JP2007129320A - Communication system, communication equipment and communication method, and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a communication system, communication equipment and a communication method, and a computer program capable of excellently executing communication wherein several pieces of equipment can share information required for mutual authentication and encryption of communication paths with each other by simple operations, several pieces of equipment are grouped on the basis of the information shared among the several pieces of equipment, and the right of the user of the equipment can easily be authenticated. <P>SOLUTION: The several pieces of equipment share data required for secure data communication by way of a security device. A piece of equipment reads data by the security device and another equipment reads the security device to deliver the data. The delivered data are identification information unique to each equipment, a setting value required for communication between several pieces of equipment, an encryption key used for encrypting the communication path, and information required for generating the encryption key, and information unique to the security device or the like. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a communication system, a communication apparatus, a communication method, and a computer program for performing secure data communication between devices, and in particular, an encryption key for encrypting information and a communication path for devices to recognize each other. The present invention relates to a communication system, a communication apparatus, a communication method, and a computer program that perform communication via exchange of information (or information that is a source of encryption key generation).

  More specifically, the present invention relates to a communication system, a communication apparatus and a communication method, and a computer program that share information necessary for mutual recognition and communication path encryption between devices by a simple operation. The present invention relates to a communication system, a communication device, a communication method, and a computer program that group a plurality of devices based on information shared between the devices and further easily authenticate the user authority of the devices.

  With the recent development of information communication technology, wired and wireless networks have become widespread, and there are many opportunities for data communication and content transmission between information devices and home appliances. Recently, wireless LAN has attracted attention as a system for releasing users from wired LAN connection. As a standard for a wireless network, IEEE (The Institute of Electrical and Electronics Engineers) 802.11 or the like can be cited.

  In wireless communication, one device that serves as a control station called an “access point” or “coordinator” is generally provided in an area, and a network is formed under the overall control of this control station. However, when asynchronous communication is performed between the communication devices on the transmission side and the reception side, wireless communication via an access point is always required, and thus there is a problem that the efficiency of use of the transmission path is halved. For this reason, “Ad-hoc communication”, in which each communication device autonomously operates and directly performs asynchronous communication, is attracting attention. For example, in a small-scale wireless network composed of a relatively small number of clients located in the vicinity, ad-hoc communication that allows direct asynchronous communication between arbitrary terminals without using a specific access point is performed. It seems to be appropriate.

  Also, in device-to-device communication, in order to protect confidential data and prevent unauthorized use of content, procedures such as mutual authentication in which devices recognize each other and generation of encryption keys for encrypting communication paths are generally performed. Need to do.

  For example, in the IEEE 802.11 standards, access control by SSID (Service Set Identification) is introduced, and communication is possible only between devices having the same SSID (see, for example, Patent Document 1). However, when devices directly communicate with each other under the ad hoc mode, an SSID is set in advance on one device, and then the same ID is set on the device that is the communication partner, or a plurality of recognized devices. It is necessary to select from a list of IDs. That is, since the user has to set identification information for each device individually, the operation itself is complicated. For setting work, it is necessary to use dedicated hardware or software, including setting software that is an application on a host device such as a PC (Personal Computer).

  In addition, there is a demand for restricting user rights regarding access even for devices recognized by mutual authentication. However, a conventional wireless LAN system can recognize a physically communicable partner based on protocol consistency or model-specific ID information, but does not provide a means for identifying user authority. .

JP 2003-229872 A, paragraph number 0034

  An object of the present invention is to provide an excellent communication system, communication apparatus and communication method, and computer program capable of sharing information necessary for mutual recognition and communication path encryption between devices by a simple operation. It is to provide.

  A further object of the present invention is to provide a superior communication system, communication apparatus, and communication method that can group a plurality of devices based on information shared between the devices and can easily authenticate the user authority of the devices. And providing a computer program.

The present invention has been made in consideration of the above problems, and is a communication system that activates a data communication operation through an exchange of information for communication devices to recognize each other,
Each communication device includes a first communication interface for connecting to another communication device, a second communication interface for connecting to a security device having a storage area for securely storing information, and for each device. With assigned device-specific information,
Between the communication devices that start data communication, device-specific information of one communication device is transmitted to the other communication device via the security device, and to one communication device based on the device-specific information from the other communication device Data communication starts in response to the communication start request of
This is a communication system characterized by the above.

  However, “system” here refers to a logical collection of a plurality of devices (or functional modules that realize specific functions), and each device or functional module is in a single housing. It does not matter whether or not (hereinafter the same).

  In the communication system according to the present invention, information necessary for a plurality of devices (information processing apparatus, home appliance, etc.) to recognize each other is shared through a security device such as a non-contact IC card. Specifically, data is transmitted by reading data from a certain device by a security device and further reading the security device from another device.

  Here, by including identification information unique to each device as data transmitted through the security device, it can be used for mutual recognition between devices.

  In addition, as data transmitted through the security device, a setting value necessary for communication between devices, an encryption key used for encryption of a communication path, and information necessary for generating the encryption key can be included.

  Further, information unique to the security device can be included as data transmitted through the security device. In such a case, by explicitly associating a device with the information, a plurality of devices can be grouped based on unique information held by the security device. For example, it is possible to easily select a communicable device in a wireless LAN ad hoc mode. Thereby, authentication (user registration) of the right to use the device can be easily performed.

  Further, data transmitted through the security device may be encrypted with a secret encryption key between the device and the security device.

  In addition, an operation mode is also conceivable in which data transmitted through a security device is stored along with the time in each device, and whether or not the data is automatically valid is determined over time.

The second aspect of the present invention provides a second communication for connecting to a first communication interface for connecting to another communication apparatus and a security device having a storage area for securely storing information. A computer program written in a computer-readable format so as to execute processing for starting a data communication operation on a computer system through an exchange of information for recognizing each other in a communication device having an interface For the computer system,
A first cognitive procedure for transferring data to and from the security device through the second communication interface;
A second recognition procedure for performing a data communication start operation with another communication device based on the data transmitted in the first recognition step;
Is a computer program characterized in that

  The computer program according to the second aspect of the present invention defines a computer program described in a computer-readable format so as to realize predetermined processing on a computer system. In other words, by installing the computer program according to the second aspect of the present invention in the computer system, a cooperative action is exhibited on the computer system, and in the communication system according to the first aspect of the present invention. Operates as a communication device. By activating a plurality of such communication devices and constructing a communication network, the same operational effects as those of the communication system according to the first aspect of the present invention can be obtained.

  According to the present invention, there is provided an excellent communication system, communication device and communication method, and computer program capable of sharing information necessary for mutual recognition and communication path encryption between devices by a simple operation. Can be provided.

  Moreover, according to the present invention, an excellent communication system, communication apparatus, and communication method that can group a plurality of devices based on information shared between the devices and can easily authenticate the user authority of the devices. As well as computer programs.

  According to the present invention, information necessary for a plurality of devices to recognize each other is shared through a security device, so that a plurality of device information is explicitly associated with each other in a secure and simple manner. be able to. For example, it is possible to easily select a communicable device in a wireless LAN ad hoc mode.

  Further, according to the present invention, a plurality of devices can be grouped based on unique information held by the security device by using the security device as a medium. Thereby, authentication (user registration) of the right to use the device can be easily performed.

  According to the present invention, a plurality of devices can recognize each other by an explicit and simple operation of holding a non-contact IC card as a security device over the device, and complicated setting by dedicated hardware or software is possible. Can be reduced. In addition, by using the communication encryption function of the security device, it is difficult to impersonate or tamper with, and it is possible to easily authenticate the use authority of the device and perform user registration.

  Other objects, features, and advantages of the present invention will become apparent from more detailed description based on embodiments of the present invention described later and the accompanying drawings.

  The present invention relates to a communication system that performs data communication between devices, and more particularly, to a communication system that allows each device to operate autonomously and perform direct and asynchronous ad hoc communication without intervention of a control station. .

  In device-to-device communication, in order to protect confidential data and prevent unauthorized use of content, it is necessary to perform procedures for mutual authentication in which devices recognize each other and for generation of encryption keys for encrypting communication paths. is there. In the communication system according to the present invention, information necessary for a plurality of devices (information processing apparatus, home appliance, etc.) to recognize each other is shared through a security device such as a non-contact IC card. The transmission of information using a security device is superior in the following points.

(1) Information to be transmitted is encrypted with a secret encryption key between communication devices, and it is difficult to falsify or spoof information.
(2) High-speed and simple data access using a non-contact communication interface is possible.
(3) The user can explicitly designate a communication partner due to the proximity of the communicable distance of the non-contact communication interface.

  FIG. 1 schematically shows a functional configuration of a wireless communication apparatus according to an embodiment of the present invention. The illustrated wireless communication apparatus 10 includes an antenna 11, a wireless reception unit 12, a communication control unit 13, a wireless transmission unit 14, a data buffer 15, an application interface 16, and a security device interface 17. ing. Furthermore, a device 20 connected to the communication device is connected via the application interface 16, and communication of application data is performed as necessary.

  The antenna 11 wirelessly transmits a signal addressed to another wireless communication device on a predetermined communication channel, or collects a signal transmitted from the other wireless communication device from the predetermined communication channel. In the present embodiment, it is assumed that a single antenna 11 is provided and transmission and reception cannot be performed in parallel.

  The wireless reception unit 12 receives and processes an information signal transmitted from another wireless communication device. The radio receiver 12 is a low noise amplifier (LNA) that amplifies a signal received from another station via the antenna 11, a down converter that down-converts the voltage-amplified received signal by frequency conversion, an automatic gain controller ( AGC), an A / D converter that digitally converts an analog received signal, a synchronization process for acquiring synchronization, channel estimation, a demodulator that performs demodulation processing using a predetermined demodulation method, and the like (all not shown). In the wireless reception unit 12, a signal that has been correctly decoded is supplied to the communication control unit 13.

  The wireless transmission unit 14 wirelessly transmits the transmission data temporarily stored in the data buffer 15. The wireless transmission unit 14 is a modulator that modulates a transmission signal with a predetermined modulation method, a D / A converter that converts a digital transmission signal into an analog signal, an upconverter that converts the frequency of the analog transmission signal and upconverts, It is composed of a power amplifier (PA) that amplifies the power of the converted transmission signal (not shown).

  In the wireless transmission unit 14 and the wireless reception unit 12, a transmission method such as OFDM (Orthogonal Frequency Division Multiplexing) applicable to a wireless LAN, for example, can be applied.

  The communication control unit 13 controls the overall operation of the wireless communication device 10 according to a predetermined operation program. For example, when transmission data requested by an upper layer application is accumulated in the data buffer 15, the transmission of the wireless transmission unit 14 is controlled so that a transmission frame is generated and wirelessly transmitted to the transmission destination. If the received data received and demodulated by the wireless receiver 12 is command information, the communication controller 13 processes it and stores it in the data buffer 15 if it is application data. In the present embodiment, it is assumed that the communication control unit 13 can control the communication operation under the ad hoc mode in the wireless LAN.

  The communication control unit 13 is composed of, for example, a one-chip microprocessor, and includes an operation program that defines a series of communication operations, a ROM that stores predetermined data in a nonvolatile manner, and an environment in which the program is loaded from the ROM and the program is being executed It includes a RAM for temporarily storing variables and system variables. The ROM also stores unique identification information for each device.

  The data buffer 15 stores received application data and also stores application data from the device 20 connected via the application interface 16.

  The application interface 16 is a window for transferring application data to and from the connected device 20, and exchanges signals in a predetermined information format.

  The security device interface 17 has a card read / write function for accessing a contactless IC card as a security device. This kind of non-contact communication interface can encrypt the transmission path to prevent falsification and spoofing, can perform high-speed and simple data access, can explicitly specify the communication partner by proximity, etc. There are features. The structure of the contactless IC card and the protocol for contactless communication are well known in the art and as such are not directly related to the gist of the present invention, and will not be further described herein.

  In device-to-device communication, in order to protect confidential data and prevent unauthorized use of content, it is necessary to perform procedures for mutual authentication in which devices recognize each other and for generation of encryption keys for encrypting communication paths. is there. The wireless communication apparatus 10 according to the present embodiment shares information necessary for recognizing each other with other communication apparatuses as communication partners through a security device such as a non-contact IC card. be able to. Specifically, data is read from one communication device by a security device (or written to the security device), and the security device is read from another communication device to realize secure data transmission.

  Here, by including identification information unique to each communication device as data transmitted through the security device, it can be used for mutual recognition between devices.

  In addition, as data transmitted through the security device, it is possible to include setting values necessary for communication between communication apparatuses, an encryption key used for encryption of a communication path, and information necessary for generating the encryption key.

  Further, information unique to the security device can be included as data transmitted through the security device. In such a case, by explicitly associating a communication device with the information, a plurality of devices can be grouped based on unique information held by the security device. For example, in a wireless LAN ad hoc mode, a communication device that can communicate can be easily selected. Thereby, authentication (user registration) of the right to use the communication device can be easily performed.

  Further, data transmitted through the security device may be encrypted with a secret encryption key between the communication device and the security device.

  In addition, an operation mode is also conceivable in which data transmitted through a security device is stored along with the time in each communication device, and whether or not the data is automatically valid is determined over time.

  FIG. 2 illustrates a mechanism in which two communication apparatuses exchange device information via a security device such as a non-contact IC card in an ad hoc mode of a wireless LAN.

  In the figure, communication devices 10-1 and 10-2 are devices that support a wireless LAN ad hoc mode. The security device 30 is a tamper-resistant device capable of transmitting and receiving data and storing information in an internal storage area via wireless (proximity communication), such as a non-contact IC card.

  The communication apparatuses 10-1 and 10-2 each include a wireless transmission unit 14 and a wireless reception unit 12 as communication interfaces for devices, a security device interface 17 as a communication interface for security devices, and these The communication control unit 13 is provided as a controller for managing the functional modules. As described above, the device-to-device communication interface has an interface characteristic for performing communication in a wireless LAN ad hoc mode. The communication interface for security devices has interface characteristics for performing communication with a non-contact IC card as a security device. Further, the controllers of the communication devices 10-1 and 10-2 store device-specific information (for example, device manufacturing ID), which is information unique to each, on a storage area such as a ROM.

  Here, when the user performs communication in the ad hoc mode of the wireless LAN between the communication devices 10-1 and 10-2, the setting is performed according to the following procedure.

Procedure 1: Reading device 1 unique information from the communication device 10-1 to the security device 30 Procedure 2: Storage of device 1 unique information by the security device 30 Procedure 3: From the security device 30 to the communication device 10-2 Device 1 unique information notification procedure 4: Device 1 unique information storage procedure by communication device 10-2: Communication start request based on device 1 unique information from communication device 10-2 to communication device 10-1

  First, the security device 30 is held over the communication interface for the security device of the communication device 10-1. When the controller of the communication device 10-1 recognizes the security device 30, the controller 1 transmits the held device 1 specific information to the security device 30. The security device 30 stores this information in an internal storage area.

  Next, the user holds the security device 30 over the communication interface for the security device of the communication device 10-2. When the controller of the communication device 10-2 recognizes the security device 30, it transmits the device 2 unique information, and further receives the device 1 unique information held by the security device 30. Thereby, the communication apparatus 10-2 recognizes a device having the device 1 specific information as a communication partner.

  When starting communication in the wireless LAN ad-hoc mode, the controller of the communication device 10-2 issues a communication start request by issuing a polling command using the device 1 specific information, etc., via the device communication interface. . When the controller of the communication device 10-1 recognizes the polling command using the device 1 unique information from the device communication interface, it recognizes that it is a normal communication partner and communicates with the device 2 through the device communication interface. Communication can be started.

  The communication device 10-2 stores data such as device-specific information received through the security device along with the time, and automatically determines whether the data is valid over time. Good.

  In the example illustrated in FIG. 2, only the communication devices 10-1 and 10-2 are described. However, there may be a plurality of other devices of the same type within the communication range. In some cases, devices may want to recognize each other. In such a case as well, by sequentially holding the security device 30 over a plurality of devices, the devices can transmit each other's unique information.

  FIG. 3 illustrates a mechanism in which two communication devices exchange device information through a security device such as a non-contact IC card when a mutual authentication procedure using a secret key is introduced. Yes.

  In this case, before starting communication between the communication device 10-1 and the security device 30, and between the communication device 10-2 and the security device 30, mutual authentication using a secret key is performed. Further, communication data is encrypted using a transaction key generated based on mutual authentication. By using this method, it is possible to suitably prevent spoofing, leakage or tampering of communication data, and more secure information transmission.

  In addition, information that should be kept secret, such as an encryption key used for encryption communication, can be passed through the security device 30. In FIG. 3, the encryption key K held (or newly generated) by the communication apparatus 10-1 is notified to the security device 30 together with the device 1 specific information, and further, the security device 30 transmits the encryption key K to the communication apparatus 10-2. Notify. The communication device 10-2 can specify the communication device 10-1 as a communication target device using the device 1 unique information and perform encrypted communication using the encryption key K.

  When a mutual authentication procedure using a secret key is introduced and the user performs communication in the ad hoc mode of the wireless LAN between the communication apparatuses 10-1 and 10-2, the setting is performed according to the following procedure.

Procedure 1: Mutual authentication procedure between communication device 10-1 and security device 30: Notification of device 1 unique information and encryption key K from communication device 10-1 to security device 30 Procedure 3: by security device 30 Device 1 unique information and encryption key K storage procedure 4: Mutual authentication procedure 5 between communication device 10-2 and security device 30: Device 1 unique information and encryption key K from security device 30 to communication device 10-2 Notification procedure 6: Device 1 unique information and encryption key K storage procedure 7 by communication device 10-2: Communication start request based on device 1 unique information from communication device 10-2 to communication device 10-1

  The communication device 10-2 stores data such as device-specific information and encryption key received through the security device together with time, and automatically determines whether the data is valid over time. It may be.

  FIG. 4 shows a mechanism for exchanging device information between two communication devices through a security device such as a non-contact IC card when a mechanism for restricting the use of a device based on user authority is introduced. Is illustrated.

  User right information R is stored in advance in the storage area inside the security device 30 as data.

  After the security device 30 is held over and performs mutual authentication, the communication device 10-1 receives (that is, reads) the user right information R stored therein, and verifies the user right information R. Do. Thereby, the communication apparatus 10-1 can grasp | ascertain whether the security device C has a valid usage right. In addition, the communication device 10-1 can confirm that it is a reliable partner in notifying the device 1 unique information and the encryption key K.

  On the other hand, the communication device 10-2 similarly receives the user right information R from the security device 30 and verifies it. By confirming the usage right, it is guaranteed that the device 1 unique information and the encryption key K delivered from the security device 30 are reliable information.

  When a mechanism for restricting the use of devices based on user authority is introduced and the user performs communication in the ad hoc mode of the wireless LAN between the communication devices 10-1 and 10-2, the setting is performed according to the following procedure. To do.

Procedure 1: Mutual authentication procedure between communication device 10-1 and security device 30: Transmission of user right information R from security device 30 to communication device 10-1 Procedure 3: User rights by communication device 10-1 Information R verification procedure 4: Notification of device 1 unique information and encryption key K from communication device 10-1 to security device 30 Procedure 5: Device 1 unique information and encryption key K storage procedure 6 by security device 30: Mutual authentication procedure 7 between the communication device 10-2 and the security device 30: Notification procedure of user authority information R from the security device 30 to the communication device 10-2 8: User authority information R by the communication device 10-2 Verification procedure 9: Notification procedure of device 1 specific information and encryption key K from the security device 30 to the communication device 10-2 10: Communication device 10- Storage procedure of by the device 1-specific information and the encryption key K 11: communication start request based from the communication device 10-2 to the first device-specific information to the communication apparatus 10-1

  The communication device 10-2 stores data such as device-specific information and encryption key received through the security device together with time, and automatically determines whether the data is valid over time. It may be.

  FIG. 5 shows that two communication devices are not connected to each other when a mechanism for grouping a plurality of communication devices is introduced by associating with unique information (security device specific information) held by the security device. It illustrates a mechanism for exchanging device information through a security device such as a contact IC card.

  In the figure, communication devices 10-1 and 10-2 are devices that support a wireless LAN ad hoc mode. The security device 30 is a tamper-resistant device capable of transmitting and receiving data and storing information in the internal storage area via a wireless communication, such as a non-contact IC card. -Device-specific information is stored.

  When grouping the communication apparatuses 10-1 and 10-2 that perform communication in the ad hoc mode of the wireless LAN, the setting is performed according to the following procedure.

Procedure 1: Reading of security device specific information from the security device 30 to the communication apparatus 10-1 Procedure 2: Storage of security device specific information by the communication apparatus 10-1 Procedure 3: From the security device 30 to the communication apparatus 10- Step 4 for reading security device specific information to communication device 4: Storage procedure for security device specific information by communication device 10-2: Communication start from communication device 10-2 to communication device 10-1 based on security device specific information request

  First, the user holds the security device 30 over the communication interface for the security device of the communication apparatus 10-1. When the controller of the communication device 10-1 recognizes the security device 30, it receives the security device specific information and stores it in the storage area in the communication device 10-1.

  Next, the user holds the security device 30 over the communication interface for the security device of the communication apparatus 10-2. When the controller of the device 2 recognizes the security device 30, it similarly receives the security device specific information and stores it in the storage area of the communication device 10-2.

  Through the above operation, the communication apparatuses 10-1 and 10-2 are grouped based on the security device specific information.

  For example, when the communication devices 10-1 and 10-2 are provided with a device-to-device communication interface, the controller of the communication device 10-2 issues a polling command or the like using the security device specific information that is held. To do.

  When the controller of the communication device 10-1 recognizes the polling command using the security device specific information from the communication interface for devices, it verifies with the security device specific information stored in the communication device 10-1. If the obtained security device specific information is the same value as the security device specific information held by the communication device 10-1 itself, the communication device 10-2 has been grouped as the same group as the communication device 10-1 itself. The communication device 10-2 can be recognized as a normal communication partner.

  The communication apparatus 10-2 stores data such as security device specific information received from the security device together with time, and automatically determines whether the data is valid over time. Good.

  The present invention has been described in detail above with reference to specific embodiments. However, it is obvious that those skilled in the art can make modifications and substitutions of the embodiment without departing from the gist of the present invention.

  In the present specification, an embodiment has been described in which communication apparatuses are connected to each other via a wireless communication interface such as a wireless LAN. Of course, the communication apparatus is connected to a wired LAN such as Ethernet (registered trademark). The present invention can also be applied to the same.

  In addition, as a communication interface for transmitting data to a security device for exchanging information for communication devices to recognize each other, for example, an electromagnetic induction type, an electrostatic coupling type, or a radio wave used for an RFID system A communication-type non-contact connection interface can be applied. Of course, other non-contact or short-distance communication interfaces that can clearly indicate the communication partner can be applied.

  In short, the present invention has been disclosed in the form of exemplification, and the description of the present specification should not be interpreted in a limited manner. In order to determine the gist of the present invention, the claims should be taken into consideration.

FIG. 1 is a diagram schematically showing a functional configuration of a wireless communication apparatus according to an embodiment of the present invention. FIG. 2 is a diagram for explaining a mechanism in which two communication apparatuses exchange device information via a security device such as a non-contact IC card in an ad hoc mode of a wireless LAN. FIG. 3 illustrates a mechanism for exchanging device information between two communication devices through a security device such as a non-contact IC card when a mutual authentication procedure using a secret key is introduced. FIG. FIG. 4 shows a mechanism for exchanging device information between two communication devices through a security device such as a non-contact IC card when a mechanism for restricting the use of a device based on user authority is introduced. It is a figure for demonstrating. FIG. 5 is a diagram for explaining a mechanism for exchanging device information between two communication devices through a security device such as a non-contact IC card when a mechanism for grouping a plurality of communication devices is introduced. It is.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... Wireless communication apparatus 11 ... Antenna 12 ... Wireless receiving part 13 ... Communication control part 14 ... Wireless transmission part 15 ... Data buffer 16 ... Application interface 17 ... Security device interface 20 ... Connected apparatus 30 ... Security device

Claims (18)

A communication system that activates a data communication operation through an exchange of information for the communication devices to recognize each other,
Each communication device includes a first communication interface for connecting to another communication device, a second communication interface for connecting to a security device having a storage area for securely storing information, and for each device. With assigned device-specific information,
Between the communication devices that start data communication, device-specific information of one communication device is transmitted to the other communication device via the security device, and to one communication device based on the device-specific information from the other communication device Data communication starts in response to the communication start request of
A communication system characterized by the above. Each communication device has an encryption key,
An encryption key is transmitted to the other communication device via the security device together with the device unique information of one communication device, and a communication start request from the other communication device to one communication device based on the device unique information and the encryption key In response to the encrypted data communication using the encryption key is activated,
The communication system according to claim 1. The security device stores user right information;
Each communication device verifies user right information read from the security device when transmitting device-specific information via the security device.
A communication system characterized by the above. A communication system that activates a data communication operation through an exchange of information for the communication devices to recognize each other,
Each communication device includes a first communication interface for connecting to another communication device, a second communication interface for connecting to a security device having a storage area for securely storing information, and for each device. Security device specific information that is identifiable from other security devices is stored in the storage area of the security device.
Each communication device that starts data communication holds security device specific information read from the security device, and responds to a communication start request from the one communication device to the other communication device based on the security device specific information To start data communication,
A communication system characterized by the above. A communication device that activates a data communication operation through an exchange of information for recognizing each other,
A first communication interface for connecting to another communication device;
A second communication interface for connecting to a security device having a storage area for securely storing information;
Communication control means for controlling data communication with another communication device via the first communication interface based on transmission of predetermined data via the security device;
A communication device characterized by the above. Storage means for storing device-specific information assigned to each device and other information;
The communication control means transmits its own device-specific information to the security device;
The communication apparatus according to claim 5. The communication control means acquires device-specific information of a communication device that is a communication request destination from the security device and makes a communication start request based on the device-specific information, or a communication start request based on its own device-specific information Start data communication according to the
The communication apparatus according to claim 6. The storage means stores an encryption key;
The communication control means transmits the encryption key together with the device specific information through a security device, and encrypts the transmission path using the encryption key formed by the first communication interface.
The communication apparatus according to claim 6. The security device stores user right information;
The communication control unit verifies user right information read from the security device when transmitting device-specific information via the security device.
The communication apparatus according to claim 6. In the storage area of the security device, security device specific information that can be distinguished from other security devices is stored,
The communication control means acquires and stores security device specific information from the security device, and makes a communication start request based on the security device specific information to another communication device, or the same security device specific information Start data communication in response to a communication start request based on
The communication apparatus according to claim 5. In a communication apparatus comprising a first communication interface for connecting to another communication apparatus and a second communication interface for connecting to a security device having a storage area for securely storing information, A communication method for starting a data communication operation through an exchange of information for recognition,
A first cognitive step of transferring data to and from the security device through the second communication interface;
A second recognition step for performing a data communication start operation with another communication device based on the data transmitted in the first recognition step;
A communication method comprising: The communication device comprises device specific information,
In the first recognition step, the device specific information is transmitted to the security device;
In the second recognition step, data communication is started in response to a data communication start request based on own device specific information.
The communication method according to claim 11. In the first recognition step, device-specific information of a communication device as a communication partner is acquired from the security device,
In the second recognition step, a data communication start request based on the acquired device specific information is performed.
The communication method according to claim 12. The communication device stores an encryption key;
In the first recognition step, an encryption key is transmitted to the security device together with the device specific information,
In the data communication started in the second recognition step, the transmission path is encrypted using the encryption key.
The communication method according to claim 12. In the first recognition step, an encryption key is acquired from the security device together with device-specific information of a communication device that is a communication partner,
In the data communication started in the second recognition step, the transmission path is encrypted using the encryption key.
The communication method according to claim 14. The security device stores user right information;
In the first recognition step, when transmitting data through the security device, user right information read from the security device is verified.
The communication method according to claim 11. In the storage area of the security device, security device specific information that can be distinguished from other security devices is stored,
In the first recognition step, security device specific information is obtained from the security device and stored,
In the second recognition step, a communication start request based on the security device specific information is sent to another communication device, or data communication is started in response to the communication start request based on the same security device specific information.
The communication method according to claim 11. In a communication apparatus comprising a first communication interface for connecting to another communication apparatus and a second communication interface for connecting to a security device having a storage area for securely storing information, A computer program written in a computer-readable format to execute processing for starting a data communication operation through an exchange of information for recognition on the computer system, the computer system
A first cognitive procedure for transferring data to and from the security device through the second communication interface;
A second recognition procedure for performing a data communication start operation with another communication device based on the data transmitted in the first recognition step;
A computer program for executing

Images