JP7697254B2 - COMMUNICATION DEVICE AND COMPUTER PROGRAM FOR THE COMMUNICATION DEVICE - Google Patents

Description

This specification discloses a communication device that displays a selection screen for selecting an access point.

As shown in Non-Patent Document 1, the Wi-Fi Alliance (registered trademark) has formulated WPA3, a new communication standard in the Wi-Fi standard. In WPA3 Enterprise, a 192-bit option is provided as a next-generation security protocol. In addition, other security protocols may be provided in communication standards other than WPA3.

JP 2016-019085 A JP 2016-208448 A JP 2019-106610 A

“WPA3 Specification Version 3.0” Wi-Fi Alliance, 2020, https://www.wi-fi.org/ja/discover-wi-fi/security

As a new wireless standard is formulated, it is expected that there will be a mixture of access points that support the specified method of the wireless standard and access points that do not support the specified method. For example, if a user wishes to use an access point that supports the specified method, and the above two types of access points are searched, there is a possibility that the user will mistakenly select an access point that does not support the specified method.

This specification provides a technique for preventing the erroneous selection of an access point that does not support a specific method in the above mixed situation.

The communication device disclosed in this specification includes a wireless interface for performing wireless communication according to a predetermined wireless standard, a display unit, and a first receiving unit that receives a signal from each of the two or more access points via the wireless interface in a situation where two or more access points are present around the communication device, the two or more access points including a first access point that supports a predetermined method in the predetermined wireless standard and a second access point that does not support the predetermined method, the predetermined method including an encryption method that satisfies a predetermined criterion, the signal received from the first access point includes first method information indicating an encryption method supported by the first access point, and the signal received from the second access point includes a first method information indicating an encryption method supported by the second access point. The first receiving unit includes second method information indicating an encryption method supported by the first access point, the encryption method indicated by the first method information being a method that satisfies the predetermined criteria, and the encryption method indicated by the second method information being a method that does not satisfy the predetermined criteria; and a first display control unit that causes the display unit to display a first selection screen for selecting one access point from the two or more access points when the signal is received from each of the two or more access points, and in the first selection screen, information indicating the first access point that supports the encryption method indicated by the first method information is displayed preferentially over information indicating the second access point that supports the encryption method indicated by the second method information.

When an access point supports an encryption method that meets a predetermined criterion, it is presumed that the access point supports the predetermined method. According to the above configuration, in a situation in which signals are received from each of two or more access points, a first access point that supports an encryption method that meets the predetermined criterion is displayed with priority over a second access point that supports an encryption method that does not meet the predetermined criterion. In a situation in which a first access point that supports the predetermined method and a second access point that does not support the predetermined method are mixed, it is possible to prevent the second access point that does not support the predetermined method from being erroneously selected.

In addition, the control method for the above-mentioned communication device, the computer program for the communication device, and the storage medium for storing the computer program are also novel and useful.

1 shows the configuration of a communication system. 4 shows an overview of a process for establishing a wireless connection in the first embodiment. 13 shows the configuration of a beacon signal packet in WPA3 Personal. 13 shows the configuration of a beacon signal packet in WPA3 Enterprise (not supporting 192-bit Option). 1 shows the configuration of a beacon signal packet in WPA3 Enterprise (compatible with 192-bit Option). 13 shows a flowchart of a selection screen process. A specific case realized by the selection screen process of FIG. 6 will be described below. 13 shows an overview of a process for establishing a wireless connection in the second embodiment.

(First embodiment)
(Configuration of communication system 2; FIG. 1)
1, the communication system 2 includes an MFP (abbreviation of Multifunction Peripheral) 10, a terminal device 100, APs (abbreviation of Access Points) 200, 300, and 400, and authentication servers 210 and 410. Each of the APs 200 to 400 is capable of forming a wireless LAN (abbreviation of Local Area Network). The MFP 10 is connected to the wireless LAN formed by any of the APs 200 to 400, and is capable of communicating with other devices (e.g., the terminal device 100) connected to the wireless LAN.

The terminal device 100 is a mobile terminal, a desktop PC, a notebook PC, etc. The authentication servers 210, 410 are servers that authenticate a user who uses the MFP 10 and provide the AP and the MFP 10 with an encryption key to be used in wireless communication via the AP. The authentication server 210 is used in the process of establishing a wireless connection with the APs 200, 300, and is connected to the APs 200, 300 via a wired LAN. The authentication server 410 is used in the process of establishing a wireless connection with the AP 400, and is connected to the AP 400 via a wired LAN.

(Configuration of MFP 10; FIG. 1)
The MFP 10 is a peripheral device (for example, a peripheral device of the terminal device 100) capable of executing functions such as printing and scanning. The MFP 10 includes an operation unit 12, a display unit 14, a Wi-Fi interface 16, a print execution unit 20, a scan execution unit 22, and a control unit 30. Each unit 12 to 30 is connected to a bus line (reference numerals omitted). In the following, the interface will be simply referred to as "I/F".

The operation unit 12 has a number of keys. A user can input various instructions to the MFP 10 by operating the operation unit 12. The display unit 14 is a display for displaying various information. The display unit 14 may also function as a touch panel (i.e., the operation unit 12).

The Wi-Fi I/F 16 is a wireless I/F for performing wireless communication according to the Wi-Fi standard. The Wi-Fi standard is a standard for performing wireless communication according to, for example, the IEEE (The Institute of Electrical and Electronics Engineers, Inc.) 802.11 standard and standards equivalent thereto (for example, 802.11a, 11b, 11g, 11n, etc.).

The Wi-Fi I/F 16 also supports Personal and Enterprise of WPA3, which was established by the Wi-Fi Alliance. Personal is a method for authenticating a sub-station in a small-scale wireless LAN such as a home. Enterprise is a method for authenticating a sub-station in a large-scale wireless LAN such as a business. In Enterprise, an authentication server (e.g., 210) that performs authentication according to IEEE 802.1X authenticates a sub-station in the Wi-Fi standard. On the other hand, in Personal, an authentication server is not used, and for example, the AP authenticates the sub-station using PSK (short for Pre-Shared Key).

In addition, WPA3 Enterprise provides a 192-bit Option as a next-generation security protocol. Communications that comply with the 192-bit Option require an encryption method that meets a specified standard of encryption strength of 192 bits or more. Such encryption methods include symmetric key encryption algorithms, public key encryption algorithms, and hash functions. A symmetric key encryption algorithm that meets the specified standard is an algorithm that uses a key that is 192 bits or longer, such as 192-bit AES (short for Advanced Encryption Standard), 256-bit AES, etc. A public key encryption algorithm that meets the specified criteria is an algorithm that uses a key that is 384 bits or longer, such as 7680-bit RSA (short for Rivest-Shamir-Adleman cryptosystem), 7680-bit DSA (short for Digital Signature Algorithm), 7680-bit DH (short for Diffie-Hellman key exchange), 384-bit ECDSA (short for Elliptic Curve Digital Signature Algorithm), and 384-bit ECDH (short for Elliptic curve Diffie-Hellman key exchange). A hash function that meets the specified criteria is a function that outputs a return value of 384 bits or longer, such as SHA-384, SHA-512, and SHA-3. The Wi-Fi I/F 16 supports a 192-bit option.

The print execution unit 20 has a printing mechanism such as an inkjet type or a laser type. The scan execution unit 22 has a scan mechanism such as a CCD (short for Charge Coupled Device) image sensor or a CIS (short for Contact Image Sensor).

The control unit 30 includes a CPU 32 and a memory 34. The CPU 32 executes various processes according to a program 40 stored in the memory 34. The memory 34 is composed of a volatile memory, a non-volatile memory, etc.

The memory 34 further stores screen setting information 42. The screen setting information 42 indicates one of two values: "ON" which allows the display of a part selection screen (see S12 in FIG. 6) described below, and "OFF" which does not allow the display of the part selection screen (see FIG. 6). The screen setting information 42 is input by the user via the operation unit 12.

(Configuration of APs 200, 300, and 400; FIG. 1)
APs 200 to 400 support WPA3. AP 200 does not support the 192-bit option. APs 300 and 400 support the 192-bit option. SSIDs (abbreviation of Service Set Identifier) "ap01", "ap02", and "ap03" are assigned to APs 200, 300, and 400, respectively.

(Wireless connection establishment process; Figure 2)
A process for establishing a wireless connection between the MFP 10 and an AP will be described with reference to FIG. 2. All of the following communications executed by the MFP 10 are executed via the Wi-Fi I/F 16. In the following, when describing the processes related to communication, the description "via the Wi-Fi I/F 16" may be omitted. In addition, in the following, for ease of understanding, the operations executed by the CPU of each device (e.g., the CPU 32, etc.) may be described with each device (e.g., the MFP 10) as the subject, rather than with the CPU as the subject.

In the case of FIG. 2, there are three APs 200 to 400 around the MFP 10. Each of the APs 200 to 400 broadcasts a beacon signal.

When the MFP 10 receives an instruction to establish a wireless connection on the operation unit 12 at T5, it receives beacon signals including the SSID of each of the three APs 200 to 400 around the MFP 10 at T10A to T10C.

At T20, the MFP 10 executes the selection screen process (FIG. 6) described below. The selection screen process is a process for displaying a selection screen for selecting one AP to connect to from among the three APs 200-400 that are the transmission sources of the three beacon signals T10A-T10C. In this case, the MFP 10 accepts the selection of the SSID "ap02" assigned to AP 300 on the selection screen displayed at T20.

At T30, the MFP 10 sends a probe request to the AP 300 indicated by the selected SSID "ap02". At T32, the MFP 10 receives a probe response to the probe request from the AP 300.

At T40, authentication communication is performed so that the AP 300 can authenticate the MFP 10. In this case, the authentication communication is successful, and at T42, association communication is performed.

At T50, the MFP 10 sends an EAPoL (short for EAP over LAN) Start signal to the AP 300. The EAPoL Start signal is a signal that requests the AP 300 to start authentication according to EAP (short for Extensible Authentication Protocol). At T52, the MFP 10 receives an EAP Request signal in response to the EAPoL Start signal. The EAP Request signal is a signal that requests user information (user name and password) to be used for authentication in the authentication server 210.

At T54, the MFP 10 transmits an EAP Response signal including user information (e.g., a user name and a password) indicating the user who uses the MFP 10 to the AP 300 in response to the EAP Request signal. As a result, the AP 300 transmits the EAP Response signal to the authentication server 210.

When the authentication server 210 receives an EAP Response signal from the AP 300 at T54, it transmits an EAP Request PEAP signal to the MFP 10 via the AP 300 in response to the EAP Response signal at T56.

When the MFP 10 receives an EAP Request PEAP signal from the authentication server 210 in T56, it transmits a Client Hello signal to the authentication server 210 in T58. Communication between the MFP 10 and the authentication server 210 is encrypted according to TLS (short for Transport Layer Security). The Client Hello signal is a signal that notifies the authentication server 210 that the MFP 10 has started operating as a TLS client.

In T60, the MFP 10 receives a Server Hello signal from the authentication server 210 via the AP 300 in response to the Client Hello signal. The Server Hello signal is a signal that notifies the MFP 10 that the authentication server 210 has begun operating as a TLS server. The Server Hello signal includes Cipher Suites information (hereinafter referred to as "CS information") indicating the encryption method used in the EAP authentication in T62, which will be described later. The EAP authentication is a process in which the authentication server 210 authenticates the user of the MFP 10 and provides both the AP 300 and the MFP 10 with an encryption key used to establish a wireless connection with the AP 300.

In T62, the MFP 10 performs EAP authentication communication with the authentication server 210. Specifically, the EAP authentication includes user authentication and key exchange. The user authentication is communication in which the authentication server 210 authenticates the user of the MFP 10 using the user information in the EAP Response signal of T54 and a public key encryption algorithm (e.g., RSA) according to the CS information in the Server Hello signal of T60. The key exchange is communication in which, if the user authentication is successful, the authentication server 210 uses a public key encryption algorithm (e.g., DH) according to the CS information to provide both the MFP 10 and the AP 300 with an encryption key to be used in the communication in T70, which will be described later.

At T70, the MFP 10 performs 4-way handshake communication with the AP 300 using the encryption key provided at T62. As a result, at T80, a wireless connection is established between the MFP 10 and the AP 300 for performing wireless communication in accordance with the Wi-Fi standard. In other words, the MFP 10 is connected to the wireless LAN formed by the AP 300.

For example, in a situation where the MFP 10 and the terminal device 100 are connected to a wireless LAN formed by the AP 300, at T90, the terminal device 100 transmits print data indicating an image to be printed to the MFP 10 via the AP 300.

When the MFP 10 receives print data from the terminal device 100 in T90, the MFP 10 causes the print execution unit 20 to print the image indicated by the received print data in T92.

In the case of FIG. 2, three APs 200-400 exist around the MFP 10. The three APs 200-300 include one AP 200 that does not support the 192-bit option, and two APs 300 and 400 that do support the 192-bit option. For example, if a user wishes to use an AP (e.g., AP 300) that supports the 192-bit option, and a beacon signal is received from AP 200 that does not support the 192-bit option, the user may mistakenly select that AP 200. In this embodiment, in order to address this issue, a selection screen process (see FIG. 6) is executed for T20.

(Beacon signal packet structure; Figures 3 to 5)
In the selection screen process shown in FIG. 6, which will be described later, information in the beacon signal is used to determine whether the AP that is the source of the beacon signal supports the 192-bit option. The configuration of a beacon signal packet will be described with reference to FIG. 3 to FIG. 5. Some of the beacon signal packets are omitted in FIG. 3 to FIG. 5.

3 shows an example of the configuration of a beacon signal packet transmitted by AP200 when AP200 is operating in a mode in which wireless communication conforming to WPA3 Personal is performed. As shown in FIG. 3, in WPA3 Personal, the packet includes an SSID Parameter set tag (hereinafter referred to as "SSID tag") and an RSN Information tag (hereinafter referred to as "RSN tag"). The SSID tag includes the SSID "ap01" of AP200. The RSN tag also includes a value related to the encryption method used in communication to establish a wireless connection. In this case, the RSN tag includes the values "AES (CCM)" and "SAE (SHA256)". Here, SAE (short for Simultaneous Authentication of Equals) is a communication method executed in authentication in Personal (see T40 in FIG. 2). In Personal, an encryption key used in 4-way handshake (see T70 in FIG. 2) in authentication is provided to both MFP 10 and AP 300.

Figure 4 shows an example of the configuration of a beacon signal packet transmitted by AP200 when AP200 is operating in a mode performing wireless communication according to WPA3 Enterprise. As described above, AP200 does not support the 192-bit option. In this case, the RSN tag includes the values "AES (CCM)" and "WPA (SHA256)". As shown in Figures 3 and 4, in Personal, the RSN tag includes the value "SAE (SHA256)", whereas in Enterprise, the RSN tag includes the value "WPA (SHA256)". The value "WPA (SHA256)" indicates that the communication method for authentication in Enterprise is different from that in Personal.

Figure 5 shows an example of the configuration of a beacon signal packet transmitted by AP300 when AP300 is operating in a mode performing wireless communication according to WPA3 Enterprise. As described above, AP300 supports the 192-bit Option. In this case, the RSN tag includes the values "GCMP (256)" and "WPA (SHA384-Suite B)". Furthermore, the RSN tag in this case has the item "Group Management Cipher Suite" that is not included in the case of Figure 4, and the RSN tag includes the value "BIP (GCMC-256)" as that item.

The configurations shown in Figures 3 to 5 are merely examples. For example, in the case of Figure 5, the value "GCMP (256)" indicates that 256-bit AES is used as the algorithm for the common key encryption, and the value "WPA (SHA384-Suite B)" indicates that SHA384 is used as the hash function. In a modified example, for example, in the case of Figure 5, the RSN tag may include a value different from the value "GCMP (256)", for example, a value indicating an algorithm different from 256-bit AES (for example, 192-bit AES). The RSN tag may also include a value different from the value "WPA (SHA384-Suite B)", for example, a value indicating a hash function different from SHA384 (for example, SHA512).

(Selection screen processing; Figure 6)
The selection screen process executed in T20 of Fig. 2 will be described with reference to Fig. 6. The CPU 32 of the MFP 10 executes the selection screen process in accordance with the program 40 in the memory .

In S2, the CPU 32 determines whether the screen setting information 42 in the memory 34 indicates "ON." If the CPU 32 determines that the screen setting information 42 indicates "ON" (YES in S2), the CPU 32 proceeds to S10.

In S10, the CPU 32 uses two or more beacon signals received from two or more APs (e.g., three APs 200-300) present around the MFP 10 to determine whether or not there is an AP that supports the 192-bit Option among the two or more APs. As shown in the case of FIG. 5, in the beacon signal of an AP that supports the 192-bit Option, the RSN tag has the item "Group Management Cipher Suite". If there is a beacon signal including an RSN tag with the item "Group Management Cipher Suite" among the two or more beacon signals, the CPU 32 determines that there is an AP that supports the 192-bit Option among the two or more APs. On the other hand, if there is no beacon signal including an RSN tag with the item "Group Management Cipher Suite" among the two or more beacon signals, the CPU 32 determines that there is no AP that supports the 192-bit option among the two or more APs.

When the CPU 32 determines that an AP that supports the 192-bit Option exists among the two or more APs (YES in S10), the process proceeds to S12. In S12, the CPU 32 causes the display unit 14 to display a partial selection screen. The partial selection screen is a screen for selecting one AP from one or more APs that support the 192-bit Option among two or more APs present around the MFP 10. The partial selection screen includes, for each of the one or more APs, an SSID assigned to that AP and a button for selecting that SSID. The partial selection screen does not include SSIDs assigned to the remaining APs other than the one or more APs among the two or more APs. This makes it possible to prevent the user from erroneously selecting an AP that does not support the 192-bit Option from among the two or more APs.

The partial selection screen also includes an "Other APs" button. The "Other APs" button is a button for displaying the first full selection screen (described below), which is a screen that allows the selection of APs that do not support the 192-bit option.

In S14, the CPU 32 monitors whether the "Other AP" button in the partial selection screen is selected, and in S16, monitors whether any SSID in the partial selection screen is selected. When the "Other AP" button is selected (YES in S14), the CPU 32 displays the first full selection screen on the display unit 14 in S30. The first full selection screen includes not only SSIDs of APs that support the 192-bit option, but also SSIDs of APs that do not support the 192-bit option. For example, even in a situation where an AP that supports the 192-bit option exists around the MFP 10, the user may wish to use an AP that does not support the 192-bit option. According to the above configuration, the user can use an AP that does not support the 192-bit option.

In the next step S32, the CPU 32 monitors whether any of the SSIDs in the first full selection screen is selected. If any of the SSIDs in the first full selection screen is selected (YES in S32), the CPU 32 ends the processing in FIG. 6. As a result, the CPU 32 executes processing to establish a wireless connection with the AP selected on the first full selection screen.

If any SSID on the partial selection screen is selected (YES in S16), the CPU 32 ends the process of FIG. 6. As a result, the CPU 32 executes a process to establish a wireless connection with the AP selected on the partial selection screen, i.e., an AP that supports the 192-bit option (see the case in FIG. 2).

If the CPU 32 determines that there is no AP that supports the 192-bit option among the two or more APs (NO in S10), the process proceeds to S22. In S22, the CPU 32 causes the display unit 14 to display a confirmation screen. The confirmation screen includes a message for confirming the display of the second full selection screen described below, and a "YES" button (see FIG. 7).

In S24, the CPU 32 monitors whether the "YES" button in the confirmation screen is selected. If the "YES" button in the confirmation screen is selected (YES in S24), the CPU 32 proceeds to S40. With this configuration, in a situation where there is no AP supporting the 192-bit option around the MFP 10, it is possible to confirm to the user the use of an AP that does not support the 192-bit option. In addition, it is possible to prevent the user from erroneously selecting an AP that does not support the 192-bit option before confirming with the user the use of an AP that does not support the 192-bit option.

In S40, the CPU 32 causes the display unit 14 to display a second all-selection screen for selecting one AP from two or more APs present around the MFP 10. The second all-selection screen includes the SSIDs of the two or more APs present around the MFP 10, i.e., the two or more APs that do not support the 192-bit option. With this configuration, even in a situation where there is no AP supporting the 192-bit option around the MFP 10, the user can use the AP that does not support the 192-bit option to cause the MFP 10 to communicate via that AP.

In S42, the CPU 32 monitors whether any of the SSIDs in the second full selection screen is selected. If any of the SSIDs in the second full selection screen is selected (YES in S42), the CPU 32 ends the processing in FIG. 6. As a result, the CPU 32 executes processing to establish a wireless connection with the AP selected on the second full selection screen.

If the CPU 32 determines that the screen setting information 42 indicates "OFF" (NO in S2), the process proceeds to S40. For example, in a situation where three APs 200 to 400 exist around the MFP 10, if the screen setting information 42 indicates "ON", a partial selection screen including two SSIDs "ap02" and "ap03" of the two APs 300 and 400 is displayed (S12). On the other hand, in the same situation, if the screen setting information 42 indicates "OFF", a second full selection screen including three SSIDs "ap01", "ap02", and "ap03" of the three APs 200 to 400 is displayed (S40). With this configuration, by inputting "OFF" as the screen setting information 42, it is possible to select one AP from two or more APs existing around the MFP 10, regardless of whether the 192-bit option is supported.

According to the process of FIG. 6, in a situation where a beacon signal is received from each of two or more APs present around the MFP 10, a partial selection screen is displayed that does not include the SSID of an AP that does not support the 192-bit option among the two or more APs, but includes the SSID of an AP that does support the 192-bit option among the two or more APs (S12). In a situation where APs that support the 192-bit option and APs that do not support the 192-bit option are mixed, it is possible to prevent an AP that does not support the 192-bit option from being erroneously selected.

(Specific example of part selection screen; FIG. 6)
A specific aspect of the partial selection screen displayed in a situation where there are two APs 300 and 400 supporting the 192-bit option around the MFP 10 will be described. The key length of the common key encryption algorithm supported by the AP 300 is longer than the key length of the common key encryption algorithm supported by the AP 400. For example, the beacon signal transmitted by the AP 300 includes a value indicating 256-bit-AES as the value of the RSN tag. Here, "256" indicates the key length in the AP 300. Also, the beacon signal transmitted by the AP 400 includes a value indicating 192-bit-AES as the value of the RSN tag. Here, "192" indicates the key length in the AP 400. In this case, the CPU 32 acquires the key length of the common key encryption algorithm supported by the AP from each of the two beacon signals received from the two APs 300 and 400. Then, the CPU 32 causes the display unit 14 to display a partial selection screen in which the SSID "ap02" of the AP 300, which corresponds to a key length of 256 bits, is positioned above the SSID "ap03" of the AP 400, which corresponds to a key length of 192 bits (S12). In general, the longer the key length used in the encryption algorithm, the stronger the encryption strength. With this configuration, it is possible to encourage the user to use an AP with a relatively strong encryption strength.

In addition, the information for determining the order of SSIDs in the partial selection screen is not limited to the key length of the algorithm of the common key encryption. For example, assume that the length of the output value of the hash function supported by AP300 is longer than the length of the output value of the hash function supported by AP400. In this case, for example, the beacon signal transmitted by AP300 includes a value indicating SHA512 as the value of the RSN tag. Here, "512" indicates the length of the output value in AP300. Also, the beacon signal transmitted by AP400 includes a value indicating SHA384 as the value of the RSN tag. Here, "384" indicates the length of the output value in AP400. In this case, the CPU 32 obtains the length of the output value of the hash function supported by the AP from each of the two beacon signals received from the two APs 300 and 400. Then, the CPU 32 causes the display unit 14 to display a partial selection screen in which the SSID "ap02" of the AP 300, which corresponds to an output value length of 512 bits, is positioned higher than the SSID "ap03" of the AP 400, which corresponds to an output value length of 384 bits (S12). In general, the longer the output value of the hash function, the stronger the encryption strength. Even with this configuration, it is possible to encourage the user to use an AP with relatively strong encryption strength.

(Specific case: Figure 7)
A specific case realized by the screen selection process in Fig. 6 will be described with reference to Fig. 7. In the initial stage of this case, only APs 200 that do not support the 192-bit option are present around the MFP 10. Also, in the initial stage of this case, the screen setting information of the MFP 10 indicates "ON".

T95 is the same as T5 in FIG. 2. At T100, the MFP 10 receives a beacon signal from the AP 200. At T101, the MFP 10 determines that the screen setting information 42 indicates "ON" (YES in S2 in FIG. 6). At T102, the MFP 10 determines that there is no AP supporting the 192-bit Option around the MFP 10 (NO in S10). At T104, the MFP 10 displays a confirmation screen (S22). At T106, the MFP 10 receives selection of the "YES" button in the confirmation screen (YES in S24). At T108, the MFP 10 displays a second all-selection screen including the SSID "ap01" of the AP 200 (S40).

In T122, the MFP 10 receives a selection of the SSID "ap01" from the second full selection screen from the user. Furthermore, the MFP 10 receives input of user information from the user. T140 to T180 are the same as T40 to T80 in FIG. 2, except that the AP 200 is used. As a result, a wireless connection is established between the MFP 10 and the AP 200. Note that in FIG. 7, communication similar to T30, T32, and T50 to T60 in FIG. 2 is also executed, but the description thereof is omitted.

Next, in this case, the wireless connection established in T180 is disconnected, and furthermore, an AP300 is newly installed around the MFP10. In this situation, when the MFP10 receives an instruction to establish a wireless connection in T195, it receives beacon signals from the two APs 200, 300 in T200A and T200B. T201 is the same as T101. In T202, it is determined that an AP300 that supports the 192-bit Option is present around the MFP10 (YES in S10). In T202, the MFP10 displays a partial selection screen that includes the SSID "ap02" of the AP300, but does not include the SSID "ap01" of the AP200 (S12 in FIG. 6).

According to this case, even after a wireless connection has been established with AP200 that does not support the 192-bit Option, when a beacon signal is received from each of the two APs 200, 300, the MFP 10 displays a partial selection screen that includes the SSID "ap02" of AP300 but does not include the SSID "ap01" of AP200 (T202). Although there is a history of establishing a wireless connection with AP200 that does not support the 192-bit Option, it is possible to prompt the user to establish a new wireless connection with AP300 that supports the 192-bit Option rather than with AP200 that has a history of connection.

(Corresponding Relationships in the First Example)
The MFP 10, the display unit 14, and the Wi-Fi I/F 16 are examples of a "communication device," a "display unit," and a "wireless interface," respectively. The APs 200 to 400 are examples of two or more access points. The APs 300, 200, and 400 are examples of a "first access point," a "second access point," and a "third access point," respectively. The authentication server 210 is an example of an "external server." The 192-bit Option and the encryption strength standard in the 192-bit Option are examples of a "predetermined method" and a "predetermined standard," respectively. The screen setting information 42, "ON," and "OFF," are examples of a "predetermined setting information," a "first value," and a "second value," respectively. The information in the packet of FIG. 5 and the information in the packet of FIG. 4 are examples of a "first method information" and a "second method information," respectively.

A beacon signal is an example of a "signal." The partial selection screen of S12 in FIG. 6 and the "other AP" button are examples of a "first selection screen" and a "predetermined button." The first full selection screen of S30 in FIG. 6 is an example of a "second selection screen." The key of the common key encryption algorithm supported by the AP and the output value of the hash function are examples of "values used in the encryption method supported by each access point." AP 200 in FIG. 7 is an example of "one or more access points." The "YES" button in the confirmation screen of T104 in FIG. 7 is an example of a "confirmation button." The second full selection screen of T108 in FIG. 7 is an example of a "fourth selection screen."

T10A in FIG. 2 and S12 in FIG. 6 are examples of processing realized by the "first receiving unit" and the "first display control unit," respectively.

(Modification of the first embodiment; FIG. 6)
In the partial selection screen of the first embodiment, the SSID "ap02" of the AP 300 supporting the algorithm of the common key encryption using a relatively long key is located above the SSID "ap03" of the AP 300 supporting the algorithm of the common key encryption using a relatively short key. In the partial selection screen of this modification, the SSID "ap03" of the AP 300 supporting the algorithm of the common key encryption using a relatively short key is located above the SSID "ap02" of the AP 300 supporting the algorithm of the common key encryption using a relatively long key. In general, the longer the key length used in the encryption algorithm, the stronger the encryption strength, but the longer the encryption and decryption processing time. With this configuration, it is possible to encourage the user to use an AP that has a short encryption and decryption processing time.

Second Example
This embodiment is similar to the first embodiment, except for some differences in the contents of the wireless connection establishment process.

(Wireless connection establishment process; FIG. 8)
The process for establishing a wireless connection between the MFP 10 and the AP in this embodiment will be described with reference to FIG.

T295 to T300C are the same as T5 to T10C in FIG. 2. At T310A, the MFP 10 transmits an inquiry signal to the authentication server 210 via the AP 300, inquiring about CS information. At T312A, the MFP 10 receives CS information CS1 of the authentication server 210 as a response to the inquiry signal from the authentication server 210 via the AP 300. Furthermore, at T310B, the MFP 10 transmits an inquiry signal to the authentication server 410 via the AP 400, and at T312B, receives CS information CS2 of the authentication server 410 via the AP 400.

The table in FIG. 8 illustrates multiple types of CS information. For example, the first type of CS information indicates that ECDH is used in the key exchange of EAP authentication, RSA is used in user authentication of EAP authentication, 256-bit-AES is used as the algorithm of the common key encryption used in EAP authentication, and SHA384 is used as the hash function in EAP authentication. The second type of CS information is similar to the first type of CS information, except that DH is used in the key exchange of EAP authentication. The third type of CS information is similar to the first type of CS information, except that ECDSA is used in user authentication of EAP authentication. The table in FIG. 8 is merely an example of multiple types of CS information. For example, the multiple types of CS information may include a fourth type of CS information indicating that SHA512 is used as the hash function in EAP authentication.

2, except that T320 determines the order of SSIDs in the partial selection screen using CS information CS1 of T312A and CS information CS2 of T312B. For example, assume that CS information CS1 is second type CS information indicating that DH is used in key exchange for EAP authentication, and CS information CS2 is first type CS information indicating that ECDH is used in key exchange for EAP authentication. As described above, a key having a length of 7680 bits is used in DH, and a key having a length of 384 bits is used in ECDH. In the partial selection screen of this embodiment, the SSID "ap02" of AP300 connected to authentication server 210 that performs EAP authentication using DH is located above the SSID "ap03" of AP400 connected to authentication server 410 that performs EAP authentication using ECDH. That is, in the partial selection screen of this embodiment, the SSID "ap02" of the AP 300 that uses EAP authentication using a relatively long key is located above the SSID "ap03" of the AP 400 that uses EAP authentication using a relatively short key. Even in this configuration, the user can be encouraged to use an AP with relatively strong encryption strength. Also, in the partial selection screen of the modified example, the SSID "ap03" of the AP 400 that uses EAP authentication using a relatively short key may be located above the SSID "ap02" of the AP 300 that uses EAP authentication using a relatively long key. Even in this configuration, the user can be encouraged to use an AP that has a short encryption and decryption process time. Note that in the modified example of this embodiment, the order of the SSIDs may be determined based on the length of the output value of the hash function used in EAP authentication.

Also, for example, a comparative example is assumed in which the processes T310A to T312B are not executed, and the processes T30 to T60 in FIG. 2 are executed for all of two or more APs present around the MFP 10, and the order of the SSIDs in the partial selection screen is determined using the CS information received in T60. In this comparative example, the processes T30 to T60 in FIG. 2 are executed for all of two or more APs. The processes T30 to T60 are processes for establishing a wireless connection with the AP. In this comparative example, the processes T30 to T60 are executed unnecessarily for APs that are not targets for establishing a wireless connection. In contrast, in this embodiment, the processes T310A to T312B are executed before executing the processes T30 to T60 in FIG. 2, and the partial selection screen is displayed. In this embodiment, it is possible to prevent the processes T30 to T60 from being executed unnecessarily for APs that are not targets for establishing a wireless connection. In addition, in the modified example, the configuration of the above comparative example may be adopted, and in this modified example, the CS information of T60 is an example of "value length information."

(Corresponding Relationship in the Second Example)
EAP authentication is an example of an “authentication process”. The key of an encryption algorithm used in EAP authentication and the output value of a hash function are examples of “values used in authentication process”. The inquiry signal of T310A in FIG. 7 is an example of a “predetermined request”.

Specific examples of the technology disclosed in this specification have been described above, but these are merely examples and do not limit the scope of the claims. The technology described in the claims includes various modifications and variations of the specific examples given above. For example, the following modifications may be adopted.

(Variation 1) In each of the above embodiments, AP200 supports WPA3 but does not support the 192-bit option. Alternatively, AP200 may not support the 192-bit option due to not supporting WPA3. In this variation, AP200 that does not support WPA3 is an example of a "second access point."

(Variation 2) The "signal" is not limited to a beacon signal, but may be, for example, a probe response to a probe request broadcast by the MFP 10.

(Variation 3) In the partial selection screen in each of the above embodiments, the SSIDs of APs that do not support the 192-bit Option (hereinafter, referred to as "non-compatible SSIDs") are not included. Alternatively, in the partial selection screen, the SSIDs of APs that support the 192-bit Option (hereinafter, referred to as "compatible SSIDs") may be displayed in a first manner, and the non-compatible SSIDs may be displayed in a second manner different from the first manner (e.g., grayed out, light color, small font, etc.). In another variation, the partial selection screen may have compatible SSIDs arranged above non-compatible SSIDs. These variations are also examples of preferentially displaying "information indicating the first access point."

(Variation 4) The process of S2 in FIG. 6 does not need to be executed. In this variation, the "predetermined setting information" can be omitted.

(Variation 5) The processes of S14 and S30 in FIG. 2 do not need to be executed. In this variation, the "prescribed button" and the "third selection screen" can be omitted.

(Variation 6) If the answer to S10 in FIG. 6 is NO, the processes in S22 to S42 do not need to be executed. In this variation, the "fourth selection screen" can be omitted.

(Variation 7) The processes of S22 and S24 in FIG. 6 do not need to be executed. In this variation, the "Confirm button" can be omitted.

(Variation 8) The process of FIG. 7 does not need to be executed. For example, the second full selection screen may be displayed after a wireless connection with AP200 is established. Generally speaking, the "first selection screen" does not need to be displayed "after the wireless connection with the second access point is established."

(Variation 9) In the partial selection screen of each of the above embodiments, the SSIDs are arranged based on the key length of the encryption method used in the process for establishing a wireless connection with the AP (e.g., authentication, EAP authentication). Alternatively, the SSIDs may be arranged based on the version of the encryption method. For example, the SSID of an AP that supports the latest version of the encryption method may be arranged higher than the SSID of an AP that supports an older version of the encryption method.

(Variation 10) In the partial selection screen of each of the above embodiments, the SSID "ap02" of AP300, which corresponds to a key length of 256 bits, is located above the SSID "ap03" of AP400, which corresponds to a key length of 192 bits. Alternatively, the SSID "ap02" may be located to the left of the SSID "ap03". In this variation, the left side is an example of a "prioritized position".

(Variation 11) In the second embodiment described above, the MFP 10 transmits an inquiry signal to the authentication server 210 and receives CS information from the authentication server 210 (T310A, T312A in FIG. 8). Alternatively, the MFP 10 may obtain the CS information from a predetermined database (not shown). The predetermined database may store, for each of a plurality of APs, the SSID of that AP and the CS information of the authentication server connected to that AP in association with each other. In this variation, the "second receiving unit" can be omitted.

(Variation 12) The "communication device" is not limited to the MFP 10, but may be, for example, a printer, scanner, PC, or other terminal device.

(Variation 13) In the above embodiment, the processes in Figures 2 to 8 are implemented by software (e.g., program 40), but at least one of these processes may be implemented by hardware such as a logic circuit.

The technical elements described in this specification or drawings have technical utility either alone or in various combinations, and are not limited to the combinations described in the claims at the time of filing. In addition, the technologies illustrated in this specification or drawings achieve multiple objectives simultaneously, and achieving one of these objectives is itself technically useful.
The features of the technology disclosed in this specification are listed below.
(Item 1)
1. A communication device, comprising:
a wireless interface for performing wireless communication in accordance with a predetermined wireless standard;
A display unit;
a first receiving unit configured to receive signals from each of the two or more access points via the wireless interface in a situation where two or more access points are present around the communication device,
the two or more access points include a first access point that supports a predetermined system in the predetermined wireless standard and a second access point that does not support the predetermined system;
the predetermined method includes an encryption method that satisfies a predetermined criterion,
the signal received from the first access point includes first scheme information indicating an encryption scheme supported by the first access point;
the signal received from the second access point includes second scheme information indicating an encryption scheme supported by the second access point;
the encryption method indicated by the first method information is a method that satisfies the predetermined criteria,
The encryption method indicated by the second method information does not satisfy the predetermined criteria.
The first receiving unit;
a first display control unit that causes the display unit to display a first selection screen for selecting one access point from the two or more access points when the signal is received from each of the two or more access points, wherein on the first selection screen, information indicating the first access point that supports the encryption method indicated by the first method information is displayed preferentially over information indicating the second access point that supports the encryption method indicated by the second method information; and
A communication device comprising:
(Item 2)
The communication device further includes a memory that stores predetermined setting information,
the first display control unit causes the display unit to display the first selection screen when the predetermined setting information indicates a first value;
The communication device further comprises:
2. The communication device of claim 1, further comprising: a second display control unit that causes the display unit to display a second selection screen different from the first selection screen when the specified setting information indicates a second value different from the first value, wherein on the second selection screen, the information indicating the first access point and the information indicating the second access point are displayed in a display manner different from the display manner of the first selection screen.
(Item 3)
3. The communication device according to item 1 or 2, wherein the first selection screen includes the information indicating the first access point, but does not include the information indicating the second access point.
(Item 4)
the first selection screen includes a predetermined button,
The communication device according to item 3, wherein the first display control unit causes a third selection screen including the information indicating the second access point to be displayed on the display unit when the specified button in the first selection screen is selected.
(Item 5)
the first receiving unit receives the signal from each of the one or more access points via the wireless interface in a situation where one or more access points including the second access point are present around the communication device and the first access point is not present around the communication device;
The communication device further comprises:
5. The communication device of any one of claims 1 to 4, further comprising: a third display control unit that causes the display unit to display a fourth selection screen for selecting one access point from the one or more access points when the signal is received from each of the one or more access points, the fourth selection screen including information indicating the access point for each of the one or more access points.
(Item 6)
The communication device further comprises:
a fourth display control unit that causes the display unit to display a screen including a confirmation button for confirming display of the fourth selection screen when the signal is received from each of the one or more access points;
6. The communication device according to item 5, wherein the third display control unit causes the fourth selection screen to be displayed on the display unit when the confirmation button is selected.
(Item 7)
The communication device further comprises:
an establishment unit that establishes a wireless connection with the second access point that does not support the predetermined method via the wireless interface when the second access point is selected from the one or more access points on the fourth selection screen,
the first receiving unit receives the signal from each of the two or more access points via the wireless interface in a situation where the two or more access points including the first access point are present around the communication device after the wireless connection with the second access point is established;
The communication device according to item 5 or 6, wherein the first display control unit causes the display unit to display the first selection screen in which the information indicating the first access point is displayed in priority over the information indicating the second access point when the signal is received from each of the two or more access points, even after the wireless connection with the second access point is established.
(Item 8)
the two or more access points include, in addition to the first access point, a third access point supporting the predetermined system;
the first selection screen includes the information indicating the first access point and information indicating the third access point;
A communication device described in any one of items 1 to 7, wherein, on the first selection screen, the information indicating the first access point and the information indicating the third access point are arranged based on the length of values used in the encryption methods supported by each access point.
(Item 9)
9. The communication device according to item 8, wherein, on the first selection screen, the information indicating the first access point supporting an encryption method that uses a first length value that satisfies the specified criteria is placed in a position of priority over the information indicating the third access point supporting an encryption method that uses a second length value that is shorter than the first length and that satisfies the specified criteria.
(Item 10)
9. The communication device according to item 8, wherein, on the first selection screen, the information indicating the first access point supporting an encryption method that uses a first length value that satisfies the specified criteria is placed in a position of priority over the information indicating the third access point supporting an encryption method that uses a third length value that is longer than the first length and that satisfies the specified criteria.
(Item 11)
the predetermined wireless standard is a Wi-Fi standard,
The predetermined method includes Enterprise in the Wi-Fi standard,
the process for establishing a wireless connection in accordance with the Enterprise standard includes an authentication process in which an external server authenticates the communication device;
the two or more access points include, in addition to the first access point, a third access point supporting the predetermined system;
the first selection screen includes the information indicating the first access point and information indicating the third access point;
8. The communication device according to any one of items 1 to 7, wherein, on the first selection screen, the information indicating the first access point and the information indicating the third access point are arranged based on the length of a value used in the authentication process.
(Item 12)
Item 12. The communication device of item 11, wherein, on the first selection screen, the information indicating the first access point capable of establishing the wireless connection in response to success of the authentication process using a first length value that satisfies the specified criterion is arranged in a preferential position over the information indicating the third access point capable of establishing the wireless connection in response to success of the authentication process using a second length value that is shorter than the first length and satisfies the specified criterion.
(Item 13)
Item 12. The communication device of item 11, wherein, on the first selection screen, the information indicating the first access point capable of establishing the wireless connection in response to success of the authentication process using a first length value that satisfies the specified criterion is arranged in a position with higher priority than the information indicating the third access point capable of establishing the wireless connection in response to success of the authentication process using a third length value that is longer than the first length and satisfies the specified criterion.
(Item 14)
The communication device further comprises:
a second receiving unit that transmits a predetermined request to each of the two or more servers and receives, from each of the two or more servers, value length information indicating a length of a value used in the authentication process executed by that server as a response to the predetermined request, the two or more servers including a first server that is used in a process for establishing a wireless connection with the first access point and a second server that is used in a process for establishing a wireless connection with the third access point;
A communication device described in any one of items 11 to 13, wherein, on the first selection screen, the information indicating the first access point and the information indicating the third access point are arranged based on the value length information received from the first server and the value length information received from the second server.
(Item 15)
A computer program for a communication device, comprising:
The communication device includes:
a wireless interface for performing wireless communication in accordance with a predetermined wireless standard;
A display unit;
A computer,
Equipped with
The computer program causes the computer to include the following units:
a first receiving unit configured to receive signals from each of the two or more access points via the wireless interface in a situation where two or more access points are present around the communication device,
the two or more access points include a first access point that supports a predetermined system in the predetermined wireless standard and a second access point that does not support the predetermined system;
the predetermined method includes an encryption method that satisfies a predetermined criterion,
the signal received from the first access point includes first scheme information indicating an encryption scheme supported by the first access point;
the signal received from the second access point includes second scheme information indicating an encryption scheme supported by the second access point;
the encryption method indicated by the first method information is a method that satisfies the predetermined criteria,
The encryption method indicated by the second method information does not satisfy the predetermined criteria.
The first receiving unit;
a first display control unit that causes the display unit to display a first selection screen for selecting one access point from the two or more access points when the signal is received from each of the two or more access points, wherein on the first selection screen, information indicating the first access point that supports the encryption method indicated by the first method information is displayed preferentially over information indicating the second access point that supports the encryption method indicated by the second method information; and
A computer program that functions as a

2: Communication system 10: MFP
12: Operation unit 14: Display unit 16: Wi-Fi I/F
20: Print execution unit 22: Scan execution unit 30: Control unit 32: CPU
34: Memory 40: Program 42: Screen setting information 100: Terminal devices 210, 410: Authentication servers CS1, CS2: CS information

Claims (13)

A communication device, comprising:
a wireless interface for performing wireless communication in accordance with a predetermined wireless standard;
A display unit;
a first receiving unit configured to receive signals from each of the two or more access points via the wireless interface in a situation where two or more access points are present around the communication device,
the two or more access points include a first access point that supports a predetermined system in the predetermined wireless standard and a second access point that does not support the predetermined system;
the predetermined method includes an encryption method that satisfies a predetermined criterion,
the signal received from the first access point includes first scheme information indicating an encryption scheme supported by the first access point;
the signal received from the second access point includes second scheme information indicating an encryption scheme supported by the second access point;
the encryption method indicated by the first method information is a method that satisfies the predetermined criteria,
The encryption method indicated by the second method information does not satisfy the predetermined criteria.
The first receiving unit;
a first display control unit that causes the display unit to display a first selection screen for selecting one access point from the two or more access points when the signal is received from each of the two or more access points, wherein on the first selection screen, information indicating the first access point that supports the encryption method indicated by the first method information is displayed preferentially over information indicating the second access point that supports the encryption method indicated by the second method information; and
Equipped with
the first receiving unit receives the signal from each of the one or more access points via the wireless interface in a situation where one or more access points including the second access point are present around the communication device and the first access point is not present around the communication device;
The communication device further comprises:
a third display control unit that causes the display unit to display a fourth selection screen for selecting one access point from the one or more access points when the signal is received from each of the one or more access points, the fourth selection screen including information indicating the access point for each of the one or more access points;
an establishment unit that establishes a wireless connection with the second access point that does not support the predetermined method via the wireless interface when the second access point is selected from the one or more access points on the fourth selection screen;
Equipped with
the first receiving unit receives the signal from each of the two or more access points via the wireless interface in a situation where the two or more access points including the first access point are present around the communication device after the wireless connection with the second access point is established;
the first display control unit causes the display unit to display the first selection screen in which the information indicating the first access point is displayed with priority over the information indicating the second access point when the signals are received from each of the two or more access points even after the wireless connection with the second access point is established;
Communications equipment. The communication device further includes a memory that stores predetermined setting information,
the first display control unit causes the display unit to display the first selection screen when the predetermined setting information indicates a first value;
The communication device further comprises:
The communication device of claim 1, further comprising: a second display control unit that causes the display unit to display a second selection screen different from the first selection screen when the specified setting information indicates a second value different from the first value, wherein on the second selection screen, the information indicating the first access point and the information indicating the second access point are displayed in a display manner different from the display manner of the first selection screen. The communication device according to claim 1 or 2, wherein the first selection screen includes the information indicating the first access point, but does not include the information indicating the second access point. the first selection screen includes a predetermined button,
The communication device according to claim 3 , wherein the first display control unit causes the display unit to display a third selection screen including the information indicating the second access point when the specified button in the first selection screen is selected. The communication device further comprises:
a fourth display control unit that causes the display unit to display a screen including a confirmation button for confirming display of the fourth selection screen when the signal is received from each of the one or more access points;
The communication device according to claim 1 , wherein the third display control unit causes the fourth selection screen to be displayed on the display unit when the confirmation button is selected. the two or more access points include, in addition to the first access point, a third access point supporting the predetermined system;
the first selection screen includes the information indicating the first access point and information indicating the third access point;
6. The communication device according to claim 1, wherein, on the first selection screen, the information indicating the first access point and the information indicating the third access point are arranged based on the length of values used in the encryption methods supported by each access point. 7. The communication device of claim 6, wherein, on the first selection screen, the information indicating the first access point supporting an encryption method that uses a first length value that meets the specified criteria is placed in a more prioritized position than the information indicating the third access point supporting an encryption method that uses a second length value that is shorter than the first length and meets the specified criteria. 7. The communication device of claim 6, wherein, on the first selection screen, the information indicating the first access point supporting an encryption method that uses a first length value that meets the specified criteria is placed in a priority position over the information indicating the third access point supporting an encryption method that uses a third length value that is longer than the first length and meets the specified criteria. the predetermined wireless standard is a Wi-Fi standard,
The predetermined method includes Enterprise in the Wi-Fi standard,
the process for establishing a wireless connection in accordance with the Enterprise standard includes an authentication process in which an external server authenticates the communication device;
the two or more access points include, in addition to the first access point, a third access point supporting the predetermined system;
the first selection screen includes the information indicating the first access point and information indicating the third access point;
6. The communication device according to claim 1, wherein, on the first selection screen, the information indicating the first access point and the information indicating the third access point are arranged based on the length of a value used in the authentication process. 10. The communication device of claim 9, wherein, on the first selection screen, the information indicating the first access point capable of establishing the wireless connection in response to success of the authentication process using a first length value that satisfies the specified criterion is arranged in a more preferential position than the information indicating the third access point capable of establishing the wireless connection in response to success of the authentication process using a second length value that is shorter than the first length and satisfies the specified criterion. 10. The communication device of claim 9, wherein, on the first selection screen, the information indicating the first access point capable of establishing the wireless connection in response to success of the authentication process using a first length value that satisfies the specified criterion is arranged in a more prioritized position than the information indicating the third access point capable of establishing the wireless connection in response to success of the authentication process using a third length value that is longer than the first length and satisfies the specified criterion. The communication device further comprises:
a second receiving unit that transmits a predetermined request to each of the two or more servers and receives, from each of the two or more servers, value length information indicating a length of a value used in the authentication process executed by that server as a response to the predetermined request, the two or more servers including a first server that is used in a process for establishing a wireless connection with the first access point and a second server that is used in a process for establishing a wireless connection with the third access point;
12. The communication device according to claim 9, wherein, on the first selection screen, the information indicating the first access point and the information indicating the third access point are arranged based on the value length information received from the first server and the value length information received from the second server. A computer program for a communication device, comprising:
The communication device includes:
a wireless interface for performing wireless communication in accordance with a predetermined wireless standard;
A display unit;
A computer,
Equipped with
The computer program causes the computer to include the following units:
a first receiving unit configured to receive signals from each of the two or more access points via the wireless interface in a situation where two or more access points are present around the communication device,
the two or more access points include a first access point that supports a predetermined system in the predetermined wireless standard and a second access point that does not support the predetermined system;
the predetermined method includes an encryption method that satisfies a predetermined criterion,
the signal received from the first access point includes first scheme information indicating an encryption scheme supported by the first access point;
the signal received from the second access point includes second scheme information indicating an encryption scheme supported by the second access point;
the encryption method indicated by the first method information is a method that satisfies the predetermined criteria,
The encryption method indicated by the second method information does not satisfy the predetermined criteria.
The first receiving unit;
a first display control unit that causes the display unit to display a first selection screen for selecting one access point from the two or more access points when the signal is received from each of the two or more access points, wherein on the first selection screen, information indicating the first access point that supports the encryption method indicated by the first method information is displayed preferentially over information indicating the second access point that supports the encryption method indicated by the second method information; and
Functioning as a
the first receiving unit receives the signal from each of the one or more access points via the wireless interface in a situation where one or more access points including the second access point are present around the communication device and the first access point is not present around the communication device;
The computer program further causes the computer to
a third display control unit that causes the display unit to display a fourth selection screen for selecting one access point from the one or more access points when the signal is received from each of the one or more access points, the fourth selection screen including information indicating the access point for each of the one or more access points;
an establishment unit that establishes a wireless connection with the second access point that does not support the predetermined method via the wireless interface when the second access point is selected from the one or more access points on the fourth selection screen;
Functioning as a
the first receiving unit receives the signal from each of the two or more access points via the wireless interface in a situation where the two or more access points including the first access point are present around the communication device after the wireless connection with the second access point is established;
the first display control unit causes the display unit to display the first selection screen in which the information indicating the first access point is displayed with priority over the information indicating the second access point when the signals are received from each of the two or more access points even after the wireless connection with the second access point is established;
Computer program.

Images