Access point for authenticating apparatus, communicating apparatus subjected to authentication of access point, and system having them

• US 20030194090A1
• Filed: 04/10/2003
• Published: 10/16/2003
• Est. Priority Date: 04/12/2002
• Status: Abandoned Application

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Tachikawa, Hirohide
• Application Number:
  US10/411,590
• Publication Number:
  US 20030194090A1
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

Account data by which an access point authenticates a communicating apparatus is stored in a detachable memory device. After the account data stored in the detachable memory device was updated on the communicating apparatus side, when the detachable memory device is attached to the access point, the access point discriminates whether the account data has been updated or not. If it has been updated, the account data stored in a memory of the access point is rewritten to the updated account data. After that, the authentication of the communicating apparatus is made by using the updated account data.

Claims

1. An access point for making access control of a communicating apparatus, comprising:

memory means for reading out account data stored in a detachable memory device and storing it;

an authentication server function for authenticating said communicating apparatus on the basis of the account data stored in said memory means;

discriminating means for discriminating that the account data stored in said detachable memory device has been updated; and

control means for controlling so as to rewrite the account data stored in said memory means on the basis of a result of the discrimination of said discriminating means.

2. An access point according to claim 1, further comprising a wireless communication extension interface corresponding to a plurality of wireless communicating functions, and

wherein by selectively attaching a wireless communication card to said wireless communication extension interface, wireless communication with said communicating apparatus by a different wireless communicating function can be made.

3. An access point according to claim 2, wherein a plurality of said wireless communication extension interfaces are provided.

4. An access point according to claim 1, further comprising a wire interface for connecting to a wire network, and

wherein said communicating apparatus is a wireless communicating apparatus, and

said access point enables a communication path between said wireless communicating apparatus and said wire network to be selected.

5. An access point according to claim 4, wherein an emulation process of said authentication server function is executed by a control unit for executing the communication path selecting process.

6. An access point according to claim 1, wherein said authentication server function executes said authenticating process by using account data related to present time in the account data stored in said detachable memory device.

7. An access point according to claim 1, wherein said discriminating means discriminates that the account data related to time when said detachable memory device has been connected has been updated.

8. An access point according to claim 1, further comprising a wire interface for connecting to a wire network, and

wherein said memory means also stores account data for said authentication server function received via said wire network.

9. An access point according to claim 1, wherein all account data, which is managed by said access point is stored in said detachable memory device.

10. An access point according to claim 1, wherein said authentication server function makes authentication, which is specified by IEEE802.1x.

11. An access point according to claim 1, further comprising a plurality of wireless communication interfaces, and

wherein said communicating apparatus is a wireless communicating apparatus, and

the wireless communication interface which is used by said wireless communicating apparatus is selected in accordance with said account data.

12. A communicating apparatus comprising:

an interface for attaching a detachable memory device in which account data that is used when an access point having an authentication server function authenticates the communicating apparatus has been stored;

editing means for editing the account data stored in said detachable memory device attached to said interface; and

authenticating means for executing the authenticating process of said access point by using the account data edited by said editing means.

13. A system having an access point for making access control of a communicating apparatus and said communicating apparatus, wherein

said access point comprises:

an authentication server function for authenticating said communicating apparatus on the basis of account data stored in a memory;

discriminating means for discriminating that the account data stored in a detachable memory device has been updated; and

control means for controlling so as to rewrite the account data stored in said memory on the basis of a result of the discrimination of said discriminating means, and

said communicating apparatus comprises;

editing means for editing the account data stored in said attached detachable memory device; and

authenticating means for executing the authenticating process of said access point by using the account data edited by said editing means.

14. A control method for an access point having an authentication server function for authenticating a communicating apparatus on the basis of account data stored in a memory, comprising:

a memory step of reading out account data stored in a detachable memory device and storing it into said memory;

a discriminating step of discriminating that after the account data was stored into said memory in said memory step, the account data stored in said detachable memory device has been updated in an attached detachable memory device; and

a control step of controlling so as to rewrite the account data stored in said memory on the basis of a result of the discrimination of said discriminating step.

15. A control method for a communicating apparatus having an interface to attach a detachable memory device in which account data that is used when an access point having an authentication server function authenticates the communicating apparatus has been stored, comprising:

an editing step of editing the account data stored in said detachable memory device attached to said interface; and

an authenticating step of executing an authenticating process of said access point by using the account data edited in said editing step.