COMMUNICATION DEVICE, COMMUNICATION DEVICE CONTROL METHOD, AND PROGRAM

Abstract

To set an authentication system on the basis of the length of a pass phrase set by a user.SOLUTION: A communication device receives input of a pass phrase according to a user's operation, sets an authentication system on the basis of the pass phrase length of the pass phrase, and performs wireless connection with an opposite device by using the set authentication system. When the pass phrase length is within a predetermined range, the communication device sets either one authentication system of Wi-Fi Protected Access (WPA), WPA2, WPA3, or the combination of two or more of WPA / WPA2 / WPA3, and when otherwise, sets the WPA3 authentication system.SELECTED DRAWING: Figure 5

Description

[Technical Field]

[0001] The present invention relates to wireless communication technology. [Background technology]

[0002] In recent years, with the development of information and communication technology, Internet usage has been increasing year by year, and various communication technologies are being developed to meet the increasing demand. In particular, wireless local area network (WLAN) technology has achieved improved throughput in Internet communications such as packet data, voice, and video using mobile devices, and various technological developments are currently being actively carried out.

[0003] In the development of WLAN technology, the Wi-Fi Alliance has played an important role in numerous standardization efforts to ensure interoperability of WLAN technologies. Security in wireless communications is becoming increasingly important, and in recent years, the Wi-Fi Alliance has standardized WPA3 as an authentication method, succeeding the previous standards WPA (Wi-Fi Protected Access) and WPA2. In the WPA3-Personal standard, similar to the WPA2-Personal standard, the user sets a passphrase on the AP (access point), and only STAs (stations / terminal devices) that have set the same passphrase are authenticated. Furthermore, during the authentication process, an encryption key is shared between the AP and STA devices, and subsequent data communications are encrypted to ensure security. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2012-89926 Summary of the Invention [Problem to be solved by the invention]

[0005] WPA3 has different passphrase length restrictions than WPA and WPA2. Therefore, unless users set a passphrase with the authentication method (WPA, WPA2, WPA3, etc.) in mind, wireless connections between devices may not be established correctly.

[0006] The present invention has been made in view of the above-mentioned problems, and has an object to provide a technique for setting an authentication method based on the length of a passphrase set by a user. [Means for solving the problem]

[0007] As a means for achieving the above object, a communication device of the present invention has the following configuration: A communication device comprising: a receiving unit for receiving an input of a passphrase by a user's operation; The reception method accepted Passfly Z based on, Other communications Equipment and Authentication process between Do Authentication that controls means, Authentication Control means for detecting the passphrase The number of characters is 64 or more, and the authentication process is performed with the other communication device that supports WPA (Wi-Fi Protected Access) 3. case, the other communication device and the WPA3 According to the above certification process of Control to run death, The number of characters in the passphrase is 8 to 63, and the authentication process is performed with the other communication device that supports WPA3. case, the other communication device and the WPA3 According to the above certification process of execution do and when the number of characters in the passphrase is 8 to 63, and the authentication process is to be performed with the other communication device that does not support WPA3 but supports WPA2, the authentication process is controlled to be performed with the other communication device using WPA2. . [Effects of the Invention]

[0008] According to the present invention, in a communication device, an authentication method is set based on the length of a passphrase set by a user, and the user can connect to a remote device without being aware of the relationship between the authentication method and the passphrase length, thereby improving convenience. [Brief explanation of the drawings]

[0009] [Figure 1] 1 shows an example of the configuration of a communication system. [Figure 2] An example of the functional configuration of an STA is shown below. [Figure 3] An example of the hardware configuration of an STA is shown below. [Figure 4] 10 is a flowchart of a process executed by a STA to wirelessly connect to an AP. [Figure 5] 10 is a flowchart of a process executed by an STA according to the first embodiment. [Figure 6] 10 is a flowchart of a process executed by an STA according to a second embodiment. [Figure 7] 11 is a flowchart of a process executed by a STA according to a third embodiment. [Figure 8] 3 shows an example of a display screen according to the first embodiment. [Figure 9] 10 shows an example of a display screen according to the second embodiment. [Figure 10] 10 shows an example of a display screen according to the third embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, embodiments will be described in detail with reference to the accompanying drawings. Note that the following embodiments do not limit the scope of the invention claimed. Although multiple features are described in the embodiments, not all of these multiple features are necessarily essential to the invention, and multiple features may be combined arbitrarily. Furthermore, in the accompanying drawings, the same reference numerals are used to designate the same or similar components, and redundant explanations will be omitted.

[0011] (Configuration of wireless communication system) FIG. 1 shows an example of the configuration of a communication system in this embodiment. FIG. 1 shows a configuration including one access point (AP 102) and an STA (station / terminal device) (STA 103) as communication devices. As shown in FIG. 1, the network formed by AP 102 is indicated by a circle 101. STA 103 can transmit and receive signals transmitted and received by AP 102. Note that this diagram is an example, and the following discussion can be applied to a network including many communication devices in a wider area, or to the positional relationships of various communication devices. Furthermore, although an AP (AP 102) is used in this embodiment, the AP is not limited to an AP, and any communication device having the function of adjusting a wireless network like an AP can be used.

[0012] (STA configuration) 2 shows an example of the functional configuration of the STA 103 according to this embodiment. The STA 103 includes, as an example of its functional configuration, a wireless LAN control unit 201, a display information generation unit 202, an input information analysis unit 203, a UI (user interface) control unit 204, and an external wireless detection unit 205.

[0013] The wireless LAN control unit 201 includes an antenna and circuitry for transmitting and receiving wireless signals to and from other wireless LAN devices, as well as a program for controlling them. The wireless LAN control unit 201 controls wireless LAN communications in accordance with the IEEE 802.11 standard series. The number of wireless LAN control units is not limited to one, and may be two or more.

[0014] The UI control unit 204 is configured to include hardware related to the user interface, such as a touch panel or buttons for accepting operations on the STA 103 by the user of the STA 103, and a program for controlling them (acceptance / display control). The program of the UI control unit 204 sends the input content from the user obtained from the input unit 304 (FIG. 3) to the input information analysis unit 203. The program of the UI control unit 204 also sends the display information (image information) generated by the display information generation unit 202 to the output unit 305 (FIG. 3). The UI control unit 204 also has a function for presenting information, such as audio output, to the user.

[0015] The input information analysis unit 203 receives and analyzes information input by the user via the UI control unit 204. For example, the input information analysis unit 203 analyzes the content controlled by the wireless LAN control unit 201 and extracts information to be generated by the display information generation unit 202. The extracted information is sent to the display information generation unit 202.

[0016] The display information generation unit 202 generates information (display information, image information) to be output (displayed) to the output unit 305. For example, the display information generation unit 202 generates information to be output (displayed) to the output unit 305 from information received from the input information analysis unit 203 and information stored in the storage unit 301 (FIG. 3), and sends the information to the UI control unit 204. The information generated by the display information generation unit 202 may change depending on user input or the passage of time.

[0017] The external wireless detection unit 205 includes a program that detects signals transmitted by other wireless systems on a specified frequency. Examples of other wireless systems include, but are not limited to, fixed wireless and satellite communications, and may also include broadcast communications.

[0018] 3 shows the hardware configuration of the STA 103 according to this embodiment. The STA 103 includes a storage unit 301, a control unit 302, a function unit 303, an input unit 304, an output unit 305, a communication unit 306, and a wireless antenna 307, as an example of the hardware configuration.

[0019] The storage unit 301 is configured with either or both of a ROM (Read Only Memory) and a RAM (Random Access Memory), and stores various information such as programs for performing various operations described below and communication parameters for wireless communication. Note that, in addition to memories such as ROM and RAM, the storage unit 301 may also use storage media such as a flexible disk, a hard disk, an optical disk, a magneto-optical disk, a CD-ROM, a CD-R, a magnetic tape, a non-volatile memory card, or a DVD.

[0020] The control unit 302 is configured by, for example, a processor such as a CPU (Central Processing Unit) or an MPU (Micro Processing Unit), an ASIC (Application Specific Integrated Circuit), a DSP (Digital Signal Processor), an FPGA (Field Programmable Gate Array), etc. The control unit 302 controls the entire STA 103 by executing a program stored in the storage unit 301. Note that the control unit 302 may also control the entire STA 103 in cooperation with the program stored in the storage unit 301 and an OS (Operating System).

[0021] Furthermore, the control unit 302 controls the functional unit 303 to perform predetermined processing such as capturing images, printing, and projection. The functional unit 303 is hardware that enables the STA 103 to perform predetermined processing. For example, if the STA 103 is a camera, the functional unit 303 is an imaging unit that performs imaging processing. For example, if the STA 103 is a printer, the functional unit 303 is a printing unit that performs printing processing. For example, if the STA 103 is a projector, the functional unit 303 is a projection unit that performs projection processing. The data processed by the functional unit 303 may be data stored in the storage unit 301, or may be data communicated with another AP via the communication unit 306, which will be described later.

[0022] The input unit 304 accepts various operations from the user. Input may be performed using a physical mechanism such as a button, buttons displayed on a touch panel, or voice input, and is not limited to these methods as long as information can be input to the device. The output unit 305 outputs various types of information to the user. Here, output by the output unit 305 includes at least one of display on a screen (when the output unit 305 functions as a display unit), audio output through a speaker, vibration output, etc., but is not limited to these methods as long as information can be presented to the user. Note that both the input unit 304 and the output unit 305 may be implemented in a single module, such as a GUI (Graphical User Interface) such as a touch panel (touch panel display / screen). Furthermore, the output unit 305 does not need to be installed in the STA 103 itself; it may be installed in a separate device including a program for controlling the output unit and displayed to the user. The output medium in this case may be, but is not limited to, a PC, smartphone, etc. connected to the STA 103 via a wired or wireless connection.

[0023] The communication unit 306 controls wireless communication compliant with the IEEE802.11 standard series and IP communication. The communication unit 306 also controls a wireless antenna 307 to transmit and receive wireless signals for wireless communication. The STA 103 communicates content such as image data, document data, and video data with other communication devices via the communication unit 306.

[0024] The wireless antenna 307 is an antenna capable of receiving any of the sub-GHz band, 2.4 GHz band, 3.6 GHz band, 4.9 and 5 GHz band, 6 GHz band and 60 GHz band. The wireless antenna 307 may be physically configured with one or more antennas to realize MIMO (Multi-Input and Multi-Output) transmission and reception.

[0025] (Processing flow) Next, several examples of processing executed by the STA 103 configured as described above will be described. In the following description, as a non-limiting example, the input unit 304 and the output unit 305 are configured as a single module as a GUI such as a touch panel.

[0026] 4 shows a flowchart of the process up to when the STA 103 wirelessly connects to the AP 102. In this embodiment, the STA 103 wirelessly connects to the AP 102 using wireless parameters set by user input. The process in FIG. 4 is started in response to an operation by the user via a GUI (e.g., a touch panel) when the user of the STA 103 wants to connect the STA 103 wirelessly. Specifically, for example, a menu button for starting the wireless connection is provided on the GUI of the STA 103, and the process is started when the user presses this button.

[0027] In S401, the UI control unit 204 prompts the user to select a wireless parameter setting mode via the GUI and accepts the user's selection (input). For example, the UI control unit 204 may provide a menu button on the GUI that allows the user to select between a manual setting mode in which each parameter is manually set and an automatic setting mode in which each parameter is automatically set. The automatic setting mode may include a mode in which an authentication method is selected based on a scan result, a WPS (PIN / PBC) mode, a DPP mode, etc. The manual setting mode is particularly necessary when connecting to a stealth AP (an AP with a stealth AP function enabled). If the manual setting mode is selected in S401 (Yes in S402), the process proceeds to manual wireless parameter setting processing in S403. The processing in S403 will be described later with reference to FIGS. 5 to 10 as Examples 1 to 3. If the automatic setting mode is selected in S401 (No in S402), the process proceeds to automatic wireless parameter setting processing in S404. Since this embodiment focuses on the manual setting mode, details of the automatic setting will be omitted. When the manual setting of wireless parameters (S403) or the automatic setting of wireless parameters (S404) is performed, in S405 the wireless LAN control unit 201 of the STA 103 establishes a wireless connection with the partner device using the set wireless parameters.

[0028] Next, the details of the manual wireless parameter setting process shown in S403 of Fig. 4 will be described in each example with reference to Figs. 5 to 10. In the manual wireless parameter setting process, the user of the STA 103 manually sets at least the SSID (Service Set Identifier) ​​(not shown) of the destination AP and a passphrase for the authentication method. Although not described in detail in this embodiment, the manual wireless parameter setting may also include settings related to wireless communication, such as the wireless standard (e.g., 802.11ac), wireless channel, wireless bandwidth, PMF setting, and IP address setting. As with the description of Fig. 4, in the following examples 1 to 3, the input unit 304 and the output unit 305 are assumed to be configured as a single module serving as a GUI such as a touch panel, as a non-limiting example.

[0029] [Example 1] The first embodiment will be described with reference to FIGS. 5 and 8. FIG. 5 is a flowchart of processing executed by the STA 103 according to this embodiment, and FIG. 8 shows an example of a display screen on a GUI according to this embodiment. In this embodiment, the STA 103 automatically sets the authentication method to be used according to the length of the passphrase input / set by the user. The flowchart in FIG. 5 is started when the processing of S403 in FIG. 4 is executed. In this embodiment, for example, a user of the STA 103 can set wireless parameters via a GUI that displays image information generated by the display information generation unit 202, as shown in FIG. 8. The GUI (FIG. 8) shown in this embodiment is merely an example, and is not limited to this as long as it allows wireless parameters to be set.

[0030] First, the UI control unit 204 of the STA 103 controls the GUI to display a screen 80, prompting the user to set (input) an SSID (not shown in FIG. 5). For example, an SSID input box 801 and an OK button 802 are displayed on the screen 80. The user inputs the SSID into the SSID input box 801 using a soft keyboard, voice input, or other methods, and the input result is displayed. Furthermore, in response to the user selecting (pressing) the OK button 802, the SSID is set (determined) based on the content input into the SSID input box 801.

[0031] Thereafter, the UI control unit 204 controls the GUI to transition to a screen 81, prompting the user to set (input) a passphrase (S501). For example, a passphrase input box 811 and an OK button 812 are displayed on the screen 81. The user inputs a passphrase into the passphrase input box 811 using a soft keyboard, voice input, or other methods, and the input result is displayed. Furthermore, in response to the user selecting the OK button 812, a passphrase is set (determined) based on the content input into the passphrase input box 811. The input information analysis unit 203 determines the length of the set passphrase (passphrase length) (S502). If the passphrase length is not set (i.e., 0 characters are set), the input information analysis unit 203 sets the authentication method to a no-encryption mode (S503). If the passphrase length is within the range of 8 to 63 characters, the input information analysis unit 203 sets the authentication method to a WPA2 / WPA3 combined (Mix) mode (S504). The Mix mode will now be described. The Mix mode is a mode in which authentication processing can be performed in accordance with an authentication method available to the remote device (here, the AP 102). As a specific example, when the WPA2 / WPA3 Mix mode is set, if the AP 102 does not support WPA3 but supports WPA2, authentication processing is performed using the AP 102 and WPA2. If the AP 102 supports WPA3, authentication processing is performed using the AP 102 and WPA3. In S504, any of the following may be set: the WPA / WPA2 / WPA3 Mix mode, a single mode (e.g., WPA, WPA2, or WPA3), or a Mix mode of two or more of WPA / WPA2 / WPA3. If there are multiple authentication modes (authentication methods) that can be applied in S504, the input information analysis unit 203 may set (determine) the authentication mode to be set based on the authentication modes supported by the STA 103 or a user default setting for the STA 103. The user default setting may be changeable. If the passphrase length is other than the above, the input information analysis unit 203 sets the authentication method to the WPA3 mode (S505).The passphrase length used for branching in S502 is an example, and the process may be configured to branch to S503, S504, and S505 based on other character length conditions.

[0032] Once the authentication method is set in any of S503, S504, and S505, the processing in Fig. 5 ends. Before the processing in Fig. 5 ends, the display information generation unit 202 may generate information indicating the set authentication method, and the UI control unit 204 may display the information on the GUI to notify the user of the set authentication method. Note that the order of setting the SSID and the passphrase may be reversed, and the passphrase may be set first (screen 81) and then the SSID may be set (screen 80).

[0033] In this way, according to this embodiment, the user can set and select an appropriate authentication method by setting only a passphrase without being aware of the authentication method.

[0034] [Example 2] A second embodiment will be described with reference to FIGS. 6 and 9. FIG. 6 is a flowchart of processing executed by the STA 103 according to this embodiment, and FIG. 9 shows an example of a display screen on a GUI according to this embodiment. In this embodiment, the STA 103 automatically selects an available authentication method candidate according to the length of the passphrase entered by the user. If there are multiple options, the STA 103 prompts the user to select one, and if there is only one option, the STA 103 automatically sets the option. The flowchart in FIG. 6 is started when the processing of S403 in FIG. 4 is executed. In this embodiment, for example, the user of the STA 103 can set wireless parameters via a GUI that displays image information generated by the display information generating unit 202, as shown in FIG. 9. The GUI (FIG. 9) shown in this embodiment is merely an example, and any GUI that can set wireless parameters may be used.

[0035] In Fig. 6, the processes of S601, S602, and S605 are similar to the processes of S501, S502, and S505 in Fig. 5 (Example 1), respectively, and therefore description thereof will be omitted. Also, in Fig. 9, screens 90 and 91 are similar to screens 80 (SSID setting) and 81 (passphrase setting (S501)) in Fig. 8 (Example 1), respectively, and therefore description thereof will be omitted.

[0036] In S602 after setting the SSID (screen 90) and the passphrase (screen 91), if the passphrase length is not set (i.e., 0 characters set) or if the passphrase length is within the range of 8 to 63 characters, the process proceeds to S603. In S603, the UI control unit 204 controls to display screen 92 on the GUI and prompts the user to select an authentication method. For example, as shown in a pull-down menu 921 on screen 92, one or more selectable authentication methods may be displayed in list format. The user can select an authentication method according to the length of the input passphrase. The authentication methods displayed in the pull-down menu 921 are merely examples and are not limited to these. The pull-down menu 921 on screen 92 shows an example of authentication method selection candidates when a passphrase within the range of 8 to 63 characters is set in the passphrase input box 911. In the pull-down menu 921, selectable authentication methods are displayed without a strikethrough, and unselectable authentication methods are displayed with a strikethrough. That is, authentication methods corresponding to the no-encryption (OPEN) mode are displayed with a strikethrough in the pull-down menu 921. The user selects one authentication method from the selectable authentication methods listed in the pull-down menu 921, and in response to selecting (pressing) the OK button 922, the authentication method is set.

[0037] 9 is merely an example, and other display methods may be used, such as displaying only selectable authentication methods or displaying unselectable authentication methods in a different color. Also, in FIG. 6, the process proceeds to S603 even when the passphrase length is not set (i.e., 0 characters is set), but in this case, as in S503 in FIG. 5 (first embodiment), the process may be configured to set the non-encryption mode as the authentication method. Also, the passphrase length used for branching in S602 is merely an example, and the process may be configured to branch to S603 and S605 based on other character count conditions.

[0038] Once the authentication method is set in either S604 or S605, the processing in Fig. 6 ends. Before the processing in Fig. 6 ends, the display information generation unit 202 may generate information indicating the set authentication method, and the UI control unit 204 may display the information on the GUI to notify the user of the set authentication method.

[0039] As described above, according to this embodiment, the user can select an authentication method from among authentication methods that are compatible with the set passphrase length, making it easy to select an authentication method and enabling the user to set and select an authentication method according to their preference.

[0040] [Example 3] A third embodiment will be described with reference to FIGS. 7 and 10. FIG. 7 is a flowchart of processing executed by the STA 3 according to this embodiment, and FIG. 10 shows an example of a display screen on a GUI according to this embodiment. In this embodiment, the STA 103 automatically selects available authentication method candidates based on the authentication method selected by the user and the length of the input passphrase. That is, the STA 103 selects an authentication method that satisfies the set passphrase length condition from among the authentication methods selected by the user. If no authentication method satisfies the condition, the STA 103 may automatically reset the authentication method or prompt the user to select an appropriate authentication method again. Whether to perform automatic resetting may be determined in advance within the STA 103, or may be set by user input. The flowchart in FIG. 7 is started when the processing of S403 in FIG. 4 is executed. In this embodiment, for example, a user of the STA 103 can set wireless parameters via a GUI that displays image information generated by the display information generation unit 202, as shown in FIG. 10. The GUI (FIG. 10) shown in this embodiment is merely an example, and any GUI that allows wireless parameters to be set may be used.

[0041] In Fig. 7, the processes of S702, S705, S706, S707, and S708 are similar to the processes of S501, S502, S503, S504, and S505 in Fig. 5, respectively, and therefore descriptions thereof will be omitted. Also, in Fig. 10, a screen 1000 and a screen 1020 are similar to the screen 80 (SSID setting) and screen 81 (passphrase setting (S501)) in Fig. 8 (Example 1), respectively, and therefore descriptions thereof will be omitted.

[0042] In S701 after the SSID is set (screen 1000), the UI control unit 204 controls to display screen 1010 on the GUI and prompts the user to select an authentication method. Unlike in the second embodiment, a passphrase has not yet been set by the user, so a pull-down menu 1011 on screen 1010 displays a plurality of selectable authentication methods, including a no-encryption (OPEN) mode. The authentication method is set in response to the user selecting one authentication method from the selectable authentication methods listed in the pull-down menu 1011 and selecting (pressing) an OK button 1012. Here, if the user selects the no-encryption (OPEN) mode, the next process of S702 (setting a passphrase) may be skipped.

[0043] After the passphrase is set in S702 (see screen 1020), the process proceeds to S703. In S703, the input information analysis unit 203 checks the consistency between the authentication method set in S701 and the passphrase length set in S702 (whether the passphrase length is appropriate for the set authentication method). If the passphrase length is appropriate (Yes in S703), the process proceeds to S705; if not (No in S703), the process proceeds to S704. An example of the consistency between the passphrase length and the authentication method (conditions for the passphrase length for the authentication method) is as follows:

[0044] No encryption (OPEN) mode: 0 characters WPA, WPA2 mode: 8 to 63 characters Mixed mode using a combination of two or more of WPA / WPA2 / WPA3: 8 to 63 characters WPA3: No restrictions In addition, in WPA, WPA2, and their mixed modes, a 64-character PSK (Pre-Shared Key) can also be set. Therefore, when the passphrase length is 64 characters, the UI control unit 204 may display a message on the GUI prompting the user to select whether to treat it as a PSK or a WPA3 passphrase. Then, in step S708, the input information analysis unit 203 may set an authentication method (not shown) according to the user's selection on the message.

[0045] If the passphrase length is not appropriate for the set authentication method (if the passphrase length does not satisfy the passphrase length requirements for the set authentication method) (No in S703), the STA 103 determines whether to perform automatic resetting in S704. Whether to perform automatic resetting can be determined, for example, by one of the following methods.

[0046] Whether to automatically reconfigure or not is preset in the STA103. Whether to automatically reconfigure or not is set in advance by the user on the STA103. If S703 is No, the user is prompted to select whether to automatically reset the setting. If automatic resetting is not to be performed (No in S704), the process returns to S701, and the UI control unit 204 prompts the user to select the authentication method again (see screen 1010). At this time, the UI control unit 204 may display a warning to the user on the GUI that the passphrase length is not appropriate for the authentication method (not shown). If automatic resetting is to be performed (Yes in S704), the process proceeds to S705. In this case, the UI control unit 204 may also display a warning to the user on the GUI that the passphrase length is not appropriate for the authentication method and that automatic resetting will be performed (automatically resetting the authentication method corresponding to the passphrase length) together with the reset authentication method (not shown). If the passphrase length set by the user is not appropriate for the authentication method and automatic resetting is to be performed, the process does not return from screen 1020 to screen 1010, but proceeds to wireless connection (S405) after the processes of S705 to S708. At this time, the UI control unit 204 may display a warning on the GUI to the user that the passphrase length was not appropriate for the authentication method, but that it will be automatically reset, along with the reset authentication method (not shown).

[0047] 10 is merely an example, and other display methods may be used, such as displaying only selectable authentication methods, displaying unselectable authentication methods in a different color, etc. Also, the passphrase length used for branching in S705 is just an example, and the process may be configured to branch to S706, S707, and S708 based on other character number conditions.

[0048] When the authentication method is set in any one of S706, S707, and S708, the processing in Fig. 7 ends. Before the processing in Fig. 7 ends, the display information generation unit 202 may generate information indicating the set authentication method, and the UI control unit 204 may display the information on the GUI to notify the user of the set authentication method.

[0049] In this way, according to this embodiment, the user can select the authentication method he or she wants to use while checking its compatibility with the passphrase length, making it easier to select the authentication method.

[0050] The present invention can also be realized by supplying a program that realizes one or more functions of the above-described embodiments to a system or device via a network or a storage medium, and having one or more processors in the computer of the system or device read and execute the program.The present invention can also be realized by a circuit (e.g., ASIC) that realizes one or more functions.

[0051] The invention is not limited to the above-described embodiments, and various changes and modifications can be made without departing from the spirit and scope of the invention. Accordingly, the following claims are appended to apprise the public of the scope of the invention. [Explanation of symbols]

[0052] 101 Network, 102 AP (Access Point), 103 STA (Station)

Claims

1. A communication device, an accepting means for accepting input of a passphrase by a user operation; an authentication control means for controlling authentication processing with another communication device based on the passphrase accepted by the acceptance means; The authentication control means When the number of characters of the passphrase is 64 or more and the authentication process is performed with the other communication device that supports WPA (Wi-Fi Protected Access) 3, control is performed so that the authentication process with the other communication device is performed using WPA3; When the number of characters in the passphrase is 8 to 63, and the authentication process is to be performed with the other communication device that supports WPA3, control is performed so that the authentication process with the other communication device is performed using WPA3; When the number of characters in the passphrase is 8 to 63, and when the authentication process is to be performed with the other communication device that does not support WPA3 but supports WPA2, control is performed so that the authentication process with the other communication device is performed using WPA2. A communication device comprising:

2. Based on the fact that the number of characters of the passphrase accepted by the accepting means is 64 or more, the authentication control means sets the WPA3 as the authentication method to be used in the authentication process.

2. The communication device according to claim 1.

3. Based on the number of characters of the passphrase accepted by the accepting means being 8 to 63 characters, the authentication control means sets a mixed mode of WPA / WPA2 / WPA3 as the authentication method to be used in the authentication process.

3. The communication device according to claim 1 or 2.

4. A communication device described in any one of claims 1 to 3, characterized in that, based on the number of characters in the passphrase accepted by the acceptance means being 0, the authentication control means sets a no-encryption mode as the authentication method to be used for the authentication processing.

5. The authentication control means, in response to receiving input of the passphrase through an operation by the user, does not receive input of the authentication method through an operation by the user, but sets the authentication method based on the number of characters of the passphrase.

5. The communication device according to claim 2, wherein the first and second communication terminals are connected to each other.

6. In response to receiving the input of the passphrase by the user's operation, the authentication control means does not receive the input of the authentication method by the user's operation, but sets the authentication method based on the number of characters of the passphrase and executes the authentication process with the other communication device.

6. The communication device according to claim 2, wherein the first and second communication terminals are connected to each other.

7. When the number of characters in the passphrase is 8 to 63, and the authentication process is to be performed with the other communication device that does not support WPA3 or WPA2 but supports WPA, the authentication control means controls the other communication device to perform the authentication process using WPA.

7. The communication device according to claim 1, wherein the first and second communication terminals are connected to each other.

8. A method for controlling a communication device, comprising: a receiving step of receiving a passphrase input by a user operation; an authentication control step of controlling authentication processing between the communication device and another communication device based on the passphrase received in the receiving step; In the authentication control step, When the number of characters of the passphrase is 64 or more and the authentication process is performed with the other communication device that supports WPA (Wi-Fi Protected Access) 3, control is performed so that the authentication process with the other communication device is performed using WPA3; When the number of characters in the passphrase is 8 to 63, and the authentication process is to be performed with the other communication device that supports WPA3, control is performed so that the authentication process with the other communication device is performed using WPA3; When the number of characters in the passphrase is 8 to 63, and when the authentication process is to be performed with the other communication device that does not support WPA3 but supports WPA2, control is performed so that the authentication process with the other communication device is performed using WPA2. A method for controlling a communication device.

9. A program for causing a computer to function as the communication device control method according to claim 8.

Images