Communication device and control method thereof, and communication system

Abstract

To provide a communication parameter setting processing technique that is highly convenient for users.SOLUTION: A communication device includes: receiving means for receiving a setting request requesting provision of communication parameters for connection to a wireless network from another communication device; determining means for determining a priority for each of the plurality of communication parameters to be provided to the other communication device; and transmitting means for transmitting a setting response to the setting request to the other communication device based on the determined priority. The transmitting means includes the plurality of communication parameters in the setting response in a form that allows the other communication device receiving the setting response to identify the priority for each of the plurality of communication parameters.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] The present invention relates to a communication parameter setting process. [Background technology]

[0002] In recent years, the Wi-Fi (registered trademark) Device Provisioning Protocol (DPP) standard has been established as a technology for setting communication parameters for accessing a wireless network. The DPP standard stipulates that a device called a configurator provides communication parameters to a device called an enrollee (Patent Document 1).

[0003] In the DPP standard, communication parameters are included in a DPP_Configuration_Response frame and sent from the configurator to the enrollee. When the enrollee receives the communication parameters, it forms a wireless network based on the acquired communication parameters if it operates as an access point (AP). If it operates as a station (STA), it connects to the wireless network based on the acquired communication parameters. In addition, in version 2.0 and later of the DPP standard, it is possible to include not just one communication parameter but multiple communication parameters in the DPP_Configuration_Response frame. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] U.S. Patent Application Publication No. 2017 / 0295448 Summary of the Invention [Problem to be solved by the invention]

[0005] However, if the configurator transmits multiple communication parameters, the enrollee does not know which of the multiple communication parameters is best to use. As a result, the enrollee attempts to connect to the network using the multiple communication parameters in sequence (i.e., multiple attempts are made). As a result, it takes a long time to connect to the network, which can be inconvenient for the user.

[0006] The present invention has been made in view of the above problems, and has as its object to provide a communication parameter setting processing technique that is highly convenient for users. [Means for solving the problem]

[0007] In order to solve the above-mentioned problems, a communication device according to the present invention has the following configuration: Connecting to a wireless network Used for a receiving means for receiving a setting request for requesting provision of communication parameters from another communication device; a determining means for determining a priority for each of a plurality of communication parameters to be provided to the other communication device; a transmitting means for transmitting a configuration response to the configuration request to the other communication device based on the determined priority; and The transmission means includes the plurality of communication parameters in the setting response in a format that enables the other communication device that receives the setting response to specify a priority for each of the plurality of communication parameters. [Effects of the Invention]

[0008] According to the present invention, a communication parameter setting processing technique that is highly convenient for users can be provided. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 is a diagram illustrating an overall configuration of a communication system. [Figure 2]FIG. 2 is a diagram illustrating a hardware configuration of a communication device. [Figure 3] 10 is a flowchart of a process executed by a communication device (configurator). [Figure 4] 10 is a flowchart of a process executed by a communication device (enrollee). [Figure 5] FIG. 10 is a sequence diagram between a communication device (configurator) and a communication device (enrollee). [Figure 6] 10 is a flowchart of a process executed by a communication device (configurator). [Figure 7] FIG. 10 is a diagram illustrating an example of a notification format. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, embodiments will be described in detail with reference to the accompanying drawings. Note that the following embodiments do not limit the scope of the invention claimed. Although multiple features are described in the embodiments, not all of these multiple features are necessarily essential to the invention, and multiple features may be combined arbitrarily. Furthermore, in the accompanying drawings, the same reference numerals are used to designate the same or similar components, and redundant explanations will be omitted.

[0011] (First embodiment) As a first embodiment of a communication device according to the present invention, a communication system including communication devices that operate in compliance with the Wi-Fi DPP (Device Provisioning Protocol) standard will be described below. In particular, it is assumed that each communication device complies with the DPP standard version 2.0 or later and is configured to be able to transmit / receive multiple communication parameters in a single DPP_Configuration_Response frame.

[0012] <System configuration and device configuration> 1 is a diagram showing the overall configuration of a communication system, which includes a communication device 101 and a communication device 102.

[0013] The communication device 101 operates as a configurator that complies with the DPP standard. A configurator is a device that provides / transmits communication parameters necessary to connect to or form the wireless network 105 or the wireless network 106. Here, it is assumed that the communication device 101 provides the communication parameters of both the wireless network 105 and the wireless network 106 to the communication device 102. Note that the multiple communication parameters are not limited to two communication parameters for connecting to the wireless network 105 and the wireless network 106, but may be three or more communication parameters including communication parameters linked to other wireless networks.

[0014] The communication parameters are, for example, credentials conforming to the DPP standard, and include information such as a netAccessKey, which is key information required to connect to wireless network 105 or wireless network 106. However, the communication parameters are not limited to this, and may include information such as a PSK (Pre Shared Key) as key information. The communication parameters may also include information on an SSID (Service Set Identification), which is an identifier of wireless network 105 or wireless network 106, or frequency channel. The communication parameters may also include information such as an encryption method or authentication method used in wireless network 105 or wireless network 106, and may also include expiration dates for the communication parameters.

[0015] When the communication device 101, which is a configurator, holds a plurality of communication parameters to provide to the communication device 102, it determines the priority of each communication parameter so as to correspond to the priority of the wireless network to which the communication device 102 will connect. For example, if it is desired to connect to the wireless network 105 compared to the wireless network 106, it determines the priority of the communication parameters for connecting to the wireless network 105 to be higher than the priority of the communication parameters for connecting to the wireless network 106.

[0016] Furthermore, when providing a plurality of communication parameters to the communication device 102, the communication device 101, which is the configurator, notifies the communication device 102 of information that enables the communication device 102 to identify the priority of each of the plurality of communication parameters. For example, the communication device 102 may provide information indicating the priority of the communication parameters together with the plurality of communication parameters. Furthermore, instead of transmitting information indicating the priority, the communication parameters may be transmitted in descending order of priority, allowing the enrollee to identify the priority of the communication parameters.

[0017] On the other hand, communication device 102 operates as an enrollee that complies with the DPP standard. An enrollee is a device whose role is to acquire / receive communication parameters necessary for connecting to wireless network 105 and wireless network 106. Here, it is assumed that communication device 102 receives communication parameters for both wireless network 105 and wireless network 106 from communication device 101. Communication device 101 can also operate as a station (STA), which is a child station that connects to wireless network 105 formed by access point 103 or wireless network 106 formed by access point 104. Note that communication device 102 may also operate as an access point (AP), which is a wireless base station (master station) that forms a wireless network.

[0018] Furthermore, when requesting communication parameters, the communication device 102, which is an enrollee, also notifies role information. This role information indicates the role that the device will play after the communication parameter setting process (also called the sharing process) has been performed. Here, the role indicates a "station" that connects to a wireless network using the acquired communication parameters, or an "access point" that forms a wireless network using the acquired communication parameters. The role may also indicate a "configurator" that provides communication parameters. Here, the communication device 102 operates as a station, so it notifies role information indicating "station."

[0019] Specific examples of the communication device 101 and the communication device 102 include, but are not limited to, access point devices, mobile phones, digital cameras, video cameras, printers, projectors, PCs, PDAs, smartphones, and smartwatches.

[0020] The access point 103 operates, for example, as an access point defined in the DPP standard. Specifically, the access point 103 periodically transmits a beacon including information about the wireless network 105, and also accepts connection requests from other communication devices and allows the other communication devices to connect to the wireless network 105. The access point 103 also operates as an enrollee defined in the DPP standard, and can form the wireless network 105 by acquiring communication parameters from the communication device 101 operating as a configurator. Note that the communication parameters may not be provided by the configurator, but may be set by a user via a UI (user interface).

[0021] Like the access point 103 , the access point 104 can form a wireless network 106 by acquiring communication parameters from the communication device 101 .

[0022] Furthermore, the access points 103 and 104 in this embodiment may be electronic devices (such as printers and digital cameras) that operate as access points defined in the DPP standard and have specific functions.

[0023] Furthermore, wireless network 105 is a wireless network that complies with the IEEE 802.11 series standards and is a network formed by access point 103. Here, IEEE is an abbreviation for The Institute of Electrical and Electronics Engineers. However, wireless network 105 may also be a network formed as a Group Owner that complies with the Wi-Fi Direct standard. It may also be a network that complies with Wireless USB, MBOA, Bluetooth (registered trademark), UWB, ZigBee, NFC, etc. Here, MBOA is an abbreviation for Multi Band OFDM Alliance, and UWB is an abbreviation for Ultra Wide Band. UWB also includes Wireless USB, Wireless 1394, WINET, etc.

[0024] Like the wireless network 105 , the wireless network 106 is a wireless network conforming to the IEEE 802.11 series standard, and is a network formed by the access point 104 .

[0025] 2 is a diagram showing the hardware configuration of the communication device 101. The communication device 102 also has a similar hardware configuration.

[0026] The storage unit 201 is configured with one or more memories such as ROM, RAM, etc., and stores programs for performing various operations described below, and various information such as communication parameters for wireless communication. Note that, in addition to memories such as ROM and RAM, the storage unit 201 may also use storage media such as a flexible disk, a hard disk, an optical disk, a magneto-optical disk, a CD-ROM, a CD-R, a magnetic tape, a non-volatile memory card, or a DVD.

[0027] The control unit 202 is configured with one or more processors such as a CPU or an MPU, and controls the entire communication device 101 by executing a program stored in the storage unit 201. The control unit 202 may control the entire communication device 101 in cooperation with the program stored in the storage unit 201 and an OS (Operating System). The control unit 202 may also include multiple processors such as multi-core processors, and control the entire communication device 101 using the multiple processors. The control unit 202 also controls the function unit 203 to perform predetermined processes such as capturing images, printing, and projection.

[0028] The functional unit 203 is hardware that enables the communication device 101 to execute predetermined processing. For example, if the communication device 101 is a camera, the functional unit 203 is an imaging unit that performs imaging processing. Also, for example, if the communication device 101 is a printer, the functional unit 203 is a printing unit that performs printing processing. Also, for example, if the communication device 101 is a projector, the functional unit 203 is a projection unit that performs projection processing. The data processed by the functional unit 203 may be data stored in the storage unit 201, or may be data communicated with another communication device via a communication unit 206 (described later).

[0029] The input unit 204 receives various operations from the user. The output unit 205 outputs various types of information to the user. Here, the output by the output unit 205 includes at least one of display on a screen, audio output by a speaker, vibration output, and the like. Note that both the input unit 204 and the output unit 205 may be implemented by a single module, such as a touch panel. The output unit 205 also displays given information (for example, a public key) on the screen as a QR code (registered trademark).

[0030] The communication unit 206 controls wireless communication compliant with the IEEE802.11 series standards and IP (Internet Protocol) communication. The communication unit 206 also controls an antenna 207 to transmit and receive wireless signals for wireless communication. The communication device 101 communicates content such as image data, document data, and video data with the communication device 102 via the communication unit 206.

[0031] <Device Operation> 3 is a flowchart of processing executed by the communication device 101, which is a configurator. This flowchart shows the flow of processing that is realized when the control unit 202 reads out and executes a program stored in the storage unit 201 when the communication device 101 is powered on. Note that instead of when the communication device 101 is powered on, this processing may be realized when the communication device 101 enters a predetermined operation mode, such as a communication setting mode, by a user operation or the like, or when a predetermined application, such as a communication setting application, is started.

[0032] At least a part of the flowchart shown in FIG. 3 may be implemented by hardware. When implementing by hardware, for example, a specific compiler may be used to automatically generate a dedicated circuit on an FPGA from a program for implementing each step. FPGA stands for Field Programmable Gate Array. A gate array circuit may also be formed in the same manner as an FPGA and implemented as hardware. It may also be implemented by an ASIC (Application Specific Integrated Circuit). In this case, each block in the flowchart below can be regarded as a hardware block. Multiple blocks may be combined into one hardware block, or one block may be configured as multiple hardware blocks.

[0033] In S301, the communication device 101 performs a process of sharing a public key for authentication (for example, a bootstrapping key defined in the DPP standard). Here, it is assumed that the communication device 102 displays a QR code including the public key for authentication on the output unit 205, and the communication device 101 captures an image of the QR code, thereby sharing the public key for authentication. However, this is not limited to a form in which the communication device 102 displays the QR code on a display or the like.

[0034] In S302, the communication device 101 performs authentication processing using the authentication public key of the communication device 102 acquired in S301. Here, to perform the authentication processing, the communication device 101 transmits an authentication request. Here, the "authentication request" is a DPP_Authentication_Request frame that complies with the DPP standard. The authentication request includes authentication information used in the authentication processing, identification information of the communication device 101, a random number generated by the communication device 101, and a public key for shared key generation (the public key of the communication device 101) that is used to generate a shared key. Here, the "authentication information" is specifically a hash value of the authentication public key of the communication device 102 that is included in the QR code. The identification information of the communication device 101 is specifically a hash value of the authentication public key of the communication device 101. The random number is used for authentication when an authentication response, which will be described later, is received.

[0035] The public key for generating the shared key (the public key of the communication device 101) is used as a key that serves as the source of the shared key generated between the communication device 101 and the communication device 102. The shared key is generated based on, for example, the Elliptic Curve Diffie-Hellman (ECDH) method. The method for generating the shared key is not limited to the ECDH method, and other public key cryptography methods may be used.

[0036] Upon receiving the authentication request, the communication device 102 performs a process to verify the device that sent the authentication request. This determination is made using the authentication information included in the authentication request. That is, the communication device 102 calculates a hash value of the authentication public key of the communication device 102, compares the calculated hash value with the hash value (authentication information) included in the authentication request, and determines that the verification is successful if the two match. The hash function used to calculate the hash value at this time is defined in the DPP standard and is the same hash function that the communication device 101 used to calculate the hash value.

[0037] The communication device 101 that sent the authentication request waits for an authentication response. Here, the "authentication response" is a DPP_Authentication_Response frame that complies with the DPP standard. The authentication response includes the communication device 102's public key for generating a shared key, a random number generated by the communication device 102, and tag information. The tag information is a hash value that uses the random number or the like included in the authentication request sent by the communication device 101, encrypted with the above-mentioned shared key. If an authentication response is not received within a predetermined time after starting to wait for an authentication response in S302, the communication parameter setting process may be terminated.

[0038] If an authentication response is received within a predetermined time, the communication device 101 authenticates the communication device 102 based on the information included in the authentication response. Specifically, the communication device 101 first generates a shared key using the communication device 101's private key for shared key generation and the communication device 102's public key for shared key generation. The communication device 101's public key for shared key generation is a public key for the communication device 101 that corresponds to the communication device 101's private key for shared key generation used when the communication device 101 generates the shared key. Furthermore, the communication device 102's public key for shared key generation is a public key that corresponds to the communication device 102's private key for shared key generation used when the communication device 102 generates the shared key. By using such a combination of keys, the communication device 101 can generate a shared key that is the same as the shared key generated by the communication device 102. Furthermore, if the public keys used to generate the shared key are not correctly exchanged between communication device 101 and communication device 102 by sending and receiving the authentication request and authentication response described above, the same shared key cannot be generated.

[0039] Next, the communication device 101 decrypts the tag information included in the authentication response with the generated shared key and checks whether the random number, etc. included in the authentication request can be correctly decrypted. If the decryption is correct, the communication device 101 determines that the authentication has been successful and certifies the communication device 102 as an enrollee. On the other hand, if the decryption is not correct, the communication device 101 determines that the authentication has failed. Note that a case where the decryption is not correct would be, for example, a case where the same shared key could not be generated. If the authentication has failed, the communication device 102 notifies an error. On the other hand, if the authentication is successful, the communication device 101 transmits an authentication confirmation to the communication device 102. Here, the "authentication confirmation" is a DPP_Authentication_Confirm frame that complies with the DPP standard and includes tag information. The tag information is the random number included in the authentication response transmitted by the communication device 102, encrypted by the communication device 101 with the shared key.

[0040] In S303, the communication device 101 waits for a setting request from the communication device 102 and receives the setting request transmitted from the communication device 102. The time for waiting for the setting request may be a predetermined time from when the authentication confirmation is transmitted, or may be a predetermined time from when the imaging unit is started in S301. Here, the "setting request" is a DPP_Configuration_Request frame conforming to the DPP standard. This setting request includes device information and role information of the communication device 102. The device information is, for example, the device name of the communication device 102. The role information is information indicating the role after receiving communication parameters, and is, for example, "station," "access point," or "configurator." Here, the role information indicates "station." The information included in the setting request is encrypted with the shared key used by the communication device 102 to encrypt the tag information when the authentication response was transmitted.

[0041] In S304, the communication device 101 determines whether there are multiple communication parameters that can be provided. That is, it determines whether there are multiple communication parameters that will allow the communication device 102 to operate as a station. If it is determined that there are not multiple communication parameters (only one exists) (No in S304), the process proceeds to S305, and if it is determined that there are multiple communication parameters (Yes in S304), the process proceeds to S306. Note that if there are no communication parameters that can be provided, the communication parameter setting process ends.

[0042] In S305, the communication device 101 transmits a configuration response including one communication parameter it holds to the communication device 102, which is the enrollee. Here, the "configuration response" is a DPP_Configuration_Response frame that complies with the DPP standard. The configuration response transmitted by the communication device 101 includes the communication parameters, the expiration date of the communication parameters, a public key dedicated to the configurator of the communication device 101, role information, and provided channel information. Note that the communication parameters include a credential that complies with the DPP standard as well as a public key included in the authentication response from the communication device 102. Furthermore, the information included in the configuration response is encrypted with a shared key generated with the communication device 102. Thereafter, the communication parameter configuration process ends.

[0043] In S306, the communication device 101 determines the priority of each of a plurality of communication parameters that can be provided. Here, the priority refers to the priority of the order of attempts when the communication device 102 attempts to connect to a wireless network. Here, the communication device 101 determines the priority based on the radio wave strength received from each of the access points 103 and 104. The radio wave strength is indicated by the RSSI (Received Signal Strength Indication) value of the signal received from the access point. For example, if the radio wave strength of the access point 103 is stronger than the radio wave strength of the access point 104, the priority of the communication parameters for connecting to the access point 103 is set higher than the priority of the communication parameters for connecting to the access point 104.

[0044] Generally, since the configurator and the enrollee are close to each other, the radio wave strength at the communication device 101 and the radio wave strength at the communication device 102 are almost the same. Therefore, although it is assumed here that the radio wave strength is a value measured by the communication device 101, it may also be a value measured by the communication device 102. In the latter case, the communication device 101 acquires the value measured by the communication device 102 from the communication device 102 in advance.

[0045] In S307, the communication device 101 transmits a setting response including information indicating the priority (priority determined in S306) for each of the plurality of communication parameters to the communication device 102 that is the enrollee.

[0046] Through the above processing, the communication device 101, which is the configurator, can send a configuration response to the communication device 102, which is the enrollee receiving the configuration response, in a form that allows the communication device 102 to identify the priority of each of the multiple communication parameters.

[0047] Fig. 7 is a diagram showing an example of a notification format indicating priority. Fig. 7 is an example of a DPP Configuration Object included in a configuration response sent from a configurator to an enrollee. The DPP Configuration Object is written in JSON (JavaScript Object Notation) format.

[0048] 7 shows two exemplary communication parameters included in the setting response. A "priority" field is added to the end of each communication parameter, and a character string or value indicating the priority is specified.

[0049] The first communication parameter is set to a priority of "1," and the second communication parameter is set to a priority of "2." Here, it is assumed that the smaller the set value, the higher the priority. Therefore, the communication device 102 determines that the first communication parameter has a higher priority than the second communication parameter. By using such a format, it is possible to indicate the priority of each of multiple communication parameters.

[0050] Although an example in which a "priority" field is provided to indicate priority has been described above, priority may be indicated by other means. For example, it may be stored in another item within the DPP Configuration Object. For example, it may be stored in a "Service" field defined as an option. Furthermore, rather than including information indicating priority within the DPP Configuration Object, notification may be provided by including a separate object in the configuration response. For example, the configuration response may be configured to include an object that describes information indicating the order of priority for multiple communication parameters. Note that the information indicating the order of priority may be, for example, information in which a newly defined "index" field that identifies the DPP Configuration Object is arranged in order of priority.

[0051] 4 is a flowchart of processing executed by the communication device 102, which is an enrollee. When the communication device 102 is powered on, the control unit 202 reads and executes a program stored in the storage unit 201, thereby realizing the processing. Note that, instead of when the communication device 102 is powered on, the processing may be started by the same processing as that of the communication device 101 described using FIG. 3.

[0052] In S401, the communication device 102 performs a process of sharing a public key for authentication. Here, the communication device 102 displays, on the output unit 205, a QR code including the public key for authentication.

[0053] In S402, the communication device 102 performs authentication processing. First, to perform the authentication processing, the communication device 102 waits for an authentication request transmitted by the communication device 101. Note that if the communication device 102 does not receive an authentication request within a predetermined time after starting to wait for the authentication request in S402, the communication parameter reception processing may be terminated.

[0054] Upon receiving the authentication request, the communication device 101 performs a verification process for the device that sent the authentication request. This verification is performed using the authentication information included in the authentication request. That is, the communication device 102 calculates a hash value of the authentication public key of the communication device 102, compares the calculated hash value with the hash value (authentication information) included in the authentication request, and determines that the verification is successful if the two match.

[0055] If the verification is successful, the communication device 102 generates a shared key using both the public key for generating the shared key of the communication device 101 and the private key for generating the shared key of the communication device 102, in the same manner as the communication device 101 generated the shared key. Then, the communication device 102 transmits an authentication response. Note that if the verification fails, the communication device 102 does not transmit an authentication response. However, instead, if the verification fails, the communication device 102 may transmit an authentication response indicating that the verification failed.

[0056] The communication device 102 that has transmitted the authentication response waits for authentication confirmation to be transmitted from the communication device 101. The time for waiting for authentication confirmation may be a predetermined time from the transmission of the authentication response, or may be a predetermined time from the display of the QR code in S401.

[0057] When the communication device 102 receives the authentication confirmation and can correctly decrypt the tag information included in the authentication confirmation using the shared key that the communication device 102 generated, the communication device 102 determines that the authentication is successful. If the communication device 102 determines that the authentication is successful, the communication device 102 recognizes the communication device 101 that sent the authentication request as the configurator. On the other hand, if the communication device 102 does not determine that the authentication is successful (i.e., if the authentication fails), the communication device 102 does not recognize the communication device 101 as the configurator and ends the communication parameter reception process.

[0058] In S403, the communication device 102 transmits a setting request to the communication device 101, which is the configurator. In S404, the communication device 102 receives a setting response from the communication device 101, which is the configurator.

[0059] In S405, the communication device 102 determines whether the received setting response contains multiple communication parameters. For example, if multiple DPP Configuration Objects exist, it determines that multiple communication parameters exist. Alternatively, if information indicating priority is included, it determines that multiple communication parameters exist. If it determines that multiple communication parameters do not exist (only one exists) (No in S405), the process proceeds to S406, and if it determines that multiple communication parameters exist (Yes in S405), the process proceeds to S407.

[0060] In S406, the communication device 102 connects to the wireless network using the acquired communication parameter. Meanwhile, in S407, the communication device 102 first identifies the priority of each of the multiple communication parameters. Specifically, the communication device 102 checks the information indicating the priority included in the setting response. Then, the communication device 102 attempts to connect to the wireless network according to the priority.

[0061] Here, it is assumed that the parameter set includes two communication parameters: communication parameter A for connecting to wireless network 105 and communication parameter B for connecting to wireless network 106. For example, if communication parameter A has a higher priority, an attempt is made to connect to wireless network 105 using communication parameter A first. Once connection to wireless network 105 is complete, the communication parameter setting process ends. Note that if connection to wireless network 105 cannot be made using communication parameter A, an attempt is made to connect to wireless network 106 using communication parameter B, which has the next highest priority.

[0062] As described above, by the process described with reference to FIG. 4, the communication device 102, which is an enrollee, can identify the priority of each of a plurality of communication parameters and attempt to connect to the wireless network in accordance with the priority.

[0063] FIG. 5 is a sequence diagram between the communication device 101 (configurator) and the communication device 102 (enrollee).

[0064] When the communication device 102 receives an instruction to receive parameters from a user (S501), it displays a QR code on the output unit 205 (S502) and waits for an authentication request. If the authentication request is not received within a predetermined time, the device may end the wait for the authentication request. If the communication device 102 does not have a display or the like for displaying the QR code, but the QR code is printed on a label or the like attached to the case or an accessory, S502 is skipped. In other words, when the communication device 102 receives an instruction to receive parameters (S501), it waits for an authentication request without performing the process in S502.

[0065] On the other hand, when the communication device 101 receives an instruction to transmit parameters from the user (S503), it activates the imaging unit to capture an image of the QR code displayed by the communication device 102 (or printed on a label or the like) (S504). Then, the imaging unit of the communication device 101 captures the image of the QR code, and the communication device 101 acquires the information indicated by the QR code (S505).

[0066] The communication device 101, which has acquired the information indicated by the QR code, generates and transmits an authentication request, and the communication device 102 receives this authentication request (S506). The communication device 102 verifies the contents of the received authentication request (S507). If it is determined that the communication device 101 that transmitted the authentication request is the device that captured the QR code, the communication device 102 generates and transmits an authentication response (S508). After transmitting the authentication response to the communication device 101, the communication device 102 waits for an authentication confirmation to be transmitted from the communication device 101.

[0067] Upon receiving the authentication response, the communication device 101 verifies the contents of the authentication response (S509). If the communication device 101 determines that the authentication is successful, it transmits an authentication confirmation to the communication device 102 (S510). Upon receiving the authentication confirmation from the communication device 101 in S510, the communication device 102 verifies the contents of the authentication confirmation (S511). If the communication device 102 can correctly decrypt the tag information using the shared key that it generated, it determines that the authentication is successful. If it determines that the authentication is successful, the communication device 102 transmits a setting request to request communication parameters (S512). Having transmitted the setting request, the communication device 102 waits for a setting response to be transmitted from the communication device 101.

[0068] Upon receiving the setting request, the communication device 101 confirms that there are multiple communication parameters that can be provided (S513). Next, the communication device 101 determines the priority of each communication parameter according to the radio wave strength of the access point (S514). Then, the communication device 101 includes information indicating the priority in a setting response (S515). The communication device 101 transmits the setting response including the information indicating the priority to the communication device 102 (S516).

[0069] Upon receiving the setting response, the communication device 102 attempts to connect to the wireless network based on the communication parameters and information indicating the priority included in the setting response (S517).

[0070] As described above, according to the first embodiment, when the communication device 101, which is a configurator, transmits a plurality of communication parameters, it also notifies the communication device 102, which is an enrollee, of information indicating priority. This enables the communication device 102 to attempt to connect to a wireless network according to the priority. Therefore, for example, it is possible to control the communication device 102 so that it preferentially connects to a wireless network with stronger radio wave strength (i.e., a more stable connection). This makes it possible to prevent a decrease in user convenience, such as having to redo communication settings.

[0071] (Variation) In the above description, the priority of communication parameters is determined based on radio wave strength, but this is not limiting. For example, in order to control the communication device 102 to preferentially connect to a wireless network with higher security, the communication device 101 may determine the priority of each communication parameter according to the security method of the communication parameters. Specifically, the priority may be determined according to the level of security of the security method determined by the AKM (Authentication and Key Management Type) stored in the communication parameters. For example, the priority may be set in the following order of AKM: "dot1x", "dpp", "sae", and "psk".

[0072] Note that the priority may be determined not only in order of security level but also in order of security methods defined for each communication device. Furthermore, when the radio wave strengths associated with each communication parameter are equal (or within a predetermined range), the priority may be determined according to the security level.

[0073] Furthermore, in order to control the communication device 102 to preferentially connect to a wireless network that was formed more recently, the communication device 101 may determine the priority of each communication parameter according to the date and time when configuration information was provided to the access point. For example, the priority of the communication parameters corresponding to each access point may be increased in order of the most recent date and time when the configurator provided configuration information to each access point.

[0074] Furthermore, in order to control the communication device 102 to preferentially connect to a wireless network that can be connected for a longer period of time, the communication device 101 may determine the priority of each communication parameter according to the expiration date included in the communication parameter. For example, the priority of the communication parameter may be determined according to information indicating the expiration date included in the communication parameter (for example, the expiration date of AKM=dpp). It is preferable to assign higher priority to communication parameters in order of the expiration date further in the future (longer validity period).

[0075] Furthermore, in order to control the communication device 102 so that it preferentially connects to a wireless network that is more suited to its own communication capabilities, the communication device 101 may determine the priority of each communication parameter according to capability information that indicates the communication capabilities of the communication device 102. For example, the capability information is an AKM supported by the enrollee. Here, it is preferable to give a higher priority to communication parameters that are the same as the AKM supported by the enrollee. Note that if there are multiple supported AKMs, the one with higher security may be given a higher priority.

[0076] (Second embodiment) In the second embodiment, when multiple communication parameters are included in a configuration response, a configuration in which the multiple communication parameters are notified without explicitly including information indicating priority in the configuration response will be described. That is, the priority is not explicitly included in the configuration response, and the enrollee is allowed to specify the priority. Note that the overall system configuration and device configuration are the same as those in the first embodiment, and therefore will not be described here.

[0077] <Device Operation> 6 is a flowchart of the processing executed by the communication device (configurator) in the second embodiment. Note that the processing from the process of sharing the authentication public key to the process of determining the priority (S601 to S606) is the same as that in FIG. 3 (S301 to S306), and therefore a description thereof will be omitted. After the communication device 101 determines the priority of each communication parameter (S606), the process proceeds to S607.

[0078] In S607, the communication device 101 includes multiple communication parameters in the configuration response in order of priority. Specifically, the communication device 101 arranges multiple DPP Configuration Objects in a predetermined storage area in the configuration response in order of priority, starting from the top of the predetermined storage area. The communication device 101 then transmits the configuration response to the enrollee communication device 102.

[0079] When connecting to a wireless network, the communication device 102 uses the multiple DPP Configuration Objects stored in a predetermined storage area of ​​the setting response in order from the top to establish a connection to the wireless network.

[0080] As described above, according to the second embodiment, the communication device 101, which is the configurator, includes multiple communication parameters in the configuration response in order of priority. This allows the enrollee to specify the priority of each of the multiple communication parameters without explicitly including information indicating the priority in the configuration response. This makes it possible to suppress an increase in the processing load required to generate the configuration response.

[0081] (Variation) In the above-described embodiments, a configuration has been described in which information for setting communication parameters is exchanged between devices using an image of a QR code (registered trademark). However, instead of capturing an image of a QR code (registered trademark), wireless communication such as NFC or Bluetooth (registered trademark) may be used. Also, wireless communication such as IEEE802.11ad or TransferJet (registered trademark) may be used. It should be noted that the QR code read by the communication device 102 is not limited to a QR code displayed on a display unit. For example, the communication device 102 may capture an image of a QR code printed on a label or the like attached to the housing or accessories of the communication device 101. Alternatively, the communication device 102 may capture an image of a QR code recorded and displayed in the instruction manual or packaging of the communication device 101. Furthermore, instead of a QR code, a barcode or other two-dimensional code may be displayed. Furthermore, the information is not limited to image-encoded information such as a QR code, and may be information in a format recognizable by a user (such as a character string).

[0082] In the above description, the communication device 101 displays a QR code (a public key for authentication), and the communication device 102 captures an image of the QR code, thereby sharing the public key for authentication. However, the communication device 102 may display the QR code, and the communication device 101 may capture an image of the QR code.

[0083] The disclosure of this specification includes the following communication device, control method, communication system, and program. (Item 1) A communication device, a receiving means for receiving a setting request from another communication device requesting provision of communication parameters for connection to a wireless network; a determining means for determining a priority for each of a plurality of communication parameters to be provided to the other communication device; a transmitting means for transmitting a configuration response to the configuration request to the other communication device based on the determined priority; and The transmitting means includes the plurality of communication parameters in the setting response in a form that enables the other communication device that receives the setting response to specify a priority for each of the plurality of communication parameters. A communication device comprising: (Item 2) The transmitting means includes in the setting response information indicating a priority for each of the plurality of communication parameters together with the plurality of communication parameters. 2. The communication device according to item 1, (Item 3) Information indicating the priority of each of the plurality of communication parameters is included in the corresponding communication parameter. 3. The communication device according to item 2. (Item 4) The transmission means controls the order of the communication parameters in the setting response based on the priority of each of the communication parameters. 2. The communication device according to item 1, (Item 5) the plurality of communication parameters are communication parameters for connecting to a wireless network formed by different access points, The determining means determines a priority for each of the plurality of communication parameters based on radio wave strength of each of the plurality of wireless networks corresponding to the plurality of communication parameters. 5. The communication device according to any one of items 1 to 4, (Item 6) The determining means determines a priority for each of the plurality of communication parameters based on the security scheme of each of the plurality of communication parameters. 5. The communication device according to any one of items 1 to 4, (Item 7) the plurality of communication parameters are communication parameters for connecting to a wireless network formed by different access points, The determining means determines a priority for each of the plurality of communication parameters based on a date and time when configuration information was provided to each of the plurality of access points corresponding to the plurality of communication parameters. 5. The communication device according to any one of items 1 to 4, (Item 8) The determining means determines a priority for each of the plurality of communication parameters based on the expiration date of each of the plurality of communication parameters. 5. The communication device according to any one of items 1 to 4, (Item 9) The communication device further includes an acquisition unit for acquiring capability information relating to the communication capabilities of the other communication device, The determining means determines a priority for each of the plurality of communication parameters based on the communication capabilities of the other communication device. 5. The communication device according to any one of items 1 to 4, (Item 10) The communication device performs communication in accordance with the IEEE 802.11 series standard, the configuration request is a DPP_Configuration_Request frame conforming to the DPP (Device Provisioning Protocol) standard version 2.0 or later, The configuration response is a DPP_Configuration_Response frame that complies with the DPP standard version 2.0 or later. 10. The communication device according to any one of items 1 to 9, (Item 11) A method for controlling a communication device, comprising: a receiving step of receiving a setting request from another communication device requesting provision of communication parameters for connection to a wireless network; determining a priority for each of a plurality of communication parameters to be provided to the other communication device; a transmitting step of transmitting a configuration response to the configuration request to the other communication device based on the determined priority; Including, In the transmitting step, the plurality of communication parameters are included in the setting response in a form that enables the other communication device receiving the setting response to specify a priority for each of the plurality of communication parameters. A control method comprising: (Item 12) A communication system including a first communication device and a second communication device, the first communication device, a first transmitting means for transmitting a setting request to the second communication device to request provision of communication parameters for connection to a wireless network; a first receiving means for receiving a setting response to the setting request from the second communication device; a control means for attempting to connect to a wireless network based on communication parameters included in the setting response; and the second communication device, a second receiving means for receiving the setting request from the first communication device; a determining means for determining a priority for each of a plurality of communication parameters to be provided to the first communication device; a second transmitting means for transmitting the configuration response to the first communication device based on the determined priority; and the second transmission means includes the plurality of communication parameters in the configuration response in a form that enables the first communication device that receives the configuration response to identify a priority for each of the plurality of communication parameters; The control means attempts to connect to the wireless network using the plurality of communication parameters included in the setting response in descending order of priority for each of the plurality of communication parameters. A communication system comprising: (Item 13) A program for causing a computer having a communication unit to operate as the communication device according to any one of items 1 to 10.

[0084] (Other Examples) The present invention can also be realized by supplying a program that realizes one or more functions of the above-described embodiments to a system or device via a network or a storage medium, and having one or more processors in the computer of the system or device read and execute the program.The present invention can also be realized by a circuit (e.g., ASIC) that realizes one or more functions.

[0085] The invention is not limited to the above-described embodiments, and various changes and modifications can be made without departing from the spirit and scope of the invention. Accordingly, the following claims are appended to apprise the public of the scope of the invention. [Explanation of symbols]

[0086] 101, 102 communication device; 103, 104 access point; 105, 106 wireless network

Claims

1. A communication device, a receiving means for receiving a setting request from another communication device requesting the provision of communication parameters used for connecting to a wireless network; a determining means for determining a priority for each of a plurality of communication parameters to be provided to the other communication device; a transmitting means for transmitting a configuration response to the configuration request to the other communication device based on the determined priority; and The transmitting means includes the plurality of communication parameters in the setting response in a form that enables the other communication device that receives the setting response to specify a priority for each of the plurality of communication parameters. A communication device comprising:

2. The transmitting means includes in the setting response information indicating a priority for each of the plurality of communication parameters together with the plurality of communication parameters.

2. The communication device according to claim 1.

3. The setting response includes information associating each of the communication parameters constituting the plurality of communication parameters with information indicating the corresponding priority.

3. The communication device according to claim 2.

4. The setting response is a setting response in which information indicating a first communication parameter is followed by information indicating a second communication parameter having a lower priority than the first communication parameter.

2. The communication device according to claim 1.

5. the plurality of communication parameters are communication parameters for connecting to a wireless network formed by different access points that comply with the IEEE (Institute of Electrical and Electronics Engineers) 802.11 standard, The determining means determines a priority for each of the plurality of communication parameters based on radio wave strength of each of the plurality of wireless networks corresponding to the plurality of communication parameters.

2. The communication device according to claim 1.

6. The determining means determines a priority for each of the plurality of communication parameters based on the security scheme of each of the plurality of communication parameters.

2. The communication device according to claim 1.

7. the plurality of communication parameters are communication parameters for connecting to a wireless network formed by different access points that comply with the IEEE (Institute of Electrical and Electronics Engineers) 802.11 standard, The determining means determines a priority for each of the plurality of communication parameters based on a date and time when configuration information was provided to each of the plurality of access points corresponding to the plurality of communication parameters.

2. The communication device according to claim 1.

8. The determining means determines a priority for each of the plurality of communication parameters based on the expiration date of each of the plurality of communication parameters.

2. The communication device according to claim 1.

9. The communication device further includes an acquisition unit for acquiring capability information relating to the communication capabilities of the other communication device, The determining means determines a priority for each of the plurality of communication parameters based on the communication capabilities of the other communication device.

2. The communication device according to claim 1.

10. The communication device performs communication in accordance with the IEEE 802.11 series standard, the configuration request is a DPP_Configuration_Request frame conforming to the DPP (Device Provisioning Protocol) standard version 2.0 or later, The configuration response is a DPP_Configuration_Response frame that complies with the DPP standard version 2.0 or later.

10. The communication device according to claim 1.

11. A method for controlling a communication device, comprising: a receiving step of receiving, from another communication device, a setting request for providing communication parameters used for connecting to a wireless network; determining a priority for each of a plurality of communication parameters to be provided to the other communication device; a transmitting step of transmitting a configuration response to the configuration request to the other communication device based on the determined priority; Including, In the transmitting step, the plurality of communication parameters are included in the setting response in a form that enables the other communication device receiving the setting response to specify a priority for each of the plurality of communication parameters. A control method comprising:

12. A communication system including a first communication device and a second communication device, the first communication device, a first transmitting means for transmitting a setting request to the second communication device to request provision of communication parameters used for connection to a wireless network; a first receiving means for receiving a setting response to the setting request from the second communication device; a control means for attempting to connect to a wireless network based on communication parameters included in the setting response; and the second communication device a second receiving means for receiving the setting request from the first communication device; determining means for determining a priority for each of a plurality of communication parameters to be provided to the first communication device; a second transmitting means for transmitting the configuration response to the first communication device based on the determined priority; and the second transmission means includes the plurality of communication parameters in the setting response in a form that enables the first communication device that receives the setting response to specify a priority for each of the plurality of communication parameters; The control means attempts to connect to the wireless network using the plurality of communication parameters included in the setting response in descending order of priority for each of the plurality of communication parameters. A communication system comprising:

13. A program for causing a computer having a communication unit to operate as the communication device according to any one of claims 1 to 9.

Images