JP2019033454A - Data transmission system and data transmission device therefor, and data reception device - Google Patents

Abstract

To provide a data transfer system capable of enhancing security of data in one-way communication and a data transmission device therefor and a data reception device.SOLUTION: A data transmission device includes: a detection unit that is used in a state in which it is attached to or held at a specific portion of a user together with a data reception device and that detects dynamic movement applied to the data transmission device; a creation unit for creating an encryption key on the basis of a detection result of the dynamic movement applied to the data transmission device; an encryption processing unit for encrypting transmission data using the encryption key; and a packet transmission processing unit for storing the encrypted transmission data in a packet for one-way communication, and transmitting the packet.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a data transmission / reception technique based on one-way communication.

  Blood pressure monitors having a function of transferring blood pressure data to a user's portable information terminal have been put on the market. As the portable information terminal, for example, a smartphone, a tablet terminal, or a notebook personal computer is used. If such a function is used, the user can list his / her blood pressure measurement results under various situations on the portable information terminal. Also, near field communication technology, particularly Bluetooth (registered trademark) technology is typically used for transferring blood pressure data. In general, Bluetooth communication (connection) can be realized in a small scale and power saving as compared with WLAN (Wireless Local Area Network) communication. The version 4.0 of the Bluetooth specification is also called BLE (Bluetooth Low Energy), and can further reduce power consumption compared to the previous specification.

  In BLE, bi-directional communication called connection can be performed. However, for the connection, the operations imposed on the user for pairing are complicated, the communication procedure after pairing is complicated, the portable information terminal side needs to support BLE, only the portable information terminal In addition, blood pressure monitors also require high-performance hardware (processor, memory), high development / evaluation costs, large communication overhead, and inadequate for data transmission with small capacity.

  On the other hand, in BLE, one-way communication called advertising can also be performed. Japanese Patent Application Laid-Open No. 2004-133620 discloses a technique for transmitting arbitrary data including a blank portion of a data field of an advertisement packet.

Japanese Patent No. 5852620

  If blood pressure data is transmitted using advertising, pairing and subsequent complicated communication procedures become unnecessary, and the above problem is solved or reduced. In addition, when blood pressure data is transmitted using advertising, if blood pressure data is encrypted, leakage of blood pressure data to a third party can be prevented.

  However, in the above-described advertising, since bidirectional communication is not performed between the transmission-side device and the reception-side device, an encryption key cannot be passed between the transmission-side device and the reception-side device. For this reason, it is difficult for the receiving device to properly decrypt the encrypted blood pressure data.

  An object of the present invention is to provide a data transmission system, a data transmission apparatus, and a data reception apparatus that can enhance data security in one-way communication.

  According to a first aspect of the present invention, there is provided a data transmission system including a data transmission device and a data reception device that are used while being worn or grasped at a specific part of a user, wherein the data transmission device is the data transmission device. A detection unit that detects a dynamic motion applied to the data transmission device, a creation unit that generates a first encryption key based on a detection result of the dynamic motion applied to the data transmission device, and the first encryption An encryption processing unit that encrypts transmission data using a key, a packet transmission processing unit that stores the encrypted transmission data in a packet for one-way communication, and transmits the packet, and the data receiving device includes: A detecting unit for detecting a dynamic motion applied to the data receiving device; and a generating unit for generating a second encryption key based on a detection result of the dynamic motion applied to the data receiving device; A packet reception processing unit that receives a packet for one-way communication in which the encrypted transmission data is transmitted, transmitted from the data transmission device, and transmission data stored in the received packet. A data transmission system comprising a decryption processing unit for decrypting using the second encryption key.

  According to the first aspect of the present invention, the data transmission device generates the same encryption key as the encryption key generated by the data reception device based on the detection result of the dynamic motion applied to the data transmission device. can do. As a result, the data transmitting apparatus can encrypt the transmission data using the same encryption key as the encryption key used for decrypting the transmission data in the data receiving apparatus. The data receiving device can create the same encryption key as the encryption key created by the data transmitting device based on the detection result of the dynamic motion applied to the data receiving device. As a result, even if the encryption key cannot be passed between the data transmission device and the data reception device, the data reception device can decrypt the transmission data encrypted by the data transmission device.

  According to a second aspect of the present invention, there is provided a data transmission device used in a state of being attached or grasped to a specific part of a user together with the data reception device, and detecting a dynamic motion applied to the data transmission device. A detection unit; a creation unit that creates an encryption key based on a detection result of a dynamic motion applied to the data transmission device; an encryption processing unit that encrypts transmission data using the encryption key; The data transmission device includes a packet transmission processing unit that stores encrypted transmission data in a packet for one-way communication and transmits the packet.

  According to the second aspect of the present invention, the data transmission device generates the same encryption key as the encryption key generated by the data reception device based on the detection result of the dynamic motion applied to the data transmission device. can do. As a result, the data transmitting apparatus can encrypt the transmission data using the same encryption key as the encryption key used for decrypting the transmission data in the data receiving apparatus.

  According to a third aspect of the present invention, in the data transmission device according to the second aspect, the creation unit uses a detection result relating to a predetermined one direction based on a dynamic motion applied to the data transmission device. The encryption key is created.

  According to the third aspect of the present invention, the data transmission device uses the detection result for a predetermined one direction to obtain the encryption key even if the dynamic motion applied to the data transmission device is complicated. Can be created. As a result, for example, when the user has the same dynamic movement with the data transmission device and the data reception device, the data transmission device receives the data received from the encryption key created by the data transmission device. The possibility of being different from the encryption key created by the apparatus can be reduced.

  According to a fourth aspect of the present invention, in the data transmission device according to the second aspect, the creation unit compares the data amount of the detection result with a reference value, and the data amount of the detection result is less than the reference value. The encryption key is created using the detection result based on the comparison result indicating the above.

  According to the fourth aspect of the present invention, the data transmitting device can create an encryption key based on a dynamic movement applied to an uncomplicated data transmitting device whose data amount is less than a reference value. it can. As a result, for example, when the user has the same dynamic movement with the data transmission device and the data reception device, the data transmission device receives the data received from the encryption key created by the data transmission device. The possibility of being different from the encryption key created by the apparatus can be reduced.

  According to a fifth aspect of the present invention, in the data transmission device according to the second aspect, the creation unit creates the encryption key based on an operation instructing the creation of the encryption key by the user. It is.

  According to the fifth aspect of the present invention, the data transmitting apparatus can create an encryption key by using an operation for instructing the user to create an encryption key as a trigger. For this reason, the data transmission device can prevent the user from creating an encryption key at a timing when the user does not want to create the encryption key. As a result, for example, when the user gives the data transmitting device and the data receiving device an operation for instructing the creation of an encryption key at the same time, the data transmitting device can use the same encryption key as the encryption key created by the data receiving device. You can create a key.

  According to a sixth aspect of the present invention, there is provided a data receiving device used in a state where the data transmitting device is worn or gripped on a specific part of a user, and detects a dynamic motion applied to the data receiving device. A detection unit, a creation unit that creates an encryption key based on a detection result of a dynamic motion applied to the data reception device, and encrypted transmission data transmitted from the data transmission device are stored. A data reception apparatus comprising: a packet reception processing unit that receives a one-way communication packet; and a decryption processing unit that decrypts transmission data stored in the received packet using the encryption key.

  According to the sixth aspect of the present invention, the data receiving device creates the same encryption key as the encryption key created by the data transmitting device based on the detection result of the dynamic motion applied to the data receiving device. can do. As a result, even if the encryption key cannot be passed between the data transmission device and the data reception device, the data reception device can decrypt the transmission data encrypted by the data transmission device.

  According to a seventh aspect of the present invention, in the data reception device according to the sixth aspect, the creation unit uses a detection result relating to a predetermined one direction based on a dynamic motion applied to the data reception device. The encryption key is created.

  According to the seventh aspect of the present invention, even if the dynamic movement applied to the data receiving apparatus is complicated, the data receiving apparatus uses the detection result relating to a predetermined one direction to obtain the encryption key. Can be created. As a result, for example, when the user has the same dynamic movement with the data transmission device and the data reception device, the data reception device uses the encryption key created by the data reception device to transmit the data. The possibility of being different from the encryption key created by the apparatus can be reduced.

  According to an eighth aspect of the present invention, in the data reception device according to the sixth aspect, the creation unit compares the data amount of the detection result with a reference value, and the data amount of the detection result is less than the reference value. The encryption key is created using the detection result based on the comparison result indicating the above.

  According to the eighth aspect of the present invention, the data receiving device can create an encryption key based on dynamic movement applied to an uncomplicated data receiving device whose data amount is less than a reference value. it can. As a result, for example, when the user has the same dynamic movement with the data transmission device and the data reception device, the data reception device uses the encryption key created by the data reception device to transmit the data. The possibility of being different from the encryption key created by the apparatus can be reduced.

  According to a ninth aspect of the present invention, in the data reception device according to the sixth aspect, the creation unit creates the encryption key based on an operation instructing the user to create the encryption key. It is.

  According to the ninth aspect of the present invention, the data receiving apparatus can create an encryption key using an operation instructing the user to create an encryption key as a trigger. For this reason, the data receiving device can prevent the user from creating an encryption key at a timing when the user does not want to create the encryption key. As a result, for example, when the user gives the data transmitting apparatus and the data receiving apparatus an operation for instructing the creation of an encryption key at the same time, the data receiving apparatus can use the same encryption key as the encryption key created by the data transmitting apparatus. You can create a key.

  ADVANTAGE OF THE INVENTION According to this invention, the technique which improves the security of the data in one-way communication can be provided.

The block diagram which shows the example of application of the data transmitter which concerns on embodiment, and a data receiver. 1 is a block diagram illustrating a data transmission system including a data transmission device and a data reception device according to an embodiment. 1 is a block diagram illustrating a hardware configuration of a data transmission device according to an embodiment. FIG. 2 is a block diagram illustrating a software configuration of the data transmission apparatus according to the embodiment. FIG. 3 is a block diagram illustrating a hardware configuration of the data receiving apparatus according to the embodiment. The block diagram which illustrates the software composition of the data receiving device concerning an embodiment. Explanatory drawing of the advertising performed in BLE. The figure which illustrates the data structure of the packet transmitted / received in BLE. The figure which illustrates the data structure of the PDU field of an advertisement packet. 6 is a flowchart illustrating the operation of the data transmission apparatus according to the embodiment. The flowchart which illustrates operation | movement of the data receiver which concerns on embodiment.

  Hereinafter, an embodiment according to an aspect of the present invention (hereinafter, also referred to as “this embodiment”) will be described with reference to the drawings.

Hereinafter, elements that are the same as or similar to elements already described are denoted by the same or similar reference numerals, and redundant descriptions are basically omitted.
§1 Application example
First, an application example of the present invention will be described with reference to FIG. FIG. 1 schematically illustrates an application example of the data transmission device 100 and the data reception device 200 according to the present embodiment. The data transmission device 100 and the data reception device 200 are used in a state of being worn or gripped on a specific part of the user. Thereby, the same dynamic movement is added to the data transmission apparatus 100 and the data reception apparatus 200 according to the movement of the specific part of the user.

The data transmission device 100 is a sensor device that routinely measures an amount related to a user's biological information or activity information. The data transmission device 100 is a device capable of one-way communication such as BLE.
The data transmission device 100 includes a creation unit 1111, an encryption processing unit 1112, and a packet transmission processing unit 1113.

The creating unit 1111 creates an encryption key based on the detection result of the dynamic motion applied to the data transmitting apparatus 100.
The encryption processing unit 1112 encrypts the measurement data indicating the user's biometric information or activity information using the encryption key created by the creation unit 1111.
The packet transmission processing unit 1113 stores the encrypted transmission data in the advertisement packet in BLE and transmits the advertisement packet.
Thereby, the data transmission apparatus 100 can transmit an advertisement packet using the one-way communication of BLE.

  The data receiving device 200 is a portable information terminal such as a smartphone or a tablet. The data receiving device 200 is a device capable of BLE wireless communication. The data reception device 200 receives an advertisement packet storing encrypted measurement data from the data transmission device 100.

The creation unit 2111 creates an encryption key based on the detection result of the dynamic motion applied to the data reception device 200.
The decryption processing unit 2112 decrypts the encrypted measurement data stored in the advertisement packet using the encryption key created by the creation unit 2111.
The data processing unit 2113 transmits the decoded measurement data to another device.

  As described above, according to the present embodiment, the data transmission device 100 and the data reception device 200 can increase data security in one-way communication.

§2 Configuration example
<Data transmission system>
An example of the data transmission system according to the present embodiment will be described with reference to FIG. FIG. 2 is a block diagram illustrating a data transmission system including the data transmission device 100 and the data reception device 200 according to this embodiment. The data transmission device 100 and the data reception device 200 are used in a state of being worn or gripped on a specific part of the user. Thereby, the same dynamic movement is added to the data transmission apparatus 100 and the data reception apparatus 200 according to the movement of the specific part of the user.

  The data transmission device 100 is a sensor device that routinely measures the amount related to the user's biological information or activity information, such as a sphygmomanometer, thermometer, activity meter, pedometer, body composition meter, and weight scale. The data transmission device 100 is a device capable of one-way communication such as BLE. In the example of FIG. 2, the appearance of a wristwatch-type wearable sphygmomanometer is shown as the data transmission device 100, but the data transmission device 100 is not limited to this, and may be a stationary sphygmomanometer, It may be a sensor device that measures quantities related to other biological information or activity information. The data transmission device 100 transmits measurement data indicating biological information or activity information to the data reception device 200 by one-way communication. The measurement data is sometimes referred to as transmission data. The data transmission device 100 is used together with the data reception device 200 in a state where the data transmission device 100 is worn or gripped on a specific part of the user. Thereby, the data transmitter 100 is subjected to the same dynamic movement as the dynamic movement applied to the data receiver 200 according to the movement of the specific part of the user.

  The data receiving device 200 is a portable information terminal such as a smartphone or a tablet. The data receiving apparatus 200 is an apparatus capable of wireless communication such as BLE, mobile communication (3G, 4G, etc.) and WLAN. The data receiving device 200 is used together with the data transmitting device 100 in a state where the data receiving device 200 is worn or gripped on a specific part of the user. The data receiver 200 is subjected to the same dynamic movement as the dynamic movement applied to the data transmitter 100 according to the movement of the specific part of the user.

  The data receiving device 200 receives the measurement data from the data transmitting device 100 by BLE. The data receiving device 200 transmits the measurement data to the server 300 via the network. The data receiving apparatus 200 uses, for example, mobile communication or WLAN.

  The server 300 corresponds to a database that manages biological information or activity information of many users based on measurement data.

<Data transmission device>
[Hardware configuration]
Next, an example of a hardware configuration of the data transmission device 100 according to the present embodiment will be described with reference to FIG. FIG. 3 schematically illustrates an example of a hardware configuration of the data transmission device 100.

  As illustrated in FIG. 3, the data transmission device 100 includes a control unit 111, a storage unit 112, a communication interface 113, an input device 114, an output device 115, an external interface 116, a battery 117, and a biosensor 118. And a motion sensor 119 are electrically connected to each other. In FIG. 3, the communication interface and the external interface are described as “communication I / F” and “external I / F”, respectively.

  The control unit 111 includes a CPU (Central Processing Unit), a RAM (Random Access Memory), a ROM (Read Only Memory), and the like. The CPU is an example of a processor. The CPU expands the program stored in the storage unit 112 in the RAM. Then, when the CPU interprets and executes this program, the control unit 111 can execute various information processing, for example, processing of functional blocks described in the item of software configuration.

  The storage unit 112 is a so-called auxiliary storage device, and may be, for example, a semiconductor memory such as a built-in or external flash memory, an HDD (Hard Disk Drive), or an SSD (Solid State Drive). The storage unit 112 stores a program executed by the control unit 111, data used by the control unit 111, and the like. The program can also be referred to as an instruction for operating the control unit 111.

  The communication interface 113 includes at least a wireless module that transmits (advertises) a one-way communication packet such as BLE. The BLE advertising will be described later. The wireless module receives from the control unit 111 an advertisement packet in BLE in which the encrypted measurement data is stored. The encryption of the measurement data will be described later. The wireless module transmits an advertisement packet. The wireless module is sometimes referred to as a transmission unit. Note that BLE may be replaced in the future by other communication standards capable of low power consumption and one-way communication. In that case, the following description may be read as appropriate.

  The input device 114 is a device for receiving user inputs such as a touch screen, buttons, and switches.

  The output device 115 is a device for outputting, for example, a display or a speaker.

  The external interface 116 is a USB (Universal Serial Bus) port, a memory card slot, or the like, and is an interface for connecting to an external device.

  The battery 117 supplies a power supply voltage for the data transmission device 100. The battery 117 may be replaceable. Note that the data transmitting apparatus 100 may be connectable to a commercial power supply via an AC (Alternating Current) adapter. In this case, the battery 117 can be omitted.

  The biometric sensor 118 obtains measurement data by measuring a quantity related to the user's biometric information. The operation of the biosensor 118 is controlled by, for example, a sensor control unit (not shown). The measurement data is stored in the storage unit 112 in association with the date / time data. The biosensor 118 typically includes a blood pressure sensor that obtains blood pressure data by measuring a quantity related to the blood pressure of the user. In this case, the measurement data includes blood pressure data. The blood pressure data may include, for example, values of systolic blood pressure SBP (Systemic Blood Pressure) and diastolic blood pressure DBP (Diastrotic Blood Pressure), and pulse rate, but is not limited thereto. In addition, the measurement data can include electrocardiogram data, pulse wave data, body temperature data, and the like.

  The blood pressure sensor can include a blood pressure sensor (hereinafter also referred to as a continuous blood pressure sensor) that can continuously measure an amount related to the user's blood pressure for each beat. The continuous blood pressure sensor may continuously measure an amount related to a user's blood pressure from a pulse wave transit time (PTT), or may realize continuous measurement by a tonometry method or other techniques.

  The blood pressure sensor is a blood pressure sensor (hereinafter referred to as a discontinuous blood pressure sensor) that performs a measurement operation in place of or in addition to a continuous blood pressure sensor or according to a user operation or when a preset measurement time is reached. (Also referred to as a sensor). The discontinuous blood pressure sensor measures, for example, an amount related to a user's blood pressure using a cuff as a pressure sensor (oscillometric method).

  Discontinuous blood pressure sensors (particularly blood pressure sensors using the oscillometric method) tend to have higher measurement accuracy than continuous blood pressure sensors. Therefore, the blood pressure sensor is replaced with a continuous blood pressure sensor, for example, triggered by the fact that some condition is satisfied (for example, the amount related to the user's blood pressure measured by the continuous blood pressure sensor indicates a predetermined state). By operating a discontinuous blood pressure sensor, the amount related to blood pressure may be measured with higher accuracy.

  The motion sensor 119 can be, for example, an acceleration sensor or a gyro sensor. The motion sensor 119 obtains a detection result indicating triaxial acceleration / angular velocity data (hereinafter also referred to as motion data) by detecting the acceleration / angular velocity received by the motion sensor 119. As described above, the motion sensor 119 detects a dynamic motion applied to the data transmission device 100. The motion sensor 119 is sometimes referred to as a detection unit. The operation of the motion sensor 119 is controlled by, for example, a sensor control unit (not shown). As will be described later, the detection result is used to create an encryption key for encrypting the measurement data.

  It should be noted that regarding the specific hardware configuration of the data transmission device 100, the components can be omitted, replaced, and added as appropriate according to the embodiment. For example, the control unit 111 may include a plurality of processors. The data transmission device 100 may be composed of a plurality of sensor devices.

<Data transmission device>
Software configuration
Next, an example of a software configuration of the data transmission device 100 according to the present embodiment will be described with reference to FIG. FIG. 4 schematically illustrates an example of a software configuration of the data transmission device 100.
The control unit 111 includes a creation unit 1111, an encryption processing unit 1112, and a packet transmission processing unit 1113.

The creation unit 1111 will be described.
The creation unit 1111 creates an encryption key based on the detection result of the dynamic motion applied to the data transmission device 100 as illustrated below. For example, the creation unit 1111 creates an encryption key based on an operation instructing the user to create an encryption key. For example, the data transmission device 100 is mounted on the user's wrist and moves according to the user's movement. The creation unit 1111 receives the detection result of the dynamic motion applied to the data transmission device 100 from the motion sensor 119 in time series. In one example, the creation unit 1111 receives, from the motion sensor 119, the detection result of the dynamic motion applied to the data transmission device 100 during a predetermined time after detecting an instruction related to the creation start of the encryption key by the user. Instead, in another example, the creation unit 1111 is added to the data transmission apparatus 100 after detecting an instruction regarding the start of encryption key creation by the user until detecting an instruction regarding the end of creation of the encryption key by the user. Alternatively, the detection result of the dynamic motion may be received from the motion sensor 119. The creation unit 1111 creates an encryption key using a detection result in time series according to a predetermined algorithm.
The creation unit 1111 outputs the encryption key to the encryption processing unit 1112.

The encryption processing unit 1112 will be described.
The encryption processing unit 1112 encrypts the measurement data using the encryption key as exemplified below. The encryption processing unit 1112 receives the encryption key from the creation unit 1111. Also, the encryption processing unit 1112 acquires measurement data from the storage unit 112. The encryption processing unit 1112 encrypts the measurement data using the encryption key created by the data transmission device 100 according to a predetermined algorithm. As an encryption method, for example, the transmission side and the reception side have a common key, and the transmission side replaces the plaintext with the ciphertext using the common key and transmits the ciphertext, and the reception side receives the ciphertext using the common key. A common key method for decryption is used. As an encryption method, any method may be used as long as the transmission side and the reception side use a common key.
The encryption processing unit 1112 outputs the encrypted measurement data to the packet transmission processing unit 1113.

The packet transmission processing unit 1113 will be described.
The packet transmission processing unit 1113 stores the encrypted measurement data in the advertisement packet in BLE and transmits the advertisement packet. The packet transmission processing unit 1113 transmits an advertisement packet via the communication interface 113.

<Data receiving device>
[Hardware configuration]
Next, an example of a hardware configuration of the data receiving apparatus 200 according to the present embodiment will be described with reference to FIG. FIG. 5 schematically shows an example of the hardware configuration of the data receiving apparatus 200.

  As shown in FIG. 5, the data reception device 200 includes a control unit 211, a storage unit 212, a communication interface 213, an input device 214, an output device 215, an external interface 216, and a motion sensor 217. Connected to the computer. In FIG. 5, the communication interface and the external interface are described as “communication I / F” and “external I / F”, respectively.

  The control unit 211 includes a CPU, RAM, ROM, and the like. The CPU is an example of a processor. The CPU expands the program stored in the storage unit 212 in the RAM. When the CPU interprets and executes this program, the control unit 211 can execute various information processing, for example, processing of functional blocks described in the item of software configuration.

  The storage unit 212 is a so-called auxiliary storage device, and can be, for example, a semiconductor memory such as a built-in or external flash memory. The storage unit 212 stores a program executed by the control unit 211, data used by the control unit 211, and the like. The program can also be referred to as an instruction for operating the control unit 211.

  The communication interface 213 mainly includes various wireless communication modules for BLE, mobile communication (3G, 4G, etc.) and WLAN. Note that the communication interface 213 may further include a wired communication module such as a wired LAN (Local Area Network) module. The communication module for BLE receives the advertisement packet transmitted from the data transmitting apparatus 100 and storing the encrypted measurement data. The communication module for BLE is sometimes called a packet reception processing unit.

  The input device 214 is a device for accepting user input such as a touch screen.

  The output device 215 is a device for outputting, for example, a display or a speaker.

  The external interface 216 is a USB port, a memory card slot, or the like, and is an interface for connecting to an external device.

  The motion sensor 217 can be, for example, an acceleration sensor or a gyro sensor, similar to the motion sensor 119 described above. The motion sensor 217 obtains a detection result indicating triaxial acceleration / angular velocity data by detecting the acceleration / angular velocity received by the motion sensor 217. As described above, the motion sensor 217 detects a dynamic motion applied to the data receiving apparatus 200. The motion sensor 217 is sometimes referred to as a detection unit. The operation of the motion sensor 217 is controlled by, for example, a sensor control unit (not shown). As will be described later, the detection result is used to create an encryption key for decrypting the encrypted measurement data.

  It should be noted that regarding the specific hardware configuration of the data receiving apparatus 200, the components can be omitted, replaced, and added as appropriate according to the embodiment. For example, the control unit 211 may include a plurality of processors.

<Data receiving device>
Software configuration
Next, an example of a software configuration of the data receiving apparatus 200 according to the present embodiment will be described using FIG. FIG. 6 schematically shows an example of the software configuration of the data receiving apparatus 200.
The control unit 211 includes a creation unit 2111, a decryption processing unit 2112, and a data processing unit 2113.

The creation unit 2111 creates an encryption key based on the detection result of the dynamic motion applied to the data reception device 200 as illustrated below. For example, the creation unit 2111 creates an encryption key based on an operation instructing the user to create an encryption key. For example, the data receiving apparatus 200 moves with the data transmitting apparatus 100 according to the movement of the user by being held by the user's hand wearing the data transmitting apparatus 100. The creation unit 2111 receives the detection result of the dynamic motion applied to the data receiving device 200 from the motion sensor 217 in time series. In one example, the creation unit 2111 receives, from the motion sensor 217, the detection result of the dynamic motion applied to the data reception device 200 during a predetermined time after detecting an instruction related to the start of creation of the encryption key by the user. Instead, in another example, the creation unit 2111 is added to the data reception device 200 after detecting an instruction related to the start of encryption key creation by the user until detecting an instruction related to the end of creation of the encryption key by the user. Alternatively, the detection result of the dynamic motion may be received from the motion sensor 217. The creation unit 2111 creates an encryption key using a detection result in time series according to a predetermined algorithm.
The creation unit 2111 outputs the encryption key to the decryption processing unit 2112.

The decoding processing unit 2112 will be described.
The decryption processing unit 2112 decrypts the measurement data using the encryption key created by the data receiving device 200 as exemplified below. The decryption processing unit 2112 receives the encryption key from the creation unit 2111. In addition, the decryption processing unit 2112 receives from the communication interface 213 an advertisement packet in which encrypted measurement data is stored. The decryption processing unit 2112 decrypts the encrypted measurement data stored in the advertisement packet using the encryption key created by the data reception device 200 according to a predetermined algorithm.
The decryption processing unit 2112 outputs the decrypted measurement data to the data processing unit 2113.

The data processing unit 2113 will be described.
The data processing unit 2113 stores the measurement data in the storage unit 212. Furthermore, the data processing unit 2113 transmits measurement data to the server 300 via the network according to a predetermined communication protocol.

[Advertisement of BLE]
The BLE advertisement will be schematically described.
In the passive scan method employed in BLE, as illustrated in FIG. 7, the new node periodically transmits an advertisement packet informing its existence. This new node can save power consumption by entering a low power consumption sleep state between the transmission of one advertisement packet and the next transmission. Further, since the advertisement packet receiving side also operates intermittently, power consumption associated with transmission / reception of the advertisement packet is very small.

  FIG. 8 shows the basic structure of a BLE wireless communication packet. The BLE wireless communication packet includes a 1-byte preamble, a 4-byte access address, a 2-39-byte (variable) protocol data unit (PDU: Protocol Data Unit), and a 3-byte cyclic redundancy checksum (CRC: Cyclic). Redundancy Checksum). The length of the BLE wireless communication packet depends on the length of the PDU and is 10 to 47 bytes. A 10-byte BLE wireless communication packet (a PDU is 2 bytes) is also called an Empty PDU packet and is periodically exchanged between the master and the slave.

  The preamble field is prepared for synchronization of BLE wireless communication and stores repetition of “01” or “10”. The access address stores a fixed numerical value in the advertising channel and a random access address in the data channel. In the present embodiment, an advertisement packet that is a BLE wireless communication packet transmitted on the advertising channel is targeted. The CRC field is used for detection of reception errors. The CRC calculation range is only the PDU field.

  Next, the PDU field of the advertisement packet will be described with reference to FIG. Note that the PDU field of the data communication packet, which is a BLE wireless communication packet transmitted on the data channel, has a data structure different from that in FIG. 9, but a description thereof is omitted because the data communication packet is not targeted in this embodiment.

  The PDU field of the advertisement packet includes a 2-byte header and a 0-37 byte (variable) payload. The header further includes a 4-bit PDU Type field, a 2-bit unused field, a 1-bit TxAdd field, a 1-bit RxAdd field, a 6-bit Length field, and a 2-bit unused field. Including.

  A value indicating the type of this PDU is stored in the PDU Type field. Some values such as “connectable advertising” and “non-connecting advertising” are defined. A flag indicating whether or not there is a transmission address in the payload is stored in the TxAdd field. Similarly, a flag indicating whether or not there is a reception address in the payload is stored in the RxAdd field. In the Length field, a value indicating the byte size of the payload is stored.

  Arbitrary data can be stored in the payload. Therefore, the data transmission device 100 stores the measurement data and date / time data in the payload using a predetermined data structure. This data structure includes, for example, an identifier that represents a user, an identifier that represents the data transmission device 100 that is the transmission source device, an identifier that represents the data reception device 200 that is the destination device, date data, and systolic blood pressure SBP associated with the date data. One or more types of measurement data such as diastolic blood pressure DBP, pulse rate, activity amount, and the like may be included.

§3 Example of operation
<Data transmission device>
Next, an operation example of the data transmission apparatus 100 will be described with reference to FIG. FIG. 10 is a flowchart illustrating an example of the operation of the data transmission device 100. Here, the data transmission device 100 is used in a state of being attached or grasped to a specific part of the user together with the data reception device 200. Thereby, the data transmission apparatus 100 is assumed to be subjected to the same dynamic movement as the dynamic movement applied to the data reception apparatus 200 according to the movement of the specific part of the user. For example, it is assumed that the data transmission device 100 is worn on the user's wrist. Note that the processing procedure described below is merely an example, and each processing may be changed as much as possible. Further, in the processing procedure described below, steps can be omitted, replaced, and added as appropriate according to the embodiment.

  As described above, the creating unit 1111 creates an encryption key based on the detection result of the dynamic motion applied to the data transmitting apparatus 100 (step S101).

  The encryption processing unit 1112 acquires measurement data from the storage unit 112 (step S102).

  As described above, the encryption processing unit 1112 encrypts the measurement data using the encryption key created by the data transmission device 100 (step S103).

  As described above, the packet transmission processing unit 1113 stores the encrypted measurement data in the advertisement packet, and transmits the advertisement packet (step S104).

  Through the above processing, the data transmission device 100 can transmit an advertisement packet storing the encrypted measurement data to the data reception device 200.

  In step S101, the creation unit 1111 creates an encryption key using a detection result regarding a predetermined direction based on a dynamic motion applied to the data transmission device 100, as exemplified below. It may be.

  In this example, the creation unit 1111 extracts a detection result along a time series of components in a predetermined direction from a detection result along the time series. The predetermined direction is, for example, the vertical direction, but may be other directions. The creation unit 1111 creates an encryption key using a predetermined one-way component detection result. In one example, the creation unit 1111 can create an encryption key using a detection result of a predetermined component in one direction as it is according to a predetermined algorithm. Instead, in another example, the creation unit 1111 detects a predetermined number of vibrations in one direction from a detection result of a predetermined one-way component, and creates an encryption key based on the number of vibrations. be able to.

  With this example, the creation unit 1111 can create an encryption key using a simplified detection result.

  In step S101, the creation unit 1111 compares the data amount of the detection result of the dynamic motion applied to the data transmission device 100 with a reference value, as illustrated below, and the data amount of the detection result is the reference value. The encryption key may be created using the detection result based on the comparison result indicating that the value is less than the value.

  In this example, the creation unit 1111 compares the detection result along the time series with the reference value. The reference value is appropriately set so that the data amount of the detection result does not become too large. The reason is that as the amount of data of the detection result increases, there is a higher possibility that the encryption key created by the data transmission device 100 will not match the encryption key created by the data reception device 200. The creation unit 1111 creates an encryption key using the detection result based on the comparison result indicating that the data amount of the detection result is less than the reference value. On the other hand, the creation unit 1111 discards the detection result based on the comparison result indicating that the data amount of the detection result is equal to or greater than the reference value. The creation unit 1111 controls the output device 115 to output a message that prompts the user to create the encryption key again. As a result, the creation unit 1111 receives the detection result of the dynamic motion newly added to the data transmission device 100 from the motion sensor 119. The creation unit 1111 compares the data amount of the new detection result with the reference value, and performs the same processing as described above according to the comparison result.

  According to this example, the creation unit 1111 can create an encryption key using a detection result in which the amount of data does not become too large.

<Data receiving device>
Next, an operation example of the data receiving apparatus 200 will be described with reference to FIG. FIG. 11 is a flowchart illustrating an example of the operation of the data receiving apparatus 200. Here, the data receiving device 200 is used together with the data transmitting device 100 in a state of being worn or held at a specific part of the user. Thereby, the data receiving apparatus 200 is assumed to be subjected to the same dynamic movement as the dynamic movement applied to the data transmitting apparatus 100 according to the movement of the specific part of the user. For example, it is assumed that the data receiving device 200 is held by the user's hand wearing the data transmitting device 100. Thereby, the dynamic movement applied to the data receiving apparatus 200 in accordance with the movement of the user's hand is the same as the dynamic movement applied to the data transmitting apparatus 100. Note that the processing procedure described below is merely an example, and each processing may be changed as much as possible. Further, in the processing procedure described below, steps can be omitted, replaced, and added as appropriate according to the embodiment.

  As described above, the creating unit 2111 creates an encryption key based on the detection result of the dynamic motion applied to the data receiving device 200 (step S201).

  As described above, the decryption processing unit 2112 receives the advertisement packet storing the encrypted measurement data from the communication interface 213 (step S202).

  As described above, the decryption processing unit 2112 decrypts the encrypted measurement data stored in the advertisement packet by using the encryption key created by the data reception device 200 (step S203).

  Through the above processing, the data receiving apparatus 200 can use the decoded measurement data.

  In step S201, the creation unit 2111 creates an encryption key using a detection result related to a predetermined direction based on a dynamic motion applied to the data reception device 200, as illustrated below. It may be.

  In this example, the creation unit 2111 extracts a detection result along a time series of components in a predetermined direction from a detection result along a time series. The predetermined direction is, for example, the vertical direction, but may be other directions. The creation unit 2111 creates an encryption key using a predetermined one-way component detection result. In one example, the creation unit 2111 can create an encryption key using the detection result of a predetermined component in one direction as it is according to a predetermined algorithm. Instead, in another example, the creating unit 2111 detects a predetermined number of vibrations in one direction from a detection result of a predetermined one-way component, and creates an encryption key based on the number of vibrations. be able to.

  With this example, the creation unit 2111 can create an encryption key using a simplified detection result.

  In step S201, the creation unit 2111 compares the data amount of the detection result of the dynamic motion applied to the data receiving apparatus 200 with the reference value, and the data amount of the detection result is the reference value, as illustrated below. The encryption key may be created using the detection result based on the comparison result indicating that the value is less than the value.

  In this example, the creation unit 2111 compares the detection result along the time series with the reference value. The reference value is appropriately set so that the data amount of the detection result does not become too large. The reason is that as the amount of data of the detection result increases, there is a higher possibility that the encryption key created by the data reception device 200 will not match the encryption key created by the data transmission device 100. The creation unit 2111 creates an encryption key using the detection result based on the comparison result indicating that the data amount of the detection result is less than the reference value. On the other hand, the creation unit 2111 discards the detection result based on the comparison result indicating that the data amount of the detection result is equal to or greater than the reference value. The creation unit 2111 controls the output device 215 to output a message that prompts the user to create the encryption key again. Accordingly, the creation unit 2111 receives from the motion sensor 217 the detection result of the dynamic motion newly added to the data receiving device 200. The creation unit 2111 compares the data amount of the new detection result with the reference value, and performs the same processing as described above according to the comparison result.

  In this example, the creation unit 2111 can create an encryption key using a detection result in which the amount of data does not become too large.

[Action / Effect]
As described above, in the present embodiment, the data transmission system includes the data transmission device 100 and the data reception device 200 that are used in a state of being attached to or grasped by a specific part of the user. The data transmission device 100 creates an encryption key based on the detection result of the dynamic motion applied to the data transmission device 100, encrypts the transmission data using the encryption key, and advertises the encrypted transmission data. Store in packet and send advertisement packet. The data reception device 200 creates an encryption key based on the dynamic motion detection result applied to the data reception device 200, and uses the encrypted transmission data stored in the advertisement packet with the encryption key. To decrypt.

  Thereby, the data transmitting apparatus 100 can create the same encryption key as the encryption key created by the data receiving apparatus 200 based on the detection result of the dynamic motion applied to the data transmitting apparatus 100. As a result, the data transmission device 100 can encrypt the transmission data using the same encryption key as the encryption key used for decrypting the transmission data in the data reception device 200. The data reception device 200 can create the same encryption key as the encryption key created by the data transmission device 100 based on the detection result of the dynamic motion applied to the data reception device 200. As a result, even if the encryption key cannot be passed between the data transmission device 100 and the data reception device 200, the data reception device 200 can decrypt the transmission data encrypted by the data transmission device 100. it can.

  Furthermore, in the present embodiment, the data transmission device 100 creates an encryption key using a detection result regarding a predetermined one direction based on a dynamic motion applied to the data transmission device 100.

  Thereby, even if the dynamic movement applied to the data transmitting apparatus 100 is complicated, the data transmitting apparatus 100 can create an encryption key using a detection result regarding a predetermined one direction. As a result, for example, when the user gives the same dynamic movement to the data transmission device 100 and the data reception device 200, the data transmission device 100 is encrypted by the data transmission device 100. The possibility that the key is different from the encryption key created by the data receiving apparatus 200 can be reduced.

  Furthermore, in this embodiment, the data transmission device 100 compares the data amount of the detection result of the dynamic motion applied to the data transmission device 100 with the reference value, and the data amount of the detection result is less than the reference value. An encryption key is created using the detection result based on the comparison result indicating.

  As a result, the data transmission device 100 can create an encryption key based on the dynamic movement applied to the data transmission device 100 that is not complicated so that the data amount is less than the reference value. As a result, for example, when the user gives the same dynamic movement to the data transmission device 100 and the data reception device 200, the data transmission device 100 is encrypted by the data transmission device 100. The possibility that the key is different from the encryption key created by the data receiving apparatus 200 can be reduced.

  Furthermore, in this embodiment, the data transmission device 100 creates an encryption key based on an operation instructing the user to create an encryption key.

Thereby, the data transmission device 100 can create an encryption key triggered by an operation instructing the user to create an encryption key. For this reason, the data transmission device 100 can prevent the user from creating an encryption key at a timing when the user does not want to create the encryption key. As a result, for example, when the user gives the data transmission apparatus 100 and the data reception apparatus 200 an operation for instructing the creation of an encryption key at the same time, the data transmission apparatus 100 creates the encryption key generated by the data reception apparatus 200. The same encryption key can be created.
0 can decrypt the measurement data encrypted by the data transmission device 100.

  Further, in the present embodiment, the data reception device 200 creates an encryption key using a detection result regarding a predetermined direction based on a dynamic motion applied to the data reception device 200.

  As a result, even if the dynamic movement applied to the data receiving apparatus 200 is complicated, the data receiving apparatus 200 can create an encryption key using a detection result regarding a predetermined one direction. As a result, for example, when the user gives the same dynamic movement to the data transmission apparatus 100 and the data reception apparatus 200, the data reception apparatus 200 is encrypted by the data reception apparatus 200. The possibility that the key is different from the encryption key created by the data transmission device 100 can be reduced.

  Furthermore, in the present embodiment, the data reception device 200 compares the data amount of the detection result of the dynamic motion applied to the data reception device 200 with the reference value, and the data amount of the detection result is less than the reference value. An encryption key is created using the detection result based on the comparison result indicating.

  As a result, the data receiving apparatus 200 can create an encryption key based on the dynamic movement applied to the unrecognized data receiving apparatus 200 that causes the data amount to be less than the reference value. As a result, for example, when the user gives the same dynamic movement to the data transmission apparatus 100 and the data reception apparatus 200, the data reception apparatus 200 is encrypted by the data reception apparatus 200. The possibility that the key is different from the encryption key created by the data transmission device 100 can be reduced.

  Furthermore, in the present embodiment, the data reception device 200 creates an encryption key based on an operation instructed by the user to create an encryption key.

  As a result, the data receiving apparatus 200 can create an encryption key triggered by an operation instructing the user to create an encryption key. For this reason, the data receiving apparatus 200 can prevent the user from creating an encryption key at a timing when the user does not want to create the encryption key. As a result, for example, when the user gives the data transmitting apparatus 100 and the data receiving apparatus 200 an operation for instructing the creation of an encryption key at the same time, the data receiving apparatus 200 generates the encryption key generated by the data transmitting apparatus 100. The same encryption key can be created.

§4 Modifications While the embodiment of the present invention has been described in detail above, the above description is merely an illustration of the present invention in all respects. It goes without saying that various improvements and modifications can be made without departing from the scope of the present invention. That is, in implementing the present invention, a specific configuration according to the embodiment may be adopted as appropriate. Although the data appearing in the above-described embodiment is described in a natural language, more specifically, it is specified by a pseudo language, a command, a parameter, a machine language, or the like that can be recognized by a computer.

  In the above embodiment, transmission / reception of encrypted measurement data has been described, but the present invention is not limited to this. The encrypted data transmitted / received between the devices may be data other than the measurement data.

§5 Appendix
A part or all of each of the embodiments described above can be described as shown in the following supplementary notes in addition to the claims, but is not limited thereto.
(Appendix 1)
A data transmission device used in a state of being worn or gripped on a specific part of a user together with a data reception device,
A detection unit for detecting a dynamic motion applied to the data transmission device;
Creating a cryptographic key based on the detection result of the dynamic motion applied to the data transmission device;
Encrypt transmission data using the encryption key,
A processor configured to store the encrypted transmission data in a packet for one-way communication and transmit the packet;
A memory for storing instructions for operating the processor;
A data transmission device comprising:
(Appendix 2)
A data receiving device used in a state of being worn or gripped on a specific part of a user together with a data transmitting device,
A detection unit for detecting dynamic movement applied to the data receiving device;
A packet reception processing unit for receiving a packet for one-way communication in which encrypted transmission data transmitted from the data transmission device is stored;
Creating a cryptographic key based on the detection result of the dynamic motion applied to the data receiving device;
A processor configured to decrypt transmission data stored in the received packet using the encryption key;
A memory for storing instructions for operating the processor;
A data receiving apparatus comprising:

  DESCRIPTION OF SYMBOLS 100 ... Data transmitter, 111 ... Control part, 112 ... Memory | storage part, 113 ... Communication interface, 114 ... Input device, 115 ... Output device, 116 ... External interface, 117 ... Battery, 118 ... Biosensor, 119 ... Motion sensor, DESCRIPTION OF SYMBOLS 200 ... Data receiver, 211 ... Control part, 212 ... Memory | storage part, 213 ... Communication interface, 214 ... Input device, 215 ... Output device, 216 ... External interface, 217 ... Motion sensor, 300 ... Server, 1111 ... Creation part, 1112 ... Encryption processing unit, 1113 ... Packet transmission processing unit, 2111 ... Creation unit, 2112 ... Decryption processing unit, 2113 ... Data processing unit.

Claims (9)

A data transmission system including a data transmission device and a data reception device used in a state of being worn or gripped by a specific part of a user,
The data transmission device includes:
A detection unit for detecting a dynamic motion applied to the data transmission device;
A creation unit that creates a first encryption key based on a detection result of a dynamic motion applied to the data transmission device;
An encryption processing unit for encrypting transmission data using the first encryption key;
A packet transmission processing unit for storing the encrypted transmission data in a packet for one-way communication and transmitting the packet;
The data receiving device is:
A detection unit for detecting dynamic movement applied to the data receiving device;
A creating unit that creates a second encryption key based on a detection result of a dynamic motion applied to the data receiving device;
A packet reception processing unit that receives a packet for one-way communication in which the encrypted transmission data is stored, transmitted from the data transmission device;
A decryption processing unit for decrypting transmission data stored in the received packet using the second encryption key;
A data transmission system comprising: A data transmission device used in a state of being worn or gripped on a specific part of a user together with a data reception device,
A detection unit for detecting a dynamic motion applied to the data transmission device;
A creation unit that creates an encryption key based on a detection result of a dynamic motion applied to the data transmission device;
An encryption processing unit that encrypts transmission data using the encryption key;
A packet transmission processing unit for storing the encrypted transmission data in a packet for one-way communication and transmitting the packet;
A data transmission device comprising:   The data transmission device according to claim 2, wherein the creation unit creates the encryption key using the detection result regarding a predetermined direction based on a dynamic motion applied to the data transmission device. The creation unit compares the data amount of the detection result with a reference value, and based on the comparison result indicating that the data amount of the detection result is less than the reference value, the encryption key is obtained using the detection result. create,
The data transmission device according to claim 2.   The data transmission device according to claim 2, wherein the creation unit creates the encryption key based on an operation instructing the user to create the encryption key. A data receiving device used in a state of being worn or gripped on a specific part of a user together with a data transmitting device,
A detection unit for detecting dynamic movement applied to the data receiving device;
A creation unit for creating an encryption key based on a detection result of a dynamic motion applied to the data receiving device;
A packet reception processing unit for receiving a packet for one-way communication in which encrypted transmission data transmitted from the data transmission device is stored;
A decryption processing unit for decrypting transmission data stored in the received packet using the encryption key;
A data receiving apparatus comprising:   The data reception device according to claim 6, wherein the creation unit creates the encryption key using the detection result regarding a predetermined direction based on a dynamic motion applied to the data reception device. The creation unit compares the data amount of the detection result with a reference value, and based on the comparison result indicating that the data amount of the detection result is less than the reference value, the encryption key is obtained using the detection result. create,
The data receiving device according to claim 6.   The data reception device according to claim 6, wherein the creation unit creates the encryption key based on an operation instructing the user to create the encryption key.