JP2003152713A - Method for authenticating communication opposite party, information communication system, and control program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a method for authenticating communication opposite parties by which even information communication devices unable to receive authentication information required to authenticate the communication opposite party can conduct authentication processing. SOLUTION: In the case that an information communication device acting like an authentication side receives its own password and an address and an information communication device acting like a side to be authenticated receives the password and the address of the information communication device acting like the authentication side to conduct the authentication processing, the information communication device acting like the authentication side registers in advance passwords and addresses of information communication devices to be communication opposite parties, and when the information communication device acting like the authentication side becomes an information communication device acting like the side to be authenticated, the information communication device acting like the authentication side becoming the information communication device acting like the side to be authenticated uses the password and the address having been stored in advance of an information communication device acting like the authentication side to conduct the authentication processing. Further, when the own device has no function of receiving a password and an address of an information communication device at the authentication side in spite of it that the own device becomes the side to be authenticated and stores no password nor address, the own device responds it to the information communication device acting like at present the authentication side that the own device changes the roll to act like the authentication side.

Description

Detailed Description of the Invention

[0001]

TECHNICAL FIELD The present invention relates to a technique for authenticating a communication partner between information communication devices.

[0002]

2. Description of the Related Art Conventionally, when information devices communicate with each other, in the simplest case, connection / communication is permitted regardless of which device is the communication partner. However, when it is desired to communicate with a plurality of devices, in order to identify the connected device, manage the access right, and ensure security, the user I
A method of managing and operating using D and a password has been widely used.

In recent years, access control using a user ID and a password has been widely performed on the Internet, which has become very popular. The user transmits the user ID and password information when connecting to the network, and can start communication when authenticated.

In the server / client model network, the user ID and password are recorded and managed on the server side, and the user ID and password information sent when a connection request is sent from the client are collated and matched. If so, the access right is granted and communication is started. When the user communicates for the first time, the user information is set in advance on the server side, or after connecting with the guest account, the user ID and password are transmitted from the client terminal side and set on the server side. There is.

In recent years, a wireless network using radio waves as a physical medium of the network has become widespread.
In the wireless network, the server / client model network also manages the access right as described above.

Such an access right management function has a function of Bl.
When it is mounted on a short-distance wireless network device such as Bluetooth, especially when it is mounted on a mobile device, it does not matter where it is used, so there is more opportunity for devices that have never been connected to communicate with each other. It is expected that. In addition, since it is wireless communication, it is difficult for the user to know when and which devices are connected to each other, and to prevent damage such as the user's information being stolen without noticing that the user is communicating, a robust method is required. Realization of security is important.

[0007] In the Bluetooth standard, a method of performing authentication before connection communication between devices is considered in order to address the above security problem. The operation of link layer device authentication in the Bluetooth standard is shown below.

Device authentication is performed between one-to-one devices.
Details will be described with reference to FIG. FIG. 10 shows Bl
It is a time-series representation of the exchanges during the authentication process between the two terminals A and B equipped with the Bluetooth function and the processes executed inside each terminal. It is assumed that time elapses from the upper part to the lower part in FIG. 10. The left side of the solid line on the left side of FIG. 10 shows the inside of the terminal A, and the right side of the solid line on the right side shows the inside of the terminal B. A dashed arrow between solid lines in the center of FIG. 10 indicates information communication by radio waves between the terminals A and B.

At the time of communication connection, either the terminal A or the terminal B is the authenticating side or the authenticated side for authenticating the communication partner,
Invokes the authentication process and requests the start of the authentication procedure.
Here, it is assumed that the user A operates the terminal A and the user B operates the terminal B.

In FIG. 10, terminal A is the authenticating side that authenticates the communication partner, and terminal B is the authenticated side that is authenticated as the communication partner. Terminal A sends an authentication request to terminal B in step S501 to activate the authentication process. . Terminal B is step S50
At 2, the authentication acceptance response is returned and the authentication procedure is started. In step S503, the random number 1 (53
1) is transmitted to the terminal B, while the terminal A own Blu
A user A of the terminal A is prompted to input a character string or a numerical string called an "ethoth passkey" (hereinafter referred to as "passkey").

The passkey is password information peculiar to the device that the Bluetooth compatible terminal has, and is information used when performing an authentication procedure with a terminal that has never been connected, that is, a terminal that connects for the first time. The input passkey A (532) and the passkey A length (533) which is the length of the passkey A are used as the input of the arithmetic algorithm 1A (534).

The arithmetic algorithm 1A (534) is an initialization key generation algorithm and is executed inside the terminal A to generate an initialization key 1A (538) which is key information. In the terminal B that has received the random number 1 (531), as in the case of the terminal A, the user B is prompted to input the passkey A of the terminal A,
The input passkey A (535) and the passkey A length (536), which is the length of the passkey A, are used to calculate the algorithm 1B.
It is used as an input of (537).

The passkey A (532) entered by the user A for the terminal A and the passkey A (535) entered by the user B for the terminal B should be the same. In other words, the authenticated side is authenticated as a communication partner of the authenticated side, provided that the authenticated side correctly inputs the passkey of the authenticated side.

Therefore, the passkey A length (533) and the passkey A length (536) should be the same. Also,
Arithmetic algorithm 1B (53
7) and arithmetic algorithm 1A executed inside terminal A
(534) is the same algorithm. Similarly to the terminal A, the terminal B also generates the initialization key 1B (539), which is also generated by the terminal A.
It should be the same as 8).

Next, the terminal A generates a random number 2 (540) different from the random number 1 (531) and transmits it to the terminal B in step S504. In addition, the random number 2 (540), the initialization key 1A (538), and the Bluetooth Device Address (hereinafter BD_ADDR_B) (541) of the terminal B, which is the authenticated side, are used as the input of the calculation algorithm 2A (542) to perform the calculation. Result A (54
5) is obtained.

The calculation algorithm 2A (542) is a connection authentication algorithm and is executed inside the terminal A. Note that BD_ADDR_B is an address number unique to each Bluetooth device, and is at a stage before starting the authentication procedure process, that is, before executing step S501.
The information is known at this point because it is included in the information exchanged when the devices establish a connection.

Inside the terminal B which has received the random number 2 (540), like the terminal A, the random number 2 (540), the initialization key 1B (539) and the BD_ADDR_B (54 of the terminal B).
3) is used as the input of the calculation algorithm 2B (544), and the calculation result B (546) is obtained. The arithmetic algorithm 2B (544) executed inside the terminal B and the arithmetic algorithm 2A (542) executed inside the terminal A are the same algorithm. Also, BD_A used in terminal A
The DDR_B (541) and the BD_ADDR_B (543) used by the terminal B to use are the same information.

Next, the terminal B transmits the calculation result B (546) to the terminal A in step S505. Terminal A
Then, in step S506A, the calculation result A (545) calculated and generated inside the terminal A itself and the calculation result B calculated and generated inside the terminal B and transmitted from the terminal B.
Compare with (546). If the values of the calculation result A and the calculation result B are equal, the authentication is successful, and if the values are different, the authentication is unsuccessful. If the authentication is successful, the terminal B is authenticated as a legitimate communication partner, and the process proceeds to the next communication process. If the authentication fails, the connection is disconnected and the process ends.

In order to further increase the security level, after the successful authentication, the authentication roles of the terminal A and the terminal B are exchanged, that is, the terminal A becomes the authenticated side and the terminal B becomes the authenticated side, and the terminals B generate the authentication level. Using the random number, the passkey B of the terminal B, and the BD_ADDR_A of the terminal A as parameters, FIG.
It is also possible to perform authentication in the same procedure as 0 and perform authentication processing between terminals. However, the recognition process performed by exchanging the above roles can be omitted.

The above-described authentication operation is performed when the user can input a passkey at both terminals for communication.
Among devices equipped with Bluetooth, it is difficult for the user to input the passkey, or there are devices that cannot be input.

In the case of such a device, the fixed passkey is set in advance in the memory built in the device, and the user of the communication partner terminal is prompted to input the fixed passkey at the time of authentication, and his own passkey has the fixed passkey built-in memory. A method is considered in which the user of the device that cannot input the passkey does not need to input the passkey by reading the device from the device and using the device.

This example will be described with reference to FIG. In the example of FIG. 11, the terminal A is a terminal capable of passkey input and the terminal C is a terminal not capable of passkey input. The expression method of FIG. 11 is the same as that of FIG.

In step S601, terminal A sends an authentication request to terminal C as the authenticator to activate the authentication process.
Since the user C cannot input the passkey at the terminal C, in step S602, the authenticated side is refused to execute the authentication process, and the roles of the authenticated side and the authenticated side are exchanged for the terminal A. Then, an authentication role exchange request for requesting that terminal C become the authentication side is transmitted.

Since the user A can input the passkey in the terminal A, the authentication role exchange request from the terminal C is accepted, an authentication acceptance response is returned in step S603, and the authentication procedure is started. At this time, as shown in FIG. 11, the role of the terminal A is exchanged with the authenticated side, and the role of the terminal C is exchanged with the authenticated side. After this, the same processing as the processing from step S503 onward in FIG. 10 is performed by the terminal A as the authenticated side and the terminal C as the authenticated side. However, in this case, the terminal C has a fixed passkey C (not shown) set in the terminal C in advance.
Is used as an input to the arithmetic algorithm 1C.

Next, an example of an authentication procedure in the case of a device in which the user cannot input a passkey in both terminals for communication, that is, a device having a fixed passkey, will be described with reference to FIG. The expression method of FIG. 12 is the same as that of FIG.

In step S701, the terminal C, as the authenticator, sends an authentication request to the terminal D to activate the authentication process.
Since the terminal D cannot input the passkey, the terminal D refuses to execute the authentication process as the authenticated side and exchanges the roles of the authenticating side and the authenticated side with the terminal C in step S702. Sends an authentication role exchange request that requests that the is an authenticator.

However, since the user cannot input the passkey even at the terminal C, the authentication role exchange request cannot be accepted, and the role exchange refusal response is returned to the terminal D in step S703. At this point, both the terminal C and the terminal D refused to be authenticated, so that the authentication procedure could not be started and the communication was cut off.

[0028]

As described above, in the conventional authentication method at the time of device connection in the Bluetooth standard, when the user tries to connect the devices which cannot input the passkey after the authentication process is performed, both devices are connected to each other. Since the fixed passkey stored in the authentication is used for authentication and the authenticating side tries to perform the authenticating procedure instead of the authenticated side, the role division of the authenticating procedure is not established, and as a result, it is possible to connect and communicate. There was a drawback that I could not. Therefore, the usability of the device is very poor for the user.

The present invention has been made in view of the above problems of the prior art, and the problem is that the authentication processing can be performed even between the information communication devices that cannot input the authentication information necessary for authenticating the communication partner. Is to

[0030]

In order to solve the above-mentioned problems, the present invention is a communication partner authentication method for authenticating an information communication device which is a communication partner when communication is started, and is information to be authenticated. The communication device stores in advance the authentication information of the authentication side information communication device in a storage medium that can be directly read by the authenticated side information communication device, and at the time of the authentication process. The authentication information is used to perform the authentication procedure.

Further, the present invention is an information communication system in which communication is started after authenticating an information communication device as a communication partner, and the information communication device to be authenticated is the authentication of the information communication device to be authenticated. Information is stored in advance in a storage medium that can be directly read by the information communication device to be authenticated,
During the authentication process, the stored authentication information is used to perform the authentication procedure.

Further, the present invention is a control program executed by an information communication device to be authenticated in an information communication system which starts communication after authenticating an information communication device to be a communication partner, and is an authentication side. When an authentication request is made from the information communication device, the information communication device to be the authenticated side upon receiving the authentication request is stored in advance in a storage medium that can be directly read by the authenticated information communication device. The authentication information of the information communication device on the authentication side is read out, and the authentication procedure is performed using the read authentication information.

[0033]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below in detail with reference to the drawings.

[First Embodiment] FIG. 1 shows a first embodiment of the present invention.
FIG. 2 is a block diagram of a digital camera equipped with a Bluetooth function according to the embodiment.
FIG. 3 is a block diagram of a printer equipped with functions. The printer according to the present embodiment is a device that does not have a passkey input unit, and stores a fixed passkey in the main body. The digital camera according to the present embodiment is configured to read the BD_ADDR and the passkey of the connected communication partner (printer), which are written in advance in the memory of the digital camera from an external device, and use the BD_ADDR and the passkey during the authentication process.

The digital camera 100 shown in FIG.
U101, ROM102, RAM103, non-volatile memory 104, wireless communication circuit unit 105, antenna 10
6, external device connection connector 107, interface circuit unit 108, imaging unit 109, operation unit 110, display unit 11
It has a primary storage unit 112 and a secondary storage unit 112, and is connected to each other by an internal bus 113 as shown in the drawing. The digital camera 100 also includes a power supply circuit unit 114, and power is supplied to each of the blocks by a power supply line 115.

The CPU 101 operates according to a program stored in the ROM 102, and controls various operations of the digital camera. The ROM 102 is a non-volatile memory in which control procedures (including control programs corresponding to FIGS. 4, 5, 7, and 10) of the digital camera are stored in advance. RA
M 103 is used for temporary buffering of digital image data output from the image pickup unit 109, data to be written to the secondary storage unit 112, temporary storage of data read from the secondary storage unit, calculation of the CPU 101, and the like. It is used as a work area, an area for temporarily storing communication data transmitted and received from the wireless communication circuit unit, various settings, and the like.

The non-volatile memory 104 is rewritable, and the communication partner BD_ADDR used for various settings of the device and Bluetooth communication, and the Bluetooth connected before
Stores and saves the link key information and the like used for communication with the oooth device. The wireless communication circuit unit 105 includes a high frequency circuit unit required for wireless communication, an encoding / compositing circuit unit, a FIFO memory used for wireless communication, and a BD of itself.
_ADDR_D, a non-volatile memory that stores its own passkey D, and the like, and is connected to the antenna 106.

The external device connection connector 107 is a connector for connecting the external device and the digital camera 100. The interface circuit unit 108 includes the external device connector 1
It has a function of performing data communication with an external device connected via 07. Under the control of the CPU 101, data is transmitted to and received from an external device.

The image pickup section 109 is a lens for focusing incident light, and a photoelectric converter (C for converting the focused light into an electric signal).
CD, CMOS sensor, etc.), an AD converter (analog-digital converter) for converting an analog electric signal output from the photoelectric converter into a digital electric signal, and the like. The operation unit 110 includes a release button (not shown) for instructing shooting, a mode selection dial for selecting an operation mode of the digital camera 100, a menu button for calling a menu item, a button such as a cross cursor button for selecting / instructing a menu item, a dial, It is composed of switches, and outputs the state and state change of these buttons, dials, and switches as electric signals.

The display unit 111 is composed of a liquid crystal display device or the like, and displays the operating state of the digital camera 100 and the image data taken. The secondary storage unit 112 stores captured digital image data and the like. The power supply circuit unit 114 is composed of a battery, a DC / DC converter, and the like, and supplies power to each block described above.

The printer 200 shown in FIG.
1, ROM 202, RAM 203, non-volatile memory 20
4, wireless communication circuit unit 205, antenna 206, external device connection connector 207, interface circuit unit 20
8, a printing unit 209, an operation unit 210, and a display unit 211, which are mutually connected by an internal bus 212 as illustrated. Further, the printer 200 has the power supply circuit unit 2
13, and power is supplied to each of the blocks by a power line 214.

The CPU 201 operates according to the programs stored in the ROM 202 and controls various operations of the printer. The ROM 202 includes printer control procedures (including control programs corresponding to FIGS. 4, 5, 7, and 10).
It is a non-volatile memory that stores font data and the like in advance. The RAM 203 is used for temporary buffering of print data transmitted from an external device, a work area for converting data to be sent to the print unit, a work area used for calculation by the CPU 101, and transmission / reception from the wireless communication circuit unit. It is used as an area for temporarily storing communication data and various settings.

The non-volatile memory 204 is rewritable, and the communication partner BD_ADDR used for various settings of the device and Bluetooth communication and the Bluetooth connected before are connected.
Stores and saves the link key information and the like used for communication with the oooth device. The wireless communication circuit unit 205 is a high-frequency circuit unit required for wireless communication, an encoding / compositing circuit unit, a FIFO memory used during wireless communication, and its own BD.
_ADDR_P, a non-volatile memory storing its own passkey P, etc., and an antenna 206 is connected.

The external device connection connector 207 is a connector for connecting the external device and the printer 200. The interface circuit unit 208 has a function of performing data communication with an external device connected via the external device connection connector 207. Under the control of the CPU 201, data is transmitted to an external device and data is received from the external device.

The printing unit 209 is a print engine unit including a print head for printing print data on paper, a print head drive motor, a paper transport roller, a paper transport gear drive motor, a gear, and the like. The operation unit 210 is configured by a power button, a reset button, and the like for instructing power ON / OFF of the printer (not shown), and outputs the states and state changes of these buttons and the like as electric signals. The display unit 211 is composed of an LED lamp and the like, and indicates the operating state of the printer 200 and the like.
The power supply circuit unit 213 is an AC / DC converter, DC / DC
It is composed of a converter and the like, and supplies power to each of the blocks described above.

Digital camera 10 according to the first embodiment
For 0, the following settings are made in order to perform authentication processing with a device (printer) that does not have a passkey input function. That is, a personal computer is connected to the external device connector 107 of the digital camera 100 shown in FIG.
BOOTH address (BD_ADDR_P) and printer 2
The passkey information of 00 (passkey P) is written as list information in a predetermined area of the secondary storage unit 112 of the digital camera 100.

FIG. 3 shows an example of the passkey list (1201) stored in the secondary storage unit 112. BD_A
The DDR and passkey are stored as a pair. In FIG. 3, [BD_ADDR_P (1202), passkey P (1
203)], [BD_ADDR_R (1204), passkey R (1205)]. Although the passkey list of two pairs is illustrated here, the number of pairs is not particularly limited.

Next, the digital camera 100 and the printer 2
Bluetooth communication authentication process between 00
It will be described in detail with reference to the drawings.

FIG. 4 is a diagram showing an authentication process in the case where the printer 200 is an authenticating side and the digital camera 100 is an authenticating side.

The printer 200 requests the digital camera 100 for an authentication procedure (step S801). Upon receiving the authentication request from the printer 200, the digital camera 100 executes a passkey search process (831).
As a result of the passkey search process (831), if the BD_ADDR_P and the passkey P of the printer 200 exist, the authentication request acceptance response is not received, and if they do not exist, the authentication request as the authenticated side is not accepted, and the printer 200 and the authenticated side are not accepted. The role with the authentication side is exchanged, and an authentication role exchange request that requests the digital camera 100 to become the authentication side is transmitted as a response (step S802).

Details of the passkey search process (831) shown in FIG. 4 will be described below with reference to FIG. In addition,
Although FIG. 5 shows the processing content in a generalized form, the processing will be described here along with the example used in the above description.

First, the printer 2 that has transmitted the authentication request
It is determined whether or not 00 is the partner to connect for the first time this time (step S901). Specifically, the digital camera 100
The device connection list stored in the non-volatile memory 104 is searched for the BD_ADDR that matches the BD_ADDR_P of the printer 200 and the link key P required for the connection. If it is not listed, it is the device to be connected for the first time, so the process proceeds to step S902, and if it is listed,
It proceeds to step S904.

FIG. 6 shows an example of the device connection list. BD_
LINK KEY generated at the time of the last authentication connection with ADDR
It is stored as a list (1101) in which the pairs are. In FIG. 6, [BD_ADDR_A (1102), K
EY_A (1103)], [BD_ADDR_F (11
04), KEY_F (1105)], [BD_ADDR
_Z (1106), KEY_Z (1107)] are stored, and in step S901, B of the printer 200 is selected from the device connection list 1101.
BD_ADDR_P, which is D_ADDR, is searched to determine whether or not it is present. Since BD_ADDR_P is not registered in the device connection list 1101 of FIG. 6, the printer 200 is determined to be the first device to be connected, and the process proceeds to step S902.

Next, it is searched whether the BD_ADDR_P and the passkey P of the printer 200 are listed in the passkey list 1201 stored in the secondary storage unit 112 of the digital camera 100 (step S9).
02). Then, the BD_ADDR_P of the printer 200
It is determined whether or not the passkey P (1203) corresponding to (1202) is listed (step S90).
3). If the passkey P exists, the process proceeds to step S904, and if it does not exist, the process proceeds to step S905.

In step S904, acceptance of the authentication request is selected as a response returned to the printer 200. In step S905, it is determined whether the factor that activates the passkey search process 831 is an authentication request. As a result, if it is an authentication request, the process proceeds to step S906, and if it is an authentication role exchange request, the process proceeds to step S907.

In step S906, the authentication role exchange request is selected as the response to be returned to the printer 200, and in step S906.
At 907, authentication request rejection is selected as a response to be returned to the printer 200. Steps S904, 906, 907
After performing any one of the above processing, this passkey search processing (83
Complete 1).

Contrary to FIG. 4, the authentication process when the printer 200 is the authenticated side and the digital camera 100 is the authenticated side to perform the authentication procedure will be described with reference to FIG.

Here, as shown in FIG. 4, the printer 200
Does not request the authentication procedure to the digital camera 100, but the digital camera 100 becomes the authentication side and requests the authentication procedure to the printer 200 (step S1001). The printer 200, which has received the authentication request from the digital camera 100, does not have a passkey input means and therefore rejects the authentication request and transmits an authentication role exchange request to the digital camera 100 (step S100).
2).

Upon receiving the authentication role exchange request from the printer 200, the digital camera 100 executes a passkey search process (1031). The passkey search process (1031) performed here is the same as the passkey search process (831) shown in FIG. 4 (FIG. 5). Passkey search process (103
As a result of 1), if the BD_ADDR_P and the passkey P of the printer 200 are present, the authentication request acceptance response is sent. If they are not present, the authentication request as the authenticated side is not accepted and the authentication request rejection response is sent to the printer 200. (Step S1003).

As described above, according to the first embodiment, in the case where the user cannot input the passkey or the terminals which have difficulty in inputting the passkey perform the authentication processing at the time of communication start, conventionally, the authentication procedure is performed. Although it could not be executed, according to the present embodiment, one of the terminals (the digital camera 100 in the present embodiment) has the BD_ of the communication partner terminal preset in the memory in the main body by the external device.
The authentication process can be performed by reading and using the ADDR and the passkey (BD_ADDR_P and the passkey P of the printer 200 in this embodiment).
Therefore, there is an effect that it is possible to perform connection communication while ensuring security.

If the BD_ADDR_P or the passkey P of the printer 200 that has transmitted the authentication request to the digital camera 100 is not set, the digital camera 1
Since 00 does not accept the authentication request as in the conventional case, it is possible to eliminate the risk that an unknown device is arbitrarily connected.

Furthermore, since the address and passkey stored in advance are used for the authentication process, it is possible to save the trouble of inputting these at the time of starting the communication, and it is possible to quickly complete the authentication process and start the communication. Become. In addition, since it is not necessary to enter an address and a passkey, for example, this information communication system can be applied only by installing a communication function in an electronic device that originally does not have an input function and a communication function. The types of information communication devices that can use the information communication system can be increased, and convenience can be improved.

[Second Embodiment] FIG. 8 shows a second embodiment of the present invention.
FIG. 9 is a block diagram of a digital camera equipped with a Bluetooth function according to the embodiment.
FIG. 3 is a block diagram of a printer equipped with functions. The printer according to the second embodiment is a device that does not have a passkey input unit, and stores a fixed passkey in the main body. In the digital camera according to the second embodiment, a memory card in which a BD_ADDR and a passkey of a connected communication partner are written in advance by an external device is attached, and the passkey is read from the memory card and used during the authentication process.

The digital camera 300 shown in FIG.
U301, ROM302, RAM303, non-volatile memory 304, wireless communication circuit unit 305, antenna 30
6, the image pickup unit 307, the operation unit 308, the display unit 309, and the memory card interface circuit unit 310 are included, and the memory card 314 can be attached to the memory card interface circuit unit 310. The blocks are connected to each other by an internal bus 311 as shown in the figure. Also, the digital camera 300 includes a power supply circuit unit 312, and a power supply line 31 is provided in each block.
Power is supplied by 3.

The CPU 301 operates according to a program stored in the ROM 302 and controls various operations of the digital camera. The ROM 302 is a non-volatile memory in which control procedures (including control programs corresponding to FIGS. 4, 5, 7, and 10) of the digital camera are stored in advance. R
The AM 303 temporarily buffers digital image data output from the imaging unit 307, data to be written to the memory card 314 mounted on the main body, and the memory card 3.
CPU 30 for temporary storage of data read from
It is used as a work area used for the calculation of 1 and the like, an area for temporarily storing communication data transmitted and received from the wireless communication circuit unit, various settings, and the like.

The non-volatile memory 304 is rewritable, and BD_ADDR of the communication partner used for various settings of the device and Bluetooth communication, and the blue connected before
Stores and saves the link key information and the like used for communication with the Bluetooth device. The wireless communication circuit unit 305 is a high-frequency circuit unit required for wireless communication, an encoding / compositing circuit unit, a FIFO memory used during wireless communication, and its own BD.
_ADDR_D, a non-volatile memory storing its own passkey D, etc., and an antenna 306 is connected.

The image pickup section 307 is a lens for forming incident light, a photoelectric converter for converting the formed light into an electric signal, and an AD converter for converting an analog electric signal output from the photoelectric converter into a digital electric signal. Etc. Operation part 3
Reference numeral 08 denotes a release button (not shown) for instructing shooting, a mode selection dial for selecting an operation mode of the digital camera 300, a menu button for calling a menu item, a button such as a cross cursor button for selecting / instructing a menu item, a dial, and a switch. Configured, these buttons,
The state of the dial and the switch and the state change are output as an electric signal.

The display unit 309 is composed of a liquid crystal display device or the like, and displays the operating state of the digital camera 300 and captured image data. The memory card interface circuit section 310 has a function of reading and writing data with the attached memory card 314, detecting the presence or absence of the card attachment, and the like. The power supply circuit unit 312 includes a battery, a DC / DC converter, and the like, and supplies power to each block described above.

The printer 400 shown in FIG. 9 has a CPU 40.
1, ROM 402, RAM 403, non-volatile memory 40
4, wireless communication circuit unit 405, antenna 406, external device connection connector 407, interface circuit unit 40
8, a print unit 409, an operation unit 410, a display unit 411, a memory card / interface circuit unit 412, and a memory card 413, and as shown in the drawing, the internal bus 4
They are mutually connected by 14. Also, the printer 4
00 includes a power supply circuit unit 415, and supplies power to each block through a power supply line 416.

The CPU 401 operates according to the programs stored in the ROM 402 and controls various operations of the printer. The ROM 402 is a printer control procedure (including a control program corresponding to FIGS. 4, 5, 7, and 10),
It is a non-volatile memory that stores font data and the like in advance. The RAM 403 temporarily buffers print data transmitted from an external device, a work area for converting data to be sent to the print unit, a work area used for calculation by the CPU 401, and a wireless communication circuit unit. It is used as an area for temporarily storing communication data and various settings.

The non-volatile memory 404 is rewritable, and the communication partner BD_ADDR used for various settings of the device and Bluetooth communication and the Bluetooth connected before are connected.
Stores and saves the link key information and the like used for communication with the oooth device. The wireless communication circuit unit 405 is a high-frequency circuit unit required for wireless communication, an encoding / compositing circuit unit, a FIFO memory used during wireless communication, and its own BD.
_ADDR_P, a non-volatile memory storing its own passkey P, etc., and an antenna 406 is connected.

The external device connection connector 407 is a connector for connecting the external device and the printer 400. The interface circuit unit 408 has a function of performing data communication with an external device connected via the external device connection connector 407. Under the control of the CPU 401, data is transmitted to and received from an external device.

The printing unit 409 is a print engine unit including a print head for printing print data on paper, a print head drive motor, a paper transport roller, a paper transport gear drive motor, a gear, and the like. The operation unit 410 is composed of a power button, a reset button, and the like for instructing power ON / OFF of the printer (not shown), and outputs the states and state changes of these buttons and the like as electric signals. The display unit 411 is composed of an LED lamp and the like, and indicates the operating state of the printer 400. The memory card interface circuit unit 412 has a function of reading and writing data with the attached memory card 413, detecting whether or not the card is attached, and the like. The power supply circuit unit 415 includes an AC / DC converter, a DC / DC converter, and the like, and supplies power to each of the blocks described above.

Digital camera 30 according to the second embodiment
0, the digital camera 1 according to the first embodiment
Similar to 00, the following settings are made in order to perform authentication processing with a device (printer) that does not have a passkey input function. That is, the memory card 314 that can be mounted in the digital camera 300 shown in FIG. 8 is mounted in a memory card slot of an external device such as a personal computer, and the Bluetooth address (BD_ADDR_P) of the printer 400 and the printer 400 that have been checked in advance. The passkey information (passkey P) is written in a predetermined area of the memory card 314.

When performing communication, the memory card 314 is attached to the digital camera 300 in advance. The BD_AD set in the memory card 314 is set.
The DR and passkey list are the same as the passkey list 1201 (see FIG. 3) in the non-volatile memory 104 built in the digital camera 100 in the first embodiment.

The authentication process in the second embodiment is the first
The description is omitted because it is the same as the embodiment. However, the first
In the embodiment, the digital camera is a printer BD.
_ADDR and the passkey are read from the secondary storage unit of the digital camera, but the second embodiment is different in that the _ADDR and the passkey are read from the memory card attached to the digital camera.

Conventionally, if the user cannot input the passkey or the terminals that have difficulty inputting the passkey, that is, the terminals that use the fixed passkey perform the authentication processing at the start of communication, the authentication procedure cannot be executed. According to the second embodiment, either one of the terminals (the digital camera 300 in this embodiment) is the communication partner terminal B.
An authentication process can be performed by mounting a memory card in which D_ADDR and a passkey (BD_ADDR_P and passkey P of the printer 400 in this embodiment) are written in advance by an external device, and reading and using the memory card when performing authentication. . Therefore, there is an effect that it becomes possible to perform connection communication while ensuring security.

In addition, B of the printer 400 is attached to the memory card.
Since D_ADDR_P and the passkey P are stored, by attaching this memory card to another Bluetooth-equipped digital camera or the like, the digital camera or the like can execute authentication processing with the printer 400. become.

Further, since a device which normally does not require key input does not need to have an input means only for inputting a passkey, there is an effect that the authentication process can be executed without increasing cost. .

In the first and second embodiments, the BD_ADDR_P of the printer and the passkey P are written in the secondary storage unit 112 built in the digital camera or the memory card 314 mountable in the digital camera, and the authentication is executed. On the contrary, the BD_of the digital camera is attached to the non-volatile memory 204 built in the printer or the memory card 413 that can be attached to the printer.
ADDR_D and passkey D are written in advance, and passkey search processing is performed in the printer when authentication is performed, and BD_AD
Read DR_D and passkey D and use for authentication
The roles of the digital camera and the printer described in the first embodiment and the second embodiment can be exchanged and operated.

Further, in the first and second embodiments, Bluetooth is used as the authentication information used when executing the authentication.
I used the Bluetooth passkey, but Bluetooth
Instead of the h passkey, a password composed of different character strings may be used. When the Bluetooth passkey is used, the authentication process is performed at the link layer of the network layer, but when the password is used, the authentication process is performed at the application layer.

When the Bluetooth passkey is used, the authentication process is performed in the link layer of the network layer as described above, so that the application can be efficiently developed. Further, when the password is used as the authentication information, the authentication processing is performed in the application layer as described above, so that it is possible to increase the number of information communication devices compatible with the information communication system.

[0083]

As described above, according to the present invention,
The authentication process can be performed even between the information communication devices that cannot input the authentication information necessary for authenticating the communication partner, and the types of the information communication devices that can use the information communication system increase and the convenience improves.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of a digital camera according to a first embodiment of the present invention.

FIG. 2 is a block diagram showing a configuration of a printer according to the first embodiment of the present invention.

FIG. 3 is a diagram showing an example of a passkey list according to the first and second embodiments of the present invention.

FIG. 4 is a diagram showing a processing operation up to an authentication request and a response between terminals in the first and second embodiments of the present invention.

5 is a flowchart showing details of a passkey search process which is one of the processing operations of FIG.

FIG. 6 is a diagram showing an example of a device connection list in the first and second embodiments of the present invention.

FIG. 7 is a processing operation up to an authentication request and response between two terminals in the first and second embodiments of the present invention,
It is a figure which shows operation | movement in case authentication role exchange is performed.

FIG. 8 is a block diagram showing a configuration of a digital camera according to a second embodiment of the present invention.

FIG. 9 is a block diagram showing a configuration of a printer according to a second embodiment of the present invention.

FIG. 10 is a diagram showing a conventional authentication procedure operation between two terminals.

FIG. 11 is a diagram showing an operation of exchanging an authentication role among the conventional authentication procedure operations between two terminals.

FIG. 12 is a diagram showing an operation of the authentication procedure between two terminals in the related art, in which the authentication roles are not exchanged and the authentication procedure fails and ends.

[Explanation of symbols]

100, 300: Digital camera body 101, 201, 301, 401: CPU 102, 202, 302, 402: ROM 103, 203, 303, 403: RAM 104, 204, 304, 404: Non-volatile memory 105, 205, 305 , 405: Wireless communication circuit units 107, 207, 307, 407: External device connection connectors 112, 211: Secondary storage units 200, 400: Printers 314, 413: Memory card 1101: Device connection list 1201: Passkey list

Claims (23)

[Claims] 1. A communication partner authentication method for authenticating an information communication device which is a communication partner when communication is started, wherein the information communication device which is the authenticated side sends the authentication information of the information communication device which is the authentication side. It is characterized in that it is stored in advance in a storage medium that can be directly read by the information communication device to be authenticated and that the stored authentication information is used for the authentication procedure during the authentication process. Communication partner authentication method. 2. In the communication partner authentication method, the information communication device on the authentication side inputs its own authentication information, and the information communication device on the authenticated side inputs the authentication information of the information communication device on the authentication side. The communication partner authentication method according to claim 1, wherein the authentication processing is performed by performing the authentication. 3. The information communication device serving as the authenticated side, when the authentication request is issued from the information communication device serving as the authentication side, the device itself outputs the authentication information of the information communication device serving as the authentication side. When the authentication information is not stored in the storage medium without the input function, a response indicating that the device itself is the authentication side is sent to the information communication device which is currently the authentication side. The communication partner authentication method according to claim 1 or 2, which is characterized. 4. The communication partner authentication method according to claim 1, wherein the authentication information is password information and address information. 5. The information communication device on the authentication side and the information communication device on the authenticated side store address information of their own device in advance as one of the authentication information. The communication partner authentication method according to any one of 1 to 4. 6. The authentication process is executed when wireless communication of a predetermined standard is performed.
A communication partner authentication method according to any one of 1. 7. The wireless communication of the predetermined standard is blue
7. The communication partner authentication method according to claim 6, wherein the wireless communication is based on the Bluetooth standard. 8. The communication partner authentication method according to claim 1, wherein the storage medium is a storage medium built in advance in the information communication device to be authenticated. 9. The authentication-side information communication apparatus acquires authentication information of the authentication-side information communication apparatus from the information-communication apparatus connected to the authentication-side information communication apparatus by a cable. The communication partner authentication method according to claim 8, wherein the communication partner authentication method is stored in the storage medium built in advance. 10. The communication partner authentication method according to claim 1, wherein the storage medium is a storage medium that is attachable to and detachable from the information communication device on the authentication target side. 11. The information communication device serving as the authenticated side comprises:
When communication is performed by performing the authentication process using the authentication information of the authentication side information communication apparatus stored in advance in the storage medium, the link information to the authentication side information communication apparatus is stored. The authentication request is accepted by retrieving the link information when the authentication request is made again from the information communication device on the authentication side. Authentication method of communication partner. 12. An information communication system for starting communication after authenticating an information communication device to be a communication partner, wherein the information communication device to be authenticated receives authentication information of the information communication device to be authenticated. Information communication characterized by being stored in advance in a storage medium that can be directly read by an information communication device on the authentication side, and performing an authentication procedure using the stored authentication information during the authentication processing. system. 13. In the authentication processing, the information communication device on the authentication side inputs its own authentication information, and the information communication device on the authenticated side inputs the authentication information on the information communication device on the authentication side. 13. The information communication system according to claim 12, wherein the authentication processing is performed by. 14. The information communication device serving as the authenticated side comprises:
When an authentication request is issued from the authentication side information communication apparatus, the own apparatus does not have a function of inputting authentication information of the authentication side information communication apparatus, and the authentication information is stored in the storage medium. 14. The information communication system according to claim 12, wherein when the information is not stored, a response indicating that the device itself is the authentication side is sent to the information communication device which is currently the authentication side. 15. The information communication system according to claim 12, wherein the authentication information is password information and address information. 16. The information communication device serving as the authentication side and the information communication device serving as the authenticated side pre-store address information of the device itself as one of the authentication information. The information communication system according to any one of 12 to 15. 17. The authentication process is executed when wireless communication of a predetermined standard is performed.
The information communication system according to any one of 1 to 16. 18. The wireless communication conforming to the predetermined standard is blue.
18. The information communication system according to claim 17, wherein the information communication system is wireless communication conforming to the Ethernet standard. 19. The information communication system according to claim 12, wherein the storage medium is a storage medium built in advance in the information communication device to be authenticated. 20. The information communication device serving as the authenticated side,
The authentication information of the information communication device on the authentication side is acquired from the information communication device connected to the information communication device on the authentication target side by a cable, and stored in the pre-stored storage medium. Item 19. The information communication system according to Item 19. 21. The information communication system according to claim 12, wherein the storage medium is a storage medium that is attachable to and detachable from the information communication device on the authenticated side. 22. The information communication device serving as the authenticated side,
When communication is performed by performing the authentication process using the authentication information of the authentication side information communication apparatus stored in advance in the storage medium, the link information to the authentication side information communication apparatus is stored. The authentication request is accepted by retrieving the link information when the authentication request is made again from the information communication device serving as the authentication side. Information and communication system. 23. A control program executed by an information communication device to be authenticated in an information communication system which starts communication after authenticating an information communication device to be a communication partner. When an authentication request is made, the information communication device to be the authenticated side in response to the authentication request has the authentication side stored in advance in a storage medium which can be directly read by the authenticated information communication device. A control program having the content of reading authentication information of another information communication device and performing an authentication procedure using the read authentication information.