Network configuration method and communication system and apparatus

• US 7,418,591 B2
• Filed: 07/11/2003
• Issued: 08/26/2008
• Est. Priority Date: 08/09/2002
• Status: Expired due to Fees

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Tachikawa, Hirohide
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): Dinh; Minh
• Application Number:
  US10/616,941
• Publication Number:
  US 20040030895A1
• Time in Patent Office: 1,873 Days
• Field of Search: 713/155
• US Class Current: 713/155
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

A network configuration process establishes, between an access point device and a client terminal, a wireless communication link through a first encrypted communication requiring no authentication process, and sends authentication data from the access point device to the client terminal in a state where the wireless communication link through said first encrypted communication is established. The link through the first encrypted communication is discarded in response to sending of the authentication data. Then, a second link is established through a second encrypted communication that requires an authentication process using the sent authentication data, where the first link is continually discarded.

Claims

1. A network configuration method of configuring a wireless network, comprising:

an access point device receiving a network configuration request for configuring a new wireless network comprising the access point device and at least one client terminal;

a first display step of displaying a first cipher key and a network identifier on a display unit of the access point device, the first cipher key and the network identifier being used for establishing a first wireless communication link through a first encrypted communication that does not require an authentication process;

a first link establishing step of establishing, between the access point device and a client terminal, the first wireless communication link by inputting the first cipher key and the network identifier into the client terminal;

a second display step of displaying information of the client terminal on the display unit of the access point device, the first wireless communication link having been established between the client terminal and the access point device in the first link establishing step;

a determination step of determining whether the client terminal is to be authorized to participate in the network which is configured with a second wireless communication link through a second encrypted communication that requires the authentication process, where the client terminal is determined on the basis of a user operation of selecting information of a client terminal from among a plurality of information of client terminals which are displayed in the second display step;

a sending step of, if the determination step determines that the client terminal is authorized to be configured in the network with the access point device, the access point device sending authentication data from said access point device to said client terminal in a state where the first wireless communication link through said first encrypted communication is established;

a link discarding step of discarding the first wireless communication link through said first encrypted communication between said access point device and said client terminal in response to the sending of the authentication data to the client terminal by the access point device at said sending step; and

a second link establishing step of establishing, between said access point device and said client terminal, the second wireless communication link through the second encrypted communication that requires the authentication process using the authentication data sent to said client terminal after discarding the first communication link at said link discarding step, the second wireless communication link having the same network identifier as that of the first wireless communication link.

2. The network configuration method according to claim 1, further comprising a selection step of selecting a client terminal to be permitted with said second encrypted communication from among information of a plurality of client terminals displayed on the display unit with which a link is established at said first link establishing step, wherein said sending step sends the authentication data to said client terminal selected at said selection step.

3. The network configuration method according to claim 2, wherein said selection step comprises making said selection on the basis of a user operation.

4. The network configuration method according to claim 1, further comprising a selection step of selecting a client terminal to be permitted with said second encrypted communication from among information of a plurality of client terminals displayed on the display unit with which a link is established at said first link establishing step, and a filter setting step of setting address filtering based on the selection at said selection step.

5. The network configuration method according to claim 1, wherein said second link establishing step comprises establishing the second wireless communication link through said second encrypted communication in accordance with an authentication result from said authentication process.

6. The network configuration method according to claim 1, wherein the authentication in said authentication process is performed by said access point device.

7. The network configuration method according to claim 1, further comprising a creation step of creating the authentication data sent at said sending step.

8. The network configuration method according to claim 1, wherein the authentication data sent at said sending step is effective for a fixed period of time.

9. A wireless communication system comprising:

network configuration request receiving means for receiving, from a client terminal to an access point device, a request for configuring a new wireless network comprising the client terminal and the access point device;

a display unit of the access point device for displaying a first cipher key and a network identifier, the first cipher key and the network identifier being used for establishing a first wireless communication link through a first encrypted communication that does not require an authentication process;

first link establishing means for establishing, between the access point device and the client terminal, the first wireless communication link by inputting the first cipher key and the network identifier into the client terminal, wherein when the first wireless communication link has been established between the access point and the client terminal, information of the client terminal is displayed on the display unit of the access point device;

determination means for determining whether the client terminal is to be authorized to participate in the network which is configured with a second wireless communication link through a second encrypted communication that requires the authentication process, where the client terminal is determined on the basis of a user operation of selecting information of a client terminal from among a plurality of information of client terminals which are displayed on the display unit;

sending means for, if the determination means determines that the client terminal is authorized to be configured in the network with the access point device, sending authentication data from said access point device to said client terminal in a state where the first wireless communication link through said first encrypted communication is established;

link discarding means for discarding the first wireless communication link through said first encrypted communication between said access point device and said client terminal in response to the sending of the authentication data to the client terminal by said sending means; and

second link establishing means for establishing, between the access point device and the client terminal, the second wireless communication link through the second encrypted communication that requires the authentication process using the authentication data sent to said client terminal, after discarding the first communication link by said link discarding means, the second wireless communication link having the same network identifier as that of the first wireless communication link.

10. An access point device for a wireless communication network, comprising:

network configuration request receiving means for receiving, from a client terminal, a request for configuring a new wireless communication network comprising the client terminal and the access point device;

a display unit for displaying a first cipher key and a network identifier, the first cipher key and the network identifier being used for establishing a first wireless communication link through a first encrypted communication that does not require an authentication process;

first link establishing means for establishing, between the access point device and the client terminal, the first wireless communication link by inputting the first cipher key and the network identifier into the client terminal, wherein when the first wireless communication link has been established between the access point and the client terminal, information of the client terminal is displayed on the display unit of the access point device;

determination means for determining whether the client terminal is to be authorized to participate in the network which is configured with a second wireless communication link through a second encrypted communication that requires the authentication process, where the client terminal is determined on the basis of a user operation of selecting information of the client terminal from among a plurality of information of client terminals which have been displayed on the display unit;

sending means for, if the determination means determines that the client terminal is authorized to be configured in the network with the access point device, sending authentication data to said client terminal in a state where the first wireless communication link is established by said first link establishing means;

link discarding means for discarding the first wireless communication link established by said first link establishing means between said client terminal and said access point device, in response to the sending of the authentication data to the client terminal by said sending means; and

second link establishing means for establishing, between said client terminal and said access point device, the second wireless communication link through the second encrypted communication that requires the authentication process using the authentication data sent to said client terminal, after discarding the first communication link by said link discarding means, the second wireless communication link having the same network identifier as that of the first wireless communication link.