Communication device, communication method, and program

Abstract

To perform authentication and encryption by using specific authentication methods in respective links when performing communication with the other communication device through a plurality of frequency channels and operating in a specific frequency channel.SOLUTION: A communication device can execute authentication using a Wi-Fi Protected Access (WPA) 2 system and authentication using a WPA3 system, and when performing communication with the other communication device while establishing links with the other communication device through a plurality of frequency channels, executes authentication by using the WPA3 system based on the fact that at least one frequency channel of the plurality of frequency channels is a frequency channel included in a specific frequency band.SELECTED DRAWING: Figure 7

Description

Technical Field

[0001] The present invention relates to a communication device that performs wireless communication.

Background Art

[0002] The wireless LAN (Local Area Network) technology has been standardized by IEEE802.11, which is a standardization organization for wireless LAN technology. The standards for wireless LAN technology include IEEE802.11 / a / b / g / n / ac / ax, etc. Here, IEEE is an abbreviation for Institute of Electrical and Electronics Engineers.

[0003] In IEEE802.11ax described in Patent Document 1, in addition to a high peak throughput of up to 9.6 gigabits per second (Gbps) by OFDMA, an improvement in communication speed under congested conditions is realized. Note that OFDMA is an abbreviation for Orthogonal Frequency-Division Multiple Access.

[0004] In order to further improve throughput, a Task Group for formulating the IEEE802.11be standard has been established as a successor standard to IEEE802.11ax.

[0005] Conventionally, an AP (Access Point) of IEEE802.11 has established a connection with a STA (Station) via a single frequency channel and performed communication. In the IEEE802.11be standard, Multi-Link communication is being considered in which one AP simultaneously establishes a plurality of links with a STA via a plurality of frequency channels including the 2.4 GHz band, 5 GHz band, and 6 GHz band and performs communication.

[0006] On the other hand, standardization by the Wi-Fi Alliance, which guarantees the interoperability of wireless LAN technologies, plays an important role, and the standardization of WPA3, a more secure authentication program for wireless LAN technology, is currently underway. WPA stands for Wi-Fi Protected Access.

[0007] Furthermore, in wireless LAN communication, encryption is performed using PTK, an encryption key for unicast communication, and GTK, an encryption key for broadcast or multicast communication. Here, PTK stands for Pairwise Transient Key, and GTK stands for Group Transient Key.

[0008] Furthermore, in Multi-Link communication, which is being considered under the 11be standard, the use of a common PTK is being considered for each link that establishes a connection. [Prior art documents] [Patent Documents]

[0009] [Patent Document 1] Japanese Patent Publication No. 2018-50133 [Overview of the project] [Problems that the invention aims to solve]

[0010] In multi-link communication, a common PTK is used for each link, requiring authentication and encryption for each link to be performed using the same security method. Furthermore, when communicating in the 6GHz band, it is stipulated that authentication and encryption should be performed using WPA3. However, for example, when a communication device and other communication devices establish multiple links simultaneously and communicate via a 6GHz frequency channel and a frequency channel other than the 6GHz band, there is a risk that different security methods may be used for authentication and encryption between each link.

[0011] In view of the above issues, the present invention aims to perform authentication using a specific security method when the communication device is operating on a specific frequency channel while communicating with other communication devices after multiple links have been established between the communication device and other communication devices. [Means for solving the problem]

[0012] To achieve the above objective, the communication device of the present invention is at least W i-Fi Protected Access (WPA A communication device capable of performing authentication using )2 and authentication using WPA3, The system includes a display control means that performs control to display a setting screen on a display means for receiving a user's selection regarding the wireless communication settings of the communication device, and a construction means that constructs a network having multiple links, including a first link in a first frequency band and a second link in a second frequency band, wherein when the first frequency band is the 6GHz band, the user can select Open, which uses WPA3 or Opportunistic Wireless Encryption (OWE) as the authentication method for the second link, and authentication methods not supported in the 6GHz band cannot be selected. .

[0013] Furthermore, the communication device of the present invention is at least W i-Fi Protected Access (WPA )2 of Authentication used and WPA3 of A communication device capable of operating as an access point that can perform the authentication used, before The system includes a display control means that performs control to display a setting screen on a display means for receiving selections from a user regarding the wireless communication settings of the communication device, and a construction means that constructs a network having a plurality of links including a first link in a first frequency band and a second link in a second frequency band, wherein the first frequency band is the 6GHz band, and on the setting screen, the user As the authentication method in the second link mentioned above The aforementioned WPA3 of Selectable Furthermore, authentication methods not supported in the aforementioned 6GHz band cannot be selected. . [Effects of the Invention]

[0016] According to the present invention, when a communication device communicates with other communication devices via multiple frequency channels, authentication and encryption can be performed using a specific authentication method when operating on a specific frequency channel. [Brief explanation of the drawing]

[0017] [Figure 1]It is a diagram showing the configuration of the network in the present invention. [Figure 2] It is a diagram showing the hardware configuration of the communication device in the present invention. [Figure 3] It is a diagram showing the functional configuration of the communication device in the present invention. [Figure 4] It is an example of an element showing the RSNE assigned according to the security method determined by the communication device 101 in the present invention. [Figure 5] It is an example of an element showing the Extended Capability assigned according to the security method determined by the communication device 101 in the present invention. [Figure 6] It is an example of an element showing the RSNXE assigned according to the security method determined by the communication device 101 in the present invention. [Figure 7] It is a flowchart showing the process in which the communication device 101 in the present invention determines the security method. [Figure 8] An example of the graphical user interface display in the present invention. [Figure 9] An example of the graphical user interface display in the present invention. [Figure 10] An example of the graphical user interface display in the present invention. [Figure 11] An example of the graphical user interface display in the present invention. [Figure 12] An example of the graphical user interface display in the present invention. [Figure 13] An example of the graphical user interface display in the present invention. [Figure 14] An example of the graphical user interface display in the present invention. [Figure 15] An example of the graphical user interface display in the present invention. [Figure 16] An example of the graphical user interface display in the present invention. [Figure 17] An example of the graphical user interface display in the present invention. [Figure 18] An example of a graphical user interface display in the present invention. [Figure 19] An example of a graphical user interface display in the present invention. [Figure 20] An example of a graphical user interface display in the present invention. [Figure 21] An example of a graphical user interface display in the present invention. [Figure 22] An example of a graphical user interface display in the present invention. [Figure 23] An example of a graphical user interface display in the present invention. [Figure 24] This flowchart shows the process by which the communication device 101 in the present invention determines the security method. [Modes for carrying out the invention]

[0018] Embodiments of the present invention will be described in detail below with reference to the attached drawings. Note that the configurations shown in the following embodiments are merely examples, and the present invention is not limited to the illustrated configurations.

[0019] (Configuration of the wireless communication system) Figure 1 shows the network configuration in which the communication device 102 according to this embodiment participates. The communication device 102 is a station (STA) that participates in the network 100. The communication device 101 is an access point (AP) that builds the wireless network 100. The communication device 101 can communicate with the communication device 102.

[0020] Communication device 101 and communication device 102 can each perform wireless communication in accordance with the IEEE 802.11be (EHT) standard. IEEE stands for Institute of Electrical and Electronics Engineers. Communication device 101 and communication device 102 can communicate in the 2.4 Hz, 5 GHz, and 6 GHz frequency bands. The frequency band used by each communication device is not limited to these, and different frequency bands, such as the 60 GHz band, may be used. Furthermore, communication device 101 and communication device 102 can communicate using bandwidths of 20 MHz, 40 MHz, 80 MHz, 160 MHz, and 320 MHz. The bandwidth used by each communication device is not limited to these, and different bandwidths, such as 240 MHz and 4 MHz, may be used.

[0021] Communication devices 101 and 102 can implement multi-user (MU) communication, which multiplexes signals from multiple users, by performing OFDMA communication compliant with the IEEE 802.11be standard. OFDMA stands for Orthogonal Frequency Division Multiple Access. In OFDMA communication, a portion of the divided frequency band (RU, Resource Unit) is allocated to each STA so as not to overlap, and the carrier waves of each STA are orthogonal. Therefore, an AP can communicate in parallel with multiple STAs within a defined bandwidth.

[0022] While communication devices 101 and 102 are stated to be compliant with the IEEE 802.11be standard, they may also be compliant with legacy standards that precede the IEEE 802.11be standard. Specifically, communication devices 101 and 102 may be compliant with at least one of the IEEE 802.11a / b / g / n / ac / ax standards. In addition to the IEEE 802.11 series standards, they may also be compliant with other communication standards such as Bluetooth®, NFC, UWB, ZigBee, and MBOA. UWB stands for Ultra Wide Band, and MBOA stands for Multi Band OFDM Alliance. NFC stands for Near Field Communication. UWB includes wireless USB, wireless 1394, and WiNET. They may also be compliant with wired communication standards such as wired LAN. Specific examples of communication device 101 include, but are not limited to, wireless LAN routers and personal computers (PCs). Furthermore, the communication device 101 may be an information processing device such as a wireless chip capable of performing wireless communication compliant with the IEEE 802.11be standard. Specific examples of the communication device 102 include, but are not limited to, cameras, tablets, smartphones, PCs, mobile phones, video cameras, and headsets. The communication device 102 may also be an information processing device such as a wireless chip capable of performing wireless communication compliant with the IEEE 802.11be standard.

[0023] Each communication device can communicate using bandwidths of 20MHz, 40MHz, 80MHz, 160MHz, and 320MHz.

[0024] Furthermore, communication devices 101 and 102 perform Multi-Link communication by establishing links and communicating via multiple frequency channels. In the IEEE 802.11 series standard, the bandwidth of each frequency channel is defined as 20 MHz. Here, a frequency channel is a frequency channel defined in the IEEE 802.11 series standard, which defines multiple frequency channels in each frequency band: 2.4 GHz, 5 GHz, 6 GHz, and 60 GHz. Note that by bonding with adjacent frequency channels, a bandwidth of 40 MHz or more may be used in a single frequency channel. For example, communication device 101 can establish a link 103 with communication device 102 via a first frequency channel in the 2.4 GHz band and communicate. In parallel with this, communication device 102 can establish a link 104 with communication device 101 via a second frequency channel in the 5 GHz band and communicate. In this case, the communication device 102 performs Multi-Link communication, maintaining a second link 104 via a second frequency channel in parallel with link 103 via a first frequency channel. By establishing multiple links via multiple frequency channels simultaneously with the communication device 102 in this way, the communication device 101 can improve the throughput of communication with the communication device 102. In this embodiment, link 103 is a 20MHz connection on 6 channels in the 2.4GHz band, and its link number is set to 1. Link 104 is a 320MHz connection on 113 channels in the 6GHz band, and its link number is set to 2.

[0025] For example, communication device 101 and communication device 102 may establish a third link in the 5GHz band, in addition to link 103 in the 2.4GHz band and a second link 104 in the 6GHz band. Alternatively, links may be established via multiple different channels within the same frequency band. For example, a 6-channel link in the 2.4GHz band may be established as the first link, and in addition, a 1-channel link in the 2.4GHz band may be established as the second link. It is also acceptable for links with the same frequency band and links with different frequency bands to be mixed. For example, communication device 101 and communication device 102 may establish a 6-channel link 103 in the 2.4GHz band, a 1-channel link in the 2.4GHz band, and a 149-channel link in the 5GHz band. By establishing multiple connections with communication device 102 at different frequencies, communication device 101 can establish communication with communication device 102 on other bands even when one band is congested, thereby preventing a decrease in throughput and communication delays.

[0026] Note that while the wireless network 100 in Figure 1 consists of one access point (AP) and one service station (STA), the number and placement of APs and STAs are not limited to these. For example, one additional STA may be added to the wireless network shown in Figure 1. In this case, the frequency band of each link established, the number of links, and the frequency bandwidth are not restricted.

[0027] When performing multi-link communication, communication device 101 and communication device 102 divide a single piece of data and transmit it to the other device via multiple links.

[0028] Furthermore, communication devices 101 and 102 may perform MIMO (Multiple-Input And Multiple-Output) communication. In this case, communication devices 101 and 102 have multiple antennas, and one sends different signals from each antenna using the same frequency channel. The receiving side simultaneously receives all signals arriving from multiple streams using multiple antennas, separates the signals from each stream, and decodes them. By performing MIMO communication in this way, communication devices 101 and 102 can communicate more data in the same amount of time compared to when MIMO communication is not performed. In addition, when performing multi-link communication, communication devices 101 and 102 may perform MIMO communication on some links.

[0029] In this embodiment, communication devices 101 and 102 are assumed to support the WPA (Wi-Fi Protected Access) security standard, as well as the WPA2 and WPA3 standards. WPA, WPA2, and WPA3 are standards for authenticating the peer device and encrypting communication with the peer device. Since communication devices 101 and 102 support the WPA3 standard, they can use SAE (Simultaneous Authentication of Equals), a method for sharing encryption keys in the WPA3 standard. Furthermore, since there is no need to consider interoperability with existing communication devices when communicating at 6GHz, the Wi-Fi Alliance has decided to use WPA3 for authentication and encryption of 6GHz communication. In addition, WPA3 uses AES-CCMP or AES-GCMP as the encryption method, rather than TKIP or WEP.

[0030] Figure 2 shows an example of the hardware configuration of the communication device 101 in this embodiment. The communication device 101 includes a storage unit 201, a control unit 202, a function unit 203, an input unit 204, an output unit 205, a communication unit 206, and an antenna 207. Note that there may be multiple antennas.

[0031] The memory unit 201 is composed of one or more memories such as ROM and RAM, and stores various information such as computer programs for performing various operations described later, and communication parameters for wireless communication. ROM stands for Read Only Memory, and RAM stands for Random Access Memory. In addition to memories such as ROM and RAM, the memory unit 201 may also use storage media such as flexible disks, hard disks, optical disks, magneto-optical disks, CD-ROMs, CD-Rs, magnetic tapes, non-volatile memory cards, and DVDs. Furthermore, the memory unit 201 may have multiple memories.

[0032] The control unit 202 is composed of one or more processors, such as a CPU and an MPU, and controls the entire communication device 101 by executing a computer program stored in the memory unit 201. Alternatively, the control unit 202 may control the entire communication device 101 in cooperation with the computer program stored in the memory unit 201 and the OS (Operating System). The control unit 202 also generates data and signals (wireless frames) to be transmitted in communication with other communication devices. Note that CPU stands for Central Processing Unit, and MPU stands for Micro Processing Unit. Furthermore, the control unit 202 may be equipped with multiple processors, such as a multi-core processor, and the entire communication device 101 may be controlled by multiple processors.

[0033] Furthermore, the control unit 202 controls the functional unit 203 to perform predetermined processes such as wireless communication, imaging, printing, and projection. The functional unit 203 is the hardware that enables the communication device 101 to perform predetermined processes.

[0034] The input unit 204 receives various operations from the user. The output unit 205 outputs various information to the user via a monitor screen or speaker. Here, the output from the output unit 205 may be a display on the monitor screen, audio output via a speaker, vibration output, etc. Furthermore, both the input unit 204 and the output unit 205 may be implemented in a single module, such as a touch panel. In addition, the input unit 204 and the output unit 205 may be integrated with the communication device 101 or may be separate components.

[0035] The communication unit 206 controls wireless communication in accordance with the IEEE 802.11be standard. In addition to the IEEE 802.11be standard, the communication unit 206 may also control wireless communication in accordance with other IEEE 802.11 series standards, or control wired communication such as wired LAN. The communication unit 206 controls the antenna 207 to transmit and receive signals for wireless communication generated by the control unit 202.

[0036] Furthermore, if the communication device 101 supports NFC, Bluetooth, or other standards in addition to the IEEE 802.11be standard, it may control wireless communication in accordance with these communication standards. Also, if the communication device 101 can perform wireless communication in accordance with multiple communication standards, it may be configured to have separate communication units and antennas corresponding to each communication standard. The communication device 101 communicates data such as image data, document data, and video data with the communication device 101 via the communication unit 206. The antenna 207 may be configured separately from the communication unit 206, or it may be configured as a single module together with the communication unit 206.

[0037] Antenna 207 is an antenna capable of communication in the 2.4GHz, 5GHz, and 6GHz bands. In this embodiment, the communication device 101 has one antenna, but it may have three antennas. Alternatively, it may have different antennas for each frequency band. Furthermore, if the communication device 101 has multiple antennas, it may have a communication unit 206 corresponding to each antenna.

[0038] Furthermore, communication device 102 has the same hardware configuration as communication device 101.

[0039] Figure 3 shows a block diagram of the functional configuration of the communication device 101 in this embodiment. The communication device 102 has a similar configuration. Here, the communication device 101 is assumed to include a wireless LAN control unit 301. Note that the number of wireless LAN control units is not limited to one; there may be two, three or more, etc. The communication device 101 further includes a frame generation unit 302, a transmission time control unit 303, a beacon reception control unit 304, a UI control unit 305 and a storage unit 306, and a wireless antenna 307.

[0040] The wireless LAN control unit 301 comprises an antenna and circuit for sending and receiving wireless signals with other wireless LAN devices, and a program for controlling them. The wireless LAN control unit 301 performs wireless LAN communication control based on frames generated by the frame generation unit 302 in accordance with the IEEE 802.11 standard series.

[0041] The frame generation unit 302 generates a wireless control frame to be transmitted by the wireless LAN control unit 301. The content of the wireless control generated by the frame generation unit 302 may be constrained by settings stored in the storage unit 305. It may also be changed by user settings from the UI control unit 305. The information of the generated frame is sent to the wireless LAN control unit 301 and transmitted to the communication partner.

[0042] The communication method determination unit 303 determines the communication method to be used when communicating with the other party based on the received frame received from the wireless LAN control unit 301 and the setting information in the UI control unit 305. It also transmits the determined communication method to the authentication method determination unit 306. After determining the communication method, the wireless LAN control unit 301 communicates with the other device according to the determined communication method.

[0043] The authentication method determination unit 304 determines the authentication method for the other device based on the information from the communication method determination unit 303 and the settings information in the UI control unit 305. The wireless LAN control unit 301 authenticates the other device based on the determined authentication method.

[0044] The UI control unit 305 includes hardware related to a user interface, such as a touch panel or buttons, for receiving operations on the AP by a user (not shown) of the AP, and a program to control them. The UI control unit 305 also has functions for presenting information to the user, such as displaying images or outputting audio.

[0045] The memory unit 306 is a storage device that may consist of ROM and RAM, etc., for storing the program and data on which the AP operates.

[0046] Figure 4 shows an RSNE (Robust Security Network element) as defined in IEEE 802.11. The RSNE is stored in a management frame compliant with IEEE 802.11.

[0047] The Element ID field 401 indicates that the element is RSNE. Therefore, its value is 48.

[0048] The Pairwise Cipher Suite Count field 405 indicates the number of supported cipher schemes. The specific value is shown in the Pairwise Cipher Suite List field 406. For example, if it supports CCMP-128, it would be 00-0F-AC-04. If the Pairwise Cipher Suite Count field 405 indicates support for multiple schemes, for example, if it is set to 2, then multiple consecutive 506s will be used. For example, if it supports CCMP-128 and GCMP-128, it would be 00-0F-AC-04 followed by 00-0F-AC-08. This order can be reversed. There can be any number of supported schemes.

[0049] The AKM Suite Count field 407 indicates the number of supported authentication methods. The specific value is shown in the AKM Suite List field 408. In this embodiment, since only WPA3-SAE is assigned to the RSNE, the AKM Suite Count field 407 is set to 1, and the AKM Suite List field 408 is set to 00-0F-AC-08, which indicates SAE. Note that this value can be any value defined in WPA3 or later. That is, if an authentication method that uses SHA-384 hashing in SAE is added to 00-0F-AC-14, it may be shown in addition to the above. Also, 00-0F-AC-09, which performs FT (Fast Transition) in SAE, may be included. However, since only WPA3 is supported, 00-0F-AC-02 and 00-0F-AC-06, which indicate PSK, are not included.

[0050] Figure 5 shows an Extended Capability as defined in IEEE 802.11. Extended Capabilities are stored in a management frame that conforms to IEEE 802.11.

[0051] The fields shown here, from the beginning, are the Element ID field 501, the Length field 502, and the Extended Capabilities field 503.

[0052] The Extended Capabilities field 503 includes the SAE Password Identifiers In Use subfield 504 and the SAE Password Identifiers Used Exclusively subfield 505. These fields are enabled when using Password IDs, which allow setting a different password for each user, when building a network with the same SSID. For example, if a portion of the built network uses Password IDs, the SAE Password Identifiers In Use subfield 504 is enabled. If the entire built network uses Password IDs, both subfields 504 and 505 are enabled.

[0053] These values ​​may be enabled, for example, when building a network that uses 6GHz via Multi-Link in addition to an existing network. For instance, by making a Password ID mandatory when connecting to a network that includes 6GHz via Multi-Link communication, it becomes possible to enforce a connection using WPA3 corresponding to the Password ID. To make a Password ID mandatory, one possible approach is to provide a bit that ensures compatible devices always connect in a specific way, and then set that bit.

[0054] For example, when building a network that includes 6GHz using Multi-Link communication, the SAE Password Identifiers In Use subfield 504 may always be enabled. Using Password IDs increases the confidentiality of passwords, thus improving security. Therefore, by always enabling Password IDs when using Multi-Link communication that includes 6GHz, the communication device 102 can build a more secure network. Conversely, the STA can also control the connection of APs that are building a network that includes 6GHz using Multi-Link communication while SAE Password Identifiers In Use is disabled, treating them as untrustworthy and not connecting. Similarly, APs may also control the connection of STAs that do not support Password IDs, treating them as untrustworthy and not connecting.

[0055] Figure 6 shows RSNXE (RSN Extension element) as defined in IEEE 802.11. RSNXE is stored in a management frame compliant with IEEE 802.11.

[0056] The fields shown here, from the beginning, are the Element ID field 601, the Length field 602, and the Extended RSN Capabilities field 603.

[0057] The SAE hash-to-element subfield 606 indicates that the device supports the H2E (Hash to Element) method of SAE authentication as defined in WPA3. The SAE-PK subfield 607 indicates that the device supports the SAE-PK (SAE Public Key) method of SAE authentication.

[0058] SAE hash-to-element is one of the authentication methods of SAE, which allows parameters that should be exchanged offline to be calculated in advance. This prevents side-channel attacks that infer calculated values ​​based on calculation time, thereby enhancing security.

[0059] Therefore, for example, when building a network that includes 6GHz in Multi-Link communication, it is advisable to always enable the SAE hash-to-element subfield 606 or the SAE-PK subfield 607. Thus, by always enabling SAE hash-to-element when including 6GHz in Multi-Link communication, the communication device 102 can build a more secure network. Conversely, the communication device 102 can determine that an AP that is building a network including 6GHz in Multi-Link communication while SAE hash-to-element is disabled is untrustworthy and will not connect to it. Conversely, for the AP, if an STA that does not support SAE hash-to-element connects, it can determine that the STA is untrustworthy and will not connect to it.

[0060] Furthermore, SAE-PK is one of the SAE authentication methods, and it is a method that allows STA to verify whether it is attempting to connect to a legitimate AP. If the AP that STA is trying to establish a connection with is a fake AP, the STA can verify the value and determine that it is a fake AP. This contributes to improving security in public Wi-Fi. Therefore, by always enabling SAE-PK when Multi-Link includes 6GHz, the communication device 102 can build a more secure network. Conversely, the communication device 102 can control the connection so as to not trust APs that are building a network using Multi-Link communication even if SAE-PK is disabled. Moreover, for APs, if an STA that does not support SAE-PK requests a connection, the AP can control the connection so as to not trust that STA.

[0061] Furthermore, regarding the Password ID, SAE hash-to-element, and SAE-PK mentioned above, the AP and STA connection determination criteria may be set so that a connection is only made if one of these conditions is met, and no connection is made if none of them are met.

[0062] (Process flow) (Embodiment 1) Using Figure 7, the control unit 202 executes a program stored in the memory unit 201 of the communication device 101 to control the system so that authentication and encryption are performed using WPA3 when 6GHz is selected as the frequency band for performing Multi-Link communication. The communication device 101 is assumed to have at least a wireless LAN control unit capable of Multi-Link communication.

[0063] The flowchart in Figure 7 starts when the communication device 101 establishes a network or when a user instructs it to change the network settings.

[0064] First, the communication device 101 displays a wireless settings screen to the user (S701). The screen displayed at this time will be described later using Figures 8 to 19. Next, it determines whether 6GHz is selected as the frequency band for communication in the settings items on the screen (S702). In Figure 8, "Basic (6GHz)" is selected, so in S702, it can be determined that 6GHz is selected. The determination method for S702 from Figure 9 onwards will be described later. If it is determined in S702 that the 6GHz setting screen is selected, the GUI settings will allow only WPA3 and OWE to be selected as security methods (S710). That is, Beacon, Probe Response, and Association Response are sent to the AKM Suite List field 408 included in RSNE, either only WPA3-SAE or including WPA-EAP.

[0065] An example of the GUI at this time is shown in Figure 8. Figure 8 shows the screen for configuring a network at 6GHz. Since authentication using WPA3 is mandatory for communication in the 6GHz band, WPA3 is displayed as the security method shown in Figure 8. In addition, it is stipulated that authentication using WPA / WPA2 and OPEN is not performed in the 6GHz band. Therefore, only OPEN(AES), WPA3-SAE, and WPA3-EAP are displayed as selectable wireless authentication and encryption methods. The display method at this time is not limited to this. For example, instead of OPEN(AES), it may be expressed as OWE, OPEN (with encryption), OPEN(OWE), OWE (encrypted communication without password), OWE(OPEN), etc. OWE (Opportunistic Wireless Encryption) is one of the security methods that makes it possible to encrypt communication even in environments where passwords are not used. Therefore, security can be improved compared to conventional OPEN, which does not encrypt the content of the communication.

[0066] WPA3-SAE may also be expressed using alternative methods. For example, it may be expressed as WPA3-Personal, WPA3, SAE, or WPA3(AES). WPA3-EAP may also be expressed using alternative methods. For example, it may be expressed as WPA3-Enterprise, WPA3, or WPA3-Enterprise(192bit). WPA3-Enterprise and WPA3-Enterprise(192bit) may be given as separate options.

[0067] As an option for the authentication method shown in Figure 8, only a portion of the authentication methods shown in Figure 8 may be displayed. For example, only WPA3-SAE may be provided as an option. In this case, on the 6GHz settings screen, the display may not show an option corresponding to WPA3 as in Figure 8, and encryption may be performed based on a predetermined encryption method. The options for the authentication method shown in Figure 8 may be further increased. For example, WPA3-SAE(H2E), WPA3-SAE-PK, WPA3-SAE(Password ID), WPA4, etc. may be included as options. However, WEP, WPA-TKIP, WPA-AES, WPA2-TKIP, WPA2-AES, and methods representing equivalent methods should not be provided as options or should be displayed in a way that prevents selection.

[0068] In S702, if it is determined that the screen is not the 6GHz settings screen, it is determined whether or not it is the settings screen for Multi-Link communication (S703). As explained using Figure 8, the determination in S703 is, for example, whether or not "Basic (Multi)" is selected in the top tab. If it is determined in S703 that the screen is not the settings screen for Multi-Link communication, the GUI will display a selection of wireless authentication and encryption methods, including WPA2 and earlier methods in addition to WPA3 and OWE (S713). Also, beacons, probe responses, and association responses, including WPA2-AES, are sent to the AKM Suite List field 408 included in the RSNE in Figure 4.

[0069] Figure 9 shows an example of the GUI when S703 determines that it is not a settings screen for performing Multi-Link communication. In Figure 9, "Basic (2.4GHz)" is selected as the network settings screen to be built, indicating that it is a screen for setting up a 2.4GHz network. In this case, if it is a screen for setting up a 2.4GHz network, or a screen for building a single network, S703 determines that it is not a settings screen for performing Multi-Link communication. When S703 determines that it is not a settings screen for performing Multi-Link communication, as shown in Figure 9, it displays options for selecting wireless authentication and encryption methods other than OPEN (AES), WPA3-SAE, and WPA3-EAP, such as OPEN and WPA2 or earlier. In other words, when S703 determines that it is not a settings screen for performing Multi-Link communication, S713 displays options including WPA2 and earlier authentication methods that can be selected.

[0070] As shown in Figure 9, the authentication method display options may be changed depending on the functions of the AP. For example, if the AP does not support EAP, WPA2-EAP(AES), WPA3-EAP(AES), and WPA2 / WPA3-EAP(AES) may be removed from the options shown in Figure 9.

[0071] For example, if AP does not support Personal, only OPEN and EAP may be displayed. Alternatively, options other than OPEN may be displayed. The notation (TKIP / AES) or (AES) is not required. Also, the notation for WPA2-PSK / WPA3-SAE may be different. For example, it could be WPA2 / WPA3 or WPA2 / PA3-Personal. Similarly, WPA3-SAE could be WPA3, WPA3-Personal or WPA3-SAE(Personal).

[0072] OPEN(AES) may be different. For example, OPEN(OWE), OWE, and WPA / WPA2-PSK may be labeled as MIX. Also, the notation WPA / WPA2 / WPA3 may be used. This may be labeled as WPA-MIX.

[0073] Furthermore, as shown in Figure 10, the selection of "Basic (Multi)" may indicate that this is a settings screen for performing Multi-Link communication. In other words, as shown in Figure 10, the selection of "Basic (Multi)," which means performing Multi-Link communication, indicates that this is a settings screen for performing Multi-Link communication in S703. At this time, it is determined whether or not there is a possibility that at least one link will include a frequency channel operating in the 6GHz band (S704). The determination in S704 is made by, for example, whether the 6GHz frequency band is specified in the frequency band of the channel to be set for each Link, as shown in Figure 10, or whether a specific channel in the 6GHz frequency band is specified. For example, in Figure 10, "2.4GHz Auto" is selected for Link1 and "5GHz Auto" is selected for Link2. In this case, it can be seen that even with Multi-Link, it will not operate at 6GHz. In other words, from Figure 10, it can be seen that Multi-Link communication in the 2.4GHz and 5GHz bands is selected, but Multi-Link communication in the 6GHz band will not be performed. In this case, S704 determines that there is no possibility of including a frequency channel operating at 6GHz. On the other hand, in Figure 11, "2.4GHz Auto" is selected for Link 1 and "6GHz Auto" is selected for Link 2. In this case, the S704 determines that 6GHz is included as a channel that operates in Multi-Link mode. Furthermore, even when the channel is set to "Auto" and can operate in any band, as shown in Figure 12, it may be determined that there is a possibility of operating at 6GHz.

[0074] If it is determined that operation at 6GHz is not possible (No in S704), the system will display options including WPA2 and earlier methods (S713). The display method in this case will be as shown in Figure 10, for example. The explanation of the authentication and encryption method options is the same as in Figure 9 above, so it will be omitted here. Figure 10 is the Multi-Link communication settings screen, but since communication using the 6GHz frequency band is not selected, WPA3 is displayed as an authentication method option in addition to WPA2 and earlier authentication methods.

[0075] If it is determined that 6GHz may be included, check whether there is already a connected STA (S705). Note that the check in S705 may or may not be performed immediately before S701. If there is no STA to establish a connection with (No in S705), control the system to display only OPEN (AES) and WPA3 (S710). The selection of authentication and encryption methods is the same as explained in Figure 8 above, so it will be omitted here.

[0076] If there is an STA establishing a connection at the time of the configuration update (Yes in S705), it is determined whether the STA establishing the connection is using an authentication / encryption method older than WPA2 (S706). If it is determined in S706 that the connection is established using WPA3 or later, only WPA3 will be displayed as an option (S710). If it is determined in S706 that the connection is established using a method older than WPA2, selecting 6GHz after the configuration change will build the network only with WPA3, which may prevent STAs that have already established a connection using a method older than WPA2 from reconnecting. Therefore, a warning as shown in Figure 13 is displayed (S707). If "OK" is pressed to acknowledge the warning (Yes in S708), the STA that has established a connection is disconnected, and only WPA3 will be displayed as an option (S710). Note that disconnection from the STA that has established a connection may also be performed when the "Settings" button is pressed (S711), as described later. If "OK" is not pressed in the warning shown in Figure 13, and instead "Cancel" is pressed or the screen is simply closed (No in S708), the settings will be changed to create a network that does not include 6GHz (S709). S709 might change the 6GHz selected in Figure 11 to 5GHz as shown in Figure 10. Note that in S707-S709, you may choose to create a network separate from the existing network, i.e., the network that has already established a connection with STA. In this case, the authentication / encryption method will always be displayed as WPA3. The existing network is managed on a separate screen.

[0077] Examples of this case are shown in Figures 14 and 15. At stage S703, the settings screen shown in Figure 14 is displayed. If the user selects to operate at 6GHz (Yes in S704), the system determines whether an STA has already established a connection on the existing network (S705). If an STA has already established a connection, a warning is displayed (S707), and the system transitions to Figure 15. The warning displayed in S707 is a confirmation such as, "Are you sure you want to build a new network?". In other words, S707 confirms with the user that a network different from the existing network will be built. If the user acknowledges the warning and presses "OK", the settings for "Network 1" shown in Figure 14 remain the same, and a new "Network 2" is built, with the 6GHz band added, displaying the settings screen shown in Figure 15. In Figure 14, the 6GHz option was not checked in Network 1, but in Figure 15, the network is "Network 2" and the 6GHz band is checked. In other words, by the user agreeing to build a network different from the existing network, a 6GHz network corresponding to network 2 is built in addition to the existing network (2.4GHz / 5GHz). Also, since it operates at 6GHz in Figure 15, the displayed authentication and encryption methods are limited to OPEN (AES) and WPA3-SAE. That is, Beacon, Probe Response, and Association Response are sent to the AKM Suite List field 408 included in the RSNE, either with WPA3-SAE only, or with WPA-EAP included. Alternatively, when applying the present invention to the communication device 102, it is attached to the RSNE of the Probe Request or Association Request.

[0078] Once the communication device 101 has established a network using WPA3-SAE, it waits for a connection request from the peer device. Alternatively, if the present invention is applied to the communication device 102, it will search for a peer device and send a connection request to a peer device that meets the criteria. Here, a connection request refers to a Probe Request or an Association Request.

[0079] When the communication device 101 receives a connection request from the peer device (S712), it determines that the peer device is requesting a Multi-Link connection and that it is requesting a WPA3 connection (S716). Specifically, it checks whether the AKM Suite List field 408 of the Probe Request or Association Request received in S712 contains information indicating that WPA3 is supported. If it is determined in S716 that the peer device is requesting a Multi-Link connection but is not requesting a WPA3 connection, the connection is rejected (S717). At this point in S717, an alternative network may be recommended. Alternatively, if a Multi-Link connection is requested but the connection only includes 2.4GHz and 5GHz, the process may proceed to authentication for a WPA2 connection request. However, in this case, any subsequent request to increase to 6GHz will always be rejected.

[0080] Furthermore, as mentioned above, if a Password ID, SAE hash-to-element, and SAE-PK are required for connections including 6GHz in Multi-Link communication, these may be used as connection approval conditions in addition to WPA3 determination. When the present invention is applied to the communication device 102, when searching for an AP, connection requests will only be sent to APs that construct a network satisfying the above conditions.

[0081] If the connection request from the STA meets the conditions, the communication device 101 proceeds with STA authentication (S718). If authentication is successful in S718 (Yes in S719), the communication device connects with the peer device and starts communication (S720). If authentication is unsuccessful (No in S719), the connection is rejected (S717). Possible ways to reject the connection in S717 include setting the Status Code to Failure in the Association Response.

[0082] After S713, pressing the settings button establishes a network using the configured authentication and encryption method (S714). Here, we assume that WPA2-PSK / WPA3-SAE is selected.

[0083] In S713, the AKM Suite List field 408 of the RSNE shown in Figure 4 includes the value 00-0F-AC-08, which indicates support for SAE, as well as the values ​​00-0F-AC-02 and 00-0F-AC-06, which indicate support for PSK. 00-0F-AC-02 indicates that SHA-128 is used as the hash function for PSK, and 00-0F-AC-06 indicates that SHA-256 is used as the hash function. Either one of these may be included.

[0084] After establishing the network, wait for the other device to request a connection (S715). When the other device requests a connection, proceed with authentication (S718). If authentication is successful (Yes in S719), connect and start communication (S720). If authentication fails (No in S719), reject the connection (S717).

[0085] According to this embodiment, when multi-link communication includes 6GHz, the display is controlled to authenticate with WPA3 on both links, making it possible to maintain communication limited to WPA3 when communicating on 6GHz. Furthermore, when the 6GHz band is not included, communication is also possible with WPA2, allowing existing devices that do not support WPA3 to participate in the network and communicate. In addition to the above, other methods of displaying on the GUI are also possible. Below is an example of the setting screen for an AP that can build multiple networks.

[0086] Figure 16 shows an example of the GUI for an AP that can build multiple networks. The network type is displayed on the left side of the screen. For example, in Wireless LAN Advanced Settings (2.4GHz), options including WPA2 and earlier security methods, as well as Open, are displayed for building a Single Link network. On the other hand, as shown in Figure 16, selecting Wireless LAN Advanced Settings (2.4+6) indicates that a Multi-Link network will be built using 2.4+6GHz. In this case, since Multi-Link communication using the 6GHz frequency band is selected, only OWE and WPA3 are displayed as selectable options, and WPA2 and earlier security methods, as well as Open, are not displayed.

[0087] Figures 17 and 18 show an example of the AP's GUI when the frequency band is determined during the operation mode selection. In Figure 16, the frequency band was determined in the radio channel, but in Figures 17 and 18, the frequency band is determined in the operation mode.

[0088] As shown in Figure 17, if 2.4GHz+5GHz is selected as the wireless operating mode, the S704 can determine that it will not operate at 6GHz. In other words, although Multi-Link communication is selected, it is indicated that Multi-Link communication will be performed without using 6GHz, so the security method options displayed include WPA2 and Open.

[0089] As shown in Figure 18, if 5GHz+6GHz is selected as the wireless operating mode, S704 determines that it will operate on 6GHz. In other words, it indicates that Multi-Link communication will be performed using 6GHz, so the display will show only OWE and WPA3 as selectable options, and security methods older than WPA2 and Open will not be displayed. Note that the frequency channels selected for Multi-Link may, for example, be two from 6GHz, or one from 2.4GHz and two from 5GHz.

[0090] Figures 19 and 20 show an example of an AP UI where the screen for setting the frequency band used for Multi-Link communication and the screen for setting security are displayed on separate screens.

[0091] In Figure 19, the 6GHz option is checked in the Multi-Link settings screen, so the S704 determines that it will operate at 6GHz in Multi-Link mode. Figure 20 shows an example of what happens when the system transitions to the security method settings screen in this case. Because it is determined that the system will operate at 6GHz in Multi-Link mode, the Security settings screen displays only OWE and WPA3 as selectable options, and does not display WPA2 or earlier security methods or Open. Note that if the 6GHz option is not checked in Figure 19, and it is determined that the system will not operate at 6GHz in Multi-Link mode, the security method options will include WPA3, WPA2, and Open.

[0092] Figure 21 shows an example of the UI when a pop-out appears when selecting a security method. The method for selecting the frequency band is the same as in Figures 9-19. When selecting a security method, the options may be displayed in a pop-out, as shown in Figure 21. If Multi-Link communication including 6GHz is selected, only OWE and WPA3 will be displayed as options. On the other hand, if the selection for Multi-Link communication does not include 6GHz, the security method options will include WPA3, WPA2, and Open.

[0093] Figure 22 shows an example of a UI that controls the selection of a specific security method by graying it out. For example, if Multi-Link communication including 6GHz is selected, only WPA3 can be selected, and security methods older than WPA2 are grayed out and cannot be selected.

[0094] Figure 23 shows an example of the UI used when determining the wireless channel to be used when selecting a wireless function. For example, in Figure 23, if 2.4GHz+5GHz is selected, the S704 determines that it will not operate in the 6GHz band and displays security options including WPA3, WPA2, and Open. On the other hand, if 2.4GHz+6GHz is selected, the S704 determines that it will perform Multi-Link communication including 6GHz and displays only OWE and WPA3 as selectable options.

[0095] In this way, security can be improved by limiting the security methods that can be selected by the user through the UI during network construction. Furthermore, it eliminates the use of older authentication and encryption methods in 6GHz bands where older authentication and encryption methods are prohibited.

[0096] Furthermore, even if Multi-Link is selected in the UI, the security method options provided may not be changed, and the communication device may automatically switch security methods when actually building the network. For example, when building multiple networks simultaneously, suppose WPA2 / 3 is selected in the UI. Networks that do not use 6GHz with Multi-Link may operate with WPA2 / 3, while networks that use 6GHz with Multi-Link may operate with WPA3 only. In this case, the option to use only WPA2 may be removed when 6GHz is selected with Multi-Link, or the option to use only WPA2 may be disabled for all networks. In this case as well, using Multi-Link will guarantee a connection with a high level of security.

[0097] (Embodiment 2) This embodiment describes a case where authentication and encryption are controlled to use WPA3 when 6GHz is selected in Multi-AP communication.

[0098] Figure 24 illustrates the processing flow when 6GHz is selected in Multi-AP communication, as the control unit 202 executes a program stored in the memory unit 201 of the communication device 101.

[0099] Multi-AP communication is a technology that enables improved communication performance, such as increased communication rates and reduced radio interference using beamforming, by having multiple access points (APs) cooperate to communicate data with a station (STA). APs participating in Multi-AP communication are classified into a single Sharing AP that manages other APs and Shared APs that operate under the management of the Sharing AP.

[0100] Furthermore, explanations of matters already described in the previously mentioned embodiments will be omitted in this embodiment.

[0101] Figure 24 shows a flowchart illustrating the process for selecting a security method based on the communication format when the communication device 101 connects to the communication device 102 in this embodiment.

[0102] The communication device 101 shall have at least a wireless LAN control unit capable of communicating with Multi-AP.

[0103] The flowchart in Figure 24 starts when the communication device 101 establishes a network or when a user instructs it to change the network settings.

[0104] Since much of the process overlaps with Embodiment 1, the explanation will be omitted.

[0105] After displaying the wireless status, the communication device 101 determines whether Multi-AP has been selected (S2403). If it is determined in S2403 that Multi-AP communication has been selected, the process proceeds to S704. If it is not determined in S2403 that Multi-AP communication has been selected, the process proceeds to S713 in Figure 7.

[0106] When building a network using multi-AP communication, it is determined whether or not an AP that communicates with the STA or between APs using 6GHz is included (S705). If an AP that communicates with the STA or between APs using 6GHz is included, the process proceeds to S706. If it is determined in S705 that it is not included, the process proceeds to S713, where it is displayed that WPA2 can be selected in addition to WPA3.

[0107] The Multi-AP determines whether the STA requesting connection to the network, including 6GHz, is sending the connection request using WPA3 (S716). If the connection request is WPA3 in S716, authentication proceeds (S718). If it is determined in S716 that the connection request is not WPA3, the connection is rejected (S717). Note that SAE-PK or SAE hash-to-element may be used instead of WPA3. Alternatively, the determination may be based on the connection request using a Password ID.

[0108] Furthermore, the communication partner to which the S716 requests a connection may also be an AP. When building a network with Multi-AP communication, the display may be controlled so that WPA3 is selected. The UI display method for controlling the display to show only WPA3 is the same as in Embodiment 1, so the explanation will be omitted.

[0109] In this way, when building a 6GHz-compatible network in Multi-AP communication, controlling the system to select WPA3 as the security method prevents communication using WPA2 or earlier methods, thereby improving security. Furthermore, it eliminates the use of WPA2 or earlier methods in 6GHz band communication.

[0110] (Other embodiments) In each embodiment, when the setting channel is selected as "Automatic," it is determined that it may include 6GHz, and control is implemented to display only WPA3 and OPEN (AES), but this is not limited to this. For example, if WPA3-SAE is selected as the authentication / encryption method, a Multi-Link link including 6GHz may be configured. If WPA2-PSK / WPA3-SAE is selected, a Multi-Link link may be constructed only on 2.4GHz and 5GHz. This control can be implemented. This allows users to configure the network without being aware of restrictions on security strength based on bandwidth.

[0111] In each embodiment, the GUI is shown with two links, but there may be three or more. For example, wireless channel (Link1), wireless channel (Link2), and wireless channel (Link3) may be displayed on the GUI screen.

[0112] Furthermore, in each embodiment, if the settings screen is set to WPA2, the system may automatically switch to WPA3 even if it is set to 2.4GHz or 5GHz when the user selects to communicate using 6GHz. This ensures that WPA3 is selected even if the existing network is operating with an authentication / encryption method older than WPA2. In this case, the passphrase used with WPA2 may be reused. The user may also be notified that the system has been changed to WPA3. Additionally, if an STA that does not support WPA3 is connected when the system attempts to automatically switch, the user may be notified that the settings cannot be changed.

[0113] In each embodiment, the method for setting the communication method and security method was done via a screen, but this is not limited to that. For example, settings may be made by voice input, or by command input using text strings. In the case of command input, for example, if an attempt is made to set only WPA2 despite the system being Multi-Link, an error message may be displayed to indicate that the setting cannot be made.

[0114] In each embodiment, an error message is displayed when the user selects an option that cannot be selected, but a beep sound may also be output in conjunction with this.

[0115] In this embodiment, WPA3 was used as an example, but it can also be applied to future standards such as WPA4 that succeed WPA3.

[0116] The communication devices 101 and 102 described in this embodiment may also be printers having printing means. When operating as a printer, it is possible to print data acquired by communicating with a remote device, for example.

[0117] Furthermore, the communication devices 101 and 102 described in this embodiment may also be cameras having imaging means. When operating as a camera, it is possible to transmit captured data by communicating with a partner device, for example.

[0118] Alternatively, a recording medium containing program code for software that implements the above-described functions may be supplied to a system or device, and the computer (CPU, MPU) of the system or device may read and execute the program code stored on the recording medium. In this case, the program code read from the storage medium itself will implement the functions of the above-described embodiment, and the storage medium containing that program code will constitute the above-described device.

[0119] For storing program code, storage media such as flexible disks, hard disks, optical disks, magneto-optical disks, CD-ROMs, CD-Rs, magnetic tapes, non-volatile memory cards, ROMs, and DVDs can be used.

[0120] Furthermore, the above-mentioned functions may be realized not only by the computer executing the program code it reads, but also by the operating system (OS) running on the computer performing some or all of the actual processing based on the instructions of that program code. OS stands for Operating System.

[0121] Furthermore, the program code read from the storage medium is written to the memory of a function expansion board inserted into the computer or a function expansion unit connected to the computer. Then, based on the instructions of that program code, the CPU of the function expansion board or function expansion unit may perform some or all of the actual processing to realize the above-mentioned functions.

[0122] The present invention can also be realized by supplying a program that implements one or more of the functions of the above-described embodiments to a system or device via a network or storage medium, and by having one or more processors in the computer of that system or device read and execute the program. It can also be realized by a circuit (e.g., an ASIC) that implements one or more functions.

[0123] This embodiment includes the following configuration.

[0124] (Composition 1) A communication device capable of performing authentication using WPA (Wi-Fi Protected Access) 2 and WPA 3, comprising: establishment means for establishing a link between the communication device and another communication device via a frequency channel; and control means for controlling the authentication of communication with the other communication device, wherein the control means, when communicating with the other communication device after establishing multiple links between the communication device and the other communication device by the establishment means, performs authentication using the WPA 3 method based on the fact that the frequency channel used in at least one of the multiple links is a frequency channel included in a specific frequency band.

[0125] (Configuration 2) The communication device further includes a receiving means for receiving instructions to communicate with the other communication device while multiple links have been established between the communication device and the other communication device, and the communication device according to configuration 1, characterized in that the receiving means controls the display unit to perform authentication using the WPA3 method based on the receiving means instructing to perform the communication using a frequency channel included in the specific frequency band.

[0126] (Composition 3) The communication device according to configuration 1 or 2, characterized in that the communication performed with the other communication device while the plurality of links have been established between the communication device and the other communication device by the establishment means is a Muti-Link communication compliant with the IEEE 802.11 standard series.

[0127] (Composition 4) A communication device that can perform authentication using WPA (Wi-Fi Protected Access) 2 and WPA 3, and operates as a communication access point, comprising: communication means for communicating with other communication devices; and control means for controlling authentication of communication with the other communication devices, wherein the control means controls the device to perform authentication using the WPA 3 method based on the fact that the frequency channel used for communication in which the communication device and the other communication device operate in a coordinated manner is a frequency channel included in a specific frequency band.

[0128] (Composition 5) The communication device further includes a receiving means for receiving instructions to perform communication that performs coordinated operation between the communication device and other communication devices, and the communication device according to configuration 4, characterized in that the display unit controls the display unit to perform authentication using the WPA3 method based on the receiving means's instruction to perform the communication using a frequency channel included in the specific frequency band.

[0129] (Composition 6) The communication device according to any one of configurations 1 to 5, characterized in that the communication device controls itself not to establish a connection with the other communication device if it does not receive a frame from the other communication device that contains information indicating that it will perform authentication using the WPA3 method.

[0130] (Composition 7) A communication device capable of performing authentication using a first security method and authentication using a second security method, comprising: establishment means for establishing a link between the communication device and another communication device via a frequency channel; and control means for controlling authentication of communication with the other communication device, wherein, when communicating with the other communication device while multiple links have been established between the communication device and the other communication device by the establishment means, authentication is performed using the first security method based on the fact that the frequency channel used in at least one of the multiple links is a frequency channel in a specific frequency band, and authentication is performed using the first security method or the second security method based on the fact that none of the frequency channels used in the multiple links are frequency channels included in the specific frequency band.

[0131] (Composition 8) The communication device further includes a receiving means for receiving instructions to communicate with the other communication device while multiple links have been established between the communication device and the other communication device, and the communication device according to configuration 7, characterized in that the receiving means controls the display unit to perform authentication using the first security method based on the receiving means instructing to perform the communication using a frequency channel included in the specific frequency band.

[0132] (Composition 9) The communication device according to configuration 7 or 8, characterized in that the communication performed with the other communication device while the plurality of links have been established between the communication device and the other communication device by the establishment means is a Muti-Link communication compliant with the IEEE 802.11 standard series.

[0133] (Composition 10) A communication device that can perform authentication using a first security method and authentication using a second security method, and operates as a communication access point, comprising: communication means for communicating with other communication devices; control means for controlling authentication of communication with the other communication devices; and the control means controlling to perform authentication using the first security method based on whether the frequency channel used for communication performing cooperative operation between the communication device and the other communication device is a frequency channel included in a specific frequency band, and to perform authentication using the first security method or the second security method based on whether the frequency channel used for communication performing cooperative operation is not a frequency channel included in the specific frequency band.

[0134] (Composition 11) The communication device further includes a receiving means for receiving instructions to perform communication in which the communication device and the other communication device operate in a coordinated manner, and the communication device according to configuration 10, characterized in that the display unit controls the display unit to perform authentication using the first security method based on the receiving means instructing to perform the communication using a frequency channel included in the specific frequency band.

[0135] (Composition 12) The communication device according to any configuration 7 to 11, characterized in that the communication device does not establish a connection with the other communication device if it does not receive a frame from the other communication device that contains information indicating that authentication is performed using the first security method.

[0136] (Composition 13) A communication device according to any one of configurations 1 to 12, characterized in that the aforementioned specific frequency is in the 6GHz band.

[0137] (Composition 14) The communication device according to any one of configurations 7 to 13, characterized in that the first security method is WPA3 (Wi-Fi Protected Access).

[0138] (Composition 15) A communication device according to any one of configurations 7 to 14, characterized in that the second security method is WPA or WPA2.

[0139] (Composition 16) A program for causing a computer to function as one of the means of a communication device described in any one of configurations 1 through 15. [Explanation of symbols]

[0140] 100 Networks 101 Communication equipment (AP) 102 Communication equipment (STA) 103 Links 104 links

Claims

1. A communication device capable of operating as an access point that can perform authentication using at least Wi-Fi Protected Access (WPA) 2 and authentication using WPA 3, A display control means that performs control to display a setting screen on a display means for receiving selections from a user regarding the wireless communication settings of the communication device, It includes construction means for constructing a network having a plurality of links, including a first link in a first frequency band and a second link in a second frequency band, When the first frequency band is the 6GHz band, the user can select "Open" on the settings screen to use WPA3 or Opportunistic Wireless Encryption (OWE) as the authentication method for the second link, and authentication methods not supported in the 6GHz band cannot be selected. A communication device characterized by the following features.

2. A communication device capable of operating as an access point that can perform authentication using at least Wi-Fi Protected Access (WPA) 2 and authentication using WPA 3, A display control means that performs control to display a setting screen on a display means for receiving selections from a user regarding the wireless communication settings of the communication device, It includes construction means for constructing a network having a plurality of links, including a first link in a first frequency band and a second link in a second frequency band, When the first frequency band is the 6GHz band, the user can select WPA3 as the authentication method for the second link on the settings screen, and authentication methods not supported in the 6GHz band cannot be selected. A communication device characterized by the following features.

3. If the first frequency band is the 6GHz band, the user cannot select WPA2 as the authentication method for the second link on the settings screen. The communication device according to claim 1 or 2.

4. If the first frequency band and the second frequency band are not in the 6GHz band, the user can select WPA2 as the authentication method for the second link on the settings screen. The communication device according to feature 3.

5. If the first frequency band is the 6GHz band, the WPA2 option in the authentication method selection item for the second link on the settings screen will be grayed out, thereby preventing the user from selecting it. The communication device according to feature 3.

6. The display means is separate from the communication device. The communication device according to claim 1 or 2.

7. The display means further comprises a determination means for determining an authentication method to be used for authentication with other communication devices based on the setting information based on the selection made by the user received by the display means. The communication device according to claim 1 or 2.

8. When the first frequency band is the 6GHz band, the user can set an authentication method supported in the 6GHz band as the authentication method for the second link, and cannot set an authentication method not supported in the 6GHz band. The communication device according to claim 1 or 2.

9. The communication device is capable of establishing the first link and the second link in parallel with other communication devices. The communication device according to claim 1 or 2.

10. A method for controlling a communication device that can operate as an access point capable of performing authentication using at least Wi-Fi Protected Access (WPA) 2 and authentication using WPA 3, A display control step is performed to execute control to display a setting screen on the display unit for receiving selections from the user regarding the wireless communication settings of the communication device, The process includes a construction step of constructing a network having multiple links, including a first link in a first frequency band and a second link in a second frequency band. When the first frequency band is the 6GHz band, the user can select "Open" on the settings screen to use WPA3 or Opportunistic Wireless Encryption (OWE) as the authentication method for the second link, and authentication methods not supported in the 6GHz band cannot be selected. A method for controlling a communication device, characterized by the features described above.

11. A method for controlling a communication device that can operate as an access point capable of performing authentication using at least Wi-Fi Protected Access (WPA) 2 and authentication using WPA 3, A display control step is performed to execute control to display a setting screen on the display unit for receiving selections from the user regarding the wireless communication settings of the communication device, The process includes a construction step of constructing a network having multiple links, including a first link in a first frequency band and a second link in a second frequency band. When the first frequency band is the 6GHz band, the user can select WPA3 as the authentication method for the second link on the settings screen, and authentication methods not supported in the 6GHz band cannot be selected. A method for controlling a communication device, characterized by the features described above.

12. A program for causing a computer to function as each means of the communication device described in claim 1 or claim 2.

Images