JPH11331144A - Ciphering device, deciphering device, portable information processor, ciphering method, deciphering method and portable information processor control method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To additionally improve the secrecy of information, without increasing the burden of a user for information control by generating a cryptographic key through the use of inputted positional information and inputted time information for ciphering inputted information through the use of the cryptographic key. SOLUTION: In a cipher electronic mail system to be applied to a portable information processor, a ciphering server 11 generates the cryptographic key under a prescribed condition. A mail server 12 connected to a network 14 executes the processing of transferring actual ciphering electronic mail data SEM, and a radio repeating station 13 delivers an electronic mail under the control of the server 12. A transmission terminal device 15 executes the preparation of the electronic mail, request for generating a cryptographic key, ciphering processing and transmission request, and a receiving terminal device (portable information processor) 20 deciphers a received ciphered electronic mail SEM.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an encryption device, a decryption device, a portable information processing device, an encryption method, a decryption method, and a control method of a portable information processing device, and more particularly to a technique for ensuring information security. .

[0002]

2. Description of the Related Art In recent years, a plurality of information processing apparatuses have been connected via a network such as the Internet or a personal computer communication network, and information has been exchanged via this network. By the way, information transmitted from a sender to a receiver via a network or information stored in a computer connected to the network is more eavesdropped than information described in a conventional document or the like. Probability is high.

Therefore, the information processing apparatus described in Japanese Patent Application Laid-Open No. 9-319662 is provided with a position acquisition unit for acquiring its own current position by GPS survey, and when accessing specific information (file), information management is performed. The unit checks the current position (corresponding to password information or key information) acquired by the position acquisition unit with the location information corresponding to the specific information, and only when the current position and the position corresponding to the location information match, A configuration for decoding specific information and displaying the information is disclosed. The specific information cannot be accessed except at a position corresponding to the location information, and the user manages (stores and inputs) the password information or the key information. It describes that specific information can be protected against theft or eavesdropping of specific information while reducing labor.

[0004]

In the above conventional information processing apparatus, the current position is used as password information or key information.
By accessing certain information while changing the
There was a possibility that it could be accessed. Therefore, an object of the present invention is to provide an information processing apparatus and an information processing method that can further increase the confidentiality of information without increasing the burden on the user for information management.

[0005]

According to a first aspect of the present invention, there is provided an encryption key generating means for generating an encryption key using input position information and input time information. And encryption means for encrypting the input information using the encryption key.

According to a second aspect of the present invention, in the configuration of the first aspect, the encryption key generating means specifies a transmission destination of the input information in addition to the position information and the time information. The method is characterized in that the encryption key is generated using specific information.

According to a third aspect of the present invention, there is provided a decryption key generating means for generating a decryption key using input current position information and input current time information, and input encryption using the decryption key. Decoding means for decoding information.

According to a fourth aspect of the present invention, in the configuration of the third aspect, the decryption key generating means specifies a transmission destination of the input encryption information in addition to the current position information and the current time information. And generating the decryption key using the transmission destination specifying information for the purpose.

According to a fifth aspect of the present invention, there is provided a portable information processing apparatus for decrypting input encrypted information which is input encrypted data, and a self-position detecting means for detecting its own current position and outputting the current position information. Current time detecting means for detecting current time and outputting current time information; decryption key generating means for generating a decryption key using the current position information and the current time information; and using the decryption key. And decryption means for decrypting the input encrypted information.

According to a sixth aspect of the present invention, there is provided an encryption key generation processing circuit for generating an encryption key using input position information and input time information, and input information using the encryption key. And an encryption processing circuit for performing encryption.

According to a seventh aspect of the present invention, there is provided a decryption key generation processing circuit for generating a decryption key using input current position information and input current time information, and an input encryption key using the decryption key. And a decryption processing circuit for decrypting the encrypted information.

In a portable information processing apparatus for decrypting input encrypted information, which is input encrypted data, a self-position detecting apparatus for detecting its own current position and outputting current position information. A current time detection device that detects the current time and outputs current time information; a decryption key generation processing circuit that generates a decryption key using the current position information and the current time information; and And a decryption processing circuit for decrypting the input encrypted information by using the decryption processing circuit.

According to a ninth aspect of the present invention, there is provided an encryption key generating step of generating an encryption key using input position information and input time information, and encrypting input information using the encryption key. And an encrypting step for encrypting.

According to a tenth aspect of the present invention, there is provided a decryption key generating step of generating a decryption key using input current position information and input current time information, and input encryption using the decryption key. And a decoding step of decoding the information.

According to an eleventh aspect of the present invention, in a control method of a portable information processing apparatus for decrypting input encrypted information which is input encrypted data, a self-position detecting step of detecting a current position of the portable information processing apparatus; A current time detecting step of detecting time, a decryption key generating step of generating a decryption key using the detected current position and the detected current time, and a cipher input using the generated decryption key And a decoding step of decoding the encrypted information.

[0016]

Preferred embodiments of the present invention will be described below with reference to the accompanying drawings. (1) Configuration of Encrypted Email System FIG. 1 shows a schematic configuration diagram when an encrypted email system to which the portable information processing apparatus of the embodiment is applied is constructed.
The encrypted electronic mail system 10 includes an encryption server 11 that generates an encryption key under predetermined conditions, and a mail server 12 that performs processing for transferring actual encrypted electronic mail data SEM.
And a network 14 to which a wireless relay station 13 that distributes e-mail under the control of the mail server 12 is connected, and information that is connected to the network 14 and that performs e-mail creation, encryption key generation request, encryption processing, and transmission request The information processing apparatus includes a processing device (hereinafter, referred to as a transmission terminal device) 15 and a portable information processing device (hereinafter, referred to as a reception terminal device) 20 that decrypts the received encrypted electronic mail SEM.

(2) Configuration of Receiving Terminal Device FIG. 2 shows a schematic block diagram of a receiving terminal device according to the embodiment. The receiving terminal device 20 includes a CPU 21 for controlling the mobile communication terminal device, and a memory (ROM) for storing various data.
And a RAM) 22, a display device 23 composed of a liquid crystal display or the like for displaying various data, an input device 24 composed of a keyboard or a touch panel for inputting various information, and stores various data. Storage device 25 such as a hard disk drive (HDD) or a flexible disk drive (FDD), and a data communication device 27 for performing wireless communication with a wireless base station (not shown) via a communication device antenna 26. , G
A GPS receiver 29 that receives a radio wave from a GPS satellite via a PS antenna 28, and calculates the current position data of the receiving terminal device 20 based on the output signal of the GPS receiver 29, and extracts and outputs the current time data. Computer 30, a speaker 31 for outputting various sounds, an expansion bus interface device 32 for connecting various expansion devices, and devices 21 to 32 constituting the reception terminal device 20.
And an internal bus 33 for connecting

(3) Operation of the Encrypted Electronic Mail System Next, the operation of the encrypted electronic mail system will be described with reference to the functional block diagram of the encryption system shown in FIG. 3 and the processing sequence diagram shown in FIG. (3.1) Configuration of Condition Database Section Here, prior to the description of the operation of the encrypted electronic mail system,
An example of a data configuration of the condition database unit 41 (see FIG. 3) will be described. Since the configuration of the encryption key and the decryption key are the same, only the encryption key will be described in the following description.

The condition database unit 41 is, for example, as shown in FIG.
As shown in the figure, the position table 41P, the time table 41
T and a user identification table 42U. The position table 41P stores a position encryption key in association with the position. For example, the position encryption key corresponding to position B is B
Becomes In this case, the position information can be set based on position coordinates such as a latitude range and a longitude range, and room units such as a first meeting room and a second reception room.

The time table 41T stores a time encryption key in association with time. For example, the time encryption key corresponding to time D is D '. In this case, the time information can be set in units of XX hour to XX hour, □ day, △ day, and the like. The user identification table 42U stores a user identification encryption key in association with the user. For example, the user identification encryption key corresponding to the user F is F ″. In this case, the user identification information can be set in units of XX, □□ team, □ section, etc. .

Although the position encryption key and the time encryption key are essential in this embodiment, the user-specific encryption key is
It may be used as needed. In response to this, a user-specific decryption key may be used as needed. In the following description, a set of a position encryption key and a time encryption key or a set of a position encryption key, a time encryption key, and a user-specific encryption key are collectively referred to as an encryption key, and a set of position decryption keys is used. The decryption key and the time decryption key or a set of the position decryption key, the time decryption key, and the user-specific decryption key are collectively referred to as a decryption key.

(3.2) Specific Operation of Encrypted Electronic Mail System Next, the operation will be described. First, the encryption condition setting unit 31 of the transmitting terminal device 15 sets encryption conditions for the encryption server 11 (steps S1 and S21). More specifically, for example, at least the reception conditions are set as encryption conditions. Set the location and reception time, and set the recipient if necessary. Thereby, the encryption server 11 activates the encryption condition setting unit 41 (step S25), and the encryption condition setting unit 4
1 retrieves an encryption key from the condition database unit 42 according to the set encryption condition (steps S2 and S2).
6), and output it to the key transmission unit 47 (step S3).

Thus, the key transmitting section 47 transmits the retrieved encryption key to the encrypting section 33 of the transmitting terminal device 15 (steps S4 and S27). In parallel with this, the transmitting terminal device 15 stores the plaintext of the e-mail prepared in the plaintext storage unit 32 (step S22). Then, the encryption unit 33 of the transmission terminal device 15 reads the plaintext of the email from the plaintext storage unit 32 (Step S5), encrypts the email, and generates encrypted email data SEM (Step S27). Is output to the communication unit 34 (step S6).

Thus, the communication unit 34 of the transmitting terminal device 15
Transmits the input encrypted e-mail data SEM to the receiving terminal device 20 (steps S7 and S2).
4). More specifically, the communication unit 34 of the transmitting terminal device 15
Transmits the encrypted electronic mail data SEM to the mail server 12 via the network 14. As a result, the mail server 12 receives the encrypted electronic mail data SE.
M is stored and held.

When the receiving terminal device 20 requests the mail server 12 to transfer the encrypted electronic mail data, the mail server 12 transmits the encrypted electronic mail data to the receiving terminal device 20 via the wireless relay station 13 and the wireless line. Will be done.
The receiving unit 45 of the receiving terminal device 20 receives the transmitted encrypted electronic mail data SEM (Step S30) and stores it in the ciphertext storage unit 46 (Step S8). More specifically, the communication device antenna 26 and the data communication device 17 functioning as the receiving unit 45 store the transmitted encrypted e-mail data SEM in the external storage device 25 functioning as the ciphertext storage unit 46. .

When the user of the receiving terminal device 20 instructs to decrypt the encrypted electronic mail data SEM, the measuring section 47 of the receiving terminal device 20 measures its own current position and current time (step S31), transmitting section 4
8 (step S9). Thereby, the transmitting unit 4
8 accesses the encryption server 11 and transmits the current position information and the current time information as measurement data to the search unit 44 of the encryption server 11 (steps S10 and S32). More specifically, the GPS receiver 29 and the GPS computer 3
0 functions as the measuring unit 47, and the GPS receiver 29
Radio waves from GPS satellites are received via the S antenna 28 and output to the GPS computer 30.

The GPS computer 30 includes a GPS receiver 29
, The current position data of the receiving terminal device 20 is calculated based on the output signal, and the current time data is extracted and output to the data communication device 27 and the memory 22 as measurement data. Thereby, the data communication device 27 functioning as the communication unit 48
Means that the current position data and the current time data are transmitted to the encryption server 11 via the communication device antenna 26. The search unit 44 of the encryption server 11 searches for a decryption key from the condition database unit 42 (Steps S11 and S11).
28), and output it to the key transmission unit 47 (step S1).
2).

The key transmitting section 47 transmits the retrieved decryption key to the decrypting section 50 of the transmitting terminal device 15 (Step S).
13, S29). As a result, the decryption unit 50 reads the encrypted e-mail data SEM from the ciphertext storage unit 46, and reads the encrypted e-mail data SEM from the The key is read out (steps S14 and S15).

The decryption unit 50 decrypts the encrypted electronic mail data SEM using the transmitted decryption key and secret key (step S33), and stores the plaintext of the electronic mail data in the memory 22 as the plaintext storage unit 51. Alternatively, it is stored in the external storage device 25 (steps S16 and S34). As a result, the CPU 21 can display the plain text of the e-mail data on the display device 23, and the user can read the contents of the e-mail.

(4) Effects of the Embodiment As described above, according to the embodiment, the protection against theft or eavesdropping of information is enhanced by performing encryption using at least the position (location) and time. Can be.
That is, since it is impossible to decrypt the received information unless the user goes to a specific place at a specific time, for example, it is possible to protect highly confidential information without leaking to a specific place. Become.

In addition, since the position (current position) and time (current time) are automatically obtained, information management of the user is not required, and labor can be simplified. Also,
It is physically impossible for a specific receiving terminal device to perform decryption processing at a plurality of locations at a designated time, and the probability that information is decrypted can be further reduced.

(5) Modification of Embodiment In the above description, a position encryption key, a time encryption key, and a user-specific encryption key are used as encryption keys. It is also possible to combine arbitrary passwords. In the above description, the case where the position information and the time information are used as the encryption key has been described. However, one or both of them may be configured to be processed as a password, or the processing may be performed as a password and an encryption key. It is also possible to configure.

In the above description, a GPS using a GPS satellite was used as the self-position detecting means. However, pseudo GPS information from a pseudo GPS satellite (GPS radio wave transmitter) appropriately installed, PHS, etc. It is also possible to adopt a configuration in which the information for specifying the wireless base station is used, such as the location registration information in the above, or a private PHS. As a result, it is possible to detect the own position in units of a plurality of wireless zones or units of a room.

The encryption method may be a common key method or a public key method. For example, in the case of the common key system, the position encryption key (required), the time encryption key (optional), the public key of the sender and the e-mail address of the receiver are combined by a predetermined calculation to obtain the common key. Can be generated. In the above description, the case of the electronic mail system has been described. However, the present invention is not limited to the electronic mail data, but can be applied to any data that can be digitized. For example, it is possible to prevent data from being read by an unauthorized employee by making the confidential data inaccessible only at a specific place in the company.

[0035]

According to the present invention, it is possible to enhance protection against information theft or eavesdropping and enhance confidentiality by performing encryption using at least the position information and the time information. Further, by automatically acquiring the position information and the time information, the burden on the user for information management does not increase. Further, since it is physically impossible for one device to attempt decryption processing at a plurality of locations at a designated time, the probability that information is decrypted can be further reduced.

[Brief description of the drawings]

FIG. 1 is a schematic configuration diagram when an encrypted electronic mail system is constructed.

FIG. 2 is a schematic block diagram of a receiving terminal device.

FIG. 3 is a functional configuration block diagram of an encrypted electronic mail system.

FIG. 4 is a processing sequence diagram of the encrypted electronic mail system.

FIG. 5 is a diagram illustrating a data configuration example in a condition database unit.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 ... Encryption electronic mail system, 11 ... Encryption server, 12 ... Mail server, 13 ... Wireless relay station, 14 ... Network, 15 ... Transmission terminal device, 20 ... Reception terminal device (portable information processing device), 21 ... CPU 22 memory, 23 display device, 24 input device, 25 external storage device, 26 antenna for communication device, 27 data communication device, 28 GPS reception antenna, 29 GPS receiver, 30 GPS Computer, 31 speaker, 32 bus extension interface, 33 internal bus

Claims (11)

[Claims] 1. An encryption key generation unit that generates an encryption key using input position information and input time information, and an encryption unit that encrypts input information using the encryption key. An encryption device comprising: 2. The encryption device according to claim 1, wherein the encryption key generation unit uses transmission destination specifying information for specifying a transmission destination of the input information in addition to the position information and the time information. An encryption key for generating the encryption key. 3. A decryption key generating means for generating a decryption key using the input current position information and the input current time information, and decryption for decrypting the input encryption information using the decryption key. Decoding means. 4. The decryption device according to claim 3, wherein the decryption key generation means specifies a transmission destination of the input encryption information in addition to the current position information and the current time information. A decryption device that generates the decryption key using specific information. 5. A portable information processing apparatus for decrypting input encrypted information which is input encrypted data, a self-position detecting means for detecting a current position of the self and outputting current position information, and detecting a current time. Current time detecting means for outputting current time information, decryption key generating means for generating a decryption key using the current position information and the current time information, and input encryption information using the decryption key. A portable information processing apparatus, comprising: decoding means for decoding. 6. An encryption key generation processing circuit that generates an encryption key using input position information and input time information, and an encryption process that encrypts input information using the encryption key. An encryption device comprising: a circuit. 7. A decryption key generation processing circuit that generates a decryption key using the input current position information and the input current time information, and decrypts the input encryption information using the decryption key. A decryption processing circuit. 8. A portable information processing device for decrypting input encrypted information, which is input encrypted data, a self-position detecting device for detecting its own current position and outputting current position information, and detecting a current time. A current time detecting device that outputs current time information; a decryption key generation processing circuit that generates a decryption key using the current position information and the current time information; and input encryption information using the decryption key. And a decryption processing circuit for decrypting the information. 9. An encryption key generation step of generating an encryption key using input position information and input time information; and an encryption step of encrypting input information using the encryption key. An encryption method comprising: 10. A decryption key generating step of generating a decryption key using the input current position information and the input current time information, and decrypting the input encryption information using the decryption key. And a decoding step. 11. A control method for a portable information processing apparatus for decrypting input encrypted information, which is input encrypted data, comprising: a self-position detecting step of detecting a current position of the portable information processing apparatus; and a current time of detecting a current time. A detection step; a decryption key generation step of generating a decryption key using the detected current position and the detected current time; and decrypting the input encryption information using the generated decryption key. A method for controlling a portable information processing apparatus, comprising: a decoding step.