Communication Apparatus Authentication Level Consistency

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

There is a difference in authentication levels between connections made without an access point and those made with an access point in wireless communication systems, particularly in printing apparatuses that can operate in both infrastructure and direct modes, leading to potential unauthorized access and security deviations.

Innovation Solution

A communication apparatus and method that establish connections between an access point and a communication device, using a predetermined authentication method to inhibit certain communications between the device and an information processing apparatus, ensuring consistent authentication levels by disabling wireless direct mode when operating in infrastructure mode with an authentication server.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a printing apparatus simultaneously executes infrastructure connection and direct connection, then communication versatility is improved, but authentication level consistency deteriorates

Engineering Contradiction:

Improvecommunication versatilityVSAvoidauthentication level consistency

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The printing apparatus dynamically switches between infrastructure mode and direct mode based on connection requirements. When infrastructure connection is established, direct connection is prohibited; when infrastructure connection is disconnected, direct connection can be established. This dynamic switching maintains authentication level consistency while preserving communication versatility.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

Different authentication methods are applied to different connection modes. Infrastructure connection uses authentication methods appropriate for access point-mediated communication, while direct connection uses authentication methods suitable for peer-to-peer communication. This localized authentication approach ensures each mode maintains its own security standards without compromising overall authentication consistency.

Inventive Principle:

Principle #3Local quality

2Reliability

If authentication processing is executed in wireless connection procedure, then security is improved, but communication complexity increases

Engineering Contradiction:

ImprovesecurityVSAvoidcommunication complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

Authentication processing is executed in advance during the wireless connection procedure before any actual communication takes place. The printing apparatus completes authentication with the access point or information processing apparatus beforehand, establishing a secure connection state. This preliminary authentication ensures security is built into the foundation of communication rather than added as a separate layer.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12022047B2Communication apparatus, control method, and non-transitory computer-readable storage medium storing program

Publication Date: 2024.06.25 CANON KK

AI summary

A communication apparatus capable of communicating with an information processing apparatus and an access point includes an establishment unit configured to establish connection between the access point and the communication apparatus, and a control unit configured to execute, based on a fact that an authentication method used for connection between the communication apparatus and the access point is a predetermined authentication method, predetermined processing to inhibit at least part of communication between the communication apparatus and the information processing apparatus without interposing the access point.