JP5065817B2 - Relay device, wireless communication system, communication range expansion method, and wireless communication method - Google Patents

Description

  The present invention relates to a relay device, a wireless communication system, a communication range expansion method, and a wireless communication method.

2. Description of the Related Art Conventionally, there is a wireless authentication method in which communication apparatuses that perform wireless communication authenticate each other. For example, the communication range of radio waves centered on one key is set as a secure space, and communication measures paired in the secure space are authenticated by wireless authentication so that the communication device can be used only in the secure space. There are some (for example, the following patent document 1).
Patent No. 293276

  However, the communication range of radio waves in the communication device differs depending on the presence or absence of surrounding obstacles. Therefore, the wireless authentication range also depends on the surrounding environment. The wireless authentication range between communication devices that move with each other, such as a mobile phone and a key holder, a personal computer and a name tag, is particularly unstable.

  If the wireless authentication range becomes unstable, wireless authentication may not be possible between communication devices. For this reason, sufficient security between communication devices that can be ensured by wireless authentication cannot be ensured, and misplacement or malfunction of communication devices cannot be sufficiently prevented.

  Therefore, conventionally, there has been a demand for a wireless authentication system that expands the wireless authentication range according to the environment around the communication device and can perform wireless authentication without being influenced by the environment.

  Therefore, the present invention has been made in view of the above problems, and an object thereof is to provide a relay device, a wireless communication system, a communication range expansion method, and a wireless communication method that can easily expand the wireless authentication range.

  Another object of the present invention is to provide a relay device or the like capable of performing a stable wireless authentication operation while maintaining the conventional safety and confidentiality.

  Another object of the present invention is to provide a relay device or the like that can perform stable wireless communication without being influenced by the surrounding environment.

In order to achieve the above object, according to an embodiment of the present invention, in a relay device that performs wireless communication with a communication device, a first identification code for identifying the relay device from other relay devices When the relay device functions as a master relay device, the data processing unit assigns a second identification code for identifying the other relay device to the other relay device. And the first identification code stored in the memory is transmitted to the other relay device to perform a pairing operation with the other relay device, and the relay device is a slave. When functioning as a relay device, the data processing unit receives a third identification code, which is the identification code of the master relay device, only from the master relay device among the other relay devices and stores it in the memory And the first identification code stored in the memory is transmitted to the master relay device to perform a pairing operation with the master relay device, and the data processing unit is configured such that the relay device is the master relay device or In any case of the slave relay device, a fourth identification code, which is an identification code of the other relay device, is set from the other relay device only when an overlapping communication range is established adjacent to the other relay device. It is received and stored in the memory, and the first identification code is transmitted to the other relay device to perform an authentication operation with the other relay device.
In the authentication operation according to the present invention , one of the following is performed : (i) the third identification code stored in the memory is transmitted to the other relay device, and the third identification code is transmitted from the other relay device. When the same identification code is received, the first identification code stored in the memory is transmitted to the other relay device, or (ii) the third identification code is received from the other relay device. When the third identification code stored in the memory is the same as the third identification code, the third identification code is transmitted to the other relay device, and then the fourth identification code is received from the other relay device. Sometimes the first identification code is transmitted to the other relay device.

  In order to achieve the above object, according to another embodiment of the present invention, in the wireless communication system in which the first and second authentication devices perform wireless communication via the relay device, the relay device includes the relay device. A memory for storing a first identification code for identifying a device from another relay device, and a data processing unit, and when the relay device functions as a master relay device, the data processing unit Receiving a second identification code for identifying a relay device from the other relay device and storing it in the memory, and transmitting the first identification code stored in the memory to the other relay device; When a pairing operation is performed with another relay device and the relay device functions as a slave relay device, the data processing unit recognizes the master relay device only from the master relay device among the other relay devices. A third identification code as a code is received and stored in the memory, and the first identification code stored in the memory is transmitted to the master relay device to perform a pairing operation with the master relay device. In addition, the data processing unit is configured such that, when the relay device is either a master relay device or a slave relay device, the other relay device is only adjacent to the other relay device and establishes an overlapping communication range. A fourth identification code, which is an identification code of the other relay device, is stored in the memory and the first identification code is transmitted to the other relay device to authenticate with the other relay device. In addition, the data processing unit receives fifth and sixth identification codes that are identification codes of the first and second authentication devices with the first and second authentication devices. Before Storing the first identification code in the memory and transmitting the first identification code to the first and second authentication devices to perform a pairing operation with the first and second authentication devices; The first and second authentication devices perform the pairing operation and the authentication operation with the relay device by transmitting and receiving an encrypted random number to and decrypting the encrypted random number. Then, wireless communication is performed via the relay device.

  Furthermore, in order to achieve the above object, according to another embodiment of the present invention, a memory for storing a first identification code for identifying a relay device from another relay device, and a data processing unit are provided. In the communication range expansion method in a relay device that performs wireless communication with a communication device, when the relay device functions as a master relay device, a second identification code for identifying another relay device by the data processing unit Is received from the other relay device and stored in the memory, and the first identification code stored in the memory is transmitted to the other relay device to perform a pairing operation with the other relay device. When the relay device functions as a slave relay device, the data processing unit causes a third identifier that is an identification code of the master relay device only from the master relay device among the other relay devices. A code is received and stored in the memory, and the first identification code stored in the memory is transmitted to the master relay device to perform a pairing operation with the master relay device, and the data processing unit Thus, in the case where the relay device is either a master relay device or a slave relay device, the other relay device can only connect the other relay device to the other relay device only when building an overlapping communication range adjacent to the other relay device. A relay device that receives and stores the fourth identification code, which is an identification code, in the memory, transmits the first identification code to the other relay device, and performs an authentication operation with the other relay device. The communication range is expanded.

  Furthermore, in order to achieve the above object, according to another embodiment of the present invention, there is provided a memory for storing a first identification code for identifying a relay device from another relay device, and a data processing unit. In the wireless communication method in the wireless communication system in which the first and second authentication devices perform wireless communication via the relay device, when the relay device functions as a master relay device, the data processing unit Receiving a second identification code for identifying a relay device from the other relay device and storing it in the memory, and transmitting the first identification code stored in the memory to the other relay device; When a pairing operation is performed with another relay device and the relay device functions as a slave relay device, the data processing unit causes the data processing unit to execute the master only from the master relay device among the other relay devices. A third identification code that is an identification code of the relay device is received and stored in the memory, and the first identification code stored in the memory is transmitted to the master relay device to be paired with the master relay device. In addition, the data processing unit performs the ring operation only when the relay device is a master relay device or a slave relay device, and only when a communication range adjacent to and overlapping with the other relay device is established. A fourth identification code, which is an identification code of the other relay device, is received from another relay device and stored in the memory, and the first identification code is transmitted to the other relay device, and the other By performing an authentication operation with the relay device, the communication range of the relay device is expanded, and further, the first and second authentication devices are connected to the first and second authentication devices by the data processing unit. The fifth identification code and the sixth identification code that are identification codes of the authentication device are received and stored in the memory, and the first identification code is transmitted to the first and second authentication devices. A pairing operation is performed with the second authentication device, an encrypted random number is transmitted / received between the first authentication device and the second authentication device, and an authentication operation is performed by decrypting the encrypted random number. The authentication device performs wireless communication via the relay device after performing the pairing operation and the authentication operation with the relay device.

  According to the present invention, it is possible to provide a relay device, a wireless communication system, a communication range expansion method, and a wireless communication method that can easily expand the wireless authentication range. Furthermore, according to the present invention, it is possible to provide a relay device or the like that can perform a stable wireless authentication operation while maintaining the conventional safety and confidentiality. Furthermore, according to the present invention, it is possible to provide a relay device or the like that can perform stable wireless communication without being influenced by the surrounding environment.

  The best mode for carrying out the present invention will be described below with reference to the drawings. FIG. 1 is a diagram illustrating a configuration example of a wireless communication system 1. In the example of FIG. 1, wireless authentication relay devices (hereinafter “relay devices”) 100-1, 200-1, and 200-2 are connected in a straight line to expand the communicable range, and the wireless authentication device ( Hereinafter, “authentication apparatus”) 300-1 and 300-2 are examples. The authentication devices 300-1 and 300-2 can wirelessly communicate with each other via the relay devices 100-1, 200-1, and 200-2. Relay devices 100-1, 200-1, 200-2 and authentication devices 300-1, 300-2 are all communication devices capable of wireless communication.

  Here, the relay devices 100-1, 200-1, 200-2 are classified into a master relay device 100-1 and slave relay devices 200-1, 200-2. Which of the relay apparatuses 100-1, 200-1, 200-2 is to be the master relay apparatus is determined in advance at the stage of designing the wireless communication system 1.

The slave relay apparatus 200-1 performs a pairing operation with the master relay apparatus 100-1 and then performs an authentication operation to obtain a connection relationship as shown in FIG.

  The pairing operation refers to an operation of exchanging identification codes (ID) of communication devices themselves within a communicable range and registering IDs with each other. Further, the authentication operation is an operation of exchanging IDs and registering between the paired communication devices. Details of the pairing operation and the authentication operation will be described later.

  FIG. 2 is a diagram illustrating a configuration example of the relay device 100. The relay device 100 includes a master relay device 100 and a slave relay device 200, but the configuration itself is the same. The relay device 100 includes a LAN (Local Area Network) connection unit 101, a data processing unit 102, a memory 103, a radio control unit 104, a radio unit 105, an antenna 106, a power source 107, and a switch 108.

  The LAN connection unit 101 is an interface that connects the relay apparatus 100 and the LAN. The relay device 100 can be connected to the Internet or the like via the LAN connection unit 101.

  The data processing unit 102 converts the signal from the LAN connection unit 101 into a wireless signal, converts the wireless signal from the wireless control unit 104 into data that can be output to the LAN, and the like.

  The memory 103 stores the IDs of the relay device 100 (200) and the authentication device 300 acquired by the pairing operation and the authentication operation. The memory 103 also stores its own ID.

  The wireless control unit 104 controls the wireless signal, causes the output of the wireless unit 105 to be input to the data processing unit 102, and causes the output from the data processing unit 102 to be input to the wireless unit 105.

  Radio section 105 converts the radio signal from radio control section 104 into a signal of a predetermined frequency band and outputs the signal to antenna 106. The signal is output as a radio wave from the antenna 106. In addition, the wireless unit 105 outputs a signal received by the antenna 106 to the wireless control unit 104.

  The power source 107 is, for example, an AC 100V power source, and operates each unit 101 of the relay apparatus 100 and the like.

  The switch 108 is a changeover switch for setting the pairing mode or the authentication operation mode.

  FIG. 3 is a diagram illustrating a configuration example of the authentication device 300. The authentication device 300 includes a data processing unit 302, a memory 303, a wireless control unit 304, a wireless unit 305, an antenna 306, a battery 307, and a switch (SW) 308.

  The configuration and operation of the data processing unit 302, the wireless control unit 304, the wireless unit 305, and the antenna 306 are the same as the data processing unit 102, the wireless control unit 104, the wireless unit 105, and the antenna 106 of the relay device 100, respectively. .

  The memory 303 stores IDs of the relay device 100 and other authentication devices 300. These IDs are stored by a pairing operation or authentication operation with the relay device 100 or another authentication device 300. The memory 303 also stores its own ID.

  The battery 307 supplies power to each unit of the authentication device 300.

  The switch 308 is a switch for switching to a pairing mode, a mode for performing an authentication operation, or the like.

  Next, operations of the relay apparatus 100 and the authentication apparatus 300 configured as described above will be described. As the overall operation, a pairing operation and an authentication operation are performed between the relay devices 100 (200), and then the relay device 100 (200) and the authentication device 300 perform a pairing operation and an authentication operation.

  A communication range as shown in FIG. 1 can be obtained by the pairing operation and the authentication operation between the relay devices 100 (200). Further, after that, the relay device 100 (200) and the authentication device 300 perform the pairing operation and the authentication operation, so that the wireless communication is performed between the authentication devices 300 via the relay device 100 (200) as shown in FIG. Communication can be performed.

<1. Pairing operation and authentication operation between relay devices>
First, the pairing operation between the relay apparatuses 100 (200) will be described. FIG. 4 is a flowchart illustrating an example of the pairing operation between the relay apparatuses 100 (200). The pairing operation is performed between the master relay device 100 and each slave relay device 200. As a result, the ID of the “child” slave relay device 200 that is the pairing partner is registered in the master relay device 100, and the ID of the “parent” slave relay device 100 that is the pairing partner is registered in each slave relay device 200. Is registered. A “parent-child relationship” is established between the relay devices 100 (200).

  When this process is started (S10), the master relay device (AU (M)) 100 is set to the pairing mode (S11). This is executed by switching the switch 108 of the relay apparatus 100 to the pairing mode.

  Next, the master relay device 100 determines whether or not to add a slave relay device (AU (S)) 200 (S12). For example, in the example of FIG. 1, it is determined whether or not the slave relay device 200-2 is added next to the master relay device 100, whether or not the slave relay device 200-1 is added next to the master relay device 100, and the like. To do.

  When the slave relay device 200 is added (Yes in S12), the slave relay device 200 to be added is set to the pairing mode (S15). In the example of FIG. 1, the slave relay apparatus 200-2 is set to the pairing mode.

  Next, pairing is started between the master relay device 100 and the slave relay device 200 (S16). In the example of FIG. 1, pairing is started between the master relay device 100 and the slave relay device 200-2. For pairing, for example, each other's data processing unit 102 transmits its own ID stored in its own memory 103 to the relay device 100 (200) of the pairing partner, and registers its own ID in the partner's memory 103. Is done.

  Next, it is determined whether or not the partner ID is normally registered in the mutual memory 103 (S17). For example, the data processing unit 102 reads the partner ID stored in the memory 103 and transmits it to the relay device 100 (200) of the pairing partner, and the self ID stored in the memory 103 of the relay device 100 (200) It can be judged by comparing or not matching.

  When the partner ID is normally registered (Yes in S17), the pairing mode of the slave relay device 200 is canceled (S18). Thereafter, the process proceeds to S12, and the above-described process for the other slave relay device 200 is performed.

  On the other hand, when the partner ID is not registered normally (No in S17), pairing is performed again (S16), and the partner ID is registered.

  When the slave relay device 200 is not added (No in S12), the pairing mode of the slave relay device 200 is canceled (S13), and there is no slave relay device 200 that should perform the pairing operation with the master relay device 200. A series of processes is terminated (S14).

  This pairing operation is performed by moving the master relay device 100 to the communicable range of the slave relay device 200. In the example of FIG. 1, thereafter, the above-described processing is performed between the slave relay device 200-1 and the master relay device 100.

  Next, an authentication operation between the relay apparatuses 100 (200) will be described. FIG. 5 is a flowchart illustrating an example of the authentication operation. This authentication operation is performed not only between the master relay device 100 and the slave relay device 200 but also between the slave relay devices 200. However, both are slave relay devices 200 having the same master relay device 100 ID. For example, as shown in FIG. 1, the master relay device 100-1 and the slave relay device 200-2 perform an authentication operation, and the slave relay device 200-2 and the slave relay device 200-1 perform an authentication operation. The communication range can be expanded by obtaining the connection relationship shown in FIG.

  As shown in FIG. 5, first, a search signal is transmitted from the relay device 100 (200) to the authentication target relay device 100 (200) (S20). At this time, the ID of the master relay apparatus 100 acquired by the pairing operation in the search signal is inserted into the search signal and transmitted. When relay device 100 (200) that transmits the search signal is master relay device 100, it transmits its own ID.

  Next, the authentication target relay device 100 (200) extracts the ID of the master relay device 100 from the received search signal, and determines whether or not the same master relay device 100 has “parent” (S21). For example, the authentication target relay device 100 (200) can determine by reading the ID of the master relay device 100 acquired from its own memory 103 by the pairing operation and comparing it with the transmitted ID.

  If it is not the same master relay device 100, the authentication operation ends. This is because in this authentication process, the authentication process is performed by the relay apparatus 100 (200) having the same master relay apparatus 100 as a “parent”.

  If the master relay device 100 is the same (Yes in S21), the authentication target relay device 100 (200) transmits a response signal to the search signal (S22). The ID of the master relay device 100 is also added to the response signal.

  When receiving the response signal, the authentication target relay apparatus 100 (200) transmits its own ID (S23). The master relay device 100 ID is also transmitted together with the self ID. The reason for not transmitting the self ID when transmitting the search signal is to make sure that the “master” has the same master relay device 100 as authenticators, and that only the other party's ID is acquired. For example, to protect the relay device 100 to be authenticated from the device (to ensure security).

  Upon receiving the partner ID, the relay device 100 (200) to be authenticated stores the ID of the partner relay device 100 (200) in the memory 103. The authentication target relay apparatus 100 (200) reads the self ID from the memory 103 and transmits the self ID to the authentication target relay apparatus 100 (200) (S24). The relay device 100 (200) to be authenticated that has acquired the partner ID stores the partner ID in the memory 103.

  As described above, this authentication process is performed between the relay apparatuses 100 (200) having the same master relay apparatus 100 ID, and the IDs are registered with the relay apparatuses 100 (200) whose communication ranges are adjacent to each other.

  In this case, the slave relay device 200 that has been paired with the master relay device 100 may perform an authentication operation with the master relay device 100. Even in such a case, the same ID is stored in the memory 103 in the slave relay apparatus 200 by the pairing operation (FIG. 4) and the authentication operation (FIG. 5).

6 shows an example of an ID stored in the memory 103 of the master relay device 100, and FIG. 7 shows an example of an ID stored in the memory 103 of the slave relay device 200. The memory 103 of the master relay device 100 includes an authentication program 1031 for performing a pairing operation and an authentication operation, and an ID management unit 1032. The ID management unit 1032 includes the ID 1035 of the slave relay device 200 together with the self ID 1033. Is memorized. On the other hand, the memory 103 of the slave relay apparatus 200 similarly includes an authentication program 1035 and an ID management unit 1036. The ID management unit 1036 registers the ID 1038 of the master relay apparatus 100 together with the self ID 1037. In the example illustrated in FIG. 7, the ID 1038 of the master relay device 100 is registered. However, if an authentication operation is performed with another slave relay device 200, the ID of the other slave relay device 200 is registered.
<2. Pairing Operation and Authentication Operation of Relay Device 100 (200) and Authentication Device 300>
Next, the pairing operation and authentication operation between the relay device 100 (200) and the authentication device 300 will be described. In this case, the pairing and authentication operations have been completed between the relay apparatuses 100 (200) by the processing described above. In the following, for ease of explanation, the relay device 100 of the relay device 100 (200) will be described. The relay device 200 which is a slave relay device performs the same operation.

  8 and 9 are flowcharts illustrating an example of the pairing operation between the relay device 100 and the authentication device 300.

  When the process is started (S30), a key authentication device (hereinafter, authentication device (K)) 300K is set to a pairing mode (S31). For example, the switch 308 of the authentication device (K) 300K is switched to the pairing mode.

  Next, the relay device 100 determines whether pairing with the target authentication device (hereinafter referred to as the authentication device (T)) 300T has been completed (S32). For example, the relay device 100 transmits the ID of the authentication device (T) 300T stored in the memory 103, and the authentication device (T) 300T compares the ID with the self ID stored in the memory 303 to determine whether or not they match. Can be judged. Alternatively, IDs may be transmitted to each other, and determination may be made based on whether or not there is an ID that matches the ID stored in the memories 103 and 303.

  When the relay device 100 is not paired with the authentication device (T) 300T (No in S32), the relay device 100 sets the authentication device (T) 300T to the pairing mode (S33). For example, the switch 308 of the authentication device (T) 300T is switched to the pairing mode. The relay device 100 first performs pairing with the target authentication device (T) 300T.

  Next, the relay apparatus 100 is set to the pairing mode, and pairing with the authentication apparatus (T) 300T is started (S34). This is executed by transmitting the self ID to each other and registering the self ID in the memories 103 and 303 of the other party.

  Next, it is determined whether or not the partner ID has been normally registered in the mutual memories 103 and 303 (S35). For example, it is possible to determine whether or not the IDs stored in the own memories 103 and 303 are read from each other and transmitted to the other party, and whether or not they match the own ID.

  If the partner ID is not normally registered (No in S35), the process again proceeds to S33, and pairing is performed again (S33 to S34).

  On the other hand, if the partner ID is registered normally (Yes in S35), the pairing mode of the authentication device (T) 300T is canceled (S36). Thereby, the pairing of the target authentication device (T) 300T is completed.

  When pairing with the authentication apparatus (T) 300T is completed (Yes in S32) or when the process of S36 is completed, the process proceeds to S37 (FIG. 9), and the relay apparatus 100 is set to the pairing mode ( S37). This is for performing pairing with the authentication device (K) 300K as a key.

  Next, the relay device 100 starts pairing with the authentication device (K) 300K (S38). The mutual self IDs are transmitted to each other and registered in the memories 103 and 303.

  Next, it is determined whether or not the partner ID is normally registered in the mutual memories 103 and 303 (S40). As in S35, the ID registered in the memories 103 and 303 is transmitted by pairing (38), and it is determined whether or not it matches the self ID.

  When the partner ID is not normally registered (No in S40), the process proceeds to S37 to execute pairing again.

  On the other hand, when the partner ID is normally registered in the memories 103 and 303 (Yes in S40), the pairing mode between the authentication device (K) 300K and the relay device 100 is canceled (S41). As a result, the relay device 100 ends pairing with the authentication device (K) 300K as a key.

  Then, the process ends (S42).

  The authentication device 300 that has performed the pairing operation with the relay device 100 then performs the authentication operation with the relay device 100. 10 to 12 are flowcharts showing examples of such operations. The overall flow is that an authentication operation is performed between the key authentication device (K) 300K and the relay device 100 (S50 to S69), and then between the relay device 100 and the target authentication device (T) 300T. Then, the authentication operation is performed (S70 to S83).

  First, authentication device (K) 300K transmits a search signal to relay device 100 (S50). The relay device 100 (200) determines whether or not it is a pairing partner by comparing the ID of the relay device 100 included in the search signal with the self ID (S51). If they do not match, it is not a pairing partner and the relay device 100 does not perform an authentication operation with the authentication device (K) 300K. This is to ensure security by performing an authentication operation only on the paired partner.

  When it is a pairing partner (Yes in S51), the relay device 100 transmits a response signal to the search signal to the authentication device (K) 300K (S52).

  Similarly, authentication device (K) 300K determines whether or not it is a pairing partner by comparing the ID included in the response signal with the ID stored in memory 103 (S53). As a result, the authentication operation is not performed.

  On the other hand, if they match, the authentication device (K) 300K transmits a challenge signal (S54) as a pairing partner (Yes in S53). This is a signal for confirmation to be a trigger for establishing authentication with the authentication device (K) 300K.

  The relay apparatus 100 that has received the challenge signal generates an N-bit random number, inserts the random number into a response signal to the challenge signal, and transmits the random signal (S56).

  The authentication device (K) 300K encrypts an N-bit random number using, for example, the common key A (S57), and transmits this to the relay device 100 (S58).

  The relay device 100 (200) decrypts the encrypted random number and determines whether or not it matches the random number generated in S55 (S59). If they do not match, the authentication operation ends. If they match (Yes in S59), the relay device 100 transmits a response signal indicating that they match (S60).

  The authentication device (K) 300K receives this and establishes authentication with the relay device 100.

  Next, the authentication device (K) 300K transmits the self ID (target ID in the drawing) of the authentication device (K) 300K (S61).

  When receiving the ID of the authentication device (K) 300K, the relay device 100 stores it in the memory 103 (S62). Then, the relay device 100 transmits a response signal indicating that the information is stored to the authentication device (K) 300K (S63).

  Next, the authentication device (K) 300K encrypts the target ID (self ID) transmitted in S61 (S64 in FIG. 11) and transmits it to the relay device 100 (S65).

  The relay device 100 stores the encrypted target ID in the memory 103 (S66), and transmits a confirmation signal indicating the storage (S67).

  Then, the authentication apparatus (K) 300K transmits an authentication information request signal (S68), and the relay apparatus 100 that has received the authentication information reads out the ID of the target authentication apparatus (T) 300T from the memory 103 and transmits it (S69). . The processing of S68 to S69 can be transmitted after the relay device 100 performs the authentication processing operation with the authentication device (T) 300T, and the result (ID of the authentication device (T) 300T) can be transmitted between them. At the stage where the authentication operation is not performed, the ID of the authentication device (T) 300T is not transmitted.

  Next, the relay device 100 performs an authentication process with the target authentication device (T) 300T. That is, the relay device 100 transmits a search signal (S70), and the authentication device (T) 300T is stored in the memory 303 by pairing (FIG. 8 to FIG. 8) with the self ID of the relay device 100 included in the search signal. The ID of the relay device 100 is compared to determine whether it is a pairing partner (S71).

  If they do not match, the authentication operation ends as not being a pairing partner, and if they match, that is, if they are a pairing partner (Yes in S71), a response signal to the search signal is transmitted (S72).

  The relay device 100 compares the ID of the relay device 100 acquired by the pairing included in the response signal with the self ID stored in the memory 103, and the authentication device (T) 300T Whether or not (S73).

  When it is not a pairing partner, the authentication operation ends. When it is a pairing partner (Yes in S73), the relay device 100 transmits its own ID (S74).

  The authentication device (T) 300T stores the ID of the relay device 100 in the memory 303 (S75), and transmits a response signal (S76).

  Next, the relay device 100 transmits a challenge signal (S77 in FIG. 12), and the authentication device (T) 300T generates an N-bit random number triggered by reception of the challenge signal (S78). The authentication device (T) 300T transmits a random number to the relay device 100 (S79).

  Next, the relay device 100 encrypts the received random number with the encryption stored in S66 (S80). The relay device 100 transmits the encrypted cipher to the authentication device (T) 300T (S81).

  The authentication device (T) 300T decrypts the transmitted encryption (S82) and transmits a response signal (S83).

  Thereafter, the processing from S54 to S69 and the processing from S70 to S83 are alternately repeated. For example, you may repeat with a fixed period.

  The relay device 100 can communicate with the authentication device 300 by the pairing operation and the authentication operation between the relay device 100 and the authentication device 300.

  FIG. 13 is a diagram illustrating an example of an ID and the like stored in the memory 303 of the authentication device 300 after performing the pairing operation and the authentication operation. The memory 303 includes an authentication program 3031 and an ID management unit 3032. The ID management unit 3032 stores the self ID of the authentication device 300 and the ID of the relay device 100 (200). On the other hand, in the memory 103 of the relay device 100 (200) after performing the pairing and authentication operations with the authentication device 300, for example, the information is stored as shown in FIG.

  FIG. 14 is a diagram illustrating another configuration example of the wireless communication system 1 after performing the pairing operation and the authentication operation with the relay device 100 (200). In this case, there is one relay device 100 (200), the pairing operation (FIG. 4) and the authentication operation (FIG. 5) between the relay devices 100 (200) are not performed, and the relay device 100 (200) and the authentication Pairing and authentication operations are performed between the devices 300-1 and 300-2. As a result, it is assumed that an authentication operation (or pairing operation) is virtually performed between the authentication device 300-1 as a key and the authentication device 300-2 as a target. 300-2 can perform wireless communication via the relay apparatus 100 (200).

  The same applies to FIG. 1 described above. A pairing operation and an authentication operation are performed between the master relay device 100-1 and each of the slave relay devices 200-1 and 200-2, and the communication range shown in FIG. A pairing operation and an authentication operation are performed between the master relay device 100-1 and a pairing operation and an authentication operation are performed between the slave relay device 200-1 and the target relay device 200-2. Assuming that an authentication operation and a pairing operation are virtually performed between the authentication device 300-1 as a key and the authentication device 300-2 as a target, the relay devices 100-1, 200-1, 200- The wireless communication can be performed via 2.

  In FIG. 1, the data flow between the authentication devices 300-1 and 300-2 is as follows. That is, the data processing unit 302 of the authentication device 300-1 obtains the ID of the relay device 100-1 from the ID stored in the memory 303, and transmits data to the relay device 100-1.

  When the relay apparatus 100-1 receives the transmission data, the data processing unit 102 reads the ID of the relay apparatus 200-1 from the memory 103. The relay device 100-1 transmits transmission data to the relay device 200-1 based on this ID.

  When receiving the transmission data, the relay device 200-1 similarly reads the ID of the authentication device 300-2 from the memory 103, and transmits the transmission data to the authentication device 300-2 based on this ID. The flow of data from the authentication device 300-2 to the authentication device 300-1 is reversed.

  FIG. 15 is also a diagram illustrating another configuration example of the wireless communication system 1. The communication range between the relay devices 200-1 and 200-2 does not intersect, and the signal cannot be relayed. In this case, authentication is not virtually performed between the authentication devices 300-1 and 300-2, and wireless communication cannot be performed between the authentication devices 300-1 and 300-2.

  FIG. 16 is also a diagram illustrating another configuration example of the wireless communication system 1. Pairing and authentication are performed between the relay devices 100-1, 200-1, 200-2, and pairing and authentication are performed between the relay devices 200-1, 200-2 and the authentication devices 300-1, 300-2. Is done. Also in this case, the pairing and authentication operations are virtually performed between the authentication devices 300-1 and 300-2, and wireless communication is performed via the relay devices 100-1, 200-1, and 200-2. Can do.

  FIG. 17 is a diagram for explaining an application example of the wireless communication system 1 configured as described above. In the amusement park 500, the master relay device 100-1 and the plurality of slave relay devices 200-1 to 200-14 are arranged so that their communication ranges overlap each other, and the entire amusement park 500 is included as much as possible. Install.

  The data recording device 400 has map information of the park 500 and holds information on which relay device 100-1, 200-1 to 200-14 is installed at which position in the park 500.

  When the authentication devices 300-1 and 300-2 are located within the communication range, each of the relay devices 200-1 to 200-14 identifies the authentication devices 300-1 and 300-2 and the authentication devices 300-1 and 300-2. The IDs of the relay apparatuses 100-1, 200-1 to 200-14 that have authenticated -2 are transmitted to the data recording apparatus 400 via the adjacent relay apparatuses 100-1, 200-1 to 200-14.

  The data recording apparatus 400 holds a table 401 as shown in FIG. In the table 401, the IDs of the authentication devices 300-1 and 300-2, the IDs of the relay devices 100-1 and 200-1 to 200-14 that authenticated the authentication devices 300-1 and 300-2, and the authentication Time information is stored.

  Then, the data recording device 400 transmits the location information and the like of the authentication devices 300-1 and 300-2 via the relay devices 100-1, 200-1 to 200-14.

  FIG. 19 is a diagram showing another configuration example of the authentication device 350 in this application. The authentication device 350 includes a memory 351, an MPU (Micro Processor Unit) 352, an LCD (Liquid Crystal Display) 353, a wireless unit 354, a battery 355, a first switch (SW1) 356, and a second switch. (SW2) 357 is provided.

  The memory 351 stores the ID, self ID, and the like of the relay device 100 (200) when pairing and authentication operations are performed.

  The MPU 352 performs various controls such as reading out data stored in the memory 351 and displaying the data on the LCD 353 or transmitting data from the wireless unit 354.

  The first and second switches 356 and 357 are changeover switches for executing each application. For example, when the first switch 356 is turned on, the “lost child prevention service” application is executed, and when the second switch 357 is turned on, the “information providing service” application is executed. In practice, information on the on / off state of the switch is output to the MPU 352 and executed under the control of the MPU 352.

Next, these two services will be described.
<3. Lost Child Prevention Service>
In the wireless communication system 1 and the amusement park 500 shown in FIG. 17, two authentication devices 350-1 and 350-2 are paired and authenticated with each relay device 100-1, 200-1 to 200-14. Suppose.

  When the first switch 356 of the authentication device 350-1 is ON, the relay device 200-8 acquires the ID from the authentication device 350-2 when detecting that the authentication device 350-2 is located within the communication range, The data is transmitted to the data recording device 400 through the adjacent relay devices 200-5, 200-2, 200-1, and 100-1 together with its own ID.

  Further, when the second switch 357 of the authentication device 350-2 is on, the relay device 200-12 acquires an ID from the authentication device 350-1 when detecting that the authentication device 350-1 is located within the communication range. Then, the ID and the self ID are transmitted to the data recording device 400 via the relay devices 200-9, 200-6, 200-3, and 200-1.

  The data recording device 400 stores each ID and reception time (or the time acquired by the relay devices 200-8 and 200-12) in the table 401, and the position of the detected relay devices 200-8 and 200-12 and the map The position information is transmitted from the data recording device 400 to the authentication devices 350-1 and 350-2 via the relay device 100-1 and the like. The authentication devices 350-1 and 350-2 display the acquired position information on the LCD 353 under the control of the MPU 352.

Thereby, for example, the position of the authentication device 350-2 possessed by the child is displayed on the LCD 353 of the authentication device 350-1 possessed by the mother, so that a child lost in the park 500 can be prevented.
<4. Information service>
Similarly, consider an example of an amusement park 500 shown in FIG. 17 and a wireless communication system 1 installed therein.

  When the data recording apparatus 400 registers each ID in the table 401 and stays at the same position for a certain period of time, the data recording apparatus 400 sends the information related to the position to the authentication apparatuses 350-1 and 350-2. And so on. Thereby, it is possible to provide an information providing service to each of the authentication devices 350-1 and 350-2.

  Information related to the location includes provision of discount coupons for peripheral stores, explanation of devices, event information, store guidance, and the like.

  Whether or not the user stayed for a certain period is determined, for example, as follows. That is, the data recording apparatus 400 refers to the table 401, and the set of the relay apparatuses 100-1, 200-1 to 200-14 and the authentication apparatuses 350-1, 350-2 is set for a certain time (for example, 5 minutes). When stored continuously, it is determined that the user has stayed for a certain period of time, and information related to the position is provided.

  The determination in the data recording apparatus 400 is determined by a control unit such as a CPU in the data recording apparatus 400, and information related to the position is stored in the memory. A table 401 is also stored in the memory.

FIG. 1 is a diagram illustrating a configuration example of a wireless communication system. FIG. 2 is a diagram illustrating a configuration example of the relay apparatus. FIG. 3 is a diagram illustrating a configuration example of the authentication apparatus. FIG. 4 is a flowchart showing an example of a pairing operation between relay devices. FIG. 5 is a flowchart illustrating an example of an authentication operation between relay devices. FIG. 6 is a diagram illustrating an example of data stored in the memory of the master relay device. FIG. 7 is a diagram illustrating an example of data stored in the memory of the slave relay device. FIG. 8 is a flowchart showing an example of the pairing operation between the relay device and the authentication device. FIG. 9 is a flowchart showing an example of the pairing operation between the relay device and the authentication device. FIG. 10 is a flowchart illustrating an example of the authentication operation between the relay device and the authentication device. FIG. 11 is a flowchart illustrating an example of the authentication operation between the relay device and the authentication device. FIG. 12 is a flowchart illustrating an example of the authentication operation between the relay device and the authentication device. FIG. 13 is a diagram illustrating an example of data stored in the memory of the authentication device. FIG. 14 is a diagram illustrating another configuration example of the wireless communication system. FIG. 15 is a diagram illustrating another configuration example of the wireless communication system. FIG. 16 is a diagram illustrating another configuration example of the wireless communication system. FIG. 17 is a diagram illustrating a configuration example of a wireless communication system installed in an amusement park. FIG. 18 is a diagram showing an example of a table stored in the data recording apparatus. FIG. 19 is a diagram illustrating another configuration example of the authentication apparatus.

Explanation of symbols

1 wireless communication system, 100 (100-1) wireless authentication relay device (master relay device), 101 LAN connection unit, 102 data processing unit, 103 memory, 104 wireless control unit, 105 wireless unit, 108 switch, 200 (200- 1 to 200-14) Wireless authentication relay device (slave relay device), 300 (300-1 to 300-2, 300T, 300K) Wireless authentication device (authentication device), 302 Data processing unit, 303 Memory, 304 Wireless control unit , 305 wireless unit, 350 wireless authentication device (authentication device), 351 memory, 352 MPU, 353 LCD, 356 first switch, 357 second switch

Claims (8)

In a relay device that performs wireless communication with a communication device,
A memory for storing a first identification code for identifying the relay device from other relay devices;
A data processing unit,
When the relay device functions as a master relay device, the data processing unit receives a second identification code for identifying the other relay device from the other relay device, stores it in the memory, and stores it in the memory. Transmitting the stored first identification code to the other relay device to perform a pairing operation with the other relay device;
When the relay device functions as a slave relay device, the data processing unit receives a third identification code, which is an identification code of the master relay device, only from the master relay device among the other relay devices, and the memory And the first identification code stored in the memory is transmitted to the master relay device to perform a pairing operation with the master relay device,
In addition, the data processing unit is only connected to the other relay device when the relay device is a master relay device or a slave relay device and establishes an overlapping communication range adjacent to the other relay device. In the configuration in which the fourth identification code that is the identification code of the other relay device is received and stored in the memory, and the first identification code is transmitted to the other relay device, the first information stored in the memory 3 is transmitted to the other relay device, and the first identification code stored in the memory is received when the same identification code as the third identification code is received from the other relay device. A relay apparatus that transmits to another relay apparatus and performs an authentication operation with the other relay apparatus. In a relay device that performs wireless communication with a communication device,
A memory for storing a first identification code for identifying the relay device from other relay devices;
A data processing unit,
When the relay device functions as a master relay device, the data processing unit receives a second identification code for identifying the other relay device from the other relay device, stores it in the memory, and stores it in the memory. Transmitting the stored first identification code to the other relay device to perform a pairing operation with the other relay device;
When the relay device functions as a slave relay device, the data processing unit receives a third identification code, which is an identification code of the master relay device, only from the master relay device among the other relay devices, and the memory And the first identification code stored in the memory is transmitted to the master relay device to perform a pairing operation with the master relay device,
In addition, the data processing unit is only connected to the other relay device when the relay device is a master relay device or a slave relay device and establishes an overlapping communication range adjacent to the other relay device. In the configuration in which the fourth identification code, which is the identification code of the other relay device, is received and stored in the memory and the first identification code is transmitted to the other relay device, The third identification code is received, and when the third identification code is the same as the third identification code stored in the memory, the third identification code is transmitted to the other relay apparatus, and then the other relay apparatus transmits the third identification code. The relay device, wherein when receiving a fourth identification code, the first identification code is transmitted to the other relay device to perform an authentication operation with the other relay device. The data processing unit includes fifth and sixth identifications that are identification codes of the first and second authentication devices with the first and second authentication devices that perform wireless communication via the relay device. A code is received and stored in the memory and the first identification code is transmitted to the first and second authentication devices to perform a pairing operation with the first and second authentication devices; An encrypted operation is performed by transmitting / receiving encrypted random numbers between the first and second authentication devices, and performing an authentication operation.
The relay apparatus according to claim 1 or 2 , characterized in that In the wireless communication system in which the first and second authentication devices perform wireless communication via the relay device,
The relay device is
A memory for storing a first identification code for identifying the relay device from other relay devices;
A data processing unit,
When the relay device functions as a master relay device, the data processing unit receives a second identification code for identifying the other relay device from the other relay device, stores it in the memory, and stores it in the memory. Transmitting the stored first identification code to the other relay device to perform a pairing operation with the other relay device;
When the relay device functions as a slave relay device, the data processing unit receives a third identification code, which is an identification code of the master relay device, only from the master relay device among the other relay devices, and the memory And the first identification code stored in the memory is transmitted to the master relay device to perform a pairing operation with the master relay device,
In addition, the data processing unit is only connected to the other relay device when the relay device is a master relay device or a slave relay device and establishes an overlapping communication range adjacent to the other relay device. In the configuration in which the fourth identification code, which is the identification code of the other relay device, is received and stored in the memory and the first identification code is transmitted to the other relay device, one of the following: i) When the third identification code stored in the memory is transmitted to the other relay device and the same identification code as the third identification code is received from the other relay device, the third identification code is stored in the memory. Or (ii) receiving the third identification code from the other relay apparatus and storing it in the memory, the same as the third identification code stored in the memory When The third identification code is transmitted to the other relay device, and then the first identification code is transmitted to the other relay device when the fourth identification code is received from the other relay device. Or performs an authentication operation with the other relay device by either
Further, the data processing unit receives the fifth and sixth identification codes, which are identification codes of the first and second authentication devices, between the first and second authentication devices and receives the memory. And the first identification code is transmitted to the first and second authentication devices to perform a pairing operation with the first and second authentication devices, and further, the first and second authentication devices Send / receive encrypted random numbers to / from the authentication device, decrypt and perform authentication operations,
The wireless communication system, wherein the first and second authentication devices perform wireless communication via the relay device after performing the pairing operation and the authentication operation with the relay device. In a communication range expansion method in a relay device that includes a memory that stores a first identification code for identifying the relay device from other relay devices, and a data processing unit, and performs wireless communication with the communication device.
When the relay device functions as a master relay device, the data processing unit receives a second identification code for identifying the other relay device from the other relay device, stores it in the memory, and stores it in the memory. Transmitting the stored first identification code to the other relay device to perform a pairing operation with the other relay device;
When the relay device functions as a slave relay device, the data processing unit receives a third identification code that is an identification code of the master relay device only from the master relay device among the other relay devices, and Storing in the memory and transmitting the first identification code stored in the memory to the master relay device to perform a pairing operation with the master relay device;
Further, when the relay device is either a master relay device or a slave relay device, the data processing unit can only establish an overlapping communication range adjacent to the other relay device from the other relay device. In the configuration in which the fourth identification code, which is the identification code of the other relay device, is received and stored in the memory and the first identification code is transmitted to the other relay device, one of the following: i) When the third identification code stored in the memory is transmitted to the other relay device and the same identification code as the third identification code is received from the other relay device, the third identification code is stored in the memory. Or (ii) receiving the third identification code from the other relay apparatus and storing it in the memory, the same as the third identification code stored in the memory Noto The third identification code is transmitted to the other relay device, and then the first identification code is transmitted to the other relay device when the fourth identification code is received from the other relay device. To perform an authentication operation with the other relay device by either
The communication range expansion method which expands the communication range of a relay apparatus by this. Wireless communication in which the first and second authentication devices perform wireless communication via a relay device including a memory that stores a first identification code for identifying the relay device from other relay devices and a data processing unit. In a wireless communication method in a communication system,
When the relay device functions as a master relay device, the data processing unit receives a second identification code for identifying the other relay device from the other relay device and stores the second identification code in the memory. Transmitting the first identification code stored in the other relay device to perform a pairing operation with the other relay device,
When the relay device functions as a slave relay device, the data processing unit receives a third identification code that is an identification code of the master relay device only from the master relay device among the other relay devices, and Storing in the memory and transmitting the first identification code stored in the memory to the master relay device to perform a pairing operation with the master relay device;
Further, when the relay device is either a master relay device or a slave relay device, the data processing unit can only establish an overlapping communication range adjacent to the other relay device from the other relay device. In the configuration in which the fourth identification code, which is the identification code of the other relay device, is received and stored in the memory and the first identification code is transmitted to the other relay device, one of the following: i) When the third identification code stored in the memory is transmitted to the other relay device and the same identification code as the third identification code is received from the other relay device, the third identification code is stored in the memory. Or (ii) receiving the third identification code from the other relay apparatus and storing it in the memory, the same as the third identification code stored in the memory Noto The third identification code is transmitted to the other relay device, and then the first identification code is transmitted to the other relay device when the fourth identification code is received from the other relay device. Or by performing an authentication operation with the other relay device by any of the above, expanding the communication range of the relay device,
Further, the data processing unit receives fifth and sixth identification codes, which are identification codes of the first and second authentication devices, between the first and second authentication devices and receives the memory. And the first identification code is transmitted to the first and second authentication devices to perform a pairing operation with the first and second authentication devices, and further, the first and second authentication devices Send / receive encrypted random numbers to / from the authentication device, decrypt and perform authentication operations,
The first and second authentication devices perform wireless communication via the relay device after performing the pairing operation and the authentication operation with the relay device.
A wireless communication method. First and second authentication devices, a relay device, and a data recording device having position information of the relay device, wherein the first and second authentication devices perform wireless communication via the relay device In the lost child prevention system by the wireless communication system made in
The relay device is
A memory for storing a first identification code for identifying the relay device from other relay devices;
A data processing unit,
When the relay device functions as a master relay device, the data processing unit receives a second identification code for identifying the other relay device from the other relay device, stores it in the memory, and stores it in the memory. Transmitting the stored first identification code to the other relay device to perform a pairing operation with the other relay device;
When the relay device functions as a slave relay device, the data processing unit receives a third identification code, which is an identification code of the master relay device, only from the master relay device among the other relay devices, and the memory And the first identification code stored in the memory is transmitted to the master relay device to perform a pairing operation with the master relay device,
In addition, the data processing unit is only connected to the other relay device when the relay device is a master relay device or a slave relay device and establishes an overlapping communication range adjacent to the other relay device. In the configuration in which the fourth identification code, which is the identification code of the other relay device, is received and stored in the memory and the first identification code is transmitted to the other relay device, one of the following: i) When the third identification code stored in the memory is transmitted to the other relay device and the same identification code as the third identification code is received from the other relay device, the third identification code is stored in the memory. Or (ii) receiving the third identification code from the other relay apparatus and storing it in the memory, the same as the third identification code stored in the memory When The third identification code is transmitted to the other relay device, and then the first identification code is transmitted to the other relay device when the fourth identification code is received from the other relay device. Or performs an authentication operation with the other relay device by either
Further, the data processing unit receives the fifth and sixth identification codes, which are identification codes of the first and second authentication devices, between the first and second authentication devices and receives the memory. And the first identification code is transmitted to the first and second authentication devices to perform a pairing operation with the first and second authentication devices, and further, the first and second authentication devices Send / receive encrypted random numbers to / from the authentication device, decrypt and perform authentication operations,
When the first authentication device is located within the communication range of the relay device, the relay device transmits the first identification code to the data recording device,
The data recording device creates location information based on the identification code of the relay device, transmits the location information to the second authentication device via the relay device, and displays the first information on a display unit of the second authentication device. Display the location information of the authentication device
Lost child prevention system characterized by that. First and second authentication devices, a relay device, and a data recording device having position information of the relay device, wherein the first and second authentication devices perform wireless communication via the relay device In the information providing system by the wireless communication system made in
The relay device is
A memory for storing a first identification code for identifying the relay device from other relay devices;
A data processing unit,
When the relay device functions as a master relay device, the data processing unit receives a second identification code for identifying the other relay device from the other relay device, stores it in the memory, and stores it in the memory. Transmitting the stored first identification code to the other relay device to perform a pairing operation with the other relay device;
When the relay device functions as a slave relay device, the data processing unit receives a third identification code, which is an identification code of the master relay device, only from the master relay device among the other relay devices, and the memory And the first identification code stored in the memory is transmitted to the master relay device to perform a pairing operation with the master relay device,
In addition, the data processing unit is only connected to the other relay device when the relay device is a master relay device or a slave relay device and establishes an overlapping communication range adjacent to the other relay device. In the configuration in which the fourth identification code, which is the identification code of the other relay device, is received and stored in the memory and the first identification code is transmitted to the other relay device, one of the following: i) When the third identification code stored in the memory is transmitted to the other relay device and the same identification code as the third identification code is received from the other relay device, the third identification code is stored in the memory. Or (ii) receiving the third identification code from the other relay apparatus and storing it in the memory, the same as the third identification code stored in the memory When The third identification code is transmitted to the other relay device, and then the first identification code is transmitted to the other relay device when the fourth identification code is received from the other relay device. Or performs an authentication operation with the other relay device by either
Further, the data processing unit receives the fifth and sixth identification codes, which are identification codes of the first and second authentication devices, between the first and second authentication devices and receives the memory. And the first identification code is transmitted to the first and second authentication devices to perform a pairing operation with the first and second authentication devices, and further, the first and second authentication devices Send / receive encrypted random numbers to / from the authentication device, decrypt and perform authentication operations,
When the first or second authentication device is located within a communication range of the relay device for a certain period of time, the data recording device sends the first or second authentication to the first or second authentication device. Providing information according to the position of the device via the relay device;
An information providing system characterized by that.

Images