Communication system and communication method

Abstract

To prevent unauthorized setting to a device by a malicious user terminal.SOLUTION: A communication system comprises a device, a server apparatus and a user terminal. When authorization information generated by the server apparatus is received from the user terminal, a setting processing section of the device executes operation setting processing to set operation settings of the device. Operation setting data transmitted from the device in the operation setting processing is encrypted and transmitted to the user terminal by a communication section of the device. Operation setting data transmitted from the server apparatus in the operation setting processing are encrypted and transmitted to the user terminal by a communication section of the server apparatus. An acquisition section of the user terminal performs authorization with the server apparatus and, in a case where the authorization is made successful, acquires the authorization information from the server apparatus. A transfer section of the user terminal transfers the authorization information to the device and transfers the operation setting data between the device and the server apparatus thereafter.SELECTED DRAWING: Figure 7

Description

[Technical Field]

[0001] FIELD OF THE INVENTION Embodiments of the present invention relate to a communication system and a communication method. [Background technology]

[0002] Technologies for connecting devices to a network have been known for some time. For example, in the Wi-Fi Device Provisioning Protocol (DPP), a user terminal reads a QR code (registered trademark) displayed by the device, and then authentication is performed between the user terminal and the device based on the information in the QR code (registered trademark). If the authentication is successful, the user terminal sends the device settings for connecting to a wireless LAN access point. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] International Publication No. 2020 / 054365 Summary of the Invention [Problem to be solved by the invention]

[0004] However, with conventional technology, it has been difficult to prevent malicious user terminals from making unauthorized settings on devices. [Means for solving the problem]

[0005] A communication system according to an embodiment includes a device, a server device, and a user terminal. The device includes a setting processing unit, a communication unit, and an operation setting storage unit. When the setting processing unit receives authorization information generated by the server device from the user terminal, it executes an operation setting process to set operation settings of the device by communicating with the server device via the user terminal. The communication unit encrypts first operation setting data transmitted from the device in the operation setting process and transmits the encrypted first operation setting data to the user terminal. The operation setting storage unit stores the operation settings transmitted in the operation setting process. The server device includes a generation unit and a communication unit. The generation unit generates the authorization information if authentication of the user terminal is successful. The communication unit encrypts second operation setting data transmitted from the server device in the operation setting process and transmits the encrypted second operation setting data to the user terminal. The user terminal includes an acquisition unit, a transfer unit, and a communication unit. The acquisition unit performs authentication with the server device, and acquires the authorization information from the server device if the authentication is successful. The transfer unit transfers the authorization information to the device, and then transfers the first and second operation setting data between the device and the server device. The communication unit receives a completion notification from at least one of the device and the server device when the operation setting is complete. The first and second operation setting data include at least one of setting data for the device to connect to a predetermined network to which the device is connected and setting data for the device to cooperate with a predetermined system to which the device is cooperated. [Brief explanation of the drawings]

[0006] [Figure 1] FIG. 1 is a diagram showing an example of the device configuration of a communication system according to a first embodiment. [Figure 2] FIG. 2 is a diagram showing an example of the functional configuration of a user terminal according to the first embodiment. [Figure 3] FIG. 4 is a diagram showing an example of token management information according to the first embodiment. [Figure 4] FIG. 2 is a diagram showing an example of the functional configuration of a device according to the first embodiment. [Figure 5]FIG. 2 is a diagram showing an example of the functional configuration of a server device according to the first embodiment. [Figure 6] FIG. 4 is a diagram showing an example of user information according to the first embodiment. [Figure 7] FIG. 3 is a sequence diagram showing an example of a communication method according to the first embodiment. [Figure 8] FIG. 10 is a diagram showing an example of the functional configuration of a user terminal according to the second embodiment. [Figure 9] FIG. 2 is a diagram showing an example of the hardware configuration of the main parts of a user terminal, a device, and a server apparatus according to the first to fourth embodiments. DETAILED DESCRIPTION OF THE INVENTION

[0007] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, embodiments of a communication system and a communication method will be described in detail with reference to the accompanying drawings.

[0008] [Example of equipment configuration] 1 is a diagram showing an example of the device configuration of a communication system 100 according to the first embodiment. The communication system 100 according to the first embodiment includes a user terminal 10, a device 20, a server device 30, and a network 200.

[0009] The user terminal 10 and the device 20 are connected by wire or wirelessly. In the case of a wired connection, possible connections include, but are not limited to, an RS-232C cable, a USB cable, an Ethernet cable, etc. In the case of a wireless connection, possible connections include, but are not limited to, Bluetooth, Wi-Fi, IEEE 802.15.4, infrared communication, ultrasonic communication, etc.

[0010] The user terminal 10 is connected to the server device 30 via a network 200 .

[0011] The network 200 may be any network. For example, the network 200 may be a wide area network such as the Internet. Alternatively, the network 200 may be a wide area closed network. Alternatively, the network 200 may be a local network such as an in-house network.

[0012] The device 20 may be any device. For example, the device 20 may be an edge device used for infrastructure services. Specifically, the device 20 may be, for example, a sensor or an IoT (Internet of Things) device.

[0013] The server device 30 may be realized in any manner. For example, the server device 30 may be realized using a traditional server computer. Alternatively, for example, the server device 30 may be realized as a virtual server obtained by virtualizing a physical server using server virtualization technology. Alternatively, for example, the functions of the server device 30 may be realized as a cloud service.

[0014] [Example of functional configuration of user terminal] 2 is a diagram illustrating an example of the functional configuration of the user terminal 10 according to the first embodiment. The user terminal 10 according to the first embodiment includes a first communication unit 11a, a second communication unit 11b, an acquisition unit 12, a storage unit 13, and a transfer unit 14.

[0015] The first communication unit 11a communicates with the device 20 using a first communication method.

[0016] The second communication unit 11b communicates with the server device 30 using the second communication method. When the first communication method and the second communication method are the same, the first communication units 11a and 11b may be realized as one communication unit 11 (see FIG. 8 of the second embodiment).

[0017] The acquiring unit 12 communicates with the server device 30 and acquires a token (an example of authorization information) from the server device 30. When requesting this token from the server device 30, the acquiring unit 12 transmits a token request to the server device 30. The token request includes at least one of information about the user terminal 10, information about the user who uses the user terminal 10, and information about the device communicating via the first communication unit 11a.

[0018] The information about the user terminal 10 includes, for example, the model and serial number of the user terminal 10, and the version of the associated application.

[0019] The user information includes, for example, a username, a password, and a user certificate.

[0020] The device information is, for example, the model, serial number, and MAC address of the device 20. For example, the device information is identified from the nameplate of the device 20, and is input by the user to the user terminal 10. For example, the device information is encoded into a QR code (registered trademark) or the like, and is read using a camera or the like of the user terminal 10. The QR code (registered trademark) may be attached to the housing of the device 20, or may be displayed on a display unit of the device 20. For example, the device information may be received from the device 20 via the first communication unit 11a.

[0021] The communication performed by the acquiring unit 12 to obtain a token from the server device 30 may involve additional communication to prevent attacks by attackers. For example, the acquiring unit 12 may authenticate the server device 30 using a server certificate, or may transmit to the server device 30 the above-mentioned token request that further includes a nonce previously obtained from the server device 30. In either case, it is assumed that the information on the user terminal 10, user information, device information, etc. that the acquiring unit 12 transmits to the server device 30 are sufficiently protected from a security standpoint.

[0022] When the acquiring unit 12 acquires a token from the server device 30, the acquiring unit 12 stores the token in the storage unit 13. Typically, a token has an expiration date. When the acquiring unit 12 acquires multiple tokens, the storage unit 13 stores token management information including, for example, the token, the expiration date of the token, and the target device of the token.

[0023] 3 is a diagram illustrating an example of token management information according to the first embodiment. The token management information according to the first embodiment includes a token, an expiration date, and a target device. In the example of the token management information in FIG. 3, for example, it is managed that the token aaaaaaaaa, which has an expiration date of 13:00:15 on May 7, 2021, is being used by device A.

[0024] 2, before requesting a token from the server device 30, the acquiring unit 12 may inquire of the storage unit 13 to check whether a valid token associated with the target device 20 exists. If such a token exists, the acquiring unit 12 does not need to acquire a new token from the server device 30.

[0025] For example, the transfer unit 14 starts the transfer process in response to an instruction from the acquisition unit 12 that has acquired a token from the server device 30. Alternatively, for example, the transfer unit 14 starts the transfer process in response to an instruction from the acquisition unit 12 that has confirmed that a valid token exists in the storage unit 13. Alternatively, for example, the transfer unit 14 starts the transfer process in response to an instruction input by a user operation.

[0026] The forwarding unit 14 acquires, from the storage unit 13, a token associated with the device 20 that is the communication partner of the first communication unit 11a, and transmits the acquired token from the first communication unit 11a to the device 20. After that, when the forwarding unit 14 receives a message addressed to the server device 30 from the device 20, the forwarding unit 14 forwards the message to the server device 30.

[0027] Furthermore, when the transfer unit 14 receives a message addressed to the device 20 from the server device 30, it transfers the message to the device 20. Note that the transmission of the token from the transfer unit 14 to the device 20 may be performed once immediately before a series of message transfers begins, or may be performed each time a message is transferred.

[0028] The transfer unit 14 ends the series of transfer processes when it receives a notification of the end of message transfer from the device 20 or the server device 30. Furthermore, the transfer unit 14 may autonomously end the series of transfer processes if it does not receive a message from the device 20 or the server device 30 for a certain period of time.

[0029] [Example of device functional configuration] 4 is a diagram illustrating an example of the functional configuration of the device 20 according to the first embodiment. The device 20 according to the first embodiment includes a communication unit 21, an initial setting storage unit 22, a verification unit 23, a setting processing unit 24, and an operation setting storage unit 25.

[0030] The communication unit 21 communicates with the user terminal 10 .

[0031] The initial setting storage unit 22 stores the initial settings of the device 20. Here, the initial settings typically refer to settings that the device 20 has at the time of shipment from the factory. The initial settings include server authentication information and device information.

[0032] The server authentication information includes, for example, at least one of a server certificate of the server device 30 and a public key of the server device 30 .

[0033] The device information includes, for example, the model and serial number of the device 20, the MAC address, and the public key / private key pair of the device 20. The initial settings of the device 20 are set in the initial setting storage unit 22 when the device 20 is manufactured.

[0034] The initial setting storage unit 22 is, for example, a tamper-resistant nonvolatile memory. For example, after powering on, the device 20 enters a state in which it accepts initialization processing based on the initial setting read from the initial setting storage unit 22. After the initialization processing is completed, the device 20 operates based on the initial setting until operational settings are made.

[0035] The verification unit 23 verifies a token received from the user terminal 10 via the communication unit 21. To verify the token, server authentication information stored in the initial setting storage unit 22 is used. To prevent replay attacks by resending verified tokens, information on previously verified tokens may also be used to verify the token in addition to the server authentication information. For example, a sequence number may be assigned to the token, and information on previously verified tokens may be determined based on the sequence number. Specifically, when the verification unit 23 verifies a token, the verification unit 23 stores the sequence number in a non-volatile memory (e.g., the operational setting storage unit 25) of the device 20. Then, at the next token verification, the verification unit 23 determines whether the token to be verified has been verified in the past by comparing the sequence number assigned to the token with the sequence number stored in the non-volatile memory or the like.

[0036] The communication unit 21 and the verification unit 23 may receive and verify the token, for example, when the device 20 receives a predetermined operation. The predetermined operation is, for example, turning on the device 20 while pressing a button, or pressing and holding a button.

[0037] Also, for example, the device 20 in a factory default state may always perform a token reception operation and, when a token is received, verify the token.

[0038] If the verification unit 23 successfully verifies the token, the setting processing unit 24 transmits a message addressed to the server device 30 via the communication unit 21. This message may be encrypted using information included in the token. For example, the token may include an encryption key encrypted with the public key of the device 20, and the communication unit 21 may use the encryption key to encrypt messages exchanged with the server device 30 or to add authentication data to the messages. Alternatively, for example, the communication unit 21 may generate an encryption key for the device 20, encrypt the encryption key with the public key of the server device 30, include the encryption key in the first message that the device 20 transmits to the server device 30, and use this encryption key to protect subsequent messages. In either case, the device 20 and the server device 30 use information that they each possess in advance to protect each other's messages and keep all or part of the messages secret from other communication devices, including the user terminal 10 that forwards the messages, thereby protecting them from attacks such as tampering by other communication devices.

[0039] The device 20 requests settings necessary for subsequent operation from the server device 30. The settings necessary for operation include settings for the device 20 to connect to the network 200, settings specific to the system with which the device 20 cooperates, and the like.

[0040] The settings for connecting to the network 200 include, for example, when the device 20 connects to a Wi-Fi network, the network identifier and password, or a certificate of the device 20 for that network. When the device 20 connects to a cellular network, the settings include the name of the carrier or access point to connect to, the username, the password, etc. In addition, when the IP address, gateway, DNS server information, etc. used by the device 20 are not automatically provided from the network, these may also be provided by the server device 30 as settings for connecting to the network.

[0041] The settings specific to the system with which the device 20 cooperates are typically application settings, and include the identifier and URL of the application server with which the device 20 cooperates, its server certificate, and public key information. Furthermore, for example, the settings specific to the system with which the device 20 cooperates also include the identifier and password of the device 20 used when cooperating with the application server, the certificate of the device 20, and the like.

[0042] If the initial setting storage unit 22 does not have the private key and public key of the device 20, the private key and public key of the device 20 may be generated during communication between the setting processing unit 24 and the server device 30, and the public key may be transmitted from the setting processing unit 24 to the server device 30 and registered in the server device 30. Furthermore, as a result of this, the server device 30 may provide the setting processing unit 24 with a public key certificate of the device 20.

[0043] The operation setting storage unit 25 is, for example, a tamper-resistant non-volatile memory. The operation setting storage unit 25 manages and stores information acquired or generated during communication between the setting processing unit 24 and the server device 30. The device 20 uses the setting information managed and stored by the operation setting storage unit 25 to connect to the network 200 and cooperate with the system.

[0044] [Example of server device functional configuration] 5 is a diagram showing an example of the functional configuration of a server device according to the first embodiment. The server device 30 according to the first embodiment includes a communication unit 31, a generation unit 32, a user information storage unit 33, a device information storage unit 34, and a setting processing unit 35.

[0045] The communication unit 31 communicates with the user terminal 10 .

[0046] The generation unit 32 generates a token (an example of authorization information). Note that the token may have embedded therein information used for verifying the validity of the token on the device 20 side. For example, information generated using a private key of the server device 30 may be embedded in the token.

[0047] The generation unit 32 provides the token to the user terminal 10 via the communication unit 31. Specifically, the generation unit 32 receives a token request from the user terminal 10. The token request includes all or part of the information about the user terminal 10, the user information, and the device information. The generation unit 32 determines whether the token request is valid based on the information included in the token request and the user information stored in the user information storage unit 33. If the token request is valid, the generation unit 32 generates a token for the target device 20 and provides it to the user terminal 10 via the communication unit 31.

[0048] The user information storage unit 33 stores user information used by the generation unit 32 when verifying the validity of a token request from the user terminal 10.

[0049] FIG. 6 is a diagram showing an example of user information in the first embodiment. The user information in the first embodiment includes, for example, a user name, a password, a device in use, and an operation setting. The user name is the name of the user. The password is a password used by the user. The device in use is a device used by the user.

[0050] The operation setting indicates whether operation setting is possible for the device used by the user. If authentication of the user terminal 10 is successful, the generation unit 32 uses the information indicating whether operation setting is possible to determine whether the user of the user terminal 10 is able to perform operation setting of the device 20, and generates authorization information if operation setting of the device 20 is possible.

[0051] The user information is not limited to the example in Fig. 6. For example, the user information may include a user's public key or a user certificate instead of a password. Also, for example, the user information may further include the model and serial number of the user terminal 10 used by the user. Also, for example, only the serial number of the device used may be managed in the user information.

[0052] In any case, the generation unit 32 compares the information provided when receiving a token request from the user terminal 10 with the information held by the user information storage unit 33, and if there is a sufficient match, determines that the token request is legitimate.

[0053] Returning to FIG. 5, the generation unit 32 queries the device information storage unit 34 when, for example, an encryption key for protecting communication with the device 20 is to be encrypted with the public key of the device 20 and embedded in the token.

[0054] The device information storage unit 34 manages, as device information for each device 20, the model and serial number of the device 20 as well as information specific to the device 20 (for example, a MAC address and a public key). The device information storage unit 34 also manages, together with the value of an encryption key used in communications with the device 20, accompanying information (for example, an identifier and expiration date of the encryption key) if such information exists, as device information for each device 20. The device information storage unit 34 also manages, as device information, setting information used when operating the device 20.

[0055] The setting processing unit 35 reads the device information from the device information storage unit 34 and provides the device information to the device 20 via the user terminal 10. The device information is provided after the setting processing unit 35 receives a message sent from the device 20 to the server device 30.

[0056] [Example of communication method] 7 is a sequence diagram showing an example of the communication method according to the first embodiment. First, the device 20 accepts an operation to put the device 20 into an operation setting standby state (step S1). The device 20 enters a state of accepting operation setting processing (standby state) for a certain period of time by a predetermined operation such as a long press of the power button, for example.

[0057] Next, the user terminal 10 transmits the above-mentioned token request to the server device 30 in response to an operation input by the user or the like (step S2). Next, the server device 30 verifies the validity of the message (token request) (step S3). Note that the verification process in step S3 may also determine whether operational settings can be made for the device used by the user. If it is determined whether operational settings can be made, the server device 30 does not issue a token to a device 20 for which operational settings are not permitted.

[0058] Next, if the message is valid, the server device 30 issues a token (step S4). Next, the user terminal 10 presents the token issued in step S4 to the device 20 in an operation setup standby state via the first communication unit 11a (step S5). Next, the device 20 and the server device 30 perform operation setup processing for the device 20 via the user terminal 10 (step S6). The operation setup processing includes, for example, sending and receiving operation setup data necessary for setting up the device 20. Next, when the operation setup processing of step S6 is completed, the server device 30 transmits an operation setup completion notification to the user terminal 10 (step S7).

[0059] As described above, the communication system 100 of the first embodiment includes the device 20, the server device 30, and the user terminal 10. The device 20 includes a setting processing unit 24, a communication unit 21, and an operation setting storage unit 25. When the setting processing unit 24 receives authorization information generated by the server device 30 from the user terminal 10, it executes an operation setting process to set operation settings of the device 20. The communication unit 21 encrypts operation setting data transmitted from the device 20 in the operation setting process and transmits the encrypted data to the user terminal 10. The operation setting storage unit 25 stores the operation settings set in the operation setting process. The server device 30 includes a generation unit 32 and a communication unit 31. When authentication of the user terminal 10 is successful, the generation unit 32 generates authorization information. The communication unit 31 encrypts operation setting data transmitted from the server device 30 in the operation setting process and transmits the encrypted data to the user terminal 10. The user terminal 10 includes an acquisition unit 12, a transfer unit 14, and a communication unit 11. The acquisition unit 12 performs authentication with the server device 30, and if the authentication is successful, acquires authorization information from the server device 30. The transfer unit 14 transfers the authorization information to the device 20, and then transfers operation setting data between the device 20 and the server device 30. When the operation setting is completed, the communication unit 11 receives a completion notification from at least one of the device 20 and the server device 30.

[0060] As a result, the communication system 100 of the first embodiment can prevent a malicious user terminal 10 from making unauthorized settings to the device 20. For example, the communication system 100 of the first embodiment can prevent a device 20 in a factory default state (initial setting state) from accepting a setting process from a trusted user without disclosing the details of the setting to the user, and can also reject settings from an attacker.

[0061] Conventionally, for example, a method using DPP has not been able to prevent unauthorized settings on the device 20 by a malicious user terminal 10 that can read the QR code (registered trademark) of the device 20.

[0062] The trusted users include, for example, field engineers and users receiving infrastructure services who configure individual settings of the device 20 for infrastructure services, such as individual encryption keys and detailed settings of the cloud services to which the device 20 is connected, at the installation site of the device 20.

[0063] For example, in the case of an infrastructure service device 20, only minimum individual information (such as a serial number) is set in the device 20 in a factory-shipped state, and the device 20 does not operate as part of an infrastructure service in this state. According to the first embodiment, the device 20 in a factory-shipped state performs operation setup with the server device 30 if the token received via the user terminal 10 is issued by a valid server device 30 (e.g., a cloud service). At this time, the user terminal 10 only forwards messages between the device 20 and the server device 30, so that the contents of the messages can be prevented from being disclosed to the user terminal 10 (the contents of the messages are kept secret by encryption processing). Then, when the general operation setup is completed, a completion notification is transmitted to the user terminal 10 from at least one of the server device 30 and the device 20.

[0064] (Second embodiment) Next, a second embodiment will be described. In the description of the second embodiment, the same description as in the first embodiment will be omitted, and only differences from the first embodiment will be described. In the second embodiment, a case will be described in which the user terminal 10 has only one network interface.

[0065] [Example of functional configuration of user terminal] Fig. 8 is a diagram showing an example of the functional configuration of a user terminal 10 according to the second embodiment. The user terminal 10 according to the second embodiment includes a communication unit 11, an acquisition unit 12, a storage unit 13, and a transfer unit 14. In the second embodiment, the user terminal 10 includes only one communication unit 11. For example, in a configuration in which the user terminal 10 and the device 20 are connected to the same LAN, and the LAN is connected to a network 200, the user terminal 10 has a configuration as shown in Fig. 8.

[0066] (Third embodiment) Next, a third embodiment will be described. In the description of the third embodiment, the same description as in the first embodiment will be omitted, and only differences from the first embodiment will be described. The generation unit 32 of the server device 30 in the third embodiment stores the message verification result of the token request from the user terminal 10 in non-volatile memory. This makes it possible to later confirm whether a valid token request has been received or whether an invalid token request has been received. The token verification result may be saved together with time information indicating the time when the verification was performed.

[0067] (Fourth embodiment) Next, a fourth embodiment will be described. In the description of the fourth embodiment, the same description as in the first embodiment will be omitted, and only the differences from the first embodiment will be described. When the verification unit 23 of the device 20 of the fourth embodiment receives an unauthorized token, it stores this fact in non-volatile memory. This makes it possible to confirm the fact that an unauthorized token was received later. The record of the reception of an unauthorized token may include time information indicating the time of reception.

[0068] Finally, examples of the hardware configurations of the user terminal 10, the device 20, and the server device 30 according to the first to fourth embodiments will be described.

[0069] [Example of hardware configuration] 9 is a diagram showing an example of the hardware configuration of the main parts of the user terminal 10, device 20, and server device 30 according to the first to fourth embodiments. The user terminal 10, device 20, and server device 30 according to the first to fourth embodiments include a control device 201, a main storage device 202, an auxiliary storage device 203, a display device 204, an input device 205, and a communication device 206. The control device 201, the main storage device 202, the auxiliary storage device 203, the display device 204, the input device 205, and the communication device 206 are connected via a bus 210.

[0070] The user terminal 10, the device 20, and the server device 30 of the first to fourth embodiments may not be provided with some of the above configurations. For example, if the device 20 is a sensor or the like provided as part of an infrastructure service, the display device 204 and the input device 205 may not be provided.

[0071] The hardware configurations of the main parts of the user terminal 10, the device 20, and the server device 30 are similar, so the following description will be given taking the user terminal 10 as an example.

[0072] The control device 201 executes a program read from the auxiliary storage device 203 to the main storage device 202. The main storage device 202 is a memory such as a ROM and a RAM. The auxiliary storage device 203 is a hard disk drive (HDD), a memory card, or the like.

[0073] The display device 204 is, for example, a liquid crystal display. The input device 205 is an interface for operating the user terminal 10. The input device 205 is, for example, a keyboard, a mouse, and buttons provided on the housing of the user terminal 10. The display device 204 and the input device 205 may be realized by a touch panel or the like having a display function and an input function.

[0074] The communication device 206 is an interface for communicating with other devices.

[0075] The programs executed by the user terminal 10, device 20 and server device 30 are provided as computer program products in the form of installable or executable files recorded on computer-readable storage media such as CD-ROMs, memory cards, CD-Rs and DVDs.

[0076] The programs executed by the user terminal 10, the device 20, and the server device 30 may be stored on a computer connected to a network such as the Internet and provided by being downloaded via the network. The programs executed by the user terminal 10, the device 20, and the server device 30 may also be provided via a network such as the Internet without being downloaded.

[0077] The programs for the user terminal 10, the device 20, and the server device 30 may be provided in advance by being stored in a ROM or the like.

[0078] The programs executed by the user terminal 10, the device 20, and the server device 30 have a modular configuration including functions that can be realized by the programs among the functional configurations shown in Figures 2, 4, 5, and 8. As for each function, the control device 201 reads out the program from a storage medium and executes it, and the above-mentioned functional blocks are loaded onto the main memory device 202, in terms of actual hardware. In other words, the above-mentioned functional blocks are generated on the main memory device 202.

[0079] Note that some or all of the functions of the above-described FIGS. 2, 4, 5 and 8 may be realized by hardware such as an IC, rather than by software.

[0080] Furthermore, when each function is realized using a plurality of processors, each processor may realize one of the functions, or may realize two or more of the functions.

[0081] Although several embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be embodied in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their modifications are included within the scope and spirit of the invention, and are also included in the scope of the invention and its equivalents as defined in the claims. [Explanation of symbols]

[0082] 10 User terminal 11 Communications Department 12 Acquisition Department 13 Storage section 14 Transfer Unit 20 devices 21 Communications Department 22 Initial setting storage section 23 Verification Department 24 Setting processing section 25 Operation settings storage section 30 Server device 31 Communications Department 32 Generation part 33 User information storage unit 34 Device information storage unit 35 Setting processing section 100 Communication Systems 200 Network 201 Control device 202 Main storage 203 Auxiliary storage device 204 Display device 205 Input Device 206 Communication Equipment 210 Bus

Claims

1. a device and a user terminal, The user terminal an acquisition unit that performs authentication with a server device, and if the authentication is successful, acquires authorization information from the server device, in which an encryption key for protecting communication with the device is embedded; a transfer unit that transfers, after transferring the authorization information to the device, operation setting data encrypted by the server device using the encryption key and transmitted by the server device to the device; Equipped with The device comprises: an operation setting processing unit that executes an operation setting processing for transmitting and receiving a message encrypted using the encryption key included in the authorization information between the server device and the server device after receiving the authorization information from the user terminal, the operation setting processing including a process of storing the operation setting data transferred from the user terminal in an operation setting storage unit; Equipped with Communication system.

2. The device comprises: a communication unit that transmits information specific to the device to the user terminal; The communication system of claim 1 .

3. The operation setting data includes at least one of setting data for the device to connect to a predetermined network to which the device is connected and setting data for the device to cooperate with a predetermined system to which the device is cooperated. The communication system of claim 1 .

4. The device enters a state of accepting the operation setting process for a certain period of time by a predetermined operation. The communication system of claim 1 .

5. The device comprises: further comprising an initial setting storage unit that stores initial settings of the device; After powering on, the device enters a state in which it is ready to perform initialization processing according to the initial settings. A communication system according to any one of claims 1 to 4.

6. the initial setting includes server authentication information including at least one of a server certificate of the server device and a public key of the server device; The device comprises: a verification unit that uses the server authentication information to verify the validity of the authorization information received from the server device via the user terminal; The communication system according to claim 5 .

7. the authorization information is a token with a sequence number assigned, the operation setting storage unit stores the sequence number of the token used in the operation setting process that has already been executed; the verification unit verifies the validity of the token by comparing a sequence number assigned to the token with a sequence number stored in the operation setting storage unit; 7. The communication system according to claim 6.

8. A communication method for a communication system including a device and a user terminal, comprising: a step of performing authentication between the user terminal and a server device, and if the authentication is successful, obtaining authorization information from the server device, in which an encryption key for protecting communication with the device is embedded; a step in which the user terminal transfers the authorization information to the device, and then transfers operation setting data encrypted by the server device using the encryption key and transmitted to the device; an operation setting process in which, after the device receives the authorization information from the user terminal, the device transmits and receives a message encrypted using the encryption key included in the authorization information to and from the server device, the operation setting process including a process of storing the operation setting data transferred from the user terminal in an operation setting storage unit; A communication method including:

Images