on the user terminal 3 or selects a scanner model on a model selection screen.

[0105] In steps S601 and S602, an advertisement (signal) is transmitted from the scanner 1 and the user terminal 3, respectively. The processing in steps S601 and S602 is generally similar to the processing in steps S101 and S102, and therefore a description thereof will be omitted. Thereafter, the processing proceeds to step S603. The processing in steps S603 and S604 is generally similar to the processing in steps S201 and S202, and therefore a description thereof will be omitted.

[0106] In step S605, the user terminal 3 is notified to move closer to the scanner selected in scanner S604. For example, the user notification unit 45 displays a message via the output device 36 urging the user to move closer to the scanner selected. Thereafter, the process proceeds to step S606. Note that the processes of steps S606 to S611 are generally similar to the processes of steps S104 to S109, and therefore description thereof will be omitted. However, in this variation, if the keep away button is pressed in step S608, the process proceeds to step S203.

[0107] As in this variation, even if the user selects a scanner (step S604), if the user terminal 3 is brought close to the selected scanner (Yes in step S609), the second authentication method (an authentication method with lower evasion performance) may be selected. [Explanation of symbols]

[0108] 1 Electronic equipment 3. Information processing equipment

Claims

1. An information processing device that performs authentication processing for wireless communication conforming to a predetermined wireless communication standard with an electronic device, a receiving means for receiving a plurality of pieces of identification information from the electronic device, the plurality of pieces of identification information corresponding to a plurality of authentication methods each having different capabilities for avoiding a risk of communicating with an unintended device; an acquisition means for acquiring predetermined information that can estimate the risk of communication with an unintended device; a selection means for selecting an authentication method having the bypass capability according to the acquired predetermined information from the plurality of authentication methods corresponding to the plurality of pieces of identification information received; an authentication means for performing the authentication process with the electronic device using the selected authentication method, Information processing device.

2. the acquiring means acquires the distance between the electronic device and the device itself as the predetermined information by measuring the distance between the electronic device and the device itself; the selection means selects an authentication method having the avoidance capability according to the acquired distance between the electronic device and the device itself. The information processing device according to claim 1 .

3. the plurality of authentication methods include at least a first authentication method and a second authentication method having a lower evasion performance than the first authentication method; the selection means selects the second authentication method when the distance between the electronic device and the device itself satisfies a distance condition. The information processing device according to claim 2 .

4. the acquiring means acquires a distance between the device and each of one or more electronic devices that can perform authentication processing related to wireless communication in accordance with the predetermined wireless communication standard with the device itself; the selection means selects the second authentication method as an authentication method to be used in authentication processing with a first electronic device, among the one or more electronic devices, for which the distance acquired by the acquisition means satisfies the distance-related condition; the authentication means executes the authentication process with the first electronic device using the selected second authentication method. The information processing device according to claim 3 .

5. further comprising a notification means for notifying the user to approach the electronic device that the user wants to use; The information processing device according to claim 4 .

6. further comprising a transmitting means for transmitting a predetermined signal; a notification unit configured to execute a process of notifying an error when the distance between the electronic device and the electronic device measured using the predetermined signal does not satisfy a predetermined condition in the electronic device that has received the predetermined signal; The information processing device according to claim 3 .

7. the plurality of authentication methods include at least a first authentication method and a second authentication method having a lower evasion performance than the first authentication method; the selection means selects the first authentication method when the distance between the electronic device and the device itself does not satisfy a distance condition. The information processing device according to claim 2 .

8. the selection means selects the first authentication method when the distance between the electronic device and the device itself does not satisfy the distance condition within a predetermined period of time. The information processing device according to claim 7 .

9. the acquiring means acquires a type of the device itself as the predetermined information; the selection means selects an authentication method having the bypass capability according to the acquired type of the own device, not the type of the electronic device. The information processing device according to claim 1 .

10. the plurality of authentication methods include at least a first authentication method and a second authentication method having a lower evasion performance than the first authentication method; the selection means selects the first authentication method when the device itself is not a portable device. The information processing device according to claim 9 .

11. the plurality of authentication methods include at least a first authentication method and a second authentication method having a lower evasion performance than the first authentication method; the selection means selects the first authentication method when the device itself is a predetermined model. The information processing device according to claim 9 .

12. the plurality of authentication methods include at least a first authentication method and a second authentication method having a lower evasion performance than the first authentication method; the electronic device is a first electronic device included in one or more electronic devices that can perform authentication processing related to wireless communication with the electronic device in accordance with the predetermined wireless communication standard, the acquiring means acquires, as the predetermined information, information indicating whether the first electronic device has been designated as a target device for performing the authentication process with the first electronic device; the selection means selects the first authentication method when the first electronic device is designated as the target device. The information processing device according to claim 1 .

13. the first authentication method is an authentication method involving an operation for confirming that the connection destination is correct, or a method combining an authentication method not involving an operation for confirming that the connection destination is correct with a method of requesting a predetermined operation related to an intended correct electronic device, The second authentication method is an authentication method that does not involve any operation to confirm that the connection destination is correct. The information processing device according to claim 1 .

14. the plurality of pieces of identification information are a plurality of service UUIDs (Universally Unique Identifiers); The information processing device according to claim 1 .

15. receiving a plurality of pieces of identification information corresponding to a plurality of authentication methods from the electronic device; selecting an authentication method to be used for authentication processing of the electronic device from the plurality of authentication methods based on predetermined information that can estimate a risk of communication with an unintended device; authenticating the electronic device using the selected authentication method; Information processing device.

16. An information processing system including an electronic device and an information processing device that executes authentication processing for wireless communication conforming to a predetermined wireless communication standard with the electronic device, the electronic device includes a transmitting means for transmitting a plurality of pieces of identification information corresponding to a plurality of authentication methods each having a different ability to avoid a risk of communicating with an unintended device; The information processing device includes: receiving means for receiving the plurality of pieces of identification information; an acquisition means for acquiring predetermined information that can estimate the risk of communication with an unintended device; a selection means for selecting an authentication method having the bypass capability according to the acquired predetermined information from the plurality of authentication methods corresponding to the plurality of pieces of identification information received; an authentication unit that executes the authentication process with the electronic device using the selected authentication method; An information processing system comprising:

17. the acquiring means acquires the distance between the electronic device and the information processing device as the predetermined information by measuring the distance between the electronic device and the information processing device; the selection means selects an authentication method having the avoidance performance according to the acquired distance, The electronic device includes: distance measurement means for measuring the distance between the electronic device and the information processing device; and disconnecting means for disconnecting wireless communication performed by the authentication process according to the selected authentication method when the distance measured by the distance measuring means does not satisfy a predetermined condition.

17. The information processing system according to claim 16.

18. one or more computers that execute authentication processing for wireless communication conforming to a predetermined wireless communication standard with an electronic device, a receiving step of receiving a plurality of pieces of identification information from the electronic device that transmits the plurality of pieces of identification information corresponding to a plurality of authentication methods each having different capabilities for avoiding a risk of communicating with an unintended device; an acquisition step of acquiring predetermined information that can estimate a risk of communication with an unintended device; a selection step of selecting an authentication method having the evasion capability according to the acquired predetermined information from the plurality of authentication methods corresponding to the plurality of pieces of identification information received; an authentication step of performing the authentication process with the electronic device using the selected authentication method; How to do it.

19. one or more computers that execute authentication processing for wireless communication conforming to a predetermined wireless communication standard with an electronic device; a receiving means for receiving a plurality of pieces of identification information from the electronic device, the plurality of pieces of identification information corresponding to a plurality of authentication methods each having different capabilities for avoiding a risk of communicating with an unintended device; an acquisition means for acquiring predetermined information that can estimate the risk of communication with an unintended device; a selection means for selecting an authentication method having the bypass capability according to the acquired predetermined information from the plurality of authentication methods corresponding to the plurality of pieces of identification information received; an authentication means for performing the authentication process with the electronic device using the selected authentication method; A program that functions as a

Images