Communication devices, communication methods, and programs.

Abstract

Invention details;

Description

Communication device, communication method, and program

[0001] The present invention relates to a communication device that performs wireless communication.

[0002] Wireless LAN (Local Area Network) technology standards have been established by IEEE 802.11, a standardization organization for wireless LAN technology, and wireless LAN technology standards include IEEE 802.11 / a / b / g / n / ac / ax, etc. IEEE stands for Institute of Electrical and Electronics Engineers.

[0003] IEEE 802.11ax, described in Patent Document 1, uses OFDMA to achieve a high peak throughput of up to 9.6 gigabits per second (Gbps), as well as improved communication speeds under congested conditions. OFDMA stands for Orthogonal Frequency-Division Multiple Access.

[0004] In order to further improve throughput, a Task Group was established to formulate the IEEE802.11be standard as the successor standard to IEEE802.11ax.

[0005] Conventionally, an IEEE 802.11 access point (AP) establishes a connection with a station (STA) via a single frequency channel to communicate. The IEEE 802.11be standard considers multi-link communication, in which one AP simultaneously establishes multiple links with STAs via multiple frequency channels including the 2.4 GHz band, 5 GHz band, and 6 GHz band to communicate.

[0006] Meanwhile, standardization by the Wi-Fi Alliance, which guarantees interoperability of wireless LAN technologies, plays an important role, and standardization of WPA3, an authentication program with higher security for wireless LAN technology, is currently underway. WPA stands for Wi-Fi Protected Access.

[0007] In addition, communications over wireless LANs are encrypted using a PTK, which is an encryption key for encrypting unicast communications, and a GTK, which is a key for encrypting broadcast or multicast communications. Here, PTK stands for Pairwise Transient Key, and GTK stands for Group Transient Key.

[0008] Furthermore, in multi-link communication, which is being studied in the 11be standard, it is being considered to use a common PTK in each link that establishes a connection.

[0009] Japanese Patent Application Laid-Open No. 2018-50133

[0010] In multi-link communication, because a common PTK is used for each link, authentication and encryption for each link must be performed using the same security method for each link. Furthermore, when communication is performed in the 6 GHz band, authentication and encryption must be performed using WPA3. However, for example, when a communication device and another communication device simultaneously establish and communicate with each other via a 6 GHz frequency channel and a frequency channel other than the 6 GHz band, there is a risk that authentication and encryption will be performed using different security methods between each link.

[0011] In view of the above problems, the communication device of the present invention aims to perform authentication using a specific security method when operating on a specific frequency channel when communicating with another communication device while multiple links are established between the communication device and the other communication device.

[0012] In order to achieve the above object, the communication device of the present invention is a communication device capable of performing authentication using the WPA (Wi-Fi Protected Access) 2 method and authentication using the WPA3 method, and includes an establishment means for establishing a link between the communication device and another communication device via a frequency channel, and a control means for controlling authentication for performing communication with the other communication device, and when communicating with the other communication device in a state in which multiple links have been established between the communication device and the other communication device by the establishment means, the control means performs authentication using the WPA3 method on the basis that the frequency channel used in at least one of the multiple links is a frequency channel included in a specific frequency band.

[0013] Furthermore, a communication device of the present invention is a communication device that is capable of performing authentication using the WPA (Wi-Fi Protected Access) 2 method and authentication using the WPA3 method, and operates as a communication access point, and includes communication means for communicating with other communication devices, and control means for controlling authentication of communication with the other communication devices, and is characterized in that the control means performs authentication using the WPA3 method based on the fact that a frequency channel used in communication in which cooperative operation is performed between the communication device and the other communication device is a frequency channel included in a specific frequency band.

[0014] Furthermore, a communication device of the present invention is a communication device capable of performing authentication using a first security method and authentication using a second security method, and includes an establishment means for establishing a link between the communication device and another communication device via a frequency channel, and a control means for controlling authentication of communication with the other communication device, wherein when communicating with the other communication device in a state in which multiple links have been established between the communication device and the other communication device by the establishment means, the control means performs authentication using the first security method based on the frequency channel used in at least one of the multiple links being a specific frequency, and performs authentication using the first security method or the second security method based on the fact that none of the frequency channels used in the multiple links are frequency channels included in the specific frequency band.

[0015] Furthermore, a communication device of the present invention is a communication device that is capable of performing authentication using a first security method and authentication using a second security method, and operates as a communication access point, and has a communication means for communicating with other communication devices that operate as communication access points, and a control means for controlling authentication of communication with the other communication devices, wherein the control means performs authentication using the first security method based on the frequency channel used in communication in which cooperative operation is performed between the communication device and the other communication device being a frequency channel included in a specific frequency band, and performs authentication using the first security method or the second security method based on the frequency channel used in communication in which cooperative operation is performed being a frequency channel included in the specific frequency band.

[0016] According to the present invention, when a communication device communicates with another communication device via multiple frequency channels, if the communication device operates on a specific frequency channel, authentication and encryption can be performed using a specific authentication method.

[0017] FIG. 1 is a diagram showing a network configuration in the present invention. FIG. 2 is a diagram showing a hardware configuration of a communication device in the present invention. FIG. 3 is a diagram showing a functional configuration of a communication device in the present invention. FIG. 4 is an example of an element showing RSNE granted in accordance with a security method determined by a communication device 101 in the present invention. FIG. 5 is an example of an element showing Extended Capability granted in accordance with a security method determined by a communication device 101 in the present invention. FIG. 6 is a flowchart showing processing by a communication device 101 in the present invention to determine a security method. FIG. 7 is an example of a graphical user interface display in the present invention. FIG. 8 is an example of a graphical user interface display in the present invention. FIG. 9 is an example of a graphical user interface display in the present invention. FIG. 10 is an example of a graphical user interface display in the present invention. 1 is a flowchart showing a process in which a communication device 101 of the present invention determines a security method. 2 is a flowchart showing a process in which a communication device 101 of the present invention determines a security method. 3 is a flowchart showing a process in which a communication device 101 of the present invention determines a security method. 4 is a flowchart showing a process in which a communication device 101 of the present invention determines a security method.

[0018] Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. Note that the configurations shown in the following embodiments are merely examples, and the present invention is not limited to the illustrated configurations.

[0019] 1 shows the configuration of a network in which a communication device 102 according to this embodiment participates. The communication device 102 is a station (STA) that serves to participate in the network 100. The communication device 101 is an access point (AP) that serves to construct the wireless network 100. The communication device 101 is capable of communicating with the communication device 102.

[0020] Each of the communication devices 101 and 102 can perform wireless communication in accordance with the IEEE 802.11be (EHT) standard. IEEE stands for Institute of Electrical and Electronics Engineers. The communication devices 101 and 102 can communicate at frequencies in the 2.4 Hz, 5 GHz, and 6 GHz bands. The frequency bands used by each communication device are not limited to these, and different frequency bands, such as the 60 GHz band, may be used. The communication devices 101 and 102 can also communicate using bandwidths of 20 MHz, 40 MHz, 80 MHz, 160 MHz, and 320 MHz. The bandwidths used by each communication device are not limited to these, and different bandwidths, such as 240 MHz and 4 MHz, may be used.

[0021] The communication device 101 and the communication device 102 can realize multi-user (MU, Multi-User) communication, which multiplexes signals from multiple users, by performing OFDMA communication compliant with the IEEE 802.11be standard. OFDMA stands for Orthogonal Frequency Division Multiple Access. In OFDMA communication, portions of the divided frequency band (RU, Resource Unit) are assigned to each STA so that they do not overlap, and the carrier waves of each STA are orthogonal. Therefore, an AP can communicate with multiple STAs in parallel within a specified bandwidth.

[0022] Although the communication devices 101 and 102 are described as being compatible with the IEEE 802.11be standard, they may also be compatible with legacy standards that predate the IEEE 802.11be standard. Specifically, the communication devices 101 and 102 may be compatible with at least one of the IEEE 802.11a / b / g / n / ac / ax standards. Furthermore, in addition to the IEEE 802.11 series standards, they may also be compatible with other communication standards such as Bluetooth (registered trademark), NFC, UWB, ZigBee, and MBOA. UWB stands for Ultra Wide Band, and MBOA stands for Multi Band OFDM Alliance. NFC stands for Near Field Communication. UWB includes wireless USB, wireless 1394, WiNET, etc. The communication device 101 may also be compatible with a wired communication standard such as a wired LAN. Specific examples of the communication device 101 include, but are not limited to, a wireless LAN router and a personal computer (PC). The communication device 101 may also be an information processing device such as a wireless chip capable of performing wireless communication in accordance with the IEEE 802.11be standard. Specific examples of the communication device 102 include, but are not limited to, a camera, a tablet, a smartphone, a PC, a mobile phone, a video camera, a headset, etc. The communication device 102 may also be an information processing device such as a wireless chip capable of performing wireless communication in accordance with the IEEE 802.11be standard.

[0023] Each communication device can communicate using bandwidths of 20 MHz, 40 MHz, 80 MHz, 160 MHz, and 320 MHz.

[0024] Furthermore, the communication device 101 and the communication device 102 establish links via multiple frequency channels and perform multi-link communication. In the IEEE 802.11 series standard, the bandwidth of each frequency channel is defined as 20 MHz. Here, a frequency channel refers to a frequency channel defined in the IEEE 802.11 series standard, which defines multiple frequency channels in each of the 2.4 GHz, 5 GHz, 6 GHz, and 60 GHz frequency bands. By bonding adjacent frequency channels, a bandwidth of 40 MHz or more may be used in a single frequency channel. For example, the communication device 101 can establish and communicate with the communication device 102 via a first frequency channel in the 2.4 GHz band. In parallel with this, the communication device 102 can establish and communicate with the communication device 101 via a link 103 via a second frequency channel in the 5 GHz band. In this case, the communication device 102 performs multi-link communication by maintaining a second link 104 via a second frequency channel in parallel with the link 103 via the first frequency channel. In this way, the communication device 101 can improve the throughput of communication with the communication device 102 by simultaneously establishing multiple links via multiple frequency channels with the communication device 102. In this embodiment, the link 103 is a 20 MHz connection on channel 6 in the 2.4 GHz band, and the link number is set to 1. The link 104 is a 320 MHz connection on channel 113 in the 6 GHz band, and the link number is set to 2.

[0025] For example, the communication devices 101 and 102 may establish a third link in the 5 GHz band in addition to the link 103 in the 2.4 GHz band and the second link 104 in the 6 GHz band. Alternatively, links may be established via multiple different channels within the same frequency band. For example, a link on channel 6 in the 2.4 GHz band may be established as the first link, and a link on channel 1 in the 2.4 GHz band may be established as the second link. Links in the same frequency band and links in different frequency bands may be mixed. For example, the communication devices 101 and 102 may establish a link on channel 1 in the 2.4 GHz band and a link on channel 149 in the 5 GHz band in addition to the link 103 on channel 6 in the 2.4 GHz band. By establishing multiple connections with the communication device 102 using different frequencies, the communication device 101 can establish communication with the communication device 102 using another band even when one band is congested, thereby preventing a decrease in throughput and communication delays.

[0026] Although the wireless network 100 in Fig. 1 is configured with one AP and one STA, the number and arrangement of APs and STAs are not limited to this. For example, one STA may be added to the wireless network in Fig. 1. In this case, the frequency band of each link to be established, the number of links, and the frequency width are not important.

[0027] When multi-link communication is performed, the communication device 101 and the communication device 102 divide one piece of data and transmit it to the other device via multiple links.

[0028] Furthermore, the communication device 101 and the communication device 102 may be capable of performing MIMO (Multiple-Input and Multiple-Output) communication. In this case, the communication device 101 and the communication device 102 have multiple antennas, and one of them transmits different signals from each antenna using the same frequency channel. The receiving side simultaneously receives all signals arriving from multiple streams using multiple antennas, and separates and decodes the signals of each stream. In this way, by performing MIMO communication, the communication device 101 and the communication device 102 can communicate more data in the same time period than when not performing MIMO communication. Furthermore, when performing multi-link communication, the communication device 101 and the communication device 102 may perform MIMO communication on some links.

[0029] In this embodiment, the communication devices 101 and 102 are assumed to support the WPA (Wi-Fi Protected Access) security standard, as well as the WPA2 and WPA3 standards. WPA, WPA2, and WPA3 are standards for authenticating opposing devices and encrypting communications with opposing devices. Since the communication devices 101 and 102 support the WPA3 standard, they can use SAE (Simultaneous Authentication of Equals), a method for sharing encryption keys in the WPA3 standard. Furthermore, since 6 GHz communications do not require consideration of interoperability with existing communication devices, the Wi-Fi Alliance has decided to use WPA3 for authentication and encryption of 6 GHz communications. Furthermore, WPA3 uses AES-CCMP or AES-GCMP as the encryption method, rather than TKIP or WEP.

[0030] 2 shows an example of the hardware configuration of the communication device 101 according to this embodiment. The communication device 101 includes a storage unit 201, a control unit 202, a function unit 203, an input unit 204, an output unit 205, a communication unit 206, and an antenna 207. Note that the number of antennas may be multiple.

[0031] The storage unit 201 is composed of one or more memories such as ROM and RAM, and stores various information such as computer programs for performing various operations described below and communication parameters for wireless communication. ROM stands for Read Only Memory, and RAM stands for Random Access Memory. In addition to memories such as ROM and RAM, storage media such as flexible disks, hard disks, optical disks, magneto-optical disks, CD-ROMs, CD-Rs, magnetic tapes, non-volatile memory cards, and DVDs may also be used as the storage unit 201. Furthermore, the storage unit 201 may include multiple memories.

[0032] The control unit 202 is configured with one or more processors, such as a CPU or MPU, and controls the entire communication device 101 by executing a computer program stored in the storage unit 201. The control unit 202 may control the entire communication device 101 in cooperation with the computer program stored in the storage unit 201 and an OS (Operating System). The control unit 202 also generates data and signals (radio frames) to be transmitted in communication with other communication devices. The CPU stands for Central Processing Unit, and the MPU stands for Micro Processing Unit. The control unit 202 may also include multiple processors, such as a multi-core processor, and the entire communication device 101 may be controlled by the multiple processors.

[0033] The control unit 202 also controls the function unit 203 to perform predetermined processes such as wireless communication, image capture, printing, projection, etc. The function unit 203 is hardware that enables the communication device 101 to perform predetermined processes.

[0034] The input unit 204 receives various operations from the user. The output unit 205 outputs various types of information to the user via a monitor screen or a speaker. Here, the output from the output unit 205 may be a display on the monitor screen, an audio output from a speaker, a vibration output, or the like. Note that both the input unit 204 and the output unit 205 may be implemented by a single module, such as a touch panel. Furthermore, the input unit 204 and the output unit 205 may be integrated with the communication device 101 or may be separate units.

[0035] The communication unit 206 controls wireless communication conforming to the IEEE 802.11be standard. The communication unit 206 may also control wireless communication conforming to other IEEE 802.11 series standards in addition to the IEEE 802.11be standard, or wired communication such as a wired LAN. The communication unit 206 controls the antenna 207 to transmit and receive signals for wireless communication generated by the control unit 202.

[0036] If the communication device 101 supports the NFC standard, Bluetooth standard, or the like in addition to the IEEE 802.11be standard, it may control wireless communication in accordance with these communication standards. Furthermore, if the communication device 101 can perform wireless communication in accordance with multiple communication standards, it may be configured to have separate communication units and antennas compatible with each communication standard. The communication device 101 communicates data such as image data, document data, and video data with the communication device 101 via the communication unit 206. The antenna 207 may be configured separately from the communication unit 206, or may be configured together with the communication unit 206 as a single module.

[0037] The antenna 207 is an antenna capable of communication in the 2.4 GHz band, the 5 GHz band, and the 6 GHz band. In this embodiment, the communication device 101 has one antenna, but it may have three antennas. Alternatively, it may have a different antenna for each frequency band. Furthermore, if the communication device 101 has multiple antennas, it may have a communication unit 206 corresponding to each antenna.

[0038] The communication device 102 has the same hardware configuration as the communication device 101 .

[0039] 3 is a block diagram showing the functional configuration of the communication device 101 according to this embodiment. The communication device 102 has a similar configuration. Here, the communication device 101 is assumed to include a wireless LAN control unit 301. The number of wireless LAN control units is not limited to one, and may be two, or three or more. The communication device 101 further includes a frame generation unit 302, a transmission time control unit 303, a beacon reception control unit 304, a UI control unit 305, a storage unit 306, and a wireless antenna 307.

[0040] The wireless LAN control unit 301 includes an antenna and circuit for transmitting and receiving wireless signals to and from other wireless LAN devices, and a program for controlling them. The wireless LAN control unit 301 controls wireless LAN communications based on frames generated by the frame generation unit 302 in accordance with the IEEE 802.11 standard series.

[0041] The frame generation unit 302 generates a wireless control frame to be transmitted by the wireless LAN control unit 301. The contents of the wireless control generated by the frame generation unit 302 may be restricted by settings stored in the storage unit 305. The contents may also be changed by user settings from the UI control unit 305. Information on the generated frame is sent to the wireless LAN control unit 301 and transmitted to the communication partner.

[0042] The communication method determination unit 303 determines the communication method to be used when communicating with the other party based on the received frame received from the wireless LAN control unit 301 and the setting information in the UI control unit 305. The communication method determination unit 303 also notifies the authentication method determination unit 306. After determining the communication method, the wireless LAN control unit 301 communicates with the other device in accordance with the determined communication method.

[0043] The authentication method determination unit 304 determines a method for authenticating the other device from the information from the communication method determination unit 303 and the setting information in the UI control unit 305. The wireless LAN control unit 301 authenticates the other device based on the determined authentication method.

[0044] The UI control unit 305 includes hardware related to a user interface, such as a touch panel or buttons, for accepting operations on the AP by a user (not shown), and a program for controlling these. The UI control unit 305 also has a function for presenting information, such as displaying images or outputting audio, to the user.

[0045] The storage unit 306 is a storage device that can be configured with a ROM, a RAM, etc., that stores programs and data that the AP operates on.

[0046] 4 shows a Robust Security Network element (RSNE) defined in IEEE 802.11. The RSNE is stored in a management frame conforming to IEEE 802.11.

[0047] The Element ID field 401 indicates that the element is an RSNE, i.e., the value is 48.

[0048] The Pairwise Cipher Suite Count field 405 indicates the number of supported encryption methods. Specific values ​​are shown in the Pairwise Cipher Suite List field 406. For example, if CCMP-128 is supported, the value is 00-0F-AC-04. If the Pairwise Cipher Suite Count field 405 indicates that multiple encryption methods are supported, for example, if 405 is set to 2, then multiple 506s are displayed in succession. For example, if CCMP-128 and GCMP-128 are supported, the value is 00-0F-AC-04 followed by 00-0F-AC-08. This order may be reversed. Also, any number of encryption methods may be supported.

[0049] The AKM Suite Count field 407 indicates the number of supported authentication methods. Specific values ​​are shown in the AKM Suite List field 408. In this embodiment, since only WPA3-SAE is assigned to the RSNE, the AKM Suite Count field 407 is set to 1, and the AKM Suite List field 408 is set to 00-0F-AC-08, which indicates SAE. This value may be any value specified for WPA3 or later. In other words, if an authentication method using SHA-384 hashing in SAE is added to 00-0F-AC-14, this may be indicated in addition to the above. 00-0F-AC-09, which performs FT (Fast Transition) in SAE, may also be included. However, since it only supports WPA3, 00-0F-AC-02 and 00-0F-AC-06, which indicate PSK, are not included.

[0050] 5 shows the Extended Capability defined in IEEE 802.11. The Extended Capability is stored in a management frame that complies with IEEE 802.11.

[0051] The fields shown here are, from the beginning, an Element ID field 501, a Length field 502, and an Extended Capabilities field 503.

[0052] The Extended Capabilities field 503 includes an SAE Password Identifiers In Use subfield 504 and an SAE Password Identifiers Used Exclusively subfield 505. These fields are enabled when a Password ID is used, which allows an ID to be set for changing the password for each user, when building a network with the same SSID. For example, if a part of the built network has a Password ID, the SAE Password Identifiers In Use subfield 504 is enabled. If all of the built networks have a Password ID, the subfields 504 and 505 are enabled.

[0053] These values ​​may be enabled, for example, when building a network that uses 6 GHz with Multi-Link in addition to an existing network. For example, by making a Password ID mandatory when connecting to a network that includes 6 GHz with Multi-Link communication, it becomes possible to force a connection using WPA3 that corresponds to the Password ID. To make a Password ID mandatory, for example, a bit may be prepared to ensure that compatible devices connect using a specified method, and the bit may be set.

[0054] For example, when building a network including 6 GHz in multi-link communication, the SAE Password Identifiers In Use subfield 504 may be enabled. Using a Password ID increases the confidentiality of passwords, which is thought to improve security. Therefore, by enabling a Password ID whenever multi-link communication includes 6 GHz, the communication device 102 can build a more secure network. Conversely, a STA may be controlled to not connect to an AP that has disabled SAE Password Identifiers In Use but is building a network including 6 GHz in multi-link communication, as it is considered untrustworthy. Furthermore, the AP may also be controlled to not connect to an STA that does not support a Password ID and requests a connection, as it is considered untrustworthy.

[0055] 6 shows RSNXE (RSN Extension element) defined in IEEE 802.11. RSNXE is stored in a management frame conforming to IEEE 802.11.

[0056] The fields shown here are, from the beginning, an Element ID field 601, a Length field 602, and an Extended RSN Capabilities field 603.

[0057] The SAE hash-to-element subfield 606 indicates that the SAE authentication method specified in WPA3 is compatible with the H2E (Hash to Element) method. The SAE-PK subfield 607 indicates that the SAE authentication method is compatible with the SAE-PK (SAE Public Key) method.

[0058] SAE hash-to-element is an SAE authentication method that allows parameters to be exchanged offline to be calculated in advance, which can prevent side-channel attacks that infer calculated values ​​based on calculation time, thereby improving security.

[0059] Therefore, for example, when building a network including 6 GHz in Multi-Link communication, the SAE hash-to-element subfield 606 or the SAE-PK subfield 607 may be enabled. Therefore, by always enabling SAE hash-to-element when 6 GHz is included in Multi-Link communication, the communication device 102 can build a more secure network. Conversely, the communication device 102 can determine that an AP that builds a network including 6 GHz in Multi-Link communication while SAE hash-to-element is disabled is untrustworthy and not to connect to it. Conversely, when a STA that does not support SAE hash-to-element connects, the AP can determine that the STA is untrustworthy and not to connect to it.

[0060] SAE-PK is one of the SAE authentication methods, and is a method that can verify whether a STA is attempting to connect to a legitimate AP. If the AP to which the STA is attempting to establish a connection is a fake AP, the STA can verify the value and determine that it is a fake AP. This contributes to improving security in public wireless LANs. Therefore, by always enabling SAE-PK when Multi-Link includes 6 GHz, the communication device 102 can build a more secure network. Conversely, the communication device 102 can control APs that are building a network using Multi-Link communication even when SAE-PK is disabled, so that they are considered untrusted and cannot be connected. Furthermore, when a connection request is made from a STA that does not support SAE-PK, the AP can be controlled to not connect to the STA as it is considered untrusted.

[0061] Note that the above-mentioned Password ID, SAE hash-to-element, and SAE-PK may be used as connection determination conditions for the AP and STA, with connection being established only if any of them is supported, and not established if none of them is supported.

[0062] 7 shows a process of controlling authentication and encryption to be performed by WPA3 when 6 GHz is selected as the frequency band for performing Multi-Link communication by the control unit 202 executing a program stored in the storage unit 201 of the communication device 101. The communication device 101 is assumed to have at least a wireless LAN control unit capable of Multi-Link communication.

[0063] The flowchart in FIG. 7 starts when the communication device 101 establishes a network or when a user instructs to change the network settings.

[0064] First, the communication device 101 displays a wireless setting screen to the user (S701). The screens displayed at this time will be described later with reference to FIGS. 8 to 19. Next, it is determined whether 6 GHz is selected as the frequency band for communication in the setting items on the screen (S702). In FIG. 8, "Basic (6 GHz)" is selected, so it can be determined in S702 that 6 GHz is selected. The determination method for S702 from FIG. 9 onward will be described later. If it is determined in S702 that the 6 GHz setting screen is selected, only WPA3 and OWE can be selected as security methods in GUI settings (S710). That is, a beacon, probe response, and association response are transmitted to the AKM Suite List field 408 included in the RSNE, with only WPA3-SAE or including WPA-EAP.

[0065] An example of the GUI at this time is shown in FIG. 8. FIG. 8 shows a screen for setting up a network at 6 GHz. Since authentication using WPA3 is required for communication in the 6 GHz band, WPA3 is displayed as the security method shown in FIG. 8. Furthermore, it is specified that authentication using WPA / WPA2 and OPEN is not performed in the 6 GHz band. Therefore, only OPEN (AES), WPA3-SAE, and WPA3-EAP are displayed so that they can be selected as wireless authentication and encryption methods. The display method at this time is not limited to this. Furthermore, for example, instead of OPEN (AES), OWE, OPEN (encrypted), OPEN (OWE), OWE (passwordless communication encryption), OWE (OPEN), etc. may be used. OWE (Opportunistic Wireless Encryption) is a security method that enables communication encryption even in an environment without using a password. Therefore, security can be improved compared to the conventional OPEN, which does not encrypt communication contents.

[0066] WPA3-SAE may also be expressed in a different way. For example, it may be expressed as WPA3-Personal, WPA3, SAE, WPA3 (AES), etc. WPA3-EAP may also be expressed in a different way. For example, it may be expressed as WPA3-Enterprise, WPA3, WPA3-Enterprise (192 bit), etc. Separate options may be provided for WPA3-Enterprise and WPA3-Enterprise (192 bit).

[0067] As the authentication method options shown in FIG. 8, some of the authentication methods shown in FIG. 8 may be displayed. For example, only WPA3-SAE may be provided as an option. In this case, on the 6 GHz setting screen, the display unit may not provide an option corresponding to WPA3 as in FIG. 8, and encryption may be performed based on a predetermined encryption method. The authentication method options shown in FIG. 8 may be further increased. For example, WPA3-SAE (H2E), WPA3-SAE-PK, WPA3-SAE (Password ID), WPA4, etc. may be included as options. However, options representing WP, WPA-TKIP, WPA-AES, WPA2-TKIP, WPA2-AES, and equivalent methods are not provided as options or are displayed as unselectable.

[0068] If it is determined in S702 that the screen is not a 6 GHz setting screen, it is determined whether the screen is a setting screen for Multi-Link communication (S703). Referring to FIG. 8, the determination in S703 is, for example, based on whether the "Basic (Multi)" tab at the top is selected. If it is determined in S703 that the screen is not a setting screen for Multi-Link communication, the GUI displays wireless authentication and encryption methods that can be selected, including methods prior to WPA2, in addition to WPA3 and OWE (S713). Furthermore, beacons, probe responses, and association responses, including WPA2-AES, are transmitted to the AKM Suite List field 408 included in the RSNE in FIG. 4.

[0069] At this time, i.e., when it is determined in S703 that the setting screen is not for Multi-Link communication, an example of the GUI is shown in FIG. 9 . In FIG. 9 , "Basic (2.4 GHz)" is selected as the network setting screen to be constructed, and it can be seen that this is a screen for configuring a 2.4 GHz network. In this case, if the screen is for configuring a 2.4 GHz network or a single network, it is determined in S703 that this is not a setting screen for Multi-Link communication. If it is determined in S703 that the setting screen is not for Multi-Link communication, as shown in FIG. 9 , the screen is displayed so that OPEN (AES), WPA3-SAE, WPA3-EAP, and methods prior to WPA2 can be selected as the wireless authentication and encryption method. In other words, if it is determined in S703 that the setting screen is not for Multi-Link communication, it is displayed in a selectable state, including authentication methods prior to WPA2.

[0070] The options for the authentication method displayed in Fig. 9 may be changed depending on the functions of the AP. For example, if the AP does not support EAP, WPA2-EAP (AES), WPA3-EAP (AES), and WPA2 / WPA3-EAP (AES) may be excluded from the options shown in Fig. 9.

[0071] Also, for example, if the AP does not support Personal, only OPEN and EAP may be displayed. Alternatively, options other than OPEN may be displayed. The notations (TKIP / AES) and (AES) may not be displayed. Also, WPA2-PSK / WPA3-SAE may be notated differently. For example, it may be WPA2 / WPA3 or WPA2 / PA3-Personal. Similarly, WPA3-SAE may be WPA3, WPA3-Personal, or WPA3-SAE (Personal).

[0072] OPEN (AES) may be different. For example, OPEN (OWE), OWE, and WPA / WPA2-PSK may be displayed as MIX. WPA / WPA2 / WPA3 may also be displayed. This may be displayed as WPA-MIX.

[0073] Alternatively, as shown in FIG. 10 , selecting "Basic (Multi)" may determine that the setting screen is for Multi-Link communication. That is, selecting "Basic (Multi)," which indicates that Multi-Link communication is to be performed, determines in S703 that the setting screen is for Multi-Link communication. At this time, it is determined whether or not at least one of the links may include a frequency channel operating in the 6 GHz band (S704). This determination in S704 is made, for example, by specifying the 6 GHz frequency band as the frequency band for the channel set for each link, as shown in FIG. 10 , or by specifying a specific channel in the 6 GHz frequency band. For example, in FIG. 10 , "2.4 GHz Auto" is selected for Link 1, and "5 GHz Auto" is selected for Link 2. In this case, it is clear that even Multi-Link will not operate at 6 GHz. That is, it can be seen from FIG. 10 that Multi-Link communication is selected in the 2.4 GHz band and the 5 GHz band, but that Multi-Link communication is not performed in the 6 GHz band. In this case, it is determined in S704 that there is no possibility that a frequency channel operating in 6 GHz is included. On the other hand, in the case of FIG. 11, "2.4 GHz Auto" is selected for Link 1, and "6 GHz Auto" is selected for Link 2. In this case, it is determined in S704 that 6 GHz is included as a channel that can operate in Multi-Link. Also, even if the channel is set to "Auto" and operation is possible in any band, as shown in FIG. 12, it may be determined that there is a possibility that operation in 6 GHz is possible.

[0074] If it is determined that there is no possibility of operation at 6 GHz (No in S704), a display is made available for selection, including methods prior to WPA2 (S713). The display method in this case is, for example, as shown in FIG. 10. The authentication and encryption method options are the same as those described above in FIG. 9, and therefore will not be described here. FIG. 10 shows the setting screen for Multi-Link communication, but because communication using the 6 GHz frequency band has not been selected, WPA3 is displayed as an authentication method option in addition to authentication methods prior to WPA2.

[0075] If it is determined that the 6 GHz band may be included, it is checked whether or not there is an already connected STA (S705). Note that the determination in S705 may be performed immediately before S701, or it may not be performed at all. If there is no STA to establish a connection (No in S705), control is performed so that only OPEN (AES) and WPA3 are displayed (S710). The authentication and encryption method options are the same as those described in FIG. 8 above, and therefore will not be described here.

[0076] If there is a STA establishing a connection at the time of the setting update (Yes in S705), it is determined whether the STA establishing a connection has established a connection using an authentication / encryption method prior to WPA2 (S706). If it is determined in S706 that the connection is established using WPA3 or later, a display is displayed so that only WPA3 can be selected (S710). If it is determined in S706 that the connection is established using a method prior to WPA2, selecting 6 GHz after the setting change will build a network using only WPA3, which may prevent STAs that have already established a connection using a method prior to WPA2 from reconnecting. Therefore, a warning such as that shown in FIG. 13 is displayed (S707). If "OK" is pressed in the warning to acknowledge the warning (Yes in S708), the STA that has established a connection is disconnected, and a display is displayed so that only WPA3 can be selected (S710). Note that disconnection from the STA that has established a connection may be performed when the "Settings" button (described later) is pressed (S711). In the warning shown in Fig. 13, if "Cancel" is pressed instead of "OK" or the screen is simply closed (No in S708), the settings are changed to create a network that does not include 6 GHz (S709). For example, S709 may change the 6 GHz selected in Fig. 11 to 5 GHz as shown in Fig. 10. Note that in S707 to S709, it may be possible to select to create a network separate from an existing network, i.e., a network to which a connection with a STA has already been established. In this case, WPA3 is always displayed as the authentication and encryption method selection. Existing networks are managed on a separate screen.

[0077] Examples of this case are shown in FIGS. 14 and 15. At step S703, the setting screen shown in FIG. 14 is displayed. If the user selects operation at 6 GHz (Yes in S704), it is determined whether a STA has established a connection to an existing network (S705). If a STA already has established a connection, a warning is displayed (S707), and the process transitions to FIG. 15. The warning message displayed in S707 may be, for example, a confirmation message such as "Are you sure you want to create a new network?" In other words, in S707, the user is asked to confirm that they will create a network different from the existing network. If the user acknowledges the warning and presses "OK," a new "Network 2" is created, with the 6 GHz band added, while the settings for "Network 1" shown in FIG. 14 remain unchanged, and the setting screen shown in FIG. 15 is displayed. While the 6 GHz band was not checked for Network 1 in FIG. 14, it can be seen that the network is now "Network 2" and the 6 GHz band is checked in FIG. 15. That is, by the user agreeing to build a network different from the existing network, a 6 GHz network corresponding to Network 2 is built in addition to the existing network (2.4 GHz / 5 GHz). Also, since operation is at 6 GHz in FIG. 15 , the displayed authentication and encryption methods are limited to OPEN (AES) and WPA3-SAE. That is, a beacon, probe response, or association response is sent to the AKM Suite List field 408 included in the RSNE, including only WPA3-SAE or WPA-EAP. Alternatively, when the present invention is applied to the communication device 102, it is assigned to the RSNE of the probe request or association request.

[0078] Once the communication device 101 has established a WPA3-SAE network, it waits for a connection request from a remote device. Alternatively, if the present invention is applied to the communication device 102, it searches for a remote device and issues a connection request to a remote device that meets the conditions. Here, a connection request refers to a probe request or an association request.

[0079] When the communication device 101 receives a connection request from a remote device (S712), it determines whether the remote device is requesting a Multi-Link connection and a WPA3 connection (S716). Specifically, it checks whether information indicating WPA3 compatibility is stored in the AKM Suite List field 408 of the Probe Request or Association Request received in S712. If it is determined in S716 that the remote device is not requesting a WPA3 connection despite being a Multi-Link device, it rejects the connection (S717). Here, a different network may be recommended in S717. Alternatively, if a Multi-Link connection is requested but the connection only includes 2.4 GHz and 5 GHz, it may proceed to a process of proceeding with authentication for the WPA2 connection request. However, in this case, even if a request is made later to increase the frequency to 6 GHz, it will be refused.

[0080] As described above, when Password ID, SAE hash-to-element, and SAE-PK are required for a connection including 6 GHz in Multi-Link communication, these may be used as conditions for connection approval in addition to WPA3 determination. When the present invention is applied to the communication device 102, when searching for an AP, a connection request is sent only to an AP that builds a network that satisfies the above.

[0081] If the connection request from the STA satisfies the conditions, the communication device 101 proceeds with authenticating the STA (S718). If the authentication is successful in S718 (Yes in S719), the communication device connects to the opposite device and starts communication (S720). If the authentication is not successful (No in S719), the connection is rejected (S717). One possible method for rejecting the connection in S717 is to set the Status Code in the Association Response to Failure.

[0082] After S713, a network is established using the authentication and encryption method that has been set by pressing the setting button (S714). In this example, it is assumed that WPA2-PSK / WPA3-SAE has been selected.

[0083] In S713, the AKM Suite List field 408 of the RSNE shown in Fig. 4 includes the value 00-0F-AC-08 indicating support for SAE, as well as values ​​00-0F-AC-02 and 00-0F-AC-06 indicating support for PSK. 00-0F-AC-02 indicates that SHA-128 is used as the hash function for PSK, and 00-0F-AC-06 indicates that SHA-256 is used as the hash function. Only one of these may be included.

[0084] After the network is established, the device waits for a connection request from the other device (S715). When the other device requests a connection, authentication proceeds (S718). If the authentication is successful (Yes in S719), the device connects and starts communication (S720). If the authentication is not successful (No in S719), the device rejects the connection (S717).

[0085] According to this embodiment, when 6 GHz is included in Multi-Link communication, by controlling the display to authenticate with WPA3 on both links, it is possible to maintain communication limited to WPA3 in 6 GHz communication. Furthermore, when the 6 GHz band is not included, communication can also be performed with WPA2, so that existing devices that do not support WPA3 can join the network and communicate. Note that there are other GUI display methods besides those shown above. Below is an example of a setting screen for an AP that can build multiple networks.

[0086] FIG. 16 shows an example of the GUI of an AP capable of building multiple networks. The network type is displayed on the left side of the screen. For example, in the Wireless LAN Advanced Settings (2.4 GHz) menu, options are displayed, including security methods prior to WPA2 and Open, for building a network using Single Link. On the other hand, if Wireless LAN Advanced Settings (2.4+6) is selected as shown in FIG. 16, it indicates that a network will be built using Multi-Link at 2.4+6 GHz. In this case, since Multi-Link communication using the 6 GHz frequency band is selected, only OWE and WPA3 are displayed on the display so that they can be selected, and security methods prior to WPA2 and Open are not displayed.

[0087] 17 and 18 show examples of the AP GUI when determining the frequency band when selecting the operation mode. In Fig. 16, the frequency band is determined in the wireless channel, but in Figs. 17 and 18, the frequency band is determined in the operation mode, which is different.

[0088] 17, when 2.4 GHz + 5 GHz is selected as the wireless operation mode, it can be determined in S704 that operation at 6 GHz will not be performed. In other words, although Multi-Link communication is selected, since it indicates that Multi-Link communication will be performed without using 6 GHz, options including WPA2 and Open are displayed as the security method.

[0089] When 5 GHz + 6 GHz is selected as the wireless operation mode as shown in Figure 18, it is determined in S704 that operation will be performed at 6 GHz. In other words, since it is indicated that Multi-Link communication will be performed using 6 GHz, only WPA2 and WPA3 are displayed on the display unit so that they can be selected, and security methods prior to WPA2 and Open are not displayed. Note that the frequency channels selected for Multi-Link may be, for example, two from the 6 GHz range. Alternatively, one from the 2.4 GHz range and two from the 5 GHz range may also be selected.

[0090] 19 and 20 show an example of an AP UI in which a screen for setting a frequency band for operating in multi-link communication and a screen for setting security are displayed on separate screens.

[0091] In Figure 19, 6 GHz is checked on the Multi-Link setting screen, so in S704 it is determined that Multi-Link will operate at 6 GHz. Figure 20 shows an example of the transition to the screen for setting the security method in this case. Since it is determined that Multi-Link will operate at 6 GHz, the Security setting screen displays only WPA2 and WPA3 as selectable options on the display, and does not display security methods prior to WPA2 or Open. Note that if 6 GHz is not checked in Figure 19 and it is determined that Multi-Link will not operate at 6 GHz, security method options displayed include WPA2 and Open in addition to WPA3.

[0092] Fig. 21 shows an example of a UI that pops out when selecting a security method. The method for selecting a frequency band is the same as in Figs. 9 to 19. When selecting a security method as in Fig. 21, a pop-out may be used to display options. When Multi-Link communication including 6 GHz is selected, only OWE and WPA3 are displayed as options. On the other hand, when a selection is made for Multi-Link communication that does not include 6 GHz, options including WPA2 and Open in addition to WPA3 are displayed as security methods.

[0093] 22 shows an example of a UI in which a specific security method cannot be selected by being grayed out. For example, when Multi-Link communication including 6 GHz is selected, only WPA3 can be selected, and security methods prior to WPA2 cannot be selected by being grayed out.

[0094] 23 shows an example of a UI for determining the wireless channel to be used when selecting a wireless function. For example, in FIG. 23, if 2.4 GHz + 5 GHz is selected, it is determined in S704 that the device will not operate in the 6 GHz band, and security options including WPA2 and Open are displayed in addition to WPA3. On the other hand, if 2.4 GHz + 6 GHz is selected, it is determined in S704 that multi-link communication including 6 GHz will be performed, and only OWE and WPA3 are displayed as options.

[0095] In this way, by limiting the security methods that can be selected by the user on the UI when building a network, security can be improved. Also, in the 6 GHz band where authentication and encryption methods prior to WPA2 are prohibited, communication authenticated and encrypted using methods prior to WPA2 will no longer be performed.

[0096] Note that even if Multi-Link is selected on the UI, the options provided for the security method may not be changed, and the communication device may automatically switch the security method when actually building a network. For example, when building multiple networks simultaneously, assume that WPA2 / 3 is selected on the UI. Networks that do not use 6 GHz with Multi-Link may operate with WPA2 / 3, and networks that use 6 GHz with Multi-Link may operate with WPA3 only. In this case, the WPA2-only option may be removed when 6 GHz is selected with Multi-Link, or the WPA2-only option may be made unavailable for selection on any network. In this case, a connection using a high security method is guaranteed when using Multi-Link.

[0097] Second Embodiment In this embodiment, a case will be described in which control is performed so that authentication and encryption are performed in accordance with WPA3 when 6 GHz is selected in Multi-AP communication.

[0098] FIG. 24 shows the flow of processing when 6 GHz is selected in Multi-AP communication by the control unit 202 executing a program stored in the storage unit 201 of the communication device 101.

[0099] Multi-AP communication is a technology that enables improved communication performance by having multiple APs cooperate to communicate data with STAs, improving communication rates and reducing radio interference using beamforming. APs participating in multi-AP communication are classified into a single Sharing AP that manages other APs, and a Shared AP that operates under the management of the Sharing AP.

[0100] It should be noted that the contents already explained in the above embodiment will not be explained in this embodiment.

[0101] FIG. 24 is a flowchart showing a process for selecting a security method depending on the communication format when the communication device 101 connects to the communication device 102 in this embodiment.

[0102] The communication device 101 is assumed to have at least a wireless LAN control unit capable of communicating via Multi-AP.

[0103] The flowchart in FIG. 24 starts when the communication device 101 establishes a network or when a user instructs to change the network settings.

[0104] Most of the processing overlaps with that of the first embodiment, and therefore the description will be omitted.

[0105] After displaying wireless, the communication device 101 determines whether Multi-AP communication has been selected (S2403). If it is determined in S2403 that Multi-AP communication has been selected, the process proceeds to S704. If it is not determined in S2403 that Multi-AP communication has been selected, the process proceeds to S713 in FIG. 7.

[0106] When constructing a network using multi-AP communication, it is determined whether or not an AP that uses 6 GHz to communicate with a STA or between APs is included (S705). If an AP that uses 6 GHz to communicate with a STA or between APs is included, the process proceeds to S706. If it is determined in S705 that an AP that uses 6 GHz to communicate with a STA or between APs is not included, the process proceeds to S713, where WPA2 is displayed as an option in addition to WPA3.

[0107] It is determined whether a STA requesting connection to a network including 6 GHz established by Multi-AP transmits a WPA3 connection request (S716), and if the WPA3 connection request is detected in S716, authentication is performed (S718). If it is determined in S716 that the WPA3 connection request is not a WPA3 connection request, the connection is rejected (S717). Note that SAE-PK or SAE hash-to-element may be used instead of WPA3. Alternatively, the determination may be made based on a connection request using a Password ID.

[0108] The communication partner making the connection request in S716 may also be an AP. When building a network using multi-AP communication, the display may be controlled so that WPA3 is selected. The UI display method for controlling the display to only WPA3 is the same as in the first embodiment, and therefore a description thereof will be omitted.

[0109] In this way, when building a 6 GHz compatible network in Multi-AP communication, by controlling so that WPA3 is selected as the security method, communication will not be performed using methods earlier than WPA2, improving security. Also, methods earlier than WPA2 will no longer be used in 6 GHz band communication.

[0110] (Other Embodiments) In each embodiment, when "Auto" is selected as the setting channel, it is determined that 6 GHz may be included, and control is exercised to display only WPA3 and OPEN (AES). However, this is not limited to this. For example, when WPA3-SAE is selected as the authentication / encryption method, a Multi-Link link is configured including 6 GHz. When WPA2-PSK / WPA3-SAE is selected, a Multi-Link link is constructed only at 2.4 GHz and 5 GHz. Such control may also be exercised. This allows the user to configure a network without being aware of restrictions on security strength based on bandwidth.

[0111] Although the GUI has been shown with two links in each embodiment, it may have three or more links. For example, a wireless channel (Link 1), a wireless channel (Link 2), and a wireless channel (Link 3) may be displayed on the GUI screen.

[0112] Furthermore, in each embodiment, when the setting screen is set to WPA2 and communication using 6 GHz is selected, processing may be performed to automatically switch to WPA3 even if the frequency is 2.4 GHz or 5 GHz. This allows control so that WPA3 is selected even if the existing network is operating using an authentication / encryption method prior to WPA2. In this case, the passphrase used for WPA2 may be reused. The user may also be notified that the setting has been changed to WPA3. Furthermore, if an STA that does not support WPA3 is connected when attempting to automatically switch, the user may be notified that the setting cannot be changed.

[0113] In each embodiment, the communication method and security method are set on a screen, but this is not limiting. For example, they may be set by voice input. Or they may be set by command input using a character string. In the case of command input, for example, if an attempt is made to set only WPA2 even though the device is Multi-Link, an error may be displayed to indicate that the setting is not possible.

[0114] In each embodiment, an error message is displayed when the user selects an option that cannot be selected, but a beep may also be output in response.

[0115] In this embodiment, WPA3 has been taken as an example, but the present invention is also applicable to future standards such as WPA4 that will succeed WPA3.

[0116] The communication devices 101 and 102 described in this embodiment may be printers having printing means. When operating as a printer, for example, it is possible to print data acquired by communicating with a partner device.

[0117] Furthermore, the communication devices 101 and 102 described in this embodiment may be cameras having an image capturing means. When operating as a camera, for example, it is possible to transmit captured image data by communicating with a partner device.

[0118] It is also possible to provide a system or device with a recording medium on which program code for software that realizes the above-described functions is recorded, and have the computer (CPU, MPU) of the system or device read and execute the program code stored on the recording medium. In this case, the program code itself read from the recording medium realizes the functions of the above-described embodiments, and the recording medium on which the program code is stored constitutes the above-described device.

[0119] Examples of storage media that can be used to supply the program code include flexible disks, hard disks, optical disks, magneto-optical disks, CD-ROMs, CD-Rs, magnetic tapes, non-volatile memory cards, ROMs, and DVDs.

[0120] Furthermore, the above-mentioned functions may be realized not only by the computer executing the read program code, but also by the operating system (OS) running on the computer performing some or all of the actual processing based on the instructions of the program code.

[0121] Furthermore, the program code read from the storage medium may be written to a memory provided in a function expansion board inserted into a computer or a function expansion unit connected to the computer, and a CPU provided in the function expansion board or function expansion unit may then perform some or all of the actual processing based on the instructions of the program code to realize the above-mentioned functions.

[0122] The present invention can also be realized by supplying a program that realizes one or more of the functions of the above-described embodiments to a system or device via a network or a storage medium, and having one or more processors in the computer of the system or device read and execute the program.The present invention can also be realized by a circuit (e.g., an ASIC) that realizes one or more of the functions.

[0123] The disclosure of this embodiment includes the following configuration.

[0124] (Configuration 1) A communication device capable of performing authentication using a WPA (Wi-Fi Protected Access) 2 method and authentication using a WPA3 method, the communication device comprising: an establishment means for establishing a link between the communication device and another communication device via a frequency channel; and a control means for controlling authentication of communication with the other communication device, wherein the control means, when communicating with the other communication device in a state in which multiple links have been established between the communication device and the other communication device by the establishment means, performs authentication using the WPA3 method based on the fact that the frequency channel used in at least one of the multiple links is a frequency channel included in a specific frequency band.

[0125] (Configuration 2) The communication device according to Configuration 1, further comprising a receiving means for receiving an instruction to communicate with the other communication device in a state where multiple links are established between the communication device and the other communication device, and based on the instruction from the receiving means to perform the communication using a frequency channel included in the specific frequency band, the communication device controls a display unit to perform authentication using the WPA3 method.

[0126] (Configuration 3) The communication device according to Configuration 1 or 2, wherein the communication performed with the other communication device in a state where the plurality of links are established between the communication device and the other communication device by the establishing means is multi-link communication conforming to the IEEE 802.11 standard series.

[0127] (Configuration 4) A communication device that is capable of performing authentication using the WPA (Wi-Fi Protected Access) 2 method and authentication using the WPA3 method and operates as a communication access point, the communication device having communication means for communicating with other communication devices and control means for controlling authentication of communication with the other communication devices, wherein the control means controls authentication to be performed using the WPA3 method based on the fact that a frequency channel used in communication in which cooperation is performed between the communication device and the other communication devices is a frequency channel included in a specific frequency band.

[0128] (Configuration 5) The communication device according to Configuration 4, further comprising a receiving means for receiving an instruction to perform communication in which the communication device and the other communication device cooperate with each other, and based on the instruction from the receiving means to perform the communication using a frequency channel included in the specific frequency band, controls a display unit to perform authentication using the WPA3 method.

[0129] (Configuration 6) The communication device according to any one of configurations 1 to 5, characterized in that, when the communication device does not receive a frame from the other communication device that stores information indicating that authentication will be performed using the WPA3 method, the communication device controls so as not to establish a connection with the other communication device.

[0130] (Configuration 7) A communication device capable of performing authentication using a first security method and authentication using a second security method, the communication device comprising: an establishment means for establishing a link between the communication device and another communication device via a frequency channel; and a control means for controlling authentication of communication with the other communication device, wherein when communicating with the other communication device with a plurality of links established by the establishment means, the communication device controls to perform authentication using the first security method based on the frequency channel used in at least one of the plurality of links being a frequency channel in a specific frequency band, and to perform authentication using the first security method or the second security method based on the fact that none of the frequency channels used in the plurality of links are frequency channels included in the specific frequency band.

[0131] (Configuration 8) The communication device according to Configuration 7, further comprising a receiving means for receiving an instruction to communicate with the other communication device in a state where multiple links are established between the communication device and the other communication device, and based on the instruction from the receiving means to perform the communication using a frequency channel included in the specific frequency band, controls a display unit to perform authentication using the first security method.

[0132] (Configuration 9) The communication device according to configuration 7 or 8, wherein the communication performed with the other communication device in a state where the plurality of links are established between the communication device and the other communication device by the establishing means is multi-link communication conforming to the IEEE 802.11 standard series.

[0133] (Configuration 10) A communication device capable of performing authentication using a first security method and authentication using a second security method, and operating as a communication access point, comprising: communication means for communicating with other communication devices; and control means for controlling authentication of communication with the other communication devices, wherein the control means controls to perform authentication using the first security method based on the frequency channel used in communication in which cooperative operation is performed between the communication device and the other communication device being a frequency channel included in a specific frequency band, and to perform authentication using the first security method or the second security method based on the frequency channel used in communication in which cooperative operation is performed being a frequency channel included in the specific frequency band.

[0134] (Configuration 11) The communication device according to Configuration 10, further comprising a receiving means for receiving an instruction to perform communication in which the communication device and the other communication device operate cooperatively, and based on an instruction from the receiving means to perform the communication using a frequency channel included in the specific frequency band, controls a display unit to perform authentication using the first security method.

[0135] (Configuration 12) A communication device according to any one of configurations 7 to 11, characterized in that the communication device controls not to establish a connection with the other communication device when it does not receive a frame from the other communication device that stores information indicating that authentication will be performed using the first security method.

[0136] (Configuration 13) The communication device according to any one of configurations 1 to 12, wherein the specific frequency is in the 6 GHz band.

[0137] (Configuration 14) The communication device according to any one of configurations 7 to 13, wherein the first security method is WPA3 (Wi-Fi Protected Access).

[0138] (Configuration 15) The communication device according to any one of configurations 7 to 14, wherein the second security method is WPA or WPA2.

[0139] (Configuration 16) A program for causing a computer to function as each means of the communication device described in any one of configurations 1 to 15.

[0140] The present invention is not limited to the above-described embodiments, and various modifications and variations can be made without departing from the spirit and scope of the present invention. Therefore, the following claims are appended to apprise the public of the scope of the present invention.

[0141] This application claims priority based on Japanese Patent Application No. 2021-096515 filed on June 9, 2021, and Japanese Patent Application No. 2022-073892 filed on April 27, 2022, the entire contents of which are incorporated herein by reference.

Claims

DEPCT6705 / 02 / 25671. A communication instrument capable of performing authentication using Wi-Fi protected access methods and WPA3 authentication, which includes: a link-establishing path for creating a link between one communication instrument and another via a frequency channel; and a control path for controlling the authentication of communication with another communication instrument, where, when communication is performed with another communication instrument in a state in which a number of links have been established by the link-establishing path between the communication instruments, the control path performs WPA3 authentication based on a frequency channel to be used on at least one of the number of links, which are frequency channels included in a specific frequency band.

2. Communication instrument according to claim 1,This includes an additional receiving method for receiving commands to execute communication with another communication device in a state where a number of links have been established between the communication devices, where, based on commands to execute communication using a frequency channel included in a specific frequency band, issued by the receiving method, the output unit is controlled in such a way to perform authentication using the WPA33 method. Communication devices under claim 1 or 2, where communication is to be executed with other communication devices in a state where a number of links have been established by the established method between the communication devices, is multilink communication conforming to the Institute of Electrical and Electronics Engineers (IEEE) 802.114 series of standards. Communication devices under claim 1, where, in the case where the frame containing the information indicating that authentication will be performed using the WPA3 method is not received from other communication devices,The communication device performs control in that manner to establish a connection with other communication devices.

5. The communication device is capable of performing authentication using Wi-Fi Protected Access (WPA)2 and WPA3 authentication methods, and operates as an access point for communication, in which the communication device comprises: a communication path for conducting communication with another communication device; and a control path for controlling the authentication of communication with other communication devices, where the control path performs control in that manner to perform WPA3 authentication based on the frequency channel to be used in the communication of the collaborative operation between the communication device and other communication devices, which is a frequency channel included in a specific frequency band.

6. The communication device according to claim 4, which also comprises a receiving path for receiving commands to conduct communication of the collaborative operation between the communication device and other communication devices, where,Based on commands to conduct communication using a frequency channel included in a specific frequency band, issued by the receiving path, the output unit is controlled in such a manner to perform authentication using the WPA3 method.

7. A communication instrument under claim5, where, in the event that a frame containing information indicating that authentication will be performed using the WPA3 method is not received by other communication instruments, the communication instrument performs control in such a manner to establish a connection with other communication instruments.

8. A communication instrument capable of performing authentication using the first security method and authentication using the second security method, in which the communication instrument comprises: the creation path for establishing a link between one communication instrument and another via a frequency channel; and the control path for controlling the authentication of communication with other communication instruments, where,When communication is undertaken with other communication devices in a state where a number of links have been established by the establishing pathway between the communication devices, the control pathway performs control in such a manner to perform authentication using a primary security method based on the frequency channel to be used in at least one of the links, which is a frequency channel included in a specific frequency band, and to perform authentication using a primary or secondary security method that is not based on the frequency channel to be used in the number of links, which is a frequency channel included in a specific frequency band.

9. The communication device under claim 8, which includes an additional receiving pathway for receiving commands to conduct communication with other communication devices in a state where a number of links have been established between the communication devices, where, based on commands to conduct communication using a frequency channel included in a specific frequency band,Issued via the receiving path, the output unit is controlled in such a manner to perform authentication using security method one.

10. A communication instrument under claim 8 or 9, where communication is to be performed with other communication instruments in a state in which a number of links are established via the establishing path between the communication instruments and other communication instruments, is a multilink communication conforming to the Institute of Electrical and Electronics Engineers (IEEE) 802.11 series of standards.

11. A communication instrument under claim 8, where, in the event that the frame containing information indicating that authentication will be performed using security method one is not received by other communication instruments, the communication instrument performs control in such a manner to not establish a connection with other communication instruments.

12. A communication instrument capable of performing authentication using security method one and authentication using security method two, and operating as the access point of communication,The communication instrument comprises: a communication path for conducting communication with one communication instrument; and a control path for controlling the authentication of communication with other communication instruments, whereby the control path performs control in such a manner to perform authentication using the first security method based on the frequency channel to be used in the communication of the joint operation between the communication instrument and other communication instruments, which is a frequency channel included in a specific frequency band, and to perform authentication using the first or second security method based on the frequency channel to be used in the communication of the joint operation, which is not a frequency channel included in a specific frequency band.

13. The communication instrument under claim12, which further includes a receiving path for receiving commands to conduct communication in which the communication instrument and other communication instruments operate together, whereby,Based on instructions to perform communication using a frequency channel included in a specific frequency band, issued by the receiving channel, the output unit is controlled in such a way to perform authentication using security method one.

14. A communication device under claim 12, where, in the event that a frame containing information indicating that authentication will be performed using security method one is not received by other communication devices, the communication device exercises control in such a way to not establish a connection with other communication devices.

15. A communication device under claim 1, 5, 8, or 12, where the specific frequency band is the 6 gigahertz (GHz) band.

16. A communication device under claim 8 or 12, where security method one is Wi-Fi Protected Access (WPA3).

17. A communication device under claim 8 or 12, where security method two is WPA or WPA2.

18. A communication device capable of performing authentication using Wi-Fi Protected Access (WPA)2 and authentication using WPA3.The communication method comprises: the process of establishing a link between one communication device and another via a frequency channel; and the control process of authentication control of communication with other communication devices. That is, when communication is performed with another communication device in a state where a number of links have been established via the link-establishing method between the two communication devices, the control process performs authentication using the frequency-based WPA3 method that will be used on at least one of the links, the frequency channels of which are included in a specific frequency band.

19. The communication method of a communication device can perform authentication using the Wi-Fi Protected Access (WPA)2 method and WPA3 authentication, and operate as an access point of communication. This communication method comprises: the communication process of establishing communication with another communication device; and the control process of authentication control of communication with other communication devices.The WPA3 authentication process, based on a frequency channel, is used for communication between communication devices. This frequency channel is included in a specific frequency band of 20. The communication methods allow for authentication using both first-priority and second-priority security techniques. These methods consist of: a link-establishing procedure between two communication devices via the frequency channel; and an authentication control procedure for communication with other communication devices. When communication is performed with another communication device, and a link has been established by the link-establishing procedure, the frequency-based first-priority authentication process is used on at least one of these links.This is a frequency channel included in a specific frequency band, and performs authentication using either security method one or security method two that is not based on the frequency channel to be used in a number of links, which is a frequency channel included in a specific frequency band.

21. The communication method of a communication instrument that can perform authentication using security method one and authentication using security method two, and operate as an access point of communication, which the communication method consists of: the communication procedure of conducting communication with another communication instrument as an access point of communication; and the control procedure of the authentication control procedure of communication with other communication instruments, where the control procedure performs authentication using security method one that is based on the frequency channel to be used in the communication in which the communication instrument and other communication instruments operate together, which is a frequency channel included in a specific frequency band.and perform authentication using a first or second security method based on a frequency channel to be used in the communication of the joint operation, which is not a frequency channel included in a specific frequency band.

22. Programs for enabling computer devices to function as individual means of communication instruments according to any one of claims 1, 5, 8, and 12;