Communication device, communication method, and program

Abstract

To improve convenience for a user by switching a security method without any operation on the user's part when a user selects a security method that does not require a password to be input.SOLUTION: A communication device switches between a first security method and a second security method on the basis of a frequency band in which the communication device operates when it is determined to operate on a security method that does not require an input of a password.SELECTED DRAWING: Figure 6

Description

Technical Field

[0001] The present invention relates to a communication device that performs wireless communication.

Background Art

[0002] In the development of WLAN (Wireless Local Area Network) technology, the standardization by the Wi-Fi Alliance to ensure the interconnection of WLAN technology plays an important role.

[0003] The communication device described in Patent Document 1 performs authentication with WPA (Wi-Fi Protected Access) / WPA2, which is an authentication program by the Wi-Fi Alliance. On the other hand, there is also a method called Open that has been conventionally available for communication without performing authentication and encryption without entering a password.

[0004] In addition, a new security method called Wi-Fi Enhanced Open has emerged, which allows users to perform encrypted communication based on OWE without entering a password by the Wi-Fi Alliance. Here, OWE is an abbreviation for Oppotunistic Wireless Encryption.

Prior Art Documents

Patent Documents

[0005]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0006] In addition to the conventional Open security method, Wi-Fi Enhanced Open has been added, which allows encrypted communication without requiring a password. Therefore, users who select a password-free security method will need to further select between Open and Wi-Fi Enhanced Open, potentially compromising user convenience.

[0007] In view of the above issues, the present invention aims to improve user convenience by switching security methods without user intervention when the user selects a security method that does not require password input. [Means for solving the problem]

[0008] To achieve the above objective, the communication device of the present invention is A first determination means for determining the frequency on which the communication device operates, A second determination means for determining the security method under which the communication device operates, If the second determination means determines that the system will operate in a security mode that does not require password input, the control means switches between the first security mode and the second security mode based on the frequency band determined by the first determination means. It has. [Effects of the Invention]

[0009] According to the present invention, when a user selects a security method that does not require password input, the security method can be switched without any user intervention, thereby improving user convenience. [Brief explanation of the drawing]

[0010] [Figure 1] There is a diagram showing an example of the network configuration established by the communication device 102. [Figure 2] This figure shows an example of the functional configuration of the communication device 102. [Figure 3] This figure shows an example of the hardware configuration of the communication device 102. [Figure 4] This figure shows an example of the display when the wireless operating mode is set to the 2.4GHz band. [Figure 5] This diagram shows an example of the display when the wireless operating mode is set to the 6GHz band. [Figure 6] This diagram shows a flowchart of the actions performed by the communication device 102. [Figure 7] This figure shows an example of the display when the wireless operating mode is set to the 2.4GHz band. [Figure 8] This figure shows an example of what is displayed when "no password" is selected in the enhanced security mode. [Figure 9] This diagram shows a flowchart executed by the communication device 102 having an extended security mode. [Modes for carrying out the invention]

[0011] Embodiments of the present invention will be described in detail below with reference to the attached drawings. Note that the configurations shown in the following embodiments are merely examples, and the present invention is not limited to the illustrated configurations.

[0012] Figure 1 shows an example of the network configuration established by the AP (Access Point) 102 in this embodiment. The communication device 102 is a communication device that plays a role in establishing the network 101. The network 101 is a wireless network.

[0013] Furthermore, STA (Station) 103 is a communication device that participates in network 101. Communication device 103 is compliant with the IEEE 802.11be (EHT) standard and can perform wireless communication compliant with the IEEE 802.11be standard via network 101. Here, IEEE is an abbreviation for Institute of Electrical and Electronics Engineers.

[0014] Figure 2 shows an example of the functional configuration of the communication device 102. The communication device 102 includes a wireless LAN control unit 201, a display screen generation unit 202, a user input analysis unit 203, a UI control unit 204, a storage unit 205, and an external wireless detection unit 206.

[0015] The wireless LAN control unit 201 is configured to include an antenna and circuits for transmitting and receiving wireless signals to and from other wireless LAN devices, and a program for controlling them. The wireless LAN control unit 201 executes wireless LAN communication control in accordance with the IEEE802.11 series standards. It is assumed that the communication device 102 includes the wireless LAN control unit 201. In this embodiment, the number of wireless LAN control units is one, but it is not limited to this.

[0016] The UI control unit 204 is configured to include hardware related to a user interface such as a touch panel or buttons for receiving operations on the AP by the AP user, and a program for operating them. The program of the UI control unit 204 sends the input content from the user obtained from the input unit 304 shown in FIG. 3 to the user input analysis unit. Also, the image generated by the display screen generation unit 202 is sent to the output unit 305 shown in FIG. 3. In addition, the UI control unit 204 has a function for presenting information such as voice output to the user.

[0017] The user input analysis unit 203 receives the information obtained by the UI control unit 204 and analyzes the content instructed by the user. Specifically, it analyzes the content controlled by the wireless LAN control unit 201 and extracts information for display by the display screen generation unit 202. The extracted content is sent to the display screen generation unit 202.

[0018] The display screen generation unit 202 generates the content to be displayed on the UI from the information received from the user input generation unit 203 and the information in the storage unit 205, and sends it to the UI control unit 204. The screen generated by the display screen generation unit 202 can change according to user input and the passage of time.

[0019] The memory unit 205 is a storage device that may include a program to control the ROM and RAM, etc., which store the program and data on which the AP operates.

[0020] The external wireless detection unit 206 includes a program that detects signals transmitted by other wireless systems on a specified frequency. These other wireless systems include, but are not limited to, fixed wireless and satellite communications; broadcast communications may also be included.

[0021] Figure 3 shows an example of the hardware configuration of the communication device 102. The communication device 102 includes a storage unit 301, a control unit 302, a function unit 303, an input unit 304, an output unit 305, a communication unit 306, and a wireless antenna 307.

[0022] The memory unit 301 is composed of ROM, RAM, or either one of them, and stores various information such as programs for performing various operations described later, and communication parameters for wireless communication. In addition to memory such as ROM and RAM, storage media such as flexible disks, hard disks, optical disks, magneto-optical disks, CD-ROMs, CD-Rs, magnetic tapes, non-volatile memory cards, and DVDs may be used as the memory unit 301.

[0023] The control unit 302 is composed of, for example, a processor such as a CPU or MPU, an ASIC (Application-Specific Integrated Circuit), a DSP (Digital Signal Processor), or an FPGA (Field-Programmable Gate Array). Here, CPU is an abbreviation for Central Processing Unit, and MPU is an abbreviation for Micro Processing Unit. The control unit 302 controls the entire AP by executing a program stored in the memory unit 301. Alternatively, the control unit 302 may control the entire AP in cooperation with the OS (Operating System) and the program stored in the memory unit 301.

[0024] Furthermore, the control unit 302 controls the functional unit 303 to perform predetermined processes such as imaging, printing, and projection. The functional unit 303 is hardware that enables the AP to perform predetermined processes. For example, if the AP is a camera, the functional unit 303 is the imaging unit and performs imaging processing. Also, for example, if the AP is a printer, the functional unit 303 is the printing unit and performs printing processing. Also, for example, if the AP is a projector, the functional unit 303 is the projection unit and performs projection processing. The data processed by the functional unit 303 may be data stored in the storage unit 301, or data communicated with other APs via the communication unit 306, which will be described later.

[0025] The input unit 304 receives various operations from the user. The output unit 305 provides various outputs to the user. Here, the output from the output unit 305 includes at least one of the following: display on a screen, audio output from a speaker, vibration output, etc. It is also possible to implement both the input unit 304 and the output unit 305 in a single module, such as a touch panel. Furthermore, the output unit 305 does not need to be mounted on the AP102 main unit; it may be mounted on a separate device, including the program that controls the output unit, and displayed to the user. In this case, the output medium could be a PC or smartphone connected to the AP102 via wired or wireless connection, but is not limited to these.

[0026] The communication unit 306 controls wireless communication compliant with the IEEE 802.11 standard series and also controls IP communication. The communication unit 306 also controls the wireless antenna 307 to transmit and receive wireless signals for wireless communication. The AP communicates content such as image data, document data, and video data with other communication devices via the communication unit 306.

[0027] The wireless antenna 307 is an antenna capable of receiving signals in any of the following bands: sub-GHz, 2.4GHz, 3.6GHz, 4.9GHz and 5GHz, 6GHz, and 60GHz. To achieve MIMO (Multi-Input and Multi-Output) transmission and reception, the wireless antenna 307 may consist of more than one physical antenna. [Examples]

[0028] This embodiment shows an example of a graphical user interface, but it is not necessary to have a graphical user interface. The user can input settings for starting the communication device 102, such as the network name (SSID), wireless operating mode (wireless LAN standard to use, frequency band to use), security method, and encryption key. Here, the security method includes not only authentication methods such as WPA / WPA2, but also encryption methods.

[0029] Furthermore, in this embodiment, when the communication device 102 starts up as an AP, it switches between encrypted and unencrypted communications based on a combination of a frequency band and a security method specified by the user.

[0030] Figure 4 shows an example of the display when the communication device 102 is set to the 2.4GHz band by the user. In the 2.4GHz band, there are two methods that do not require password input: the conventional Open method, which does not perform authentication / encryption, and Wi-Fi Enhanced Open. Wi-Fi Enhanced Open is a security method that allows users to perform encrypted communication based on OWE (Oppotunistic Wireless Encryption) without entering a password. However, in this embodiment, when the wireless operation mode is set to the 2.4GHz band and no password is selected, the system is configured to perform communication without encryption to improve compatibility. Figure 5 shows an example of the display when the communication device 102 is set to the 6GHz band by the user. Since authentication using WPA3 is mandatory for communication in the 6GHz band, WPA3 is displayed as the security method in Figure 5. Furthermore, it is stipulated that authentication using WPA / WPA2 and Open is not performed in the 6GHz band. Therefore, when the wireless operation mode is set to the 6GHz band and "no password" is selected, "no password" as shown in Figure 5 means that encrypted communication will be performed based on OWE.

[0031] In this embodiment, the 2.4GHz and 6GHz bands were used as examples for explanation, but the system is not limited to these. For the 5GHz band as well, if the user selects "no password," the system will be configured to use unencrypted communication.

[0032] Figure 6 is a flowchart illustrating the processing flow when the control unit 302 executes a program stored in the memory unit 301 of the communication device 102. This flowchart shows the processing flow when the communication device 102 performs its AP function with predetermined security settings in a specified frequency band. This flowchart also starts when the power of the communication device 102 is turned ON.

[0033] The communication device 102 displays the AP's wireless settings to the user (S601). In S601, the wireless settings are displayed to the user. When the wireless settings are displayed, the user inputs the frequency band on which the communication device 102 will operate, as well as security-related methods such as authentication and encryption methods. Next, the communication device 102 determines that the user has finished inputting the settings (S602). The user has finished inputting the settings, and this is determined by pressing the settings button. In S602, once it is determined that the user has finished inputting the settings, the communication device 102 acquires the wireless settings, including the frequency band and security-related methods determined by the user (S603). From the wireless settings acquired in S603, the communication device 102 determines whether the entered security method is a security method that does not require password input (S604). In S604, if the communication device 102 determines that the selected security method is a security method that requires password input, it starts up as an access point with the security method, frequency, and other settings determined by the user (S605).

[0034] In S604, if it is determined that the security method does not require password input, the communication device 102 determines whether the selected frequency band is the 6GHz band (S606). In S606, if it is determined that it is the 6GHz band, the communication device 102 sets the security method to Wi-Fi Enhanced Open, which enables encryption based on OWE, and starts up as an access point in the 6GHz band (S607). In S606, if it is determined that it is not the 6GHz band, the communication device 102 sets the security method to Open, which is unencrypted communication, and starts up as an access point in the frequency band specified by the user (S608).

[0035] As described above, according to this embodiment, if the user specifies a security method that does not require password input, the AP can start up by switching between encrypted and unencrypted communication depending on the frequency band.

[0036] Note that while Figures 4 and 5 show the frequency band being selected in the wireless operation mode, the frequency band and security method may be linked in other ways. Furthermore, any method that allows for the distinction of the frequency band being used, and the distinction of which of the multiple security methods does not require a password (passphrase), is acceptable.

[0037] Figure 7 shows an example of the UI shown to the user. Instead of selecting the frequency band in the wireless operation mode as shown in Figures 4 and 5, the settings screen can be separated for each frequency band to identify the frequency band and security method. [Examples]

[0038] In Example 1, when a general user selected "no password" as the security method shown in the UI, the system was configured to switch between encrypted and unencrypted communication depending on the frequency band selected by the user. However, users familiar with security settings may want to use encrypted communication even in the 2.4GHz or 5GHz band, while being aware of compatibility issues with conventional authentication methods. This embodiment describes advanced settings for users familiar with security settings.

[0039] Figure 8 shows an example of the settings screen of the communication device 102, which has an extended security mode, as displayed to the user. When a security method that does not require password input is selected, the user can choose whether or not to enable the extended security mode. When the extended security mode is enabled, the device is configured to perform encrypted communication based on OWE regardless of the frequency band setting.

[0040] Figure 9 is a flowchart illustrating the processing flow when the control unit 302 executes a program stored in the memory unit 301 of the communication device 102, which has an extended security mode. This flowchart shows the processing flow when the communication device 102 performs its AP function with predetermined security settings in a specified frequency band. This flowchart also starts when the power of the communication device 102 is turned ON.

[0041] Steps S901 to S903 are the same as steps S601 to S603 in Figure 6, so their explanation is omitted. In step S904, the communication device 102 determines whether the selected security method is a security method that does not require password input. If S904 determines that the security method is a security method that does not require password input, it determines whether the extended security mode is enabled (S909). The extended security mode is a mode that allows encrypted communication based on OWE without requiring password input, even in the 2.4GHz and 5GHz bands. If the extended security mode is determined to be enabled, the communication device 102 sets up encrypted communication and starts up as an access point in the frequency band determined by the user (S907). In step S909, if the extended security mode is determined to be disabled, it determines whether the selected frequency band is the 6GHz band (S906). The processing from S906 onward is the same as in Example 1. Also, the processing when S904 determines that the security method is not a security method that does not require password input is the same as in Example 1, so it is omitted.

[0042] As described above, according to this embodiment, by providing the communication device 102 with an extended security mode, it becomes possible to enable security settings with a high degree of flexibility for users who are well-versed in security.

[0043] Alternatively, a recording medium containing program code for software that implements the above-described functions may be supplied to a system or device, and the computer (CPU, MPU) of the system or device may read and execute the program code stored on the recording medium. In this case, the program code read from the storage medium itself will implement the functions of the above-described embodiment, and the storage medium containing that program code will constitute the above-described device.

[0044] For storing program code, storage media such as flexible disks, hard disks, optical disks, magneto-optical disks, CD-ROMs, CD-Rs, magnetic tapes, non-volatile memory cards, ROMs, and DVDs can be used.

[0045] Furthermore, the above-mentioned functions may be realized not only by the computer executing the program code it reads, but also by the operating system (OS) running on the computer performing some or all of the actual processing based on the instructions of that program code. OS stands for Operating System.

[0046] Furthermore, the program code read from the storage medium is written to the memory of a function expansion board inserted into the computer or a function expansion unit connected to the computer. Then, based on the instructions of that program code, the CPU of the function expansion board or function expansion unit may perform some or all of the actual processing to realize the above-mentioned functions.

[0047] The present invention can also be realized by supplying a program that implements one or more of the functions of the above-described embodiments to a system or device via a network or storage medium, and by having one or more processors in the computer of that system or device read and execute the program. It can also be realized by a circuit (e.g., an ASIC) that implements one or more functions. [Explanation of Symbols]

[0048] 301 Storage section 302 Control Unit 303 Functional Section 304 Input section 305 Output section 306 Communications Department 307 Antenna

Claims

1. a first determining means for determining a frequency at which the communication device operates; a second determination means for determining a security scheme in which the communication device operates; a control means for switching between a first security scheme and a second security scheme based on the frequency band determined by the first determination means, when the second determination means determines that the device should operate in a security scheme that does not require password input; A communication device comprising:

2. 2. The communication device according to claim 1, wherein, when the first determination means determines that the communication device will operate in the first frequency band, the communication device is set to the first security method and performs the function of the communication device.

3. 3. The communication device according to claim 1, wherein when the first determination means determines that the device will operate in the second frequency band, the control means sets encryption using the second security method and executes the function of the communication device.

4. the communication device further comprises a determination means for determining whether a mode in which encrypted communication is possible regardless of which frequency band is selected is valid or not; 4. The communication device according to claim 1, wherein when the determination means determines that the mode is valid, the communication device is set to the second security method and functions as the communication device, even if the first determination means determines that the mode will be valid.

5. 5. The communication device according to claim 1, wherein when the second determination means determines that the device will operate in a security method that requires input of a password, the device performs communication based on the security method determined by the second determination means.

6. 6. The communication device according to claim 1, wherein the communication device displays all security methods that do not require the input of a password.

7. 7. The communication device according to claim 2, wherein the first frequency band is a 2.4 GHz band or a 5 GHz band, and the second frequency band is a 6 GHz band.

8. 8. The communication device according to claim 1, wherein the second security method performs encryption based on the OWE (Oppotunistic Wireless Encryption) standard.

9. 9. The communication device according to claim 1, wherein the second security method is Wi-Fi Enhanced Open.

10. 10. The communication device according to claim 1, wherein the function as a communication device is a function as an access point.

11. a first determination step of determining a frequency band in which the communication device will operate; a second determination step of determining a security scheme in which the communication device operates; a control step of switching between the first security method and the second security method based on the frequency determined in the first determination step, when it is determined in the second determination step that the device will operate in a security method that does not require input of a password; A communication method for a communication device, comprising:

12. A program for causing a computer to operate as the communication device according to any one of claims 1 to 10.

Images