JP2006261939A - Communications system, communications apparatus and method, recording medium, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a communications system, whereby communication can be set more simply, and to provide a communications apparatus and method, a recording medium, and a program. <P>SOLUTION: Upon the receipt of a probe request before a predetermined time has elapsed, a MAC address extract section 55 extracts a MAC address of a device, on the basis of the probe request transmitted from the device connected to a wireless LAN segment using an access point 11 for a relay station. A MAC address storage control section 56 stores and registers the extracted MAC address to a MAC address table, stored in a setting information storage section 26. A filtering processing section 57 executes MAC address filtering, in accordance with the MAC address stored in the MAC address table. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a communication system, a communication apparatus and method, a recording medium, and a program, and more particularly, to a communication system, a communication apparatus and method, a recording medium, and a program that can easily set communication.

  In recent years, with the spread of network technology, even devices other than personal computers have become widely used by being connected to a network. Moreover, as a technology for realizing a network, in addition to a network using wired communication compliant with a standard such as Ethernet (Ethernet (registered trademark)) in a so-called physical layer, a network using wireless communication has been generalized. Yes.

  Wireless LAN based on IEEE (The Institute of Electrical and Electronic Engineers, Inc.) 802.11 standard is now generally used as a standard for so-called wireless LAN (Local Area Network), which is a network that uses wireless communication. .

  The wireless LAN includes an infrastructure system that allows communication between a wireless LAN relay station called an access point and an equipment called a station, and an ad hoc that allows stations to communicate directly without using an access point ( Ad Hoc) method, and the infrastructure method is generally used.

  In infrastructure-based wireless LANs, MAC address filtering using MAC (Media Access Control) addresses, which are unique numbers assigned to each wireless LAN interface, is generally used to eliminate unauthorized access. MAC address authentication) is performed. MAC address filtering registers MAC addresses in access points, and checks access from devices with unregistered MAC addresses by checking the registered MAC addresses against the MAC addresses contained in received packets. This is a process of restricting devices to be connected to the access point by refusing.

  In other words, by performing MAC address filtering, only devices that have been permitted to connect to a wireless LAN segment (LAN configuration unit) with a certain access point as a relay station (registered MAC addresses) relay that access point. It becomes possible to connect to a wireless LAN segment as a station, and access from unauthorized devices is restricted.

  In addition, there is also a device authentication device that authenticates and registers only the MAC address of the client terminal authorized by the user in the server's MAC address table, and executes MAC address filtering that permits access to the client terminal of the authenticated and registered MAC address. (For example, patent document 1).

JP 2004-152249 A

  However, when performing MAC address filtering using a MAC address, it is necessary to set the MAC address in the access point, and a method of manually entering the MAC address manually using a personal computer or the like is common. It was. Therefore, there is a problem in that it cannot be set if there is no personal computer at the time of setting, and it cannot be easily set by a user who has knowledge about the network.

  For example, when a consumer device such as a digital still camera (digital camera) is to be connected to a wireless LAN as a station, when various settings are made on the device body side, a device that does not have a high-functional input means such as a keyboard If it is, operation at the time of a setup will become complicated. In addition, there is a possibility that a user who does not have specialized knowledge about the network may not know how to perform the setting.

  In addition, for example, the device authentication apparatus disclosed in Japanese Patent Application Laid-Open No. 2004-152249 registers a MAC address for performing MAC address filtering by a predetermined operation by the user, and thus the operation is complicated. In addition, unless the user has knowledge about the network, it could not be set easily.

  The present invention has been made in view of such a situation, and makes it possible to set communication more easily.

  In the communication system according to the present invention, the first communication device is configured to select setting information that is arbitrarily selected and has a common value for itself and the other party so as to eliminate unauthorized connections and connect only to a legitimate party. Using the determination means for determining whether or not a predetermined period has elapsed since the communication became possible, and the device information specifying the second communication device transmitted from the second communication device is received. Receiving means, a first storage means for storing device information when it is determined that a predetermined time has not elapsed, and a limiting means for limiting wireless communication based on the stored device information And when the second communication device becomes communicable with the second storage means for storing the setting information and the first communication device, the device information on the device is obtained based on the stored setting information. Transmission means for transmitting to the first communication device And wherein the Rukoto.

  The communication device of the present invention can communicate using setting information that is arbitrarily selected and has a common value for itself and the other party so as to eliminate unauthorized connections and connect only to a legitimate party. Determination means for determining whether or not a predetermined period has elapsed, receiving means for receiving device information transmitted from another communication device for specifying other communication devices, and a predetermined time When it is determined that the period of time has not passed, a storage unit that stores device information and a limiting unit that limits wireless communication based on the stored device information are provided.

  The restricting means can restrict wireless communication based on device information that is a stored MAC address.

  The storage means further includes setting information, encoding means for encoding the stored setting information into a two-dimensional code, and display control means for controlling display of the two-dimensional code. .

  The communication apparatus according to the present invention includes a generation unit that generates setting information.

  The generation unit can generate, as setting information, an SSID that is an identifier for designating a specific network by wireless communication and a WEP key that is an encryption key for encrypting data.

  The communication method of the present invention enables communication using setting information that is arbitrarily selected and has a common value for itself and the other party so as to eliminate unauthorized connections and connect only to a legitimate party. A determination step for determining whether or not a predetermined period has elapsed, a reception control step for controlling reception of device information specifying another communication device transmitted from another communication device, Including a storage control step for controlling storage of device information when it is determined that a predetermined time has not elapsed, and a limiting step for limiting wireless communication based on the stored device information. To do.

  The recording medium program of the present invention allows communication using setting information that is arbitrarily selected and has a common value for itself and the other party so as to eliminate unauthorized connections and connect only to a legitimate party. Then, a determination step for determining whether or not a predetermined period has passed, and a reception control step for controlling reception of device information specifying another communication device transmitted from another communication device, Including a storage control step for controlling storage of device information when it is determined that a predetermined time has not elapsed, and a limiting step for limiting wireless communication based on the stored device information. Features.

  The program of the present invention enables communication using setting information that is arbitrarily selected and has a common value for itself and the other party so as to eliminate unauthorized connections and connect only to a legitimate party. A determination step for determining whether or not a predetermined period has elapsed, a reception control step for controlling reception of device information specifying another communication device transmitted from another communication device, and a predetermined step A storage control step for controlling storage of device information, and a restriction step for limiting wireless communication based on the stored device information, when it is determined that a predetermined time has not elapsed. To do.

  The communication device according to the present invention includes a storage unit that stores setting information that is arbitrarily selected and has a common value for itself and the other party, in order to eliminate unauthorized connections and connect only to a legitimate party. And a transmission means for transmitting device information for identifying itself to another communication device based on the stored setting information when communication with the other communication device becomes possible.

  The communication apparatus of the present invention includes an imaging control unit that controls imaging of a two-dimensional code obtained by encoding setting information displayed by another communication device, and a decoding unit that decodes the captured two-dimensional code into setting information. The storage means stores the decoded setting information.

  The communication method of the present invention is a storage control step for controlling the storage of setting information that is arbitrarily selected and is set to a common value for itself and the other party in order to eliminate unauthorized connections and connect only to a legitimate party. And a transmission control step for controlling transmission of device information for identifying itself to other communication devices based on stored setting information when communication with other communication devices becomes possible. Features.

  The program of the recording medium of the present invention is a memory that controls storage of setting information that is arbitrarily selected and is set to a common value for itself and the other party so as to eliminate unauthorized connections and connect only to a legitimate party. A control step, and a transmission control step for controlling transmission of device information for identifying itself to other communication devices based on the stored setting information when communication with other communication devices becomes possible It is characterized by that.

  The program of the present invention is a storage control step for controlling the storage of setting information that is arbitrarily selected and is set to a common value for itself and the other party, in order to eliminate unauthorized connections and connect only to a legitimate party. When communication with another communication device becomes possible, based on the stored setting information, a transmission control step for controlling transmission of device information for identifying itself to another communication device is executed. Features.

  In the communication system of the present invention, setting information which is arbitrarily selected by the first communication device and is set to a common value for itself and the other party so as to eliminate unauthorized connections and connect only to a legitimate party. It is determined whether or not a predetermined period has elapsed since communication is possible using the device, and device information specifying the second communication device transmitted from the second communication device is received, If it is determined that the predetermined time has not elapsed, the device information is stored, the wireless communication is restricted based on the stored device information, and the setting information is stored by the second communication device, When communication with the first communication device becomes possible, the device information of the user is transmitted to the first communication device based on the stored setting information.

  In the communication apparatus and method, the storage medium, and the program of the present invention, a setting that is arbitrarily selected and is set to a common value for itself and the other party so as to eliminate unauthorized connections and connect only to a legitimate party. It is determined whether or not a predetermined period has elapsed since communication is possible using information, and device information specifying another communication device transmitted from another communication device is received in advance. If it is determined that the predetermined time has not elapsed, the device information is stored, and wireless communication is restricted based on the stored device information.

  In the communication apparatus and method, the storage medium, and the program of the present invention, a setting that is arbitrarily selected and is set to a common value for itself and the other party so as to eliminate unauthorized connections and connect only to a legitimate party. When information is stored and communication with another communication device becomes possible, device information for identifying itself is transmitted to the other communication device based on the stored setting information.

  According to the present invention, communication can be easily set. Further, according to the present invention, communication can be set more easily.

  BEST MODE FOR CARRYING OUT THE INVENTION The best mode of the present invention will be described below. The correspondence relationship between the disclosed invention and the embodiments is exemplified as follows. Although there are embodiments which are described in this specification but are not described here as corresponding to the invention, the embodiments correspond to the invention. It does not mean that it is not a thing. Conversely, even if an embodiment is described herein as corresponding to an invention, that means that the embodiment does not correspond to an invention other than the invention. It is not a thing.

  Further, this description does not mean all the inventions described in the specification. In other words, this description is for the invention described in the specification and not claimed in this application, i.e., for the invention that will be applied for in the future or that will appear as a result of amendment and added. It does not deny existence.

  According to the present invention, a communication system is provided. This communication system (for example, the communication system 1 in FIG. 1) is used for the first communication device (for example, the access point 11 in FIG. 1) to eliminate unauthorized connection and connect only to a legitimate partner. A determination unit that determines whether or not a predetermined period has elapsed since communication is possible using setting information (for example, setting information) that is arbitrarily selected and is common to both the user and the other party. For example, the determination unit 54 in FIG. 2 and a receiving unit (for example, the wireless communication unit 28 in FIG. 2) that receives device information that is transmitted from the second communication device and identifies the second communication device, If it is determined that the predetermined time has not elapsed, the first storage unit (for example, the setting information storage unit 26 in FIG. 2) that stores the device information and the wireless device information based on the stored device information. Limiting means for limiting communication (for example, 2, and the second communication device (for example, the digital camera 12 in FIG. 1) stores the setting information in the second storage unit (for example, the setting information storage unit 107 in FIG. 3). ) And transmission means (for example, wireless communication in FIG. 3) that transmits its own device information to the first communication device based on the stored setting information when communication with the first communication device becomes possible. Part 108).

  According to the present invention, a communication device is provided. This communication device (for example, the access point 11 in FIG. 1) is set as an arbitrarily selected setting information that eliminates unauthorized connections and connects only to a legitimate partner and is a value common to the partner and the partner. 2 is used to determine whether a predetermined period of time has elapsed since the communication became possible, for example, the determination unit 54 in FIG. Receiving means for receiving device information that identifies the communication device (for example, the wireless communication unit 28 in FIG. 2), and storage means for storing device information (for example, when it is determined that a predetermined time has not passed) The setting information storage unit 26) in FIG. 2 and a limiting unit (for example, the filtering processing unit 57 in FIG. 2) for limiting wireless communication based on the stored device information are provided.

  The restricting means can restrict wireless communication based on device information that is a stored MAC address.

  The storage unit further stores setting information, and controls the encoding unit (for example, the encoding unit 52 in FIG. 2) that encodes the stored setting information into a two-dimensional code, and controls the display of the two-dimensional code. Display control means (for example, the display control unit 53 in FIG. 2).

  The communication apparatus includes a generation unit (for example, the setting information generation unit 51 in FIG. 2) that generates setting information.

  The generation unit can generate, as setting information, an SSID that is an identifier for designating a specific network by wireless communication and a WEP key that is an encryption key for encrypting data.

  According to the present invention, a communication method is provided. This communication method eliminates unauthorized connections and enables communication using setting information that is arbitrarily selected and is set to a common value for itself and the other party in order to connect only to the right party. A determination step for determining whether or not a predetermined period has elapsed (for example, the process of step S58 in FIG. 5), and reception of device information specifying another communication device transmitted from another communication device A reception control step (for example, the process in step S57 in FIG. 5) and a storage control step (for example, in FIG. 5) for controlling storage of device information when it is determined that a predetermined time has not elapsed. Step S60) and a restriction step for restricting wireless communication based on the stored device information (for example, step S64 in FIG. 5).

  According to the present invention, a program is provided. This program eliminates unauthorized connections and enables communication using setting information that is arbitrarily selected to connect only to a legitimate partner, and that is set to a common value for itself and the partner. A determination step for determining whether or not a predetermined period has passed (for example, the process of step S58 in FIG. 5), and reception of device information specifying another communication device transmitted from another communication device. A reception control step to control (for example, the process of step S57 in FIG. 5) and a storage control step to control storage of device information (for example, the step in FIG. 5) when it is determined that a predetermined time has not elapsed. Based on the stored device information, a limiting step for limiting wireless communication (for example, the processing in step S64 in FIG. 5) is executed.

  This program can be stored in a storage medium (for example, the magnetic disk 41 in FIG. 2).

  According to the present invention, a communication device is provided. This communication device (for example, the digital camera 12 in FIG. 1) is set to be arbitrarily selected and set to a common value for itself and the other party in order to eliminate unauthorized connections and connect only to a legitimate party. Storage means (for example, the setting information storage unit 107 in FIG. 3) and when communication with another communication device becomes possible, based on the stored setting information, the device information for identifying itself is changed to other information. Transmission means (for example, the wireless communication unit 108 in FIG. 3) for transmitting to the communication device.

  The communication apparatus includes an imaging control unit (for example, an imaging control unit 141 in FIG. 3) that controls imaging of a two-dimensional code obtained by encoding setting information displayed by another communication device, and setting information on the captured two-dimensional code. And a decoding unit (for example, the decoding unit 142 in FIG. 3), and the recording unit can store the decoded setting information.

  According to the present invention, a communication method is provided. This communication method is a storage control step for controlling storage of setting information that is arbitrarily selected and is set to a common value for itself and the other party in order to eliminate unauthorized connections and connect only to a legitimate party. When the communication with the other communication device becomes possible, the transmission of the device information for identifying the device to the other communication device is controlled based on the stored setting information. Transmission control step (for example, the process of step S77 in FIG. 8).

  According to the present invention, a program is provided. This program is a storage control step (for example, for controlling the storage of setting information that is arbitrarily selected and is set to a value common to itself and the other party, in order to eliminate unauthorized connections and connect only to a legitimate party. Step S76 in FIG. 8) and when communication with another communication apparatus becomes possible, based on the stored setting information, the transmission of the device information identifying itself to other communication apparatuses is controlled. A transmission control step (for example, the process of step S77 in FIG. 8) is executed.

  This program can be stored in a storage medium (for example, the magnetic disk 121 in FIG. 3).

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram showing a configuration of an embodiment of a communication system 1 to which the present invention is applied. In this communication system 1, a digital camera 12 and a personal computer 13 are connected to an access point 11, and an access point 11 and a personal computer 15 are connected to a network 14.

  The access point 11 is an example of a communication device that relays data transmitted and received between a digital still camera (hereinafter referred to as a digital camera) 12 and a personal computer 13 by an infrastructure wireless LAN. For example, the access point 11 relays data transmitted from the digital camera 12 and transmits the data to the personal computer 13, or relays data transmitted from the personal computer 13 and transmits the data to the digital camera 12. .

  In addition, the access point 11 has a routing function and a NAT (Network Address Translation) function. For example, the access point 11 relays data transmitted from the digital camera 12 or the personal computer 13 to connect to the network. 14 is transmitted to the personal computer 15 connected to the network 14, or the data transmitted from the personal computer 15 connected to the network 14 is relayed and transmitted to the digital camera 12 or the personal computer 13.

  The digital camera 12 includes an interface (wireless LAN communication unit to be described later) for communicating by wireless LAN, and transmits data to the personal computer 13 or receives data from the personal computer 13 via the access point 11. It is an example of a communication apparatus. The digital camera 12 has an imaging function for imaging a subject and recording image data obtained as a result of imaging.

  The personal computer 13 is an example of a device that transmits data to the digital camera 12 or receives data transmitted from the digital camera 12 via the access point 11. For example, the personal computer 13 receives image data picked up by the digital camera 12 transmitted from the digital camera 12 via the access point 11 and records the received image data.

  An access point 11 and a personal computer 15 are connected to the network 14. The network 14 includes wired or wireless networks or communication lines connected to each other. For example, the access point 11 and the personal computer 15 are configured in accordance with a predetermined protocol such as TCP / IP (Transmission Control Protocol / Internet Protocol). Communicate with each other.

  The personal computer 15 is an example of a device that transmits data to the digital camera 12 or receives data transmitted from the digital camera 12 via the access point 11 and the network 14. For example, the personal computer 15 receives image data captured by the digital camera 12 transmitted from the digital camera 12 via the access point 11 and the network 14 and records the received image data.

  In the following, in this embodiment, the digital camera 12 will be described as an example of a communication device. However, the present invention is not limited to this, and for example, a camcorder (camera integrated video recorder), PDA (Personal Digital Assistance), ( The present invention can be applied to an interface (for example, a wireless LAN card) or a device having a communication function for communication via a wireless LAN, such as a mobile phone (with an imaging function) or a personal computer (with an imaging function).

  In the above-described example, for ease of explanation, the digital camera 12 and the personal computer 13 are described as examples of devices connected to the access point 11. However, the device can be connected to the access point 11. It is possible to increase or decrease the number of devices connected in a range of various numbers. That is, an arbitrary number of devices can be connected to the access point 11.

  Further, instead of the personal computer 13 or the personal computer 15, a device that can be connected to the access point 11 or the network 14, such as a digital camera, a camcorder, a PDA, or a mobile phone (with an imaging function) may be connected. Further, the access point 11 can be configured to connect only to the digital camera 12 and the personal computer 13 without being connected to the external network 14.

  FIG. 2 is a block diagram showing a functional configuration of the access point 11.

  The control unit 21 includes a general-purpose CPU (Central Processing Unit), an MPU (Micro Processing Unit), or a dedicated processor, and controls each unit of the access point 11. For example, the control unit 21, which is a CPU, implements various functions by executing a program stored in the memory 22 and controls each unit of the access point 11.

  In addition, the control unit 21 supplies data to the memory 22 or acquires data temporarily stored in the memory 22 as necessary.

  The control unit 21 is configured to include a setting information generation unit 51, an encoding unit 52, a display control unit 53, a determination unit 54, a MAC address extraction unit 55, a MAC address storage control unit 56, and a filtering processing unit 57. . For example, the control unit 21 that executes the program includes a setting information generation unit 51, an encoding unit 52, a display control unit 53, a determination unit 54, a MAC address extraction unit 55, a MAC address storage control unit 56, and a filtering processing unit 57. make it happen.

  The setting information generation unit 51, the encoding unit 52, the display control unit 53, the determination unit 54, the MAC address extraction unit 55, the MAC address storage control unit 56, and the filtering processing unit 57 may be configured by hardware. The setting information generation unit 51, the encoding unit 52, the display control unit 53, the determination unit 54, the MAC address extraction unit 55, the MAC address storage control unit 56, and the filtering processing unit 57 are realized by a computer that executes the program. May be.

  The setting information generating unit 51 generates setting information for eliminating unauthorized connections and connecting only valid parties. For example, the setting information generation unit 51 generates a random number such as a binary random number, a Poisson random number, or a normal random number in accordance with the operation signal supplied from the input unit 23, and the generated random number is an example of the setting information. By using a certain SSID (Service Set ID) or WEP (Wired Equivalent Privacy) key, an SSID that is “abcde123” and a WEP key that is “xyz1359ab” are generated, and the generated SSID and WEP key are stored in the setting information storage unit. 26 and the encoding unit 52.

  In addition, the setting information generation unit 51 generates setting information that is arbitrarily selected and has a common value on the transmission side and the reception side.

  Here, the SSID is an identifier for designating a specific network in a wireless LAN, and is connected to a wireless LAN segment using the access point 11 and the access point 11 as a relay station (for example, a digital camera 12). A common character string is designated.

  WEP refers to a function of encrypting data to be communicated by an encryption method based on a so-called common key encryption method in which the same key (encryption key) is set in both the access point 11 and the device. By setting a WEP key (hereinafter referred to as a WEP key), not only can the data (packets) being communicated be encrypted, but also devices that do not have the WEP key set correctly cannot be connected to the access point 11, so access It can also be used for restriction.

  The encoding unit 52 encodes (encodes) the SSID and WEP key supplied from the setting information generation unit 51 into a two-dimensional code. The encoding unit 52 supplies the encoded two-dimensional code to the display control unit 53. More specifically, for example, the encoding unit 52 uses an SSID “abcde123” and a WEP key “xyz1359ab” supplied from the setting information generation unit 51 as a QR code (trademark) as an example of a two-dimensional code. And the encoded QR code is supplied to the display control unit 53.

  That is, the encoding unit 52 generates a two-dimensional code including the SSID and WEP key supplied from the setting information generation unit 51.

  Here, the two-dimensional code is a code having information in a horizontal and vertical two-dimensional direction. The two-dimensional code is different from the one-dimensional code such as a bar code that has information only in the horizontal direction. In addition, kana, kanji, and sentences can be coded, and large volumes of data can be handled.

  The QR code is the only two-dimensional code developed in Japan that has been certified by the International Association of Automatic Recognition Industries (AIM International) as a global standard. It has been enacted. The QR code has an advantage that a large amount of information can be expressed in a small space. For example, if it is information of only numbers, information of a maximum of 7089 characters can be encoded.

  In this embodiment, a QR code will be described as an example of a two-dimensional code. However, the present invention is not limited to this, and for example, a Cyber Code (trademark) may be used.

  In this embodiment, a QR code will be described as an example of a two-dimensional code. However, the present invention is not limited to this. For example, DataMatrix (trademark), PDF417 (trademark), Cyber Code (trademark) Etc. may be used. Of course, the two-dimensional code may be a stack type or a matrix type.

  The display control unit 53 controls the display of the two-dimensional code. For example, the display control unit 53 displays the QR code encoded from the SSID “abcde123” and the WEP key “xyz1359ab” supplied from the encoding unit 52 on the screen of the display unit 24 described later. .

  The determination unit 54 determines whether or not a predetermined period has elapsed after the display of the two-dimensional code is started under the control of the display control unit 53. That is, the determination unit 54 can perform communication using setting information that is arbitrarily selected and has a common value on the transmission side and the reception side in order to eliminate unauthorized connections and connect only valid parties. It is determined whether or not a predetermined period has elapsed since that time.

  For example, the determination unit 54 stores a threshold value indicating a predetermined period. Based on the notification from the display control unit 53 and information indicating the time from a real time clock (not shown), the determination unit 54 determines whether or not a predetermined period has elapsed since the display of the two-dimensional code was started. judge. Note that the determination unit 54 may determine whether a predetermined period has elapsed since the start of communication with the other party.

  The MAC address extraction unit 55 extracts unique information for identifying the partner from the data transmitted from the partner. For example, the MAC address extraction unit 55 extracts the MAC address from the probe request transmitted from the digital camera 12.

  More specifically, for example, the MAC address extraction unit 55 receives a MAC address that is a unique number assigned to each wireless LAN interface provided in the digital camera 12 from the probe request received and stored in the memory 22. To extract.

  The MAC address extraction unit 55 supplies the extracted setting information such as a MAC address to the MAC address storage control unit 56, for example.

  The MAC address storage control unit 56 stores the setting information extracted by the MAC address extraction unit 55 in the setting information storage unit 26 described later. For example, the MAC address storage control unit 56 stores the MAC address extracted from the probe request in the wireless LAN using the access point 11 as a relay station to perform MAC address filtering stored in the setting information storage unit 26. The MAC address is registered by storing it in a table (hereinafter referred to as a MAC address table) that stores MAC addresses of devices that are permitted to connect to the segment.

  Here, although details will be described later, a probe request is defined in the wireless LAN standard in order for a device to be connected to a certain wireless LAN segment to search for an access point that is a relay station of the wireless LAN segment. It is a packet (frame) transmitted for broadcast.

  For example, the MAC address extraction unit 55 extracts the MAC address “AA-BB-CC-11-11-11” of the digital camera 12 from the probe request stored in the memory 22. The MAC address storage control unit 56 registers the extracted MAC address “AA-BB-CC-11-11-11” in the MAC address table stored in the setting information storage unit 26.

  The filtering processing unit 57 performs MAC address filtering according to the MAC address of each device stored in the MAC address table stored in the setting information storage unit 26. For example, the filtering processing unit 57 stores “AA-BB-CC-11-11-11”, “DD-EE-FF-22-22-22”, “BB-CC-DD” stored in the MAC address table. -33-33-33 ”,“ EE-FF-AA-44-44-44 ”, and“ AA-BB-CC-55-55-55 ”for each device with a MAC address Then, MAC address filtering is executed so as to permit connection to the wireless LAN segment that uses the relay station as its relay station.

  For example, the filtering processing unit 57 adds “AA-BB-CC-11-11-11”, “DD-EE-FF-22-22-22”, “BB-CC-DD-33-” to the MAC address table. If MAC addresses of “33-33”, “EE-FF-AA-44-44-44”, and “AA-BB-CC-55-55-55” are stored, they are stored in the MAC address table. Suppress the connection of wireless LAN segments that use the relay station as a relay station to devices with MAC addresses that are not “AA-BB-CC-77-77-77” (not allowed).

  The input unit 23 includes a switch or a dial, and supplies an operation signal corresponding to a user operation to the control unit 21. For example, the input unit 23 is provided in the access point 11 and supplies an operation signal corresponding to the pressing to the setting information generation unit 51 when pressed by the user.

  The display unit 24 includes, for example, an LCD (Liquid Crystal Display), an organic EL (Electro Luminescence) display, or an LED (Light Emitting Diode) display, and displays a two-dimensional code based on the control of the display control unit 53. To do. For example, the display unit 24 displays a QR code encoded from the SSID “abcde123” and the WEP key “xyz1359ab” based on the control of the display control unit 53.

  The communication unit 25 includes a wired LAN interface such as Ethernet, and connects to other devices via the network 14 to transmit and receive data. For example, the communication unit 25 is connected to the personal computer 15 via the network 14 to transmit / receive data.

  For example, the setting information storage unit 26 includes a nonvolatile memory such as an EEPROM (Electronically Erasable and Programmable Read Only Memory) or a flash memory, and is supplied from the MAC address storage control unit 56 under the control of the MAC address storage control unit 56. The MAC address is stored so that the incoming MAC address is stored in the MAC address table.

  The setting information storage unit 26 includes a nonvolatile memory such as an EEPROM or a flash memory, for example, and stores various setting information. That is, the setting information is set by being stored in the setting information storage unit 26. For example, the setting information storage unit 26 receives the SSID and WEP key that are supplied from the setting information generation unit 51 and are commonly set in devices such as the digital camera 12 and the personal computer 13 connected to the access point 11. Remember.

  The wireless communication unit 28 communicates with other devices such as the digital camera 12 or the personal computer 13 by wireless. For example, the wireless communication unit 28 wirelessly communicates with the digital camera 12 or the personal computer 13 by a communication method compliant with the IEEE802.11a, IEEE802.11b, or IEEE802.11g standard.

  For example, when receiving a signal, the wireless communication unit 28 receives a modulated wave transmitted from another device as a radio wave based on the control of the control unit 21 and performs a predetermined process on the received modulated wave. Then, the data is demodulated. The wireless communication unit 28 stores the demodulated data in the memory 22 via the bus 27 based on the control of the control unit 21. In addition, when transmitting a signal, the wireless communication unit 28 modulates the data by performing predetermined processing on the data stored in the memory 22 based on the control of the control unit 21, and converts the modulated data into other data. Send to the device.

  When the wireless communication unit 28 communicates with other devices wirelessly, the control unit 21 controls communication of the wireless communication unit 28 based on the setting information stored in the setting information storage unit 26. For example, the control unit 21 compares the SSID transmitted from another device with the SSID stored in the setting information storage unit 26, and when the transmitted SSID matches the stored SSID. The communication of the wireless communication unit 28 is controlled so as to start wireless communication with other devices. For example, the control unit 21 encrypts data to be transmitted to the wireless communication unit 28 using the WEP key stored in the setting information storage unit 26 as an encryption key, or is received by the wireless communication unit 28 Decrypt the data.

  The wireless communication unit 28 is configured to include an antenna 61, a high frequency processing unit 62, a baseband processing unit 63, and a MAC unit 64.

  When receiving a signal, the antenna 61 receives a modulated wave transmitted from another device as a radio wave by wireless communication. The antenna 61 supplies the received modulated wave signal to the high frequency processing unit 62. Further, when transmitting a signal, the antenna 61 radiates the modulated signal supplied from the high frequency processing unit 62 as a radio wave.

  When receiving a signal, the high frequency processing unit 62 demodulates the modulated wave supplied from the antenna 61 by a predetermined demodulation method. The high frequency processing unit 62 supplies a signal obtained by demodulation to the baseband processing unit 63. Further, when transmitting a signal, the high frequency processing unit 62 modulates the signal supplied from the baseband processing unit 63 by a predetermined modulation method. The high frequency processing unit 62 supplies the modulated signal (modulated wave) to the antenna 61.

  When receiving the signal, the baseband processing unit 63 converts the signal, which is an analog signal, supplied from the high frequency processing unit 62 into digital signal data. The baseband processing unit 63 supplies the digital signal data generated by the conversion to the MAC unit 64. Further, when transmitting a signal, the baseband processing unit 63 converts the digital signal data supplied from the MAC unit 64 into a signal that is an analog signal. The baseband processing unit 63 supplies the signal generated by the conversion to the high frequency processing unit 62.

  When receiving the signal, the MAC unit 64 converts the data supplied from the baseband processing unit 63 into a predetermined format. For example, the MAC unit 64 extracts a header and an error correction code (error detection code) included in the data supplied from the baseband processing unit 63, and specifies a device that has transmitted data based on the header. Then, the error of the received data is corrected based on the error correction code, and the data is converted into data having a system in which the header and the error correction code are removed. The MAC unit 64 stores the data converted into a predetermined format in the memory 22 or supplies the data to the control unit 21 via the bus 27.

  Further, when transmitting a signal, the MAC unit 64 converts data to be transmitted into a predetermined format. For example, the MAC unit 64 reads data to be transmitted from the memory 22, and converts the read data into a predetermined format by adding a header, an error correction code (error detection code), and the like. The MAC unit 64 supplies the data converted into a predetermined format to the baseband processing unit 63.

  The drive 29 is connected to the access point 11 as necessary. The drive 29 includes a magnetic disk 41 (for example, HDD (Hard Disk)), an optical disk 42 (for example, recordable CD (Compact Disc) and recordable DVD (Digital Versatile Disc)), and a magneto-optical disk 43 (for example, MD (Mini-Disc) (trademark)) or semiconductor memory 44 (for example, a memory card) is mounted as appropriate. The drive 29 reads a program recorded from the loaded magnetic disk 41, optical disk 42, magneto-optical disk 43, or semiconductor memory 44, and supplies the read program to the control unit 21.

  As described above, the control unit 21 can execute the program read from the magnetic disk 41, the optical disk 42, the magneto-optical disk 43, or the semiconductor memory 44, which is an example of the recording medium.

  FIG. 3 is a block diagram illustrating a functional configuration of the digital camera 12.

  The camera unit 101 includes, for example, an imaging device, an optical system such as a lens that forms an image on the imaging device, and a circuit that performs predetermined signal processing. Based on the control of the imaging control unit 141, the camera unit 101 forms an image of a subject, photoelectrically converts the formed image, and generates image data corresponding to the image. The camera unit 101 applies predetermined signal processing to the generated image data based on the control of the imaging control unit 141, and supplies the image data subjected to the predetermined signal processing to the drive 109. And recording on the recording medium 110.

  The camera unit 101 includes an optical block 131, a CCD (Charge Coupled Devices) 132, an A / D (Analog / Digital) conversion unit 133, and a signal processing unit 134.

  The optical block 131 includes, for example, an optical lens, a focus mechanism, a shutter mechanism, and a diaphragm (iris) mechanism, and collects light reflected on the subject as an image, that is, collects an optical image of the subject as a light receiving unit of the CCD 132. To form an image.

  The CCD 132 is composed of a CCD sensor, and converts an optical image of the subject imaged by the optical block 131 into an image signal that is an analog electrical signal by photoelectrically converting the image. The CCD 132 supplies an image signal, which is an analog electric signal obtained as a result of the conversion, to the A / D converter 133.

  Note that the photoelectric conversion element taking the CCD 132 as an example is not limited to a CCD sensor, but may be any imaging element that can convert an optical image into an electrical signal, such as a CMOS (Complementary Metal Oxide Semiconductor) sensor.

  The A / D converter 133 converts the image signal that is an analog signal supplied from the CCD 132 into image data that is a digital signal. The A / D conversion unit 133 supplies image data, which is a digital signal generated by the conversion, to the signal processing unit 134.

  The signal processing unit 134 applies predetermined signal processing to image data that is a digital signal supplied from the A / D conversion unit 133.

  For example, the signal processing unit 134 stores the image data supplied from the A / D conversion unit 133 in the memory 103 via the bus 102, thereby appropriately reading and reading the image data stored in the memory 103. AGC (Automatic Gain Control) processing for controlling the gain of image data, and correcting the value (pixel value) of the image data, the entire image data based on a predetermined reference color such as white AWB (Auto White Balance) processing that corrects the color of the displayed image, AF (Auto Focus) processing that focuses on the subject, and AE (Auto Exposure) processing that determines the exposure based on the brightness of the subject Apply signal processing such as

  Further, for example, the signal processing unit 134 controls the optical block 131 based on the image data supplied from the A / D conversion unit 133, and executes an AF (Auto Focus) process for focusing on the subject. To do.

  Further, the signal processing unit 134 encodes the image data subjected to the signal processing by a compression encoding method that compresses and encodes a predetermined still image (data) such as a JPEG (Joint Photographic Experts Group) method. . The signal processing unit 134 supplies the compressed image data to the drive 109 via the bus 102 and causes the recording medium 110 (for example, the semiconductor memory 124) to record the image data.

  Furthermore, the signal processing unit 134 records image data desired by the user in accordance with an operation input from the user to the input unit 105 such as a switch, a control key, or a touch panel provided on the screen of the display unit 106. 110, the image data is decompressed and decompressed by decoding the compression-encoded image data supplied from the recording medium 110 via the bus 102 according to the compression encoding method. The processed image data is supplied to the display unit 106 via the bus 102 to display an image.

  The control unit 104 includes a general-purpose CPU, MPU, or a dedicated processor, and controls each unit of the digital camera 12. For example, the control unit 104, which is a CPU, implements various functions by executing a program stored in the memory 103 and controls each unit of the digital camera 12.

  Further, the control unit 104 supplies data to the memory 103 or acquires data temporarily stored in the memory 103 as necessary.

  The control unit 104 is configured to include an imaging control unit 141, a decoding unit 142, a setting information storage control unit 143, and a probe request transmission control unit 144. For example, the control unit 104 that is a CPU that executes a program realizes the imaging control unit 141, the decoding unit 142, the setting information storage control unit 143, and the probe request transmission control unit 144.

  Even if the imaging control unit 141, the decoding unit 142, the setting information storage control unit 143, and the probe request transmission control unit 144 are configured by hardware, the imaging control unit 141 and the decoding unit 142 are executed by a computer that executes a program. The setting information storage control unit 143 and the probe request transmission control unit 144 may be realized.

  The imaging control unit 141 controls the camera unit 101 to photoelectrically convert an image on which a subject image is formed, and generate image data corresponding to the image. The imaging control unit 141 controls the camera unit 101 to apply predetermined signal processing to the generated image data and supply the image data subjected to the predetermined signal processing to the drive 109. And recording on the recording medium 110.

  The decoding unit 142 decodes (decodes) the two-dimensional code image data stored in the memory 103. For example, the decoding unit 142 decodes the image data of the QR code 203 stored in the memory 103.

  The setting information storage control unit 143 acquires (extracts) the SSID and WEP key from the data obtained as a result of the decoding, and supplies the acquired SSID and WEP key to the setting information storage unit 107. For example, the setting information storage control unit 143 acquires the SSID that is “abcde123” and the WEP key that is “xyz1359ab” from the data obtained as a result of decoding, and the acquired SSID and WEP key are stored in the setting information storage unit 107. Supply.

  The probe request transmission control unit 144 controls transmission of unique information for identifying itself in the wireless communication unit 108. For example, the probe request transmission control unit 144 causes the wireless communication unit 108 to transmit a probe request including its own MAC address to the access point 11.

  More specifically, for example, when the setting information storage control unit 143 stores the SSID and WEP key in the setting information storage unit 107, the probe request transmission control unit 144 causes the wireless communication unit 108 to store the MAC described later. The probe request which is a packet including the MAC address memorize | stored in the part is transmitted to the access point 11.

  The input unit 105 includes, for example, a shutter release button for a user to take a picture, a touch panel provided on the screen of the display unit 109, a control key (switch) (not shown), and the like, and a user operation (input). Is supplied to the control unit 104.

  The display unit 106 includes, for example, an LCD, an organic EL display, or an LED display, and displays various images or character strings. For example, the display unit 106 displays an image displayed by the decoded image data supplied from the signal processing unit 134. Further, the display unit 106 displays an image of the user interface of the application program activated by the control unit 104 in accordance with a user operation.

  The setting information storage unit 107 is composed of, for example, a nonvolatile memory such as an EEPROM or a flash memory, and stores various setting information. That is, the setting information is set by being stored in the setting information storage unit 107.

  For example, the setting information storage unit 107 performs the setting by storing the SSID “abcde123” and the WEP key “xyz1359ab” supplied from the setting information storage control unit 143.

  The wireless communication unit 108 communicates with the access point 11 wirelessly. For example, the wireless communication unit 108 communicates with other devices wirelessly by a communication method compliant with the IEEE802.11a, IEEE802.11b, or IEEE802.11g standard.

  For example, when receiving a signal, the wireless communication unit 108 receives a modulated wave transmitted from the access point 11 as a radio wave according to the control of the control unit 104, and performs predetermined processing on the received modulated wave. Demodulate the data. The wireless communication unit 108 stores the demodulated data in the memory 103 via the bus 102 under the control of the control unit 104. Further, when transmitting a signal, the wireless communication unit 108 modulates the data by performing predetermined processing on the data stored in the memory 103 under the control of the control unit 104, and the modulated data is converted into an access point. 11 to send.

  The wireless communication unit 108 is configured to include an antenna 151, a high frequency processing unit 152, a baseband processing unit 153, and a MAC unit 154.

  When receiving a signal, the antenna 151 receives a modulated wave transmitted from the access point 11 by radio communication as a radio wave. The antenna 151 supplies the received modulated wave signal to the high frequency processing unit 152. In addition, when transmitting a signal, the antenna 151 radiates the modulated signal supplied from the high frequency processing unit 152 as a radio wave.

  When receiving a signal, the high frequency processing unit 152 demodulates the modulated wave supplied from the antenna 151 by a predetermined demodulation method. The high frequency processing unit 152 supplies a signal obtained by demodulation to the baseband processing unit 153. Further, when transmitting a signal, the high frequency processing unit 152 modulates the signal supplied from the baseband processing unit 153 by a predetermined modulation method. The high frequency processing unit 152 supplies the modulated signal (modulated wave) to the antenna 151.

  When the baseband processing unit 153 receives a signal, the baseband processing unit 153 converts the signal that is an analog signal supplied from the high-frequency processing unit 152 into digital signal data. The baseband processing unit 153 supplies the digital signal data generated by the conversion to the MAC unit 154. In addition, when transmitting a signal, the baseband processing unit 153 converts the digital signal data supplied from the MAC unit 154 into a signal that is an analog signal. The baseband processing unit 153 supplies the signal generated by the conversion to the high frequency processing unit 152.

  When receiving the signal, the MAC unit 154 converts the data supplied from the baseband processing unit 153 into a predetermined format. For example, the MAC unit 154 extracts the header and error correction code (error detection code) included in the data supplied from the baseband processing unit 153, and determines the access point 11 that has transmitted the data based on the header. The data is identified and corrected based on the error correction code to correct the error of the received data, and the data is converted into data with a header and error correction code removed. The MAC unit 154 stores the data converted into a predetermined format in the memory 103 or supplies the data to the control unit 104.

  Further, when transmitting a signal, the MAC unit 154 converts data to be transmitted into a predetermined format. For example, the MAC unit 154 reads data to be transmitted from the memory 103, and converts the read data into a predetermined format by adding a header, an error correction code (error detection code), and the like. The MAC unit 154 supplies the data converted into a predetermined format to the baseband processing unit 153.

  Further, the MAC unit 154 stores its own MAC address, and supplies the stored MAC address to the probe request transmission control unit 144.

  The drive 109 writes data to the attached recording medium 110 or reads data or a program from the attached recording medium 110. For example, when the recording medium 110 is a memory card, the drive 109 is configured with a predetermined interface corresponding to the memory card.

  The recording medium 110 is, for example, a magnetic disk 121 (for example, HDD), an optical disk 122 (for example, CD or DVD), a magneto-optical disk 123 (for example, MD (trademark)), or a semiconductor memory 124 (for example, a memory card). Consists of The recording medium 110 is detachably attached to the drive 109.

  Further, the drive 109 reads a program recorded from the mounted magnetic disk 121, optical disk 122, magneto-optical disk 123, or semiconductor memory 124, and supplies the read program to the control unit 104.

  As described above, the control unit 104 can execute the program read from the recording medium 110 such as the magnetic disk 121, the optical disk 122, the magneto-optical disk 123, or the semiconductor memory 124.

  Here, the access point 11 restricts the connection of devices connected to the wireless LAN segment having itself as a relay station by executing MAC address filtering. Further, in order to execute the MAC address filtering, it is necessary to register in advance the MAC address of the device to be connected to the access point 11. Hereinafter, processing for setting MAC address filtering by the communication system 1 will be described.

  First, the outline of the MAC address filtering setting process by the communication system 1 will be described with reference to the flowchart of FIG. 4, and then the detailed process of each device will be described with reference to FIGS. .

  FIG. 4 is a flowchart for explaining processing for setting MAC address filtering.

  In step S11, the control unit 21 of the access point 11 shifts to a wireless communication setting mode. In step S21, the control unit 104 of the digital camera 12 transitions to a wireless communication mode.

  The control unit 21 of the access point 11 stops the MAC address filtering process in the setting mode.

  In step S31, the control unit 21 of the access point 11 and the control unit 104 of the digital camera 12 execute a wireless LAN setting process for secure wireless communication. That is, in step S31, the control unit 21 of the access point 11 and the control unit 104 of the digital camera 12 are setting information for eliminating unauthorized connection and connecting only to a legitimate partner, Set configuration information.

  For example, an SSID that is an example of setting information that is arbitrarily selected and has a common value on the transmission side and the reception side, in order to eliminate unauthorized connection and connect only the right party to the access point 11, When the WEP key is set, the access point 11 causes the digital camera 12 to set the SSID and WEP key set for itself in step S31.

  In step S32, the control unit 21 of the access point 11 and the control unit 104 of the digital camera 12 use the wireless communication setting information set in the wireless communication unit 28 and the wireless communication unit 108 in the process of step S31. Start wireless communication to eliminate unauthorized connections.

  For example, in step S32, the control unit 21 of the access point 11 and the control unit 104 of the digital camera 12 transmit encrypted data to the wireless communication unit 28 and the wireless communication unit 108 based on the set WEP key. Alternatively, by starting reception, wireless communication is started using the WEP key so as to eliminate unauthorized connections.

  Further, for example, the control unit 21 of the access point 11 compares the SSID transmitted from the digital camera 12 with the SSID stored in the setting information storage unit 26 and stores the SSID transmitted. When the SSID matches, the wireless communication with the digital camera 12 is started, and the SSID transmitted from another device is compared with the SSID stored in the setting information storage unit 26 and transmitted. If the SSID and the stored SSID do not match, wireless communication with other devices is not started (suppressed) so that unauthorized connection is eliminated using the SSID. To start.

  For example, although details will be described later, in step S31, the access point 11 encodes the SSID “abcde123” and the WEP key “xyz1359ab” on the screen of the display unit 24 as a wireless LAN setting process. Display the dimension code (QR code).

  At that time, as a wireless LAN setting process, the digital camera 12 picks up the two-dimensional code (QR code) encoded with the SSID and WEP key displayed on the screen of the display unit 24 of the access point 11 and picks up the image. The SSID “abcde123” and the WEP key “xyz1359ab” are acquired from the image data of the two-dimensional code (QR code), and the acquired SSID and WEP key are set.

  In step S32, the digital camera 12 starts communication with the access point 11 using the SSID “abcde123” and the WEP key “xyz1359ab”. As a result, the digital camera 12 can communicate with the personal computer 13 that is already set with the SSID and WEP key via the access point 11 and connected to the access point 11.

  Note that the wireless LAN setting process in step S31 is not limited to a process using a two-dimensional code. For example, a method of manually setting an SSID and a WEP key by an operation of the user, an access point 11 and a digital camera 12 by pressing a predetermined switch (not shown) provided on each of the terminals 12 to transmit the SSID and WEP key from the access point 11 to the digital camera 12, and setting the SSID and WEP key. Any method can be used as long as it can set the same SSID and WEP key as the access point 11 for the camera 12.

  In step S22, the control unit 104 of the digital camera 12 sends a probe request including the SSID of the set access point 11 to the wireless communication unit 108, which is encrypted based on the WEP key. 11 to send. For example, in step S <b> 22, the digital camera 12 transmits a probe request including an SSID “abcde123”, which is encrypted based on a WEP key “xyz1359ab”, to the access point 11.

  Here, the probe request includes the MAC address of the device that has transmitted the probe request. For example, the probe request transmitted by the digital camera 12 includes the MAC address of the digital camera 12.

  The MAC address is a unique number assigned so as not to overlap with a wireless LAN interface (for example, the wireless communication unit 28 and the wireless communication unit 108). The MAC address consists of, for example, a 3-byte manufacturer code and a 3-byte manufacturing number. By combining the manufacturer code of each manufacturer with a manufacturing number that is a unique ID (Identity) within that manufacturer, the LAN interface Is a unique value.

  For example, the probe request that the digital camera 12 sends to the access point 11 includes “AA-BB-CC” that includes a manufacturer code “AA-BB-CC” and a serial number “11-11-11”. -The MAC address (of the wireless communication unit 108) of the digital camera 12 which is "CC-11-11-11" is included.

  In step S <b> 12, the control unit 21 of the access point 11 causes the wireless communication unit 28 to receive the probe request transmitted from the digital camera 12. In step S13, the control unit 21 registers the MAC address included in the received probe request by storing it in the MAC address table.

  For example, the access point 11 receives a probe request from the digital camera 12 in step S12, and in step S13, selects the MAC address “AA-BB-CC-11-11-11” included in the received probe request. The MAC address is registered by being stored in the MAC address table stored in the setting information storage unit 26.

  That is, immediately after starting wireless communication so as to eliminate unauthorized connection, the access point 11 receives the probe request received from the digital camera 12 and sets the MAC address included in the received probe request. Store in the MAC address table and register. As a result, the access point 11 can execute the MAC address filtering process so that the digital camera 12 is allowed to connect to the wireless LAN segment using the access point 11 as a relay station.

  In step S14, the control unit 21 of the access point 11 transmits to the wireless communication unit 28 a packet (in response to the probe request transmitted by the device that has received the probe request in response to the probe request transmitted from the digital camera 12). Frame) is transmitted to the digital camera 12.

  In step S15, the control unit 21 of the access point 11 transitions to the original mode, and the process of the access point 11 ends. For example, in step S15, the control unit 21 ends the “setting mode” by changing the mode to “normal mode” which is the original mode before changing to “setting mode” in step S11. As a result, the access point 11 operates as a wireless LAN relay station.

  Note that when the mode is changed from the setting mode to the original mode, the access point 11 executes the process of MAC address filtering. Further, the access point 11 may execute the MAC address filtering process when receiving the probe request or storing the MAC address included in the probe request in the MAC address table.

  When the MAC address filtering process is started, the access point 11 does not respond to a probe request in which a MAC address other than the MAC address stored in the MAC address table is stored. That is, the MAC address included in the probe request transmitted after starting the MAC address filtering process is not registered.

  In step S <b> 23, the control unit 104 of the digital camera 12 causes the wireless communication unit 108 to receive the probe response transmitted from the access point 11.

  Since the control unit 104 of the digital camera 12 receives the probe response transmitted from the access point 11 and knows that its own MAC address is stored in the MAC address table of the access point 11, in step S24, The control unit 104 transitions to the original mode, and the processing of the digital camera 12 ends.

  For example, in step S23, the control unit 104 ends the “setting mode” by changing the mode to “imaging mode” before changing to the “setting mode” in step S21. As a result, the digital camera 12 returns to a state in which the subject can be imaged.

  Note that the access point 11 stops the MAC address filtering process in the “setting mode”.

  As described above, according to the present invention, since MAC address filtering can be easily set without a troublesome operation by a user, even a user who does not have specialized knowledge about the network can perform MAC address filtering. Address filtering can be set.

  In addition, immediately after starting wireless communication so as to eliminate unauthorized connections, the MAC address sent is registered, so the MAC address sent from the other party trying to connect illegally is registered. Can be prevented.

  Further, according to the present invention, the protocol is not newly defined, but a probe request that has already been defined is used to obtain the MAC address from the probe request. It can also be easily applied to infrastructure-type wireless LAN access points.

  Next, with reference to FIGS. 5 to 9, the processing of each device of the access point 11 and the digital camera 12 described with reference to the flowchart of FIG. 4 will be described in more detail. In addition, although it is a process corresponding to the wireless LAN setting process (the process of step S31) in FIGS. 5 to 9, an example of the process using the two-dimensional code described in the example of the process of step S11 described above. Will be described.

  First, the MAC address registration process by the access point 11 will be described with reference to the flowchart of FIG.

  In step S51, the control unit 21 executes an initialization process. For example, in step S51, when the user presses an initialization switch (not shown) provided in the access point 11, the control unit 21 uses the MAC stored in the MAC address table used for MAC address filtering. Initialize (clear) the address. Further, for example, the control unit 21 initializes (clears) the set setting information (SSID and WEP key, etc.), and also initializes the setting information (SSID, WEP key, etc.) stored in the setting information storage unit 26. (Clear).

  Also, when the initialization process is executed, the setting information is initialized (for example, returns to the factory default setting), so that the access point 11 and the device connected to the wireless LAN segment using the access point 11 as a relay station It is necessary to set the setting information again.

  In this case, for example, the access point 11 again stores the MAC address of the device (for example, the digital camera 12 or the personal computer 13) connected to the wireless LAN segment having itself as a relay station in the MAC address table. Need to generate and configure SSID and WEP key. For example, the digital camera 12 and the personal computer 13 need to acquire and set the SSID and WEP key again.

  That is, the MAC address registration process described with reference to FIG. 5 is new (for example, at the time of purchase) when a wireless LAN setting is performed, or when a wireless LAN setting already set is initialized. Again, this is the process when setting up a wireless LAN.

  At this time, the control unit 21 starts various settings of the wireless LAN by changing the mode from “normal mode” operating as a wireless LAN relay station to “setting mode” for performing various settings of the wireless LAN. To do.

  In step S52, based on the operation signal supplied from the input unit 23, the control unit 21 by the user is a wireless LAN setting display button (for example, FIG. 6 described later) that is the input unit 23 provided in the access point 11. It is determined whether or not the wireless LAN setting display button 201) has been pressed.

  If it is determined in step S52 that the wireless LAN setting display button has not been pressed, the display of setting information is not instructed by the user, so the process returns to step S52 and the above-described processing is repeated. That is, the process of step S52 is repeated until the user presses the wireless LAN setting display button.

  On the other hand, if it is determined in step S52 that the wireless LAN setting display button has been pressed, the user has instructed display of the setting information. Therefore, the process proceeds to step S53, where the setting information generation unit 51 performs binomial random number, Poisson random number. Alternatively, a random number such as a normal random number is generated, and the generated random number is set to SSID and WEP to generate an SSID and a WEP key, and the generated SSID and WEP key are stored in the setting information storage unit 26 and the encoding unit 52. Supply each.

  Here, as described above, since the SSID and the WEP key are initialized (processing in step S51), when communication is performed using an infrastructure wireless LAN, the wireless LAN using the access point 11 and the access point 11 as a relay station It is necessary to set an SSID that is an identifier for designating a specific network in a common wireless LAN and a WEP key that is an encryption key for encrypting data in each device connected to the segment.

  Specifically, the SSID is an arbitrary character string in which alphanumeric characters within 32 bytes are combined. In general, when multiple LAN segments are built using the same frequency band, there is a possibility of interference, so devices with different SSIDs communicate by recognizing participating wireless LAN segments according to the SSID value. I can't do that.

  The WEP key is a value for generating a key, which is arbitrarily set and consists of a character string of 8 bytes (64 bits) or 16 bytes (128 bits). More precisely, in encryption by WEP, a key that is actually used for data encryption or decryption is generated based on the WEP key, and the generated key is used as a common key on the transmission side and the reception side to transmit the key. Data is encrypted and the received data is decrypted.

  That is, in order to use the same segment wireless LAN, it is necessary to set the same SSID and WEP key. Although communication is possible even when the WEP key is not specified, data can be encrypted by specifying the WEP key, so that confidentiality can be improved.

  For example, in step S53, the setting information generation unit 51 generates an SSID “abcde123” and a WEP key “xyz1359ab” using random numbers such as binary random numbers, Poisson random numbers, or normal random numbers, and the generated SSID and The WEP key is supplied to the setting information storage unit 26 or supplied to each of the setting information storage unit 26 and the encoding unit 52.

  In step S54, the setting information storage unit 26 stores the SSID and WEP key supplied from the setting information generation unit 51. For example, in step S54, the setting information storage unit 26 stores the SSID “abcde123” and the WEP key “xyz1359ab” supplied from the setting information generation unit 51.

  That is, the setting information storage unit 26 stores the setting information such as the SSID and the WEP key, whereby the setting information is set in the access point 11. For example, the setting information storage unit 26 stores the SSID “abcde123” and the WEP key “xyz1359ab”, so that each device connected to the wireless LAN by the access point 11 has “abcde123” as the SSID. It is necessary to set “xyz1359ab” as the WEP key.

  Further, when the setting information storage unit 26 stores the SSID and WEP key, when setting the SSID and WEP key for other devices, the SSID and WEP key stored in the setting information storage unit 26 are used. Since it is possible to read and set the same SSID and WEP key, other devices can be connected to the wireless LAN segment by the access point 11.

  In step S55, the encoding unit 52 reads the stored SSID and WEP key from the setting information storage unit 26, encodes the read SSID and WEP key into a two-dimensional code, and displays the encoded two-dimensional code. It supplies to the control part 53. That is, in step S55, the encoding unit 52 sets the SSID and WEP key, which are the setting information that has been set and that excludes illegal information and connects only a legitimate party, to the two-dimensional code. Is encoded. For example, in step S55, the encoding unit 52 encodes the SSID “abcde123” and the WEP key “xyz1359ab” stored in the setting information storage unit 26 into a QR code, and displays the encoded QR code. It supplies to the control part 53.

  In step S55, the encoding unit 52 encodes the SSID and WEP key supplied from the setting information generation unit 51 into a two-dimensional code, and supplies the encoded two-dimensional code to the display control unit 53. Also good.

  In step S <b> 56, the display control unit 53 displays the two-dimensional code supplied from the encoding unit 52 on the screen of the display unit 24. For example, in step S56, the display control unit 53 displays on the screen of the display unit 24 the QR code encoded by the SSID “abcde123” and the WEP key “xyz1359ab” supplied from the encoding unit 52. Let

  FIG. 6 is a diagram showing an appearance of the access point 11 that displays a two-dimensional code.

  The access point 11 is provided with a wireless LAN setting display button 201 as the input unit 23 and a screen 202 of the display unit 24. For example, the screen 202 of the display unit 24 is provided in the vicinity of the wireless LAN setting display button 201.

  When the user presses the wireless LAN setting display button 201, a QR code (two-dimensional code) 203 is displayed on the screen 202 of the display unit 24. For example, the screen 202 of the display unit 24 is encoded with the SSID “abcde123” and the WEP key “xyz1359ab” when the user presses the wireless LAN setting display button 201 (processing in step S52). The QR code 203 is displayed (processing in step S56).

  Returning to the flowchart of FIG. 5, in step S <b> 57, the determination unit 54 of the control unit 21 determines whether a probe request has been received from the digital camera 12 based on a signal from the wireless communication unit 28.

  For example, in step S57, when the wireless communication unit 28 receives a probe request transmitted from the digital camera 12, the wireless communication unit 28 supplies a signal indicating that the probe request has been received to the control unit 21 via the bus 27. To do. When the signal indicating that the probe request has been received from the wireless communication unit 28 is supplied, the determination unit 54 of the control unit 21 determines that the probe request has been received and indicates that the probe request has been received from the wireless communication unit 28. If no signal is supplied, it is determined that a probe request has not been received.

  Note that when the wireless communication unit 28 receives a probe request, the wireless communication unit 28 stores the received probe request in the memory 22.

  If it is determined in step S57 that a probe request has been received, the process proceeds to step S59, where the MAC address extraction unit 55 extracts a MAC address from the probe request stored in the memory 22. For example, in step S39, the MAC address extraction unit 55 extracts the MAC address of the digital camera 12 that is “AA-BB-CC-11-11-11” from the probe request stored in the memory 22.

  In step S60, the MAC address storage control unit 56 stores the MAC address extracted from the probe request in the MAC address table stored in the setting information storage unit 26 (stores the MAC address in the setting information storage unit 26). Register the MAC address.

  FIG. 7 is a diagram illustrating an example of the MAC address table.

  In the example of the MAC address table shown in FIG. 7, the access point 11 indicates the MAC address of a device that is permitted to connect to a wireless LAN segment with the access point 11 as a relay station in order to perform MAC address filtering. Address "is stored.

  For example, in the example of the MAC address table shown in FIG. 7, the MAC address “AA-BB-CC-11-11-11” is stored for the number “1”. In addition, a MAC address “DD-EE-FF-22-22-22” is stored for a number “2”. Further, the MAC address “BB-CC-DD-33-33-33” is stored for the number “3”.

  Further, a MAC address “EE-FF-AA-44-44-44” is stored for a number “4”. Furthermore, a MAC address “AA-BB-CC-55-55-55” is stored for a number “5”.

  As described above, the MAC address table stores the MAC addresses of devices that are allowed to connect to the wireless LAN segment having the access point 11 as a relay station. That is, in this case, the access point 11 is “AA-BB-CC-11-11-11”, “DD-EE-FF-22-22-22”, “BB-CC-DD-33-33-33”. ”,“ EE-FF-AA-44-44-44 ”, and“ AA-BB-CC-55-55-55 ”for each device that has been assigned a MAC address, relay yourself The connection is permitted to the wireless LAN segment.

  Since the MAC address stored in the MAC address table is initialized (cleared) by the initialization process (the process of step S51), the MAC address stored in the MAC address table is “AA” in step S60. -BB-CC-11-11-11 "is the only MAC address of the digital camera 12.

  Returning to the flowchart of FIG. 5, for example, in step S60, the MAC address storage control unit 56 sets the MAC address “AA-BB-CC-11-11-11” extracted from the probe request to the setting information storage unit 26. Stored in the MAC address table of FIG.

  In step S61, the control unit 21 causes the wireless communication unit 28 to transmit a probe response to the digital camera 12 in response to the received probe request, and proceeds to step S62.

  On the other hand, if it is determined in step S57 that the probe request has not been received, the process proceeds to step S58, where the determination unit 54 of the control unit 21 displays the two-dimensional code on the screen of the display unit 24 and then performs a predetermined process. Determine whether the time has passed. For example, in step S58, the determination unit 54 compares the threshold value stored in advance with information indicating the time from a real time clock (not shown), and then determines the predetermined value after the display of the two-dimensional code is started. It is determined whether or not the period has elapsed.

  If it is determined in step S58 that the predetermined time has not elapsed, the process returns to step S57 and the above-described processing is repeated until a predetermined period elapses. That is, the processes in steps S57 and S58 are repeated until a probe request is received or until a predetermined time has elapsed.

  On the other hand, if it is determined in step S58 that the predetermined time has elapsed, a probe request has not been transmitted from a legitimate partner, so the process proceeds to step S62 without registering the MAC address.

  In step S62, the display control unit 53 causes the display unit 24 to turn off the display of the two-dimensional code. For example, in step S62, the display control unit 53 receives the SSID “abcde123” and the WEP key “xyz1359ab” displayed on the screen 202 of the display unit 24 based on the control signal supplied from the control unit 21. The display of the encoded QR code 203 is erased.

  In step S63, the control unit 21 ends the “setting mode” by changing the mode from the “setting mode” to the “normal mode”. That is, the access point 11 operates as a wireless LAN relay station.

  In step S64, the filtering processing unit 57 starts executing MAC address filtering according to the MAC address of each device stored in the MAC address table, and the process ends.

  For example, in step S64, the filtering processing unit 57 is a device (for example, the digital camera 12) to which the MAC address “AA-BB-CC-11-11-11” stored in the MAC address table is assigned. In response to this, allow the connection to the wireless LAN segment that uses the relay station as its relay station, and MAC that does not allow the connection to the wireless LAN segment that uses itself as a relay station for devices that have other MAC addresses. Perform address filtering.

  As described above, according to the present invention, a probe request transmitted from a device that connects a MAC address necessary for setting MAC address filtering executed by an access point to a wireless LAN segment having the access point as a relay station. The MAC address can be stored and registered in the MAC address table. As a result, MAC address filtering can be easily set.

  Also, according to the present invention, since it is possible to easily set MAC address filtering, even a user who does not have specialized knowledge about the network can set MAC address filtering.

  Furthermore, according to the present invention, since the MAC address transmitted is registered immediately after setting the SSID and WEP key, the MAC address transmitted from the other party trying to connect illegally is registered. Can be prevented.

  In other words, after starting wireless communication so as to eliminate unauthorized connections, MAC addresses sent from legitimate parties are registered within a predetermined period of time. It is possible to prevent the MAC address transmitted from the other party from being registered.

  In the process described with reference to the flowchart of FIG. 5, wireless communication is started so as to eliminate unauthorized connections, and only the MAC address transmitted first is registered. All the MAC addresses transmitted within a predetermined period after the start of wireless communication may be registered so as to be excluded. In this case, it is desirable to sufficiently shorten the period during which registration is permitted.

  Also, the initialization process is executed in the process of step S51. However, since initialization initializes (clears) the set SSID and WEP key, it is already connected to the wireless LAN. It is not the same setting information as the SSID and WEP key of the connected device.

  In this case, the SSID and WEP key are stored in the setting information storage unit 26 for the device that is to be connected to the wireless LAN segment having the access point 11 as a relay station without executing the processing of steps S51 and S53. Therefore, the SSID and WEP key stored in the setting information storage unit 26 can be read out and the same SSID and WEP key can be set, so that the devices to be connected can be connected to the same wireless device. Can be connected to a LAN segment.

  Next, wireless LAN setting processing by the digital camera 12 will be described with reference to the flowchart of FIG.

  In step S71, based on the operation signal supplied from the input unit 105, the control unit 104 determines whether or not the wireless LAN setting command on the menu screen displayed on the screen of the display unit 106 has been selected by the user. .

  Here, the wireless LAN setting command on the menu screen is a command for executing wireless LAN setting among commands arranged on the menu screen for performing various settings. In addition, when the wireless LAN setting command is selected, the digital camera 12 changes the mode from “imaging mode” for imaging a subject to “setting mode” for setting various devices.

  If it is determined in step S71 that the wireless LAN setting on the menu screen is not selected, the process returns to step S71 and the above-described processing is repeated. That is, the process of step S71 is repeated until the user selects the wireless LAN setting on the menu screen, and the digital camera 12 operates in the “imaging mode” during that time.

  On the other hand, if it is determined in step S71 that the wireless LAN setting on the menu screen has been selected, the process proceeds to step S72, and the control unit 104 activates the application program for the wireless LAN setting recorded in the recording unit (not shown). To do.

  Here, the wireless LAN setting application program is a program for performing settings related to the wireless LAN in the digital camera 12.

  In step S <b> 73, the imaging control unit 141 causes the CCD 132 to image the two-dimensional code displayed on the display unit 24 of the access point 11 in accordance with a user operation. For example, in step S33, the imaging control unit 141 causes the CCD 132 to display the SSID “abcde123” and the WEP key “xyz1359ab” displayed on the screen 202 of the display unit 24 of the access point 11 according to the user's operation. The QR code 203 encoded with is imaged.

  More specifically, the CCD 132 supplies the captured image data of the QR code 203 to the A / D conversion unit 133. The A / D converter 133 converts the two-dimensional code image data, which is analog data supplied from the CCD 132, into digital data, and the two-dimensional code image data, which is digital data obtained by the conversion, as a signal processing unit. 134.

  The signal processing unit 134 performs predetermined processing on the image data of the two-dimensional code supplied from the A / D conversion unit 133 and stores the data subjected to the predetermined processing in the memory 103. For example, the signal processing unit 134 performs predetermined processing such as AGC processing, AWB processing, AF processing, and AE processing on the image data of the QR code 203 supplied from the A / D conversion unit 133, Data subjected to predetermined processing is stored in the memory 103.

  FIG. 9 is a diagram illustrating the digital camera 12 that captures an image of the QR code 203 displayed on the screen 202 of the display unit 24 of the access point 11.

  The same parts as those shown in FIG. 6 are denoted by the same reference numerals, and description thereof will be omitted (as appropriate).

  On the screen 202 of the display unit 24 of the access point 11, when the user presses the wireless LAN setting display button 201, the QR code 203 in which the SSID “abcde123” and the WEP key “xyz1359ab” are encoded is displayed. Since the image is displayed, the user causes the digital camera 12 to image the QR code 203 displayed on the screen 202 by pressing the shutter release button of the input unit 105 of the digital camera 12.

  Returning to the flowchart of FIG. 8, in step S <b> 74, the decoding unit 142 decodes (analyzes) the image data of the two-dimensional code stored in the memory 103. For example, in step S74, the decoding unit 142 decodes the image data of the QR code 203 stored in the memory 103.

  In step S75, the setting information storage control unit 143 acquires (extracts) the SSID and WEP key from the data obtained as a result of the decoding, and supplies the acquired SSID and WEP key to the setting information storage unit 107. . For example, in step S75, the setting information storage control unit 143 acquires the SSID “abcde123” and the WEP key “xyz1359ab” from the data obtained as a result of decoding, and sets the acquired SSID and WEP key as setting information. The data is supplied to the storage unit 107.

  In step S76, the setting information storage unit 107 sets the SSID and WEP key by storing the SSID and WEP key supplied from the setting information storage control unit 143. For example, in step S76, the setting information storage unit 107 stores the SSID “abcde123” and the WEP key “xyz1359ab” supplied from the setting information storage control unit 143.

  That is, since the same SSID “abcde123” and WEP key “xyz1359ab” as the access point 11 are set in the digital camera 12, the digital camera 12 is connected to the wireless LAN using the access point 11 as a relay station. can do.

  In step S 77, the probe request transmission control unit 144 of the control unit 104 causes the wireless communication unit 108 to transmit a probe request including the MAC address of the digital camera 11 to the access point 11. That is, in step S77, the probe request transmission control unit 144 is arbitrarily selected and performs wireless communication using setting information that is a common value on the transmission side and the reception side and eliminates unauthorized connections. Control the transmission of specific information to the other party.

  It is preferable that the probe request be transmitted immediately when the SSID and WEP key are set.

  For example, in step S77, the probe request transmission control unit 144 of the control unit 104 sends a probe request including the MAC address of the digital camera 11 that is “AA-BB-CC-11-11-11” to the wireless communication unit 108. It is transmitted to the access point 11. The MAC address is stored in the MAC unit 154, for example.

  In step S <b> 78, the control unit 104 determines whether a probe response has been received from the access point 11 based on the signal from the wireless communication unit 108.

  If it is determined in step S78 that a probe response has been received, the process proceeds to step S80, and the control unit 104 ends the setting mode by changing the mode from “setting mode” to “imaging mode”, and performs processing. Ends. That is, by changing to “imaging mode”, the digital camera 12 returns to a state in which the subject can be imaged.

  On the other hand, if it is determined in step S78 that a probe response has not been received, the process proceeds to step S79, and the control unit 104 determines whether or not a predetermined time has elapsed since the probe request was transmitted.

  If it is determined in step S79 that the predetermined time has not elapsed, the process returns to step S78 and the above-described processing is repeated. That is, the processes in steps S78 and S79 are repeated until a probe response is received from the access point 11 or until a predetermined time has elapsed.

  For example, if a probe response cannot be received from the access point 11 even after a predetermined time such as 100 milliseconds (ms) has elapsed, the access point 11 cannot receive the probe request due to radio wave interference or the like. Since there is a possibility, the process may return to step S58 and the probe request transmission control unit 144 may cause the access point 11 to transmit (retransmit) the probe request again.

  On the other hand, if it is determined in step S79 that the predetermined time has elapsed, the process proceeds to step S80, and the control unit 104 changes the mode from “setting mode” to “imaging mode” to image the subject. Returning to the state where it is possible to finish, the setting mode is ended, and the process ends.

  Note that if a probe request has not been received from the access point 11 but a predetermined time has elapsed, for example, an error message is displayed on the screen of the display unit 106, so that the user can access the access point 11. The MAC address table may notify that there is a possibility that the MAC address could not be stored.

  As described above, when the digital camera 12 sets the SSID and WEP key, the digital camera 12 immediately transmits a probe request including its own MAC address to the access point 11 using the set SSID and WEP key.

  In addition, the MAC address required for the MAC address filtering setting executed by the access point is acquired from the probe request sent from the device connected to the wireless LAN segment that uses the access point as a relay station. You can easily set up MAC address filtering without having to do anything.

  Furthermore, since it is possible to easily set MAC address filtering, even a user who does not have specialized knowledge about the network can set MAC address filtering.

  For access points, probe requests are sent only from devices that have the same SSID and WEP key set, that is, devices connected to a wireless LAN segment that uses them as a relay station. Because it does not receive probe requests from devices connected to other than the wireless LAN segment and does not register MAC addresses other than devices connected to the wireless LAN segment that uses them as a relay station, the MAC address is more secure. Filtering can be performed.

  In the above example, the access point 11 has been described as performing MAC address filtering by storing the MAC address included in the probe request transmitted from the digital camera 12 in the MAC address table. The MAC address stored in the address table is not limited to the method acquired from the probe request, but the MAC address is acquired from the data (packet) including the MAC address other than the probe request, and the acquired MAC address is stored in the MAC address table. You may do it.

  In the above-described example, the SSID that is an identifier for designating a specific network in the wireless LAN and the WEP key that is an identifier for encrypting data to be communicated have been described as setting information. However, the present invention is not limited thereto, and any information (data) necessary for setting the wireless LAN, such as information related to wireless LAN security, may be used.

  The series of processes described above can be executed by hardware, but can also be executed by software. When a series of processing is executed by software, a program constituting the software may execute various functions by installing a computer incorporated in dedicated hardware or various programs. For example, it is installed from a recording medium in a general-purpose personal computer or the like.

  As shown in FIG. 2, the recording medium is distributed to provide a program to the user separately from the computer, and includes a magnetic disk 41 (including a flexible disk) on which the program is recorded, an optical disk 42 (CD- In addition to being composed of package media including ROM (compact disc-read only memory), magneto-optical disc 43 (including MD (trademark)), semiconductor memory 44, etc., it is preinstalled in a computer. And a ROM (not shown) in which a program is recorded, which is provided to the user.

  Further, as shown in FIG. 3, this recording medium is distributed to provide a program to a user separately from a computer, and includes a magnetic disk 121 (including a flexible disk) on which a program is recorded, an optical disk 122 ( CD-ROM (including CD-ROM), magneto-optical disk 123 (including MD (trademark)), or semiconductor memory 124 or the like, and is provided to the user in a state of being pre-installed in a computer. And a ROM (not shown) in which a program is recorded.

  Furthermore, a program for executing the above-described series of processing is installed in a computer via a wired or wireless communication medium such as a local area network, the Internet, or digital satellite broadcasting via an interface such as a router or a modem as necessary. You may be made to do.

  In the present specification, the step of describing the program stored in the recording medium is not limited to the processing performed in chronological order according to the described order, but is not necessarily performed in chronological order. It also includes processes that are executed individually.

  Further, in this specification, the system represents the entire apparatus constituted by a plurality of apparatuses.

It is a block diagram which shows the structure of one Embodiment of the communication system to which this invention is applied. It is a block diagram which shows the structure of the function of an access point. It is a block diagram which shows the structure of the function of a digital camera. It is a flowchart explaining the setting process of MAC address filtering. It is a flowchart explaining the process of MAC address registration by an access point. It is a figure which shows the external appearance of the access point which displays a two-dimensional code. It is a figure which shows the example of a MAC address table. 6 is a flowchart for describing wireless LAN setting processing by the digital camera. It is a figure explaining the digital camera which images the QR code displayed on the screen of the display part of an access point.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 Communication system, 11 Access point, 12 Digital camera, 21 Control part, 22 Memory, 23 Input part, 24 Display part, 25 Communication part, 26 Setting information storage part, 28 Wireless communication part, 29 Drive, 41 Magnetic disk, 42 Optical disk, 43 optical disk, 44 semiconductor memory, 51 setting information generation unit, 52 encoding unit, 53 display control unit, 54 determination unit, 55 MAC address extraction unit, 56 MAC address storage control unit, 57 filtering processing unit, 61 antenna, 62 high frequency processing unit, 63 baseband processing unit, 64 MAC unit, 101 camera unit, 103 memory, 104 control unit, 105 input unit, 106 display unit, 107 setting information storage unit, 108 wireless communication unit, 109 drive, 121 magnetism Disc, 122 optical disc, 123 optical disc, 124 semiconductor memory, 131 optical block, 132 CCD, 133 A / D conversion unit, 134 signal processing unit, 141 imaging control unit, 142 decoding unit, 143 setting information storage control unit, 144 probe request Transmission control unit, 151 antenna, 152 high frequency processing unit, 153 baseband processing unit, 154 MAC unit

Claims (14)

In a communication system in which a first communication device and a second communication device communicate with each other wirelessly,
The first communication device is:
Pre-determined after communication is possible using setting information that is arbitrarily selected to eliminate unauthorized connections and connect only to a legitimate partner and that is common to both the partner and the partner. Determining means for determining whether or not a period has elapsed;
Receiving means for receiving device information for identifying the second communication device transmitted from the second communication device;
A first storage means for storing the device information when it is determined that the predetermined time has not elapsed;
Limiting means for limiting the wireless communication based on the stored device information, and
The second communication device is:
Second storage means for storing the setting information;
Transmission means for transmitting the device information to the first communication device based on the stored setting information when communication with the first communication device is enabled. Communication system. In a communication device that performs wireless communication,
Pre-determined after communication is possible using setting information that is arbitrarily selected to eliminate unauthorized connections and connect only to a legitimate partner and that is common to both the partner and the partner. Determining means for determining whether or not a period has elapsed;
Receiving means for receiving device information for identifying the other communication device transmitted from another communication device;
When it is determined that the predetermined time has not elapsed, storage means for storing the device information;
Limiting means for limiting the wireless communication based on the device information stored therein. The communication device according to claim 2, wherein the restriction unit restricts the wireless communication based on the device information that is a stored MAC (Media Access Control) address. The storage means further stores the setting information,
Encoding means for encoding the stored setting information into a two-dimensional code;
The communication apparatus according to claim 2, further comprising: a display control unit that controls display of the two-dimensional code. The communication apparatus according to claim 4, further comprising a generation unit configured to generate the setting information. The generating means includes, as the setting information, an SSID (Service Set ID) that is an identifier for designating a specific network in the wireless communication and a WEP (Wired Equivalent Privacy) key that is an encryption key for encrypting data. The communication device according to claim 5, wherein the communication device is generated. In a communication method of a communication device that performs wireless communication,
Pre-determined after communication is possible using setting information that is arbitrarily selected to eliminate unauthorized connections and connect only to a legitimate partner and that is common to both the partner and the partner. A determination step of determining whether or not a period has elapsed;
A reception control step for controlling reception of device information for identifying the other communication device transmitted from another communication device;
When it is determined that the predetermined time has not elapsed, a storage control step for controlling storage of the device information;
And a restricting step for restricting the wireless communication based on the stored device information. A communication processing program for performing wireless communication,
Pre-determined after communication is possible using setting information that is arbitrarily selected to eliminate unauthorized connections and connect only to a legitimate partner and that is common to both the partner and the partner. A determination step of determining whether or not a period has elapsed;
A reception control step for controlling reception of device information for identifying the other communication device transmitted from another communication device;
When it is determined that the predetermined time has not elapsed, a storage control step for controlling storage of the device information;
And a restricting step for restricting the wireless communication based on the stored device information. A recording medium on which a computer-readable program is recorded. In a program for causing a computer to perform a process of performing wireless communication,
Pre-determined after communication is possible using setting information that is arbitrarily selected to eliminate unauthorized connections and connect only to a legitimate partner and that is common to both the partner and the partner. A determination step of determining whether or not a period has elapsed;
A reception control step for controlling reception of device information for identifying the other communication device transmitted from another communication device;
When it is determined that the predetermined time has not elapsed, a storage control step for controlling storage of the device information;
And a limiting step of limiting the wireless communication based on the stored device information. In a communication device that performs wireless communication,
Storage means for storing setting information that is arbitrarily selected and is set to a value common to itself and the other party, in order to eliminate unauthorized connection and connect only to a legitimate party;
A communication unit comprising: a transmission unit configured to transmit device information for identifying itself to the other communication device based on the stored setting information when communication with the other communication device is enabled. apparatus. Imaging control means for controlling imaging of a two-dimensional code obtained by encoding the setting information displayed by the other communication device;
Decoding means for decoding the captured two-dimensional code into the setting information,
The communication apparatus according to claim 10, wherein the storage unit includes the decoded setting information. In a communication method of a communication device that performs wireless communication,
A storage control step for controlling storage of setting information that is arbitrarily selected and is set to a common value in itself and the other party, in order to eliminate unauthorized connection and connect only with a legitimate party,
A transmission control step for controlling transmission of device information for identifying itself to the other communication device based on the stored setting information when communication with the other communication device becomes possible. A characteristic communication method. A communication processing program for performing wireless communication,
A storage control step for controlling storage of setting information that is arbitrarily selected and is set to a common value in itself and the other party, in order to eliminate unauthorized connection and connect only with a legitimate party,
A transmission control step for controlling transmission of device information for identifying itself to the other communication device based on the stored setting information when communication with the other communication device becomes possible. A recording medium on which a computer-readable program is recorded. In a program for causing a computer to perform a process of performing wireless communication,
A storage control step for controlling storage of setting information that is arbitrarily selected and is set to a common value in itself and the other party, in order to eliminate unauthorized connection and connect only with a legitimate party,
A transmission control step for controlling transmission of device information for identifying itself to the other communication device based on the stored setting information when communication with the other communication device becomes possible. A featured program.

Images