Communication device, control method, program, and storage medium

Abstract

To provide a technology for efficient connection.SOLUTION: A communication device wirelessly connects to an information processing apparatus not through an external access point in a set-up mode that receives connection information which is used to wirelessly connect to the external access point, receives the connection information from the information processing apparatus, tries to connect to the external access point using the received connection information, on the basis of information indicating a security method included in the connection information when the set-up mode is a set-up mode that receives the connection information in a first setting method, tries to connect to the external access point using the security method corresponding to information indicating the security method, and when the set-up mode is a second setting method being different from the first setting method and is a set-up mode that receives the connection information, tries to wirelessly connect to the external access point using a security method which is previously determined on the basis of the second setting method.SELECTED DRAWING: Figure 9

Description

[Technical Field]

[0001] The present invention relates to a communication device and a control method. , pu Program , and storage medium Regarding. [Background technology]

[0002] One method for connecting a terminal device such as a smartphone to a network-compatible communication device such as a printer using a communication method such as wireless LAN communication is to connect via an external device such as an access point. This connection method is called an infrastructure connection. In addition, a method for connecting a terminal device wirelessly to a communication device without going through an external device is called a peer-to-peer (P2P) connection.

[0003] Here, Patent Document 1 discloses a technique in which a wireless terminal device that attempts to connect to an access point attempts connection using security methods in descending order of security strength. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] International Publication No. 2009 / 011055 Summary of the Invention [Problem to be solved by the invention]

[0005] Patent Document 1 does not take into consideration the wireless LAN setup method. Therefore, if connection attempts are made in order of security method strength, as in Patent Document 1, attempts may fail due to a mismatch with the security method that the external device is waiting for connection, and it may take a long time to establish a connection.

[0006] The present invention has been made in view of the above-mentioned problems, and has an object to provide a technique for efficiently attempting a connection. [Means for solving the problem]

[0007] In order to solve the above-mentioned problems, a communication device according to the present invention comprises: a receiving means for wirelessly connecting to an information processing device without going through the external access point in a setup mode for receiving connection information used for wirelessly connecting to an external access point, and receiving the connection information from the information processing device; an acquisition means for acquiring information indicating candidate security methods stored in association with the type of setting method in the setup mode; before When the setup mode is a setup mode in which the receiving means receives the connection information using a first setting method, the receiving means performs a setup using a security method corresponding to the information indicating the security method based on information indicating the security method included in the connection information. and using the connection information received by the receiving means Attempting to connect to the external access point; When the setup mode is a setup mode in which the receiving means receives the connection information in a second setting method different from the first setting method, Based on the information acquired by the acquisition means, In the second setting method Correspond Using a predetermined security method and using the connection information received by the receiving means Attempt a wireless connection to the external access point A connection means; have It is characterized by: [Effects of the Invention]

[0008] According to the present invention, it is possible to provide a technique for efficiently attempting a connection. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 is a diagram showing a configuration of a communication system according to a first embodiment; [Figure 2] FIG. 1 is a diagram illustrating an example of the appearance of a terminal device. [Figure 3] A diagram showing an example of the appearance of an MFP [Figure 4] A diagram showing an example of a screen displayed on the operation display unit of an MFP. [Figure 5] Block diagram showing the configuration of a terminal device [Figure 6] Block diagram showing the configuration of an MFP [Figure 7] A diagram showing the wireless connection sequence in software AP mode [Figure 8] A diagram showing the wireless connection sequence in infrastructure mode [Figure 9] 1 is a flowchart showing processing executed by the MFP of the first embodiment; [Figure 10] Figure showing an example of table settings for the security method management table of the MFP [Figure 11] FIG. 1 shows a processing sequence in wireless setup mode. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. Note that the following embodiments do not limit the scope of the present invention, and not all of the combinations of features described in the embodiments are necessarily essential to the solution of the present invention.

[0011] First Embodiment A terminal device and a communication device according to the present embodiment will be described. While a smartphone is used as an example of the terminal device in this embodiment, the present embodiment is not limited thereto and various devices, such as a mobile terminal, a notebook PC, a tablet terminal, a PDA (Personal Digital Assistant), and a digital camera, can be used. Furthermore, a printer is used as an example of the communication device in this embodiment, but the present embodiment is not limited thereto and various devices, such as a mobile terminal, a notebook PC, a tablet terminal, a PDA (Personal Digital Assistant), and a digital camera, can be used as long as they are capable of wireless communication with the terminal device. For example, the present embodiment is applicable to printers such as inkjet printers, full-color laser beam printers, and monochrome printers. Furthermore, the present embodiment is applicable to not only printers but also copiers, facsimile machines, mobile terminals, smartphones, notebook PCs, tablet terminals, PDAs, digital cameras, music playback devices, televisions, and the like. Furthermore, the present embodiment is also applicable to multifunction peripherals having multiple functions, such as a copying function, a fax function, and a printing function.

[0012] (System Configuration) First, the configuration of a communication system according to this embodiment will be described with reference to FIGS.

[0013] 1 is a diagram showing an example of the configuration of a communication system according to this embodiment. This system includes an access point (AP) 400, a terminal device 200, and an MFP 300.

[0014] The terminal device 200 is an example of a terminal device (information processing device) according to the present embodiment. The multi-function peripheral (MFP) 300 is an example of a communication device according to the present embodiment. The MFP 300 and the terminal device 200 can be connected in infrastructure mode (hereinafter also referred to as infrastructure connection). That is, the MFP 300 and the terminal device 200 can communicate with each other via a wireless local area network (WLAN), which is a network established by an AP 400, which is an external access point.

[0015] Furthermore, the MFP 300 and the terminal device 200 can each operate as an access point. Therefore, for example, by having one device operate as an access point and the other device connect to the access point, the terminal device 200 and the MFP 300 can be directly connected via a wireless LAN without going through the AP 400. Furthermore, because both the terminal device 200 and the MFP 300 have WLAN functionality, peer-to-peer (P2P) communication is possible by performing authentication processing. When operating as an access point, each device forms a wireless LAN with a communication partner device and periodically transmits a beacon signal. Furthermore, a device operating as an access point functions as a master station that establishes a network, determines the channel to be used for wireless communication, and performs authentication processing for connection information (e.g., a password) transmitted from the communication partner device.

[0016] Next, the operation of an access point (master station) and a client (slave station) in a wireless communication system will be described. A device operating as an access point (hereinafter referred to as an AP side device) transmits a beacon signal. Then, a device operating as a client (hereinafter sometimes referred to as a CL side device) receives the beacon signal and transmits a device discovery command (Probe Request frame) to the AP side device to search for and discover a device (communication partner device) with which to communicate. The searching CL side device can include various attributes (parameters), such as the SSID of the access point, in the device discovery command. In particular, in the case of a P2P wireless connection, the device discovery command includes information (P2P element) related to the P2P wireless connection. Then, if the SSID included in the received device discovery command matches its own SSID, the AP side device transmits a response command (Probe Response frame) to the CL side device. This allows each device to mutually discover the other device (discovery). After that, a processing sequence such as checking device information indicating the type of device and IP address is executed between each device, and then, for example, if the connected device is a printer, various applications such as printing can be executed.

[0017] ((Device hardware configuration)) 2 is a diagram showing the appearance of the terminal device 200. In this embodiment, a smartphone is used as an example of a terminal device that is an information processing device. A smartphone is a multi-function mobile phone that, in addition to the calling function of a mobile phone, is equipped with various applications such as a camera, a web browser, and email.

[0018] The wireless communication unit 201 is a unit for performing communication over a wireless local area network (WLAN). The wireless communication unit 201 is capable of data (packet) communication in a WLAN system conforming to, for example, the IEEE 802.11 standard (IEEE 802.11a, IEEE 802.11ac, IEEE 802.11n, IEEE 802.11ax, etc.). In this example, the wireless communication unit 201 is capable of communication over channels in both the 2.4 GHz band and the 5 GHz band. It may also be capable of communication over channels in the 6 GHz band. Furthermore, wireless communication using the wireless communication unit 201 can be communication based on Wi-Fi Direct (WFD) (registered trademark), communication in software AP mode, communication in wireless infrastructure mode, etc.

[0019] The display unit 202 is, for example, a display having an LCD type display mechanism.

[0020] The operation unit 203 is an operation mechanism that accepts operations by the user, and is, for example, a touch panel type operation mechanism. In this embodiment, a description will be given assuming that the touch panel display includes the display unit 202 and the operation unit 203. The display unit 202 displays button icons, a software keyboard, etc., and the operation unit 203 detects an operation event when the user touches the displayed button icons or software keys.

[0021] The power key 204 is a hard key used to turn the power on and off.

[0022] Fig. 3 is a diagram showing the external appearance of MFP 300. In Fig. 3, document table 301 is a transparent glass table on which a document to be read by a scanner (reading unit) is placed. Document lid 302 is a lid that holds the document when reading with the scanner and prevents light from leaking out from a light source that irradiates the document when reading.

[0023] The printing paper insertion slot 303 is an insertion slot that can accommodate paper of various sizes. The paper inserted into the printing paper insertion slot 303 is transported one sheet at a time to the printing unit, where printing is performed, and the paper is then ejected from the printing paper ejection slot 304.

[0024] The operation display unit 305 is composed of keys such as character input keys, cursor keys, a confirm key, and a cancel key, as well as LEDs (light-emitting diodes) and LCDs (liquid crystal displays), and allows the user to activate various functions and perform various settings as an MFP. It may also be composed of a touch panel display. The wireless communication unit 306 is a communication unit equipped with a wireless communication circuit for communication via WLAN. The wireless communication unit 306 of this embodiment will be described as having the same functions as the wireless communication unit 201. That is, the wireless communication unit 306 is capable of data (packet) communication in a WLAN system compliant with the IEEE 802.11 standard (IEEE 802.11a, IEEE 802.11ac, IEEE 802.11n, IEEE 802.11ax, etc.). The wireless communication unit 306 is capable of communication over channels in both the 2.4 GHz band and the 5 GHz band. It may also be capable of communication over channels in the 6 GHz band. Furthermore, wireless communication using the wireless communication unit 201 can be performed in various ways, including direct communication based on Wi-Fi Direct (WFD) (registered trademark), direct communication in software AP mode, and communication in infrastructure mode. In the case of direct communication, it is preferable that the MFP 300 operates as a parent station and the terminal device 200 operates as a child station.

[0025] Figure 4 is a diagram that schematically shows an example of a screen display on the operation display unit 305 of the MFP. Figure 4(a) is a home screen that shows a state (idle state) in which the MFP is powered on and is not performing operations such as printing or scanning. Various settings and function execution are possible from menu displays for copying, scanning, and cloud functions that use Internet communication by key operation or touch panel operation. From the home screen of Figure 4(a), it is possible to switch to a screen that displays icons for executing functions different from those shown in Figure 4(a) by key operation or touch panel operation.

[0026] Figure 4(b) is an example of a screen that displays icons for executing functions different from those in Figure 4(a), and allows users to execute print and photo functions and change LAN settings. Figure 4(c) is the screen that appears when LAN settings is selected on the screen in Figure 4(b). From this screen, users can change various LAN settings, such as enabling / disabling wireless infrastructure mode and P2P modes such as WFD and software AP mode. They can also set the wireless LAN frequency band and channel. Wireless infrastructure mode is sometimes called the first communication mode, and P2P mode is sometimes called the second communication mode.

[0027] ((Configuration of terminal device 200)) 5 is a block diagram showing the configuration of the terminal device 200. The terminal device 200 has a main board 501 that controls the entire terminal device, and a wireless communication unit 201 that performs WLAN communication. In the main board 501, a CPU (Central Processing Unit) 502 is a system control unit that controls the entire terminal device 200. The processing of the terminal device 200 described below is executed under the control of the CPU 502. A ROM 503 stores a control program executed by the CPU 502, an embedded operating system (OS) program, and the like. Each control program stored in the ROM 503 performs software control such as process scheduling and task switching under the management of the embedded OS stored in the ROM 503.

[0028] RAM 504 is a storage unit that is composed of SRAM (Static RAM) or the like, and stores data such as program control variables, as well as data such as setting values ​​registered by the user and management data for the terminal device 200, and is provided with various work buffer areas.

[0029] The image memory 505 is composed of memory such as DRAM (Dynamic RAM), and is a storage unit that temporarily stores image data received via the wireless communication unit 201 and image data read from the data storage unit 513 for processing by the CPU 502.

[0030] The non-volatile memory 512 is configured with a memory such as a flash memory, and can continue to store data even when the power is turned off. The non-volatile memory 512 stores various data used by the control program and the embedded OS, as well as data saved by the user.

[0031] However, the memory configuration is not limited to these. For example, the functions of image memory 505 and RAM 504 may be realized by the same memory, or data may be backed up in data storage unit 513. In addition, although DRAM is used for image memory 505 in this embodiment, other storage media such as a hard disk or nonvolatile memory may also be used, so this is not a limitation.

[0032] The data conversion unit 506 analyzes data in various formats and performs data conversion such as color conversion and image conversion. The telephone unit 507 controls telephone lines and realizes telephone communication by processing audio data input and output via a speaker unit 514. The operation unit 508 controls the operation unit 203 shown in FIG. 2 to accept user operations. The GPS (Global Positioning System) 509 is a sensor unit that acquires location information such as the latitude and longitude of the terminal device 200.

[0033] The display control unit 510 controls the display unit 202 shown in FIG. 2 and electronically controls the display content, and can perform various input operations and display the operating and status conditions of the MFP 300. The camera unit 511 has the function of electronically recording and encoding images input through a lens. Images captured by the camera unit 511 are stored in the data storage unit 513. The speaker unit 514 has the function of inputting or outputting audio for telephone functions and other functions such as alarm notification. The power supply unit 515 manages the charging state of the rechargeable secondary battery, acquires the remaining power level, and controls the power supply to the device. Power supply states include a dead battery state in which there is no remaining battery power, a power-off state in which the power key 204 is not pressed, a running state in which the device is normally running, and a power-saving state in which the device is running but is in power-saving mode.

[0034] The wireless communication unit 201 is capable of data (packet) communication in a WLAN system conforming to, for example, the IEEE 802.11 standard (IEEE 802.11a, IEEE 802.11ac, IEEE 802.11n, IEEE 802.11ax, etc.). That is, the wireless communication unit 201 is capable of communication via, for example, Wi-Fi (registered trademark). The wireless communication unit 201 performs functions such as beacon detection and authentication processes for establishing a WLAN connection, and sending a print job to a communication device with which a WLAN connection has been established. The wireless communication unit 201 enables the terminal device 200 to perform data communication with other devices such as the MFP 300. The wireless communication unit 201 converts data into packets and transmits the packets to other devices. Conversely, the wireless communication unit 201 restores packets from other external devices to the original data and transmits them to the CPU 502. The wireless communication unit 201 is connected to the main board 501 via a bus cable 516.

[0035] The various components (503 to 515) within the main board 501 are connected via a system bus 518 so as to be able to communicate with each other.

[0036] ((MFP300 configuration)) 6 is a block diagram showing the configuration of the MFP 300. The MFP 300 includes a main board 601 that performs main control of the device itself, and a wireless communication unit 306 that performs WLAN communication.

[0037] The CPU (Central Processing Unit) 602 of the main board 601 is a system control unit that controls the entire MFP 300. The processes of the MFP 300 described below are executed under the control of the CPU 602. The ROM 603 stores control programs, such as a control program and an embedded operating system (OS) program executed by the CPU 602. In this embodiment, the control programs stored in the ROM 603 perform software control such as scheduling various processes and task switching under the management of the embedded OS stored in the ROM 603. The RAM 604 is composed of a static RAM (SRAM) or the like, and stores data such as program control variables, and also stores data such as setting values ​​registered by the user and management data for the MFP 300, and is provided with various work buffer areas.

[0038] The nonvolatile memory 605 is a storage unit that continues to store data even when the power is turned off, and is composed of a memory such as a flash memory. The image memory 606 is a storage unit that stores image data received via the wireless communication unit 306 and image data processed by the encoding / decoding processing unit 611. As with the memory configuration of the terminal device 200, this memory configuration is not limited to this. The data conversion unit 608 analyzes data in various formats and converts image data into print data. The reading control unit 607 controls the reading unit 609 (e.g., a CIS image sensor (contact image sensor)) to optically read an image on a document. The image signal is then converted into electrical image data and output. At this time, various image processing such as binarization and halftoning may be performed before output.

[0039] The operation display unit 305 has been described with reference to FIG. 4, so details thereof will be omitted. The encoding / decoding processing unit 611 performs encoding / decoding processing and enlargement / reduction processing of image data (JPEG, PNG, etc.) handled by the MFP 300. The paper feed unit 613 holds paper for printing. Paper can be fed from the paper feed unit 613 under the control of the print control unit 614. In particular, the paper feed unit 613 can be provided with multiple paper feed units in order to hold multiple types of paper in a single device. The print control unit 614 can then control which paper feed unit to feed paper from.

[0040] The print control unit 614 performs various image processing such as smoothing, print density correction, and color correction on the image data to be printed, and then outputs the data to the print unit 612 .

[0041] The printing unit 612 can be, for example, an inkjet printing device that prints an image by ejecting ink supplied from an ink tank from a print head, or other specific printing device. The printing control unit 614 also periodically reads information from the printing unit 612 and updates the information in RAM 604. Specifically, it updates status information such as the remaining amount of ink in the ink tank and the state of the print head.

[0042] Like the terminal device 200, the MFP 300 is also equipped with a wireless communication unit 306, and its functions are similar to those of the wireless communication unit 201 of the terminal device 200. That is, data (packet) communication is possible in a WLAN system compliant with the IEEE 802.11 standard (IEEE 802.11a, IEEE 802.11ac, IEEE 802.11n, IEEE 802.11ax, etc.). That is, the wireless communication unit 201 is assumed to be capable of performing communication via Wi-Fi (registered trademark), for example. The wireless communication unit 306 performs functions such as beacon detection and authentication processes for establishing a WLAN connection, and receiving print jobs transmitted from an information processing device with which a WLAN connection has been established. The wireless communication unit 306 enables the MFP 300 to perform data communication with other devices, such as the terminal device 200. The wireless communication unit 306 converts data into packets and transmits the packets to other devices, or conversely, restores packets from other external devices to the original data and transmits the data to the CPU 602. The wireless communication unit 306 is connected to the main board 601 via a bus cable 615. The terminal device 200 and the MFP 300 are capable of WFD-based communication, and are capable of communication in software access point (software AP) mode.

[0043] The various components (603 to 614) within the main board 601 are connected via a system bus 618 so as to be able to communicate with each other.

[0044] (P2P (Peer to Peer) mode) Next, a description will be given of wireless communication in P2P mode in which the terminal device 200 and the MFP 300 are directly connected wirelessly without going through an external device such as the AP 400. In this embodiment, in order to establish a P2P connection in communication over a WLAN, the MFP 300 operates in P2P mode (software AP mode), and the terminal device 200 searches for the MFP 300 in P2P mode.

[0045] In this embodiment, a searching device (terminal device 200 in this embodiment) on the searching side uses a device discovery command (e.g., a Probe Request frame) to search for and discover a communication partner device (MFP 300 in this embodiment) operating in software AP mode. The searching device can attach various attributes (parameters) to the device discovery command. In particular, when searching for a P2P connection, the device discovery command includes information (P2P elements) related to the P2P wireless connection. When attributes are specified in the discovery command, a device responding to the device discovery command is generally recommended to respond to the maximum extent possible with attributes that it can interpret within the scope specified by the mode specifications of the searching device and the underlying specifications (Wi-Fi in the case of WFD). Furthermore, even if a device responding to the device discovery command cannot interpret the information (including the above attributes) attached to the device discovery command, it can also respond based only on the information that it can interpret.

[0046] A wireless connection sequence between terminal device 200 and MFP 300 in P2P mode will be described below with reference to FIG. 7. In this sequence diagram, the processes executed by each device are realized by the CPU of each device reading various programs stored in memory such as ROM into RAM and executing them. This sequence is assumed to start with terminal device 200 operating as a client, MFP 300 operating as a software AP, and MFP 300 transmitting a beacon signal. MFP 300 starts operating as a software AP when a predetermined operation for operating as a software AP is received from the user. The predetermined operation could be, for example, powering up the device upon delivery or selecting a predetermined icon on a LAN setting screen to start operating as a software AP.

[0047] First, in S701, the terminal device 200 transmits a search signal including a device search command by using channels available to the terminal device 200 in order, and searches for an MFP 300 operating as a communication partner device.

[0048] Next, in S702, when the MFP 300 receives a search signal transmitted from the terminal device 200, the MFP 300 transmits a response signal to the terminal device 200, including a device search response that is a response to the search signal. Note that the MFP 300 does not transmit a device search response to a device search command transmitted on a channel other than the channel on which it waits for the establishment of communication. For example, if the channel on which the MFP 300 waits for the establishment of communication is the fourth channel, the MFP 300 does not transmit a response signal to a search signal transmitted using the first channel. Therefore, if the terminal device 200 transmits a search signal on the first channel and there is no response from the MFP 300 for a certain period of time, the terminal device 200 transmits the search signal using the second channel. The terminal device 200 repeats the above-described attempts while incrementing the channel number to be used. Then, for example, when the MFP 300 receives a search signal transmitted by the terminal device 200 using the fourth channel, the MFP 300 transmits a response signal to the terminal device 200. As a result, the terminal device 200 discovers the MFP 300.

[0049] The channel used to transmit the device search response is determined as the channel to be used for communication between terminal device 200 and MFP 300 thereafter. That is, the channel to be used for communication between terminal device 200 and MFP 300 is determined by MFP 300 operating as a software AP. The channel on which terminal device 200 transmits the search signal is an example, and terminal device 200 may transmit the search signal on any channel.

[0050] Next, in S703, a process for establishing a wireless connection is executed between the terminal device 200 and the MFP 300. Specifically, processes such as transmission of a connection request, authentication of the connection request, and assignment of an IP address are executed. Note that commands and parameters transmitted and received in the process for establishing a wireless connection between the terminal device 200 and the MFP 300 may use known techniques such as those specified in the Wi-Fi standard, and therefore a description thereof will be omitted here.

[0051] (Infrastructure mode) The infrastructure mode is a mode in which devices that communicate (for example, the terminal device 200 and the MFP 300) communicate via an external device that controls the network (for example, the AP 400).

[0052] 8 is a wireless connection sequence diagram in infrastructure mode. Note that the processes executed by each device in this sequence diagram are realized by the CPU of each device reading various programs stored in memory such as ROM into RAM and executing them.

[0053] First, in S801, the terminal device 200 transmits a search signal using channels available to the terminal device 200 in order to search for a device that operates as an access point.

[0054] Next, in S802, when the AP 400 receives a search signal transmitted from the terminal device 200, it transmits a response signal to the terminal device 200 in response to the search signal. As described in the description of S702, the AP 400 waits for a search signal on a specific channel and transmits a response signal only in response to a search signal transmitted on that channel. By receiving the response signal transmitted from the AP 400, the terminal device 200 detects the AP 400 as an access point. The channel used to transmit the response signal is determined as the channel to be used for communication between the terminal device 200 and the AP 400 thereafter. In other words, the channel to be used for communication in infrastructure mode is determined by the AP 400.

[0055] Next, in S803, a process for establishing a wireless connection is executed between the terminal device 200 and the AP 400. The process for establishing a wireless connection may use a known technique as described in the P2P mode, and therefore a description thereof will be omitted here. In S804 to S806, the same processing as in S801 to S803 is executed between the MFP 300 and the AP 400. At this time, the AP 400 transmits a response signal to the MFP 300 using the channel used for communication with the terminal device 200. In other words, the AP 400 communicates with the MFP 300 and the terminal device 200 using the same channel.

[0056] As a result, both the MFP 300 and the terminal device 200 are connected to the AP 400, and communication between the MFP 300 and the terminal device 200 via the AP 400 becomes possible.

[0057] (Wireless LAN setup mode) A wireless LAN setup method is known in which a terminal device transmits connection information for connecting to an external device, such as an access point, to a communication device, and the communication device performs connection settings for connecting to the external device based on the connection information. The connection information transmitted by the terminal device mainly includes access point information (e.g., SSID) for identifying the external device, such as the access point to be connected to, and authentication information (password) for connecting to the access point. The authentication information contained in the connection information may also include information indicating a security method. Examples of security methods include WEP, WPA, WPA2 Personal, WPA2 Enterprise, WPA2 / WPA3 Transitional, WPA3 Personal, and no encryption. In other words, the information indicating the security method indicates a value indicating a security method, such as "WPA." The communication device establishes a connection with the external device using a corresponding security method based on either the information indicating the security method contained in the connection information transmitted by the terminal device or the information indicating the security method stored in the communication device.

[0058] In this embodiment, by accepting a predetermined operation on the operation / display unit 305, the MFP 300 transitions to a wireless LAN setup mode in which it can accept wireless LAN setting changes (receive connection information) from a terminal device via a P2P connection. Hereinafter, configuring a wireless LAN (communication settings) via a P2P connection is referred to as wireless LAN setup, and a mode in which it is possible to receive connection information and attempt to connect to an external device such as an access point is referred to as wireless LAN setup mode. The transition to the wireless LAN setup mode may be triggered, for example, by detecting an initial setting flag when the MFP 300 is powered on for the first time after purchase, or by receiving an instruction from the user to operate in the wireless LAN setup mode. The transition to the wireless LAN setup mode may also be triggered by receiving a predetermined command via a beacon or the like. The wireless LAN settings include, for example, the settings of the access point to which the MFP 300 is connected, the TCP / IP address settings, and security settings.

[0059] In this embodiment, the terminal device 200 will be described as changing the LAN settings of the MFP 300 by wireless LAN setup in order to establish an infrastructure connection with the MFP 300. Specifically, the terminal device 200 can establish an infrastructure connection with the MFP 300 via the access point by setting the AP 400 to which the terminal device 200 is connected as the connection destination of the MFP 300. Therefore, the MFP 300 corresponds to the above-mentioned communication device, and the AP 400 corresponds to the above-mentioned external device.

[0060] In the wireless LAN setup, the terminal device 200 transmits connection information used to connect to the AP 400 in P2P mode to the MFP 300. Subsequently, the MFP 300 connects to the AP 400 based on the received connection information, and the terminal device 200 also connects to the AP 400, thereby establishing an infrastructure connection.

[0061] Furthermore, in wireless LAN setup mode, the access point function within MFP 300 is activated by enabling the software AP function of MFP 300. This access point function within MFP 300 may, for example, enable connection without password authentication or encryption processing. Alternatively, for example, it may enable connection using fixed connection information (here, connection information for connecting to the access point within MFP 300) that is pre-installed in a configuration application installed on the terminal device that executes wireless LAN setup. MFP 300 is configured to be able to receive and interpret commands from the configuration application and change the LAN settings of MFP 300 in accordance with the received commands.

[0062] As a result, a terminal device that executes wireless LAN setup can connect to MFP 300 operating in wireless LAN setup mode without receiving connection information for connecting to MFP 300 from a user or acquiring it from MFP 300. Furthermore, while operating in wireless LAN setup mode, MFP 300 cannot perform functions such as printing or scanning, and is configured to be able to perform only wireless LAN setup.

[0063] In this embodiment, the MFP 300 operating in the wireless LAN setup mode can receive setting information from the terminal device 200 by at least two methods (setting method 1 and setting method 2).

[0064] First, setting method 1 will be described. Setting method 1 is a method of receiving connection information from terminal device 200 using a communication protocol different from the communication protocol used in setting method 2. Specifically, the communication protocol used in setting method 1 is, for example, Simple Network Management Protocol (SNMP). As described above, in this embodiment, in order to set MFP 300 to infrastructure connection mode, terminal device 200 transmits connection information for connecting to AP 400, for example, to MFP 300. That is, in order to transmit connection information to MFP 300, terminal device 200 needs to obtain a password for connecting to AP 400.

[0065] However, when the terminal device 200 transmits connection information to the MFP 300 using the setting application for the MFP 300 in setting method 1, even if the terminal device 200 has previously connected to the AP 400 or is currently connected to the AP 400, the terminal device 200 acquires the password by accepting the password from the user on a screen displayed by the setting application. This is because, when the setting application for the MFP 300 transmits setting information to the MFP 300 using setting method 1, the password for connecting to the AP 400 cannot be acquired from the OS of the terminal device 200. In other words, setting method 1 is a method in which, after an instruction for wireless LAN setup of the MFP 300 is accepted from the user on a screen displayed by the setting application, the password is accepted from the user on a screen displayed by the setting application. Furthermore, setting method 1 is a method for executing wireless LAN setup of the MFP 300 by transmitting connection information including the accepted password to the MFP 300 using the setting application. Note that the protocol used in setting method 1 is not limited to SNMP, and other protocols may be used.

[0066] Furthermore, information indicating a security method is included in the connection information sent to MFP 300 using setting method 1. Therefore, MFP 300 establishes a connection with AP 400 in accordance with the security method included in the connection information.

[0067] Next, setting method 2 will be described. A specific example of the communication protocol used in setting method 2 is HTTP (Hyper Text Transfer Protocol). In this embodiment, when terminal device 200 transmits connection information to MFP 300 using setting method 2, if terminal device 200 has previously connected to AP 400 or is currently connected to AP 400, it can acquire the password from the OS of terminal device 200 without accepting input of the password from the user. In other words, setting method 2 is a method in which, after a user instruction for wireless LAN setup is accepted on a screen displayed by a setting application for MFP 300, the password is acquired from the OS of terminal device 200 without accepting input of the password from the user. Furthermore, setting method 2 is a method for executing wireless LAN setup of MFP 300 by transmitting connection information including the password of AP 400 accepted in this manner to MFP 300.

[0068] Furthermore, transmission of connection information by setting method 2 is executed by a setup application for transmitting connection information by setting method 2. This setup application is a program pre-installed in terminal device 200 and is provided by the OS vendor of terminal device 200. Therefore, the setup application can obtain information from the OS that cannot be obtained by other applications such as a setting application for MFP 300 (for example, a password for connecting to an AP). Note that transmission of connection information by setting method 2 may also be performed by the setting application for MFP 300. In this case, for example, the setting application for MFP 300 may execute an API (Application Programming Interface) for setting method 2, so that the setting application for MFP 300 obtains the password from the OS.

[0069] In this embodiment, MFP 300 operating in wireless LAN setup mode operates in at least one of a state in which it can receive setting information using setting method 1 (wireless LAN setup mode for setting method 1) and a state in which it can receive setting information using setting method 2 (wireless LAN setup mode for setting method 2). It is also possible to set a condition for terminating the wireless LAN setup mode for setting method 1 (condition for setting method 1) and a condition for terminating the wireless LAN setup mode for setting method 2 (condition for setting method 2) separately. That is, MFP 300 may operate in a wireless LAN setup mode in which it can receive connection information using setting method 1 and connection information using setting method 2, or it may receive connection information using setting method 1. On the other hand, it may also operate in a wireless LAN setup mode in which it does not receive connection information using setting method 2.

[0070] In this embodiment, in the wireless LAN setup mode for setting method 2, MFP 300 transmits a predetermined beacon to the surrounding area. Then, by receiving the predetermined beacon, terminal device 200 recognizes that MFP 300 is in the wireless LAN setup mode for setting method 2.

[0071] Furthermore, the connection information sent to MFP 300 using setting method 1 includes information indicating a security method, but the connection information sent to MFP 300 using setting method 2 does not include information indicating a security method. This point will be described in detail below.

[0072] (Example of connection failure due to differences in security methods) As described above, MFP 300 executes a process for establishing a connection with AP 400 based on the connection information received from terminal device 200. As described above, the connection information includes, for example, access point information (such as an SSID) that identifies the access point to connect to, and authentication information (a security method and a password) for connecting to the access point. However, depending on the setting method, the connection information may not include information indicating the security method. For example, as described above, the connection information acquired by MFP 300 using setting method 2 does not include information indicating the security method. Furthermore, there may be setting methods other than setting method 2 in which the connection information does not include information indicating the security method.

[0073] Next, with reference to FIG. 11, a case will be described in which the MFP 300 attempts to establish a connection with the AP 400 based on the connection information received from the terminal device 200, but the attempt fails.

[0074] As described above, there are multiple types of wireless LAN setup methods. In the case of wireless LAN setup using setting method 1, the connection information transmitted from terminal device 200 to MFP 300 in P2P mode includes information indicating the security method to be used when connecting from MFP 300 to AP 400. Therefore, MFP 300 can connect to AP 400 based on the information indicating the security method acquired from terminal device 200. On the other hand, as in the case of wireless LAN setup using setting method 2, there are cases where the connection information transmitted from terminal device 200 to MFP 300 in P2P mode does not include information indicating the security method to be used when connecting from MFP 300 to AP 400.

[0075] Here, an example will be described in which an attempt to connect from the MFP 300 to the AP 400 fails when the connection information transmitted from the terminal device 200 to the MFP 300 via P2P connection does not include information indicating a security method. Note that the AP 400 is required to perform password authentication using a predetermined security method in order to establish a connection.

[0076] First, in a state where terminal device 200 and MFP 300 are P2P connected, in S1101, connection information is transmitted from terminal device 200 to MFP 300 in P2P mode. Here, it is assumed that wireless LAN setup is performed using setting method 2, and that the connection information transmitted from terminal device 200 to MFP 300 in S1101 does not include information indicating a security method.

[0077] Thereafter, in S1102, the terminal device 200 and the MFP 300 each release the P2P mode connection. Then, in S1103 to S1105, the terminal device 200 connects to the AP 400. The process of connecting the terminal device 200 to the AP 400 has been described with reference to FIG. 8, so details are omitted here. The terminal device 200 has connection information for the AP 400, so the connection is successful. Note that S1103 to S1105 should be executed only if the terminal device 200 was connected to the AP 400 before establishing a P2P connection with the MFP 300. Also, S1103 to S1105 may be executed after the MFP 300 connects to the AP 400. Also, if the only purpose is to connect the MFP 300 to the AP 400, S1103 to S1105 do not need to be executed.

[0078] Next, the MFP 300 attempts to connect to the AP 400 using the received connection information (S1106 to S1108).

[0079] As described above, in S1101, the connection information transmitted from the terminal device 200 to the MFP 300 does not include information indicating a security method. Therefore, there is a possibility that the MFP 300 will attempt to connect to the AP 400 using a security method different from the predetermined security method that allows connection to the AP 400. In S1108, the AP 400 attempts to connect using a security method different from the predetermined security method that the AP 400 is waiting for a connection request to use. In such a case, the AP 400 determines that authentication has failed and does not establish a connection. Therefore, after a predetermined time has elapsed, in S1109, the MFP 300 retries the connection. Alternatively, the MFP 300 displays information indicating the connection failure on the operation / display unit 305 and requests the user to retry the wireless LAN setup.

[0080] In this way, if the connection fails, it takes time for the terminal device 200 and the MFP 300 to be able to connect in infrastructure mode, which reduces usability, so it is desirable to establish a connection by reducing the number of connection attempts. However, if the connection information does not include information indicating the security method, the possibility of the connection failing increases.

[0081] In wireless LAN setup, a security method (defined in the specifications) to be used is defined for each setup method. Therefore, even if the MFP 300 stores the security method for each setup method, the security method may differ from the security method that can be used to connect to the AP 400. In such a case, if the MFP 300 repeatedly attempts to connect using one of the defined security methods, the connection will continue to fail.

[0082] When the connection information includes information indicating a security method, the MFP 300 according to this embodiment attempts to establish a connection using a security method corresponding to the information indicating the security method. On the other hand, when the connection information does not include information indicating a security method, the MFP 300 first attempts to establish a connection using a security method determined in advance based on the type of wireless LAN setup method. However, if the connection attempt using the security method based on the type of wireless LAN setup method fails, the MFP 300 attempts to establish a connection using another candidate security method. A specific processing method will be described below.

[0083] (Processing example) The process executed by MFP 300 for changing wireless LAN settings by wireless LAN setup in this embodiment will be described with reference to the flowchart shown in Fig. 9 and the wireless LAN setup method management table shown in Fig. 10. Note that the process shown in the flowchart in Fig. 9 is realized by, for example, CPU 602 reading a program stored in a memory such as ROM 603 into RAM 604 and executing it.

[0084] First, in S901, the CPU 602 receives a predetermined operation on the operation and display unit 305, thereby receiving an instruction to transition to a wireless LAN setup mode capable of receiving wireless LAN settings from the terminal device 200 via a P2P connection. Note that the instruction to transition to the wireless LAN setup mode is not limited to a predetermined operation on the operation and display unit 305. The transition may also be made when an initial setting flag is detected during setup of the MFP 300, or when a predetermined command is received via a beacon or the like.

[0085] Next, in S902, the CPU 602 transitions the MFP 300 to the wireless LAN setup mode. Specifically, the CPU 602 enables a predetermined access point function (inside the communication device) in the MFP 300 that is valid only in the wireless LAN setup mode, and operates it as a software AP.

[0086] The access point enabled in the wireless LAN setup mode may be connectable without password authentication or encryption, or may be connectable with a fixed password pre-installed in a LAN setting application installed in the terminal device that executes the wireless LAN setup.

[0087] Next, in S903, the CPU 602 accepts a connection request from the terminal device 200 and connects the MFP 300 and the terminal device 200 via the validated access point.

[0088] Specifically, the terminal device 200 uses a predetermined communication protocol to communicate with the MFP 300. Examples of protocols used for communication include Simple Network Management Protocol (SNMP) and Hyper Text Transfer Protocol (HTTP).

[0089] Next, in S904, the CPU 602 receives connection information used to connect to the AP 400 from the terminal device 200. The connection information includes, for example, access point information (such as an SSID) for identifying the AP 400, which is the access point to connect to, and authentication information (information specifying a security method and password) for connecting to the access point. As described above, depending on the type of wireless LAN setup, the information specifying a security method may not be included.

[0090] Next, in S905, CPU 602 determines the wireless LAN setup method used by terminal device 200 to connect to MFP 300, based on the communication path (SNMP, HTTP, etc.) used for the connection request in S903 and the connection information received from terminal device 200 in S904. For example, SNMP is used for setting method 1, and HTTP is used for setting method 2. Alternatively, CPU 602 may determine which setting method the wireless LAN setup mode is based on information included in the instruction received in S901. Furthermore, if there are three or more setting methods, and two or more of them use the HTTP communication protocol, the respective setting methods may be determined based on the URI of the HTTP CGI request.

[0091] Next, in S906, the CPU 602 determines whether the connection information includes information indicating a security method. If it is determined that the connection information includes information indicating a security method, the process proceeds to S907, and if it is determined that the security method is not included, the process proceeds to S908.

[0092] In S907, the CPU 602 uses the security method included in the connection information acquired in S904 to connect to the AP 400. For example, in the case of setting method 1, the connection information includes information indicating the security method, so the CPU 602 connects to the AP 400 in accordance with the information indicating this security method.

[0093] In S908, the CPU 602 selects the security method with index 1 of the corresponding setting method from the security method management table 1000 of FIG. 10. In the example of FIG. 10, multiple security methods used in connection attempts are recorded in association with the setting methods of the wireless LAN setup. For example, in setup method "A," a connection is attempted using WPA2 as the security method with index 1. For example, setting method 2 corresponds to setup method "A," and a connection is first attempted using WPA2. Note that, although the example of FIG. 10 illustrates three security methods being stored for each setting method, the number of security methods that can be stored is not limited to this.

[0094] Next, in S909, CPU 602 determines whether information indicating a security method was acquired in S908 from security method management table 1000. If it is determined that information indicating a security method was acquired, processing proceeds to S910, and if it is determined that information indicating a security method was not acquired, processing proceeds to S912. Next, in S910, CPU 602 connects to AP 400 using the security method corresponding to the information indicating the security method acquired in S908.

[0095] Next, in S911, the CPU 602 determines whether connection with the AP 400 has been established. If it is determined that connection has been established, the process proceeds to S912. If it is determined that connection has not been established, the process proceeds to S908, in which the index is incremented by one and a security method is selected. For example, in setup method "A," connection is attempted using WPA as the security method for index 2.

[0096] The CPU 602 repeats the processes of S908 to S911 until it is unable to acquire information indicating the security method in S909 or until a connection with the AP 400 is established in S911. In S912, the CPU 602 displays the result of the connection process on the display unit 202 or the operation display unit 305, saves the setting values ​​used for the connection in the non-volatile memory 512, and terminates the process. If it is unable to acquire information indicating the security method in S909 and the process proceeds to S912, it is preferable to display a notice indicating that the connection was not possible as a result of the connection process, and terminate the process without updating the setting values ​​used for the connection.

[0097] In this manner, in this embodiment, the wireless LAN setup configuration method is determined, and the security method selection method is switched based on the determined configuration method. In other words, if the connection information includes information indicating a security method, the security method corresponding to the information indicating the security method is used. On the other hand, if the connection information does not include information indicating a security method, a predetermined security method based on the wireless LAN setup configuration method is used. This method eliminates unnecessary test connections and enables efficient connection to an access point.

[0098] In this embodiment, in step S908, CPU 602 selects a corresponding security scheme from security scheme management table 1000 based on the wireless LAN setup method, and if the security scheme becomes unavailable, a message to that effect is displayed and the process ends. However, if a security scheme cannot be obtained from security scheme management table 1000, connection may be attempted using a different security scheme.

[0099] For example, if connection attempts using indexes 1 and 2 in setup method "A" fail, the CPU 602 may attempt connection in step S908 according to indexes 1 to 3 in the "Other" setup method. This allows the AP 400 to attempt connection using the security method that the AP 400 is waiting for a connection request to use, even if the security method that the AP 400 is waiting for a connection request to use differs from the security method specified by the setup method. Note that when attempting connection using the "Other" setup method, connection attempts using security methods that have already been tried using setup method "A" may be omitted. This reduces the number of times a connection is attempted using a security method that has previously failed.

[0100] If a connection is successful using a security scheme different from the security scheme determined based on the setup method in security scheme management table 1000, information indicating that security scheme can be added to security scheme management table 1000. For example, if setup method "A" is used and a connection is successful using WPA3 at index 1 of "Other" in Fig. 10, information about "WPA3," the security scheme with which the connection was successful, can be registered at index 3 of setup method "A," and security scheme management table 1000 can be updated.

[0101] Furthermore, in S912, security scheme management table 1000 may be updated depending on the security scheme that resulted in a successful connection. For example, if a connection is successful using a security scheme with an index of 2, the index of that security scheme may be changed to 1. This allows priority to be given to security schemes that result in more successful connections.

[0102] <Other embodiments> The present invention can also be realized by supplying a program that realizes one or more functions of the above-described embodiments to a system or device via a network or a storage medium, and having one or more processors in the computer of the system or device read and execute the program. It can also be realized by a circuit (e.g., ASIC) that realizes one or more functions.

[0103] The invention is not limited to the above-described embodiments, and various changes and modifications can be made without departing from the spirit and scope of the invention. Accordingly, the following claims are appended to apprise the public of the scope of the invention. [Explanation of symbols]

[0104] 1: wireless communication system, 200: terminal device, 300: MFP, 400: access point

Claims

1. A communication device, a receiving means for wirelessly connecting to an information processing device without going through the external access point in a setup mode for receiving connection information used for wirelessly connecting to an external access point, and receiving the connection information from the information processing device; an acquisition means for acquiring information indicating candidate security methods stored in association with the type of setting method in the setup mode; When the setup mode is a setup mode in which the receiving means receives the connection information using a first setting method, based on information indicating a security method included in the connection information, attempt to connect to the external access point using a security method corresponding to the information indicating the security method and using the connection information received by the receiving means; When the setup mode is a setup mode in which the receiving means receives the connection information using a second setting method different from the first setting method, a wireless connection with the external access point is attempted using a security method that is predetermined in association with the second setting method and the connection information received by the receiving means, based on the information acquired by the acquiring means. A connection means; A communication device comprising:

2. The communication device according to claim 1, characterized in that, when the setup mode is the setup mode of the second setting method and the connection fails, the connection means switches to a security method that is different from the security method that caused the connection failure among the security methods predetermined based on the second setting method, and retries the connection.

3. 3. The communication device according to claim 1, wherein the connection information received by the receiving means in the second setting method does not include information indicating the security method.

4. a storage means for storing information indicating candidates for security methods when attempting a connection in association with the type of setting method in the setup mode; the acquiring means acquires information from the storage means, The communication device according to any one of claims 1 to 3, characterized in that, when the setup mode is the second setting method, the connection means acquires information indicating the candidate from the storage means and attempts a wireless connection with the access point using a security method corresponding to the acquired information.

5. 5. The communication device according to claim 4, wherein the storage means stores information indicating a plurality of the candidates for each type of setting method of the setup mode.

6. 6. The communication device according to claim 4, further comprising an update unit that updates the information indicating the candidate security methods stored in the storage unit based on the results of an attempt to connect wirelessly to the external access point.

7. 7. The communication device according to claim 1, wherein the first setting method and the second setting method have different communication protocols.

8. The first setting method is a setting method in which SNMP is used as a communication protocol, the second setting method is a setting method in which HTTP is used as a communication protocol, and information indicating the security method is not included in the connection information received by the receiving means; When the setup mode is the setup mode in which the receiving means receives the connection information using the second setup method, the connection means attempts to establish a wireless connection with the external access point using WPA2 as a security method predetermined in association with the second setup method and using the connection information received by the receiving means, based on the information acquired by the acquisition means.

8. The communication device according to claim 1, wherein the communication device is a communication device.

9. A method for controlling a communication device, comprising: In a setup mode in which connection information used for wirelessly connecting to an external access point is received, wirelessly connecting to an information processing device without going through the external access point, and receiving the connection information from the information processing device; acquiring information indicating candidate security methods stored in association with the type of setting method in the setup mode; If the setup mode is a setup mode in which the connection information is received using a first setting method, based on information indicating a security method included in the connection information, attempt to connect to the external access point using a security method corresponding to the information indicating the security method and using the received connection information; When the setup mode is a setup mode in which the connection information is received using a second setup method different from the first setup method, attempting to establish a wireless connection with the external access point using a security method that is predetermined in association with the second setup method and the received connection information based on the acquired information; A control method comprising:

10. A program for causing a computer to function as each means of a communication device described in any one of claims 1 to 8.

11. A computer-readable storage medium storing a program for causing a computer to function as each means of a communication device described in any one of claims 1 to 8.

Images