Communication apparatus, control method thereof, and storage medium

• US 9,112,676 B2
• Filed: 04/04/2013
• Issued: 08/18/2015
• Est. Priority Date: 12/05/2007
• Status: Active Grant

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Goto, Fumihide
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US13/856,608
• Publication Number:
  US 20130223630A1
• Time in Patent Office: 866 Days
• Field of Search: 380/279, 713/163
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 9/0816 Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
• CPC Class Codes: H04L 9/0833 involving conference or group key network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A first communication apparatus that functions as a providing apparatus that provides an encryption key or as a receiving apparatus that receives an encryption key provided by a providing apparatus, and that performs a key sharing process for sharing an encryption key with another apparatus, confirms whether or not the first communication apparatus functioned as the providing apparatus in the key sharing process performed among a plurality of apparatuses present on a network in which the first communication apparatus is joining; compares identification information of a second communication apparatus that has newly joined the network with identification information of the first communication apparatus; and determines whether or not the first communication apparatus is to function as a providing apparatus in the key sharing process performed between the first and the second communication apparatuses based on the result of the confirmation and the comparison.

Claims

1. A communication apparatus, comprising:

a determination unit configured to determine whether to act as an authenticating apparatus that authenticates, for performing wireless communication in a wireless network, an authenticated apparatus or as an authenticated apparatus that is authenticated by an authenticating apparatus;

an authentication unit configured to authenticate, in a case where the determination unit determines that the communication apparatus acts as the authenticating apparatus, a first other communication apparatus; and

a sending unit configured to send, in a case where a search request is received from a second other communication apparatus that does not participate in a communication group while the communication apparatus and the first other communication apparatus form the communication group, information indicating the first other communication apparatus that the communication apparatus authenticated while acting as the authenticating apparatus, to the second other communication apparatus.

2. The apparatus according to claim 1, wherein the determination unit performs the determination based on a comparison between information received from another apparatus and information related to the communication apparatus itself.

3. The apparatus according to claim 1, wherein the information indicating the first other communication apparatus sent by the sending unit is used by the second other communication apparatus for establishing a communication group with the first other communication apparatus.

4. The apparatus according to claim 1, wherein the communication apparatus shares, in response to the authentication by the authentication unit, an encryption key for performing encrypted communication with the authenticated apparatus.

5. The apparatus according to claim 1, wherein a four-way handshake is performed between the first other communication apparatus and the second other communication apparatus, depending on the information indicating the first other communication apparatus sent by the sending unit.

6. The apparatus according to claim 1, wherein the sending unit sends the information indicating the first other communication apparatus to the second other communication apparatus, in a case where the communication apparatus and the first other communication apparatus establish a communication group.

7. The apparatus according to claim 1, wherein the sending unit sends the information indicating the first other communication apparatus to the second other communication apparatus, in a case where a four-way handshake has been performed between the communication apparatus and the first other communication apparatus.

8. The apparatus according to claim 1, wherein the determination unit performs the determination by communication in a wireless network compliant with IEEE 802.11.

9. The apparatus according to claim 1, wherein the authenticating apparatus serves as an authenticator specified in WPA (Wi-Fi Protected Access), and the authenticated apparatus serves as a supplicant specified in the WPA.

10. The apparatus according to claim 1, wherein the authenticating apparatus serves as an authenticator specified in the IEEE 802.11i standard, and the authenticated apparatus serves as a supplicant specified in the IEEE 802.11i standard.

11. The apparatus according to claim 1, wherein the authentication unit authenticates the first other communication apparatus in order to share an encryption key used for performing encrypted communication in the wireless network.

12. The apparatus according to claim 1, wherein the sending unit sends, in a case where the communication apparatus and the first other communication apparatus are connected to a wireless network in response to the authentication by the authentication unit, information indicating the first other communication apparatus to the second other communication apparatus that is not connected to the wireless network.

13. The apparatus according to claim 1, further comprising a unit configured to, in a case where the determination unit determines to act as the authenticated apparatus, allow the communication apparatus to be authenticated by another apparatus that acts as an authenticating apparatus.

14. A control method of a communication apparatus, the method comprising steps of:

determining whether to act as an authenticating apparatus that authenticates, for performing wireless communication in a wireless network, an authenticated apparatus or as an authenticated apparatus that is authenticated by an authenticating apparatus;

authenticating, in a case where it is determined that the communication apparatus acts as the authenticating apparatus, a first other communication apparatus; and

sending, in a case where a search request is received from a second other communication apparatus that does not participate in a communication group while the communication apparatus and the first other communication apparatus form the communication group, information indicating the first other communication apparatus that the communication apparatus authenticated while acting as the authenticating apparatus, to the second other communication apparatus.

15. A non-transitory computer-readable storage medium in which is stored a program for causing a computer included in a communication apparatus to perform a method, the method comprising:

determining whether to act as an authenticating apparatus that authenticates, for performing wireless communication in a wireless network, an authenticated apparatus or as an authenticated apparatus that is authenticated by an authenticating apparatus;

authenticating, in a case where it is determined that the communication apparatus acts as the authenticating apparatus, a first other communication apparatus; and

sending, in a case where a search request is received from a second other communication apparatus that does not participate in a communication group while the communication apparatus and the first other communication apparatus form the communication group, information indicating the first other communication apparatus that the communication apparatus authenticated while acting as the authenticating apparatus, to the second other communication apparatus.