JP2010124422A - Wireless communication device and method of authentication in wireless communication device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve usability while eliminating operation such as the contact of devices for transmitting authentication data when performing authentication using the authentication data. <P>SOLUTION: The wireless communication device has: an authentication data creating module 107 adapted for creating authentication data; a device information creating module 103 adapted for creating device information including information about a name, an address, and a service to be provided; a wireless control module 105 adapted for transmitting device information attached with authentication data to the other wireless communication device; a device information analyzation module 102 adapted for receiving device information transmitted by the other wireless communication device which includes information about an address of the relevant the other wireless communication device, a service to be provided, and authentication data, and reads the authentication data of the relevant the other wireless communication device from the received device information; and an authentication key creating means adapted for creating an authentication key based on both the authentication data read by the device information analyzation module 102 and the authentication data created by the authentication data creating module 107. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a wireless communication device that performs data communication when authentication between devices is successful, and an authentication method for the wireless communication device.

  In 2007, Bluetooth Special Interest Group (SIG), an industry group that promotes the spread of Bluetooth (registered trademark), a short-range wireless communication technology, announced Bluetooth Core Specification version 2.1 + EDR. Pairing was improved in Bluetooth Core Specification version 2.1 + EDR.

  In Bluetooth devices prior to Bluetooth Core Specification version 2.1 + EDR, a pass key is input at the time of pairing, an authentication key is generated by this pass key, and a user needs to input a pass key for each pairing.

In a wireless communication system that establishes an ad hoc network between wireless terminals and performs communication, the communication terminal receives a beacon signal periodically transmitted from the communication terminal of the other party, and receives network identification information included in the received beacon signal. Extraction and automatic setting are performed, and a communication request is transmitted to the counterpart terminal using the set identification information to establish a session. Thereafter, a technique for generating a common key by a common process using identification information in each terminal has been disclosed (see Patent Document 1).
JP 2006-60578 A

  Bluetooth Core Specification version 2.1 + EDR introduces Secure Simple Pairing (SSP) to improve pairing. SSP supports multiple pairing methods. As one of SSPs, there is a method in which authentication data generated by a Bluetooth device itself is notified to a partner before connection authentication, and an authentication key is generated based on both authentication data. This method is simplified by omitting the passkey input procedure that has been required.

  By the way, it is common to use short-range wireless communication such as NFC (Near Field Communication) for transmitting authentication data. In the method using NFC, every time authentication is performed, it is necessary for the user to bring the devices closer together and transfer authentication data, resulting in poor usability.

  An object of the present invention is to provide a wireless communication device capable of improving usability without requiring an operation such as bringing devices into contact with each other in order to transmit authentication data when authentication is performed using authentication data. An object of the present invention is to provide an authentication method for a wireless communication device.

  A wireless communication apparatus according to an example of the present invention includes a wireless communication unit, first authentication data generating means for generating first authentication data, a name of the own device, an address of the own device, and a service provided by the own device. Device information generating means for generating device information including the above information, and other wireless communication apparatus using the wireless communication unit with the device information obtained by adding the first authentication data generated by the first authentication data generating means to the device information Device information transmission means to be transmitted to, the address of the other wireless communication device, the service provided by the other wireless communication device, and the second authentication data generated by the second authentication data generating means possessed by the other wireless communication device Authentication data receiving means for receiving device information transmitted by another wireless communication device, and the second authentication data from the device information of the other communication device received by the authentication data receiving means. Authentication data reading means for reading data, second authentication data read by the authentication data reading means, and first authentication data generated by the first authentication data generating section, by a first algorithm included in the key exchange method, First authentication key generating means for generating one authentication key, and authentication key transmitting means for transmitting data of the first authentication key generated by the first authentication key generating means to the other wireless communication device by the wireless communication unit; The second authentication key generated by the second authentication key generating means of the other wireless communication device from the first authentication data and the previous second authentication data by the first algorithm and transmitted by the other wireless communication device Authentication key receiving means for receiving key data using the wireless communication unit, and the key exchange method from the first authentication key data generated by the first authentication key generating means Means for determining whether or not a value generated by the second algorithm has a value generated by the second algorithm from data of the second authentication key received by the authentication key receiving means; and the determination And means for establishing communication with the other wireless communication device when it is determined that the means match.

  According to the present invention, when authentication is performed using authentication data, an operation such as bringing the devices into contact with each other to transmit the authentication data is not required, and usability can be improved.

  Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a diagram showing a configuration of a wireless communication system according to the first embodiment of the present invention.
As shown in FIG. 1, the wireless communication system includes a mobile phone 11, a digital television 12, a notebook personal computer 13, a remote control device 14, a speaker 15, and the like.

  The mobile phone 11 has an address 44: 44: 44: 44: 44: 44, and a mobile phone is assigned to the name. The service supported by the mobile phone 11 is still image transfer (transmission). AAAAAAA is assigned to the mobile phone 11 as authentication data for performing authentication between devices.

  The digital television 12 has addresses 11: 11: 11: 11 and is assigned DTV as the name. Services supported by the digital television 12 are audio transfer (reception), remote control (reception), and still image transfer (reception). BBBBBBB is assigned to the digital television 12 as authentication data for performing authentication between devices.

  The personal computer 13 has addresses 22: 22: 22: 22: 22: 22, and a PC is assigned to the name. The service supported by the personal computer 13 is voice transfer (transmission).

  The remote control device 14 has an address 33: 33: 33: 33: 33: 33, and a remote control is assigned to the name. The service supported by the remote control device 14 is remote control (transmission).

  The speaker 15 has an address 55: 55: 55: 55: 55: 55, and a speaker is assigned to the name. The service supported by the speaker 15 is voice transfer (reception). IEEE EEEE is assigned to the speaker 15 as authentication data for performing authentication between devices.

  The mobile phone 11, the digital television 12, the personal computer 13, the remote control device 14, and the speaker 15 are compatible with Bluetooth communication. In particular, the mobile phone 11, the digital TV 12, and the speaker 15 support Bluetooth Core Specification version 2.1 + EDR.

  Hereinafter, an embodiment to which the present invention is applied will be described. In one embodiment of the present invention, Bluetooth Core Specification version 2.1 + EDR is used as a wireless communication method, and Secure Simple Pairing and Extended Inquiry Response, which are newly added functions, are applied.

  First, Secure Simple Pairing will be briefly described. From Bluetooth Core Specification version 2.1 + EDR, Secure Simple Pairing was added to simplify the pairing procedure for connection authentication and to provide a service with enhanced security.

  In Bluetooth devices prior to Bluetooth Core Specification version 2.1 + EDR, a pass key is input to the pairing procedure, an authentication key is generated based on this numerical value, and the user needs to input a pass key for each pairing. With Secure Simple Pairing, the authentication data generated by the Bluetooth device itself is notified to the other party before connection authentication, and the authentication key is generated based on both authentication data, thereby eliminating the passkey input procedure that has been required so far. It is simplified by. Furthermore, Man-In-the-Middle (MITM) by generating an authentication key using the Diffie-Hellman (DH) key sharing method and checking the value generated from the authentication key on both Bluetooth devices The security function is strengthened.

  Next, the Extended Inquiry Response will be briefly described. In Bluetooth communication, there is a function called “Inquiry” as a means for knowing what kind of Bluetooth device exists within a wireless reachable range. Inquiry transmits its device information, such as name and address, to all Bluetooth devices within reach. Conversely, it receives device information transmitted from a Bluetooth device within reach of the radio. At that time, a connection for transmitting device information is not established. From Bluetooth Core Specification version 2.1 + EDR, Inquiry has been extended as an Extended Inquiry Response so that it can transmit up to 240 bytes of information in addition to these device information.

  Next, a system configuration related to Bluetooth communication of wireless communication devices such as the mobile phone 11 and the digital television 12 will be described with reference to FIG.

As shown in FIG. 2, the mobile phone 11 and the digital television 12 include a control unit module 101, a device information analysis module 102, a device information generation module 103, a memory 104, a wireless control module 105, an authentication key generation module 106, and authentication data generation. A control module 101 including a module 107, a wireless transmission / reception circuit 108, and the like includes a device information analysis module 102, a device information generation module 103, a memory 104, a wireless control module 105, an authentication key generation module 106, and an authentication data generation module 107. Etc. are controlled.

  The wireless control module 105 controls the authentication key generation module 106, the authentication data generation module 107, the wireless transmission / reception circuit 108, and the like.

  The device information generation module 103 generates an Extended Inquiry Response including device information such as an address of the own device, a name of the own device, and a service provided by the own device. Further, the wireless control module 105 generates a new Extended Inquiry Response in which the authentication data generated by the authentication data generation module 107 is added to the Extended Inquiry Response generated by the device information generation module 103. The radio control module 105 transmits a new extended inquiry response using the radio transmission / reception circuit 108.

  When the device information is included in the data received from the communication counterpart device, the wireless control module 105 extracts the device information and passes it to the device information analysis module 102. The device information analysis module 102 analyzes the device information and reads the address of the counterpart device, the name of the counterpart device, the service provided by the counterpart device, and the authentication data. If the communication partner device does not support Bluetooth Core Specification version 2.1 + EDR, the device information does not include authentication data.

  The memory 104 includes data generated by the control module 101, the device information analysis module 102, the device information generation module 103, the memory 104, the wireless control module 105, the authentication key generation module 106, and the authentication data generation module 107, and the communication partner. Data transmitted from the device is temporarily stored.

  The authentication key generation module 106 generates an authentication key based on the authentication data generated by the authentication data generation module 107 and the authentication data generated by the communication counterpart device. The authentication data generation module 107 generates authentication data. The wireless transmission / reception circuit 108 performs Bluetooth communication with other devices.

Next, an authentication sequence between the mobile phone 11 and the digital television 12 will be described with reference to the flowchart of FIG.
First, each wireless control module 105 of the mobile phone 11 and the digital television 12 issues a command for instructing generation of an authentication device in the Extended Inquiry Response format to the device information generation module 103. The device information generation module 103 of the mobile phone 11 generates an extended inquiry response having device information (step S10A). Similarly, the device information generation module 103 of the digital television 12 generates an extended inquiry response having device information (step S10B).

  Each wireless control module 105 of the mobile phone 11 and the digital television 12 issues a command for instructing generation of authentication data, which is defined by Bluetooth communication, to the authentication data generation module 107. The authentication data generation module 107 of the mobile phone 11 generates authentication data (step S11A). Similarly, each authentication data generation module 107 of the digital television 12 generates authentication data (step S11B). For example, the authentication data generated by the authentication data generation module 107 of the mobile phone 11 is a prime number p. The authentication data generated by the authentication data generation module 107 of the digital television 12 is a natural number g. However, the natural number g <prime number p is set. The authentication data generated by the authentication data generation module 107 of the mobile phone 11 is a natural number g. The authentication data generated by the authentication data generation module 107 of the digital television 12 may be a prime number p. The prime number p and the prime number g are used later to exchange authentication keys in the DH key sharing method.

  The wireless control module 105 of the mobile phone 11 transmits the authentication data generated by each authentication data generation module 107 to the digital television 12 that is the connection partner in the Extended Inquiry Response generated by the device information generation module 103. A device authentication tag having a value indicating authentication data, data having authentication data in the device information data, and new device information in which a data length indicating the size of the data is set are set (step S12A). The radio control module 105 of the digital television 12 transmits the authentication data generated by each authentication data generation module 107 to the extended inquiry response generated by the device information generation module 103 in order to transmit the authentication data to the digital television 12 that is the connection partner. A device authentication tag having a value indicating authentication data, data having authentication data in the device information data, and new device information in which a data length indicating the size of the data is set are set (step S12B).

  An example of the data format of Extended Inquiry Response transmitted from the mobile phone 11 to the digital television 12 is shown in FIG. As shown in FIG. 4, Extended Inquiry Response includes data length information 301A and data information 302A, data length information 301B and data information 302B, data length information 301C and data information 302C, data length information 301D and data information 302D, and the like. In addition, there are a plurality of combinations of data length information and data information. In the data length information 301A to 301D, length information indicating the size of the data information 302A to 302D is stored. In the data information 302A to 302D, a tag indicating the type of stored data and data are stored.

  As shown in FIG. 4, the first data information 302A of the extended inquiry response includes a name tag 311 indicating that name data is written after the tag and “AAA” as the name data 312. The data length information 301A includes information indicating the data length of the data information 302A.

  The second data information 302B of Extended Inquiry Response has “22: 22: 22: 22: 22: 22” as the address tag 313 and address data 314 indicating that the address data is embedded after the tag. The data length information 301B includes information indicating the data length of the data information 302B.

  The third data information 302C of Extended Inquiry Response includes a service tag 315 indicating that service data indicating a service provided by the own device is written after the tag, and “still image transfer (transmission)” as the service data 316. Have The data length information 301C includes information indicating the data length of the data information 302C. The data length information and data information described above are Extended Inquiry Response generated by the device information generation module 103.

  The fourth data information 302D of Extended Inquiry Response includes an authentication data tag 317 indicating that authentication data is written after the tag, and “AAAAAA” as the authentication data 318. The data length information 301D includes information indicating the data length of the data information 302D. The data length information 301D and the data information 302D are newly set by the wireless control module 105 in the extended inquiry response generated by the device information generation module 103.

  When the wireless control module 105 is ready for the extended inquiry response, the wireless control module 105 transmits the authentication data to the digital television 12 using the wireless transmission / reception circuit 108 by using the inquiry (step S13).

  Next, the digital television 12 receives the inquiry transmitted from the mobile phone 11, the personal computer 13, the remote control device 14, and the speaker 15, which are peripheral Bluetooth communication compatible devices. The wireless control module 105 of the digital television 12 extracts the inquiry from the received data, and passes the extracted inquiry to the device information analysis module 102. The device information analysis module 102 reads the device name, address, service, and authentication data from the passed Inquiry, and arranges the device information. The device information analysis module 102 passes the arranged device information to the wireless control module 105. FIG. 5 shows device information in which the inquiry received by the digital TV 12 from each device is arranged.

  As shown in FIG. 5, the device name of the mobile phone 11 is “mobile”, the address is “44: 44: 44: 44: 44: 44”, the service is “still image transfer (transmission)”, and the authentication data is “AAAAAA” ". The device name of the personal computer 13 is “PC”, the address is “22: 22: 22: 22: 22: 22”, and the service is “voice transfer (transmission)”. The device name of the remote control device 14 is “remote control”, the address is “33: 33: 33: 33: 33: 33”, and the service is “voice transfer (transmission)”. The device name of the speaker 15 is “speaker 15”, the address is “55: 55: 55: 55: 55: 55”, the service is “voice transfer (reception)”, and the authentication data is “EEEEEE”.

  The radio control module 105 of the digital television 12 determines whether or not the authentication data is included in the inquiry sent in the Extended Inquiry Response format (step S14).

  As shown in the device information shown in FIG. 5, when there are a plurality of wireless communication devices that transmit Extended Inquiry Response including authentication data, the digital TV 12 on the receiving side specifies in advance which service device to connect to. Or by having the ID for identifying the wireless communication device set in advance in the Exteneded Inquiry Response, the authentication data of the specified service or ID of the wireless communication device is stored in the memory 104 (step S105). Here, it is assumed that authentication data of the mobile phone 11 is stored in the memory 104.

  The digital television 12 uses the wireless transmission / reception circuit 108 to transmit the extended inquiry response to the wireless transmission / reception circuit 108 in the same manner as the mobile phone 11 transmits the extended inquiry response to the mobile phone 11 that stores the authentication data in the memory 104. (Step S106).

  The cellular phone 11 stores the authentication data included in the Extended Inquiry Response transmitted from the digital television 12 in the memory 104 (step S107).

  When the mobile phone 11 and the digital television 12 can prepare the authentication data of the own device and the authentication data of the counterpart device, the mobile phone 11 and the digital television 12 start the authentication process (step S18).

  After the start of authentication, each wireless control module 105 of the mobile phone 11 and the digital television 12 inquires whether authentication data has been received. Each wireless control module 105 of the mobile phone 11 and the digital television 12 notifies that the authentication data is received in response to the inquiry from the counterpart device using the wireless transmission / reception circuit 108 (step S19).

The wireless control module 105 of the mobile phone 11 instructs the authentication key generation module 106 to generate an authentication key when the digital television 12 receives the notification in step S19. The authentication key generation module 106 of the mobile phone 11 generates an authentication key by the DH key sharing method based on the authentication data of the own device and the authentication data of the counterpart device (step S20A). The wireless control module 105 of the mobile phone 11 determines a secret number xA smaller than the prime number p. Then, yA = g ^xA (mod p) is calculated as an authentication key by the DH key sharing method.

Similarly, the wireless control module 105 of the digital television 12 instructs the authentication key generation module 106 to generate an authentication key when notified from the mobile phone 11 in step S19. The authentication key generation module 106 of the digital television 12 generates an authentication key by the Diffie-Hellman key sharing method based on the authentication data of the own device and the authentication data of the counterpart device (step S20B). The radio control module 105 of the digital television 12 determines a secret number xB smaller than the prime number p. Then, yB = g ^xB (mod p) is calculated as an authentication key by the DH key sharing method.

  The wireless control module 105 of the mobile phone 11 transmits the authentication key information generated by the authentication key generation module 106 of the mobile phone 11 to the digital television 12 by superimposing the information on the radio wave transmitted from the wireless transmission / reception circuit 108 (step S19). The wireless control module 105 of the digital television 12 receives the authentication key information transmitted by the mobile phone 11. Similarly, the wireless control module 105 of the digital television 12 transmits the authentication key generated by the authentication key generation module 106 of its own device to the mobile phone 11 (step S19). The wireless control module 105 of the mobile phone 11 receives the authentication key transmitted from the digital television 12.

The wireless control module 105 of the mobile phone 11 calculates KA = yB ^xA (mod p) based on the DH key sharing method using the authentication key yB transmitted from the digital television 12. The radio control module 105 of the digital television 12 calculates KB = yA ^xB (mod p) using the authentication key yA transmitted from the mobile phone 11. Although the two values KA and KB are different in calculation process, g ^{(xA + xB)} (mod p) is calculated, so that the calculation results match.

  The wireless control module 105 of the mobile phone 11 determines whether the KA generated from the authentication key generated by the authentication key generation module 106 of the mobile phone 11 is the same as the KB generated from the received authentication key. (Step S22A). Similarly, the radio control module 105 of the digital television 12 determines whether the KB generated from the authentication key generated by its own authentication key generation module 106 is the same as the KA generated from the received authentication key. Is discriminated (step S22B).

  In step S22A, the radio control module 105 of the mobile phone 11 confirms that the two values KA and KB are the same, and in step S22B, the radio control module 105 of the digital television 12 has the two two values KA and KB being the same. If the authentication is confirmed, the authentication is completed, and the wireless control modules 105 establish a connection for Bluetooth communication (step S23).

  After the communication is established, the wireless communication modules 105 of the mobile phone 11 and the digital television 12 use KA or KB to encrypt data to be transmitted to the partner device and to decrypt data received from the partner device. KA and KB are not directly exchanged by the above-described DH key sharing method, and there is little possibility of KA or KB passing to a third party.

  As described above, by embedding the authentication data in the Extended Inquiry Response defined in Bluetooth Core Specification version 2.1 + EDR, the authentication data can be transmitted to the counterpart device without using NFC. As a result, an operation for bringing the devices into contact with each other is not necessary, and usability is improved.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Further, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine suitably the component covering different embodiment.

The figure which shows the structure of the radio | wireless communications system concerning one Embodiment of this invention. 1 is a block diagram showing a system configuration of a wireless communication apparatus according to an embodiment of the present invention. The flowchart which shows the authentication sequence between a mobile telephone and a digital television concerning one Embodiment of this invention. The figure which shows the example of the data format of Extended Inquiry Response concerning one Embodiment of this invention. The figure which shows the list of the apparatus information contained in Inquiry (Extended Inquiry Response) received from each apparatus concerning one Embodiment of this invention.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 11 ... Mobile phone, 12 ... Digital television, 13 ... Notebook personal computer, 14 ... Remote control apparatus, 15 ... Speaker, 101 ... Control module, 102 ... Equipment information analysis module, 103 ... Equipment information generation module, 104 ... Memory 105, wireless control module 106, authentication key generation module 107, authentication data generation module 108, wireless transmission / reception circuit

Claims (10)

A wireless communication unit;
First authentication data generating means for generating first authentication data;
Device information generating means for generating device information including the name of the own device, the address of the own device, and information of the service provided by the own device;
Device information transmitting means for transmitting the device information obtained by adding the first authentication data generated by the first authentication data generating means to the device information to another wireless communication device using the wireless communication unit;
An address of another wireless communication device, a service provided by the other wireless communication device, and second authentication data generated by a second authentication data generating unit included in the other wireless communication device, and the other wireless communication device An authentication data receiving means for receiving the transmitted device information;
Authentication data reading means for reading out the second authentication data from the device information of the other communication device received by the authentication data receiving means;
First authentication for generating a first authentication key from the second authentication data read by the authentication data reading means and the first authentication data generated by the first authentication data generation unit by a first algorithm included in the key exchange method Key generation means;
Authentication key transmission means for transmitting data of the first authentication key generated by the first authentication key generation means to the other wireless communication device by the wireless communication unit;
A second authentication key generated by the second authentication key generating means of the other wireless communication device from the first authentication data and the previous second authentication data by the first algorithm and transmitted by the other wireless communication device. Authentication key receiving means for receiving the data using the wireless communication unit,
The value generated by the second algorithm of the key exchange method from the data of the first authentication key generated by the first authentication key generating means and the data of the second authentication key received by the authentication key receiving means. Means for determining whether or not the values generated by the two algorithms match;
A wireless communication apparatus comprising: means for establishing communication with the other wireless communication apparatus when the determination means determines that they match. When the other wireless communication device transmits the authentication data generated by the second authentication data generation unit, the other wireless communication device transmits a notification that the authentication data has been generated to the wireless communication device,
2. The wireless communication according to claim 1, wherein the first authentication key generation unit generates the authentication key when receiving a notification that the authentication data transmitted by the other wireless device has been generated. apparatus.   The wireless communication apparatus according to claim 1, wherein the key exchange method is a Diffie-Hellman key sharing method.   The wireless communication apparatus according to claim 1, wherein the wireless communication apparatus is compatible with Bluetooth Core Specification version 2.1 + EDR or later.   Data to be transmitted to the other wireless communication device is encrypted using a value generated by the second algorithm, and data to be transmitted to the other wireless communication device is decrypted using a value generated by the second algorithm The wireless communication apparatus according to claim 1, further comprising: Generating first authentication data by first authentication data generating means of the first wireless communication device;
The first device information generating means included in the first wireless communication device generates device information including the name of the own device, the address of the own device, and the service provided by the own device,
The device information transmitting means included in the first wireless communication device transmits device information obtained by adding the first authentication data generated by the first authentication data generating device to the device information to the second wireless communication device,
From the data transmitted by the second wireless communication device by the device information receiving means of the first wireless communication device, the address of the second wireless communication device, the service provided by the second wireless communication device, and the second Receiving device information including the second authentication data generated by the second authentication data generating means of the wireless communication device;
The second authentication data is read out from the device information extracted by the device information extracting unit by the authentication data receiving unit included in the first wireless communication device,
A key exchange method is performed from the second authentication data read by the authentication data reading means and the first authentication data generated by the first authentication data generating unit by the first authentication key generating means of the first wireless communication device. Generating a first authentication key by a first algorithm comprising:
Transmitting the first authentication key information generated by the first authentication key generating means to the second wireless communication apparatus by the authentication key transmitting means of the first wireless communication apparatus;
The second authentication key generating means included in the other wireless communication device generates the first algorithm by the first algorithm from the first authentication data and the previous second authentication data by the authentication key receiving means included in the first wireless communication device. Receiving the data of the second authentication key transmitted by the other wireless communication device;
A value generated by a second algorithm included in the key exchange method from data of a first authentication key generated by the first authentication key generation unit by a determination unit included in the first wireless communication apparatus; and the authentication key reception unit Determines whether or not the value generated by the second algorithm matches from the received second authentication key data,
An authentication method for a wireless communication device, wherein communication with the second wireless communication device is established when it is determined that the determination means match. When the second wireless communication device transmits the authentication data generated by the second authentication data generation unit, the second wireless communication device transmits a notification that the authentication data has been generated to the wireless communication device,
The wireless communication according to claim 6, wherein the first authentication key generation unit generates the authentication key when receiving a notification that the authentication data transmitted by the second wireless device has been generated. Device authentication method.   7. The authentication key is generated by a Diffie-Hellman key sharing method based on authentication data read by the authentication data reading means and authentication data generated by the first authentication data generation unit. The authentication method of the radio | wireless communication apparatus of description.   The wireless communication device authentication method according to claim 5, wherein the first wireless communication device and the second wireless communication device support Bluetooth Core Specification version 2.1 + EDR or later.   Data to be transmitted to the other wireless communication device is encrypted using a value generated by the second algorithm, and data to be transmitted to the other wireless communication device is decrypted using a value generated by the second algorithm The wireless communication apparatus authentication method according to claim 5, wherein:

Images