JP6030600B2 - Wireless communication apparatus, wireless LAN system, and communication method - Google Patents

Description

  The present invention relates to a wireless communication apparatus, a wireless local area network (LAN) system, and a communication method, and more particularly to delivery of connection information necessary for connecting to a wireless LAN access point.

  Currently, the IEEE802.11a / b / g / n communication method standardized by IEEE (The Institute of Electrical and Electronics Engineers, Inc.) is used as a method for connecting information terminals to a network using wireless communication. Yes, this method is generally referred to as “wireless LAN”. The operation of wireless LAN is divided into two devices: wireless LAN master unit and wireless LAN slave unit. Except for special cases, the slave unit belongs to (connects to) the master unit and then connects to the master unit. Communication is possible between information terminals. Generally, a wireless LAN base unit is called an access point (AP) and a wireless LAN handset is called a station (STA).

  When communication is performed using a wireless LAN, an identifier called BSSID (Basic Service Set IDentifier) is used for the child device to identify the parent device. The BSSID is a 48-bit number sequence uniquely set for each wireless LAN base unit, and generally uses a MAC (Media Access Control) address. Further, an identifier called ESSID (Enhanced Service Set ID) is used to partition one network configured by a wireless LAN. The ESSID uses 32 or fewer alphanumeric characters and can be freely set for the parent machine by the parent machine administrator. When connecting to a wireless LAN, the user specifies an ESSID and tries to connect to a specific wireless network. The ESSID can be obtained from a beacon signal that is always issued by the parent device, and the child device can know the ESSID of the neighboring parent device through a search, but transmits the ESSID without placing the ESSID on the beacon with emphasis on confidentiality. There can also be a parent machine.

  In addition, when a wireless LAN performs communication, the communication may be encrypted by an encryption method defined by IEEE802.11 such as WEP (Wired Equivalent Privacy), TKIP (Temporal Key Integrity Protocol), AES (Advanced Encryption Standard), etc. it can. When connecting to a wireless LAN base unit using encryption, it is necessary to know in advance the encryption method set for each base unit and the encryption key used for encryption.

  Until now, wireless LAN access points have been widely used as a means for communicating terminals such as personal computers (PCs) to the Internet, in-house networks, home networks, and the like without physical connection such as cables. It was.

  In recent years, with ubiquitous, cloud services that can access necessary information regardless of location are increasing. In order to receive necessary services even when they are away from home, small and easy-to-carry information terminals such as mobile PCs, netbooks, smartphones, and tablet terminals have become widespread. Among them, many information terminals such as smartphones and tablet terminals that can be easily carried are equipped with various communication functions that can be used for short-range communication as well as functions as a wireless LAN slave unit. Examples of short-range communication include Bluetooth (registered trademark), NFC (Near Field Communication), IrDA (Infrared Data Association) (registered trademark), and the like.

  Portable information terminals have become a normal connection to the wireless LAN as a means for connecting to the Internet, and temporarily connect to a wireless LAN access point installed at the site to access the Internet. Often there is.

  In order to connect an information terminal to a network through a wireless LAN access point (AP), information on a BSSID, an encryption method, and an encryption key used for encryption necessary for connection to the AP is required. Up to now, inputting such information to the terminal has basically been done one by one by hand, but this is very troublesome.

  Many methods have been developed for the purpose of easily and concisely handing over this connection information. The main methods used so far include a push button method, a PIN (Personal Identification Number) code method, and an NFC method.

  In the push button method, a wireless LAN control device on the terminal side is set in a search state in advance, and an identification signal is issued from the AP side by pressing a specific push switch mounted on the AP. In response, the connection information is securely transferred to and from the AP. In this method, connectivity can be ensured without the user being aware of the encryption method and encryption key necessary for connection with the AP. However, the user needs to go to the place where the AP is installed and press the push button. This method is difficult if the AP is installed on the ceiling or the like.

  The PIN code method specifies the other party by inputting a digit string of several digits that can be used to identify the parent unit or child unit to the connection destination in advance, and securely transfers the connection information. It is. In this method, the user needs to know information for specifying the other party in advance, which is not much different from manually inputting the encryption key.

  In the NFC method, connection information is acquired safely by directly communicating with an NFC control device or an NFC tag mounted on an AP. In this method, it is necessary to bring the terminal close to a range where NFC communication is possible. Since the AP is basically installed at a fixed position, it is necessary to move the terminal to a specific point.

  With regard to the push button method, PIN code method, and NFC method described above, once connection information is transferred, generally, connection information of an AP that has been connected once is recorded on the wireless LAN terminal side. If the connection information is recorded on the wireless LAN terminal side, the wireless LAN terminal can be connected to the AP without being recognized by the access point manager. These methods cannot meet the need for an administrator who provides a connection right to the AP to temporarily permit connection. In addition, there is a risk of reducing the confidentiality of the network, and it is not suitable for use as a temporary connection permission by an administrator.

  In addition, when a new connection to an AP is to be made using the push button method, PIN code method, or NFC method, the user must be aware of the presence, location, and connection information of the AP. In other words, when trying to newly connect to an AP using these methods, the presence or location of the AP and connection information are made conscious to a user who has temporarily accessed. For this reason, there is a problem that the temporary access provider cannot be stopped even if the user by the temporary access thinks that the AP connection information is to be abused.

  An object of the present invention is to provide a wireless communication apparatus, a wireless LAN system, and a communication method for providing temporary access to a communication network without making a wireless LAN terminal user aware of the presence, position, and connection information of an AP. It is to provide.

In order to achieve the above object, a wireless communication apparatus according to the present invention provides:
When a request signal for requesting a wireless connection with a wireless LAN access point is received from another wireless communication apparatus, and when an identification signal necessary for temporary wireless connection is input thereafter, the identification signal is transferred to the other wireless communication device. Short-range communication means for transmitting to the communication device;
In response to the request signal, an inquiry signal for inquiring the wireless LAN access point for permission / inhibition of wireless connection is transmitted, and when an identification signal necessary for the temporary wireless connection is received from the wireless LAN access point, Wireless LAN communication means for supplying an identification signal to the short-range communication means.

A wireless LAN system according to the present invention includes:
When a request signal for requesting a wireless connection with a wireless LAN access point is received from another wireless communication apparatus, and when an identification signal necessary for temporary wireless connection is input thereafter, the identification signal is transferred to the other wireless communication device. A short-range communication means for transmitting to the communication device, and an inquiry signal for inquiring of the wireless LAN access point whether the wireless connection is permitted or not corresponding to the request signal, and the temporary wireless connection from the wireless LAN access point to the inquiry signal A wireless communication device provided with wireless LAN communication means for supplying the identification signal to the short-range communication means when receiving the identification signal necessary for
The wireless LAN access point;
With the other wireless communication device,
It is characterized by having.

A communication method according to the present invention includes:
In order to give temporary access right to the wireless LAN access point to other wireless communication devices that want to connect to the wireless LAN access point for temporary use,
Instructing the wireless LAN access point to create a temporary wireless connection destination via short-range communication with a wireless communication device already connected to the wireless LAN access point,
The other wireless communication device obtains connection information for connecting to the wireless connection destination via the wireless communication device and temporarily connects to the wireless LAN access point.

  According to the wireless communication device, the wireless LAN system, and the communication method of the present invention, for other wireless communication devices that need only be temporarily connected to the network, the presence or location of the wireless LAN access point to the user, Temporary access can be provided without being aware of connection information.

1 is a block diagram of a wireless communication device and a wireless LAN system of an embodiment corresponding to the highest concept of the present invention. 1 is a configuration diagram of a wireless LAN system according to a first embodiment of the present invention. It is a system diagram showing a detailed configuration of the wireless LAN system of FIG. 2A. It is a sequence chart which shows the system flow of the wireless LAN system by 1st Embodiment of this invention. 6 is a flowchart for explaining the operation of the wireless LAN terminal 103; (A) is a flowchart for demonstrating operation | movement of the wireless LAN terminal 102, (b) is a flowchart which shows the state check process of the access point of (a) in detail. 6 is a second flowchart for explaining the operation of the wireless LAN terminal 102; (A) is a 1st flowchart for demonstrating operation | movement of the wireless LAN access point apparatus 101, (b) is a flowchart which shows the control and communication monitoring process of (a) in detail. 6 is a second flowchart for explaining the operation of the wireless LAN access point apparatus 101. FIG.

  The present invention obtains connection information of a wireless LAN access point to be temporarily connected via a terminal A that can already be permanently connected to the wireless LAN access point. At that time, the connection information is transferred to the terminal B that wants to temporarily connect to the wireless LAN access point by using short-range communication between the terminals. If the terminals are brought close to each other, it is possible to provide accessibility to the terminal B.

  In addition, access management for temporary connection is performed mainly by the terminal A that can be permanently connected to the wireless LAN access point. Thereby, it is possible to manage the connectivity of the temporarily connected terminal B in an integrated manner.

  FIG. 1 is a block diagram of a wireless communication apparatus and a wireless LAN system of an embodiment corresponding to the highest concept of the present invention.

  The wireless communication device of the embodiment corresponding to the highest concept is a wireless LAN terminal 2 in FIG. The wireless LAN terminal 2 includes a wireless LAN communication unit 2a and a near field communication unit 2b. The short-range communication means 2b receives a request signal for requesting a wireless connection with the wireless LAN access point 1 from another wireless communication device, and then receives an identification signal necessary for a temporary wireless connection when the request signal is input. An identification signal is transmitted to the other wireless communication device. FIG. 1 shows another wireless LAN terminal 3 as an example of another wireless communication apparatus. The wireless LAN communication means 2a transmits an inquiry signal for inquiring of the wireless LAN access point 1 whether the wireless connection is permitted or not in response to the request signal. In response to the transmission of the inquiry signal, when the wireless LAN communication unit 2a receives an identification signal necessary for the temporary wireless connection from the wireless LAN access point 1, the identification signal is supplied to the short-range communication unit 2b. .

  The wireless LAN terminal 2 is assumed to be in a state where the wireless LAN communication means 2a establishes a wireless connection with the wireless LAN communication means 1a of the wireless LAN access point 1. When the wireless LAN terminal 2 receives a request signal for requesting a wireless connection with the wireless LAN access point 1 from another wireless LAN terminal 3, the wireless LAN terminal 2 inquires the wireless LAN access point 1 for permission / inhibition of the wireless connection corresponding to the request signal. Send an inquiry signal. On the other hand, when the wireless LAN terminal 2 receives the identification signal necessary for the temporary wireless connection from the wireless LAN access point 1, the identification signal necessary for the temporary wireless connection is transmitted to the other wireless LAN terminal 3. Send to. Thereafter, the other wireless LAN terminal 3 establishes a wireless connection with the wireless LAN access point 1 using the received identification signal necessary for the temporary wireless connection.

  As shown in FIG. 1, the wireless LAN system of the embodiment corresponding to the highest concept includes a wireless communication device, a wireless LAN access point 1, and another wireless communication device. The wireless communication apparatus of this embodiment is a wireless LAN terminal 2 in FIG. The wireless LAN terminal 2 includes a wireless LAN communication unit 2a and a near field communication unit 2b. The short-range communication means 2b of the wireless LAN terminal 2 receives a request signal for requesting a wireless connection with the wireless LAN access point 1 from another wireless communication device, and thereafter receives an identification signal necessary for a temporary wireless connection. In the case of the above, the identification signal is transmitted to the other wireless communication device.

  Another wireless communication apparatus of this embodiment is a wireless LAN terminal 3 in FIG. The wireless LAN terminal 3 includes a wireless LAN communication unit 3a and a near field communication unit 3b. The wireless LAN communication means 2a of the wireless LAN terminal 2 transmits an inquiry signal for inquiring of the wireless LAN access point 1 whether the wireless connection is permitted or not in response to the request signal. When the wireless LAN communication means 2a of the wireless LAN terminal 2 receives the identification signal necessary for the temporary wireless connection from the wireless LAN access point 1 in response to the transmission of the inquiry signal, the wireless LAN communication means 2a transmits the identification signal to the short-range communication. Supply to means 2b.

  The wireless LAN terminal 2 is assumed to be in a state where the wireless LAN communication means 2a establishes a wireless connection with the wireless LAN communication means 1a of the wireless LAN access point 1. When the wireless LAN terminal 2 receives a request signal for requesting a wireless connection with the wireless LAN access point 1 from another wireless LAN terminal 3, the wireless LAN terminal 2 inquires the wireless LAN access point 1 for permission / inhibition of the wireless connection corresponding to the request signal. Send an inquiry signal. On the other hand, when the wireless LAN terminal 2 receives the identification signal necessary for the temporary wireless connection from the wireless LAN access point 1, the identification signal necessary for the temporary wireless connection is transmitted to the other wireless LAN terminal 3. Send to. Thereafter, the other wireless LAN terminal 3 establishes a wireless connection with the wireless LAN access point 1 using the received identification signal necessary for the temporary wireless connection.

  The communication method of the embodiment corresponding to the highest concept gives temporary access right to the wireless LAN access point 1 to other wireless LAN terminals that want to connect to the wireless LAN access point 1 for temporary use. Is. In FIG. 1, a wireless LAN terminal 3 is shown as an example of another wireless communication apparatus. In the communication method of the present embodiment, the identification signal necessary for temporary wireless connection to the wireless LAN access point 1 via short-range communication with the wireless communication device already connected to the wireless LAN access point 1. Orders the creation of In FIG. 1, a wireless LAN terminal 2 is shown as an example of a wireless communication apparatus. Then, the wireless LAN terminal 3 obtains connection information for connecting to the wireless connection destination via the wireless LAN terminal 2 and connects to the wireless LAN access point 1.

  According to these embodiments, for wireless communication devices that need only be temporarily connected to a communication network, the user of the wireless communication device is not aware of the presence, location, and connection information of the wireless LAN access point 1, Can provide temporary access. Users of other wireless LAN terminals 3 can recognize that they are performing near field communication with the wireless LAN terminal 2, but are unaware of the existence and position of the wireless LAN access point 1. As a result, the administrator of the wireless LAN terminal 2 or the wireless LAN access point 1 makes temporary access without making the user of the wireless LAN terminal 3 aware of the existence, position, and connection information of the wireless LAN access point 1. Can be provided. Thereby, security is improved with respect to the wireless LAN access point 1 and the wireless connection to the wireless LAN access point 1. Furthermore, by configuring the connection information of the wireless LAN access point 1 to be valid only for a certain period of time, it is possible to prevent abuse of the connection information by a temporary access user. Hereinafter, preferred embodiments of the present invention will be described in more detail with reference to the drawings.

[First Embodiment]
A wireless communication device, a wireless LAN system, and a communication method according to the first embodiment of the present invention will be described. FIG. 2A is a configuration diagram of the wireless LAN system according to the first embodiment of the present invention. FIG. 2B is a system diagram showing a detailed configuration of the wireless LAN system of FIG. 2A.

  The wireless communication apparatus according to the present embodiment of the present invention is a wireless LAN terminal 102 as an example of a wireless LAN terminal having a wireless connection function and serving as a slave unit. The wireless LAN terminal 102 establishes a wireless LAN connection with the wireless LAN access point device 101 as an example of a wireless LAN access point serving as a parent device. In this state, when the wireless LAN terminal 103 as an example of another wireless LAN terminal serving as a slave unit desires a wireless connection to the wireless LAN access point apparatus 101, the following operation is performed. The wireless LAN terminal 102 establishes short-range wireless communication with the wireless LAN terminal 103. Further, the wireless LAN terminal 102 checks whether it is possible to create identification information that can be temporarily connected to the wireless LAN access point device 101. If identification information that can be temporarily connected can be created, the wireless LAN terminal 102 sends a response to that effect to the wireless LAN terminal 103. Further, the wireless LAN terminal 103 receives information added with the MAC address set in the wireless LAN interface connected to and connected to the wireless LAN terminal 103, and transmits the information to the wireless LAN access point device 101. Further, the wireless LAN terminal 102 requests the wireless LAN access point apparatus 101 to create identification information that can be temporarily connected. Furthermore, the identification information that can be temporarily connected is received from the wireless LAN access point apparatus 101 and transmitted to the wireless LAN terminal 103.

  The wireless LAN system according to this embodiment of the present invention includes a wireless LAN access point device 101 as an example of a wireless LAN access point as shown in FIG. 2A. Furthermore, the wireless LAN system according to the present embodiment includes a wireless LAN terminal 102 as an example of a wireless communication device that is wirelessly connected to the wireless LAN access point device 101. Furthermore, the wireless LAN system according to the present embodiment includes a wireless LAN terminal 103 as an example of another wireless LAN terminal that is wirelessly connected to the wireless LAN access point device 101.

  The wireless LAN terminal 102 performs the following operation when the wireless LAN terminal 103 desires wireless connection to the wireless LAN access point apparatus 101 with the wireless LAN connection established with the wireless LAN access point apparatus 101. The wireless LAN terminal 102 establishes short-range wireless communication with the wireless LAN terminal 103. Further, the wireless LAN terminal 102 checks whether it is possible to create identification information that can be temporarily connected to the wireless LAN access point device 101. If identification information that can be temporarily connected can be created, the wireless LAN terminal 102 sends a response to that effect to the wireless LAN terminal 103. Further, the wireless LAN terminal 103 receives information added with the MAC address set in the wireless LAN interface connected to and connected to the wireless LAN terminal 103, and transmits the information to the wireless LAN access point device 101. Further, the wireless LAN terminal 102 requests the wireless LAN access point apparatus 101 to create identification information that can be temporarily connected. Furthermore, the identification information that can be temporarily connected is received from the wireless LAN access point apparatus 101 and transmitted to the wireless LAN terminal 103.

  Furthermore, the communication method according to the present embodiment of the present invention gives a temporary access right to the wireless LAN access point to other wireless LAN terminals that want to connect to the wireless LAN access point for temporary use. It is. In the communication method according to the present embodiment, the wireless LAN access point is instructed to create a temporary wireless connection destination via short-range wireless communication with the wireless communication device already connected to the wireless LAN access point. To do. Furthermore, in the communication method according to the present embodiment, the other wireless LAN terminal obtains connection information for connecting to the wireless connection destination via the wireless communication device, and the other wireless LAN terminal temporarily Connect to a wireless LAN access point.

  More specific description will be given below. The wireless LAN system of this embodiment includes a wireless LAN access point device 101 and a wireless LAN terminal 102 having an interface that can be connected to the wireless LAN and can perform near field communication. Furthermore, the wireless LAN system of the present embodiment includes a wireless LAN terminal 103 having an interface capable of short-range wireless communication similar to the wireless LAN terminal 102. As an embodiment of the present invention, FIG. 2B shows a system configuration diagram of a wireless LAN slave device attempting to communicate with an upper network using the present invention.

  The wireless LAN access point device 101, which is a parent device, can set a plurality of pieces of identification information ESSID, and has a function capable of communicating simultaneously with each wireless LAN slave device using each piece of identification information ESSID. The wireless LAN access point device 101 includes a wireless LAN control unit 101a having a function as a wireless LAN base unit in accordance with the wireless LAN communication standard defined in IEEE802.11. Since the wireless LAN control unit 101a of the wireless LAN access point apparatus 101 operates as a master unit of a plurality of wireless LAN networks, wireless LAN communication interfaces 104, 105, and 106 that can operate by setting different identification information ESSID for each of them. Have

  The wireless LAN access point device 101 uses the wireless LAN communication interface 104 and the wireless LAN communication interface 105 to send out the identification signal ESSID1 and the identification signal ESSID2 permanently. The remaining one wireless LAN communication interface 106 can freely set settings such as ESSID, encryption method, encryption key, operation on / off, and the like. The wireless LAN access point apparatus 101 has a communication command that can be used only from a terminal connected to the wireless LAN communication interface 104. Further, on / off of the wireless LAN communication interface 106, ESSID, communication method, and encryption key can be set by an instruction from a terminal connected to the wireless LAN communication interface 104.

  The wireless LAN terminal 102 as a slave has a wireless LAN communication interface 102a having a function as a wireless LAN slave in accordance with the wireless LAN communication standard defined in IEEE802.11. Furthermore, it has the NFC communication interface 102b which communicates according to the NFC communication standard prescribed | regulated to ISO / IEC 18092. It is assumed that the wireless LAN terminal 102 in FIG. 2B is already in a state where it can be connected to the wireless LAN access point apparatus 101 via a wireless LAN. In FIG. 2A, two terminals STA1 and STA2 are shown as the wireless LAN terminal 102.

  The wireless LAN terminal 102 has information for connecting to the interface of the identification signal ESSID1 transmitted from the wireless LAN access point apparatus 101, and is in a state where it can communicate with the wireless LAN access point apparatus 101.

  The wireless LAN terminal 102 is close to the wireless LAN terminal 103 having an NFC communication interface for performing equivalent short-range wireless communication using the NFC communication interface 102b, and is in a state where communication can be performed using NFC communication. .

  The wireless LAN terminal 103 as a slave has a wireless LAN communication interface 103a having a function as a wireless LAN slave in accordance with the wireless LAN communication standard defined in IEEE802.11. Furthermore, it has an NFC communication interface 103b for performing short-range wireless communication equivalent to the wireless LAN terminal 102. The wireless LAN terminal 103 has neither the connection information ESSID 1 nor the connection information ESSID 2 of the wireless LAN access point device 101. In FIG. 2A, two terminals STA3 and STA4 are shown as the wireless LAN terminal 103.

  FIG. 2B shows a method of transferring information (ESSID, encryption method, encryption key, etc.) necessary for connection to the wireless LAN terminal 103 as a base unit to the wireless LAN terminal 103 to the wireless LAN terminal 103. Is. This is for providing a temporary access right to the wireless LAN access point device 101 to the wireless LAN terminal 103.

  Next, the operation of this embodiment will be described. FIG. 3 shows an overall system flow until the wireless LAN terminal 103 that wants to temporarily connect to the access point can temporarily connect to the wireless LAN access point apparatus 101. FIG. 3 shows the basic flow of this embodiment.

  First, the wireless LAN terminal 103 that wishes to temporarily connect to the access point establishes an NFC communication connection with the wireless LAN terminal 102 (sequence 301). This is to enable communication with the wireless LAN terminal 102 already connected to the wireless LAN access point apparatus 101 through the NFC interface. At this time, it is assumed that the wireless LAN terminal 102 has already established a communication session for controlling a temporary wireless LAN communication interface with the wireless LAN access point device 101. This communication session will be described later.

  The wireless LAN terminal 103 checks with the wireless LAN terminal 102 whether or not a temporary wireless LAN connection destination can be created (sequence 302). The wireless LAN terminal 102 receives it and confirms whether it is possible to create identification information ESSID that can be temporarily connected to the wireless LAN access point apparatus 101 using the communication session described above (sequence). 303). Hereinafter, the identification information ESSID that can be temporarily connected is referred to as a one-time ESSID. The wireless LAN access point device 101, which is the parent device, receives confirmation from the wireless LAN terminal 102, confirms the operation status of its own wireless LAN communication interface, and returns the number of interfaces that can be used to create a one-time ESSID. (Sequence 304). FIG. 3 shows a case where “1” is returned as the number that can be created. If the response of the wireless LAN access point apparatus 101 is not “0”, the wireless LAN terminal 102 notifies the wireless LAN terminal 103 that it can be created (sequence 305).

  The wireless LAN terminal 103 receives an OK response from the wireless LAN terminal 102 and requests the wireless LAN terminal 102 to create a connection destination (sequence 306). At this time, the wireless LAN terminal 103 adds the MAC address set to the wireless LAN interface that it has and connects to the wireless LAN terminal 102 and transmits it.

  Upon receiving the connection destination creation request, the wireless LAN terminal 102 requests the wireless LAN access point device 101 to create a one-time ESSID (sequence 307). In response to this, the wireless LAN access point device 101 activates the one-time ESSID.

  The encryption method used at this time uses the default wireless LAN access point device 101. Further, the ESSID name and the encryption key are automatically generated and used in accordance with the rules defined in the wireless LAN access point apparatus 101. For example, there is a method of generating a random number using a unique parameter set in the wireless LAN access point apparatus 101 and using a value that will be unique as a wireless LAN access point apparatus in the world for an ESSID and an encryption key. Can be mentioned.

  Furthermore, after the communication interface on which the one-time ESSID operates is activated, the wireless LAN access point apparatus 101 transmits a set of connection information necessary for connecting to the created one-time ESSID to the wireless LAN terminal 102. ESSID and key are lent as a set of connection information (sequence 308). The wireless LAN terminal 102 requests the wireless LAN access point apparatus 101 to register the MAC address of the wireless LAN terminal 103 (sequence 309). Wireless LAN access point apparatus 101 outputs an ACK signal (sequence 310). Further, the wireless LAN terminal 102 transfers the received terminal information (ESSID, key) to the wireless LAN terminal 103 (sequence 311).

  The wireless LAN terminal 103 uses the one-time ESSID connection information received from the wireless LAN terminal 102 to establish a wireless LAN connection with the wireless LAN access point apparatus 101 (sequence 312). As a result, the wireless LAN terminal 103 can establish a wireless LAN connection to the wireless LAN access point device 101. After the wireless LAN terminal 103 establishes a wireless LAN connection to the wireless LAN access point device 101, the NFC communication connection between the wireless LAN terminal 102 and the wireless LAN terminal 103 is disconnected (sequence 313).

  In the present embodiment, when the wireless LAN terminal 102 wants to terminate the wireless LAN connection to the wireless LAN access point device 101 of the wireless LAN terminal 103, it transmits a one-time ESSID stop request to the wireless LAN access point device 101. . Upon receiving this one-time ESSID stop request, the wireless LAN access point device 101 stops the one-time ESSID. Thus, the provision of access to the wireless LAN terminal 103 by the wireless LAN access point device 101 is completed.

  For reference, a flowchart is shown as to what processing the wireless LAN access point apparatus 101, the wireless LAN terminal 102, and the wireless LAN terminal 103 perform.

  FIG. 4 shows a flowchart of processing performed when the wireless LAN terminal 103 performs the system flow. 5 and 6 are flowcharts of processing performed by the wireless LAN terminal 102. FIG. 7 and 8 show flowcharts of processing performed by the wireless LAN access point apparatus 101. FIG. This flowchart is a simple description of the minimum flow required to explain the flow of this system.

  In FIG. 4, the wireless LAN terminal 103 establishes an NFC communication connection with the wireless LAN terminal 102 that has already been connected to the wireless LAN (step S1). The connection is confirmed (step S2), and if OK, it is confirmed whether or not a connection destination can be created (step S3). Further, the response from the wireless LAN terminal 102 is confirmed (step S4), and if OK, a connection destination creation is requested (step S5). Furthermore, the response from the wireless LAN terminal 102 is confirmed (step S6), and if OK, connection to the wireless LAN access point device 101 is attempted using the obtained connection information (step S7). After the wireless LAN terminal 103 establishes a wireless LAN connection to the wireless LAN access point device 101, the NFC communication connection with the wireless LAN terminal 102 is disconnected (step S8).

  In FIG. 5A, the wireless LAN terminal 102 establishes a communication session with the wireless LAN access point device 101 having the one-time ESSID function (step S11). Next, a state confirmation process of the wireless LAN access point device 101 is performed (step S12). Next, a communication process between the wireless LAN terminal 102 and the wireless LAN terminal 103 is performed (step S13). Further, the end of the session is determined (step S14). If the session is ended, the communication session with the wireless LAN access point apparatus 101 is disconnected (step S15).

  As shown in FIG. 5B, the status confirmation process of the wireless LAN access point apparatus 101 in FIG. 5A determines the expiration of the timer (step S16), and if it has expired, the operation status of the one-time ESSID. Is confirmed (step S17). Further, the timer is reset (step S18), and the state confirmation process of the wireless LAN access point device 101 is terminated.

  In FIG. 6, the presence / absence of a connected terminal is determined (step S21). If there is a connected terminal, the presence / absence of command reception is determined (step S22). When a command is received, it is confirmed whether it can be created (step S23). In the case of YES, the wireless LAN access point device 101 confirms whether or not it can be created (step S24). Further, a response from the wireless LAN access point device 101 is determined (step S25). If the response from the wireless LAN access point device 101 is “0”, NG is returned to the wireless LAN terminal 103 (step S27). If the response from the wireless LAN access point device 101 is other than “0”, OK is returned to the wireless LAN terminal 103 (step S26).

  If NO in step S23, a creation request is determined (step S28). If YES, the wireless LAN access point device 101 is requested to create a one-time ESSID (step S29). Further, a response from the wireless LAN access point device 101 is determined (step S30). When the response from the wireless LAN access point apparatus 101 is OK, the connection information acquired from the wireless LAN access point apparatus 101 is returned to the wireless LAN terminal 103 (step S31). If the response from the wireless LAN access point apparatus 101 is NG, NG is returned to the wireless LAN terminal 103 (step S32).

  In FIG. 7A, the wireless LAN access point device 101 establishes a communication session with a wireless LAN terminal already connected to the wireless LAN (step S41). A control timer is started (step S42). Communication processing between the wireless LAN access point apparatus 101 and the terminal is performed (step S43). Control / communication monitoring processing is performed (step S44). The end of the session is determined (step S45), and when the session is ended, a control timer is started (step S46). The communication session with the wireless LAN terminal is disconnected (step S47).

  A detailed flow of the control / communication monitoring process in FIG. 7A will be described with reference to FIG. As shown in FIG. 7B, expiration of the control timer is determined (step S48). If it has expired, it is determined whether the one-time ESSID is being activated (step S49). When the one-time ESSID is active, the one-time ESSID is stopped and the communication timer is stopped (step S50). If the one-time ESSID is not active, a session end flag is set (step S51). If NO in step S51 or step S48, it is determined that the communication timer has expired (step S52). When the communication timer expires, the one-time ESSID is stopped and the communication timer is stopped (step S53).

  FIG. 8 shows a communication process between the wireless LAN access point apparatus 101 and the terminal, determines whether or not a command is received (step S61), and confirms whether it can be created (step S62). If YES in step S62, the number of usable interfaces is answered (step S70). If NO in step S62, a creation request is determined (step S63). If YES in step S63, the one-time ESSID is activated, connection is answered (step S68), and a communication timer is started (step S69). If NO in step S63, the presence / absence of the MAC address is confirmed (step S64). If YES in step S64, an access right is given to the received MAC address and a connection is answered (step S67). If NO in step S64, state confirmation is determined (step S65), and if YES, the creation status of the one-time ESSID is answered (step S66). If NO in step S65, the process ends. After each process of step S70, step S69, step S67, and step S66, the control timer is reset (step S71) and the process ends.

  According to this embodiment of the present invention, the following effects can be obtained.

  The first effect is that a user of a wireless LAN terminal that needs to be connected to the network only temporarily can be temporarily accessed without being aware of the existence, position and connection information of the wireless LAN access point device 101. It can be provided. This is because the user of the wireless LAN terminal 103 can connect to the wireless communication network by short-range wireless communication with the wireless LAN terminal 102, so there is no scene that makes the user aware of the presence, position, and connection information of the wireless LAN access point device 101. . For users of wireless LAN terminals that need to be temporarily connected to the network, there is no scene in which the presence, location, and connection information of the wireless LAN access point device 101 is conscious. Thereby, security is improved with respect to the wireless LAN access point apparatus 101 and the wireless connection to the wireless LAN access point apparatus 101.

  The second effect is that it provides completely temporary (one-time) accessibility to terminals that need to be connected to the network only temporarily, thereby preventing unintended continuation of access rights. By making the connection information of the wireless LAN access point 1 valid for a certain period of time such as creating and providing identification information ESSID that can be temporarily connected, misuse of connection information by a temporary access user Can be prevented. Moreover, by generating random numbers using unique parameters to create temporarily connectable identification information ESSID, it is possible to make it difficult to guess temporarily connectable identification information ESSID, and unintended access Can be prevented.

  The third effect is that the user of the wireless LAN terminal that needs to be connected to the network only temporarily can be connected to the wireless LAN without being aware of the ESSID, the encryption key, etc., and the convenience of the user is improved. It is. This is because there is no scene in which a user of a wireless LAN terminal that needs to be temporarily connected to the network obtains the ESSID and the encryption key and sets them in the wireless LAN terminal. A user of the wireless LAN terminal 103 can connect to the wireless communication network by short-range wireless communication with the wireless LAN terminal 102.

  The fourth effect is that, since the above reason is viewed from the network administrator side, connectivity can be provided to the user without being aware of the ESSID, encryption key, etc., so that the confidentiality of the network information is improved. is there.

[Other Embodiments]
As mentioned above, although preferable embodiment of this invention was described, this invention is not limited to this. For example, in the above-described embodiment, one unit is connected to the one-time ESSID of the wireless LAN access point apparatus 101, but this does not impose a limitation that a maximum of one unit can be connected to the one-time ESSID. As with other ESSIDs, a plurality of slave units can be connected.

  In the above-described embodiment, the wireless LAN access point device 101 has been described with a maximum of three wireless LAN communication interfaces that can specify ESSID as an example, and thus the communication interface that can be used for one-time ESSID is described as one. This does not limit the number. The same applies to permanent ESSID. If the access point has more wireless LAN communication interfaces, it is possible to increase the number of one-time ESSIDs and create an ESSID separately for each terminal that has temporarily requested connection.

  Further, in the above-described embodiment, NFC communication is used for communication between the wireless LAN terminal 102 and the wireless LAN terminal 103, but this does not limit the communication method to NFC. A communication interface capable of securely communicating between two terminals, such as infrared communication such as IrDA or Bluetooth, can be similarly realized.

  In the above-described embodiment, the operation in which the wireless LAN access point apparatus 101 stops the one-time ESSID in response to the one-time ESSID stop request from the wireless LAN terminal 102 has been described. However, the trigger for stopping the one-time ESSID is not limited to this timing and method.

  For example, it is conceivable that the wireless LAN access point apparatus 101 forcibly stops the one-time ESSID after a specified time after receiving a temporary ESSID creation request from the wireless LAN terminal 102. In addition, even if Bluetooth is used for short-range wireless communication, if the Bluetooth communication is interrupted, it is possible to provide usage restrictions for the user, such as forcibly stopping the one-time ESSID. For example, there may be a case where such a one-time ESSID is forcibly stopped because the wireless LAN terminal 103 is no longer near the wireless LAN terminal 102. As described above, there are various methods for providing temporary access, in other words, triggers, timings, and methods for terminating the wireless connection when the provision period ends. The trigger, timing, and method for terminating the wireless connection are not limited to the methods exemplified above.

  It goes without saying that various modifications are possible within the scope of the invention described in the claims, and these are also included in the scope of the present invention.

A part or all of the above-described embodiment can be described as in the following supplementary notes, but is not limited thereto.
(Supplementary Note 1) When a request signal for requesting a wireless connection with a wireless LAN access point is received from another wireless communication device, and then an identification signal necessary for the temporary wireless connection is input, the identification signal is Short-range communication means for transmitting to the other wireless communication device;
In response to the request signal, an inquiry signal for inquiring the wireless LAN access point for permission / inhibition of wireless connection is transmitted, and when an identification signal required for the temporary wireless connection is received from the wireless LAN access point, Wireless LAN communication means for supplying an identification signal to the short-range communication means;
A wireless communication apparatus comprising:
(Supplementary Note 2) After establishing near field communication with the other wireless communication device, the other wireless communication device uses the identification signal necessary for the temporary wireless connection to wirelessly connect to the wireless LAN access point. Establish a connection,
Thereafter, the wireless communication device according to appendix 1, wherein the short-range communication with the other wireless communication device is disconnected.
(Supplementary Note 3) A request for stopping the identification signal necessary for the temporary wireless connection is transmitted to the wireless LAN access point, and the identification signal necessary for the temporary wireless connection of the wireless LAN access point is stopped. The wireless communication device according to Appendix 1 or Appendix 2.
(Appendix 4) The wireless communication device described in any one of Appendix 1 to Appendix 3,
The wireless LAN access point;
The other wireless communication device;
A wireless LAN system comprising:
(Appendix 5) The wireless LAN access point registers the MAC address set in the wireless LAN communication means of another wireless communication device received from the wireless communication device,
The wireless LAN system according to appendix 4, wherein the other wireless communication device establishes a wireless connection to the wireless LAN access point using the received identification signal necessary for the temporary wireless connection.
(Supplementary note 6) In the supplementary note 5, the wireless communication device disconnects short-range communication with the other wireless communication device after the other wireless communication device has established a wireless connection to the wireless LAN access point. The wireless LAN system described.
(Supplementary Note 7) The wireless communication apparatus transmits a request for stopping an identification signal necessary for the temporary wireless connection to the wireless LAN access point, and the wireless LAN access point receives the request to stop temporarily. The wireless LAN system according to any one of supplementary notes 4 to 6, wherein an identification signal necessary for wireless connection is stopped.
(Supplementary Note 8) In order to give temporary access right to the wireless LAN access point to other wireless communication devices that want to connect to the wireless LAN access point for temporary use,
Instructing the wireless LAN access point to create a temporary wireless connection destination via short-range communication with a wireless communication device already connected to the wireless LAN access point,
A communication method in which the other wireless communication device obtains connection information for connecting to the wireless connection destination via the wireless communication device and temporarily connects to a wireless LAN access point.
(Supplementary note 9) The wireless communication device
When the other wireless communication device desires a wireless connection to the wireless LAN access point, after establishing near field communication with the other wireless communication device,
Check whether it is possible to create an identification signal necessary for temporary wireless connection to the wireless LAN access point, and if it is possible to create an identification signal necessary for temporary wireless connection, Reply to the other wireless communication device,
Information added with the MAC address set in the wireless LAN communication means included in the other wireless communication device is received from the other wireless communication device, transmitted to the wireless LAN access point, and temporarily transmitted to the wireless LAN access point. Request the creation of an identification signal necessary for secure wireless connection,
9. The communication method according to appendix 8, wherein an identification signal necessary for the temporary wireless connection is received from the wireless LAN access point and transmitted to the other wireless communication device.
(Supplementary Note 10) The wireless LAN access point registers the MAC address set in the wireless LAN communication means of another wireless communication device received from the wireless communication device,
The communication method according to appendix 9, wherein the other wireless communication device establishes a wireless connection to the wireless LAN access point using the received identification signal necessary for the temporary wireless connection.
(Supplementary note 11) In the supplementary note 10, the wireless communication device disconnects short-range communication with the other wireless communication device after the other wireless communication device establishes a wireless connection to the wireless LAN access point. The communication method described.
(Supplementary Note 12) The wireless communication apparatus transmits a request for stopping an identification signal necessary for temporary wireless connection to the wireless LAN access point, and the wireless LAN access point receives the request to temporarily connect to the wireless LAN access point. 12. The communication method according to any one of supplementary notes 9 to 11, wherein an identification signal necessary for the communication is stopped.

  As an application example of the present invention, an information terminal device such as a smart phone, a tablet terminal, a personal computer, etc., which has another short-range communication function together with a wireless LAN connection device can be considered.

DESCRIPTION OF SYMBOLS 1 Wireless LAN access point 1a, 2a, 3a Wireless LAN communication means 2, 3 Wireless LAN terminal 2b, 3b Short-range communication means 101 Wireless LAN access point apparatus 101a Wireless LAN control part 102, 103 Wireless LAN terminal 102a, 103a, 104, 105, 106 Wireless LAN communication interface 102b, 103b NFC communication interface

Claims (10)

When a request signal for requesting a wireless connection with a wireless LAN access point is received from another wireless communication apparatus, and when an identification signal necessary for temporary wireless connection is input thereafter, the identification signal is transmitted to the other wireless communication device. Short-range communication means for transmitting to the communication device;
In response to the request signal, an inquiry signal for inquiring the wireless LAN access point for permission / inhibition of wireless connection is transmitted, and when an identification signal required for the temporary wireless connection is received from the wireless LAN access point, Wireless LAN communication means for supplying an identification signal to the short-range communication means;
A wireless communication apparatus comprising: After establishing near field communication with the other wireless communication device, the other wireless communication device establishes a wireless connection to the wireless LAN access point using an identification signal necessary for the temporary wireless connection. ,
The wireless communication device according to claim 1, wherein the short-range communication with the other wireless communication device is then disconnected.   2. A request for stopping an identification signal necessary for the temporary wireless connection is transmitted to the wireless LAN access point, and the identification signal necessary for the temporary wireless connection of the wireless LAN access point is stopped. Or the radio | wireless communication apparatus of Claim 2. A wireless communication device according to any one of claims 1 to 3,
The wireless LAN access point;
The other wireless communication device;
A wireless LAN system comprising: The wireless LAN access point registers the MAC address set in the wireless LAN communication means of another wireless communication device received from the wireless communication device,
The wireless LAN system according to claim 4, wherein the other wireless communication device establishes a wireless connection to the wireless LAN access point using the received identification signal necessary for the temporary wireless connection.   The wireless communication device according to claim 5, wherein the wireless communication device disconnects short-range communication with the other wireless communication device after the other wireless communication device has established a wireless connection to the wireless LAN access point. LAN system.   The wireless communication device transmits a request for stopping an identification signal necessary for the temporary wireless connection to the wireless LAN access point, and the wireless LAN access point is necessary for the temporary wireless connection in response to the request. The wireless LAN system according to any one of claims 4 to 6, wherein an active identification signal is stopped. A wireless communication device already connected to the wireless LAN access point gives a temporary access right to the wireless LAN access point to another wireless communication device that wants to connect to the wireless LAN access point for temporary use. for,
Via the short-range communication with the wireless communication device connected to the wireless LAN access point, wherein the connecting to the wireless LAN access point wireless communication device, the wireless LAN access point to a temporary radio Command to create a connection,
A communication method in which the other wireless communication device obtains connection information for connecting to the wireless connection destination via the wireless communication device and temporarily connects to a wireless LAN access point.
The wireless communication device
When the other wireless communication device desires a wireless connection to the wireless LAN access point, after establishing near field communication with the other wireless communication device,
Check whether it is possible to create an identification signal necessary for temporary wireless connection to the wireless LAN access point, and if it is possible to create an identification signal necessary for temporary wireless connection, Reply to the other wireless communication device,
Information added with the MAC address set in the wireless LAN communication means included in the other wireless communication device is received from the other wireless communication device, transmitted to the wireless LAN access point, and temporarily transmitted to the wireless LAN access point. Request the creation of an identification signal necessary for secure wireless connection,
The communication method according to claim 8, wherein an identification signal necessary for the temporary wireless connection is received from the wireless LAN access point and transmitted to the other wireless communication device. The wireless LAN access point registers the MAC address set in the wireless LAN communication means of another wireless communication device received from the wireless communication device,
The communication method according to claim 9, wherein the other wireless communication device establishes a wireless connection to the wireless LAN access point using the received identification signal necessary for the temporary wireless connection.

Images