Encryption key setting system, access point, encryption key setting method, and authentication code setting system

• US 7,289,631 B2
• Filed: 07/07/2003
• Issued: 10/30/2007
• Est. Priority Date: 10/18/2002
• Status: Active Grant

• Current Assignee: Buffalo Incorporated (Melco Holdings Incorporated)
• Original Assignee: Buffalo Incorporated (Melco Holdings Incorporated)
• Inventors: Ishidoshiro, Takashi
• Primary Examiner(s): SMITHERS, MATTHEW
• Application Number:
  US10/615,286
• Publication Number:
  US 20040076300A1
• Time in Patent Office: 1,576 Days
• Field of Search: 726/21, 726/28, 726/29, 726/30, 380/270
• US Class Current: 380/270
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals
• CPC Class Codes: H04W 92/10 between terminal device and access point, i.e. wireless air interface
• CPC Class Codes: Y02D 30/70 in wireless communication networks

Abstract

In an encryption key setting system of the present invention, in response to an operation of a registration button 127, an access point 20 restricts the coverage of radio wave transmitted from the access point 20 from a general radio communication area AR1 to a narrower security communication area MR1. The access point 20 subsequently delivers a WEP key to a terminal 50, confirms the successful delivery, and registers a MAC address of the terminal 50. The terminal 50 sets the delivered WEP key in itself. This arrangement desirably allows for new enrollment of a terminal for a wireless LAN by a simple method, while effectively preventing leakage of data representing an encryption key.

Claims

1. An encryption key setting system that sets an encryption key, which is used to encrypt radio communication data transmitted between an access point and a relay station for a wireless LAN and a terminal equipped with a device for connecting with the wireless LAN prior to the transmission, in said terminal, said encryption key setting system comprising:

an instruction module provided at said access point that gives instructions to start setting said encryption key;

a communication range restriction module that restricts a radio communication range between said access point and said terminal to be narrower than a general communication range; and

an encryption key setting module that, while the radio communication range is restricted by said communication range restriction module, transmits encryption key data representing the encryption key by wireless between said terminal and said access point located within the restricted radio communication range, so as to facilitate setting said encryption key at said terminal.

2. An encryption key setting system in accordance with claim 1, said encryption key setting system further comprising;

a condition specification module that specifies a condition of restricting the radio communication range to be narrower than the general communication range, based on the instructions given by said instruction module,

wherein said communication range restriction module restricts the radio communication range under the condition specified by said condition specification module.

3. An encryption key setting system in accordance with claim 1, wherein said communication range restriction module is disposed in said access point and carries out control to restrict the radio communication range to be narrower than the general communication range, when receiving an instruction of setting the encryption key from said terminal, and

said communication range restriction module, on conclusion of setting the encryption key by said encryption key setting module, carries out control to restore the restricted radio communication range to the general communication range.

4. An encryption key setting system in accordance with claim 1, wherein said communication range restriction module regulates a transmission output of said access point to restrict the radio communication range.

5. An encryption key setting system in accordance with claim 1, wherein said communication range restriction module comprises a shielding member to shield said terminal, in which the encryption key is set, and said access point from a radio signal.

6. An encryption key setting system in accordance with claim 1, wherein said access point comprises a registration module tat registers unique information intrinsic to said terminal for communication.

7. An access point that is a relay station for a wireless LAN and establishes wireless communication with a terminal equipped with a device for connecting with the wireless LAN, said access point encrypting radio communication data as an object of communication with a preset encryption key, prior to wireless communication with said terminal, and transmitting the encrypted radio communication data to and from said terminal by wireless, said access point comprising:

an instruction module that gives instructions to start setting said encryption key;

a communication range restriction module that restricts a radio communication range between said access point and said terminal to be narrower than a general communication range; and

an encryption key setting module that, while the radio communication range is restricted by said communication range restriction module, transmits encryption key data representing the encryption key by wireless to and from said terminal located in the restricted radio communication range, so as to facilitate setting said encryption key at said terminal.

8. An encryption key setting method that sets an encryption key, which is used to encrypt radio communication data transmitted between an access point as a relay station for a wireless LAN and a terminal equipped with a device for connecting with the wireless LAN prior to the transmission, in said terminal, said encryption key setting method comprising the steps of:

(a) giving instructions to start setting said encryption key;

(b) restricting a radio communication range between said access point and said terminal to be narrower than a general communication range; and

(c) while the radio communication range is restricted in said step (b), transmitting encryption key data representing the encryption key by wireless between said terminal and said access point located within the restricted radio communication range, so as to facilitate setting said encryption key at said terminal.

9. An authentication code setting system that sets an authentication code, which is required when a terminal equipped with a device for connecting with a wireless LAN establishes wireless communication with an access point as a relay station for the wireless LAN to gain access to preset data on a network, in at least one of said terminal and said access point, said authentication code setting system comprising:

an instruction module provided at said access point that gives instructions to start setting said authentication code;

a communication range restriction module that restricts a radio communication range between said access point and said terminal to be narrower than a general communication range; and

an authentication code setting module that, while the radio communication range is restricted by said communication range restriction module, transmits data representing the authentication code by wireless between said terminal and said access point located within the restricted radio communication range, so as to facilitate setting said authentication code at said terminal.