COMMUNICATION SYSTEM, COMMUNICATION DEVICE, AND COMPUTER PROGRAM FOR SERVER

Abstract

To disclose a technique for making a server execute service provision without using a PIN code.SOLUTION: A terminal device obtains a public key of a communication device and transmits the public key to a server. The communication device transmits encrypted information to the server. The encrypted information is information that is obtained by encrypting registration information using a secret key corresponding to the public key as an encryption key. The registration information is information for registering identification information for identifying the communication device into the server. The server receives the public key from the terminal device; receives the encrypted information from the communication device; obtains the registration information by decrypting the encrypted information by using the public key; registers, when the registration information is obtained, the identification information into a predetermined area in a memory; and provides, when the identification information is registered into the predetermined area, a service related to the communication device.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] This specification discloses a technique for registering identification information for identifying a communication device in a server in order to receive a service related to the communication device from the server. [Background technology]

[0002] There are known servers that provide printer-related services. To receive such services, a user accesses the server, is issued a PIN (Personal Identification Number) code, and enters the PIN code into the printer. In this case, the printer sends a registration request including the PIN code to the server. In response, the server registers information about the printer and starts providing the printer-related services. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2019-180041 A Summary of the Invention [Problem to be solved by the invention]

[0004] In the above technology, the user needs to receive a PIN code and enter the PIN code into the printer. This specification discloses a technology for causing a server to provide a service without using a PIN code. [Means for solving the problem]

[0005] The communication system disclosed in this specification may include a terminal device, a communication device, and a server. The terminal device may include a public key acquisition unit that acquires a public key of the communication device, and a public key transmission unit that transmits the public key to the server. The communication device may include an encrypted information transmission unit that transmits encrypted information to the server, the encrypted information being information obtained by encrypting registration information using a private key corresponding to the public key as an encryption key, and the registration information being information for registering identification information for identifying the communication device to the server. The server may include a memory, a public key receiving unit that receives the public key from the terminal device, an encrypted information receiving unit that receives the encrypted information from the communication device, a decryption unit that acquires the registration information by decrypting the encrypted information using the public key, a registration unit that registers the identification information in a predetermined area in the memory when the registration information is acquired, and a service providing unit that provides a service related to the communication device when the identification information is registered in the predetermined area.

[0006] According to the above configuration, the public key of the communication device is transmitted from the terminal device to the server, and encrypted information is transmitted from the communication device to the server. This allows the server to obtain the registration information by decrypting the encrypted information using the public key. The server can then register identification information that identifies the communication device and provide a service related to the communication device. This allows the server to provide the service without using a PIN code.

[0007] A communication device disclosed in this specification may include an encrypted information transmission unit that transmits encrypted information to a server, wherein the encrypted information is information obtained by encrypting registration information using a private key corresponding to a public key of the communication device as an encryption key, and the registration information is information for registering identification information that identifies the communication device to the server.

[0008] According to the above configuration, the communication device transmits encrypted information obtained by encrypting the registration information to the server. This allows the server to register identification information for identifying the communication device and provide a service related to the communication device. This allows the server to provide the service without using a PIN code.

[0009] This specification discloses a computer program for a server, which may cause a computer of the server to function as the following units: a public key receiving unit that receives a public key of a communication device from a terminal device, an encrypted information receiving unit that receives encrypted information from the communication device, the encrypted information being information obtained by encrypting registration information using a private key corresponding to the public key as an encryption key, and the registration information being information for registering identification information for identifying the communication device in the server, a decryption unit that obtains the registration information by decrypting the encrypted information using the public key, a registration unit that registers the identification information in a predetermined area in a memory of the server when the registration information is obtained, and a service providing unit that provides a service related to the communication device when the identification information is registered in the predetermined area.

[0010] According to the above configuration, the server receives the public key of the communication device from the terminal device, and receives encrypted information from the communication device. As a result, the server can obtain the registration information by decrypting the encrypted information using the public key. Then, the server can register the identification information that identifies the communication device, and provide a service related to the communication device. For this reason, the server can be made to provide the service without using a PIN code.

[0011] A computer program for the terminal device, a computer-readable recording medium storing the computer program, and a method executed by the terminal device are also novel and useful. A computer program for the communication device, a computer-readable recording medium storing the computer program, and a method executed by the communication device are also novel and useful. Also, a computer-readable recording medium storing a computer program for the server, the server itself, and a method executed by the server are also novel and useful. [Brief description of the drawings]

[0012] [Figure 1] 1 shows the configuration of a communication system. [Diagram 2] 1 shows a sequence diagram of a first embodiment. [Diagram 3] The sequence diagram for case A is shown in continuation of Figure 2. [Figure 4] The sequence diagram for Case B is shown in continuation of Figure 2. [Diagram 5] 13 shows a sequence diagram of the second embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] (First Example) (Communication system configuration; Figure 1) As shown in Fig. 1, the communication system 2 includes a printer 10, a mobile terminal 50, and a service providing server 100. The service providing server 100 is connected to the Internet 6. In the state shown in Fig. 1, the printer 10 and the mobile terminal 50 are not connected to an access point 4 (hereinafter referred to as "AP (abbreviation of Access Point) 4") and cannot access the Internet 6. When the printer 10 and the mobile terminal 50 are connected to the AP 4, they can access the Internet 6.

[0014] (Printer 10 Configuration) The printer 10 is a peripheral device (for example, a peripheral device of a mobile terminal 50) capable of executing a printing function. In a modified example, the printer 10 may be a multi-function device capable of executing a scanning function, a fax function, etc. The printer 10 is assigned a serial ID "ppp10" that identifies the printer 10. The printer 10 includes an operation unit 12, a display unit 14, a communication interface 16, a print engine 18, and a control unit 30. Each unit 12 to 30 is connected to a bus line (reference numerals omitted).

[0015] The operation unit 12 has a plurality of keys. The display unit 14 is a display for displaying various information, and also functions as a touch panel (i.e., an operation unit) for receiving instructions from a user. The communication interface 16 is a wireless interface for establishing a Wi-Fi connection with the AP 4 and performing wireless communication. The print engine 18 has a printing mechanism such as an inkjet type or a laser type.

[0016] The control unit 30 includes a CPU 32 and a memory 34. The CPU 32 executes various processes in accordance with a program 36 stored in the memory 34. The memory 34 is configured with a volatile memory, a non-volatile memory, etc. The memory 34 stores in advance a public key 40 of the printer 10 and a private key 42 corresponding to the public key 40.

[0017] (Configuration of mobile terminal 50) Hereinafter, the mobile terminal 50 will be referred to as the "terminal 50". The terminal 50 is, for example, a portable terminal device such as a mobile phone, a smartphone, a PDA, a notebook PC, or a tablet PC. In a modified example, the terminal 50 may be a stationary terminal device such as a desktop PC. The terminal 50 includes an operation unit 52, a display unit 54, a communication interface 56, and a control unit 70. The units 52 to 70 are connected to a bus line (reference numerals omitted).

[0018] The operation unit 52 includes a plurality of keys. The display unit 54 is a display for displaying various information, and also functions as a touch panel (i.e., an operation unit) for receiving instructions from a user. The communication interface 56 is a wireless interface for establishing a Wi-Fi connection with the AP 4 and performing wireless communication. The terminal 50 may further include a wireless interface for performing mobile communication such as 4G and 5G. In this case, the terminal 50 can access the Internet 6 via the wireless interface.

[0019] The control unit 70 includes a CPU 72 and a memory 74. The CPU 72 executes various processes according to programs 76 and 78 stored in the memory 74. The memory 74 is composed of a volatile memory, a non-volatile memory, and the like. The OS (abbreviation of Operation System) program 76 is a program for realizing basic operations of the terminal 50. The printer application 78 is a program for establishing a Wi-Fi connection with the AP 4 in the printer 10 and receiving services related to the printer 10 from the service providing server 100. The printer application 78 may be installed in the terminal 50 from a server (not shown) installed on the Internet 6 by the vendor of the printer 10, or may be installed in the terminal 50 from a medium shipped together with the printer 10. Hereinafter, the printer application 78 will be referred to as an "app 78."

[0020] (Configuration of the service providing server 100) Hereinafter, the service providing server 100 will be referred to as "SP (short for Service Providing) server 100." The SP server 100 is installed on the Internet 6 by the vendor of the printer 10. In a modified example, the SP server 100 may be installed on the Internet 6 by a business entity other than the vendor of the printer 10. The SP server 100 is a server that provides services related to various printers including the printer 10. Specifically, in this embodiment, the SP server 100 provides a service of collecting status information of various printers and notifying the printer administrator of the status information.

[0021] The SP server 100 includes a communication interface 116 and a control unit 130. The units 116 and 130 are connected to a bus (reference numerals omitted). The communication interface 116 is connected to the Internet 6.

[0022] The control unit 130 includes a CPU 132 and a memory 134. The CPU 132 executes various processes in accordance with a program 136 stored in the memory 134. The memory 134 is composed of a volatile memory, a non-volatile memory, etc. The memory 134 further stores a printer table 138. Hereinafter, the printer table 138 will be referred to as "table 138."

[0023] Table 138 is stored in a non-volatile memory. Table 138 stores account information, serial IDs, tokens, and status information in association with each other. The account information is authentication information for authenticating a user of the printer, and includes a user ID and a password. The serial ID is identification information for identifying the printer (for example, the serial ID "ppp10" of printer 10). The token is authentication information for the printer to communicate with the SP server 100. The status information is information indicating the current status of the printer.

[0024] (Processing performed by each device 10, 50, 100: Figure 2) Next, the process executed by each of the devices 10, 50, 100 will be described with reference to FIG. 2. In the initial state of FIG. 2, the printer 10 and the terminal 50 have not established a Wi-Fi connection with the AP 4. In the following, for ease of understanding, the operations executed by the CPU of each device (e.g., CPU 32, etc.) will be described with reference to each device (e.g., printer 10) rather than with reference to the CPU. In addition, all communications executed by each of the devices 10, 50, 100 are executed via the communication interfaces 16, 56, 116. For this reason, the description "via the communication interface 16 (or 56, 116)" will be omitted in the following.

[0025] The following processes T10 to T30 executed by the terminal 50 are realized by the OS 76, not the application 78. At T10, the terminal 50 accepts an operation to search for the AP 4 from a user. In this case, at T12, the terminal 50 transmits a probe request by broadcast, and at T14, receives a probe response from the AP 4. The probe response includes an SSID (short for Service Set Identifier) ​​"aaa" that identifies the wireless network in which the AP 4 operates as a master station.

[0026] When the terminal 50 receives one or more Probe responses from one or more APs including AP4, the terminal 50 displays one or more SSIDs included in the one or more Probe responses. In T20, the terminal 50 accepts, from the user, a selection of SSID "aaa" included in the one or more SSIDs already displayed. In T20, the terminal 50 further accepts, from the user, an input of a password "bbb" used in a wireless network in which the AP4 operates as a master station. Then, in T22, the terminal 50 establishes a Wi-Fi connection with the AP4 by performing various communications with the AP4 (e.g., authentication, association, 4-way handshake, etc.) using the SSID "aaa" and the password "bbb".

[0027] Next, in T30, the terminal 50 accepts an application start operation from the user. In this case, the terminal 50 starts the application 78 and displays a home screen that is predetermined by the application 78. The following processes executed by the terminal 50 are realized by the application 78. In T32, the terminal 50 accepts, from the user, a selection of "Printer connection," which is a menu for establishing a Wi-Fi connection with the AP 4 in the printer 10, from among a plurality of menus in the home screen. In this case, in T34, the terminal 50 transmits a Probe request including a predetermined SSID "connect" by broadcast. The SSID "connect" is information for operating the printer 10 as a Group Owner (hereinafter referred to as "G / O") of Wi-Fi Direct (registered trademark).

[0028] In this embodiment, in a state where a Wi-Fi connection (see T22) with the AP4 is established, the terminal 50 executes communication with the printer 10 at T34 and later-described T42 to T46. In a modified example, the terminal 50 may execute communication with the printer 10 at T34 and later-described T42 to T46 after disconnecting the Wi-Fi connection with the AP4, and then re-establish a Wi-Fi connection with the AP4.

[0029] When the printer 10 receives a Probe request including the SSID "connect" from the terminal 50 in T34, the printer 10 transitions from a non-G / O state (e.g., a device state of Wi-Fi Direct) to a G / O state in T40. This enables the printer 10 to operate as a parent station (i.e., G / O) of the wireless network and to establish a Wi-Fi connection with the terminal 50. In a modified example, the printer 10 may operate as a so-called SoftAP instead of a G / O of Wi-Fi Direct. In another modified example, a Wi-Fi connection may be established between the printer 10 and the terminal 50 in response to the terminal 50 operating as a G / O or SoftAP.

[0030] In T42, the printer 10 and the terminal 50 establish a Wi-Fi connection by performing various communications (e.g., authentication, association, 4-way handshake, etc.) using a predetermined SSID "connect" and a predetermined password. This allows the terminal 50 to participate as a child station in a wireless network in which the printer 10 operates as a parent station (i.e., G / O). As a result, the printer 10 and the terminal 50 can perform wireless communication directly without going through the AP4.

[0031] In T44, the terminal 50 uses the Wi-Fi connection of T42 to send the SSID "aaa" and the password "bbb" of T20 to the printer 10.

[0032] When the printer 10 receives the SSID "aaa" and the password "bbb" from the terminal 50 in T44, the printer 10 transmits the serial ID "ppp10" and the public key 40 to the terminal 50 in T46, using the Wi-Fi connection of T42. In a modified example, the communication of T46 may be executed before the communication of T44.

[0033] As described above, when the printer 10 outputs (transmits in this embodiment) the serial ID "ppp10" and the public key 40 to the communication interface 16, the serial ID "ppp10" and the public key 40 are acquired by the terminal 50. Then, in the process described below, the serial ID "ppp10" and the public key 40 are transmitted from the terminal 50 to the SP server 100, so that the SP server 100 can associate the serial ID "ppp10" with the public key 40 and store them appropriately. As a result, the SP server 100 can appropriately use the public key 40 to decrypt encrypted information described below.

[0034] Next, the printer 10 transitions from the G / O state to a non-G / O state at T50. This disconnects the Wi-Fi connection between the printer 10 and the terminal 50. Then, the printer 10 establishes a Wi-Fi connection with the AP4 at T52 by performing various communications (e.g., authentication, association, 4-way handshake, etc.) using the SSID "aaa" and password "bbb" of T44. This causes both the printer 10 and the terminal 50 to join the wireless network in which the AP4 operates as the master station. Therefore, the printer 10 and the terminal 50 can each access the Internet 6 via the AP4.

[0035] As described above, the printer 10 receives the SSID "aaa" and the password "bbb" from the terminal 50 (T44), and can use them to establish a Wi-Fi connection with the AP 4 (T52). For this reason, the printer 10 can appropriately transmit the serial ID "ppp10" and encryption information (described below) to the SP server 100 via the AP 4 using the Wi-Fi connection.

[0036] (Continuation of Figure 2, Case A: Figure 3) Next, the processing of Case A continued from Figure 2 will be described with reference to Figure 3. Case A is a case where, when registering the serial ID "ppp10" of the printer 10 to the SP server 100, the terminal 50 transmits the serial ID "ppp10" to the SP server 100 before the printer 10 does. In the initial state of Figure 3, the account information AC1 has been registered in the table 138 (see Figure 1). However, the serial ID "ppp10" of the printer 10, the token, etc. have not yet been stored in the table 138 in association with the account information AC1.

[0037] The terminal 50 accepts input of account information AC1 from the user in T110. In this case, the terminal 50 transmits a login request including the account information AC1 to the SP server 100 in T112.

[0038] When the SP server 100 receives a login request from the terminal 50 in T112, it determines whether or not the account information AC1 included in the login request has been registered in the table 138. In this case, the SP server 100 determines that the account information AC1 has been registered, that is, the login has been successful, and transmits a success notification to the mobile terminal 50 in T114.

[0039] When the terminal 50 receives a success notification from the SP server 100 in T114, it transmits the serial ID "ppp10" and the public key 40 of T46 in FIG.

[0040] When SP server 100 stores serial ID "ppp10" and public key 40 from terminal 50 in T120, it associates serial ID "ppp10" with public key 40 and temporarily stores them in volatile memory in T122. Here, "temporarily stores" means that when serial ID "ppp10" is registered in table 138, serial ID "ppp10" and public key 40 are deleted from volatile memory.

[0041] 2 is established, the printer 10 generates encrypted information by encrypting a predetermined registration command using the private key 42 as an encryption key in T130. The registration command is a command that instructs the SP server 100 to register the serial ID "ppp10" of the printer 10 in the table 138. Then, the printer 10 transmits the serial ID "ppp10" and the encrypted information to the SP server 100 in T132.

[0042] As described above, since the printer 10 transmits the serial ID "ppp10" to the SP server 100, in the process described below, the SP server 100 can appropriately identify the public key 40 stored in association with the serial ID "ppp10" in order to decrypt the encrypted information. Also, since the printer 10 transmits the serial ID "ppp10" to the SP server 100 without encrypting it, the SP server 100 can appropriately identify the public key 40 stored in association with the serial ID "ppp10".

[0043] When the SP server 100 receives the serial ID "ppp10" and the encrypted information from the printer 10 in T132, it attempts to identify the public key associated with the serial ID "ppp10" from the volatile memory in T140. In this case, the SP server 100 is able to identify the public key 40 (see T122). Then, in T142, the SP server 100 attempts to decrypt the encrypted information using the identified public key 40 as a decryption key.

[0044] In this case, the SP server 100 can properly decrypt the encrypted information and can therefore obtain the registration command. Therefore, in T144, the SP server 100 registers the serial ID "ppp10" in the table 138 in association with the logged-in account information AC1 (see T112) in accordance with the registration command. The SP server 100 further generates a token T1 in T144 and registers the token T1 in the table 138 in association with the account information AC1. Then, in T150, the SP server 100 transmits the token T1 to the printer 10.

[0045] Here, for example, a situation is assumed in which a third party other than the user of the printer 10 uses a device other than the printer 10 (hereinafter referred to as an "unauthorized device") to illegally receive a service related to the printer 10 (i.e., a notification of status information) from the SP server 100. In this case, the third party uses the unauthorized device to transmit to the SP server 100 the serial ID "ppp10" of the printer 10 and encrypted information obtained by encrypting a registration command using some key. However, since the third party does not know the private key 42 of the printer 10, the unauthorized device cannot generate the encrypted information using the private key 42. When the SP server 100 receives the serial ID "ppp10" and the encrypted information from the unauthorized device, it attempts to decrypt the encrypted information using the public key 40 as a decryption key. However, since the encrypted information was not obtained using the private key 42, the SP server 100 cannot decrypt the encrypted information using the public key 40. As a result, the SP server 100 does not register the serial ID "ppp10" of the printer 10 in the table 138, and does not send the token T1 to the printer 10. Therefore, even if an unauthorized device sends a status request including the serial ID "ppp10" to the SP server 100, the SP server 100 does not send the status information of the printer 10 to the unauthorized device. In this way, according to this embodiment, it is possible to prevent the status information of the printer 10 from being obtained unauthorizedly by a third party.

[0046] When the printer 10 receives the token T1 from the SP server 100 in T150, the printer 10 transmits the status information S1 and the token T1 to the SP server 100 in T160. In this way, the printer 10 transmits the token T1, which is authentication information for executing communication with the SP server 100, to the SP server 100, so that the status information S1 can be appropriately stored in the table 138. This allows the SP server 100 to appropriately provide a service that notifies the status information S1. Although not shown in the figure, the printer 10 repeatedly transmits the status information S1 and the token T1 to the SP server 100.

[0047] When the SP server 100 receives the status information S1 and the token T1 from the printer 10 in T160, it registers the status information S1 in the table 138 in association with the token T1 (i.e., in association with the account information AC1 and the serial ID "ppp10") in T162. The SP server 100 registers the latest status information S1 in the table 138 every time it receives the status information S1 and the token T1 from the printer 10.

[0048] When the terminal 50 receives a status acquisition instruction (not shown) from the user while logged in to the SP server 100, the terminal 50 transmits a status request including the serial ID "ppp10" to the SP server 100 in T170.

[0049] When the SP server 100 receives a status request from the terminal 50 in T170, it identifies the status information S1 (see T162) associated with the serial ID “ppp10” included in the status request from the table 138. Then, the SP server 100 transmits the status information S1 to the terminal 50 in T172.

[0050] When the terminal 50 receives the status information S1 from the SP server 100 in T172, the terminal 50 displays the status information S1. This allows the user of the terminal 50 (that is, the administrator of the printer 10) to know the status of the printer 10.

[0051] (Continuation of Figure 2, Case B: Figure 4) Next, the processing of Case B continued from Fig. 2 will be described with reference to Fig. 4. Case B is a case where, when the serial ID "ppp10" of the printer 10 is registered in the SP server 100, the printer 10 transmits the serial ID "ppp10" to the SP server 100 before the terminal 50 transmits the serial ID "ppp10" to the SP server 100. The initial state of Fig. 4 is the same as the initial state of Fig. 3.

[0052] Before the terminal 50 logs in to the SP server 100, that is, before the terminal 50 transmits the serial ID "ppp10" and the public key 40 to the SP server 100 (see T120 in FIG. 3), the printer 10 encrypts the registration command in T210. The process of T210 is the same as the process of T130 in FIG. 3. Then, the printer 10 transmits the serial ID "ppp10" and the encrypted information to the SP server 100 in T212. The printer 10 repeatedly executes the process of T212 until it receives the token T1 from the SP server 100. Therefore, the printer 10 can reliably transmit the serial ID "ppp10" and the encrypted information to the SP server 100 after the terminal 50 transmits the serial ID "ppp10" and the public key 40 to the SP server 100. For this reason, the printer 10 can cause the SP server 100 to properly register the serial ID "ppp10" in the table 138.

[0053] When the SP server 100 receives the serial ID "ppp10" and the encryption information from the printer 10 at T212, it attempts to identify the public key associated with the serial ID "ppp10" from the volatile memory. At this point, the SP server 100 is unable to identify the public key because the public key 40 has not yet been transmitted from the terminal 50 to the SP server 100. In this case, the SP server 100 does not execute the process for registering the serial ID "ppp10" in the table 138.

[0054] Thereafter, the terminal 50 logs in to the SP server 100 in steps T220 to T224, similar to the processes in steps T110 to T114 in FIG.

[0055] When the SP server 100 receives the serial ID "ppp10" and the public key 40 from the terminal 50 in T230, the SP server 100 associates the serial ID "ppp10" with the public key 40 and temporarily stores them in the volatile memory in T232. After that, the SP server 100 receives the serial ID "ppp10" and encrypted information from the printer 10 in T240. In this case, the same processes as those in T140 to T172 in FIG. 3 are executed.

[0056] (Effects of the first embodiment) The following comparative example for receiving a service from the SP server 100 is assumed. In the comparative example, the user accesses the SP server 100, receives a PIN (short for Personal Identification Number) code, and inputs the PIN code into the printer 10. In this case, the printer 10 transmits a registration request including the PIN code and serial ID "ppp10" to the SP server 100. If authentication of the PIN code is successful, the SP server 100 registers the serial ID "ppp10" and starts providing the service related to the printer 10. In this comparative example, the user is required to receive a PIN code and input the PIN code into the printer 10.

[0057] In contrast, according to this embodiment, the public key 40 of the printer 10 is transmitted from the terminal 50 to the SP server 100 (T120 in FIG. 3, T230 in FIG. 4), and the encrypted information is transmitted from the printer 10 to the SP server 100 (T132 in FIG. 3, T240 in FIG. 4). This allows the SP server 100 to obtain the registration command by decrypting the encrypted information using the public key 40 (T142 in FIG. 3). Then, the SP server 100 registers the serial ID "ppp10" of the printer 10 in the table 138 (T144), and can provide a service of notifying the administrator of the status information S1 of the printer 10 (T172). For this reason, it is possible to have the SP server 100 execute the provision of the service without using a PIN code. Therefore, the user does not need to receive the issuance of a PIN code and then input the PIN code into the printer 10, improving user convenience.

[0058] In particular, the printer 10 can register the serial ID "ppp10" in the SP server 100 simultaneously with the establishment of a Wi-Fi connection with the AP 4. For this reason, the user can register the serial ID "ppp10" in the SP server 100 as a series of processes following the process of connecting the printer 10 to the AP 4. Therefore, after connecting the printer 10 to the Internet 6, the user can quickly receive services related to the printer 10.

[0059] (Correspondence) The printer 10 and AP4 are examples of a "communication device" and an "external device", respectively. The registration command, table 138, serial ID "ppp10", and token T1 are examples of "registration information", "predetermined area", "identification information", and "authentication information", respectively. The SSID "aaa" and password "bbb" of AP4 are examples of "connection information". The communication interface 16 and the public key 40 itself are examples of "output section" and "specific information", respectively.

[0060] The correspondence relationship of the "terminal devices" is as follows: The process of T46 in Fig. 2 is an example of a process executed by a "public key acquisition unit". The processes of T120 in Fig. 3 and T230 in Fig. 4 are examples of a process executed by a "public key transmission unit".

[0061] The correspondence of the "communication devices" is as follows: The processes of T44 and T52 in FIG. 2 are examples of processes executed by a "connection information receiving unit" and an "establishment unit", respectively. The process of T46 is an example of processes executed by a "first output control unit" and a "second output control unit". The processes of T132 in FIG. 3 and T240 in FIG. 4 are examples of processes executed by an "encryption information transmitting unit" and an "identification information transmitting unit". The processes of T150 and T160 in FIG. 3 are examples of processes executed by an "authentication information receiving unit" and a "status information transmitting unit", respectively.

[0062] The correspondence relationship of the "server" is as follows. The process of T120 in FIG. 3 and T230 in FIG. 4 is an example of a process executed by the "public key receiving unit" and the "first identification information receiving unit". The process of T132 in FIG. 3 and T240 in FIG. 4 is an example of a process executed by the "encrypted information receiving unit" and the "second identification information receiving unit". The process of T142, the process of T144, the process of T150, the process of T170, and the process of T172 in FIG. 3 are examples of a process executed by the "decryption unit", the "registration unit", the "authentication information transmitting unit", the "status information receiving unit", and the "service providing unit", respectively. The process of T122 in FIG. 3 and T232 in FIG. 4 is an example of a process executed by the "storage control unit".

[0063] (Second embodiment; Figure 5) A second embodiment will be described with reference to Fig. 5. In the second embodiment, the process of Fig. 5 is executed instead of the process of Fig. 2. In this embodiment, the printer 10 and the terminal 50 establish a Wi-Fi connection with the AP 4 according to the DPP (abbreviation of Device Provisioning Protocol) method.

[0064] In T300, the terminal 50 accepts an application start operation from the user. In this case, the terminal 50 starts the application 78 and displays the home screen. Each of the following processes executed by the terminal 50 is realized by the application 78. In T310, the terminal 50 accepts from the user a selection of "QR Code Read", which is a menu for reading the QR code (registered trademark) of the AP4, from among a plurality of menus on the home screen.

[0065] A QR code obtained by encoding information including the public key of AP4 is attached to the housing of AP4. When the terminal 50 accepts an operation to read the QR code of AP4 from the user in T310 (for example, photographing the QR code), the terminal 50 reads the QR code using a camera (not shown) in T312 and decodes the QR code to obtain the public key of AP4. The process of T312 is bootstrapping according to the DPP method.

[0066] Next, in T320, the terminal 50 executes authentication according to the DPP method with the AP 4. This authentication includes transmitting an authentication request using the public key of the AP 4 from the terminal 50 to the AP 4.

[0067] In T322, the terminal 50 executes a configuration according to the DPP method with the AP 4. The configuration includes a Signed Connector for the AP (hereinafter, referred to as an "SC for the AP") being transmitted from the terminal 50 to the AP 4. The SC for the AP is connection information for the AP 4 to establish a Wi-Fi connection with other devices (e.g., the printer 10, the terminal 50, etc.).

[0068] In T324, the terminal 50 uses the SC for AP to establish a Wi-Fi connection with the AP 4. The processing in T324 is network access according to the DPP method.

[0069] Next, the user of the terminal 50 (i.e., the administrator of the printer 10) executes an operation to establish a Wi-Fi connection between the printer 10 and the AP 4. When the printer 10 accepts an operation to display the QR code of the printer 10 from the user in T330, the printer 10 displays the QR code in T332. The QR code is a code obtained by encoding information including the serial ID "ppp10" and the public key 40.

[0070] When the terminal 50 accepts an operation to read the QR code of the printer 10 from the user in T340 (for example, photographing the QR code), in T342, the terminal 50 reads the QR code using a camera (not shown) and decodes the QR code to obtain the serial ID “ppp10” and the public key 40. The processing in T342 is bootstrapping according to the DPP method.

[0071] Next, in T350, the terminal 50 executes authentication according to the DPP method with the printer 10. This authentication includes sending an authentication request using the public key 40 of the printer 10 from the terminal 50 to the printer 10.

[0072] In T352, the terminal 50 executes a configuration according to the DPP method with the printer 10. The configuration includes a signed connector for the printer (hereinafter, referred to as a "printer SC") being sent from the terminal 50 to the printer 10. The printer SC is connection information for the printer 10 to establish a Wi-Fi connection with the AP4.

[0073] Next, when the printer 10 receives the printer SC from the terminal 50 in T352, the printer 10 establishes a Wi-Fi connection with the AP4 using the printer SC in T354. The process of T354 is Network Access according to the DPP method. As a result, both the printer 10 and the terminal 50 join the wireless network formed by the AP4.

[0074] The processes executed after the process in FIG. 5 are similar to those in case A in FIG. 3 or case B in FIG. 4 in the first embodiment.

[0075] (Effects of the second embodiment) According to this embodiment, the printer 10 receives the printer SC from the terminal 50 (T352) and can use it to establish a Wi-Fi connection with the AP 4 (T354). For this reason, the printer 10 can appropriately transmit the serial ID "ppp10" and the encryption information to the SP server 100 via the AP 4 using the Wi-Fi connection (T132 in FIG. 3, T240 in FIG. 4).

[0076] Furthermore, the serial ID "ppp10" and the public key 40 are acquired by the terminal 50 (T342) in response to the printer 10 outputting (displaying in this embodiment) the QR code obtained using the serial ID "ppp10" and the public key 40 to the display unit 14. Then, the serial ID "ppp10" and the public key 40 are transmitted from the terminal 50 to the SP server 100 (T120 in FIG. 3, T230 in FIG. 4), so that the SP server 100 can associate the serial ID "ppp10" and the public key 40 and appropriately store them (T122 in FIG. 3, T232 in FIG. 4). As a result, the SP server 100 can appropriately use the public key 40 to decrypt the encrypted information.

[0077] (Correspondence) The printer SC, the QR code of the printer 10, and the display unit 14 are examples of "connection information," "specific information," and "output unit," respectively. The processing of T332 is an example of processing executed by a "first output control unit" and a "second output control unit" of the "communication device." The processing of T342 is an example of processing executed by a "public key acquisition unit" of the "terminal device." The processing of T352 and the processing of T354 are examples of processing executed by a "connection information receiving unit" and a "establishment unit" of the "communication device," respectively.

[0078] Although specific examples of the technology disclosed in this specification have been described in detail above, these are merely examples and do not limit the scope of the claims. The technology described in the claims includes various modifications and variations of the specific examples exemplified above. Modifications of the above embodiments are listed below.

[0079] (Variation 1) A QR code obtained by encoding the public key 40 and serial ID "ppp10" of the printer 10 may be attached to the housing of the printer 10. In this case, the terminal 50 may obtain the public key 40 and the serial ID "ppp10" by reading the QR code attached to the housing instead of T46 in FIG. 2 and T342 in FIG. 5. In another variation, the QR code may be printed on the instruction manual of the printer 10. In this case, the terminal 50 may obtain the public key 40 and the serial ID "ppp10" by reading the QR code in the instruction manual. These variations are also examples of the process executed by the "public key acquisition unit" of the "terminal device". In addition, in this variation, the "first output control unit" and the "second output control unit" of the "communication device" can be omitted.

[0080] (Variation 2) At the time of shipping the printer 10, the memory 34 of the printer 10 may store in advance encrypted information obtained by encrypting the registration command. In this case, T130 in Fig. 3 and T210 in Fig. 4 may be omitted. That is, the "encrypted information transmitting unit" of the "communication device" may generate encrypted information and transmit it to the server as in the above embodiment, or may transmit pre-stored encrypted information to the server as in this variation.

[0081] (Variation 3) The services provided by the SP server 100 are not limited to those in the above embodiment. For example, the SP server 100 may receive information indicating the remaining amount of a consumable from the printer 10, and may provide a service of shipping the consumable to a user when the remaining amount of the consumable is less than a threshold value. In this variation, the remaining amount of the consumable is an example of "status information." For example, if a scanner is an example of a "communication device," the SP server 100 may provide a service of receiving image data from the scanner, processing the image data to generate processed data, and transmitting the processed data to a user.

[0082] (Variation 4) The terminal 50 may be capable of forming a wireless network in which the terminal 50 operates as a parent station. In this case, the printer 10 may receive the SSID and password of the wireless network from the terminal 50, and establish a Wi-Fi connection with the terminal 50 instead of establishing a Wi-Fi connection with the AP 4. The printer 10 may then communicate with the SP server 100 via the terminal 50. In this variation, the terminal 50 is an example of an "external device."

[0083] (Variation 5) The printer 10 may accept input of the SSID "aaa" and password "bbb" of the AP4 from the terminal 50 by the user via the operation unit 12. In this case, the printer 10 can establish a Wi-Fi connection with the AP4 using the SSID and password. In this variation, the "connection information receiving unit" of the "communication device" can be omitted.

[0084] (Variation 6) The "identification information" is not limited to the serial ID "ppp10" of the printer 10, but may be the MAC address of the communication interface 16 of the printer 10, or the model name of the printer 10. Furthermore, the "identification information" may be any of the following information that can identify the printer 10. That is, the "identification information" may be a public key unique to the printer 10, information obtained by hashing the public key, a certificate for the printer 10, an electronic signature for the printer 10, etc.

[0085] (Variation 7) The printer 10 may generate an encrypted serial ID by encrypting the serial ID "ppp10" using the private key 42 at T130 in FIG. 3, and may transmit the encrypted serial ID and the encrypted information to the SP server 100 at T132. In this case, the SP server 100 may attempt to decrypt the encrypted serial ID and the encrypted information received from the printer 10 by sequentially using all the temporarily stored public keys. If the decryption using any of the public keys is successful, the SP server 100 may register the serial ID "ppp10" in the table 138. Generally speaking, the "identification information transmission unit" of the "communication device" may transmit the identification information encrypted using the private key to the server.

[0086] (Variation 8) After transmitting the serial ID "ppp10" and the encrypted information to the SP server 100 in T212 of FIG. 4, the printer 10 may repeatedly transmit only the serial ID "ppp10" to the SP server 100 without transmitting the encrypted information to the SP server 100. In this case, the SP server 100 temporarily stores the serial ID "ppp10" and the encrypted information that are first received from the printer 10 in association with each other, and when the serial ID "ppp10" and the public key 40 are received from the terminal 50 in T230, the SP server 100 decrypts the encrypted information using the public key 40 and registers the serial ID "ppp10" in the table 138. After that, the printer 10 receives the token T1 from the SP server 100 in response to transmitting only the serial ID "ppp10" to the SP server 100. Generally speaking, the "encrypted information transmitting unit" of the "communication device" does not need to repeatedly transmit encrypted information to the server.

[0087] (Modification 9) The SP server 100 may provide a service without receiving status information or image data from the printer 10, scanner, etc. For example, the SP server 100 may be a server that provides a service of transmitting news information. In this case, when the SP server 100 registers the serial ID "ppp10", it periodically transmits print data indicating news information to the printer 10 and causes the printer 10 to print the news information. In this modification, the printer 10 does not need to receive the token T1 from the SP server 100, and does not need to transmit status information to the SP server 100 together with the token T1. In this modification, the "authentication information receiving unit" and the "status information transmitting unit" of the "communication device" can be omitted. Also, the "authentication information transmitting unit" and the "status information receiving unit" of the "server" can be omitted.

[0088] (Modification 10) The SP server 100 may receive the public key 40 from the terminal 50 without receiving the serial ID "ppp10" at T120 in FIG. 3, and temporarily store only the public key 40. When the SP server 100 receives the serial ID "ppp10" and encrypted information from the printer 10 at T132, the SP server 100 may attempt to decrypt the encrypted information received from the printer 10 by sequentially using all temporarily stored public keys. When the SP server 100 succeeds in decrypting the encrypted information using any public key, the SP server 100 may register the serial ID "ppp10" in the table 138. In this modification, the "first identification information receiving unit" and the "storage control unit" of the "server" can be omitted. In another modification, the SP server 100 may execute the processes of T120 and T122 in FIG. 3, and may receive only the encrypted information from the printer 10 at T132, without receiving the serial ID "ppp10". In this case, the SP server 100 may attempt to decrypt the encrypted information received from the printer 10 by sequentially using all of the temporarily stored public keys. If decryption using any of the public keys is successful, the SP server 100 may register the serial ID "ppp10" in the table 138. In this modification, the "second identification information receiving unit" of the "server" can be omitted.

[0089] (Modification 11) In the above embodiments, the processes in FIGS. 2 to 5 are executed by software (eg, programs 36, 78, 136), but at least one of these processes may be realized by hardware such as a logic circuit.

[0090] The technical elements described in this specification or drawings have technical utility either alone or in various combinations, and are not limited to the combinations described in the claims at the time of filing. In addition, the technologies illustrated in this specification or drawings can achieve multiple objectives simultaneously, and achieving one of these objectives is itself technically useful. The following is a list of the items to be claimed at the time of filing of the patent application. (Item 1) 1. A communication system comprising: A terminal device; A communication device; A server, The terminal device a public key acquisition unit for acquiring a public key of the communication device; a public key transmission unit that transmits the public key to the server; The communication device includes: An encrypted information transmission unit that transmits encrypted information to the server, the encrypted information being: The registration information is encrypted using a private key corresponding to the public key as an encryption key. The registration information is information for registering identification information for identifying the communication device in the server. The encrypted information transmission unit is information for transmitting the encrypted information, The server, Memory, a public key receiving unit for receiving the public key from the terminal device; an encrypted information receiving unit for receiving the encrypted information from the communication device; The registration information is obtained by decrypting the encrypted information using the public key. a decoding unit for decoding the When the registration information is acquired, the identification information is registered in a predetermined area in the memory. a registration unit for registering the When the identification information is registered in the predetermined area, a service related to the communication device is provided. and a service providing unit that provides the service. Communication systems. (Item 2) A communication device, comprising: An encrypted information transmitting unit that transmits encrypted information to a server, The registration information is encrypted using the private key corresponding to the public key of the receiving device as the encryption key. The registration information is information that is registered in the server to identify the communication device. The encrypted information transmission unit is information for recording A communication device comprising: (Item 3) The communication device further comprises: a connection information receiving unit for receiving connection information from a terminal device; an establishment unit that establishes a wireless connection with an external device by using the connection information; The encrypted information transmission unit transmits the encrypted information via the external device by using the wireless connection. The communication device according to item 2, wherein the communication device transmits the generated information to the server. (Item 4) The communication device further comprises: a first output control unit that causes an output unit to output specific information obtained by using the public key; The public key is acquired by a terminal device in response to the output of the specific information. The terminal device transmits the encrypted information to the server, and the server transmits the encrypted information to the server. The communication device according to item 2 or 3, which is used for (Item 5) The first output control unit outputs the signal via a wireless communication interface serving as the output unit. 5. The communication device according to item 4, wherein the specific information, which is a public key, is transmitted to the terminal device. (Item 6) 5. The communication device according to item 4, wherein the first output control unit causes a display unit, which is the output unit, to display the specific information. (Item 7) The communication device further comprises: After the public key is acquired by the terminal device, wireless communication is performed using the public key. and receiving connection information from the terminal device by executing the connection information with the terminal device. A receiving unit; an establishment unit that establishes a wireless connection with an external device by using the connection information; The encrypted information transmission unit transmits the encrypted information via the external device by using the wireless connection. 7. The communication device according to item 6, wherein the communication device transmits the generated information to the server. (Item 8) The communication device further comprises: a second output control unit that causes an output unit to output the identification information; the identification information is acquired by a terminal device in response to the output of the specific information; The terminal device transmits the public key to the server, and the public key is associated with the public key. The communication device according to any one of items 4 to 7, wherein the communication device is stored in the server. (Item 9) The communication device further comprises: an identification information transmitting unit that transmits the identification information to the server, In response to being transmitted from a receiving device to the server, the information is stored in association with the identification information. 9. The communication device according to claim 8, wherein the public key stored in the certificate is utilized by the server. (Item 10) The identification information transmission unit transmits the identification information that is not encrypted using the private key to the 10. The communication device according to item 9, which transmits to a server. (Item 11) Item 2. The encrypted information transmission unit repeatedly transmits the encrypted information to the server. 11. A communication device according to any one of claims 1 to 10. (Item 12) The communication device further comprises: An authentication information receiving device that receives authentication information for performing communication with the server from the server. With Shinbu, The identification information is registered in the server, and the authentication information is received from the server. and then storing the authentication information and status information regarding a status of the communication device in the a status information transmission unit for transmitting the status information to a server; Equipped with The status information is utilized by the server to provide the service. 12. A communication device according to any one of items 2 to 11. (Item 13) A computer program for a server, comprising: The server computer is composed of the following parts: a public key receiving unit for receiving a public key of the communication device from the terminal device; an encrypted information receiving unit for receiving encrypted information from the communication device, The registration information is encrypted using a private key corresponding to the public key as an encryption key. The registration information is information to be registered in the server, and the registration information is identification information for identifying the communication device. the encrypted information receiving unit, The registration information is obtained by decrypting the encrypted information using the public key. A decoding unit; When the registration information is acquired, the identification information is stored in a predetermined area in the memory of the server. A registration unit for registering; When the identification information is registered in the predetermined area, a service related to the communication device is provided. A service provision department that provides A computer program that functions as a (Item 14) The computer program further causes the computer to a first identification information receiving unit that receives the identification information together with the public key from the terminal device; and, a storage control unit that stores the public key and the identification information in the memory in association with each other; a second identification information receiving unit that receives the identification information from the communication device; Functioning as a The decoding unit stores the identification information received from the communication device in the memory in association with the identification information. Item 14. The computer according to item 13, wherein the encrypted information is decrypted using the public key stored in the computer. Computer program. (Item 15) The computer program further causes the computer to transmitting authentication information to the communication device for performing communication with the server; Department and The identification information is registered in the predetermined area, and the authentication information is transmitted to the communication device. After the authentication information is received, the authentication information and a status regarding the status of the communication device are received from the communication device. a status information receiving unit for receiving status information; Functioning as a 15. The computer program according to item 13 or 14, wherein the service providing unit provides the service by utilizing the status information. [Explanation of symbols]

[0091] 2: communication system, 6: Internet, 10: printer, 12: operation unit, 14: display unit, 16: communication interface, 18: print engine, 30: control unit, 32: CPU, 34: memory, 36: program, 50: mobile terminal, 52: operation unit, 54: display unit, 56: communication interface, 70: control unit, 72: CPU, 74: memory, 76: OS program, 78: printer application, 100: service providing server, 116: communication interface, 130: control unit, 132: CPU, 134: memory, 136: program, 138: printer table 138

Claims

1. 1. A communication system comprising: A terminal device; A communication device; A server, The terminal device a first establishment unit that establishes a first wireless connection with an external device different from the terminal device; a public key acquisition unit that acquires a public key of the communication device when the communication device outputs specific information that is a public key of the communication device itself or an image obtained by encoding the public key; a connection information transmission unit that transmits connection information for establishing a wireless connection with the external device to the communication device in response to the public key being acquired; a public key transmission unit configured to transmit the public key to the server via the external device by using the first wireless connection; The communication device includes: An output unit; a first output control unit that causes the output unit to output the specific information, the first output control unit being configured to cause the terminal device to acquire the public key in response to the specific information being output, and the public key being transmitted from the terminal device to the server; a connection information receiving unit that receives the connection information from the terminal device in response to the output of the identification information; a second establishment unit that establishes a second wireless connection with the external device by using the connection information; an encrypted information transmission unit that transmits encrypted information to the server via the external device by using the second wireless connection, the encrypted information being information obtained by encrypting registration information using a private key corresponding to the public key as an encryption key, and the registration information being information instructing the server to register identification information for identifying the communication device in a memory of the server; The server, The memory; a public key receiving unit for receiving the public key from the terminal device; an encrypted information receiving unit for receiving the encrypted information from the communication device; a decryption unit that obtains the registration information by decrypting the encrypted information using the public key; a registration unit that registers the identification information in a predetermined area of ​​the memory in accordance with the registration information when the registration information is acquired; a service providing unit that provides a service related to the communication device when the identification information is registered in the predetermined area. Communication systems.

2. The communication system according to claim 1 , wherein the connection information receiving unit receives the connection information from the terminal device by performing wireless communication with the terminal device using the public key.

3. 1. A communication system comprising: A terminal device; A communication device; A server, The terminal device a first establishment unit that establishes a first wireless connection with an external device different from the terminal device; a connection information transmission unit that transmits connection information for establishing a wireless connection with the external device to the communication device; a public key acquisition unit that acquires a public key of the communication device when specific information, which is a public key of the communication device itself or an image obtained by encoding the public key, is output from the communication device in response to the connection information being transmitted to the communication device; a public key transmission unit configured to transmit the public key to the server via the external device by using the first wireless connection; The communication device includes: An output unit; a connection information receiving unit for receiving the connection information from the terminal device; a first output control unit that causes the output unit to output the specific information in response to receiving the connection information from the terminal device, the first output control unit being configured to acquire the public key by the terminal device in response to outputting the specific information, and to transmit the public key from the terminal device to the server; a second establishment unit that establishes a second wireless connection with the external device by using the connection information; an encrypted information transmission unit that transmits encrypted information to the server via the external device by using the second wireless connection, the encrypted information being information obtained by encrypting registration information using a private key corresponding to the public key as an encryption key, and the registration information being information instructing the server to register identification information for identifying the communication device in a memory of the server; The server, The memory; a public key receiving unit for receiving the public key from the terminal device; an encrypted information receiving unit for receiving the encrypted information from the communication device; a decryption unit that obtains the registration information by decrypting the encrypted information using the public key; a registration unit that registers the identification information in a predetermined area of ​​the memory in accordance with the registration information when the registration information is acquired; a service providing unit that provides a service related to the communication device when the identification information is registered in the predetermined area. Communication systems.

4. The communication system according to claim 1 , wherein the first output control unit transmits the specific information, which is the public key, to the terminal device via a wireless communication interface, which is the output unit.

5. The communication system according to claim 1 , wherein the first output control unit causes a display unit serving as the output unit to display the specific information, which is an image.

6. The communication device further comprises: a second output control unit that causes the output unit to output the identification information; 6. A communication system according to claim 1, wherein the identification information is acquired by the terminal device in response to being output, transmitted from the terminal device to the server together with the public key, and stored in the server in association with the public key.

7. The communication device further comprises:

7. The communication system of claim 6, further comprising an identification information sending unit that sends the identification information to the server, and in response to the identification information being sent from the communication device to the server, the public key stored in association with the identification information is used by the server.

8. The communication system according to claim 7 , wherein the identification information transmission unit transmits the identification information to the server in an unencrypted form using the private key.

9. The communication system according to claim 1 , wherein the encrypted information transmission unit repeatedly transmits the encrypted information to the server.

10. The communication device further comprises: an authentication information receiving unit that receives, from the server, authentication information for executing communication with the server; a status information transmission unit that transmits the authentication information and status information relating to a status of the communication device to the server after the identification information is registered in the server and the authentication information is received from the server; Equipped with A communication system according to claim 1 , wherein the status information is utilized by the server to provide the service.

Images