JP2007088629A - Key sharing system, key sharing apparatus, and key sharing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a key sharing system by which key information can securely be shared among a plurality of apparatuses. <P>SOLUTION: In the key sharing system comprising an authentication management apparatus 20 and a plurality of wireless terminals 10, the authentication management apparatus 20 periodically generates key generation source information and transmits the information to each wireless terminal 10. Each wireless terminal 10 receives the key generation source information periodically transmitted from the authentication management apparatus 20 and uses detection of a first external input directly given to the wireless terminal 10 to select and store one or more key generation source information items among the received key generation source information items. Then each wireless terminal 10 generates key information on the basis of the stored on or more key generation source information items and shares the key information with the authentication management apparatus 20. Since an interception unit cannot detect the first external input directly given to each wireless terminal 10 and the authentication management apparatus 20, the key information can securely be shared among the wireless terminals 10. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a key sharing system, a key sharing device, and a key sharing method in a wireless network system, and more particularly, to a key sharing system, a key sharing device, and a key sharing method for securely sharing key information between devices.

  In recent years, for example, wireless network systems at home are becoming popular. Currently, the most popular wireless network systems are wireless LANs for the purpose of connecting computer devices such as personal computers to the Internet. Information home appliance network systems and sensor network systems are expected. By linking these network systems with each other, for example, based on the detailed spatial temperature distribution collected by the temperature sensor, power-saving control of the air conditioning equipment, and the abnormalities of the body detected by the biological sensor can be It is possible to provide services such as making recommendations to the user through the device.

  The problem with such a wireless network system in the home is that third parties can easily obtain unauthorized personal information in the home or illegally access devices in the home because information is exchanged wirelessly. . For example, there are concerns about harassment of eavesdropping such as eavesdropping on information corresponding to personal privacy detected by a biometric sensor, or turning on / off a television receiver from outside. Therefore, in future wireless network systems at home, information encryption and access control (device authentication) will become increasingly important.

  Generally, a wireless communication network system in a home or the like includes a plurality of wireless terminal devices (for example, various devices having a wireless communication function) and an authentication management device (for example, a wireless communication function) that authenticates and manages these wireless terminal devices. Host computer). Here, it is assumed that the wireless communication terminal has a very poor calculation capability compared with a computer device or the like. In such a configuration, how to securely encrypt and authenticate a wireless terminal device newly added to the network system (one for which key information for authentication is not set in advance) and an authentication management device. It is very important to set key information for If this initial key information (hereinafter referred to as “initial key”) can be set safely, communication between the wireless terminal device and the authentication management device is secure (encryption and authentication of the transmission source are possible). Become. If the communication between each wireless terminal device and the authentication management device is secure, new key information can be safely delivered without leaking it to a third party, so communication between any wireless terminal devices can be secured. In addition, the key information can be updated safely.

  As a method for setting the initial key safely, there are various methods such as a method for manual setting by the user, a method for distributing a key by wired connection, and a method for using wireless communication. Among them, in the method of setting the initial key using wireless communication, a third party terminal device around the installation location of the wireless network system intercepts wireless communication and obtains key information illegally. Need to prevent. For example, the key is distributed by using infrared communication that has directivity and is difficult to eavesdrop, or by non-contact communication that can be read only in the vicinity using an RFID tag (wireless ID tag). A delivery method can be considered. However, these methods require the installation of a dedicated interface in the wireless terminal device.

  As a method for safely delivering the initial key using wireless communication without using a separate interface or even if a third party terminal in the vicinity intercepts the wireless communication, for example, There is known a key distribution method based on a public key method represented by a Diffie-Hellman key distribution method. However, these methods have a problem that they are difficult to apply to wireless terminal devices with poor calculation capability because of the large amount of calculation.

  As a technique that can cope with such a problem, for example, in Patent Document 1, in an initial key distribution method using wireless communication, a fixed base station that has received an initial key registration request issued by a wireless terminal device includes: A method is described in which the wireless output is reduced to a strength that allows communication only in the immediate vicinity of the fixed base station, and the initial key is distributed to the wireless terminal that has made the initial key registration request.

JP-A-2005-79975

  However, in the above-described conventional key distribution method, in order to prevent the problem that an unauthorized third party terminal device installed around the wireless network system intercepts and illegally obtains the initial key to be distributed, The “strength that allows communication only in the vicinity” must be set according to the installation environment of the wireless network system. For example, if an authentication management device that distributes the initial key is installed near the wall in the home, and the other side of the wall is outdoors or another home (assuming an apartment, etc.), the other side of the wall If an eavesdropping device is installed, there is a risk that the delivered initial key may be illegally obtained.

  Also, for example, if the eavesdropping device is equipped with a high-performance antenna and the reception sensitivity is very good, even if “strength that allows communication only near the pole” is set, A non-existent eavesdropping device may be able to obtain the correct initial key.

  Therefore, the present invention has been made in view of the above problems, and an object of the present invention is to provide a novel key information that can be safely shared between a plurality of devices constituting a wireless network system. Another object of the present invention is to provide an improved key sharing system, key sharing device, and key sharing method.

  In order to solve the above-described problem, according to an aspect of the present invention, a key generation source information transmitting device that transmits key generation source information that is a generation source of key information, and a key information received by receiving the key generation source information. A key sharing system capable of wireless communication with a plurality of key sharing apparatuses to be generated and sharing a plurality of key information generated based on key generation source information received from the key generation source information generation apparatus by the plurality of key sharing apparatuses Is provided. In this key sharing system, the key generation source information transmitting device includes a key generation source information generation unit that generates key generation source information; a transmission unit that transmits key generation source information generated by the key generation source information generation unit; Is provided. The key sharing device includes a receiving unit that receives the key generation source information transmitted from the key generation source information transmission device; and a first external input that is directly applied to the key sharing device. A detection unit; a key generation source information collection unit that selects and holds one or more pieces of key generation source information from the key generation source information received by the reception unit, triggered by detection of the first external input; A key generation unit that generates key information based on one or more pieces of key generation source information held by the key generation source information collection unit. Note that the key generation source information transmitting device may periodically generate and transmit the key generation source information or may generate and transmit the key generation information irregularly. In addition, the key generation source information transmitted intermittently in this way is preferably not different information but different information composed of random numbers or the like.

  In the key sharing system having such a configuration, the key generation source information transmitting device generates key generation source information and transmits it to each key sharing device. When receiving the key generation source information transmitted from the key generation source information transmitting device, the key sharing device detects the first external input directly given to the key sharing device. One or more key generation source information is selected and held among the key generation source information received by the receiving unit triggered by detection of input, and is based on the held one or more key generation source information. To generate key information. As a result, the first external input is made to the plurality of key sharing devices substantially simultaneously, so that each key sharing device selects and holds the same key generation source information. As a result, the same key information is obtained. Can be generated and shared.

  At this time, the wiretapping device cannot detect the first external input directly given to the plurality of key sharing devices. Accordingly, it is difficult for a plurality of key sharing apparatuses to generate and share key information based on the key generation source information selected by using the first external input as a trigger, so that the shared key is difficult to be identified by the eavesdropping apparatus. The initial key can be safely shared among a plurality of key sharing devices.

  In order to solve the above problem, according to another aspect of the present invention, there is provided a key sharing apparatus capable of wireless communication with a key generation source information transmission apparatus that transmits key generation source information that is a generation source of key information. Is done. The key sharing apparatus includes: a receiving unit that receives key generation source information transmitted from a key generation source information transmitting apparatus; and a first detection that detects a first external input directly given to the key sharing apparatus A key generation source information collection unit that selects and holds one or more key generation source information from the key generation source information received by the reception unit triggered by detection of the first external input; and a key A key generation unit that generates key information based on one or more key generation source information held by the generation source information collection unit.

  With this configuration, the eavesdropping device cannot detect the first external input that is directly given to the key sharing device. Accordingly, the first external input is performed almost simultaneously on the plurality of key sharing devices, so that the plurality of key sharing devices can be identical based on the key generation source information selected using the first external input as a trigger. If the key information is generated and shared, it is difficult to identify the shared key by the eavesdropping device, and the initial key can be safely shared among a plurality of key sharing devices.

  The first external input may be a physical first input operation on the key sharing device by the user. As a result, the eavesdropping device cannot detect a user input operation physically given to the key sharing device, so that the initial key can be more securely shared among the plurality of key sharing devices.

  In addition, a second detection unit that detects a second external input directly given to the key sharing device is further provided, and the key generation unit is triggered by detection of the second external input as a key generation source. The key information may be generated based on one or more key generation source information held by the information collecting unit. As a result, it becomes more difficult for the wiretapping device to specify the content of the key generation source information that generates the key information and the timing for generating the key information. Can share an initial key.

  The second external input may be a physical second input operation on the key sharing apparatus by the user. As a result, the eavesdropping device cannot detect a user input operation physically given to the key sharing device, so that the initial key can be more securely shared among the plurality of key sharing devices.

  In addition, the key sharing device is capable of wireless communication with other key sharing devices, and is generated by the key information generated by the key generation unit and other key sharing devices by wireless communication with the other key sharing devices. A key confirmation unit for confirming whether or not the key information matches may be further provided. As a result, it is possible to determine whether or not the key information generated by each of the plurality of key sharing devices truly matches, and only when the keys match, the generated key information can be set as the initial key. .

  Further, a key storage unit that stores the key information generated by the key generation unit in a storage medium when the key confirmation unit confirms that the two pieces of key information match each other may be further provided. Thereby, the same key information can be stored in a plurality of key sharing devices, and the key information can be shared as an initial key.

  The key sharing device may further include a key distribution unit that is capable of wireless communication with another key sharing device and transmits the key information generated by the key generation unit to the other key sharing device. . As a result, the key sharing device can relay the key information shared between the other two key sharing devices, thus relaxing the restriction that the two key sharing devices must be placed close together when generating the key information. it can.

  The key sharing device is capable of wireless communication with the other second and third key sharing devices, and wirelessly communicates with the second key sharing device to generate key information generated by the key generation unit, A key confirmation unit for confirming whether or not the key information generated by the second key sharing device matches; the key distribution unit has been confirmed by the key confirmation unit to match both pieces of key information; In this case, the key information and the ID information of the second key sharing device may be transmitted to the third key sharing device. As a result, it is determined whether the key information generated by the key sharing device and the second key sharing device match each other, and the generated key information is changed to the third key only when they match. To the key sharing device.

  In addition, the storage device further includes a storage unit that stores the first key information shared by the key sharing device and the third key sharing device in a storage medium, and the key distribution unit matches both pieces of key information by the key confirmation unit. When it is confirmed that the key information and the ID information of the second key sharing apparatus are encrypted, the key information may be encrypted with the first key information and transmitted to the third key sharing apparatus. As a result, the key sharing apparatus can notify the third key sharing apparatus that the key sharing apparatus that shares the key information transmitted to the third key sharing apparatus is the second key sharing apparatus.

  In order to solve the above-described problem, according to another aspect of the present invention, key generation source information that can wirelessly communicate with another key sharing apparatus and transmits key generation source information that is a generation source of key information. Provided is a key sharing device including a transmission device. The key sharing device includes a key generation source information generation unit that generates key generation source information; a transmission unit that transmits key generation source information generated by the key generation source information generation unit; A first detection unit for detecting a first external input given to the key generation source information; one or more of key generation source information generated by the key generation source information generation unit triggered by detection of the first external input A key generation source information collection unit that selects and holds key generation source information; a key generation unit that generates key information based on one or more key generation source information held by the key generation source information collection unit; It is characterized by providing;

  With this configuration, the eavesdropping device cannot detect the first external input that is directly given to the key sharing device. Accordingly, the first external input is performed almost simultaneously on the plurality of key sharing devices, so that the plurality of key sharing devices can be identical based on the key generation source information selected using the first external input as a trigger. If the key information is generated and shared, it is difficult to identify the shared key by the eavesdropping device, and the initial key can be safely shared among a plurality of key sharing devices. Further, the key sharing device that is the source of the key generation source information can share the key information with other key sharing devices.

  Further, a key management unit that associates the key information generated by the key generation unit with the ID information of another key sharing device and stores it in a storage medium may be further provided. This makes it possible to identify other key sharing devices that share key information with this key sharing device.

  Also, a key confirmation unit that confirms whether the key information generated by the key generation unit and the key information generated by the other key sharing device match with each other by wireless communication with the other key sharing device. And when the key confirmation unit confirms that the two pieces of key information match, the key management unit associates the key information with the ID information of the other key sharing device and stores it in the storage medium. You may make it do. As a result, the key sharing device can share different key information as an initial key with other key sharing devices, and further identify other key sharing devices that share the key information. become able to.

  The key sharing device is communicable with the other first and second key sharing devices, the key information generated by the first key sharing device, and the key generated by the second key sharing device. A receiving unit that receives the key information and the ID information of the second key sharing device from the first key sharing device when the information is confirmed to match; the key information received by the receiving unit; And a key management unit that associates the ID information of the second key sharing device with each other and stores it in the storage medium. As a result, the key information relayed by the first key sharing device can be stored, and the key sharing device that shares the key information with this key sharing device can be identified.

  The key management unit stores the first key information shared by the key sharing device and the first key sharing device in association with the ID information of the first key sharing device in a storage medium. , When the key information received by the receiving unit and the ID information of the second key sharing device are encrypted by the first key information, the key information and the ID information of the second key sharing device are The first key information read from the storage medium may be decrypted and stored in the storage medium. As a result, the key information can be safely transmitted from the first key sharing apparatus to the key sharing apparatus.

  In order to solve the above problem, according to another aspect of the present invention, a key in a key sharing apparatus capable of wireless communication with a key generation source information transmission apparatus that transmits key generation source information that is a generation source of key information. A sharing method is provided. The key sharing method includes a reception step of receiving key generation source information transmitted from a key generation source information transmitting device; and a first detection for detecting a first external input directly given to the key sharing device. A key generation source information collecting step for selecting and holding one or more key generation source information from the key generation source information received in the reception step, triggered by detection of the first external input; A key generation step of generating key information based on one or more key generation source information held in the generation source information collection step.

  In the key generation source information collection step, a predetermined number of key generation source information received after the first external input is detected may be selected and held.

  The method further includes a second detection step of detecting a second external input directly given to the key sharing apparatus, wherein the key generation step uses the detection of the second external input as a trigger to generate a key. In the source information collection step, key information may be generated based on one or more key generation source information held before detection of the second external input.

  The key sharing device is capable of wireless communication with other key sharing devices, and is generated by the key information generated in the key generation step and other key sharing devices by wireless communication with other key sharing devices. A key confirmation step for confirming whether or not the key information matches, and a storage step for storing the key information in the storage medium when it is confirmed that both key information matches in the key confirmation step; May be further included.

  The key sharing apparatus may further include a key distribution step capable of wireless communication with another key sharing apparatus and transmitting the key information generated in the key generation step to the other key sharing apparatus.

  Further, the key sharing device is capable of wireless communication with other second and third key sharing devices, and wirelessly communicates with the second key sharing device to generate key information generated in the key generation step, A key confirmation step for confirming whether or not the key information generated by the second key sharing device matches; in the key distribution step, it was confirmed that both key information matches in the key confirmation step; In this case, the key information and the ID information of the second key sharing device may be transmitted to the third key sharing device.

  The method further includes a storing step of storing in the storage medium the first key information shared by the key sharing device and the third key sharing device, wherein the key distribution step matches the key information in the key confirmation step. If it is confirmed that the key information and the ID information of the second key sharing device are encrypted with the first key information; and the encrypted key information and the second key sharing device. And transmitting the ID information to the third key sharing apparatus.

  In order to solve the above-described problem, according to another aspect of the present invention, key generation source information that can wirelessly communicate with another key sharing apparatus and transmits key generation source information that is a generation source of key information. Provided is a key sharing method in a key sharing device including a transmission device. The key sharing method includes a key generation source information generation step for generating key generation source information; a transmission step for transmitting the key generation source information generated in the key generation source information generation step; A first detection step for detecting a first external input given to the key generation source information, wherein one or more of the key generation source information generated in the key generation source information generation step is triggered by the detection of the first external input A key generation source information collecting step for selecting and holding key generation source information; a key generation step for generating key information based on one or more key generation source information held in the key generation source information collection step; It is characterized by including;

  In addition, a key management step of associating the key information generated in the key generation step with the ID information of another key sharing device and storing it in a storage medium may be further included.

  Also, a key confirmation step for confirming whether or not the key information generated by the key generation step matches the key information generated by the other key sharing device by wirelessly communicating with the other key sharing device. In the key management step, when it is confirmed in the key confirmation step that the two pieces of key information match, the key information and the ID information of the other key sharing device are stored in association with each other. You may make it do.

  The key sharing device is communicable with the other first and second key sharing devices, the key information generated by the first key sharing device, and the key generated by the second key sharing device. A receiving step of receiving the key information and the ID information of the second key sharing device from the first key sharing device when it is confirmed that the information matches; the key information received in the reception step; And a key management step of associating the ID information of the second key sharing apparatus with each other and storing it in the storage medium.

  And the key management step stores the first key information shared by the key sharing device and the first key sharing device in association with the ID information of the first key sharing device in a storage medium; Reading the first key information from the storage medium when the key information received in the receiving step and the ID information of the second key sharing device are encrypted by the first key information; Decrypting the read key information and the ID information of the second key sharing device with the read first key information; associating the decrypted key information with the ID information of the second key sharing device And storing in a storage medium.

  As described above, according to the present invention, key information can be securely shared among a plurality of devices constituting a wireless network system.

  Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the present specification and drawings, components having substantially the same functional configuration are denoted by the same reference numerals, and redundant description is omitted.

  In the following embodiments of the present invention, an example of a home wireless network system will be given, and a key sharing system in the wireless network system, and a wireless communication terminal and an authentication management device constituting the key sharing system, in particular, a wireless terminal device A technique for sharing an initial key between the authentication management apparatus and the authentication management apparatus will be described in detail. In the following embodiments, the wireless terminal device is an example of the key sharing device of the present invention, and the authentication management device is an example of a device that combines both the key sharing device of the present invention and the key generation source information transmitting device. It is.

<First Embodiment>
First, a key sharing system according to a first embodiment of the present invention, and a wireless terminal device, an authentication management device, and a key sharing method constituting the key sharing system will be described.

(1.1 System configuration)
First, with reference to FIG. 1, a key sharing system 1 according to a first embodiment of the present invention, and a wireless terminal device 10 and an authentication management device 20 constituting the key sharing system 1 will be described. FIG. 1 is a schematic diagram showing the overall configuration of the key sharing system 1 according to the first embodiment.

  As shown in FIG. 1, the key sharing system 1 according to the present embodiment is applied to, for example, a wireless network system installed in a home. The key sharing system 1 includes a plurality of wireless terminal devices 10 and an authentication management device 20 that authenticates and manages these wireless terminal devices 10, and these devices can communicate with each other wirelessly. .

  The wireless terminal device 10 includes, for example, various electronic devices installed in the home. Specifically, the wireless terminal device 10 is a device having a wireless communication function, for example, a personal computer or the like. Computer devices, home video game machines, information appliances (eg, television receivers, refrigerators, washing machines, air conditioners, water heaters, stationary video / audio data recording / playback devices, etc.), portable video / An audio data recording / reproducing device, a mobile phone, a PDA (Personal Digital Assistant), a car navigation system, a mobile phone, a PHS, a sensor device and the like can be used. In addition, the wireless terminal device 10 may be, for example, a device having excellent calculation processing capability such as the computer device, but may be a device having lower calculation processing capability than a computer device or the like.

  Such a wireless terminal device 10 can function as a key sharing device. That is, the wireless terminal device 10 sets an initial key for wireless communication with the authentication management device 20 and other wireless terminal devices 10 (that is, shares the same initial key), thereby managing the authentication management. Various data can be securely wirelessly communicated with the device 20 and other wireless terminal devices 10. Note that “secure wireless communication is possible” means that data can be securely wirelessly communicated by performing data encryption using key information and mutual authentication of the transmission source.

  The authentication management device 20 includes, for example, a computer device 21 such as a personal computer and a wireless communication device 22 that is connected to the computer device 21 by wire, for example. In the present embodiment, the wireless communication device 22 of the authentication management device 20 has, for example, substantially the same configuration as the wireless terminal device 10 (see FIG. 2). By attaching the wireless communication device 22 to the computer device 21, the computer device 21 can perform wireless communication. However, the present invention is not limited to such an example, and for example, the authentication management device 20 may incorporate a wireless communication device.

  The authentication management device 20 can function as a key sharing device. That is, the authentication management device 20 sets an initial key with each of the wireless terminal devices 10 (that is, shares the same initial key), so that various types of authentication management device 20 can perform various types of communication with the wireless terminal devices 10. Data can be wirelessly communicated securely.

  The authentication management device 20 also functions as a key generation source information transmission device, generates key generation source information (information that is a generation source of key information such as an initial key), and at least the wireless terminal device 10 in the home. The key generation source information can be wirelessly transmitted with an output that can be received. As a result, the wireless terminal device 10 arranged at a location where the key generation source information transmitted by the authentication management device 20 can be received (that is, in the home) receives the key generation source information from the authentication management device 20. , The initial key can be generated based on the key generation source information. The authentication management device 20 can also generate an initial key based on the key generation source information generated by itself. Note that the authentication management apparatus 20 may generate and transmit the key generation source information periodically or irregularly (for example, at random time intervals). In the description, an example in which the key generation source information is periodically generated and transmitted will be described.

  In the key sharing system 1 as described above, when an unauthorized third-party-owned wireless terminal device (hereinafter referred to as “wiretapping device”) is installed near a wall in the home or outdoors, the wiretapping device , There is a possibility that the key generation source information periodically transmitted by the authentication management device 20 can be intercepted. However, this eavesdropping device cannot detect an input operation (for example, a physical user input operation such as pressing an input button) directly performed on the authentication management device 20 or the wireless terminal device 10 by the user. .

  Therefore, in the present embodiment, the wireless terminal device 10 and the authentication management device 20 include a plurality of key generation source information periodically transmitted from the authentication management device 20 by the user to the wireless terminal device 10 and the authentication management device 20. On the other hand, a method of collecting key generation source information when an input operation is performed and generating an initial key based on the collected key generation source information is employed. Thus, it is possible to prevent the initial key shared by the wireless terminal device 10 and the authentication management device 20 from being specified by the eavesdropping device. Below, the structure and operation | movement of the radio | wireless terminal apparatus 10 and the authentication management apparatus 20 for implement | achieving this method are explained in full detail.

(1.2 External configuration of each device)
Next, the external configuration of the wireless terminal device 10 and the authentication management device 20 according to the first embodiment will be described with reference to FIG. FIG. 2 is a perspective view showing the external configuration of the wireless terminal device 10 and the authentication management device 20 according to the first embodiment.

  As shown in FIG. 2A, the wireless terminal device 10 includes, for example, a housing 13 that houses various electronic circuits (not shown) such as a control device, and wireless communication installed outside the housing 13. For example, an information collection button 16 and a key generation button 17 installed on the upper surface of the housing 13, and a key sharing success notification LED 18 and a key sharing failure notification LED 19 installed on the upper surface of the housing 13, for example. Prepare.

  The information collection button 16 and the key generation button 17 are examples of operation tools that are targets of physical user input operations on the wireless terminal device 10. The user can instruct the wireless terminal device 10 to collect the key generation source information or generate key information such as an initial key by pressing the information collection button 16 or the key generation button 17.

  Note that the operation tool that is the target of the physical user input operation is not limited to the examples of the information collection button 16 and the key generation button 17 as described above, and for example, a switch, lever, dial, mouse, keyboard, touch panel. It may be configured by various operation means such as. Further, instead of these operation means, for example, a sensor for detecting biometric information representing the physical characteristics of the user, a pressure sensor for detecting a pressing force applied to the wireless terminal device 10 by the user, and a user to the wireless terminal device 10 Detection means such as a vibration sensor for detecting the applied vibration may be installed to detect an input operation by the user.

  The key sharing success notification LED 18 and the key sharing failure notification LED 19 respectively share an initial key between the wireless terminal device 10 and the authentication management device 20 (that is, generation of the same initial key based on the same key generation source information). Illuminates when succeeds / fails. When the key sharing success notification LED 18 and the key sharing failure notification LED 19 are turned on, the success / failure of the initial key sharing can be notified to the user.

  The means for notifying the success / failure of the initial key sharing is not limited to the examples of the key sharing success notification LED 18 and the key sharing failure notification LED 19, and represents, for example, the success / failure of the initial key sharing. Display device (for example, a liquid crystal display panel) that displays a screen, voice output device (for example, a speaker) that emits a voice that indicates success / failure of the initial key sharing, and vibration that indicates the success / failure of the initial key sharing A vibration generating device or the like may be installed.

  In addition, the wireless communication device 22 of the authentication management device 20 can have, for example, substantially the same device configuration as the wireless terminal device 10. As shown in FIG. 2B, the wireless communication device 22 includes a housing 23, an antenna 24, an information collection button 26, a key generation button 27, a key sharing success notification LED 28, and a key sharing failure notification LED 29. Each part of the wireless communication device 22 has substantially the same function as the housing 13, the antenna 14, the information collection button 16, the key generation button 17, the key sharing success notification LED 18, and the key sharing failure notification LED 19 of the wireless terminal device 10. Since it has a structure, detailed description is omitted.

(1.3 Functional configuration of wireless terminal device)
Next, a functional configuration of the wireless terminal device 10 according to the first embodiment will be described with reference to FIG. FIG. 3 is a block diagram illustrating a functional configuration of the wireless terminal device 10 according to the first embodiment.

  As shown in FIG. 3, the wireless terminal device 10 includes an information collection trigger transmission unit 102, a key generation source information collection unit 104, a key generation trigger transmission unit 106, a key generation unit 108, a key confirmation unit 110, a key storage unit 112, A key sharing result notification unit 114 and a transmission / reception unit 116 are provided.

  The information collection trigger transmission unit 102 corresponds to a first detection unit, and detects a first physical input operation to the wireless terminal device 10 by a user. For example, the information collection trigger transmission unit 102 detects that the user has pressed the information collection button 16 of the wireless terminal device 10 as the first input operation. Examples of the first input operation include not only an operation of pressing the information collection button 16 but also an operation of a user turning on an information collection switch provided in the wireless terminal device 10. It is not limited. Further, the information collection trigger transmission unit 102 outputs an information collection start message to the key generation source information collection unit 104 in response to the detection of the first input operation.

  The key generation source information collection unit 104 triggers detection of the first input operation by the information collection trigger transmission unit 102 as a trigger, and one or more key generation source information periodically received by the transmission / reception unit 116 Select and hold source information. Specifically, the key generation source information collection unit 104 receives the information collection start message from the information collection trigger transmission unit 102, and thus among the plurality of key generation source information periodically received by the transmission / reception unit 116. Collect some of the. For example, when the information collection start message is input, the key generation source information collection unit 104 selects and holds one key generation source information input from the transmission / reception unit 116 thereafter. Further, when the information collection start message is input a plurality of times, the key generation source information collection unit 104 selects one key generation information given from the transmission / reception unit 116 after each information collection start message is input. As a result, a plurality of key generation information is held. In addition, holding | maintaining key generation information means storing key generation source information in the storage medium (for example, semiconductor memory, a hard disk, etc.) with which the radio | wireless terminal apparatus 10 is not shown, for example.

  Further, the key generation source information collection unit 104 may hold a plurality of pieces of key generation source information received thereafter in response to the input of one information collection start message. However, it is assumed that the plurality is a predetermined number defined in advance in the key sharing system 1.

  Further, when a key generation start message is input from the key generation trigger transmission unit 106, the key generation source information collection unit 104 reads out the key generation source information held at the time of input from the storage medium and generates the key. Output to the unit 108.

  The key generation trigger transmission unit 106 corresponds to a second detection unit, and detects a physical second input operation on the wireless terminal device 10 by the user. For example, the key generation trigger transmission unit 106 detects that the user has pressed the key generation button 17 of the wireless terminal device 10 as the second input operation. Examples of the second input operation include not only an operation of pressing the key generation button 17 but also an operation of a user turning on a key generation switch provided in the wireless terminal device 10. It is not limited. Furthermore, the key generation trigger transmission unit 106 outputs a key generation start message to the key generation source information collection unit 104 in response to the detection of the second input operation.

  The key generation unit 108 uses the detection of the second input operation by the key generation trigger transmission unit 106 as a trigger, based on one or more key generation source information held by the key generation source information collection unit 104, Generate key information. Specifically, when the key generation source information is input from the key generation source information collection unit 104 in response to the detection of the second input operation, the key generation unit 108 performs the key generation based on the key generation source information. An initial key having a predetermined bit length defined in advance in the shared system 1 is generated.

  The key information generation method includes, for example, a hash function, a MAC (Message Authentication Code) generation algorithm (using a specified key) based on a block cipher, a keyed hash function (using a specified key), and an EXOR operation. , A key generation method using bit truncation, etc., a method of applying each of these key generation methods multiple times, or a method of combining these key generation methods, etc. is not. However, as a method for generating the key information, it is necessary to use a method defined in advance in the key sharing system 1. Further, the key generation unit 108 outputs the key information generated as described above to the key confirmation unit 110.

  The key confirmation unit 110 confirms whether the key information generated by the key generation unit 108 is shared with the authentication management apparatus 20. That is, the key confirmation unit 110 wirelessly communicates with the authentication management device 20 so that the key information generated by the key generation unit 108 of the wireless terminal device 10 matches the key information generated by the authentication management device 20. Confirm whether or not to do.

  As a method of confirming this key information, for example, mutual authentication using a challenge / response method can be used. Specifically, the key confirmation unit 110 exchanges challenge information and response information with each other in order to confirm whether or not the key information is shared with the authentication management apparatus 20. . More specifically, the key confirmation unit 110 transmits / receives the challenge information generated by the key confirmation unit 110 itself and the response information generated by the key confirmation unit 110 itself to the challenge information generated by the authentication management device 20. Output to. The key confirmation unit 110 receives from the transmission / reception unit 116 the challenge information generated by the authentication management device 20 and the response information generated by the authentication management device 20 in response to the challenge information generated by the key confirmation unit 110 itself. The It is assumed that the challenge information and response information exchanged in this process include, for example, ID information of the wireless terminal device 10 or the authentication management device 20, a random number, and the like.

  As a result, when the key confirmation unit 110 confirms that the same key information as that of the authentication management apparatus 20 is shared, the key confirmation unit 110 outputs the key information to the key storage unit 112 and also displays a key sharing success message. The result is output to the key sharing result notification unit 114. Conversely, if the key confirmation unit 110 confirms that the same key information cannot be shared, the key confirmation unit 110 discards the key information and gives a key sharing failure message to the key sharing result notification unit 114.

  When the key confirmation unit 110 confirms that the key information matches, the key storage unit 112 shares the key information input from the key confirmation unit 110 between the wireless terminal device 10 and the authentication terminal device 20. As an initial key, it is securely stored in the storage medium.

  The key sharing result notifying unit 114 receives the key sharing success message or the key sharing failure message from the key confirming unit 110, so that the key information can be shared with the authentication management apparatus 20, or the key cannot be shared. Notify the user to the effect. As a notification method at this time, for example, a method of turning on the key sharing success notification LED 18 or the key sharing failure notification LED 19 provided in the wireless terminal device 10 as described above may be used. There are a method for generating a beep sound, a method for vibrating the wireless terminal device 10, and the like, but the method is not limited thereto.

  The transmission / reception unit 116 is an example of a transmission unit and a reception unit, and transmits / receives various types of information to / from the authentication terminal device 20 and other wireless terminal devices 10 constituting the home wireless network system by wireless communication. Specifically, the transmission / reception unit 116 receives a plurality of different key generation source information periodically transmitted from the authentication management device 20, and sequentially receives the received key generation source information in the key generation source information collection unit 104. Output to. The transmission / reception unit 116 receives from the key confirmation unit 110 the challenge information generated by the key confirmation unit 110 itself and the response information generated by the key confirmation unit 110 itself in response to the challenge information generated by the authentication management device 20. Then, these challenge information and response information are transmitted to the authentication management apparatus 20. Further, when the transmission / reception unit 116 receives the challenge information generated by the authentication management device 20 or the response information generated by the authentication management device 20 with respect to the challenge information generated by the key confirmation unit 110 itself from the authentication management device 20, These challenge information and response information are output to the key confirmation unit 110.

(1.4 Functional configuration of authentication management device)
Next, a functional configuration of the authentication management apparatus 20 according to the first embodiment will be described with reference to FIG. FIG. 4 is a block diagram illustrating a functional configuration of the authentication management apparatus 20 according to the first embodiment.

  As shown in FIG. 4, the authentication management device 20 includes a key generation source information generation unit 201, an information collection trigger transmission unit 202, an information generation source information collection unit 204, a key generation trigger transmission unit 206, a key generation unit 208, a key confirmation. A unit 210, a key management unit 212, a key sharing result notification unit 214, and a transmission / reception unit 216. In the following description, the components of the authentication management device 20 will be described focusing on those having different functions compared to the components of the wireless terminal device 10 shown in FIG.

  The key generation source information generation unit 201 periodically generates key generation source information serving as a key information generation source, and periodically sends the generated key generation source information to the key generation source information collection unit 204 and the transmission / reception unit 216, respectively. To output automatically. The key generation source information is, for example, random number information generated randomly by the authentication management apparatus 20. The term “regular” refers to, for example, once a minute, but is not limited to such an example. In addition, the plurality of key generation source information periodically generated as described above are preferably different information such as the randomly generated random numbers. This makes it difficult for the eavesdropping device to specify key information generated by the authentication management device 20 and the wireless terminal device 10 based on the key generation source information.

  The information collection trigger transmission unit 202 has substantially the same functional configuration as the information collection trigger transmission unit 102 described with reference to FIG.

  The key generation source information collection unit 204 collects key generation source information periodically input from the key generation source information generation unit 201 as compared with the key generation source information collection unit 104 described in FIG. Since the other functional configurations are substantially the same as those of the key generation source information collection unit 104, detailed description thereof is omitted.

  The key generation trigger transmission unit 206 corresponds to the first detection unit and has substantially the same functional configuration as the key generation trigger transmission unit 106 described with reference to FIG. However, the key generation trigger transmission unit 206 detects, for example, that the user has pressed the information collection button 26 of the wireless communication device 22 of the authentication management device 20 as the first input operation.

  The key generation unit 208 has substantially the same functional configuration as the key generation unit 208 described with reference to FIG. However, the key generation unit 208 detects, for example, that the user has pressed the key generation button 27 of the wireless communication device 22 of the authentication management device 20 as the second input operation.

  The key confirmation unit 210 has substantially the same functional configuration as the key confirmation unit 110 described with reference to FIG. 3, and confirms whether or not the key information input from the key generation unit 208 is shared with the wireless terminal device 10. To do. As a method for the key confirmation unit 210 to confirm the key information, it is necessary to use the same method (for example, the challenge / response method) as the wireless terminal device 10 defined in advance in the key sharing system 1.

  Further, as a result of mutual authentication with the wireless terminal device 10, the key confirmation unit 210 shares the same key information (that is, the key information generated by the key generation unit 208 and the wireless terminal device 10). If the key information is the same, the key information is output to the key management unit 212. At this time, the key confirmation unit 210 may output the ID information of the wireless terminal device 10 obtained in the process of mutual authentication to the key management unit 212 together with the key information. The function of generating the key sharing success message and the key sharing failure message by the key confirmation unit 210 is substantially the same as that of the key confirmation unit 110.

  The key management unit 212 receives the key information from the key confirmation unit 210 when the key confirmation unit 210 confirms that the key information matches. The key management unit 212 uses this key information as an initial key shared by the authentication management device 20 and the wireless terminal device 10 in a storage medium (for example, a semiconductor memory or a hard disk) (not shown) provided in the authentication management device 20. Store.

  Further, when the ID information of the counterpart wireless terminal device 10 is input together with the initial key from the key confirmation unit 210, the key management unit 212 associates the ID information with the key information and stores them in the storage medium. . As a result, the key management unit 212 searches for a plurality of initial keys stored in the storage medium based on the ID information, reads out the initial key corresponding to the wireless terminal device 10 connected for communication, and the wireless terminal It can be used for secure wireless communication with the device 10.

  When the key sharing success notification message or key sharing failure message is input from the key confirmation unit 210, the key sharing result notification unit 214 indicates that the key information has been shared with the wireless terminal device 10, or the key cannot be shared. Notify the user to the effect. The notification method at this time may be, for example, a method of turning on the key sharing success notification LED 28 or the key sharing failure notification LED 29 provided in the authentication management apparatus 20 as described above. , A method of generating a beep sound, a method of vibrating the authentication management device 20, and the like.

  The transmission / reception unit 216 is an example of a transmission unit and a reception unit, and transmits / receives various types of information to / from the wireless terminal device 10 configuring the in-home wireless network system by wireless communication. The transmission / reception unit 216 periodically transmits the key generation source information input from the key generation source information generation unit 201 and provides the key generation source information to each wireless terminal device 10 constituting the home wireless network system. Here, it is assumed that transmission of the key generation source information by the transmission / reception unit 216 is performed with a transmission output that can be received at least by the wireless terminal device 10 in the home. Further, the transmission / reception unit 216, like the transmission / reception unit 116 described in FIG. 3, performs challenge information and response information exchanged between the key confirmation unit 110 of the wireless terminal device 10 and the key confirmation unit 210 of the authentication management device 20. Relay.

(1.5 System operation)
Next, the operation of the key sharing system 1 for realizing the key sharing method according to the first embodiment will be described with reference to FIG. 5 and FIGS. FIG. 5 is a sequence diagram showing the operation of the key sharing system 1 according to the first embodiment, and FIGS. 6A to 6D are schematic diagrams showing the steps of the key sharing method according to the first embodiment. is there.

  As shown in FIG. 5, the operation of the key sharing system 1 according to the first embodiment is roughly divided into first to fifth stages (S110, S120, S130, S140, S150).

First stage: Key generation source information collection stage (step S110, FIG. 6A)
First, the collection operation for selecting and holding one or more of the key generation source information generated / transmitted by the authentication management apparatus 20 using the detection of the first input operation as a trigger will be described.

  As shown in FIGS. 5 and 6A, the authentication management apparatus 20 periodically generates key generation source information 1, 2, 3, 4,... (For example, random numbers) by the key generation source information generation unit 201, and The generation source information 1, 2, 3, 4,... Is periodically transmitted at a transmission output that can be received by at least the home wireless terminal device 10 (steps S111-1, 2, 3, 4,...). In response to this, each wireless terminal device 10 receives key generation source information periodically transmitted from the authentication management device 20.

  In this state, first, the user prepares a new wireless terminal device 10 that wants to share the initial key with the authentication management device 20, and as the first input operation, for example, as shown in FIG. 10 and the information collection button 26 provided on the authentication management apparatus 20 are simultaneously pressed.

  Then, the information collection trigger transmission unit 102 of the wireless terminal device 10 detects the first input operation, that is, detects that the information collection button 16 is pressed by the user (step S112B). In response, an information collection start message is generated and output to the key generation source information collection unit 104 (step S114B). Similarly, the information collection trigger transmission unit 202 of the authentication management device 20 detects the first input operation, that is, detects that the information collection button 26 is pressed by the user (step S112A), and further detects the detection. Accordingly, an information collection start message is generated and output to the key generation source information collection unit 204 (step S114A).

  Next, the key generation source information collection unit 104 of the wireless terminal device 10 receives, for example, the one received first by the transmission / reception unit 116 after the input of the information collection start message (that is, after detection of the first input operation). Key generation source information (in the example of FIG. 5, key generation source information 3) is selected and held in the storage medium (step S114B). Similarly, the key generation source information collection unit 204 of the authentication management apparatus 20 first generates the key collection source information generation unit 201 after the input of the information collection start message (that is, after detection of the first input operation). For example, one key generation source information (key generation source information 3 in the example of FIG. 5) is selected and held in the storage medium (step S114A). In this way, the key generation source information held in the wireless terminal device 10 and the key generation source information held in the authentication management device 20 are the same information. In the present embodiment, for example, the key generation source information 1 and 2 generated and transmitted before the detection of the first input operation, and the second generation and transmission after the detection of the first input operation. The key generation source information 4 is not held.

  Thereafter, every time the user presses the information collection buttons 16 and 26 again and performs the first operation input after a suitable time, the wireless terminal device 10 and the authentication management device 20 respectively perform steps S112B to S112B. S116B and steps S112A to S116A are repeated (steps S118B and S118A). As a result, a plurality of different key generation source information is sequentially collected and accumulated in the wireless terminal device 10 and the authentication management device 20 by the key generation source information collection units 104 and 204. Thus, the plurality of key generation source information stored in the wireless terminal device 10 and the plurality of key generation source information stored in the authentication management device 20 are the same. Note that the wireless terminal device 10 and the authentication management device 20 may hold only one key generation source information without performing the steps S118A and 118B.

Second stage: Key generation stage (step S120, FIG. 6B)
Next, an operation for generating key information based on the collected one or more key generation source information will be described.

  First, as a second input operation, for example, the user simultaneously performs a key generation button 17 provided on the wireless terminal device 10 and a key generation button 27 provided on the authentication management device 20 as shown in FIG. 6B. Press.

  Then, the key generation trigger transmission unit 106 of the wireless terminal device 10 detects the second input operation, that is, detects that the user has pressed the key generation button 17 (step S122B), and further performs the detection. In response, a key generation start message is generated and output to the key generation source information collection unit 104 (step S124B). Similarly, the key generation trigger transmission unit 206 of the authentication management apparatus 20 detects the second input operation, that is, detects that the user has pressed the key generation button 27 (step S122A), and further detects the detection. In response to this, a key generation start message is generated and output to the key generation source information collection unit 204 (step S124A).

  Next, in response to the input of the key generation start message, the key generation source information collection unit 104 of the wireless terminal device 10 reads one or more key generation source information held so far from the storage medium, and The data is output to the generation unit 108. Similarly, in response to the input of the key generation start message, the key generation source information collection unit 204 of the authentication management device 20 reads one or more key generation source information held so far from the storage medium, The data is output to the key generation unit 208.

  Further, the key generation unit 108 of the wireless terminal device 10 generates key information by calculating the key generation source information acquired from the key generation source information collection unit 104 according to the key generation algorithm defined by the key sharing system 1. , The key information is output to the key confirmation unit 110. Similarly, the key generation unit 208 of the authentication management device 20 calculates the key generation source information acquired from the key generation source information collection unit 204 according to the same key generation algorithm to generate key information, and uses the key information as a key. The data is output to the confirmation unit 210.

Third stage: Key confirmation stage (step S130, FIG. 6C)
Next, an operation for confirming whether or not the wireless terminal device 10 and the authentication management device 20 share the same key information will be described.

  Specifically, as shown in FIG. 6C, the key confirmation unit 110 of the wireless terminal device 10 and the key confirmation unit 210 of the authentication management device 20 exchange challenge information and response information with respect to the challenge information. As a result, it is confirmed whether the key information generated by the key generation unit 108 of the wireless terminal device 10 matches the key information generated by the key generation unit 208 of the authentication management device 20, and both devices are identical. It is confirmed whether or not key information is shared (steps S130B and 130A). At this time, the ID information of the wireless terminal device 10 and the ID information of the authentication management device 20 may be exchanged with each other.

Fourth stage: Key storage stage (step S140)
Next, the operation for storing the key information according to the result of the key confirmation will be described.

  Specifically, when it is confirmed in the key confirmation step S130 that both pieces of key information match, the key confirmation unit 110 of the wireless terminal device 10 outputs the key information to the key sharing result notification unit 114. Then, the key confirmation unit 210 of the authentication management apparatus 20 outputs the key information to the key sharing result notification unit 214. As a result, the key storage unit 112 of the wireless terminal device 10 stores the key information as an initial key in a storage medium in the wireless terminal device 10 (step S140B), and the key management unit 212 of the authentication management device 20 The key information as the initial key is stored in the storage medium in the authentication management device 20 (step S140A). At this time, the key management unit 212 of the authentication management device 20 may store the ID information of the wireless terminal device 10 in association with the key information.

  On the other hand, when it is confirmed in the key confirmation step S130 that the key information of both does not match, the key confirmation unit 110 of the wireless terminal device 10 and the key confirmation unit 210 of the authentication management device 20 both store the key information. Discard.

Fifth stage: shared result notification stage (step S150, FIG. 6D)
Next, an operation for notifying the user of the key information sharing result according to the key confirmation result will be described.

  Specifically, when it is confirmed in the key confirmation step S130 that both pieces of key information match, the key confirmation unit 110 of the wireless terminal device 10 sends a key sharing success message to the key sharing result notification unit 114. The key confirmation unit 210 of the authentication management apparatus 20 also outputs a key sharing success message to the key sharing result notification unit 214. As a result, as shown in FIG. 6D, the key sharing result notification unit 114 of the wireless terminal device 10 turns on the key sharing success notification LED 18 in response to the input of the key sharing success message (step S150B), and the authentication management device. The 20 key sharing result notification unit 214 also turns on the key sharing success notification LED 28 in response to the input of the key sharing success message (step S150A). As a result, the user can be notified that the sharing of the initial key between the wireless terminal device 10 and the authentication management device 20 has been completed.

  On the other hand, when it is confirmed in the key confirmation step S130 that the two pieces of key information do not match, the key confirmation unit 110 of the wireless terminal device 10 outputs a key sharing failure message to the key sharing result notification unit 114, The key confirmation unit 210 of the authentication management apparatus 20 also outputs a key sharing failure message to the key sharing result notification unit 214. As a result, as shown in FIG. 6D, the key sharing result notification unit 114 of the wireless terminal device 10 turns on the key sharing failure notification LED 19 in response to the input of the key sharing failure message (step S150B), and the authentication management device. The 20 key sharing result notification unit 214 also turns on the key sharing failure notification LED 29 in response to the input of the key sharing failure message (step S150A). As a result, it is possible to notify the user that the initial key sharing has failed between the wireless terminal device 10 and the authentication management device 20.

  Thus, all steps of the key sharing method in the key sharing system 1 according to the first embodiment are completed.

(1.6 Effect)
As described above, according to the first embodiment of the present invention, the user performs a physical first input operation (for example, the information collection button 16, In response to the detection of the first input operation, the wireless terminal device 10 and the authentication management device 20 select key generation source information periodically transmitted from the authentication management device 20. And collect. Furthermore, when the user performs a second physical input operation (for example, an operation of pressing the key generation buttons 17 and 27) to the wireless terminal device 10 and the authentication management device 20 almost simultaneously, the wireless terminal device 10 and In response to the second input operation, the authentication management device 20 generates and shares an initial key based on the collected key generation source information.

  As a result, the initial key can be safely generated and shared between the wireless terminal device 10 and the authentication management device 20 using a user input operation that cannot be detected by the eavesdropping device as a trigger. More specifically, there is a possibility that the eavesdropping device can intercept key generation source information that is an initial key generation source. However, a physical input operation performed by the user on the authentication management device 20 and the wireless terminal device 10 cannot be detected from the wiretapping device. Therefore, in the present embodiment, the user performs a physical first input operation on each device substantially simultaneously, and among the key generation source information transmitted by the authentication management device 20 using the first input operation as a trigger, One or more pieces of information used as an initial key generation source are selected and collected. In addition, the user performs a physical second input operation on each device substantially simultaneously, and uses this second input operation as a trigger to select a timing for generating an initial key. This makes it very difficult for the eavesdropping device to specify when, from which information, and how much information the key information is generated. Therefore, even in a situation where there is an eavesdropping device that intercepts wireless communication, the wireless terminal device 10 and the authentication management device 20 can securely generate and share key information using wireless communication. .

<Second Embodiment>
Next, the key sharing system 1 according to the second embodiment of the present invention, and the wireless terminal device 10, the authentication management device 20, and the key sharing method constituting the key sharing system 1 will be described.

  In the second embodiment, by using the wireless terminal device 10 that already configures the wireless network in the home, the other new wireless terminal device 10 and the authentication management device 20 share the initial key. Features. The second embodiment is different from the first embodiment described above in the functional configuration related to this feature. However, the functional configuration excluding this difference (FIGS. 1 and 2 etc.) is the first configuration. Since this embodiment is substantially the same as the embodiment, the following description will focus on such differences.

(2.1 Functional configuration of wireless terminal device)
The functional configurations of the first wireless terminal device 10-1 and the second wireless terminal device 10-2 according to the second embodiment will be described below. The first wireless terminal device 10-1 already shares the initial key with the authentication management device 20 among the wireless terminal devices 10 constituting the wireless network system. On the other hand, the second wireless terminal device 10-2 is a wireless terminal device 10 that has not yet shared an initial key with the authentication management device 20, but is newly sharing an initial key with the authentication management device 20. In the present embodiment, the first wireless terminal device 10-1 corresponds to the first key sharing device, and the second wireless terminal device 10-2 corresponds to the second key sharing device, and is authenticated. The management device 20 corresponds to a third key sharing device.

  Among these, the functional configuration of the second wireless terminal device 10-2 (the side that intends to newly share the initial key with the authentication management device 20) is the wireless terminal device according to the first embodiment shown in FIG. The detailed description is omitted because it is substantially the same as 10. However, the second wireless terminal device 10-2 differs from the wireless terminal device 10 according to the first embodiment in the following points. That is, in the second wireless terminal device 10-2, the key confirmation unit 110 compares the key management unit 20 with the authentication management device 20 instead of the authentication management device 20 to determine whether or not the same key information is shared. This is the first wireless terminal apparatus 10-1 that already shares information. Accordingly, the challenge information and response information exchanged by the transmission / reception unit 116 is also the first wireless terminal device 10-1.

  Next, the functional configuration of the first wireless terminal device 10-1 (the side already sharing the initial key with the authentication management device 20) according to the second embodiment will be described with reference to FIG. FIG. 7 is a block diagram illustrating a functional configuration of the first wireless terminal device 10-1 according to the second embodiment.

  As shown in FIG. 7, the first wireless terminal apparatus 10-1 according to the second embodiment includes an information collection trigger transmission unit 102, a key generation source information collection unit 104, a key generation trigger transmission unit 106, and a key generation unit. 108, a key confirmation unit 110, a key storage unit 112, a key sharing result notification unit 114, a transmission / reception unit 116, and a key distribution unit 118.

  Among the components of the first wireless terminal device 10-1 according to the second embodiment, the information collection trigger transmission unit 102, the key generation source information collection unit 104, the key generation trigger transmission unit 106, and the key generation unit 108. The key storage unit 112 and the key sharing result notification unit 114 have substantially the same functional configuration as the wireless terminal device 10 according to the first embodiment shown in FIG. Hereinafter, among the constituent elements of the first wireless terminal device 10-1 according to the second embodiment, the key confirmation unit 110 having a part of functional configuration different from that of the wireless terminal device 10 according to the first embodiment. The functional configuration of the transmission / reception unit 116 and the key distribution unit 118 which is a new component will be described.

  The key confirmation unit 110 has basically the same functional configuration as the key confirmation unit 110 described in FIG. 3, but has a different functional configuration in the following points. That is, the key confirming unit 110 is provided on the condition that the target of key confirmation is the second wireless terminal device 10-2, and that the sharing of key information with the second wireless terminal device 10-2 has been confirmed. The key information and the ID information of the second wireless terminal device 10-2 are output to the key distribution unit 118.

  When the key information and the ID information of the wireless terminal device 10-2 are input from the key confirmation unit 110, the key distribution unit 118 generates a key distribution command message including the key information and the ID information. Further, the key distribution unit 118 adds an authenticator to the generated key distribution command message using key information (for example, initial key) shared by the first wireless terminal apparatus 10-1 with the authentication management apparatus 20. Then, an encryption key delivery command message is generated by encrypting. In addition, the key distribution unit 118 outputs the encryption key distribution command message generated in this way to the transmission / reception unit 116.

  The transmission / reception unit 116 has basically the same functional configuration as the transmission / reception unit 116 described with reference to FIG. 3, but has a different functional configuration in the following points. That is, the transmission / reception unit 116 determines that the transmission destination of information input from the key confirmation unit 110 to the transmission / reception unit 116 and the transmission source of information output from the transmission / reception unit 116 to the key confirmation unit 110 are the second wireless terminal device 10. -2. In addition, the transmission / reception unit 116 transmits the encryption key distribution command message input from the key distribution unit 118 to the authentication management apparatus 20.

(2.2 Functional configuration of authentication management device)
Next, a functional configuration of the authentication management apparatus 20 according to the second embodiment will be described with reference to FIG. FIG. 8 is a block diagram illustrating a functional configuration of the authentication management apparatus 20 according to the second embodiment.

  As illustrated in FIG. 10, the authentication management apparatus 20 includes a key generation source information generation unit 201, a transmission / reception unit 216, a message decryption unit 218, and a key management unit 212.

  The key generation source information generation unit 201 has substantially the same functional configuration as the key generation source information generation unit 201 described with reference to FIG. However, the key generation source information generation unit 201 is different from the case of FIG. 3 in that the generated key generation source information is not output to the key generation source information collection unit 204.

  The transmission / reception unit 216 is an example of a transmission unit and a reception unit, and various kinds of information are communicated by wireless communication with the second wireless terminal device 10-2 and the authentication management device 20 configuring the above-described home wireless network system. Send and receive. For example, the transmission / reception unit 216 periodically transmits key generation source information that is periodically input from the key generation source information generation unit 201, and the first wireless terminal device 10-1 and the second wireless terminal device 10. -2. Here, it is assumed that transmission of the key generation source information by the transmission / reception unit 216 is performed with a transmission output that can be received at least by the wireless terminal device 10 in the home. Also, the transmission / reception unit 216 receives the encryption key distribution command message from the first wireless terminal device 10-1 and outputs it to the message decryption unit 218.

  When the encryption key distribution command message is input from the transmission / reception unit 216, the message decryption unit 218 receives the ID information (first information) of the first wireless terminal device 10-1 that is the transmission source of the encryption key distribution command message Corresponding to the key information) is output to the key management unit 212. When the message decryption unit 218 receives the key information corresponding to the ID information from the key management unit 212, the message decryption unit 218 decrypts and authenticates the encrypted key delivery command message using the key information, The ID information and key information of the second wireless terminal device 10-2 are extracted from the received key delivery command message. Further, the message decryption unit 218 outputs the extracted ID information and key information to the key management unit 212.

  The key management unit 212 associates ID information and key information (including an initial key) of one or more wireless terminal devices 10 forming a wireless network at home in association with each other and stores them in a storage medium for safe management. For example, when the ID information of the wireless terminal device 10-1 is input from the message decryption unit 218, the key management unit 212 searches the key information in the storage medium based on the ID information, and uses the ID information as the ID information. Corresponding key information is read from the storage medium and output to the message decryption unit 218. In addition, when the key management unit 212 is given the ID information and key information of the second wireless terminal device 10-2 newly registered by the message decryption unit 218, the key management unit 212 converts the key information into a terminal having the ID information. As an initial key, it is securely stored in a storage medium.

  In the above, with reference to FIG. 8, each part of the authentication management apparatus 20 according to the second embodiment has been described. Note that the authentication management apparatus 20 according to the second embodiment is similar to the authentication management apparatus 20 according to the first embodiment shown in FIG. 4 described above, that is, the information collection trigger transmission unit 202 and the information generation source information collection unit 204. , A key generation trigger transmission unit 206, a key generation unit 208, a key confirmation unit 210, and a key sharing result notification unit 214. As a result, a common initial key can be directly generated and shared between the authentication management device 20 and the wireless terminal device 10 according to the second embodiment.

(2.3 System operation)
Next, the operation of the key sharing system 1 for realizing the key sharing method according to the second embodiment will be described with reference to FIG. 9 and FIGS. FIG. 9 is a sequence diagram showing the operation of the key sharing system 1 according to the second embodiment, and FIGS. 10A to 10E show the operation of each stage of the key sharing system 1 according to the second embodiment. It is a schematic diagram.

  As shown in FIGS. 9 and 10A to 10E, the operation of the key sharing system 1 according to the second embodiment is largely performed in the first to seventh stages (S210, S220, S230, S240, S250, S260, and S270). Separated. Among these, the operations of the key generation source information collection step S210, the key generation step S220, the key confirmation step S230, and the sharing result notification step S250 are not the authentication management device 20 and the wireless terminal device 10, but the first wireless terminal device. Steps S110, S120, S130, and S150 (see FIG. 5) according to the first embodiment are substantially the same except for the points executed by 10-1 and the second wireless terminal device 10-2. Therefore, detailed description thereof will be omitted.

First stage: collection stage of key generation source information (step S210, FIG. 10A)
As shown in FIGS. 9 and 10A, the authentication management apparatus 20 periodically generates key generation source information 1, 2,... (For example, random numbers) by the key generation source information generation unit 201, and generates the key generation source information 1 , 2... Are periodically transmitted at a transmission output that can be received by at least the first wireless terminal device 10-1 and the second wireless terminal device 10-2 in the home (steps S211-1, 2,...). ). In response to this, the first wireless terminal device 10-1 and the second wireless terminal device 10-2 receive key generation source information periodically transmitted from the authentication management device 20.

  In this state, first, as the first input operation, for example, as shown in FIG. 10A, the user (on the side already sharing the initial key with the authentication management device 20) first wireless terminal device 10-1. The information collection button 16 provided on the side already sharing the initial key with the authentication management device 20 and the second wireless terminal device 10-2 (newly sharing the initial key with the authentication management device 20) The information collection button 16 provided on the side) is simultaneously pressed.

  As a result, the first wireless terminal device 10-1 and the first wireless terminal device 10-1 generate key transmission source information generated and transmitted by the authentication management device 20 triggered by the detection of the first input operation. One or more of them are selected and held (steps S210A and S210B).

Second stage: Key generation stage (step S220, FIG. 10B)
As the second input operation, for example, as shown in FIG. 10B, the user is provided in the key generation button 17 provided in the first wireless terminal device 10-1 and the second wireless terminal device 10-2. The key generation button 17 is pressed simultaneously.

  Thereby, the first wireless terminal device 10-1 and the second wireless terminal device 10-2 use the detection of the second input operation as a trigger to generate the key generation source information held in step S210, Key information is generated by calculation using a predetermined key generation algorithm (steps S220A and S220B).

Third stage: Key confirmation stage (step S230, FIG. 10C)
As illustrated in FIG. 10C, the first wireless terminal device 10-1 and the second wireless terminal device 10-2 exchange challenge information and response information for the challenge information with each other, thereby exchanging the first wireless terminal device 10-1 and the second wireless terminal device 10-2. It is confirmed whether the key information generated by the device 10-1 matches the key information generated by the second wireless terminal device 10-2, and whether both devices share the same key information. (Steps S230A and 230B). At this time, for example, the ID information of the first wireless terminal device 10-1 and the ID information of the second wireless terminal device 10-2 are exchanged with each other.

Fourth stage: key storage stage (step S240)
In the key confirmation step S230, when it is confirmed that the key information generated by the first wireless terminal device 10-1 and the second wireless terminal device 10-2 matches, the second wireless terminal device 10 -2 key confirmation unit 110 outputs the key information to key sharing result notification unit 114. As a result, the key storage unit 112 of the second wireless terminal device 10-2 stores the key information as the initial key in the storage medium in the second wireless terminal device 10-2 (step S240B). In addition, the first wireless terminal device 10-1, for example, temporarily stores the key information in a memory or the like, but does not store the key information.

  On the other hand, if it is confirmed in the key confirmation step S230 that the two pieces of key information do not match, the key confirmation unit 110 of the first wireless terminal device 10-1 and the key of the second wireless terminal device 10-2 are used. Both confirmation units 110 discard the key information.

Fifth stage: shared result notification stage (step S250, FIG. 10D)
When it is confirmed in the key confirmation step S230 that both pieces of key information match, as shown in FIG. 10D, the keys of the first wireless terminal device 10-1 and the second wireless terminal device 10-2 are used. The sharing result notification unit 114 turns on the key sharing success notification LED 18 in response to the input of the key sharing success message from each key confirmation unit 110 (steps S250A and S250B). Thereby, it is possible to notify the user that the sharing of the initial key is completed between the first wireless terminal device 10-1 and the second wireless terminal device 10-2.

  On the other hand, when it is confirmed in the key confirmation step S230 that the two pieces of key information do not match, as shown in FIG. 10D, the first wireless terminal device 10-1 and the second wireless terminal device 10-2 The key sharing result notification unit 114 turns on the key sharing failure notification LED 19 in response to the input of the key sharing failure message from each key confirmation unit 110 (steps S250A and S250B). As a result, the user can be notified that the initial key sharing has failed between the first wireless terminal device 10-1 and the second wireless terminal device 10-2.

Sixth stage: key distribution stage (step S260, FIG. 10E)
Next, when it is confirmed in the key confirmation step S230 that both pieces of key information match, the initial key is transferred from the first wireless terminal device 10-1 to the authentication management device 20 as shown in FIG. 10E. And the operation of delivering the ID information of the second wireless terminal device 10-2 will be described.

  Specifically, first, the key distribution unit 118 of the first wireless terminal device 10-1 receives the generated key information and the ID information of the second wireless terminal device 10-2 from the key confirmation unit 110. When input, a key delivery command message including the key information and ID information is generated (step S262).

  Next, the key distribution unit 118 of the first wireless terminal device 10-1 uses the key information already shared by the first wireless terminal device 10-1 and the authentication management device 20 to generate the generated key distribution. An encrypted key delivery command message is generated by encrypting the command message and adding an authenticator (step S264).

  Further, the key distribution unit 118 of the first wireless terminal apparatus 10-1 transmits the generated encrypted key distribution command message to the authentication management apparatus 20 via the transmission / reception unit 116 (step S266). Then, the authentication management device 20 receives this encryption key delivery command message.

Seventh stage: Delivery key storage stage (step S270)
Next, the authentication management device 20 stores the key information as the initial key of the second wireless terminal device 10-2 delivered from the first wireless terminal device 10-1 in a storage medium in the authentication management device 20. The operation will be described.

  Specifically, first, the transmission / reception unit 216 of the authentication management device 20 outputs the encryption key delivery command message received from the first wireless terminal device 10-1 to the message decryption unit 218. Next, the message decryption unit 218 outputs the ID information of the first wireless terminal device 10-1 that is the transmission source terminal of this encrypted key distribution command message to the key management unit 212. Then, the key management unit 212 selects key information corresponding to the ID information of the first wireless terminal device 10-1 from the key information stored in the storage medium (that is, the first wireless terminal device 10). -1 and key information already shared by the authentication management apparatus 20) (step S272), and outputs it to the message decryption unit 218.

  Next, the message decryption unit 218 decrypts the encrypted key distribution command message using the key information corresponding to the first wireless terminal device 10-1, performs authentication by the authenticator, and performs the key distribution command message. Is obtained (step S274).

  Further, the message decryption unit 218 extracts the ID information and key information of the second wireless terminal device 10-2 included in the decrypted key distribution command message and outputs them to the key management unit 212. As a result, the key management unit 212 securely stores the ID information and the key information in the storage medium as the initial key of the second wireless terminal device 10-2 (step S276).

  Thus, all steps of the key sharing method in the key sharing system 1 according to the second embodiment are completed.

(1.6 Effect)
As described above, according to the second embodiment of the present invention, the first wireless terminal device 10-1 that already shares the key information with the authentication management device 20 and the new second wireless terminal device. 10-2 securely generates and shares an initial key, and the first wireless terminal device 10-1 shares the initial key with the first wireless terminal device 10-1 and the authentication management device. An authenticator is added / encrypted with key information shared with 20 and securely delivered to the authentication management apparatus 20. As a result, the new second wireless terminal device 10-2 and the authentication management device 20 can safely share the initial key.

  In the case of the first embodiment, the new wireless terminal device 10 is arranged near the authentication management device 20 in order to simultaneously perform physical input operations on the new wireless terminal device 10 and the authentication management device 20. Therefore, it was necessary to share the initial key. On the other hand, in the case of the second embodiment, the first wireless terminal device 10-1 already sharing the key information with the authentication management device 20 and the new second wireless terminal by the above sharing method. As long as the physical input operation can be performed simultaneously with the device 10-2, the initial key can be shared even at a location away from the authentication management device 20. As described above, in the second embodiment, in addition to the effects achieved in the first embodiment, the user further shares an initial key between the new second wireless terminal device 10-2 and the authentication management device 20. There is an advantage that it is possible to improve the restrictions on the place to be used and to provide flexibility.

  As mentioned above, although preferred embodiment of this invention was described referring an accompanying drawing, it cannot be overemphasized that this invention is not limited to the example which concerns. It will be apparent to those skilled in the art that various changes and modifications can be made within the scope of the claims, and these are naturally within the technical scope of the present invention. Understood.

  For example, in the above embodiment, the example in which the key sharing system 1 is applied to a home wireless network system has been described. However, the key sharing system of the present invention is not limited to such an example, and is applied to a wireless network system installed in a place where only a limited user exists, such as a school, a hospital, an office, or a public facility. May be.

  In the embodiment described above, the user uses the wireless terminal device 10 or the authentication management device 20 as a first external input that triggers key generation source information collection and a second external input that triggers key information generation. The first and second input operations that are physically performed have been described. However, the present invention is not limited to such examples. For example, the first and second input operations are not physical input operations, but may be performed on the wireless terminal device 10 or the authentication management device 20 using an infrared communication device, a reader / writer for a non-contact IC card, or the like. On the other hand, it may be an input operation for inputting information without contact.

  Further, the first and second external inputs are not limited to user input operations, and may be input signals input from the external device to the wireless terminal device 10 or the authentication management device 20. For example, when the wireless terminal device 10 or the authentication management device 20 is connected to an external device via a network, a cable, or the like (either wireless connection or wired connection may be used) manually or automatically from the external device. The predetermined information to be input may be the first and second external inputs.

  In the above embodiment, the authentication management apparatus 20 has been described with an example in which the key generation source information is periodically transmitted. However, the present invention is not limited to such an example. For example, a key generation source information transmission device that periodically transmits key generation source information may be installed separately from the wireless terminal device 10 or the authentication management device 20, or a home wireless network system may be installed. One or two or more wireless terminal devices 10 to be configured may have a function of periodically transmitting key generation source information.

  In the second embodiment, the first wireless terminal device 10-1 already sharing key information with the authentication management device 20 delivers the initial key to the authentication management device 20 safely. Thus, the example in which the new second wireless terminal device 10-2 and the authentication management device 20 share the initial key has been described. However, the initial key sharing is limited between the wireless terminal device 10 and the authentication management device 20. Not what you want. For example, initial key sharing in two wireless terminal apparatuses 10 that do not share key information for encryption or authentication with each other may be performed in the same manner as in the example described in the second embodiment. In this case, the first wireless terminal device 10-1 described in the operation of the second embodiment does not transmit the ID information and key information of the second wireless terminal device 10-2 to the authentication management device 20. The first wireless terminal device 10-1 and the second wireless terminal device 10-2 can realize this by storing each other's ID information and shared key information in their own storage media.

  The present invention is applicable to a key sharing system, a key sharing device, and a key sharing method for securely sharing key information between devices.

It is a schematic diagram which shows the whole structure of the key sharing system concerning the 1st Embodiment of this invention. It is a perspective view which shows the external appearance structure of the radio | wireless terminal apparatus and authentication management apparatus concerning the embodiment. It is a block diagram which shows the function structure of the radio | wireless terminal apparatus concerning the embodiment. It is a block diagram which shows the function structure of the authentication management apparatus concerning the embodiment. It is a sequence diagram which shows operation | movement of the key sharing system concerning the embodiment. It is a schematic diagram which shows the key generation source information collection step of the key sharing method concerning the embodiment. It is a schematic diagram which shows the key production | generation stage of the key sharing method concerning the embodiment. It is a schematic diagram which shows the key confirmation step of the key sharing method concerning the embodiment. It is a schematic diagram which shows the sharing result notification step of the key sharing method concerning the embodiment. It is a block diagram which shows the function structure of the 1st radio | wireless terminal apparatus concerning the 2nd Embodiment of this invention. It is a block diagram which shows the function structure of the authentication management apparatus concerning the embodiment. It is a sequence diagram which shows operation | movement of the key sharing system concerning the embodiment. It is a schematic diagram which shows the key generation source information collection step of the key sharing method concerning the embodiment. It is a schematic diagram which shows the key production | generation stage of the key sharing method concerning the embodiment. It is a schematic diagram which shows the key confirmation step of the key sharing method concerning the embodiment. It is a schematic diagram which shows the sharing result notification step of the key sharing method concerning the embodiment. It is a schematic diagram which shows the key distribution stage of the key sharing method concerning the embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Key sharing system 10 Wireless terminal device 10-1 1st wireless terminal device 10-2 2nd wireless terminal device 13, 23 Case 14, 24 Antenna 16, 26 Information collection button 17, 27 Key generation button 18, 28 Key sharing success notification LED
19, 29 Key sharing failure notification LED
DESCRIPTION OF SYMBOLS 20 Authentication management apparatus 21 Computer apparatus 22 Wireless communication apparatus 102 Information collection trigger transmission part 104 Key generation source information collection part 106 Key generation trigger transmission part 108 Key generation part 110 Key confirmation part 112 Key storage part 114 Key sharing result notification part 116 Transmission / reception Unit 118 key distribution unit 201 key generation source information generation unit 202 information collection trigger transmission unit 204 key generation source information collection unit 206 key generation trigger transmission unit 208 key generation unit 210 key confirmation unit 212 key management unit 214 key sharing result notification unit 216 Transmission / reception unit 218 Message decoding unit

Claims (27)

A key generation source information transmission device that transmits key generation source information that is a generation source of key information, and a plurality of key sharing devices that receive the key generation source information and generate key information are capable of wireless communication, A key sharing system in which a plurality of key sharing devices share common key information generated based on the key generation source information received from the key generation source information generation device:
The key generation source information transmitting device is:
A key generation source information generation unit for generating the key generation source information;
A transmission unit for transmitting the key generation source information generated by the key generation source information generation unit;
With
The key sharing device is:
A receiving unit for receiving the key generation source information transmitted from the key generation source information transmission device;
A first detection unit for detecting a first external input directly given to the key sharing device;
A key generation source information collection unit that selects and holds one or more of the key generation source information from the key generation source information received by the reception unit triggered by detection of the first external input;
A key generation unit that generates the key information based on the one or more key generation source information held by the key generation source information collection unit;
A key sharing system characterized by comprising: A key sharing device capable of wireless communication with a key generation source information transmission device that transmits key generation source information as a key information generation source:
A receiving unit for receiving the key generation source information transmitted from the key generation source information transmission device;
A first detection unit for detecting a first external input directly given to the key sharing device;
A key generation source information collection unit that selects and holds one or more of the key generation source information from the key generation source information received by the reception unit triggered by detection of the first external input;
A key generation unit that generates the key information based on the one or more key generation source information held by the key generation source information collection unit;
A key sharing device comprising:   The key sharing apparatus according to claim 2, wherein the first external input is a first physical input operation to the key sharing apparatus by a user. A second detection unit for detecting a second external input directly given to the key sharing device;
The key generation unit generates the key information based on the one or more key generation source information held by the key generation source information collection unit, triggered by detection of the second external input. The key sharing device according to claim 2 or 3, characterized by the above.   5. The key sharing apparatus according to claim 4, wherein the second external input is a physical second input operation performed on the key sharing apparatus by a user. This key sharing device can communicate wirelessly with other key sharing devices,
A key for confirming whether or not the key information generated by the key generation unit matches the key information generated by the other key sharing device by wirelessly communicating with the other key sharing device. The key sharing apparatus according to claim 2, further comprising a confirmation unit.   A key storage unit that stores the key information generated by the key generation unit in a storage medium when the key confirmation unit confirms that the two pieces of key information match; The key sharing apparatus according to claim 6. This key sharing device can communicate wirelessly with other key sharing devices,
The key sharing apparatus according to claim 2, further comprising a key distribution unit that transmits the key information generated by the key generation unit to the other key sharing apparatus. The key sharing device is capable of wireless communication with other second and third key sharing devices,
By wirelessly communicating with the second key sharing device, it is confirmed whether the key information generated by the key generation unit matches the key information generated by the second key sharing device. A key confirmation unit;
The key distribution unit
When the key confirmation unit confirms that the two pieces of key information match, the key information and the ID information of the second key sharing device are transmitted to the third key sharing device. The key sharing device according to claim 8, characterized in that it is characterized in that: A storage unit for storing, in a storage medium, first key information shared by the key sharing apparatus and the third key sharing apparatus;
The key distribution unit
When the key confirmation unit confirms that the two pieces of key information match, the key information and the ID information of the second key sharing device are encrypted with the first key information, The key sharing apparatus according to claim 9, wherein the key sharing apparatus transmits to a third key sharing apparatus. A key sharing apparatus including a key generation source information transmitting apparatus that is capable of wireless communication with another key sharing apparatus and transmits key generation source information that is a key information generation source:
A key generation source information generation unit for generating the key generation source information;
A transmission unit for transmitting the key generation source information generated by the key generation source information generation unit;
A first detection unit for detecting a first external input directly given to the key sharing device;
Key generation source information that selects and holds one or more of the key generation source information from the key generation source information generated by the key generation source information generation unit triggered by detection of the first external input With the collection department;
A key generation unit that generates the key information based on the one or more key generation source information held by the key generation source information collection unit;
A key sharing device comprising:   12. The key according to claim 11, further comprising a key management unit that associates the key information generated by the key generation unit with the ID information of the other key sharing device and stores it in a storage medium. Shared device. A key for confirming whether or not the key information generated by the key generation unit matches the key information generated by the other key sharing device by wirelessly communicating with the other key sharing device. A confirmation unit;
When the key confirmation unit confirms that the two pieces of key information match, the key management unit associates the key information with the ID information of the other key sharing device and stores it in the storage medium. The key sharing apparatus according to claim 12, wherein: The key sharing device can communicate with other first and second key sharing devices,
When it is confirmed that the key information generated by the first key sharing apparatus matches the key information generated by the second key sharing apparatus, the first key sharing apparatus A receiving unit for receiving key information and ID information of the second key sharing device;
A key management unit that stores the key information received by the receiving unit and the ID information of the second key sharing apparatus in association with each other;
The key sharing apparatus according to claim 11, further comprising: The key management unit
The first key information shared by the key sharing device and the first key sharing device and the ID information of the first key sharing device are stored in association with each other,
When the key information received by the receiving unit and the ID information of the second key sharing device are encrypted by the first key information, the key information and the ID of the second key sharing device 15. The key sharing apparatus according to claim 14, wherein information is decrypted with the first key information read from the storage medium and stored in the storage medium. A key sharing method in a key sharing apparatus capable of wireless communication with a key generation source information transmitting apparatus that transmits key generation source information as a key information generation source:
Receiving the key generation source information transmitted from the key generation source information transmission device;
A first detection step of detecting a first external input directly applied to the key sharing device;
A key generation source information collection step of selecting and holding one or more of the key generation source information from the key generation source information received in the reception step, triggered by detection of the first external input;
A key generation step of generating the key information based on the one or more key generation source information held in the key generation source information collection step;
A key sharing method characterized by including: In the key generation source information collecting step,
17. The key sharing method according to claim 16, wherein a predetermined number of the key generation source information received after the first external input is detected is selected and held. A second detection step of detecting a second external input directly applied to the key sharing device;
In the key generation step, triggered by the detection of the second external input, the one or more key generation source information held before the detection of the second external input in the key generation source information collection step The key sharing method according to claim 16 or 17, wherein the key information is generated based on the key information. The key sharing device is capable of wireless communication with other key sharing devices,
A key for confirming whether or not the key information generated in the key generation step matches the key information generated by the other key sharing device by wirelessly communicating with the other key sharing device. A confirmation step;
A storage step of storing the key information in a storage medium when it is confirmed in the key confirmation step that the two pieces of key information match;
The key sharing method according to claim 16, further comprising: The key sharing device is capable of wireless communication with other key sharing devices,
The key sharing method according to claim 16, further comprising a key distribution step of transmitting the key information generated in the key generation step to the other key sharing device. The key sharing device is capable of wireless communication with other second and third key sharing devices,
By wirelessly communicating with the second key sharing device, it is confirmed whether the key information generated in the key generation step matches the key information generated by the second key sharing device. Further including a key verification step,
In the key distribution step,
When it is confirmed in the key confirmation step that the two pieces of key information match, the key information and the ID information of the second key sharing device are transmitted to the third key sharing device. 21. The key sharing method according to claim 20, wherein the key sharing method is characterized. A storage step of storing, in a storage medium, first key information shared by the key sharing device and the third key sharing device;
The key distribution step includes:
A step of encrypting the key information and the ID information of the second key sharing device with the first key information when it is confirmed in the key confirmation step that the two pieces of key information match. ;
Transmitting the encrypted key information and the ID information of the second key sharing device to a third key sharing device;
The key sharing method according to claim 21, further comprising: A key sharing method in a key sharing apparatus including a key generation source information transmitting apparatus that is capable of wireless communication with another key sharing apparatus and transmits key generation source information that is a key information generation source.
A key generation source information generation step for generating the key generation source information;
A transmission step of transmitting the key generation source information generated in the key generation source information generation step;
A first detection step of detecting a first external input directly applied to the key sharing device;
Key generation source information that selects and holds one or more key generation source information among the key generation source information generated in the key generation source information generation step, triggered by detection of the first external input A collection step;
A key generation step of generating the key information based on the one or more key generation source information held in the key generation source information collection step;
A key sharing method characterized by including:   The key according to claim 23, further comprising a key management step of storing the key information generated in the key generation step and the ID information of the other key sharing device in association with each other and storing them in a storage medium. Sharing method. A key for confirming whether the key information generated by the key generation step matches the key information generated by the other key sharing apparatus by wirelessly communicating with the other key sharing apparatus. Further including a confirmation step,
In the key management step, when it is confirmed in the key confirmation step that the two pieces of key information match, the key information and the ID information of the other key sharing device are associated with each other and stored in the storage medium. The key sharing method according to claim 24, wherein: The key sharing device can communicate with other first and second key sharing devices,
When it is confirmed that the key information generated by the first key sharing apparatus matches the key information generated by the second key sharing apparatus, the first key sharing apparatus A receiving step of receiving key information and ID information of the second key sharing device;
A key management step of associating the key information received in the reception step with the ID information of the second key sharing device and storing the information in a storage medium;
The key sharing method according to claim 23, further comprising: The key management step includes:
Storing the first key information shared by the key sharing device and the first key sharing device in association with the ID information of the first key sharing device in a storage medium;
A step of reading out the first key information from the storage medium when the key information received in the receiving step and the ID information of the second key sharing device are encrypted by the first key information; When;
Decrypting the encrypted key information and the ID information of the second key sharing device with the read first key information;
Storing the combined key information and the ID information of the second key sharing apparatus in association with each other;
27. The key sharing method according to claim 26, further comprising:

Images