Information processing apparatus, communication system, and information processing method

An information processing apparatus includes circuitry; and a memory storing computer-executable instructions that cause the circuitry to generate a password for connecting to a communication relay apparatus based on an operation to use the communication relay apparatus; transmit, to the communication relay apparatus, an addition request signal representing a request to add an identifier for identifying the communication relay apparatus, the addition request signal including the identifier and the generated password for connecting to a network that is set in association with the identifier on a per-identifier basis; and transmit, to the communication relay apparatus, a deletion request signal, which includes the identifier, representing a request to delete the identifier upon determining that an elapsed time from when the communication relay apparatus has added the identifier has exceeded a possible usage time of using the network.

CROSS-REFERENCE TO RELATED APPLICATION

The present application is based on and claims priority under 35 U.S.C. § 119 to Japanese Patent Application No. 2019-167612, filed on Sep. 13, 2019, and Japanese Patent Application No. 2020-092342, filed on May 27, 2020, the contents of which are incorporated herein by reference in their entirety.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates to an information processing apparatus, a communication system, and an information processing method.

2. Description of the Related Art

Conventionally, in facilities such as schools and offices, in order to temporarily allow guests who visit from outside to use devices and servers in the facilities, technologies have been developed to provide a network that is only available to users who are guests. For example, a technology is known in which a wireless local area network (LAN) access point transmits a beacon in which a Service Set Identifier (SSID) including a particular character string is set, so that users of the network are limited only to guests who know the particular character string.Patent Document 1: Japanese UnexaminedPatent Application Publication No. 2016-158094

SUMMARY OF THE INVENTION

According to one aspect of the present invention, there is provided an information processing apparatus including circuitry; and a memory storing computer-executable instructions that cause the circuitry to generate a password for connecting to a communication relay apparatus based on an operation to use the communication relay apparatus; transmit, to the communication relay apparatus, an addition request signal representing a request to add an identifier for identifying the communication relay apparatus, the addition request signal including the identifier and the generated password for connecting to a network that is set in association with the identifier on a per-identifier basis; and transmit, to the communication relay apparatus, a deletion request signal, which includes the identifier, representing a request to delete the identifier upon determining that an elapsed time from when the communication relay apparatus has added the identifier has exceeded a possible usage time of using the network.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

The conventional technology requires a function of transmitting a beacon, in which an SSID including a particular character string is set, to a communication relay apparatus such as a wireless LAN access point. Therefore, in the case of a general-purpose communication relay apparatus that is not equipped to accommodate such a function, there has been a problem that it is not possible to provide a network to be temporarily used.

A problem to be addressed by an embodiment of the present invention is to provide a network to be temporarily used.

First Embodiment

Hereinafter, embodiments of the present invention will be described with reference to the drawings. A communication system1according to the present embodiment includes an information processing apparatus10, a wireless LAN access point20, and an information terminal30, as illustrated inFIG. 1.

The communication system1is a system that allows a visitor who visits a facility from outside (hereinafter referred to as a “guest”) to temporarily use a wireless LAN. The information processing apparatus10makes various settings for the wireless LAN to be used by a guest, according to operations of a network administrator and the like who manages the network in the facility. Further, the information processing apparatus10sets the start and the end of using the wireless LAN for a guest (hereinafter, referred to as a “guest network”), according to operations by the guest and the like. The network administrator and the guest are examples of users who use the information processing apparatus10.

The information processing apparatus10and the wireless LAN access point20are communicatively connected via a network such as a wired or wireless LAN, an intranet, or the Internet.

The information processing apparatus10controls the wireless LAN access point20by executing an exclusive-use application program (hereinafter, referred to as a guest network creation application) and transmitting a control signal to the wireless LAN access point20.

The wireless LAN access point20is a communication relay apparatus that sets the wireless LAN and mediates communication between the information terminal30and the information processing apparatus10, or another information terminal30, or other devices connected to the wireless LAN access point20. The wireless LAN access point20can set one or more Service Set Identifiers (SSIDs) as identifiers for identifying the wireless LAN access point20itself, and sets a guest network for each SSID. The wireless LAN access point20has an interface such as an Application Programming Interface (API) for executing the addition and deletion of an SSID upon receiving a request from the information processing apparatus10. Deletion is a process of ending the usage of an SSID, including physically erasing the SSID from the setting information, disabling the setting, etc. In contrast, addition is a process of starting the usage of an SSID and includes physically adding the SSID to the setting information, enabling a disabled setting, etc.

The information terminal30is a terminal, which is capable of information communication such as a smartphone, a mobile phone, a personal digital assistant (PDA), and the like, and which is owned by the guest. The information terminal30connects to the wireless LAN set by the wireless LAN access point20and communicates with various devices connected to the wireless LAN.

Next, the hardware configuration of each apparatus included in the communication system1according to the present embodiment will be described.

As illustrated inFIG. 2, the information processing apparatus10is constructed as a computer and includes a central processing unit (CPU)101, a read-only memory (ROM)102, a random access memory (RAM)103, a hard disk (HD)104, a hard disk drive (HDD) controller105, a display106, an external device connection interface (I/F)108, a network I/F109, a bus line110, a keyboard111, a pointing device112, a Digital Versatile Disk Rewritable (DVD-RW) drive114, and a medium I/F116.

Among these, the CPU101controls the operation of the entire information processing apparatus10. The ROM102stores a program used to drive the CPU101, such as an initial program loader (IPL). The RAM102is used as the work area of the CPU101. The HD104stores programs such as a guest network creation application, and various kinds of other data. The HDD controller105controls the reading or writing of various kinds of data to the HD104according to the control of the CPU101. The display106displays various kinds of information such as cursors, menus, windows, characters, or images.

The external device connection I/F108is an interface for connecting various external devices. In this case, the external device may be, for example, devices such as a Universal Serial Bus (USB) memory or a printer. The network I/F109is an interface for performing data communication with the wireless LAN access point20and the like using a network. The bus line110is an address bus, a data bus, and the like for electrically connecting components such as the CPU101illustrated inFIG. 2.

The keyboard111is a type of input means with a plurality of keys for input of characters, numbers, various instructions, and the like. The pointing device112is a type of input means for selecting and executing various instructions, selecting a processing target, moving a cursor, and the like. The DVD-RW drive114controls the reading or writing of various kinds of data to the DVD-RW113as an example of a removable recording medium. the recording medium is not limited to a DVD-RW, but may be a Digital Versatile Disc Recordable (DVD-R), etc. The medium I/F116controls the reading or writing (storage) of data to a medium115, such as a flash memory.

As illustrated inFIG. 3, the information terminal30includes a central processing unit (CPU)301, a read-only memory (ROM)302, a random access memory (RAM)303, an EEPROM304, a complementary metal-oxide semiconductor (CMOS) sensor305, an imaging element interface (I/F)306, an acceleration/bearing sensor307, a medium I/F309, and a global positioning system (GPS) receiving unit311.

Among these, the CPU301controls the operation of the entire information terminal30. The ROM302stores the CPU301and programs used to drive the CPU301, such as the initial program loader (IPL). The RAM303is used as the work area of the CPU301. The EEPROM304reads out or writes various kinds of data, such as a smartphone program, according to the control of the CPU301. The CMOS sensor305is a type of built-in imaging means that captures a subject (mainly a self-image) according to the control of the CPU301to obtain image data. The CMOS sensor305may be an imaging means, such as a Charge Coupled Device (CCD) sensor, instead of a CMOS sensor. The imaging element I/F306is a circuit that controls the driving of the CMOS sensor305. The acceleration/bearing sensor307is a variety of sensors, such as an electromagnetic compass and a gyrocompass which detect geomagnetic fields, and an acceleration sensor. The medium I/F309controls the reading or writing (storage) of data to a recording medium308, such as a flash memory. The GPS receiving unit311receives the GPS signal from the GPS satellite.

Further, the information terminal30includes a long range communication circuit312, a CMOS sensor313, an imaging element I/F314, a microphone315, a speaker316, a sound input output I/F317, a display318, an external device connection I/F319, a short range communication circuit320, an antenna320aof the short range communication circuit320, and a touch panel321.

Among these, the long range communication circuit312is a circuit for communicating with a device such as the wireless LAN access point20via a wireless LAN. The CMOS sensor313is a type of built-in imaging means that captures a subject according to the control of the CPU301and obtains image data. The imaging element I/F314is a circuit that controls the driving of the CMOS sensor313. The microphone315is a built-in circuit that converts sound to an electrical signal. The speaker316is a built-in circuit that converts electrical signals to physical vibrations to produce sound, such as music and speech. The sound input output I/F317is a circuit that processes the input and output of sound signals between the microphone315and the speaker316according to the control of the CPU301. The display318is a type of display means such as a liquid crystal display or an organic Electro Luminescence (EL) display for displaying an image of a subject or various icons. The external device connection I/F319is an interface for connecting various external devices. The short range communication circuit320is a communication circuit such as a Near Field Communication (NFC) or Bluetooth (registered). The touch panel321is a type of input means for operating the information terminal30when a user presses the display318.

The information terminal30also includes a bus line310. The bus line310is an address bus, data bus, or the like for electrically connecting elements such as the CPU301illustrated inFIG. 3.

Next, functions provided by the information processing apparatus10will be described with reference toFIG. 4.

The information processing apparatus10according to the present embodiment includes a storage unit11, a display unit12, a control unit13, an operation unit14, and a communication unit15.

The storage unit11stores a program of a guest network creation application and various kinds of data including setting data for executing the guest network creation application. The setting data for executing the guest network creation application includes a wireless LAN access point management table T1and a guest network management table T2. The ROM102, the RAM103, and the HD104function as the storage unit11, respectively.

The display unit12displays various kinds of data generated by executing the guest network creation application. The aforementioned display106functions as the display unit12.

The control unit13executes various processes described below by executing the guest network creation application. The control unit13includes a determining unit131and a password generating unit132.

The determining unit131continuously determines whether the elapsed time exceeds the possible usage time. Specifically, the determining unit131determines whether the elapsed time from when the wireless LAN access point20has added an SSID, has exceeded a possible usage time that is set in advance as the time of using the wireless LAN. As described below, the data representing the possible usage time is set by an operation of the user and is stored in the storage unit11.

The password generating unit132generates a password for connecting to the wireless LAN access point20based on an operation for using the wireless LAN access point20. Specifically, the password generating unit132generates a random character string as a password for connecting to a network set for each SSID.

The CPU101functions as the control unit13by reading out and executing the guest network creation application stored in the ROM102and the like.

The operation unit14implements various functions executed by the information processing apparatus10in response to operations by a guest or a network administrator. The operation unit14includes an access point setting unit141, a guest network setting unit142, an addition instruction operating unit143, and a deletion instruction operating unit144.

The access point setting unit141receives operations for various settings of the wireless LAN access point20.

The guest network setting unit142receives operations for setting various kinds of guest networks.

The addition instruction operating unit143receives an operation of an addition instruction representing an instruction to add an SSID, from the guest.

The deletion instruction operating unit144receives an operation of a deletion instruction representing an instruction to delete an SSID, from the guest or the network administrator.

The keyboard111and the pointing device112cooperate with each other to function as the operation unit14.

The communication unit15transmits, to the wireless LAN access point20, various signals for controlling the wireless LAN access point20and receives response signals. The communication unit15includes an addition request signal transmitting unit151and a deletion request signal transmitting unit152.

The addition request signal transmitting unit151transmits, to the wireless LAN access point20, an addition request signal representing a request (addition request) for adding an SSID.

The deletion request signal transmitting unit152transmits, to the wireless LAN access point20, a deletion request signal representing a request (deletion request) for deleting the SSID.

The aforementioned network I/F109functions as the communication unit15.

Next, the operation of the communication system1will be described with reference to the drawings. First, an operation for making communication settings of the wireless LAN access point by the information processing apparatus10according to an operation by a network administrator and the like will be described. When the access point setting unit141of the operation unit14receives a request to display an access point setting screen by an operation by the network administrator and the like, the display unit12displays the access point setting screen as illustrated inFIG. 5.

The access point setting unit141receives, for example, input of an Uniform Resource Identifier (URI) representing the location of the wireless LAN access point20, in a URI input field1001, by an operation of a network administrator and the like who has referred to the network setting of the wireless LAN access point20. The access point setting unit141receives input of an API key in an API key input field1002. The API key is a character string determined in advance in the wireless LAN access point20as a password for calling the API of the wireless LAN access point20. When the access point setting unit141receives an operation of pressing a connection confirmation button1003, the communication unit15transmits a signal for confirming the connection to the wireless LAN access point20and waits for a response signal. When the communication unit15receives the response signal, the control unit13determines whether the connection is successful based on the response signal. The display unit12displays the determination result of the control unit13in a connection state field1004.

In this manner, the information processing apparatus10makes the communication setting of the wireless LAN access point20according to the operations to the access point setting unit141by the network administrator. The input information is stored in the storage unit11as the wireless LAN access point management table T1. As illustrated inFIG. 6, the wireless LAN access point management table T1includes the URI and the API key.

In order to simplify the system, the communication system1may be configured such that authentication is not necessary for calling the API of the wireless LAN access point20. The authentication method for calling the API of the wireless LAN access point20may be a method other than using an API key, such as a combination of multiple authentications.

Next, an operation of setting the guest network by the information processing apparatus10upon receiving an operation by the network administrator and the like will be described. When the network administrator and the like operates the guest network setting unit142of the operation unit14and requests to display a guest network setting screen, the control unit13acquires the usage state of each guest network from the guest network management table T2, which will be described later. The control unit13causes the display unit12to display the guest network setting screen reflecting the acquired usage state. The guest network setting screen includes a list of guest networks for which settings are to be made, as illustrated inFIG. 7. The list of guest networks includes an SSID input field1101, a usage state display field1102, a usage end time display field1103, a possible usage time input field1104, a password character type selection field1105, and a deletion button1106, for each guest network.

In the SSID input field1101, a character string representing the SSID for identifying the wireless LAN access point20, set for each guest network, can be input. The usage state display field1102displays the usage state of the guest network. The usage end time display field1103displays the usage end time when the guest network is in use. The possible usage time input field1104can be used to input the possible usage time of using the guest network. In the password character type selection field1105, it is possible to select the character type used for generating a password in the process described below. For example, “numerical character”, “alphabetic character”, or “alphanumeric character” may be included as options of the character type.

According to an operation by the network administrator and the like, input of the possible usage time of the guest network is received the in the possible usage time input field1104, and, therefore, the guest network setting unit142is an example of a possible usage time setter.

The deletion button1106is a button for ending the usage of the presently used guest network. Specifically, upon receiving an operation of pressing the deletion button1106, the communication unit15transmits a deletion request signal representing a request to delete the SSID of the guest network in use to the wireless LAN access point20.

When the guest network is in use, it is not possible to input data or selections to the SSID input field1101, the possible usage time input field1104, or the password character type selection field1105. When the guest network is not in use, the deletion button1106cannot be operated.

In this manner, the information processing apparatus10sets the guest network upon receiving operations by the network administrator. The input information is stored in the storage unit11as the guest network management table T2. As illustrated inFIG. 8, the guest network management table T2includes the SSID, the password, the password character type, the usage state, the possible usage time, the usage start time, and the usage end time.

The SSID is a character string input to the SSID input field1101. A password is generated in the SSID addition process described below. The password character type is the character type selected in the password character type selection field1105. The usage state is the usage state of the guest network. Specifically, the usage state is “not used” in the initial state, and becomes “in use” when the SSID addition process described later is successful. Then, when the SSID deletion process described later or the process after the deletion button1106is pressed is successful, the usage state becomes “not used”.

The possible usage time is the time input to the possible usage time entry field1104, and is a time set in advance as the time length during which the guest network can be used. In the possible usage time input field1104, for example, a time length in units of minutes is input. The usage start time is the time when the SSID has been added and the guest network has become available for usage. The usage end time is the time when usage is scheduled to end, calculated based on the possible usage time. The usage start time and the usage end time are set in the SSID addition process described below.

In the setting of the guest network described above, the guest network setting unit142is an example of a character string setter that sets a character string representing an SSID.

Next, the flow in which the information processing apparatus10causes the wireless LAN access point20to execute a process of adding the SSID when the guest starts using the guest network, will be described. As illustrated inFIG. 9, when the addition instruction operating unit143of the operation unit14receives an operation of requesting the activation of the guest network creation application by a guest9(step S11), the display unit12of the information processing apparatus10displays a top screen (step S12). Specifically, the control unit13acquires guest networks that are set, by referring to the guest network management table T2stored in the storage unit11. The control unit13causes the display unit12to display a top screen including a list of the acquired guest networks. As illustrated inFIG. 10, the top screen includes a guest network selection field1201, a usage start button1202, and a usage end button1203. A list of set guest networks is displayed in the guest network selection field1201.

Returning toFIG. 9, next, when the addition instruction operating unit143receives an operation of selecting a guest network that the guest wants to start using (step S13), the control unit13causes the selected guest network to be in a selected state (step S14). Specifically, the control unit13causes the display unit12to display a screen in which the background color of a portion displaying the SSID representing the selected guest network, is changed from white to yellow.

Subsequently, when the addition instruction operating unit143receives an operation of pressing the usage start button1202(step S15), the password generating unit132generates a password (step S16). Specifically, the password generating unit132generates, as a password, a character string randomly selected from among the characters corresponding to the password character type set in the guest network management table T2. The password generating unit132updates the guest network management table T2by reflecting the generated password in the guest network management table T2stored in the storage unit11.

Next, in step S17, the addition request signal transmitting unit151of the information processing apparatus10transmits the addition request signal to the wireless LAN access point20. Specifically, the addition request signal includes the SSID selected in step S13and the password generated in step S16. The addition request signal may include other information, e.g., information indicating an authentication method such as a “Wi-Fi Protected Access Pre-Shared Key (WPA-PSK)”.

The wireless LAN access point20includes an adding unit for adding an SSID. When the adding unit receives the addition request signal, the adding unit executes a process of adding the SSID based on the information included in the addition request signal. Thus, the wireless LAN access point20switches to a state of allowing the usage of the wireless LAN in response to a connection request including a combination of the added SSID and a password from the information terminal30and the like. Next, the wireless LAN access point20transmits a successful signal when the process of adding the SSID is successful (step S18).

In step S19, when the communication unit15of the information processing apparatus10receives the successful signal, the control unit13updates the usage state and calculates the usage end time. Specifically, the control unit13updates the usage state in the guest network management table T2stored in the storage unit11to “in use”. The control unit13calculates the usage end time by adding the possible usage time that has been set to the usage start time, by using the time when the success signal is received as the usage start time. The control unit13updates the guest network management table T2stored in the storage unit11by reflecting the usage start time and the calculated usage end time.

When the process of adding the SSID fails in step S18, the wireless LAN access point20transmits a failure signal. When the communication unit15of the information processing apparatus10receives the failure signal, the addition request signal transmitting unit151again transmits an addition request signal to the wireless LAN access point20.

Following the process in step S19, in step S20, the display unit12of the information processing apparatus10displays a successful message. Specifically, the display unit12displays the SSID, the password, and the like as information for connecting the information terminal30to the guest network together with a message indicating that the addition of the SSID has been successful. The display unit12may display an possible usage time, a usage start time, a usage end time, and the like.

As described above, in response to receiving the operation by the guest9, the information processing apparatus10causes the wireless LAN access point20to execute a process of adding the SSID.

Next, a flow will be described in which the information processing apparatus10causes the wireless LAN access point20to execute a process of deleting the SSID when usage of the guest network is ended.

As illustrated inFIG. 11, in step S21, the deletion instruction operating unit144receives an operation by the guest9in the state where the aforementioned top screen is displayed, and receives the operation of selecting the guest network that the guest9wants to stop using. In step S22, the control unit13causes the selected guest network to be in a selected state. Specifically, the control unit13causes the display unit12to display a screen in which the background color of the portion displaying the SSID representing the selected guest network is changed from white to yellow.

Subsequently, when the deletion instruction operating unit144receives an operation of pressing the usage end button1203(step S23), the display unit12displays a password input screen for the guest9to input the password (step S24). In step S25, the deletion instruction operating unit144receives an operation of inputting a password. The operations of step S23and step S25are examples of the operations of the SSID deletion instruction.

In step S26, the control unit13confirms the password. Specifically, the control unit13compares the character string input as the password by the guest9with the password stored in the guest network management table T2. If the passwords match, the control unit13proceeds to the next process. If the passwords do not match, the control unit13displays a message indicating that the password is incorrect and causes the display unit12to display the password input screen again.

Subsequently, in step S27, the deletion request signal transmitting unit152of the communication unit15transmits a deletion request signal to the wireless LAN access point20. Specifically, the deletion request signal includes the SSID selected in step S21. The wireless LAN access point20includes a deleting unit for deleting an SSID. Upon receiving the deletion request signal, the deleting unit executes a process of deleting the SSID included in the deletion request signal. Accordingly, the wireless LAN access point20switches to a state of not allowing usage of the wireless LAN corresponding to the deleted SSID. Next, the wireless LAN access point20transmits a successful signal when the process of deleting the SSID is successful (step S28).

In step S29, when the communication unit15of the information processing apparatus10receives the successful signal, the control unit13updates the usage state. Specifically, the control unit13updates the usage state in the guest network management table T2stored in the storage unit11to “not used”.

In the process of step S28, when the process of deleting the SSID fails, the wireless LAN access point20transmits a failure signal. When the communication unit15of the information processing apparatus10receives the failure signal, the deletion request signal transmitting unit152again transmits the deletion request signal to the wireless LAN access point20.

Following the process in step S29, in step S30, the display unit12of the information processing apparatus10displays a successful message. Specifically, the display unit12displays a message indicating that the SSID has been deleted successfully.

As described above, the information processing apparatus10causes the wireless LAN access point20to execute the process of deleting the SSID upon receiving the operation on the deletion instruction operating unit144by the guest9.

Next, an operation in which the information processing apparatus10monitors the elapsed time from the start of usage of the guest network and automatically deletes the SSID, will be described.

The information processing apparatus10starts the elapsed time monitoring process illustrated inFIG. 12according to the activation of the information processing apparatus10or according to an operation by the network administrator.

When the information processing apparatus10starts the elapsed time monitoring process, the determining unit131of the control unit13selects an unprocessed guest network and acquires the elapsed time after the selected guest network has been created (step S31). Specifically, the determining unit131selects one unprocessed guest network in the elapsed time monitoring process and acquires the usage start time stored in the guest network management table T2. The determining unit131calculates the difference between the acquired usage start time and the present time and acquires the calculated difference as the elapsed time.

Next, in step S32, the determining unit131determines whether the elapsed time exceeds the possible usage time. When the determining unit131determines that the elapsed time exceeds the possible usage time (Yes in step S32), in step S33, the deletion request signal transmitting unit152transmits a deletion request signal to the wireless LAN access point20and the process proceeds to step S34. On the other hand, when the determining unit131determines that the elapsed time does not exceed the possible usage time (No in step S32), the determining unit131skips the process of step S33and the process proceeds to step S34.

Next, in step S34, the determining unit131determines whether all of the guest networks have been processed. When the determining unit131determines that not all guest networks have been processed (No in step S34), the determining unit131returns to the process of step S31.

On the other hand, when the determining unit131determines that all guest networks have been processed (Yes in step S34), in step S35, the determining unit131further determines whether a predetermined time period has elapsed. This predetermined time period is the time interval of monitoring the elapsed time, which is, for example, one minute. When the determining unit131determines that the predetermined time period has not elapsed (No in step S35), the determining unit131executes the process of step S35again.

When the determining unit131determines that the predetermined time period has elapsed (Yes in step S35), in step S36, the determining unit131sets all the guest networks as unprocessed and executes the process of step S31again.

As described above, the information processing apparatus10according to the present embodiment monitors the elapsed time from the start of usage of the guest network, and executes a process of causing the wireless LAN access point20to delete the SSID of the guest network for which the possible usage time has been exceeded. This ensures that a guest network, which has been temporarily available for usage, becomes unavailable for usage. Therefore, even if the guest does not perform the operation of ending usage as illustrated inFIG. 11, for example, the information processing apparatus10monitors the elapsed time and causes the wireless LAN access point20to execute the process of deleting the SSID, and, therefore, the level of safety is high.

Further, by the guest performing the operation of ending usage as illustrated inFIG. 11, and by the network administrator performing the operation of ending usage of the guest network presently in use on the setting screen of the guest network as illustrated inFIG. 7, it is possible to flexibly delete an SSID of a guest network for which the possible usage time has not elapsed.

The password of the guest network in the SSID deletion process illustrated inFIG. 11is an example of authentication information for authenticating the validity of the deletion instruction. By requiring input of authentication information in the operation of ending usage by a guest, it is possible to avoid unauthorized deletion of a guest network by a third party.

The guest network password authentication method makes it easier to install the system because there is no need to provide other authentication information separately.

The authentication information is not limited to a password of the guest network. The authentication information may be, for example, another password, fingerprint data, vocal print data, face image data, and the like. The method for authenticating the validity of the deletion instruction may be fingerprint authentication using fingerprint data, vocal print authentication using vocal print data, face authentication using face recognition data, etc.

In addition to the elapsed time monitoring process illustrated inFIG. 12, when the guest network creation application is activated, a process of deleting a guest network for which the elapsed time exceeds the possible usage time, may be performed. Specifically, the determining unit131of the information processing apparatus10may execute a series of processes from step S31to step S34of the elapsed time monitoring process after activating the guest network creation application. In this manner, even when the information processing apparatus10shuts down or when the elapsed time monitoring process is stopped due to abnormal termination and the like, an unnecessary guest network can be deleted by the activation of the guest network creation application.

The network administrator can input a character string of the SSID used for the guest network. This allows the SSID to be set flexibly according to the operation method.

The password generating unit132generates a random character string as a password for connecting to the network, thereby constructing a highly safe guest network. In order to simplify the introduction of the system, it is possible for the network administrator to input a password when making settings for the guest network, instead of generating a password every time.

The network administrator can input the possible usage time of the guest network. This allows the possible usage time to be set flexibly according to the operation method.

The guest network setting screen illustrated inFIG. 7illustrates an example in which three guest networks are set. However, the number of settings of guest networks is not limited to three, and the number of settings of guest networks may be added or reduced.

An example in which the operation unit14of the information processing apparatus10is operated by the guest9in the SSID addition process illustrated inFIG. 9and the SSID deletion process illustrated inFIG. 11, is described. Instead of the guest9, the network administrator may operate the operation unit14in one of or both of the SSID addition process and SSID deletion process. When the network administrator operates the information processing apparatus10in the SSID addition process, the information for connecting to the guest network may be communicated from the network administrator to the guest9.

The information processing apparatus10according to the present embodiment may be, for example, an output device such as a projector (PJ), a digital signage, a Head Up Display (HUD) device, an industrial machine, a medical device, a network home appliance, an automobile (Connected Car), a personal computer, a mobile phone, a tablet terminal, a game machine, a Personal Digital Assistant (PDA), a digital camera, a wearable PC, or a desktop PC.

Second Embodiment

A second embodiment will be described below with reference to the drawings. The second embodiment differs from the first embodiment in that a wireless LAN access point management apparatus is provided. Accordingly, in the description of the second embodiment below, only the differences from the first embodiment are explained. Elements having functional configurations similar to those of the first embodiment are denoted by the same reference numerals as those used in the description of the first embodiment, and descriptions thereof are omitted.

As illustrated inFIG. 13, a communication system2according to the second embodiment includes the information processing apparatus10, the wireless LAN access point20, a wireless LAN access point management apparatus21, and the information terminal30.

The communication unit15of the information processing apparatus10according to the present embodiment communicates with the wireless LAN access point management apparatus21. That is, the addition request signal transmitting unit151transmits the addition request signal to the wireless LAN access point management apparatus21, and the deletion request signal transmitting unit152transmits the deletion request signal to the wireless LAN access point management apparatus21.

The wireless LAN access point management apparatus21is an apparatus for controlling the wireless LAN access point20. The wireless LAN access point management apparatus21is communicatively connected to the information processing apparatus10and the wireless LAN access point20. When the wireless LAN access point management apparatus21receives, from the information processing apparatus10, an addition request signal or a deletion request signal for adding or deleting an SSID, the wireless LAN access point management apparatus21transmits, to the wireless LAN access point20, the addition request signal or the deletion request signal for adding or deleting an SSID.

According to the communication system2according to the present embodiment, the wireless LAN access point management apparatus21is provided, and, therefore, a wireless LAN environment of a cloud management type can be implemented.

The communication system2may include a plurality of wireless LAN access points20. In this case, one wireless LAN access point management apparatus21may control the plurality of wireless LAN access points20. The wireless LAN access point management apparatus21may not be a single piece of hardware, but may be implemented by a cloud solution over a network.

The wireless LAN access point20according to the present embodiment is an example of a communication relay apparatus main body.

Third Embodiment

A third embodiment will now be described with reference to the drawings. The third embodiment differs from the first embodiment in that a Multifunction Peripheral/Product/Printer (MFP) is provided. Accordingly, in the description of the third embodiment below, only the differences from the first embodiment are explained. Elements having functional configurations similar to those of the first embodiment are denoted by the same reference numerals as those used in the description of the first embodiment, and descriptions thereof are omitted.

A communication system3according to the third embodiment includes the information processing apparatus10, the wireless LAN access point20, the information terminal30, and an MFP40.

The information processing apparatus10according to the present embodiment displays a message indicating that the addition of the SSID has been successful in step S20of the SSID addition process illustrated inFIG. 9, and transmits, to the MFP40, information for connecting to the guest network that has become possible to use, such as information on the SSID, the password, the usage start time, the usage end time, and the possible usage time.

The MFP40is a multifunction peripheral having functions such as those of a copier, a printer, an image scanner, and a facsimile machine. The MFP40is communicatively connected to the information processing apparatus10and the wireless LAN access point20. The MFP40receives information for connecting to the network from the information processing apparatus10and prints the information on a medium such as paper.

Next, the hardware configuration of the MFP40will be described. As illustrated inFIG. 15, the MFP40includes a controller410, a short range communication circuit unit420, an engine control unit430, an operation panel440, and a network I/F450.

Among these, the controller410includes a CPU401, a system memory (MEM-P)402, a north bridge (NB)403, a south bridge (SB)404, an Application Specific Integrated Circuit (ASIC)406, a local memory (MEM-C)407, an HDD controller408, and an HD409that is a storage unit, and the NB403is connected to the ASIC406by an Accelerated Graphics Port (AGP) bus421.

Among these, the CPU401is a control unit that performs overall control of the MFP40. The NB403is a bridge for connecting the CPU401to the MEM-P402, the SB404, and the AGP bus421and has a memory controller for controlling reading and writing to the MEM-P402, a Peripheral Component Interconnect (PCI) master, and an AGP target.

The MEM-P402includes a ROM402a, which is a memory for storing programs and data by which each function of the controller410is implemented, and a RAM402b, which is used as a program or data expansion and a rendering memory for memory printing. The program stored in the RAM402bmay be configured to be recorded in a computer-readable recording medium such as a compact disk read-only memory (CD-ROM), a CD recordable (CD-R), or a digital versatile disc (DVD) in a file in an installable format or an executable format.

The SB404is a bridge for connecting the NB403to PCI devices and peripheral devices. The ASIC406is an integrated circuit (IC) for image processing purposes having hardware elements for image processing, and serves as a bridge connecting the AGP bus421, a PCI bus422, the HDD controller408, and the MEM-C407, respectively. The ASIC406includes a PCI target and AGP master, an arbitrator (ARB) that forms the core of the ASIC406, a memory controller that controls the MEM-C407, a plurality of Direct Memory Access Controllers (DMACs) that rotates image data by hardware logic, and the like, and a PCI unit that performs data transfer between the scanner unit431and the printer unit432via the PCI bus422. The interface of the Universal Serial Bus (USB) or an Institute of Electronic and Electronic Engineers1394(IEEE 1394) may be connected to the ASIC406.

The MEM-C407is a local memory used as an image buffer and a code buffer for copying. The HD409is a storage device for storing image data, storing font data used for printing, and storing forms. The HD409controls the reading or writing of data to the HD409according to the control of the CPU401. The AGP bus421is a proposed bus interface for graphics accelerator cards to speed up graphics processing, and by directly accessing the MEM-P402with high throughput, the graphics accelerator card can be made faster.

The short range communication circuit unit420is provided with a short range communication circuit420a. The short range communication circuit420ais a communication circuit such as Near Field Communication (NFC), Bluetooth (registered trademark), and the like.

The engine control unit430further includes a scanner unit431and a printer unit432. The operation panel440includes a panel display unit440a, such as a touch panel, which displays a current setting value or a selection screen and accepts input from an operator, and an operation panel440b, such as a numerical pad which receives a set value of an image forming condition, such as a density setting condition, and or a start key to receive a copy start instruction. The controller410controls the entire MFP40and controls, for example, rendering, communication, input from the operation panel440, and the like. The scanner unit431or the printer unit432includes an image processing portion such as error diffusion or gamma conversion.

In the MFP40, the application switching key of the operation panel440allows sequential switching of the document box function, the copy function, the printer function, and the facsimile function, so that one of these functions can be selected. When the document box function is selected, the document box mode is set, when the copy function is selected, the copy mode is set, when the printer function is selected, the printer mode is set, and when the facsimile function is selected, the facsimile mode is set.

The network I/F450is an interface for performing data communication with the information processing apparatus10using a network. The short range communication circuit unit420and the network I/F450are electrically connected to the ASIC406via the PCI bus422.

According to the communication system3according to the present embodiment, by passing a medium, on which the MFP40has printed the information, to the guest, the information for connecting to the guest network can be easily conveyed to the guest, which is highly convenient.

The MFP40and the information processing apparatus10may not be separate apparatuses but may be a single apparatus. For example, the MFP40may implement some or all of the functions of the information processing apparatus10. Alternatively, the MFP40and the information processing apparatus10may cooperate with each other to implement the above-described functions.

The communication system3may include an ink jet printer in place of the MFP40. The information processing apparatus10may include a printing function. The MFP40is an example of a printing apparatus.

The functions of each of the embodiments described above may be implemented by one or more processing circuits. As used herein, a “processing circuit” includes a processor programmed to execute each function by software such as a processor implemented in an electronic circuit; or devices such as an Application Specific Integrated Circuit (ASIC) a digital signal processor (DSP), a field programmable gate array (FPGA), and a conventional circuit module, designed to execute each function as described above.

According to one embodiment of the present invention, a network to be temporarily used can be provided.

The information processing apparatus, the communication system, and the information processing method are not limited to the specific embodiments described in the detailed description, and variations and modifications may be made without departing from the spirit and scope of the present invention.