JP2000253459A - Cipher radio communication equipment - Google Patents

Abstract

PROBLEM TO BE SOLVED: To independently execute security management in each organization user (e.g. a company) while using the same machine type of terminal equipment, control stations and base stations in radio communication. SOLUTION: A radio communication equipment consists of plural terminal equipments 1 for transmitting/receiving information, plural control stations 2 for transmitting/receiving information and executing security management and at least one base station 3 for transmitting/receiving radio waves. Each control station 2 generates a 1st cipher key different in each terminal equipment and a 2nd cipher key different in each communication group. The control station 2 is arranged close to a corresponding terminal equipment and electrically connected to the terminal to store the 1st cipher key in the corresponding terminal equipment. The 2nd cipher key is ciphered by the 1st cipher key and distributed. Application information is ciphered by the 2nd cipher key and transmitted. Before using the radio communication device by a certain organized user after shipping it from a plant, the 1st cipher key can be secretly packaged. Since the 2nd cipher key to be used for group communication can be wirelessly distributed, the secrecy of communication can be individually maintained in each organized user.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an encrypted wireless communication device, and more particularly to an encrypted wireless communication device capable of independently controlling security for each user while a plurality of users jointly use a wireless communication base station. .

[0002]

2. Description of the Related Art A radio communication device can be received by anyone who can reach a radio wave, and has been used for 1: n communication such as simultaneous notification. In particular, a wireless device in which an antenna is attached to a tall tower and used jointly by a plurality of users has the advantages that the communication zone can be expanded and the frequency can be effectively used.

[0003]

However, in the conventional wireless cryptographic communication device, since security technology is not sufficient, when it is necessary to keep secret, another system having different hardware for each user is installed. There was a problem that had to be done.

[0004] An object of the present invention is to solve the above-mentioned conventional problems and to make the equipment / equipment such as a terminal, a control station, and a base station used by a communication company the same model in wireless communication.
Independent security management is performed for each user group (eg, company).

[0005]

In order to solve the above problems, the present invention provides a plurality of terminals for transmitting and receiving information,
A radio communication apparatus comprising a plurality of control stations for transmitting and receiving information and managing security, and at least one base station for transmitting and receiving radio waves. The control station comprises: an information transmission means for communicating with the base station; a connection means for electrically connecting the terminal in close proximity; and a terminal belonging to the own station. Storage means for storing as many first encryption keys as the number of communication keys, storage means for storing as many second encryption keys as the number of communication groups managed by the own station, first encryption keys different for each terminal, and Means for generating a different second encryption key, means for transmitting the first encryption key to the corresponding terminal via the connection means, and means for encrypting the second encryption key with the first encryption key And distributes the encrypted second encryption key to the terminal via the base station. Means for encrypting the application information with the second encryption key, means for simultaneously transmitting the encrypted application information to a plurality of terminals via the base station, and means for transmitting the received encrypted application information to the second terminal. Means for decrypting and outputting with the encryption key,
Wireless information transmitting means for communicating with the base station, connecting means for electrically connecting the control station in close proximity, storing means for storing the first encryption key and the second encryption key, Means for decrypting the encryption key with the first encryption key, means for decrypting the received encrypted application information into plaintext with the second encryption key, means for encrypting the application information with the second encryption key, Means for transmitting information to the control station via the base station.

[0006] With this configuration, the first encryption key can be secretly mounted after the device / equipment maker is shipped and before the user organization uses it, and the second encryption key used for group communication by the first encryption key. The key can be distributed wirelessly, the application information can be transmitted using the second encryption key, and the communication secret can be kept independently for each user group.

[0007] By independently managing security by a control station installed for each user group, communication device manufacturers,
Secret communications can be made to telecommunications companies operating base stations and other user organizations. That is, communication satisfying the following three conditions can be performed. (1) A 1: n communication service used for broadcast notification and the like can be provided. (2) While a plurality of users (user groups and companies) jointly use a base station for transmitting and receiving radio waves, each user can independently perform security management. It is possible to communicate completely confidentially to communication device manufacturers, communication companies operating base stations, and other users. (3) A member of a communication group of terminals forming n of 1: n communication in preparation for loss or theft of a terminal, which is the most important issue in security management of a group communication system including many terminals. Can be easily changed by the user.

[0008]

BEST MODE FOR CARRYING OUT THE INVENTION
In a wireless communication apparatus including a plurality of terminals for transmitting and receiving information, a plurality of control stations for transmitting and receiving information, and security management, and at least one base station for transmitting and receiving radio waves, (1) the base station includes: And (2) the control station comprises: an information transmission means for communicating with the base station; and a wireless communication means for transmitting information to and from the base station. Connecting means for electrically connecting the terminals in close proximity to each other, storage means for storing the first encryption keys of the number of terminals belonging to the own station, and second means of the number of communication groups managed by the own station. A storage unit for storing an encryption key, an encryption key generation unit for generating a first encryption key different for each terminal and a second encryption key different for each communication group, and storing the first encryption key via the connection unit. Means for transmitting to the corresponding terminal, and the second encryption key Means for encrypting with the first encryption key, means for delivering the encrypted second encryption key to the terminal via the base station, means for encrypting application information with the second encryption key, Means for simultaneously transmitting the encrypted application information to a plurality of terminals via the base station, and means for decoding and outputting the received encrypted application information with the second encryption key,
(3) The terminal stores wireless information transmitting means to and from the base station, connecting means for electrically connecting the control station in close proximity, and a first encryption key and a second encryption key. Storage means, means for decrypting the received encrypted second encryption key with the first encryption key, means for decrypting the received encrypted application information into plaintext with the second encryption key, An encrypted wireless communication device having means for encrypting with an encryption key and means for transmitting encrypted application information to the control station via the base station, wherein a plurality of users jointly use one base station. Thus, there is an effect that group communication by encryption is performed while security management is independently performed for each user.

[0009] The invention described in claim 2 of the present invention is claim 1.
The encrypted wireless communication device according to claim 1, wherein the terminal has means for transmitting the encrypted application information to a plurality of different terminals via the base station. Has the effect of exchanging encrypted application information.

The third aspect of the present invention is the first aspect of the present invention.
In the cipher wireless communication apparatus described above, the control station retrieves, from the storage unit, a second encryption key of a communication group to which a terminal is to be added, and the control station transmits the second encryption key to the first encryption key of the terminal. Means for encrypting with a key, and means for distributing the encrypted second encryption key to the terminal via the base station, and distributing the encrypted second encryption key to the terminal. This has the effect of adding the machine to the communication group.

The fourth aspect of the present invention is the first aspect of the present invention.
In the cipher wireless communication apparatus described above, the terminal unit stores a plurality of first encryption keys, and a unit that receives one first encryption key from each of a plurality of control stations and stores the first encryption key in the storage unit. And has an operation of being managed by a plurality of control stations by storing a plurality of first encryption keys.

The fifth aspect of the present invention is the first aspect of the present invention.
The cryptographic wireless communication device according to the above, wherein the control station has storage means for storing the second encryption keys as many as the number of communication groups operated by the own station, and means for managing a plurality of communication groups, Storing a plurality of second encryption keys has the effect of managing a plurality of communication groups.

The invention according to claim 6 of the present invention is the invention according to claim 1.
In the cipher wireless communication apparatus described above, the terminal has storage means for storing the second encryption keys as many as the number of communication groups to which the terminals belong, and stores a plurality of second encryption keys to store a plurality of second encryption keys. It has the effect of belonging to a communication group.

According to a seventh aspect of the present invention, there is provided the first aspect.
The cryptographic wireless communication device according to claim 1, wherein the control station includes: a plurality of communication means for communicating with the base station; a means for connecting to the plurality of base stations; and a terminal existing in a plurality of base station areas (communication zones). It has means for communicating and means for managing security of terminals existing in a plurality of base station areas (communication zones). By connecting with a plurality of base stations, terminals in a plurality of communication zones can be connected. Has the effect of managing.

FIG. 1 shows an embodiment of the present invention.
This will be described in detail with reference to FIG.

(Embodiment) In an embodiment of the present invention, a control station generates a different first encryption key for each terminal, and electrically connects the terminal close to the control station to generate a first encryption key. The key is stored in the terminal, the control station generates a different second encryption key for each communication group, encrypts the second encryption key with the first encryption key, distributes the encrypted second encryption key to the terminal, and transmits the application information to the second encryption key. Communication by encrypting with a wireless communication device, so that even if a plurality of users jointly use one base station, a group communication can be performed by encryption while performing security management independently for each user. It is.

FIG. 1 is a configuration diagram of a wireless communication apparatus according to an embodiment of the present invention. In FIG. 1A, reference numeral 1 denotes a wireless communication terminal (mobile device). Reference numeral 2 denotes a control station serving as an information source of application information or a wireless communication control station that performs security management. Reference numeral 3 denotes a wireless communication base station that actually transmits / receives radio waves. There are a plurality of terminals 1 and a plurality of control stations 2, respectively. Normally, one control station 2 is installed for each user group, performs security management for each user group, and communicates application information to the terminal 1. The terminal 1 is usually carried by an individual belonging to a user group and used for secret communication.

In FIG. 1, for the sake of explanation, the terminal 1
There are six (a), 1 (b), 1 (c), 1 (d), 1 (e), 1 (f),
It is assumed that three control stations 2 (a), 2 (b), and 2 (c) exist. Normally, application information is transmitted between the control station 2 and the plurality of terminals 1 and between the terminals 1. It is assumed that wireless transmission is performed between the terminal device 1 and the base station 3, but wired transmission or wireless transmission may be performed between the base station 3 and the control station 2. The control station 2 gives an encryption key to the terminal 1 in a manner described later. Terminal 1 receiving the encryption key,
It belongs to the control station 2 that has given the encryption key. That is, the terminal 1 performs security management by the control station 2 to which the encryption key is given, and transmits and receives application information between the terminals 1 belonging to the control station 2 and between the terminal 1 and the control station 2. As shown in FIG. 1B, a first encryption key is generated and
When distributing, the control station 2 and the terminal 1 are installed close to each other.

FIG. 2 is a functional block diagram of the wireless communication apparatus according to the embodiment of the present invention. In FIG. 2, terminal 1
Is composed of functional units (electronic circuits) such as an antenna 11, a radio circuit 12, an encryption / decryption unit 13, a memory 14, a reception circuit 15, a connection unit 16, an input / output 18, and a control unit 19. The control station 2 includes a transmission / reception unit 22, an encryption / decryption unit 23, a memory 24, a transmission circuit 25, a connection unit 26, a key generation unit 27, an input / output 28, and an operation control unit.
It consists of 29 functional units (electronic circuits).
The base station 3 includes an antenna 31, a radio circuit 32, and a communication path selector.
33, functional units (electronic circuits) such as a transmitting / receiving unit 34 and a control unit 39. The antenna 11 of the terminal 1 and the antenna 31 of the base station 3 transmit radio waves into the air or receive radio waves in space. The space between the antenna 11 and the antenna 31 is a propagation path for radio waves and a transmission path for information.

The radio circuit 12 of the terminal 1 and the radio circuit 32 of the base station 2 convert (modulate) a digital signal into an analog signal, convert it into a predetermined high-frequency signal, send it to an antenna, or send it to an antenna. This is a transmission / reception circuit of a so-called ordinary digital radio, which converts (demodulates) a received predetermined high-frequency signal into a digital signal.

The encryption / decryption unit 13 of the terminal 1 and the encryption / decryption unit 23 of the control station 2 transmit plaintext information to be transmitted using an encryption key (the information to be transmitted includes application information and an encryption key). ) Or decrypts received ciphertext information into plaintext using an encryption key, and is usually configured by a microcomputer. In the present embodiment, the encryption method used in the encryption / decryption unit is described assuming a secret key encryption method, but may be a public key encryption method.

The memory 14 of the terminal 1 and the memory 24 of the control station 2
Is a storage element for storing an encryption key, and usually stores a plurality of encryption keys. The stored encryption key will be described later. Note that there may be a case where the encryption key stored in the memories 14 and 24 is illegally read (stolen) for eavesdropping. Therefore, if the memories 14 and 24 are excellent in tamper resistance (performance in which it is difficult to check the stored contents by checking the internal structure), the memories 14 and 24 will be more excellent in security.

The receiving circuit 15 of the terminal 1 is a circuit for receiving an encryption key (first encryption key described later) generated and transmitted by the control station 2. The transmission circuit 25 of the control station 2 is a circuit for transmitting an encryption key (first encryption key described later) generated by the control station 2 to the terminal 1.

The connection section 16 of the terminal 1 and the connection section 26 of the control station 2
Is to connect the control station 2 and the terminal 1 in close proximity and electrically over a short distance in order to send an encryption key (a first encryption key, which will be described later).・
Connector connection. In this connection mode, the connection is made to send the encryption key while preventing the attacker from intercepting / intercepting the eavesdropping. Therefore, a long-distance wired line such as a wireless or telephone line that may be eavesdropped is not used. In spite of the fact that there is a wireless transmission path between the control station 2 and the terminal 1, the connection unit 16 and the connection unit 26 are both set up to send an encryption key (a first encryption key described later). Provided.

The input / output 18 of the terminal 1 and the input / output 28 of the control station 2
Is input / output of application information to be sent / received.
Application information such as character information, audio information, and image information is input and output. In the present embodiment, it is assumed that the application information is digitized.

The control unit 19 of the terminal 1, the operation control unit 29 of the control station 2, and the control unit 39 of the base station 3 perform overall control of the terminal 1, the control station 2 and the base station 3, respectively. in addition,
The operation control unit 29 of the control station 2 connects the terminal 1 to the control station 2 and sends an encryption key (a first encryption key to be described later).
It also includes an operation function of a person who operates to give an instruction to newly send an encryption key and to change the affiliation of the terminal 1.

The transmission / reception section 22 of the control station and the transmission / reception section 34 of the base station are transmission / reception circuits for transmitting information between the control station 2 and the base station 3. The transmission path between them may be a transmission path for wired communication or a transmission path for wireless communication. Application information and an encryption key can be considered as information flowing through this transmission path.
Each of them is an encrypted digital signal, which is information that is relayed between the control station 2 and the terminal 1 via the base station 3. Usually, the number of the transmission / reception units 22 of the control station 2 is one (as a special case, one control station 2 may be connected to a plurality of base stations 3; Are multiple.) However, the transmitting / receiving unit 34 of the base station 3
Usually, a plurality of control stations 2 are prepared for the number of control stations 2 connected to one base station 3.

The key generation section 27 generates digital data serving as an encryption key, and is usually composed of a microcomputer and a random number generator. The key generation unit 27 generates a random number, selects a random number that matches the encryption key from the random number, and sets it as an encryption key (in a typical secret encryption key DES, the random number is used as the encryption key as it is) Generates a cryptographic key by performing more mathematical conversion from random numbers (typical public key cryptography RSA generates multiple random numbers, finds two prime numbers from the random numbers, and calculates from the two prime numbers) To obtain an encryption key). As an example of the random number generator, there is one using thermal noise. The encryption key generated by the key generation unit 27 is distributed in a manner described later, and is stored in the memory of the control station 2.
24 and the memory of terminal 1 (there may be more than one terminal 1)
Store in both 14

The communication path selector 33 performs frequency division, time division,
In a multiplexing method such as packet division, a communication path is allocated in a wireless method in which a channel (a communication path) is allocated according to a request. In recent digital radios (such as mobile phones and MCA radios) that jointly use frequency bands, frequency division and time division are used in combination, and frequency and time slots are assigned to terminals and terminal groups. (Fields in the frame) are both assigned. The communication path selection unit 33 selects a communication path by putting (or taking out) a signal transmitted and received from the control station 2 in a time slot assigned by the frequency modem assigned in this way.

FIG. 3 shows the details of the memory 14 and the memory 24, that is, the storage contents thereof. Memory 14, Memory 24
The first encryption key and the second encryption key are stored in the first encryption key. The second encryption key is mainly used for encrypting application information, and the first encryption key is obtained by encrypting and distributing the second encryption key. Used when

The first encryption key and the second encryption key are stored in the memory 14 of the terminal 1. The first encryption key stored in the terminal 1 is an encryption key unique to the terminal, and differs for each terminal.
Normally, the terminal 1 stores one first encryption key.
As a special case, it is conceivable to store a plurality of first encryption keys in the terminal device 1 and perform security management independently from the plurality of control stations 2. The second encryption key stored in the terminal 1 is an encryption key unique to the communication group to which the terminal belongs. If the communication group is different, a different second encryption key is used. And a plurality of second encryption keys for the number of communication groups to which the terminal 1 belongs.

The first encryption key and the second encryption key are stored in the memory 24 of the control station 2. The control station 2 stores a first encryption key stored in all the terminals 1 under its control. Therefore, the number of the first encryption keys to be stored is the same as the number of the terminal devices 1 being served thereby. The second encryption key stored in the control station 2 is an encryption key unique to the communication group operated by the control station 2, and the control station 2 has a plurality of first encryption keys corresponding to the number of communication groups operated by the control station. Remember the key.

The operation of the cryptographic wireless communication apparatus according to the embodiment of the present invention configured as described above will be described.

[1] The operation of storing the first encryption key will be described. When shipping the factory, the memory 14 of the terminal 1
Also, the encryption key is not written in the memory 24 of the control station 2. Before the user uses the terminal 1, the terminal 1 is connected to the control station 2, the operation control unit 29 is operated, the key generation unit 27 generates an encryption key, and the memory 14 of the terminal 1 and the memory of the control station 2 are used. 24,
The first encryption key is stored. That is, the operator places the terminal 1 and the control station 2 in close proximity, electrically connects the terminal 1 and the control station 2, and stores the encryption key. In this case, the operator first connects the terminal 1 and the control station 2 to the connection unit.
The connection (connection) is made via the connection part 26 with the connection part 16. Subsequently, the operator operates the operation control unit 29 to give a command to newly store the encryption key. The key generation unit 27 receiving the instruction from the operation control unit 29 generates an encryption key,
25, via the connection unit 26, further via the connection unit 16 of the terminal 1 and the receiving circuit 15 to cause the memory 14 of the terminal 1 to store it as a first encryption key, and the key generation unit 27 The same encryption key as the given encryption key is also stored in the memory 24 of the control station 2 as the first encryption key. When a large number of terminals 1 exist, the above-described operation of storing the first encryption key is performed for each terminal 1.

When the terminal 1 changes the control station 2 to which the terminal 1 belongs, a new first encryption key is stored in the memory 14 and the memory 24 of the control station 2 to which the terminal station 1 belongs, in the same operation procedure / device operation. To memorize.

[2] Generation of groups, assignment of keys, and change of keys will be described. When a group (communication group) is newly generated, the operator operates the operation control unit 29 of the control station 2 to specify the terminal 1 (usually a plurality) belonging to the group. The operation control unit 29 designated to generate a group gives a command to the key generation unit 27 to generate one encryption key, and the memory 24 of the control station 2 and the memory 14 of all the terminals 1 to belong to the group. Then, it is stored as the second encryption key. In the control station 2, the encryption key can be stored in the memory 24 by the operation of the internal circuit of the control station 2. To the memory 14 of the terminal 1 via the base station 3, the second
The encryption key is encrypted with the first encryption key, and the second encryption key is transmitted wirelessly. The details will be described later. As a matter of course, the first encryption key is different for each terminal 1, so that the second encryption key is transmitted in the order of the terminals 1. As a result, the terminals 1 belonging to the same group store the same second encryption key.

It should be noted that the encryption key can be changed to a new encryption key in the manner of generating a group. That is, if the group of the terminal 1 belonging to the group is made the same as before, and the group is generated, a group having the same group members and different encryption keys from the previous group is created.

[3] The joining of a terminal to a group will be described. When adding a terminal to an existing group,
The operator operates the operation control unit 29 of the control station 2 to specify the terminal 1 and a group to which the terminal 1 belongs. Operation control unit designated to join terminal 1 in group
29. The second encryption key of the group stored in the memory 24 of the control station 2 is extracted and stored in the memory 14 of the terminal 1 to which it belongs. Specifically, the second encryption key is encrypted with the first encryption key and transmitted to the memory 14 of the terminal 1 via the base station 3 wirelessly. The details will be described later.

[4] Detailed operation of wireless distribution of the second encryption key will be described. When distributing the second encryption key to one terminal 1, the control station 2 distributes the second encryption key to the terminal 1 via the base station 3. As described above, the wireless transmission path is between the base station 3 and the terminal 1. At this time, the second encryption key is encrypted with the first encryption key that differs for each terminal and distributed. The details are described below.

The second encryption key (the one generated by the key generation unit 27 of the control station 2 and the one obtained from the memory 24 of the control station 2) is unique to the terminal 1 stored in the memory 24. Using the first encryption key, the encryption / decryption unit 23 encrypts the plaintext into ciphertext, and sends the encrypted text to the transmission / reception unit 34 of the base station 3 from the transmission / reception unit 22. The information (the second encryption key encrypted with the first encryption key) received by the transmission / reception unit 34 of the base station 3 is used as a signal of the frequency / time slot selected by the communication path selection unit 33 as a radio circuit signal.
The digital signal is converted (modulated) from a digital signal to a high-frequency signal, and transmitted as a radio wave from the antenna 31 to space.
The terminal 1 having received the radio wave of the base station 3 by the antenna 11 selects a signal of a predetermined frequency / time slot by the radio circuit 12, converts (demodulates) the signal from a high frequency signal to a digital signal, and demodulates the memory. The encryption / decryption unit 13 decrypts the ciphertext into plaintext by using the first encryption key extracted from 14 and stores it in the memory 14 as a second encryption key. It should be noted that the terminal 1 without the first encryption key is, of course,
Even if received, the second encryption key, which is a ciphertext, cannot be decrypted (decrypted) into plaintext. When distributing the second encryption key to a plurality of terminals 1, this operation is repeated by the number of terminals.

[5] The operation of communication of application information will be described. The application information such as characters, audio, video, etc. is encrypted with the second encryption key and transmitted between the control station 2 and the terminal 1 and between the terminal 1 via the base station 3. The details are described below.

In communication between the control station 2 and the terminal 1, application information to be transmitted input from the input / output 28 of the control station 2 (supposed to be input as digital information) is stored in the memory 24. Encryption / decryption unit using a second encryption key unique to the group (communication group)
At 23, the plaintext is encrypted into a ciphertext and transmitted from the transmitting / receiving unit 22 to the transmitting / receiving unit 34 of the base station 3. The information (application information) received by the transmitting / receiving section 34 is passed to the radio circuit 32 as a signal of the frequency / time slot selected by the communication path selecting section 33, and is converted (modulated) from a digital signal to a high-frequency signal. The signal is transmitted as radio waves from the antenna 31 to the space. The terminal 1 having received the radio wave of the base station 3 by the antenna 11 selects a signal of a predetermined frequency / time slot by the radio circuit 12, converts (demodulates) the signal from a high frequency signal to a digital signal, and demodulates the memory. The encryption / decryption unit 13 uses the second encryption key extracted from 14 to decrypt the ciphertext into plaintext, and as input and output application information (in this embodiment, it is assumed that digital information is output as it is). 18
Output from The terminal 1 that has received the radio wave can receive the application information transmitted by the control station 2 if the second encryption key is stored, so that the plurality of terminals 1 simultaneously receive the radio wave and transmit the application information. It will be able to receive. The terminal 1 that does not have the second encryption key cannot decrypt (decrypt) the ciphertext into plaintext even if it receives it. The application information transmitted from the terminal 1 to the control station 2 is transmitted in the reverse manner.

In the communication between the terminals 1, a certain terminal 1
The application information to be transmitted input from the input / output 18 (for example, 1 (a)) (in this example, it is assumed to be input as digital information) is stored in the group (communication group) stored in the memory 14. ) Using a unique second encryption key, the encryption / decryption unit 13 encrypts the plaintext into a ciphertext, passes it to the radio circuit 12, converts (modulates) the digital signal into a high-frequency signal, and transmits the radio wave from the antenna 11. To send to space. The base station 3 having received the radio wave of the terminal 1 by the antenna 31 selects a signal of a predetermined frequency / time slot by the radio circuit 32, converts (demodulates) the signal from a high-frequency signal to a digital signal, and re-converts the signal. , Call path selector
As a signal of the frequency / time slot designated by 33 (usually, a frequency / time slot different from the frequency / time slot when the base station 3 receives), the radio circuit 32
To digital signal and convert to high frequency signal (modulation)
Then, the signal is transmitted from the antenna 31 to the space as a radio wave. Another terminal 1 (for example, 1 (b)) that has received the radio wave of the base station 3 by the antenna 11 uses a predetermined frequency /
A signal of a time slot is selected, the signal is converted (demodulated) from a high-frequency signal to a digital signal, and the encryption / decryption unit 13 uses the second encryption key extracted from the memory 14 to decrypt the ciphertext into plaintext, The received application information is output from the input / output 18 as digital information (in this embodiment, the digital information is output as it is).

[6] The group communication will be described. In the terminal shown in FIG. 1, 1 (a), 1 (b), 1
It is assumed that the three stations (c) have been given different first encryption keys Ka, Kb, and Kc by the control station 2 (a). As described above, in this case, the control station 2 (a) also stores the first encryption keys Ka, Kb, and Kc. Two terminals 1 (d) and 1 (e) use the first encryption key by the control station 2 (b), and one terminal 1 (f) uses the first encryption key by the control station 2 (c). Suppose you have been given a key.

Now, three terminals 1 (a), 1 (b) and 1 (c)
In order to form a communication group under the control of the control station 2 (a), it is assumed that each terminal has a common second encryption key Ga1. In the process, the control station 2 (a) first
For (a), the second encryption key Ga1 is encrypted with the first encryption key Ka and distributed. Subsequently, the second encryption key Ga1 is transmitted to the terminal 1 (b).
1 is encrypted with the first encryption key Kb and distributed.
For (c), the second encryption key Ga1 is encrypted with the first encryption key Kc and distributed. In this way, three terminals 1 (a), 1
(b) and 1 (c) can have the same second encryption key Ga1. 2
Control stations 2 (b), 2 (c) and three terminals 1 (d), 1 (e), 1 (f)
Does not know the first encryption key Ka, Kb, Kc, so the second encryption key
I can't know Ga1.

Next, the control station 1 (a) encrypts the application information with the second encryption key Ga1, and distributes the application information wirelessly via the base station. Terminal 1 having the same second encryption key Ga1
The three units (a), 1 (b) and 1 (c) receive the application information and can decrypt the ciphertext into plaintext using the encryption key Ga1.
However, the terminals 1 (d) and 1 (d) that do not have the second encryption key Ga1
(e), 1 (f) and the control stations 2 (b), 2 (c) cannot decrypt the ciphertext into plaintext even if they receive the application information because they do not have the encryption key Ga1. In this way, independent security management can be performed for each control station.

The control station 2 is provided with a plurality of transmitting / receiving sections 22, and the control station 2 is connected to a plurality of base stations to transfer information, whereby terminal devices existing in a plurality of communication zones (multi-zones) are provided. 1, and communication between the terminal 1 and the control station 2 existing in a plurality of communication zones becomes possible.

By storing a plurality of second encryption keys in the control station 2, a plurality of communication groups can be provided under the control of the control station 2. Further, by storing a plurality of second encryption keys in the terminal 1, the terminal can belong to a plurality of communication groups. In addition, terminal 1
Providing a plurality of storage spaces for the first encryption key in the memory 14 of
By storing different first encryption keys from different control stations 2 in the storage space of the terminal 1, the terminal 1 is placed under the security control of the plurality of control stations 2, and the terminal 1 is controlled by the plurality of control stations 2. Can be communicated with.

As described above, in the embodiment of the present invention,
A control station generates a first encryption key different for each terminal at a control station, electrically connects the terminal close to the control station, stores the first encryption key in the terminal, and performs control. The station generates a different second encryption key for each communication group, and assigns the second encryption key to the first
The configuration is such that communication is performed by encrypting with the encryption key and distributing to the terminal, and encrypting the application information with the second encryption key. In addition, group communication by encryption can be performed while independently performing security management.

[0050]

As is apparent from the above description, according to the present invention, a plurality of terminals for transmitting and receiving information, a plurality of control stations for transmitting and receiving information and security management, and at least one base station for transmitting and receiving radio waves. A base station, the base station has a means for transmitting information to and from the control station, and a wireless information transmitting means to and from the terminal, and the control station transmits information to and from the base station. Transmission means, connection means for electrically connecting terminals in close proximity, storage means for storing the first encryption keys as many as the number of terminals belonging to the own station, and communication groups managed by the own station Storage means for storing the same number of second encryption keys, encryption key generation means for generating a first encryption key different for each terminal and a second encryption key different for each communication group; Means for transmitting the first encryption key to the corresponding terminal; Means for encrypting with the encryption key, means for delivering the encrypted second encryption key to the terminal via the base station, means for encrypting application information with the second encryption key, and encrypted application information And means for simultaneously transmitting the encrypted application information to the plurality of terminals via the base station, and means for decrypting and outputting the received encrypted application information with the second encryption key. Wireless information transmitting means, connecting means for electrically connecting the control station in close proximity, storage means for storing a first encryption key and a second encryption key, and storing the received encrypted second encryption key First
Means for decrypting with the encryption key, means for decrypting the received encrypted application information into plaintext with the second encryption key, means for encrypting the application information with the second encryption key, and passing the encrypted application information through the base station And a means for transmitting the data to the control station, so that the control station's user organization generates the first encryption key in its own control station, and secretly writes it in the memory of the terminal at a nearby location. The first encryption key can be generated / stored without being known to the manufacturer of the device, the communication company operating the base station, or the user of another control station. . Since the second encryption key is encrypted with the first encryption key and delivered, the manufacturer that manufactures the device and the communication company that operates the base station despite the fact that the encryption key is delivered by radio waves that anyone can receive However, none of the users of the other control stations can know the second encryption key. A user (user group) having a certain control station can use one radio base station jointly independently and without infringing security by a user having another control station.

Further, the terminal has a configuration for transmitting the encrypted application information to a plurality of other terminals via the base station.
Since communication is performed by encrypting with the second encryption key, a third party other than the control station and the terminal under its control cannot intercept the application information being communicated unless the decryption of the second encryption key is successful. The effect is obtained.

Further, the control station is means for extracting from the storage means a second encryption key of a communication group to which a terminal is to be added, and means for encrypting the second encryption key with the first encryption key of the terminal. And means for distributing the encrypted second encryption key to the terminal via the base station. By distributing the same second encryption key to the plurality of terminals, The effect that simultaneous notification can be performed while maintaining security for the machine can be obtained.

Further, the terminal has a configuration having storage means for storing a plurality of first encryption keys, and means for receiving one first encryption key from each of a plurality of control stations and storing the received first encryption keys in the storage means. Therefore, an effect is obtained that one terminal can belong to a plurality of control stations.

Further, the control station is configured to have storage means for storing the second encryption keys as many as the number of communication groups operated by the control station and means for managing a plurality of communication groups. The effect is obtained that the station can manage a plurality of communication groups.

Further, since the terminal has the storage means for storing the second encryption keys as many as the number of communication groups to which the terminal belongs, one terminal can belong to a plurality of communication groups. Is obtained.

Further, the control station includes: a plurality of communication means for communicating with the base station; a means for connecting to the plurality of base stations; a means for communicating with terminals existing in a plurality of base station areas (communication zones); Since there is provided a means for performing security management of terminals existing in a plurality of base station areas (communication zones), an effect is obtained that one control station can manage terminals in a plurality of communication zones.

[Brief description of the drawings]

FIG. 1 is a system configuration diagram of an encryption communication device according to an embodiment of the present invention;

FIG. 2 is a functional block diagram of the cryptographic communication device according to the embodiment of the present invention;

FIG. 3 is an explanatory diagram of memory contents of the cryptographic communication device according to the embodiment of the present invention.

[Explanation of symbols]

 Reference Signs List 1 terminal 2 control station 3 base station 11 antenna 12 radio circuit 13 encryption / decryption unit 14 memory 15 reception circuit 16 connection unit 18 input / output 19 control unit 22 transmission / reception unit 23 encryption / decryption unit 24 memory 25 transmission circuit 26 Connection unit 27 Key generation unit 28 Input / output 29 Operation control unit 31 Antenna 32 Radio circuit 33 Call path selection unit 34 Transmission / reception unit 39 Control unit

────────────────────────────────────────────────── ───

[Procedure amendment]

[Submission date] December 27, 1999 (1999.12.
27)

[Procedure amendment 1]

[Document name to be amended] Statement

[Correction target item name] Claim 1

[Correction method] Change

[Correction contents]

[Procedure amendment 2]

[Document name to be amended] Statement

[Correction target item name] 0005

[Correction method] Change

[Correction contents]

[0005]

In order to solve the above problems, the present invention provides a plurality of terminals for transmitting and receiving information,
A radio communication apparatus comprising a plurality of control stations for transmitting and receiving information and managing security, and at least one base station for transmitting and receiving radio waves. Wireless information transmission means between the control station, the control station, the information transmission means between the base station, the connection means for connecting the terminal close to the electrical connection by connector-to-connector, Storage means for storing the first encryption keys by the number of terminals to which the terminal belongs, storage means for storing the second encryption keys by the number of communication groups managed by the own station, Means for generating an encryption key and a second encryption key different for each communication group, means for transmitting the first encryption key to the corresponding terminal via the connection means, and means for transmitting the second encryption key to the first encryption key. Means for encrypting with a key, and a base station for encrypting the encrypted second encryption key. Means for distributing to a terminal via a terminal, means for encrypting application information with a second encryption key, means for simultaneously transmitting the encrypted application information to a plurality of terminals via a base station, and the encrypted application data and means for then decoded output in the second encryption key, the terminal includes a wireless information transmission means between the base station, in close proximity to the control station connector-to-connector
Connecting means for electrically connecting the
Means for receiving the first encryption key from the control station ; storage means for storing the first encryption key and the second encryption key;
Means for decrypting the encryption key with the first encryption key, means for decrypting the received encrypted application information into plaintext with the second encryption key, means for encrypting the application information with the second encryption key, Means for transmitting information to the control station via the base station.

[Procedure amendment 3]

[Document name to be amended] Statement

[Correction target item name] 0008

[Correction method] Change

[Correction contents]

[0008]

BEST MODE FOR CARRYING OUT THE INVENTION
In a wireless communication apparatus including a plurality of terminals for transmitting and receiving information, a plurality of control stations for transmitting and receiving information, and security management, and at least one base station for transmitting and receiving radio waves, (1) the base station includes: And (2) the control station comprises: an information transmission means for communicating with the base station; and a wireless communication means for transmitting information to and from the base station. Close to connector-to-connect
Connection means for electrically connecting the communication terminals, storage means for storing the first encryption keys for the number of terminals belonging to the own station, and second encryption keys for the number of communication groups managed by the own station. Storage means for storing the first encryption key, a first encryption key different for each terminal and a second encryption key different for each communication group, and the first encryption key corresponding to the connection means. Means for sending to the terminal, means for encrypting the second encryption key with the first encryption key, means for delivering the encrypted second encryption key to the terminal via the base station,
Means for encrypting the application information with the second encryption key, means for simultaneously transmitting the encrypted application information to a plurality of terminals via the base station, and means for transmitting the received encrypted application information to the second terminal. Means for decrypting and outputting with a cryptographic key; and (3) said terminal is electrically connected to said base station by means of a connector-to-connector in close proximity to said control station. And a first encryption key received from the control station via the connection means.
Means for storing the first encryption key and the second encryption key, means for decrypting the received encrypted second encryption key with the first encryption key, and means for storing the received encrypted application information in the first encryption key. (2) A cryptographic radio comprising: means for decrypting plaintext with an encryption key; means for encrypting application information with the second encryption key; and means for transmitting encrypted application information to the control station via the base station. This is a communication device, and has an effect that a plurality of users jointly use one base station and perform group communication by encryption while performing security management independently for each user.

[Procedure amendment 4]

[Document name to be amended] Statement

[Correction target item name] 0050

[Correction method] Change

[Correction contents]

[0050]

As is apparent from the above description, according to the present invention, a plurality of terminals for transmitting and receiving information, a plurality of control stations for transmitting and receiving information and security management, and at least one base station for transmitting and receiving radio waves. A base station, the base station has a means for transmitting information to and from the control station, and a wireless information transmitting means to and from the terminal, and the control station transmits information to and from the base station. Transmitter and terminal close to connector
A connection means for electrically connecting with a two-connector, a storage means for storing the first encryption keys of the number of terminals belonging to the own station, and a second means of the number of communication groups managed by the own station.
Storage means for storing an encryption key; encryption key generation means for generating a first encryption key different for each terminal and a second encryption key different for each communication group; Means for sending to the terminal, means for encrypting the second encryption key with the first encryption key, means for delivering the encrypted second encryption key to the terminal via the base station, and means for transmitting application information to the terminal. (2) means for encrypting with the encryption key, means for simultaneously transmitting the encrypted application information to a plurality of terminals via the base station, and decrypting and outputting the received encrypted application information with the second encryption key Means for transmitting wireless information between the base station and the base station, connecting means for electrically connecting the control station in close proximity with a connector-to-connector, and a terminal via the connecting means. Controls one encryption key
Means for receiving from a station, storage means for storing a first encryption key and a second encryption key, means for decrypting the received encrypted second encryption key with the first encryption key, and received encrypted application information For decrypting the application information into plaintext with the second encryption key, means for encrypting the application information with the second encryption key, and means for transmitting the encrypted application information to the control station via the base station. So
Since the user organization of the control station generates the first encryption key in its own control station and secretly writes it in the memory of the terminal at a nearby location, the manufacturer of the device, the communication company operating the base station, The effect is obtained that the first encryption key can be generated / stored in a state that is not known to any users of other control stations. Since the second encryption key is encrypted with the first encryption key and delivered, the manufacturer that manufactures the device and the communication company that operates the base station despite the fact that the encryption key is delivered by radio waves that anyone can receive However, none of the users of the other control stations can know the second encryption key. A user (user group) having a certain control station can use one radio base station jointly independently and without infringing security by a user having another control station.

 ──────────────────────────────────────────────────続 き Continued on the front page F term (reference) 5J104 AA01 BA03 EA16 KA02 KA10 MA02 MA06 NA02 PA02 5K067 AA21 AA35 BB02 CC13 DD13 DD15 DD17 EE02 EE10 EE16 EE22 HH23 HH24 HH36 KK15

Claims (7)

[Claims] 1. A wireless communication device comprising: a plurality of terminals for transmitting and receiving information; a plurality of control stations for transmitting and receiving information and security management; and at least one base station for transmitting and receiving radio waves. The base station includes information transmission means for communicating with the control station and wireless information transmission means for communicating with the terminal. (2) The control station transmits information to and from the base station. Connection means for electrically connecting the terminals in close proximity, storage means for storing the first encryption keys for the number of terminals belonging to the own station, and a communication group managed by the own station. Storage means for storing a plurality of second encryption keys, encryption key generation means for generating a first encryption key different for each terminal and a second encryption key different for each communication group, and Means for sending a first encryption key to a corresponding terminal; Means for encrypting an encryption key with the first encryption key, means for delivering the encrypted second encryption key to the terminal via the base station, and encryption of application information with the second encryption key Means for simultaneously transmitting the encrypted application information to a plurality of terminals via the base station, and means for decrypting the received encrypted application information with the second encryption key and outputting the decrypted application information. (3) the terminal includes: a wireless information transmission unit for communicating with the base station; a connection unit for electrically connecting the control station in close proximity; a first encryption key and a second encryption key. Storage means for storing the received encrypted second encryption key with the first encryption key, means for decrypting the received encrypted application information into plain text with the second encryption key, Previous Means for encrypting the second encryption key, the encryption wireless communication apparatus characterized by comprising a means for transmitting the encrypted application data to the control station via the base station. 2. The encrypted wireless communication device according to claim 1, wherein the terminal has means for transmitting the encrypted application information to a plurality of other terminals via the base station. 3. The control station comprises: means for extracting a second encryption key of a communication group to which a terminal is to be added from the storage means; and encrypting the second encryption key by the first encryption key of the terminal. 2. The apparatus according to claim 1, further comprising: means for encrypting, and means for delivering the encrypted second encryption key to the terminal via the base station. 4. The terminal has storage means for storing a plurality of first encryption keys, and means for receiving one first encryption key from each of a plurality of control stations and storing the received first encryption keys in the storage means. The encrypted wireless communication device according to claim 1, wherein: 5. The control station according to claim 1, further comprising: storage means for storing the second encryption keys for the number of communication groups operated by the control station; and means for managing a plurality of communication groups. 2. The encrypted wireless communication device according to 1. 6. The encrypted wireless communication apparatus according to claim 1, wherein the terminal has storage means for storing the second encryption keys as many as the number of communication groups to which the terminals belong. 7. The control station comprises: a plurality of communication means for communicating with the base station; a means for connecting to the plurality of base stations; and a means for communicating with terminals existing in a plurality of base station areas (communication zones). 2. The encrypted wireless communication apparatus according to claim 1, further comprising: means for managing security of terminals existing in a plurality of base station areas (communication zones).