JP2011205528A - Communication apparatus, communication method, and, communication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To perform secure communication while suppressing reduction of a communication speed.SOLUTION: Between a non-contact communication medium 100 and an RW 200, mutual authentication is performed and after a success of the mutual authentication, the RW 200 receives a setting password stored in the non-contact communication medium 100 beforehand through secure communication. If the setting password received from the non-contact communication medium 100 is matched with an input password inputted from a user, the RW 200 further exchanges encrypted data obtained by encrypting data using an individual encryption key generated from the matched password with the non-contact communication medium 100 through high-speed communication. The invention may be applicable to e.g., the case of performing near-field communication.

Description

  The present invention relates to a communication device, a communication method, and a communication system, and more particularly, to a communication device, a communication method, and a communication system that enable secure communication while suppressing a decrease in communication speed, for example. .

  In recent years, proximity communication that performs wireless communication in a short distance without contact using an IC (Integrated Circuit) card or the like has been used in, for example, electronic commuter passes and electronic money, and also used proximity communication. Electronic commuter passes and mobile phones having the function of electronic money have become widespread.

  Proximity communication is standardized as, for example, ISO / IEC 14443 or ISO / IEC 18092 (hereinafter also referred to as NFC (Near Field Communication)).

  As a communication method for performing communication compliant with the NFC standard, for example, there are communication methods called Type A, Type B, and Type C.

  For example, type C is adopted in an IC card system called FeliCa (registered trademark) of Sony Corporation, the applicant of the present application.

  By the way, for example, in Type C described above, a 13.56 MHz carrier is employed, and proximity communication is performed at a communication speed of 212 kbps (kilo bit per second) or 424 kbps.

  In types A and B, proximity communication is performed at a communication speed of 106 kbps, which is lower than that of type C.

  As described above, the communication speed of NFC is about several hundred kbps, which is not so high. For example, it cannot be said that the NFC communication speed is suitable for transmission of a large amount of data such as image content.

  On the other hand, with NFC, the communication partner can be specified and mutual authentication can be performed simply by holding the IC card over the RW (Reader / Writer).

  Therefore, a handover is proposed in which communication is first started by NFC, and thereafter the communication method is switched to communication such as wireless LAN or Bluetooth (registered trademark), which has a communication speed higher than that of NFC (for example, For example, see Patent Document 1).

  Recently, proximity communication at a higher communication speed than NFC is becoming popular. An example of such a high-speed proximity communication method is TransferJet (registered trademark).

  TransferJet (registered trademark) employs a carrier of 4.48 GHz, and proximity communication is performed at a maximum communication speed of 560 Mbps.

  By applying TransferJet (registered trademark) as described above to an IC card system, large-capacity data such as image content can be transmitted between the IC card and the RW that reads and writes data to the IC card. Can be done quickly.

  When a high-speed proximity communication method such as TransferJet (registered trademark) is applied to an IC card system, the IC card is simply held over the RW and IC card without adopting handover. Can identify a communication partner and can quickly transmit a large amount of data such as image content.

JP 2009-218845

  In wireless LAN and Bluetooth (registered trademark), encryption technology is incorporated in the link layer, enabling secure communications such as restricting access from unauthorized communication devices. .

  On the other hand, for example, in TransferJet (registered trademark), encryption technology is not incorporated in the link layer, and non-secure communication is performed. That is, in TransferJet (registered trademark), any communication device that performs TransferJet (registered trademark) communication can access data.

  Therefore, when a user loses an IC card that adopts TransferJet (registered trademark), for example, and the IC card is transferred to a third party, the data stored in the IC card is transferred to the third party. It is difficult to prevent leakage easily.

  Therefore, as a method for preventing the data stored in the IC card from easily leaking, a method of incorporating an encryption technique into the link layer of TransferJet (registered trademark) can be considered.

  However, when encryption technology is incorporated in the TransferJet (registered trademark) link layer, transfer communication is possible in TransferJet (registered trademark), but TransferJet (registered trademark) itself, which is high-speed proximity communication, can be used. Will reduce the communication speed.

  The present invention has been made in view of such a situation. For example, it is possible to perform secure communication while suppressing a decrease in communication speed of high-speed proximity communication such as TransferJet (registered trademark). Is.

  A communication apparatus according to a first aspect of the present invention has tamper resistance and slave-side secure communication means that performs secure communication that is secure proximity communication, and performs high-speed communication that is higher-speed proximity communication than the secure communication. A slave communication device having slave high-speed communication means and storage means for reading and writing data exchanged by the high-speed communication, and receiving power for performing the high-speed communication transmitted by wireless power transmission; Between the master side secure communication means for performing the secure communication and the master side high speed communication means for performing the high speed communication between the slave communication apparatus and the slave communication apparatus for performing the high speed communication. Power transmission means for transmitting power by wireless power transmission, the master side secure communication means, the slave communication device, Mutual authentication is performed, and after successful mutual authentication, a password stored in advance in the slave side secure communication means of the slave communication device is received from the slave communication device by the secure communication, and the master side high speed communication When the password received from the slave communication device matches the password input from the outside, the means encrypts the encrypted data obtained by encrypting the data with the encryption key generated from the matching password. , A communication device for exchanging with the high-speed communication.

  The communication method according to the first aspect of the present invention has tamper-resistant, slave-side secure communication means for performing secure communication that is secure proximity communication, and high-speed communication that is proximity communication faster than the secure communication. A slave communication device having slave high-speed communication means and storage means for reading and writing data exchanged by the high-speed communication, and receiving power for performing the high-speed communication transmitted by wireless power transmission; Between the master side secure communication means for performing the secure communication and the master side high speed communication means for performing the high speed communication between the slave communication apparatus and the slave communication apparatus for performing the high speed communication. Power transmission means for transmitting power by wireless power transmission, wherein the master side secure communication means includes the slave communication device. With each other, and after successful mutual authentication, the slave-side secure communication means of the slave communication device receives a password stored in advance from the slave communication device by the secure communication, When the password received from the slave communication device matches the password inputted from the outside, the master side high-speed communication means encrypts the data with the encryption key generated from the matching password. The communication method includes a step of exchanging the encrypted data by the high-speed communication.

  In the first aspect as described above, mutual authentication is performed with the slave communication device, and after the mutual authentication is successful, stored in advance in the slave side secure communication means of the slave communication device. A password is received from the slave communication device by the secure communication. Then, when the password received from the slave communication device and the password input from the outside match, the encrypted data obtained by encrypting the data with the encryption key generated from the matched password, Exchange is performed by the high-speed communication.

  The communication device according to the second aspect of the present invention provides secure proximity communication with a master communication device that transmits, by wireless power transmission, power for performing high-speed communication, which is proximity communication faster than secure proximity communication. Between the slave side secure communication means for performing secure communication and the master communication apparatus, the slave side high speed communication means for performing high speed communication, and wireless power transmission from the master communication apparatus, Power receiving means for receiving power for performing high-speed communication, and power supply control means for supplying power for performing high-speed communication, and the slave-side secure communication means is connected to the master communication device. , Mutual authentication is performed, and the power supply control unit is a communication device that supplies power for performing the high-speed communication when the mutual authentication is successful.

  The communication method according to the second aspect of the present invention provides secure proximity communication with a master communication device that transmits power for performing high-speed communication, which is proximity communication faster than secure proximity communication, by wireless power transmission. Between the slave side secure communication means for performing secure communication and the master communication apparatus, the slave side high speed communication means for performing high speed communication, and wireless power transmission from the master communication apparatus, The slave-side secure communication means of a communication device comprising a power receiving means for receiving power for performing high-speed communication and a power supply control means for supplying power for performing high-speed communication is the master communication apparatus. Including a step of supplying power for performing the high-speed communication when the mutual authentication is successful. It is a communication method.

  In the second aspect as described above, mutual authentication is performed with the master communication device, and when the mutual authentication is successful, power is supplied to perform the high-speed communication.

  A communication system according to a third aspect of the present invention includes a slave communication device that receives power transmitted by wireless power transmission for performing high-speed communication that is higher-speed proximity communication than secure proximity communication, and the high-speed communication. Including a master communication device that transmits power for performing wireless power transmission, the slave communication device has tamper resistance, and a slave-side secure communication unit that performs secure communication that is secure proximity communication; For performing the high-speed communication, the slave-side high-speed communication means for performing the high-speed communication, the storage means for reading and writing data exchanged by the high-speed communication, and the wireless power transmission from the master communication device Power receiving means for receiving power, and power supply control means for supplying power for performing the high-speed communication, the slave The secure communication means performs mutual authentication with the master communication device, and the power supply control means supplies power for performing the high-speed communication when the mutual authentication is successful, and the master communication An apparatus includes: a master-side secure communication unit that performs the secure communication; a master-side high-speed communication unit that performs the high-speed communication; and a power that the slave communication device transmits power for performing the high-speed communication by wireless power transmission. The master side secure communication means performs mutual authentication with the slave communication device, and after the mutual authentication is successful, the slave side secure communication means of the slave communication device The stored password is received from the slave communication device by the secure communication, and the master side high-speed communication means is the slave When the password received from the communication device matches the password input from the outside, the encrypted data obtained by encrypting the data with the encryption key generated from the matched password is transferred by the high-speed communication. It is a communication system to exchange.

  A communication method according to a third aspect of the present invention includes a slave communication device that receives power transmitted by wireless power transmission for performing high-speed communication that is higher-speed proximity communication than secure proximity communication, and the high-speed communication. Including a master communication device that transmits power for performing wireless power transmission, the slave communication device has tamper resistance, and a slave-side secure communication unit that performs secure communication that is secure proximity communication; For performing the high-speed communication, the slave-side high-speed communication means for performing the high-speed communication, the storage means for reading and writing data exchanged by the high-speed communication, and the wireless power transmission from the master communication device Power receiving means for receiving power, and power supply control means for supplying power for performing the high-speed communication, the master communication device A power transmission in which the master side secure communication means for performing the secure communication, the master side high speed communication means for performing the high speed communication, and the slave communication device transmit power for performing the high speed communication by wireless power transmission. In the slave communication device of the communication system comprising: a slave-side secure communication means performs mutual authentication with the master communication device, and the power supply control means has succeeded in the mutual authentication. Supplying power for performing the high-speed communication, and in the master communication device, the master-side secure communication means performs mutual authentication with the slave communication device, and after successful mutual authentication. , A password stored in advance in the slave side secure communication means of the slave communication device, the slave communication If the password received from the slave communication device and the password input from the outside match by the master side high-speed communication means, the password received from the secure communication is received from the matching password. And exchanging encrypted data obtained by encrypting data with the generated encryption key by the high-speed communication.

  In the third aspect as described above, in the slave communication device, mutual authentication is performed with the master communication device, and when the mutual authentication is successful, the power for performing the high-speed communication is reduced. Power is supplied. On the other hand, in the master communication device, mutual authentication is performed with the slave communication device, and after successful mutual authentication, a password stored in advance in the slave side secure communication means of the slave communication device, Received from the slave communication device by the secure communication. Then, when the password received from the slave communication device and the password input from the outside match, the encrypted data obtained by encrypting the data with the encryption key generated from the matched password, Exchange is performed by the high-speed communication.

  Note that the communication device and the communication system may be independent devices, or may be internal blocks constituting one device.

  Further, the computer can function as a communication device or a communication system. In this case, a program for causing the computer to function as a communication device or a communication system is transmitted through a transmission medium, or It can be provided by being recorded on a recording medium.

  According to the first to third aspects of the present invention, it is possible to perform secure communication while suppressing a decrease in communication speed of high-speed communication.

It is a block diagram which shows the structural example of one Embodiment of the communication system to which this invention is applied. 2 is a block diagram illustrating a configuration example of a non-contact communication medium 100. FIG. 2 is a block diagram illustrating a configuration example of an RW 200. FIG. It is a figure explaining the process of the non-contact communication media 100, RW200, and the high-order apparatus 290 when the non-contact communication media 100 and RW200 adjoin. It is a figure explaining the mutual authentication performed between the non-contact communication media 100 and RW200. In RW200, it is a figure explaining the process of the non-contact communication media 100 and RW200 when wireless power transmission is started. FIG. 10 is a diagram for explaining processing of the non-contact communication medium 100, the RW 200, and the host device 290 when a dedicated area is set in the storage area of the non-volatile memory 111 of the non-contact communication medium 100. 6 is a diagram illustrating processing for setting a dedicated area in the storage area of the nonvolatile memory 111 of the non-contact communication medium 100. FIG. It is a figure explaining the process of the non-contact communication media 100, RW200, and the high-order apparatus 290 for accessing the user encryption area | region of the non-volatile memory 111 of the non-contact communication media. Processing of the non-contact communication media 100, RW 200, and higher-level device 290 when the secure processing controller 250 performs determination of password matching, generation of an individual encryption key, and encryption and decryption using the individual encryption key. It is a figure explaining. It is a figure explaining the process of the non-contact communication media 100, RW200, and the high-order apparatus 290 when storing a protected content in the non-contact communication media. 6 is a diagram for describing processing of the non-contact communication medium 100, the RW 200, and the higher-level device 290 when reading protected content from the non-contact communication medium 100. FIG.

  [One embodiment of communication system to which the present invention is applied]

  FIG. 1 shows a communication system to which the present invention is applied (a system refers to a logical collection of a plurality of devices, regardless of whether the devices of each configuration are in the same housing). It is a block diagram which shows the structural example of one embodiment.

  In FIG. 1, the communication system includes contactless communication media 100, RW 200, and host device 290.

  The non-contact communication medium 100 is, for example, a card-type storage medium about the size of a credit card currently in circulation, and exchanges data by performing near field communication with the RW 200.

  The RW 200 performs proximity communication with the non-contact communication medium 100, and stores (writes) data in the non-contact communication medium 100 according to control from the host device 290. Is read.

  The host device 290 provides or stores data such as images (still images and moving images), contents such as music and programs, such as PC (Personal Computer), TV (TV receiver), and recorder. This is a device capable of (recording), and exchanges data with the non-contact communication medium 100 via the RW 200.

  That is, the host device 290 controls the RW 200 to store data in the non-contact communication medium 100 and reads data from the non-contact communication medium 100.

  In the communication system configured as described above, when the RW 200 (master communication device) is attached (connected) to the higher-level device 290, polling by radio starts.

  After that, when the non-contact communication medium 100 is brought close to the RW 200 by being held over the RW 200, the non-contact communication medium 100 (slave communication device) responds to the wireless polling from the RW 200, As a result, the non-contact communication medium 100 and the RW 200 start proximity communication.

  Then, the RW 200 stores (writes) data such as content supplied from the higher-level device 290 in the non-contact communication medium 100 according to control of the higher-level device 290, or stores data such as content from the non-contact communication medium 100. It is read out and supplied to the host device 290.

  [Configuration example of non-contact communication medium 100]

  FIG. 2 is a block diagram illustrating a hardware configuration example of the contactless communication medium 100 of FIG.

  The non-contact communication medium 100 is a slave communication device that receives power transmitted by wireless power transmission for performing high-speed communication, which is near-field communication faster than secure proximity communication, with the RW 200 wirelessly. Function.

  That is, the non-contact communication medium 100 includes a media control CPU (Central Processing Unit) 110, a nonvolatile memory 111, a high-speed communication slave controller 112, a high-speed communication antenna 113, a secure communication chip 120, a secure communication antenna 121, and a power reception control unit 130. A power receiving antenna 131 and a power feeding control unit 135.

  The media control CPU 110 is connected to the nonvolatile memory 111 and the high-speed communication slave controller 112 via a bus, and controls the nonvolatile memory 111 and the high-speed communication slave controller 112.

  The nonvolatile memory 111 is, for example, a NAND flash memory having a large capacity (for example, 6 Gbytes or 8 Gbytes), and stores data such as contents supplied from the card control CPU 110 under the control of the card control CPU 110. The stored data is also read out and supplied to the card control CPU 110.

  Here, data read / written to / from the nonvolatile memory 111 is exchanged by the high-speed communication slave controller 112 via the card control CPU 110 by high-speed communication.

  The high-speed communication slave controller 112 is connected to the high-speed communication antenna 113 and wirelessly communicates with the RW 200 via the high-speed communication antenna 113 faster than the secure communication performed by the secure communication chip 120 described later. It functions as a slave-side high-speed communication means for performing high-speed communication.

  Here, as a communication method for high-speed communication, for example, TransferJet (registered trademark) capable of performing high-speed proximity communication can be employed.

  In addition, as a communication method for high-speed communication, for example, a communication method compliant with a high-speed wireless communication standard such as wireless LAN, wireless USB (Universal Serial Bus), Bluetooth (registered trademark), or the like can be employed.

  Note that high-speed communication does not have to be secure communication. Therefore, when a communication method incorporating an encryption technique is employed as a high-speed communication method, the encryption technique need not be used.

  In the present embodiment, for example, TransferJet (registered trademark) is adopted as a communication method for high-speed communication. Therefore, in the high-speed communication by the high-speed communication slave controller 112, the maximum is 560 Mbps with a 4.48 GHz carrier. It is assumed that near field communication at the communication speed is performed.

  The secure communication chip 120 is connected to the secure communication antenna 121, and has tamper resistance that performs secure communication that is secure proximity communication with the RW 200 wirelessly via the secure communication antenna 121. It functions as a slave side secure communication means.

  Here, as a communication method of secure communication performed by the secure communication chip 120, for example, FeliCa (registered trademark) capable of secure proximity communication can be employed. In addition, as a communication method for secure communication, a communication method (for example, type A, B, or the like) compliant with a wireless communication standard such as NFC that enables secure near field communication can be employed.

  In this embodiment, FeliCa (registered trademark) is adopted as a communication method for secure communication. Therefore, in secure communication, proximity communication at a communication speed of 212 kbps is performed with a carrier of 13.56 MHz. To do.

  The secure communication chip 120 performs mutual authentication with the communication partner, encrypts the communication path after successful mutual authentication, that is, encrypts data to be exchanged using an encryption key obtained by mutual authentication. Then, secure communication is performed.

  The secure communication chip 120 has a terminal for controlling the power supply control unit 135, and the terminal is connected to the power supply control unit 135 via a signal line.

  The secure communication chip 120 controls the power supply control unit 135 by supplying switch control information described later to the power supply control unit 135.

  Note that the secure communication chip 120 operates using power obtained from an RF (Radio Frequency) signal for secure communication received from the RW 200 received by the secure communication antenna 121 as a power source, and performs secure communication.

  The power reception control unit 130 is connected to the power reception antenna 131 and the power supply control unit 135.

  The power reception control unit 130 receives power for performing high-speed communication transmitted by wireless power transmission from the RW 200 via the power reception antenna 131, supplies the power to the power supply control unit 135, and supplies the power supply control unit The data is supplied to the media control CPU 110, the nonvolatile memory 111, and the high-speed communication slave controller 112 via 135.

  Here, as described above, the media control CPU 110, the nonvolatile memory 111, and the high-speed communication slave controller 112 operate using the power supplied from the power reception control unit 130 via the power supply control unit 135 as a power source. Communicate.

  The power supply control unit 135 also operates using the power supplied from the power reception control unit 130 as a power source.

  As a transmission method for wireless power transmission performed between the power reception control unit 130 and the RW 200, for example, an electromagnetic induction type can be adopted. In addition, as a transmission system for wireless power transmission, for example, a wireless power transmission system such as a magnetic resonance type can be adopted.

  The electromagnetic induction type wireless power transmission has better power transmission efficiency than the magnetic resonance type wireless power transmission, but the antenna misalignment (an antenna for transmitting power and an antenna for receiving power) Weak position). On the contrary, wireless power transmission by magnetic resonance type is more resistant to antenna misalignment than wireless power transmission by electromagnetic induction type, but power transmission efficiency is inferior.

  The power supply control unit 135 supplies power for the non-contact communication medium 100 to perform high-speed communication with the RW 200.

  That is, the power supply control unit 135 supplies power to the media control CPU 110, the nonvolatile memory 111, and the high-speed communication slave controller 112, which are blocks for performing high-speed communication, from the power reception control unit 130.

  Specifically, the power supply control unit 135 has a built-in switch for performing power supply, and according to the switch control information supplied from the secure communication chip 120, the power reception control unit 135 is turned on or off. The power from 130 is supplied to the media control CPU 110, the nonvolatile memory 111, and the high-speed communication slave controller 112, which are blocks for performing high-speed communication, or the supply of the power is cut off.

  In the non-contact communication medium 100 configured as described above, the media control CPU 110, the nonvolatile memory 111, the high-speed communication slave controller 112, the power reception control unit 130, and the power supply control unit 135 are transmitted by wireless power transmission by the RW 200. The secure communication chip 120 operates with the power obtained from the RF signal for secure communication from the RW 200.

  For this reason, the non-contact communication medium 100 does not have a power source (battery), and is in a card type of the same size as an IC card (or IC chip) as an electronic commuter pass or electronic money (to a small size). Can be configured.

  [Configuration example of RW200]

  FIG. 3 is a block diagram illustrating a hardware configuration example of the RW 200 in FIG.

  The RW 200 functions as a master communication device that transmits the power required for the contactless communication medium 100 to perform high-speed communication by wireless power transmission.

  That is, the RW 200 includes an RW control CPU 210, a high-speed communication master controller 220, a high-speed communication antenna 221, a secure communication controller 230, a secure communication antenna 231, a power transmission control unit 240, a power transmission antenna 241, and a secure processing controller 250. .

  The RW control CPU 210 is connected to the host device 290 via a predetermined bus such as USB.

  Further, the RW control CPU 210 is connected to the high-speed communication master controller 220, the secure communication controller 230, and the secure processing controller 250 via a bus, and according to control from the host device 290, the high-speed communication master controller 220, The secure communication controller 230 and the secure processing controller 250 are controlled.

  The RW control CPU 210 is connected to the power transmission control unit 240 through a single general-purpose I / O (Input / Output) (interface), and controls the power transmission control unit 240.

  The high-speed communication master controller 220 is connected to the high-speed communication antenna 221 and wirelessly communicates with the high-speed communication slave controller 112 of the non-contact communication medium 100 (FIG. 2) via the high-speed communication antenna 221. It functions as a master side high-speed communication means for performing communication.

  The secure communication controller 230 is connected to the secure communication antenna 231 and performs secure communication with the secure communication chip 120 of the non-contact communication medium 100 (FIG. 2) wirelessly via the secure communication antenna 231. It functions as a master side secure communication means.

  That is, the secure communication controller 230 outputs an RF signal from the secure communication antenna 231 and performs polling.

  On the other hand, when the non-contact communication medium 100 is held over the RW 200 and the non-contact communication medium 100 (the secure communication antenna 121 (FIG. 2)) and the RW 200 (the secure communication antenna 231) come close to each other, the non-contact communication The secure communication chip 120 of the medium 100 (FIG. 2) returns a response in response to polling from the secure communication controller 230 of the RW 200 (transmits by load modulation).

  The secure communication controller 230 of the RW 200 receives the response from the secure communication chip 120 of the non-contact communication medium 100 and informs the RW control CPU 210 of the response, whereby the RW control CPU 210 causes the non-contact communication medium 100 to Recognizes that it is close to RW200.

  Here, for example, as described above, when FeliCa (registered trademark) is adopted as a communication method for secure communication, RW of FeliCa (registered trademark) is adopted as the secure communication controller 230.

  The power transmission control unit 240 is connected to the power transmission antenna 241 and transmits the power necessary for the non-contact communication medium 100 to perform high-speed communication by wireless power transmission via the power transmission antenna 241.

  The secure processing controller 250 has tamper resistance and performs secure processing that is necessary for the secure communication controller 230 to perform secure communication, for example, processing such as encryption of a communication path.

  Here, for example, as described above, when FeliCa (registered trademark) is used as a secure communication method, a secure chip that performs FeliCa (registered trademark) secure processing is employed as the secure processing controller 250. .

  In addition, electric power necessary for the RW 200 to operate is supplied to the RW 200 from the host device 290 or a power supply (not shown).

  [Processing of the non-contact communication medium 100, the RW 200, and the host device 290 when the non-contact communication medium 100 and the RW 200 are close to each other]

  FIG. 4 is a diagram for explaining processing of the non-contact communication medium 100, the RW 200, and the higher-level device 290 when the non-contact communication medium 100 is held close to the RW 200.

  When the RW 200 is connected, the host device 290 determines whether the RW 200 is an external device that can be handled by the host device 290.

  If the RW 200 is not an external device that can be handled by the host device 290, the host device 290 displays, for example, that effect on a display (not shown) and ends the process.

  When the RW 200 is an external device that can be handled by the host device 290, the host device 290 transmits an operation permission packet 1530 notifying that the operation is permitted to the RW control CPU 210 (FIG. 3) of the RW 200. .

  The RW control CPU 210 receives the operation permission packet 1530 from the host device 290, recognizes that the host device 290 has been normally recognized by the operation permission packet 1530, and holds the contactless communication medium 100 over it. For example, the media wait state for waiting for the proximity.

  When the RW control CPU 210 enters a media waiting state, the RW control CPU 210 transmits a secure communication RFon command 1610 requesting output (start) of an RF signal for secure communication to the secure communication controller 230.

  Secure communication controller 230 receives secure communication RFon command 1610 from RW control CPU 210, and in accordance with secure communication RFon command 1610, secure communication RF signal (secure communication carrier) is transmitted via secure communication antenna 231. Start all output.

  Thereafter, the RW control CPU 210 transmits a secure communication polling request command 1620 requesting to perform secure communication polling to the secure communication controller 230.

  The secure communication controller 230 receives the secure communication polling request command 1620 from the RW control CPU 210, and in response to the secure communication polling request command 1620, transmits the secure communication polling packet 1621 as polling (transmission by RF signal). And via the secure communication antenna 231.

  Here, when the non-contact communication medium 100 is not in the state of being close to the RW 200, a response to the secure communication polling packet 1621 is not returned.

  If a response to the secure communication polling packet 1621 is not returned, the secure communication controller 230 does not return a response to the secure communication polling request command 1620 from the RW control CPU 210 to the RW control CPU 210.

  When a response to the secure communication polling request command 1620 is not returned, the RW control CPU 210 periodically transmits the secure communication polling request command 1620 to the secure communication controller 230.

  Thereby, in the secure communication controller 230, the secure communication polling packet 1621 is periodically transmitted.

  On the other hand, after transmitting the operation permission packet 1530, the host device 290 periodically transmits a status confirmation packet 1540 requesting the status of the RW 200 to the RW 200 in order to recognize the status of the RW 200.

  The RW control CPU 210 of the RW 200 receives the status confirmation packet 1540 from the higher-level device 290, and at that time, it is not detected that the non-contact communication medium 100 is close (hereinafter also referred to as media detection). , A media-less state packet 1550 indicating that media detection has not been performed is returned to the upper device 290.

  The transmission of the status confirmation packet 1540 by the host device 290 and the reply of the media-less status packet 1550 by the RW control CPU 210 as a response to the status confirmation packet 1540 are repeated periodically until media detection is performed.

  Thereafter, when the non-contact communication medium 100 is held over the RW 200 and the non-contact communication medium 100 and the RW 200 come close to each other, the secure communication chip 120 of the non-contact communication medium 100 (FIG. 2) receives the secure communication polling packet 1621. Then, a secure communication polling reply packet 1622 as a response to the secure communication polling packet 1621 is transmitted via the secure communication antenna 121.

  The secure communication controller 230 of the RW 200 (FIG. 3) receives the secure communication polling reply packet 1622 from the secure communication chip 120 of the non-contact communication medium 100, and the media is detected according to the secure communication polling reply packet 1622. A media detection response 1623 indicating this is transmitted to the RW control CPU 210 as a response to the secure communication polling request command 1620.

  The RW control CPU 210 receives the media detection response 1623 from the secure communication controller 230, and recognizes that the media has been detected by the media detection response 1623.

  After that, when the RW control CPU 210 receives the (latest) status confirmation packet 1540 from the host device 290, the RW control CPU 210 sends a media detection packet 1630 indicating that media detection has been performed to the host device 290 to the host device 290. Return to 290.

  The host device 290 receives the media detection packet 1630 from the RW control CPU 210, recognizes that the media has been detected by the media detection packet 1630, and stops the transmission of the status confirmation packet 1540.

  Thereafter, mutual authentication (data exchange for) is performed between the secure communication chip 120 of the non-contact communication medium 100 and the secure communication controller 230 of the RW 200.

  Then, only when the mutual authentication is successful, the subsequent processing is performed. When the mutual authentication fails, the subsequent processing is not performed.

  As described above, by performing mutual authentication, data such as content can be transmitted at high speed between the unauthorized device forged as the contactless communication medium 100 or RW200 and the contactless communication medium 100 or RW200. Thus, illegal communication can be prevented.

  When the mutual authentication is successful, in the contactless communication medium 100 and the RW 200, the communication path is encrypted, that is, an encryption key for encrypting data exchanged between the secure communication chip 120 and the secure communication controller 230. And secure communication in which data encrypted with the encryption key is exchanged can be performed.

  After successful mutual authentication, the RW control CPU 210 transmits a capacity confirmation command 1640 requesting the capacity of the nonvolatile memory 111 of the non-contact communication medium 100 to the secure communication controller 230.

  The secure communication controller 230 receives the capacity check command 1640 from the RW control CPU 210, and in response to the capacity check command 1640, sends a secure communication read packet 1641 that requests reading of the capacity of the nonvolatile memory 111 to the secure communication antenna 231. To send through.

  In the contactless communication medium 100 (FIG. 2), the secure communication chip 120 receives a secure communication read packet 1641 from the secure communication controller 230, and a built-in memory (not shown) according to the secure communication read packet 1641 The data of the capacity of the non-volatile memory 111 of the non-contact communication medium 100 stored in is read.

  That is, the secure communication chip 120 of the non-contact communication medium 100 (FIG. 2) has a built-in memory (not shown), and data of the capacity of the non-volatile memory 111 of the non-contact communication medium 100 is written in the memory in advance. It is.

  The secure communication chip 120 reads the data of the capacity of the nonvolatile memory 111 stored in the built-in memory according to the secure communication read packet 1641 from the secure communication controller 230.

  Then, the secure communication chip 120 transmits the data of the capacity of the nonvolatile memory 111 as the read data 1642 requested to be read by the secure communication Read packet 1641.

  The secure communication controller 230 of the RW 200 (FIG. 3) receives the read data 1642 from the secure communication chip 120 of the non-contact communication medium 100, and the read data 1642 represents the capacity of the nonvolatile memory 111 of the non-contact communication medium 100. The capacity data 643 is transmitted to the RW control CPU 210.

  The RW control CPU 210 receives the capacity data 643 from the secure communication controller 230 and temporarily stores it in a RAM (Random Access Memory) (not shown).

  On the other hand, the host device 290 receives the media detection packet 1630 from the RW control CPU 210 of the RW 200, and then determines whether the non-contact communication media 100 in the vicinity of the RW 200 has a capacity to store data such as content. In order to confirm this, a capacity confirmation packet 1650 requesting the capacity of the non-volatile memory 111 of the non-contact communication medium 100 is transmitted to the RW control CPU 210.

  The RW control CPU 210 receives the capacity confirmation packet 1650 from the host device 290 and returns the capacity data 1643 stored in the RAM (not shown) to the host device 290 as the capacity data 1651 in response to the capacity confirmation packet 1650. .

  The host device 290 receives the capacity data 1651 from the RW control CPU 210 and refers to the capacity data 1651 to recognize the capacity of the non-contact communication medium 100 (nonvolatile memory 111).

  The host device 290 transmits the maximum amount of data that can be transmitted to the non-contact communication medium 100 by high-speed communication from the capacity of the non-contact communication medium 100, and is transmitted from the non-contact communication medium 100 by high-speed communication. It is possible to recognize the maximum amount of data to be received and the capacity of a user encryption area, which will be described later, which can be secured in the contactless communication medium 100.

  [Mutual authentication]

  FIG. 5 is a diagram for explaining mutual authentication performed between the non-contact communication medium 100 and the RW 200.

  The RW control CPU 210 transmits a mutual authentication start request command 310 requesting mutual authentication to the secure processing controller 250.

  The secure processing controller 250 receives the mutual authentication start request command 310 from the RW control CPU 210 and returns a mutual authentication response 311 that is a response to the mutual authentication start request command 310 to the RW control CPU 210.

  The RW control CPU 210 receives the mutual authentication response 311 from the secure processing controller 250, and in response to the mutual authentication response 311, sends a mutual authentication request command 320 for requesting exchange of data for mutual authentication to the secure communication controller 230.

  The secure communication controller 230 receives the mutual authentication request command 320 from the RW control CPU 210, and starts exchanging data for mutual authentication in response to the mutual authentication request command 320.

  That is, the secure communication controller 230 transmits a mutual authentication packet 321 including data for mutual authentication supplied from the secure processing controller 250 via the RW control CPU 210 to the contactless communication medium 100.

  In the contactless communication medium 100, the secure communication chip 120 receives the mutual authentication packet 321 from the secure communication controller 230, and performs necessary authentication processing in accordance with the mutual authentication packet 321.

  Then, the secure communication chip 120 supplies the power supply control unit 135 with the switch control information for turning on or off the switch built in the power supply control unit 135 (FIG. 2) according to the result of the authentication process. Start.

  Note that at the current timing, the RW 200 is not performing wireless power transmission, and therefore, no power is supplied to the power supply control unit 135 in the contactless communication medium 100. Therefore, the power supply control unit 135 does not operate.

  When the secure communication chip 120 finishes the authentication process according to the mutual authentication packet 321 from the secure communication controller 230, the secure communication chip 120 returns a mutual authentication response packet 322 including data for mutual authentication, which is a response to the mutual authentication packet 321. .

  The secure communication controller 230 receives the mutual authentication response packet 322 from the secure communication chip 120, and sends the mutual authentication response 323 having the same contents as the mutual authentication response packet 322 via the RW control CPU 210 to the secure processing controller 250. Return to.

  Data necessary for mutual authentication is exchanged between the secure communication chip 120 of the contactless communication medium 100 and the secure processing controller 250 of the RW 200 via the RW control CPU 210 and the secure communication controller 230. For example, mutual authentication employed in FeliCa (registered trademark) is performed.

  When the mutual authentication between the non-contact communication medium 100 and the RW 200 is successful, each of the non-contact communication medium 100 and the RW 200 recognizes that the communication partner is a regular device, and the non-contact communication medium 100 The communication path (the communication path via the RW control CPU 210 and the secure communication controller 230) between the secure communication chip 120 and the secure processing controller 250 of the RW 200 is encrypted.

  That is, a communication path (hereinafter also referred to as an encryption communication path) through which encrypted data is exchanged is established between the secure communication chip 120 of the non-contact communication medium 100 and the secure processing controller 250 of the RW 200. .

As a result, secure communication can be performed between the secure communication chip 120 of the non-contact communication medium 100 and the secure communication controller 230 (and thus the secure processing controller 250) of the RW 200.

  [Processing of non-contact communication medium 100 and RW 200 when wireless power transmission is started]

  FIG. 6 is a diagram for explaining processing of the contactless communication medium 100 and the RW 200 when wireless power transmission is started in the RW 200.

  When mutual authentication is successful, the RW control CPU 210 of the RW 200 (FIG. 3) transmits a power supply start instruction 1700 for instructing start of wireless power transmission to the power transmission control unit 240.

  The power transmission control unit 240 receives the power supply start instruction 1700 from the RW control CPU 210 and outputs an RF signal for wireless power transmission via the power transmission antenna 241 in response to the power supply start instruction 1700. Thus, wireless power transmission to the contactless communication medium 110 is started.

  As described above, the power reception control unit 130 of the non-contact communication medium 110 (FIG. 2) uses the power transmitted by the wireless power transmission started by the power transmission control unit 240 of the RW 200 after the mutual authentication is successful. Reception is performed via the reception antenna 131.

  Then, the power reception control unit 130 starts supplying power (power supply) by the wireless power transmission to the power supply control unit 135, whereby the power supply control unit 135 uses the power from the power reception control unit 130 as a power source. As the operation starts.

  In the non-contact communication medium 100 (FIG. 2), when the power supply control unit 135 starts operation, the secure communication chip 120 that has succeeded in mutual authentication, as described in FIG. To supply.

  The power supply control unit 135 stores the switch control information from the secure communication chip 120 after the start of the operation, and continues to store the switch control information while power is supplied from the power reception control unit 130.

  Then, the power supply control unit 135 turns on or off the built-in switch according to the stored switch control information, and the media control CPU 110 receives power from the power reception control unit 130 according to the state of the switch. The power supply that is the supply to the nonvolatile memory 111 and the high-speed communication slave controller 112 is performed, or the power supply is cut off.

  That is, in the non-contact communication medium 100 (FIG. 2), the secure communication chip 120 turns on the switch when the RW 200 is recognized as a legitimate device in the mutual authentication described with reference to FIG. The switch control information is supplied to the power supply control unit 135.

  Therefore, when the RW 200 is a legitimate device, the power supply control unit 135 turns on the built-in switch, thereby supplying power to the media control CPU 110, the nonvolatile memory 111, and the high-speed communication slave controller 112. Is called.

  On the other hand, in the non-contact communication medium 100 (FIG. 2), the secure communication chip 120 does not recognize that the RW 200 is a legitimate device in the mutual authentication described in FIG. The switch control information for indicating the OFF state is supplied to the power supply control unit 135.

  Therefore, when the RW 200 is not a legitimate device, the power supply control unit 135 turns off the built-in switch, thereby cutting off the power supply to the media control CPU 110, the nonvolatile memory 111, and the high-speed communication slave controller 112. Is done.

  As a result, unauthorized access to the nonvolatile memory 111 of the non-contact communication medium 100 by unauthorized RW that is not a legitimate device can be prevented.

  That is, for example, the RW 200 (FIG. 3) includes the high-speed communication master controller 220 and the high-speed communication antenna 221, the power transmission control unit 240, and the power transmission antenna 241. When the non-contact communication medium 100 comes close to an unauthorized RW that performs transmission, if the non-contact communication medium 100 does not have the power supply control unit 135, wireless power transmission performed by the unauthorized RW Power is supplied from the power reception control unit 130 to the media control CPU 110, the nonvolatile memory 111, and the high-speed communication slave controller 112.

  As a result, the contactless communication medium 100 is in a state in which high-speed communication can be performed in the media control CPU 110, the nonvolatile memory 111, and the high-speed communication slave controller 112, and the nonvolatile memory 111 is illegally accessed. There is a risk.

  On the other hand, in the non-contact communication medium 100, unless mutual authentication is successful between the secure communication chip 120 and the secure communication controller 230 (and thus the secure processing controller 250), power is transmitted from the RW 200 by wireless power transmission. Is transmitted to the media control CPU 110, the nonvolatile memory 111, and the high-speed communication slave controller 112 by the power supply control unit 135.

  As a result, the non-contact communication medium 100 does not enter a state in which high-speed communication can be performed in the media control CPU 110, the non-volatile memory 111, and the high-speed communication slave controller 112. It can be prevented from being accessed (protection function is strengthened).

  When the mutual authentication between the contactless communication medium 100 and the RW 200 succeeds, the power supply control unit 135 uses the power received from the power reception control unit 130 for the media control CPU 110, the nonvolatile memory 111, and the high-speed communication. The power supply that is the supply to the slave controller 112 is performed, whereby the media control CPU 110, the nonvolatile memory 111, and the high-speed communication slave controller 112, which are blocks that perform high-speed communication, are supplied from the power reception control unit 130 to the power supply control unit 135. The operation is started using the power supplied via the power supply.

  On the other hand, the RW control CPU 210 of the RW 200 transmits a secure communication RFoff command 1705 to the secure communication controller 230 after waiting for an appropriate waiting time after transmitting the power supply start instruction 1700.

  The secure communication controller 230 receives the secure communication RFoff command 1705 from the RW control CPU 210 and stops outputting the secure communication RF signal from the secure communication antenna 231 in response to the secure communication RFoff command 1705.

  When the secure communication controller 230 stops outputting the RF signal, the secure communication chip 120 of the non-contact communication medium 100 cannot obtain power as a power source and stops its operation.

  As a result, the supply of switch control information from the secure communication chip 120 to the power supply control unit 135 is also stopped.

  Here, the secure communication chip 120 outputs after the power supply control unit 135 of the non-contact communication medium 100 starts operation by wireless power transmission performed in response to the power supply start instruction 1700 by the RW control CPU 210 of the RW 200. The time required to store the switch control information is the switch control information delivery period (from the secure communication chip 120 to the power supply control unit 135).

  In order for the secure communication chip 120 of the non-contact communication medium 100 to output the switch control information after the RW control CPU 210 of the RW 200 transmits the power supply start instruction 1700 and until the switch control information delivery period ends. The secure communication RFoff command 1705 is sent to the secure communication controller 230 at a timing at which the output of the RF signal for secure communication is stopped immediately after the end of the switch control information transfer period so that the operation can continue. Send.

  Also, in this case, in RW 200, the secure communication RF after the power transmission control unit 240 starts the wireless power transmission until the secure communication controller 230 stops outputting the secure communication RF signal. Since both the signal and the RF signal used in wireless power transmission are output, interference may occur between the secure communication RF signal and the RF signal used in wireless power transmission.

  That is, it is not easy to manufacture a circuit in the GHz band, it is easy to manufacture a circuit having a frequency of several hundreds KHz to several MHz, and components such as a capacitor for constructing a circuit having a frequency of several hundreds KHz to several MHz are inexpensive. For the reason that the cost of the circuit can be suppressed, for example, about several hundred Hz to several MHz is adopted as the frequency of the RF signal for wireless power transmission.

  In the power transmission control unit 240 of the RW 200 (FIG. 3), when wireless power transmission is performed at such a frequency, for example, as described above, FeliCa (registered trademark) is adopted as a communication method for secure communication. Since the frequency of the FeliCa (registered trademark) carrier is 13.56 MHz, which is close to the frequency of the RF signal used for wireless power transmission, the FeliCa (registered trademark) carrier, that is, the RF signal for secure communication, Interference occurs with the RF signal used in wireless power transmission.

  As described above, when the RF signal for secure communication and the RF signal for wireless power transmission cause interference, the secure communication controller 230 of the RW 200 uses the wireless power to prevent the interference. It is desirable to stop outputting the RF signal for secure communication before the transmission is started.

  However, in this embodiment, it is necessary to operate the secure communication chip 120 of the non-contact communication medium 100 until the switch control information delivery period ends. Therefore, the power transmission control unit 240 of the RW 200 performs the wireless power transmission. Even after starting, the secure communication controller 230 of the RW 200 needs to continue outputting the RF signal for secure communication until the switch control information delivery period ends.

  As a result, from the start of wireless power transmission to the end of the switch control information delivery period, in RW 200, the power transmission control unit 240 outputs an RF signal for wireless power transmission, and the secure communication controller 230 Since the RF signal for secure communication is output, interference occurs between the RF signal for wireless power transmission and the RF signal for secure communication.

  However, in this case, the secure communication controller 230 of the RW 200 outputs an RF signal for secure communication only for operating the secure communication chip 120 of the contactless communication medium 100, and data is not exchanged. Therefore, there is no particular problem even if interference occurs between the RF signal for wireless power transmission and the RF signal for secure communication.

  Note that when RF signals of frequencies that do not interfere with each other are used as the RF signal for secure communication and the RF signal for wireless power transmission, the output of the RF signal for secure communication does not stop. May be.

  After transmitting the secure communication RFoff command 1705, the RW control CPU 210 of the RW 200 (FIG. 3) sends an initialization command 1720 for requesting initialization of the high-speed communication master controller 220 to the high-speed communication master controller 220. Send.

  The high-speed communication master controller 220 receives the initialization command 1720 from the RW control CPU 210 and performs necessary initialization in accordance with the initialization command 1720.

  Further, thereafter, the RW control CPU 210 transmits a negotiation start command 1730 requesting a negotiation for exchanging information necessary for performing high-speed communication to the high-speed communication master controller 220.

  The high-speed communication master controller 220 receives the negotiation start command 1730 from the RW control CPU 210 and starts outputting an RF signal for high-speed communication via the high-speed communication antenna 221 in response to the negotiation start command 1730. A request packet 1731 including information necessary for high-speed communication is transmitted to request information necessary for high-speed communication.

  Here, immediately after the power transmission control unit 240 of the RW 200 starts wireless power transmission, the non-contact communication medium 110 (the high-speed communication slave controller 112) still performs high-speed communication even though the operation has started. Therefore, a response to the request packet 1731 from the high-speed communication master controller 220 of the RW 200 cannot be returned.

  When no response to the request packet 1731 is returned, the high-speed communication master controller 220 of the RW 200 repeats transmission of the request packet 1731 periodically (periodically).

  On the other hand, in the non-contact communication medium 100 (FIG. 2), the media control CPU 110, the nonvolatile memory 111, and the high-speed communication slave controller 112 supply power supplied from the power reception control unit 130 via the power supply control unit 135. As the operation starts.

  Then, the media control CPU 110 transmits an initialization command 1710 for requesting initialization of the nonvolatile memory 111 to the nonvolatile memory 111.

  The nonvolatile memory 111 receives the initialization command 1710 from the media control CPU 110 and performs necessary initialization in accordance with the initialization command 1710.

  Further, the media control CPU 110 transmits an initialization command 1711 for requesting initialization of the high-speed communication slave controller 112 to the high-speed communication slave controller 112.

  The high-speed communication slave controller 112 receives the initialization command 1710 from the media control CPU 110 and performs necessary initialization in accordance with the initialization command 1711.

  When initialization of the nonvolatile memory 111 and the high-speed communication slave controller 112 is completed, the media control CPU 110 transmits a negotiation start command 1740 requesting high-speed communication negotiation to the high-speed communication slave controller 112.

  The high-speed communication slave controller 112 receives the negotiation start command 1740 from the media control CPU 110 and performs negotiation in accordance with the negotiation start command 1740.

  That is, when the high speed communication slave controller 112 receives the negotiation start command 1740 from the media control CPU 110 and then receives the request packet 1731 transmitted from the high speed communication master controller 220 of the RW 200 (FIG. 3), the request packet As a response to 1731, a response packet 1741 including necessary information is returned.

  The high-speed communication master controller 220 of the RW 200 (FIG. 3) receives the response packet 1741 from the high-speed communication slave controller 112 of the non-contact communication medium 100, whereby the high-speed communication slave controller 112 of the non-contact communication medium 100 and the RW 200 High-speed communication with the high-speed communication master controller 220 becomes possible.

  When receiving the response packet 1741 from the high-speed communication slave controller 112 of the non-contact communication medium 100, the high-speed communication master controller 220 of the RW 200 sends a negotiation completion response 1750 indicating that the high-speed communication negotiation has been completed to the RW control CPU 210. return.

  As described above, the high-speed communication slave controller 112 of the non-contact communication medium 100 (FIG. 2) and the high-speed communication master controller 220 of the RW 200 (FIG. 3) complete the initialization for high-speed communication and connect (communication link). ) Is established, and data transmission (exchange) by high-speed communication is possible.

  In high-speed communication between the high-speed communication slave controller 112 of the non-contact communication medium 100 (FIG. 2) and the high-speed communication master controller 220 of the RW 200 (FIG. 3), the nonvolatile memory 111 (FIG. 2) of the non-contact communication medium 100 is stored. Stored data is exchanged.

  In particular, the storage area of the non-volatile memory 111 of the non-contact communication medium 100 can be used without limiting the data to be stored, but can also be used by limiting the data to be stored.

  That is, a part or all of the storage area of the nonvolatile memory 111 can be set as a dedicated area dedicated for storing predetermined data and used only for storing the predetermined data.

  [Dedicated Area Settings]

  FIG. 7 is a diagram for explaining processing of the non-contact communication medium 100, the RW 200, and the host device 290 when a dedicated area is set in the storage area of the non-volatile memory 111 of the non-contact communication medium 100.

  As described above, high-speed communication can be performed between the high-speed communication slave controller 112 of the non-contact communication medium 100 (FIG. 2) and the high-speed communication master controller 220 of the RW 200 (FIG. 3). Suppose that

  Therefore, mutual authentication is performed between the contactless communication medium 100 and the RW 200, and the mutual authentication is successful.

  The upper device 290, for example, an area division requesting to divide (set) a part or all of the storage area of the non-volatile memory 111 of the non-contact communication medium 100 into a dedicated area according to a user operation or the like. The command 400 is transmitted to the RW control CPU 210 of the RW 200.

  The RW control CPU 210 receives the area division command 400 from the higher-level device 290 and transmits an area division request 401 including a part of information included in the area division command 400 to the high-speed communication master controller 220.

  The high-speed communication master controller 220 receives the area division request 401 from the RW control CPU 210 and transmits an area division packet 402 having the same contents as the area division request 401 by high-speed communication.

  The area division packet 402 transmitted by the high-speed communication master controller 220 is received by the high-speed communication slave controller 112 of the non-contact communication medium 100.

  The high-speed communication slave controller 112 requests area division to divide the storage area (part or all) of the nonvolatile memory 111 into a dedicated area according to the area division packet 402 from the high-speed communication master controller 220. The command 410 is transmitted to the media control CPU 110.

  The media control CPU 110 receives the area division command 410 from the high-speed communication slave controller 112 and issues a memory write command 411 for requesting writing to the nonvolatile memory 111 in accordance with the area division command 410. Thus, area management information for setting a predetermined dedicated area in the storage area of the nonvolatile memory 111 is written in the nonvolatile memory 111.

  By writing the area management information to the nonvolatile memory 111, a predetermined dedicated area is set in the storage area of the nonvolatile memory 111. That is, the media control CPU 110 manages the storage area of the nonvolatile memory 111 as a predetermined dedicated area according to the area management information stored in the nonvolatile memory 111.

  When the area management information is written in the nonvolatile memory 111, the media control CPU 110 sends an area division completion notification 412 for notifying that a predetermined dedicated area has been set in the storage area of the nonvolatile memory 111 to the high-speed communication slave controller 112. Send to.

  The high-speed communication slave controller 112 receives the area division completion notification 412 from the media control CPU 110 and transmits an area division response 413 having the same contents as the area division completion notification 412 by high-speed communication.

  The area division response 413 transmitted by the high speed communication slave controller 112 is received by the high speed communication master controller 220 of the RW 200.

  The high-speed communication master controller 220 transmits an area division completion notification 414 having the same contents as the area division response 413 transmitted from the high-speed communication slave controller 112 to the RW control CPU 210.

  Here, one of the dedicated areas set as the storage area of the non-volatile memory 111 is an area for storing encrypted data obtained by encrypting so-called plaintext data, and when a predetermined password is input. There is a user encryption area that is an area where only access is permitted.

  When the user encryption area is set in the storage area of the non-volatile memory 111, the area dividing command 400 transmitted from the higher-level device 290 to the RW control CPU 210 of the RW 200 described above includes a user's upper level as described later. A password (hereinafter also referred to as a setting password) set for the user encryption area, which is input by operating the device 290, is included.

  When the user encryption area is set in the storage area of the non-volatile memory 111, the RW control CPU 210 hashes the set password with a predetermined hash function and includes a hash password obtained as a result, which will be described later in secure storage. An encryption request 420 for requesting encryption of the area division information 530 is transmitted to the secure processing controller 250 together with the secure storage area division information 530.

  The secure processing controller 250 receives the encryption request 420 and the secure storage area division information 530 from the RW control CPU 210, and encrypts the secure storage area division information 530 in response to the encryption request 420.

  That is, the secure processing controller 250 encrypts the secure storage area division information 530 using the encryption key already obtained by the mutual authentication performed between the contactless communication medium 100 and the RW 200.

  Then, the secure processing controller 250 returns the encrypted data 421 obtained by encrypting the secure storage area division information 530 to the RW control CPU 210.

  The RW control CPU 210 receives the encrypted data 421 from the secure processing controller 250, and sends an encrypted data write request 430 including the encrypted data 421 to request writing of the encrypted data 421 to the secure communication controller 230. Send.

  The secure communication controller 230 receives the encrypted data write request 430 from the RW control CPU 210, and transmits the encrypted data write packet 431 having the same content as the encrypted data write request 430 by secure communication.

  Accordingly, the secure storage area division information 530 is transmitted from the non-contact communication medium 100 to the RW 200 via an encrypted communication path that is an encrypted communication path established by mutual authentication between the non-contact communication medium 100 and the RW 200. Sent securely.

  The encrypted data write packet 431 transmitted by the secure communication controller 230 is received by the secure communication chip 120 of the contactless communication medium 100.

  The tamper-resistant secure communication chip 120 has already received the encrypted data 421 included in the encrypted data write packet 431 from the secure communication controller 230 by the mutual authentication performed between the non-contact communication medium 100 and the RW 200. Using the obtained encryption key, it is decrypted into (plaintext) secure storage area division information 530 and stored in a built-in memory (nonvolatile memory).

  Thereafter, the secure communication chip 120 transmits an encrypted data write completion packet 440 notifying that the storage of the secure storage area division information 530 has been completed.

  The encrypted data write completion packet 440 transmitted by the secure communication chip 120 is received by the secure communication controller 230 of the RW 200.

  Upon receiving the encrypted data write completion packet 440 from the secure communication chip 120, the secure communication controller 230 transmits an encrypted data write response 441 having the same contents as the encrypted data write completion packet 440 to the RW control CPU 210. To do.

  The RW control CPU 210 receives the encrypted data write response 441 from the secure communication controller 230, and returns an area division response 442 having the same contents as the encrypted data write response 441 to the higher-level device 290.

  As described above, the setting password for the user encryption area (secure storage area division information 530 including the hash password obtained by hashing) is securely transmitted from the RW 200 to the non-contact communication medium 100 and is non-contact. In the communication medium 100, it can be safely stored in the secure communication chip 120 having tamper resistance.

  When interference occurs between the RF signal for secure communication and the RF signal for wireless power transmission, during the secure communication between the non-contact communication medium 100 and the RW 200, that is, The power transmission control unit 240 of the RW 200 stops the output of the RF signal for wireless power transmission from the transmission of the encrypted data write packet 431 (immediately before) to the reception of the encrypted data write completion packet 440 (immediately after). Or the output level of the RF signal for wireless power transmission (in order to reduce the degree of interference), the media control CPU 110, the non-volatile memory 111, and the high-speed communication slave controller 112 are in standby or sleep mode. Make it small enough to maintain the condition.

  With reference to FIG. 8, the process in the case of setting a dedicated area in the storage area of the non-volatile memory 111 of the non-contact communication medium 100 will be further described.

  FIG. 8A shows area division information included in the area division command 400 (FIG. 7) transmitted from the host device 290 to the RW control CPU 210 of the RW 200.

  As shown in FIG. 8A, the area division information includes an area number, range information, attributes, and a necessary password.

  For example, the upper device 290 generates one or more region division information according to the operation of the upper device 290 by the user, and sends the region division command 400 including the one or more region division information to the RW control CPU 210 of the RW 200. Send.

  That is, the user operates the host device 290 to input information such as the size, type, and necessary password of the dedicated area set in the storage area of the nonvolatile memory 111, and the host device 290 uses the information. Thus, one area division information is generated for one dedicated area.

  In the area division information, the area number is a sequential number assigned to the dedicated area by the upper device 290.

  The range information is information representing the arrangement of the dedicated area in the storage area of the nonvolatile memory 111. For example, the set of the start address and size of the dedicated area or the set of the start address and end address of the dedicated area is set. Etc.

  The attribute includes information indicating the type of the dedicated area.

  As types of the dedicated area, there are, for example, a non-secure area and a protected content area, which will be described later, in addition to the above-described user encryption area.

  The attribute can also include information indicating that the dedicated area is an area that permits only reading or an area that permits both writing and reading.

  When the user encryption area is set as a dedicated area, the password is input by the user operating the host device 290, and is used to restrict access to the user encryption area.

  The host device 290 transmits the area division command 400 including one or more pieces of area division information to the RW control CPU 210 of the RW 200 as described with reference to FIG.

  The RW control CPU 210 uses the area management information for managing the dedicated area from information other than the password, that is, area number, range information, and attributes, from the area division information included in the area division command 400 from the host device 290. The area division request 401 that is extracted as information and includes the area management information is transmitted to the high-speed communication master controller 220 as described with reference to FIG.

  In the high-speed communication master controller 220, the area division packet 402 (FIG. 7) having the same content as the area division request 401 from the RW control CPU 210 is transmitted to the high-speed communication slave controller 112 of the non-contact communication medium 100.

  In the high-speed communication slave controller 112, the area division command 410 (FIG. 7) including the area management information included in the area division packet 402 from the high-speed communication master controller 220 is transmitted to the media control CPU 110.

  The media control CPU 110 writes the area management information included in the area division command 410 from the high-speed communication slave controller 112 to the nonvolatile memory 111 by issuing a memory write command 411 (FIG. 7).

  As described above, by writing the area management information to the nonvolatile memory 111, a dedicated area is set in the storage area of the nonvolatile memory 111.

  FIG. 8B shows an example of a storage area of the nonvolatile memory 111 in which a dedicated area is set.

  Here, as described above, the types of dedicated areas set in the storage area of the nonvolatile memory 111 include a user encryption area, a non-secure area, and a protected content area.

  As described above, the user encryption area is an area in which encrypted data obtained by encrypting data is stored, and access is permitted only when a predetermined password is input (the input of the predetermined password is not permitted). Otherwise, access is restricted.)

  By storing encrypted data obtained by encrypting (plaintext) data in the user encryption area, even if the non-contact communication medium 100 is transferred to a third party due to loss or the like, information ( Data) can be prevented.

  The non-secure area is an area in which arbitrary data (which may or may not be encrypted) is stored. In this embodiment, mutual authentication between the contactless communication medium 100 and the RW 200 is performed. If successful, access can be made without restrictions such as password entry.

  The protected content area is an area in which protected content, which is content protected as a literary work, is recorded. Similarly to the non-secure area, if the mutual authentication between the contactless communication medium 100 and the RW 200 is successful, the password Can be accessed without any restrictions such as input.

  In the protected content area, for example, protected content protected by DRM (Digital Rights Management) such as AACS (Advanced Access Content System) is stored.

  Note that the protected content stored in the protected content area is encrypted. Therefore, even if the protected content stored in the protected content area is read and there is no encryption key for decrypting the protected content, the protected content is stored. Cannot be used for reproduction.

  In FIG. 8B, each of three types of dedicated areas, a non-secure area, a user encryption area, and a protected content area, is set in the storage area of the nonvolatile memory 111 one by one.

  When the dedicated area is set as the storage area of the nonvolatile memory 111, an area management table for managing the dedicated area is stored in a part of the storage area of the nonvolatile memory 111.

  The area management table has as many records as the number of dedicated areas set in the storage area of the nonvolatile memory 111, and area management information for managing one dedicated area is registered in one record. The

  Registration (writing) of the area management information to the area management table is performed by issuing the memory write command 411 (FIG. 7) by the media control CPU 110 described above.

  For the user encryption area in the dedicated area, the RW control CPU 210 of the RW 200 generates secure storage area division information 530.

  FIG. 8C shows an example of the secure storage area division information 530.

  When the user encryption area is set as the dedicated area, the user inputs a password (setting password) for the user encryption area by operating the host device 290.

  As a part of the area division information (FIG. 8A), the setting password is transmitted from the host device 290 to the RW control CPU 210 of the RW 200 as described above with reference to FIG. The

  As described with reference to FIG. 7, the RW control CPU 210 hashes the set password that is a part of the area division information included in the area division command 400 from the higher-level device 290.

  Then, as shown in FIG. 8C, the RW control CPU 210 hashes the area number, range information, attributes, and setting password, which are the remaining area division information included in the area division command 400 from the higher-level device 290. The set with the hash password obtained in this way is referred to as secure storage area division information 530.

  As described above, the RW control CPU 210 generates as many secure storage area division information 530 as the number of user encryption areas set in the storage area of the nonvolatile memory 111.

  As described with reference to FIG. 7, the secure storage area division information 530 generated in the RW control CPU 210 is transmitted to the non-contact communication medium 100 by secure communication, and is included in the secure communication chip 120 of the non-contact communication medium 100. Stored in memory.

  Here, the secure storage area division information 530 is generated only for the user encryption area and is stored in the memory built in the secure communication chip 120 of the non-contact communication medium 100. However, the secure storage area division information 530 is stored in the memory. Can be generated not only for the user encryption area, but also for the non-secure area and the protected content area, and can be stored in a memory built in the secure communication chip 120 of the non-contact communication medium 100.

  However, the hash password is not included in the secure storage area division information 530 generated for the non-secure area and the protected content area.

  [Process for accessing the user encryption area]

  FIG. 9 is a diagram for explaining processing of the non-contact communication medium 100, the RW 200, and the higher-level device 290 for accessing the user encryption area of the non-volatile memory 111 of the non-contact communication medium 100.

  It is assumed that the user encryption area has already been set in the storage area of the nonvolatile memory 111 as described above.

  When accessing the user encryption area of the nonvolatile memory 111, the user brings the non-contact communication medium 100 and the RW 200 close to each other by holding the non-contact communication medium 100 over the RW 200 or the like.

  When the non-contact communication medium 100 and the RW 200 come close to each other, mutual authentication is performed between the non-contact communication medium 100 and the RW 200 as described above.

  Then, due to the success of the mutual authentication, the communication path between the secure communication chip 120 of the non-contact communication medium 100 and the secure communication controller 230 of the RW 200 and thus the secure processing controller 250 (via the RW control CPU 210) is The encrypted communication path is established (formed).

  Thereafter, the secure storage area division information 530 and the individual ID (Identification) 601 stored in the memory built in the secure communication chip 120 of the non-contact communication medium 100 are transferred from the secure communication chip 120 of the non-contact communication medium 100 to the RW 200. Is transmitted to the secure processing controller 250 by secure communication, that is, by communication via an encryption communication path.

  The secure processing controller 250 of the RW 200 receives the secure storage area division information 530 and the individual ID 601 transmitted from the secure communication chip 120 of the non-contact communication medium 100, and temporarily stores them in the built-in memory.

  Here, an individual ID 601, which is a unique ID, is assigned to the contactless communication medium 100, and the individual memory assigned to the contactless communication medium 100 is stored in the memory built in the secure communication chip 120 of the contactless communication medium 100. The ID 601 can be stored in advance.

  Further, in this case, the secure communication chip 120 of the contactless communication medium 100 can transmit the individual ID 601 to the RW 200 in addition to the secure storage area division information 530 after successful mutual authentication.

  In addition, after successful mutual authentication, the RW 200 starts wireless power transmission upon receiving the secure storage area division information 530 and the individual ID 601 from the non-contact communication medium 100, whereby the non-contact communication medium 100 It becomes a state where high-speed communication can be performed.

  In the RW 200, when the secure processing controller 250 stores the secure storage area division information 530 and the individual ID 601, the RW control CPU 210 sends an area information request command 600 for requesting the secure storage area division information 530 to the secure processing controller 250. Send to.

  The secure processing controller 250 receives the area information request command 600 from the RW control CPU 210 and, in response to the area information request command 600, stores the secure storage area division information 530 and the individual ID stored in the built-in memory. The information response 610 is returned to the RW control CPU 210.

  After mutual authentication between the contactless communication medium 100 and the RW 200, the above processing is executed only once as initialization processing for accessing the user encryption area.

  Thereafter, the host device 290 waits for the user to input the password by operating the host device 290, and includes the password (hereinafter also referred to as the input password), and accesses the user encryption area. An access confirmation command 620 requesting permission is transmitted to the RW control CPU 210.

  The RW control CPU 210 receives the access confirmation command 620 from the host device 290 and hashes the input password included in the access confirmation command 620.

  Note that the hash function used for hashing the set password is used for hashing the input password.

  The RW control CPU 210 determines whether the hashed result of the input password matches the hash password included in the secure storage area division information 530 (FIG. 8C) received from the contactless communication medium 100.

  If the hash result of the input password and the hash password included in the secure storage area division information 530 do not match, that is, if the input password and the set password do not match, the RW control CPU 210 moves to the user encryption area. An access confirmation response 621 that denies access to the device 290 is returned to the host device 290 as a response to the access confirmation command 620.

  In this case, the non-contact communication medium 100 and the RW 200 do not perform subsequent processing.

  Therefore, if the input password and the set password do not match, the user encryption area cannot be accessed. Therefore, even if the non-contact communication medium 100 is lost, etc. Leakage of (data stored in the encryption area) can be prevented.

  On the other hand, when the hash result of the input password matches the hash password included in the secure storage area division information 530, that is, when the input password and the set password match, the RW control CPU 210 performs user encryption. An access confirmation response 621 for permitting access to the area is returned to the higher-level device 290 as a response to the access confirmation command 620.

  Further, the RW control CPU 210 uses the hash password included in the secure storage area division information 530 and the individual ID included in the area information response 610 from the secure processing controller 250 to store data stored in the user encryption area. An individual encryption key that is an encryption key used for encryption and decryption is generated.

  Here, the individual encryption key is generated, for example, by taking the exclusive OR of the hash password and the individual ID.

  As described above, by generating an individual encryption key using a unique individual ID in addition to a hash password, the same set password is assigned to each user encryption area of the plurality of contactless communication media 100. Even if it is set, a different individual encryption key is generated.

  The host device 290 receives the access confirmation response 621 from the RW control CPU 210, and if the access confirmation response 621 indicates that access to the user encryption area is denied, the host device 290 displays that fact. To notify the user and the process is terminated.

  On the other hand, if the access confirmation response 621 from the RW control CPU 210 indicates that access to the user encryption area is permitted, the upper device 290 issues a data access command 625 for requesting access to the nonvolatile memory 111. And transmitted to the CPU 210 for RW control.

  Here, the data access command 625 includes access destination information indicating the address of the user encryption area of the access destination.

  Further, the data access command 625 includes a write command for requesting writing (writing) of data to the nonvolatile memory 111 or a read command for requesting reading (reading) of data from the nonvolatile memory 111.

  Further, when the data access command 625 includes a write command, the data access command 625 includes data (hereinafter also referred to as write data) that requests writing to the nonvolatile memory 111 by the ride command.

  The RW control CPU 210 receives the data access command 625 from the RW control CPU 210, the access destination information included in the data access command 625, and the secure storage area division information 530 received from the non-contact communication medium 100 (FIG. 8C). ) To determine whether the data access command 625 is a command for requesting access to the user encryption area.

  Here, it is assumed that the data access command 625 is a command for requesting access to the user encryption area.

  When the data access command 625 is a command for requesting access to the user encryption area, when the data access command 625 includes a write command, the RW control CPU 210 writes the write data included in the data access command 625. Is encrypted using the individual encryption key generated from the hash password and the individual ID.

  Then, the RW control CPU 210 transmits a data request command 630 requesting access to the nonvolatile memory 111 to the high-speed communication master controller 220.

  Here, when the data access command 625 includes a write command, the data request command 630 includes the write command and encrypted data obtained by encrypting the write data using the individual encryption key.

  When the data access command 625 includes a read command, the data request command 630 includes the read command.

  The high-speed communication master controller 220 receives the data request command 630 from the RW control CPU 210, and transmits a wireless data request packet 631 having the same content as the data request command 630 by high-speed communication.

  Here, as in the case of the data request command 630, when the wireless data request packet 631 having the content includes a write command, the wireless data request packet 631 includes data to be written according to the write command. As described above, the data is encrypted data obtained by encrypting the write data using the individual encryption key.

  Therefore, even if the wireless data request packet 631 is wiretapped, it is possible to prevent leakage of (plaintext) write data.

  The wireless data request packet 631 transmitted by the high-speed communication master controller 220 by high-speed communication is received by the high-speed communication slave controller 112 of the non-contact communication medium 100.

  When the high-speed communication slave controller 112 receives the wireless data request packet 631, the high-speed communication slave controller 112 transmits a data request command 632 having the same content as the wireless data request packet 631 to the media control CPU 110.

  The media control CPU 110 receives the data request command 632 from the high-speed communication slave controller 112, and transmits a nonvolatile memory access command 640 having the same content as the data request command 632 to the nonvolatile memory 111.

  The nonvolatile memory 111 receives the nonvolatile memory access command 640 from the media control CPU 110 and writes or reads data according to the nonvolatile memory access command 640.

  That is, when the nonvolatile memory access command 640 includes a write command, the nonvolatile memory 111 encrypts the encrypted data, which is included in the nonvolatile memory access command 640 and encrypts the write data using the individual encryption key, as a user encryption. Write to the area.

  When the nonvolatile memory access command 640 includes a read command, the nonvolatile memory 111 encrypts encrypted data written in the user encryption area, that is, encrypted plaintext data using an individual encryption key. Data is read and transmitted to the media control CPU 110.

  Thereafter, the media control CPU 110 transmits a data response 650 that is a response to the data request command 632 from the high-speed communication slave controller 112 to the high-speed communication slave controller 112.

  Here, when the nonvolatile memory access command 640 includes a read command, as described above, the encrypted data is read from the user encryption area and transmitted from the nonvolatile memory 111 to the media control CPU 110. In this case, the data response 650 includes the encrypted data.

  The high-speed communication slave controller 112 receives the data response 650 from the media control CPU 110, and transmits a wireless data response packet 651 having the same contents as the data response 650 by high-speed communication.

  Here, the wireless data response packet 651 having the same contents as the data response 650 may include data read from the user encryption area, but the data is encrypted data.

  Therefore, even if the wireless data response packet 651 is wiretapped, it is possible to prevent (plaintext) data from leaking.

  The wireless data response packet 651 transmitted by the high speed communication slave controller 112 by high speed communication is received by the high speed communication master controller 220 of the RW 200.

  When the high-speed communication master controller 220 receives the wireless data response packet 651 from the high-speed communication slave controller 112, the high-speed communication master controller 220 transmits a data response 652 having the same contents as the wireless data response packet 651 to the RW control CPU 210.

  The RW control CPU 210 receives the data response 652 from the high-speed communication master controller 220 as a response to the data request command 630.

  If the data request command 630 includes a read command, the data response 652 includes encrypted data read from the user encryption area of the non-volatile memory 111 (plaintext data is encrypted with an individual encryption key). Encrypted data).

  When the data response 652 includes encrypted data, the RW control CPU 210 decrypts the encrypted data using the individual encryption key generated from the hash password and the individual ID.

  Thereafter, the RW control CPU 210 returns a data access response 660 that is a response to the data access command 625 to the higher-level device 290.

  If the data response 652 includes encrypted data and the RW control CPU 210 decrypts the encrypted data, the data access response 660 includes plaintext data obtained by decrypting the encrypted data. Is included.

  As described above, mutual authentication is performed between the secure communication chip 120 of the non-contact communication medium 100 and the secure communication controller 230 (and thus the secure processing controller 250) of the RW 200. After successful mutual authentication, the RW 200 Secure storage area division information 530 including a set password (hashed hash password) stored in advance in the secure communication chip 120 of the contactless communication medium 100 is received from the contactless communication medium 100 by secure communication.

  Further, in the RW 200, when the setting password included in the secure storage area division information 530 received from the non-contact communication medium 100 matches the input password input from the outside (higher-level device 290) by the user, Encrypted data obtained by encrypting data with an individual encryption key generated from the matching password is exchanged by high-speed communication.

  Therefore, secure communication can be performed while suppressing a decrease in the communication speed of the high-speed communication itself between the high-speed communication slave controller 112 of the non-contact communication medium 100 and the high-speed communication master controller 220 of the RW 200.

  The data stored in the user encryption area of the non-volatile memory 111 of the contactless communication medium 100 is encrypted using an individual encryption key, and the hash password and individual ID necessary for generating the individual encryption key are Since the tamper-resistant secure communication chip 120 is stored in the built-in memory, even if the non-contact communication medium 100 is in the hands of a third party, the leakage of data stored in the user encryption area ( Outflow) can be prevented.

  When access to the non-secure area and the protected content area (FIG. 8B) of the non-volatile memory 111 is performed, the password consistency determination (the set password received by the RW 200 from the non-contact communication medium 100) Determination of whether or not the input password entered by the user matches), generation of the individual encryption key, and encryption and decryption using the individual encryption key are not performed.

  That is, in the access to the non-secure area and the protected content area of the nonvolatile memory 111, after successful mutual authentication between the non-contact communication medium 100 and the RW 200, the RW 200 starts wireless power transmission. The power supply control unit 135 of the non-contact communication medium 100 starts power supply, and high-speed communication can be performed between the high-speed communication slave controller 112 of the non-contact communication medium 100 and the high-speed communication master controller 220 of the RW 200. Then, the non-secure area and the protected content area of the nonvolatile memory 111 can be accessed by the high-speed communication.

  However, even if the protected content area is accessed and the protected content is read out, the protected content is encrypted and cannot be used without an encryption key for decrypting the protected content.

  Further, the processing from the transmission of the data access command 625 to the reception of the data access response 660 by the host device 290 is performed according to the data amount of data exchanged by the high-speed communication between the non-contact communication medium 100 and the RW 200. Repeated as many times as necessary.

  Here, in FIG. 9, password consistency determination, individual encryption key generation, and encryption and decryption using the individual encryption key are performed by the RW control CPU 210. The generation of the encryption key and the encryption and decryption using the individual encryption key can be performed by the secure processing controller 250 having tamper resistance.

  As described above, when the secure processing controller 250 having tamper resistance is used to determine password consistency, generate an individual encryption key, and perform encryption and decryption using the individual encryption key, security (strength) Can be further enhanced.

  FIG. 10 shows the case where the secure processing controller 250 performs password matching determination, individual encryption key generation, and encryption and decryption using the individual encryption key when accessing the user encryption area of the nonvolatile memory 111. It is a figure explaining the process of non-contact communication media 100, RW200, and the high-order apparatus 290.

  In FIG. 9 described above, when the secure processing controller 250 of the RW 200 receives the secure storage area division information 530 and the individual ID 601 from the non-contact communication medium 100 after successful mutual authentication, the RW control CPU 210 performs the area information. By transmitting the request command 600 to the secure processing controller 250, the secure storage area division information 530 and the individual ID 601 are acquired from the secure processing controller 250 as the area information response 610.

  In contrast, in FIG. 10, the RW control CPU 210 does not acquire the secure storage area division information 530 and the individual ID 601.

  In FIG. 9, the upper device 290 transmits an access confirmation command 620 including an input password to the RW control CPU 210, and the RW control CPU 210 receives the input password included in the access confirmation command 620 from the upper device 290. Hashing and determining whether or not the hashed result matches the hash password included in the secure storage area division information 530 (FIG. 8C) from the contactless communication medium 100. I do.

  Furthermore, in FIG. 9, when the hashed result of the input password matches the hash password, the RW control CPU 210 generates an individual encryption key from the hash password and the individual ID 601.

  On the other hand, in FIG. 10, the RW control CPU 210 hashes the input password included in the access confirmation command 620 from the higher-level device 290, and performs the secure processing on the access confirmation request command 2600 including the hashed result. Supply to controller 250.

  The secure processing controller 250 then hashes the input password included in the access confirmation request command 2600 from the RW control CPU 210 and the hash password included in the secure storage area division information 530 from the contactless communication medium 100. It is determined whether or not the password matches whether or not (the result of setting password hashing) matches.

  As a result of the password matching determination, if the hash result of the input password matches the hash password, the secure processing controller 250 generates an individual encryption key from the hash password and the individual ID 601. .

  Further, the secure processing controller 250 returns the password match determination result to the RW control CPU 210 as an area information response 610.

  The RW control CPU 210 receives the area information response 610 from the secure processing controller 250, and returns an access confirmation response 621 as a response to the access confirmation command 620 in response to the area information response 610.

  That is, when the password consistency determination result as the area information response 610 indicates that the hashed result of the input password does not match the hash password included in the secure storage area division information 530, the CPU 210 for RW control Returns an access confirmation response 621 for refusing access to the user encryption area to the upper device 290 as a response to the access confirmation command 620.

  Also, when the password consistency determination result as the area information response 610 indicates that the hash result of the input password matches the hash password included in the secure storage area division information 530 (input password and setting When the password matches, the RW control CPU 210 returns an access confirmation response 621 for permitting access to the user encryption area to the upper device 290 as a response to the access confirmation command 620.

  The host device 290 receives the access confirmation response 621 from the RW control CPU 210, and if the access confirmation response 621 indicates that access to the user encryption area is permitted, as in FIG. A data access command 625 for requesting access to the memory 111 is transmitted to the RW control CPU 210.

  The RW control CPU 210 receives the data access command 625 from the host device 290. In FIG. 9, the RW control CPU 210 makes an area determination according to the data access command 625 and requires encryption of the write data with the individual encryption key. In FIG. 10, a data access command 2627 having the same contents as the data access command 625 is transmitted to the secure processing controller 250 in FIG.

  In FIG. 10, the secure processing controller 250 receives the data access command 2627 from the RW control CPU 210, makes an area determination according to the data access command 2627, and encrypts the write data with the individual encryption key. As necessary.

  Further, the secure processing controller 250 returns to the RW control CPU 210 a data response 2628 including, as necessary, encrypted data obtained as a result of encrypting the write data with the individual encryption key.

  Thereafter, as in the case of FIG. 9, the data request command 630 is transmitted from the RW control CPU 210 to the high-speed communication master controller 220, and the wireless data request packet 631 is contactless from the high-speed communication master controller 220. It is transmitted to the communication medium 100 (its high-speed communication slave controller 112).

  As described above, the non-contact communication medium 100 that has received the wireless data request packet 631 transmitted from the RW 200 (the high-speed communication master controller 220) performs the same processing as in FIG. A wireless data response packet 651 that is a response to the packet 631 is transmitted from the non-contact communication medium 100 (the high-speed communication slave controller 112) to the RW 200.

  In the RW 200, as in the case of FIG. 9, the high-speed communication master controller 220 receives the wireless data response packet 651 from the non-contact communication medium 100, and sends a data response 652 having the same contents as the wireless data response packet 651. This is transmitted to the RW control CPU 210.

  The RW control CPU 210 receives the data response 652 from the high-speed communication master controller 220 as a response to the data request command 630.

  If the data response 652 includes encrypted data read from the user encryption area of the nonvolatile memory 111, in FIG. 9, the RW control CPU 210 decrypts the encrypted data using the individual encryption key. However, in FIG. 10, the RW control CPU 210 transmits a data access command 2653 having the same contents as the data response 652 to the secure processing controller 250.

  The secure processing controller 250 receives the data access command 2653 from the RW control CPU 210, and when the data access command 2653 includes encrypted data read from the user encryption area of the nonvolatile memory 111, The encrypted data is decrypted using the individual encryption key.

  Then, the secure processing controller 250 returns a data response 2654 that is a response to the data access command 2653 to the RW control CPU 210.

  When the encrypted data is decrypted using the individual encryption key in the secure processing controller 250, the data response 2654 includes plain text data obtained by decrypting the encrypted data.

  The RW control CPU 210 receives the data response 2654 from the secure processing controller 250, and returns a data access response 660 having the same contents as the data response 2654 to the upper device 290 as a response to the data access command 625.

  As described above, in the RW 200, the password matching, the generation of the individual encryption key, and the encryption and decryption using the individual encryption key are performed by the tamper-resistant secure processing controller 250, so that the entire RW 200 is Tamper resistance can be improved.

  [Process for storing (writing) protected content in non-contact communication medium 100]

  FIG. 11 is a diagram for explaining processing of the non-contact communication medium 100, the RW 200, and the host device 290 when storing the protected content in the non-contact communication medium 100.

  Here, as described above, the protected content is encrypted and cannot be used without an encryption key for decrypting the protected content (hereinafter also referred to as a protected content key).

  For this reason, when the protected content is stored in the contactless communication medium 100, the protected content key is also stored in the contactless communication medium 100.

  Now, in the upper device 290, for example, the protected content purchased by the user from a server on the Internet is stored together with the protected content key, and the protected content and the protected content key are stored in the contactless communication medium 100 ( Transfer).

  The protected content can be accessed and stored in the protected content area (FIG. 8B) of the non-volatile memory 111 of the non-contact communication medium 2100 from the host device 290 via the RW 200 by high-speed communication.

  Since the protected content is encrypted, it cannot be used without eavesdropping without the protected content key.

  On the other hand, if the content key is eavesdropped, the protected content can be used. Therefore, the exchange of the protected content needs to be performed securely.

  Therefore, referring to FIG. 11, when the protected content is stored in the non-contact communication medium 100, the non-contact communication when the protected content key used for decrypting the protected content is stored in the non-contact communication medium 100. Processing of the media 100, the RW 200, and the upper device 290 will be described.

  Here, the non-contact communication medium 100 and the RW 200 are brought close to each other, and the mutual authentication is performed between the non-contact communication medium 100 and the RW 200 as described above. The communication path between the secure communication chip 120 of the non-contact communication medium 100 and the secure communication controller 230 of the RW 200, and hence the secure processing controller 250 (via the RW control CPU 210) is encrypted and encrypted. It is assumed that communication path A has been established (formed).

  Furthermore, mutual authentication is performed between the secure processing controller 250 of the RW 200 and the host device 290 via the RW control CPU 210, for example, by AACS. Assume that the communication path (through the RW control CPU 210) with the host device 290 is encrypted and the encrypted communication path B is established.

  Further, it is assumed that the protected content is transmitted from the host device 290 via the RW 200 and stored in the protected content area of the non-volatile memory 111 of the non-contact communication medium 100 by high-speed communication.

  The host device 290 transmits a protected content key registration command 750 that includes the protected content key and requests registration (storage) of the protected content key to the RW control CPU 210 of the RW 200 via the encryption communication path B.

  Here, the protected content key registration command 750 includes the protected content key, but the protected content key registration command 750 (the protected content key included in the protected content key registration command 750) is transmitted from the host device 290 via the encrypted communication path B to the RW 200. In other words, for example, the host device 290 uses the encryption key obtained by mutual authentication between the RW 200 and the host device 290 (encryption in accordance with the encryption communication path B). Therefore, the protected content key included in the protected content key registration command 750 cannot be used even if it is intercepted.

  The RW control CPU 210 of the RW 200 receives the protected content key registration command 750 from the host device 290 and transmits it to the secure processing controller 250 as a protected content key registration request 751 (without decryption).

  The secure processing controller 250 receives the protected content key registration request 751 from the RW control CPU 210 and uses an encryption key obtained by mutual authentication between the RW 200 and the upper device 290 for the protected content key registration request 751. Decryption (decryption according to encryption channel B) is performed.

  Further, the secure processing controller 250 encrypts the decrypted protected content key registration request 751 using an encryption key obtained by mutual authentication between the contactless communication medium 100 and the RW 200 (according to the encryption channel A). Encryption).

  Then, the secure processing controller 250 returns the result of encryption of the protected content key registration request 751 as the protected content key response 752 to the RW control CPU 210.

  The RW control CPU 210 receives the protected content key response 752 from the secure processing controller 250 and transmits a protected content key transmission request 760 having the same content as the protected content key response 752 to the secure communication controller 230.

  The secure communication controller 230 receives the protected content key transmission request 760 from the RW control CPU 210 and transmits a protected content key transmission packet 761 having the same content as the protected content key transmission request 760.

  The protected content key transmission packet 761 is encrypted according to the encrypted communication path A and is transmitted by secure communication.

  The protected content key transmission packet 761 transmitted by the secure communication controller 230 is received by the secure communication chip 120 of the contactless communication medium 100.

  The secure communication chip 120 decrypts the protected content key transmission packet 761 from the secure communication controller 230 using an encryption key obtained by mutual authentication between the contactless communication medium 100 and the RW 200 (according to the encryption communication path A). Decryption).

  Then, the secure communication chip 120 stores the protected content key included in the decrypted protected content key transmission packet 761 in a built-in memory.

  As described above, the protected content key is stored in the memory included in the tamper-resistant secure communication chip 120 of the contactless communication medium 100.

  Thereafter, the secure communication chip 120 transmits a protected content key transmission response 770 that is a response to the protected content key transmission packet 761.

  The protected content key transmission response 770 is received by the secure communication controller 230 of the RW 200.

  The secure communication controller 230 returns the protected content key transmission response 771 of the content similar to the protected content key transmission response 770 from the secure communication chip 120 to the RW control CPU 210 as a response to the protected content key transmission request 760.

  The RW control CPU 210 receives the protected content key transmission response 771 from the secure communication controller 230, and responds to the protected content key registration command 750 with a protected content key registration response 772 having the same content as the protected content key transmission response 771. To the host device 290.

  [Process for reading protected content from non-contact communication medium 100]

  FIG. 12 is a diagram illustrating processing of the non-contact communication medium 100, the RW 200, and the higher-level device 290 when reading protected content from the non-contact communication medium 100.

  Here, as described with reference to FIG. 11, in the contactless communication medium 100, the protected content is stored in the protected content area of the nonvolatile memory 111, and the protected content key used to decrypt the protected content is tamper-resistant. It is assumed that the secure communication chip 120 having the above is stored in a built-in memory.

  Furthermore, as described with reference to FIG. 11, here, the non-contact communication medium 100 and the RW 200 are brought close to each other, and mutual authentication is performed between the non-contact communication medium 100 and the RW 200 as described above. As a result of the successful mutual authentication, the communication path between the secure communication chip 120 of the contactless communication medium 100 and the secure communication controller 230 of the RW 200 and thus the secure processing controller 250 (via the RW control CPU 210). Are encrypted and the encrypted communication path A is established.

  Also, as described with reference to FIG. 11, mutual authentication by AACS or the like is performed between the RW 200 and the upper device 290, and the secure processing controller 250 of the RW 200, the upper device 290, , And the encrypted communication path B is established.

  Furthermore, it is assumed that the protected content is read from the protected content area of the non-volatile memory 111 of the non-contact communication medium 100 and transmitted to the host device 290 via the RW 200 by high-speed communication.

  The host device 290 transmits a protected content key acquisition command 850 requesting the protected content key to the RW control CPU 210 of the RW 200.

  The RW control CPU 210 receives the protected content key acquisition command 850 from the higher-level device 290, and transmits a protected content key reception request 851 having the same contents as the protected content key acquisition command 850 to the secure communication controller 230.

  The secure communication controller 230 receives the protected content key reception request 851 from the RW control CPU 210 and transmits a protected content key reception packet 852 having the same contents as the protected content key reception request 851.

  The protected content key reception packet 852 transmitted by the secure communication controller 230 is received by the secure communication chip 120 of the contactless communication medium 100.

  The secure communication chip 120 reads the protected content key from the built-in memory according to the protected content key reception packet 852 from the secure communication controller 230, and sends the protected content key reception response 860 including the protected content key to the encrypted communication channel. Send through A.

  That is, the secure communication chip 120 encrypts the protected content key reception response 860 (the protected content key included therein) using the encryption key obtained by mutual authentication between the contactless communication medium 100 and the RW 200 (encrypted communication). (Encryption along path A) and send.

  The protected content key reception response 860 transmitted by the secure communication chip 120 is received by the secure communication controller 230 of the RW 200.

  The secure communication controller 230 transmits a protected content key reception response 861 having the same content as the protected content key reception response 860 from the secure communication chip 120 to the RW control CPU 210.

  The RW control CPU 210 receives the protected content key reception response 861 from the secure communication controller 230, and transmits a protected content key reception request 870 having the same contents as the protected content key reception response 861 to the secure processing controller 250.

  The secure processing controller 250 receives the protected content key reception request 870 from the RW control CPU 210, and the protected content key reception request 870 (the protected content key included therein) between the contactless communication medium 100 and the RW 200. Decryption using the encryption key obtained by mutual authentication (decryption according to encryption channel A) is performed.

  Further, the secure processing controller 250 encrypts the decrypted protected content key reception request 870 using an encryption key obtained by mutual authentication between the RW 200 and the upper device 290 (encryption according to the encryption channel B). )I do.

  Then, the secure processing controller 250 returns the result of encryption of the protected content key reception request 870 to the RW control CPU 210 as a protected content key reception response 871.

  The RW control CPU 210 receives the protected content key reception response 871 from the secure processing controller 250 and returns a protected content key acquisition response 872 to the higher-level device 290 as a response to the above-described protected content key acquisition command 850.

  The host device 290 decrypts the protected content key acquisition response 872 from the RW control CPU 210 using the encryption key obtained by mutual authentication between the RW 200 and the host device 290 (decryption according to the encryption communication path B). By doing so, the protected content key (in plain text) included in the protected content key acquisition response 872 can be obtained.

  Then, the host device 290 can decrypt the protected content read from the protected content area of the non-volatile memory 111 of the non-contact communication medium 100 using the protected content key, and perform playback or the like.

  As described above, a plurality of types of dedicated areas such as a non-secure area, a user encryption area, and a protected content area can be set in the storage area of the nonvolatile memory 111 of the non-contact communication medium 100. The storage area of the non-volatile memory 111 can be selectively used, such as storing non-secure data in the non-secure area, confidential data in the user encryption area, and protected content in the protected content area.

  Further, the data stored in the user encryption area may be encrypted using an individual encryption key (individual encryption key) with a setting password set by the user and the individual ID of the non-contact communication medium 100. it can.

  Furthermore, a plurality of user encryption areas can be set, and different encryption keys (individual encryption) are used for each user encryption area by setting different setting passwords in the plurality of user encryption areas. Encryption can be performed.

  In addition, when the non-contact communication medium 100 and the RW 200 come close to each other, mutual authentication is performed between the non-contact communication medium 100 and the RW 200. Unauthorized reading and writing can be prevented.

  Further, the protected content key is stored in a memory built in the tamper-resistant secure communication chip 120 in the contactless communication medium 100, and encryption and decryption of the protected content key are performed in the contactless communication medium 100. In the RW 200, the secure processing controller 250 having tamper resistance is used.

  In addition, the protected content key is exchanged between the non-contact communication medium 100 and the RW 200 by secure communication (via the encryption communication path A).

  Therefore, it is possible to strongly prevent leakage of the (plaintext) protected content key.

  In addition, as an individual encryption key used for encrypting data stored in the user encryption area, a unique encryption key is generated by using the individual ID of the non-contact communication medium 100. Even if an individual encryption key used in one non-contact communication medium 100 of the communication media 100 is illegally analyzed, the user encryption of another non-contact communication medium 100 is performed using the individual encryption key. It is possible to prevent the data stored in the area from being decoded.

  Further, in the non-contact communication medium 100, the data (encrypted data) stored in the user encryption area set in the nonvolatile memory 111 is the secure storage area division information 530 stored in the memory built in the secure communication chip 120. (FIG. 8C) is associated with the encryption key generated using the hash password included in the secure storage area division information 530, so to speak, one-to-one. Even if a counterfeit product of the non-contact communication medium 100 is manufactured using the secure communication chip 120 of one non-contact communication medium 100 and the non-volatile memory 111 of the other non-contact communication medium 100, the user of the non-volatile memory 111 Data stored in the encryption area cannot be decrypted.

  Therefore, it is possible to prevent manufacture of a counterfeit product of the non-contact communication medium 100 as described above.

  Further, in the non-contact communication medium 100, a secure storage area stored in the memory built in the secure communication chip 120 by adopting a rewritable nonvolatile memory as the memory built in the tamper-resistant secure communication chip 120. The division information 530 and the protected content key can be rewritten (updated).

  In the non-contact communication medium 100 (FIG. 2), the power supply control unit 135 supplies power as a power source for high-speed communication processing after successful mutual authentication between the non-contact communication medium 100 and the RW 200. The power supply control to be performed can be applied to other devices. For example, the present invention can be applied to an arbitrary device such as a digital camera, a portable music player, or a mobile phone having a function of receiving power supplied as a power source for high-speed communication processing by wireless power transmission.

  High-speed communication is performed on the condition that only power is supplied by wireless power transmission in a device having a function (hereinafter also referred to as a power feeding function) that receives power supply for processing high-speed communication by wireless power transmission. In such a case, even if an unauthorized wireless power feeder (malicious wireless power feeder) having a function of supplying power by wireless power transmission is brought into proximity, high-speed communication is started. It is difficult to prevent unauthorized access due to high-speed communication performed with a wireless power feeder.

  On the other hand, in a device having a power feeding function, when performing high-speed communication on condition that the mutual authentication is successful in addition to the power supply by wireless power transmission, mutual communication with an unauthorized wireless power feeder Since the authentication is not successful, access from such an unauthorized wireless power feeder can be prevented.

  That is, for example, in the power supply control unit 135 of the contactless communication medium 100 (FIG. 2), after mutual authentication is successful, power is supplied as a power source for high-speed communication processing, and high-speed communication is performed. Access from unauthorized wireless power feeders can be prevented.

  In FIG. 2, when mutual authentication is not successful, the power supply control unit 135 performs all of the media control CPU 110, the nonvolatile memory 111, and the high-speed communication slave controller 112 that are blocks for performing high-speed communication. Although the power supply is cut off, the block that cuts off the power supply is one or two blocks of the media control CPU 110, the nonvolatile memory 111, and the high-speed communication slave controller 112. be able to. In FIG. 2, the power supply destination of the power supply control unit 135 is shown as an example of the media control CPU 110, the nonvolatile memory 111, and the high-speed communication slave controller 112. However, in the case of a digital camera, a portable music player, or a mobile phone Alternatively, power may be supplied to other parts of these devices. Furthermore, when these devices are equipped with a rechargeable battery, the power supplied from the power supply control unit 135 may be used for charging the rechargeable battery.

  That is, as long as high-speed communication processing is not performed in the non-contact communication medium 100, the power supply control unit 135 may block power supply for any block.

  Here, the RW 200 performs encryption and decryption of data read from and written to the USB flash memory in terms of performing encryption and decryption of data read from and written to the user encryption area of the nonvolatile memory 111. Same as USB flash memory used in.

  For encryption and decryption of data in the USB flash memory, special software is not required for the PC (Personal Computer) etc. to which the USB flash memory is connected, but encryption is performed inside the USB flash memory. In order to perform decryption, the data on the USB bus connecting the PC and the USB flash memory is plain text data and can be wiretapped.

  On the other hand, since data read / written in the user encryption area of the nonvolatile memory 111 is encrypted between the contactless communication medium 100 and the RW 200, wiretapping can be prevented.

  In addition, the RW 200 manages the encryption key in that it performs encryption and decryption of data read from and written to the user encryption area of the nonvolatile memory 111, and encrypts and decrypts the data using the encryption key. Common with dedicated software installed on the PC.

  In the dedicated software, encryption and decryption are performed inside the PC on which the dedicated software is installed, so it is difficult to eavesdrop outside the PC. Need to be installed.

  On the other hand, for the contactless communication medium 100 and the RW 200, the user does not need to install dedicated software.

  Note that Blu-ray (registered trademark) embeds a special identifier called ROM Mark in an optical disk to make forgery difficult. In addition, Blu-ray (registered trademark) uses the AACS method as a method for protecting data (content), writing unique ID information to the optical disc, and giving the drive a unique key, I'm trying to protect my data.

  However, in Blu-ray (registered trademark), a motor for driving the optical disk and a motor for attaching and detaching the optical disk are necessary for the drive, and the size of the optical disk is determined by the standard. In reducing the size of the drive, it is necessary to incorporate a motor and there are limitations due to the size of the optical disk.

  On the other hand, since proximity communication (non-contact communication) is performed between the non-contact communication medium 100 and the RW 200, it is not necessary to incorporate a motor in the RW 200, and the RW 200 can be configured in a small size.

  Note that the media control CPU 110 of the non-contact communication medium 100 (FIG. 2) and the RW control CPU 210 of the RW 200 perform the above-described processes by executing a program. This program is stored in a removable recording medium. It can be installed, downloaded from a site on the Internet, installed from a broadcast wave, or the like.

  The embodiment of the present invention is not limited to the above-described embodiment, and various modifications can be made without departing from the gist of the present invention.

  100 contactless communication media, 110 media control CPU, 111 non-volatile memory, 112 high-speed communication slave controller, 113 high-speed communication antenna, 120 secure communication chip, 121 secure communication antenna, 130 power reception control unit, 131 power reception antenna, 135 power supply Control unit, 200 RW, 210 RW control CPU, 220 high-speed communication master controller, 221 high-speed communication antenna 221, 230 secure communication controller, 231 secure communication antenna, 240 power transmission control unit, 241 power transmission antenna, 250 secure processing controller, 290 Host device

Claims (10)

A slave side secure communication means for performing secure communication that is tamper resistant and secure proximity communication;
Slave-side high-speed communication means for performing high-speed communication that is proximity communication faster than the secure communication;
Storage means for reading and writing data exchanged by the high-speed communication,
Master-side secure communication means for performing the secure communication with a slave communication device that receives the power for performing the high-speed communication transmitted by wireless power transmission;
Master-side high-speed communication means for performing the high-speed communication with the slave communication device;
The slave communication device comprises power transmission means for transmitting the power for performing the high-speed communication by wireless power transmission,
The master side secure communication means includes:
Perform mutual authentication with the slave communication device,
After the mutual authentication is successful, the slave side secure communication means of the slave communication device receives a password stored in advance from the slave communication device by the secure communication,
The master side high-speed communication means encrypts data with an encryption key generated from the matching password when the password received from the slave communication device matches the password input from the outside. A communication device for exchanging encrypted data through the high-speed communication. When storing the password in the slave side secure communication means,
The master side secure communication means performs mutual authentication with the slave communication device,
The master-side high-speed communication means is an area management for setting an encryption area, which is a storage area for storing the encrypted data, in the storage area of the storage means of the slave-side communication device after the mutual authentication is successful. By transmitting information by the high-speed communication, the encryption area is set in the storage area of the storage means,
The master-side secure communication means transmits the password for accessing the encryption area by the secure communication after the mutual authentication is successful, so that the password is transmitted to the slave-side secure communication of the slave communication device. The communication apparatus according to claim 1, which is stored in a means. Determining whether the password received from the slave communication device and the password input from the outside match,
Generation of the encryption key;
The communication device according to claim 2, further comprising tamper-resistant processing means for performing encryption and decryption using the encryption key. The master side high-speed communication means further includes area management information for setting a non-secure area that is a storage area for storing unencrypted data in the storage area of the storage means of the slave side communication device. The communication apparatus according to claim 2, wherein the non-secure area is set in a storage area of the storage unit by transmitting by the high-speed communication. The slave side secure communication means of the slave side communication device stores a unique ID in advance,
The master side secure communication means receives the ID from the slave communication apparatus together with the password stored in the slave side secure communication means of the slave communication apparatus by the secure communication,
The communication device according to claim 2, wherein the unique encryption key is generated from the password and the ID. A slave side secure communication means for performing secure communication that is tamper resistant and secure proximity communication;
Slave-side high-speed communication means for performing high-speed communication that is proximity communication faster than the secure communication;
Storage means for reading and writing data exchanged by the high-speed communication,
Master-side secure communication means for performing the secure communication with a slave communication device that receives the power for performing the high-speed communication transmitted by wireless power transmission;
Master-side high-speed communication means for performing the high-speed communication with the slave communication device;
A power transmission means for transmitting power for performing the high-speed communication by the slave communication device by wireless power transmission.
The master side secure communication means is
Perform mutual authentication with the slave communication device,
After the mutual authentication is successful, the slave side secure communication means of the slave communication device receives a password stored in advance from the slave communication device by the secure communication,
When the password received from the slave communication device matches the password inputted from the outside, the master side high-speed communication means encrypts the data with the encryption key generated from the matching password. A communication method including a step of exchanging the encrypted data through the high-speed communication. A slave-side secure communication means for performing secure communication that is secure proximity communication with a master communication device that transmits, by wireless power transmission, power for performing high-speed communication that is faster proximity communication than secure proximity communication; ,
Slave side high-speed communication means for performing the high-speed communication with the master communication device;
Power receiving means for receiving power for performing the high-speed communication transmitted by wireless power transmission from the master communication device;
Power supply control means for supplying power for performing the high-speed communication,
The slave side secure communication means performs mutual authentication with the master communication device,
The power supply control unit is a communication device that supplies power for performing the high-speed communication when the mutual authentication is successful. A slave-side secure communication means for performing secure communication that is secure proximity communication with a master communication device that transmits, by wireless power transmission, power for performing high-speed communication that is faster proximity communication than secure proximity communication; ,
Slave side high-speed communication means for performing the high-speed communication with the master communication device;
Power receiving means for receiving power for performing the high-speed communication transmitted by wireless power transmission from the master communication device;
And a power supply control means for supplying power for performing the high-speed communication.
The slave side secure communication means performs mutual authentication with the master communication device,
A communication method including the step of supplying power for performing the high-speed communication when the power supply control unit succeeds in the mutual authentication. A slave communication device that receives power transmitted by wireless power transmission to perform high-speed communication, which is proximity communication that is faster than secure proximity communication;
A master communication device for transmitting the power for performing the high-speed communication by wireless power transmission,
The slave communication device is
A slave side secure communication means for performing secure communication that is tamper resistant and secure proximity communication;
A slave side high-speed communication means for performing the high-speed communication;
Storage means for reading and writing data exchanged by the high-speed communication;
Power receiving means for receiving power for performing the high-speed communication transmitted by wireless power transmission from the master communication device;
Power supply control means for supplying power for performing the high-speed communication,
The slave side secure communication means performs mutual authentication with the master communication device,
The power supply control means performs power supply for performing the high-speed communication when the mutual authentication is successful,
The master communication device is
A master side secure communication means for performing the secure communication;
A master-side high-speed communication means for performing the high-speed communication;
The slave communication device has power transmission means for transmitting the power for performing the high-speed communication by wireless power transmission,
The master side secure communication means includes:
Perform mutual authentication with the slave communication device,
After the mutual authentication is successful, the slave side secure communication means of the slave communication device receives a password stored in advance from the slave communication device by the secure communication,
The master side high-speed communication means encrypts data with an encryption key generated from the matching password when the password received from the slave communication device matches the password input from the outside. A communication system for exchanging encrypted data through the high-speed communication. A slave communication device that receives power transmitted by wireless power transmission to perform high-speed communication, which is proximity communication that is faster than secure proximity communication;
A master communication device for transmitting the power for performing the high-speed communication by wireless power transmission,
The slave communication device is
A slave side secure communication means for performing secure communication that is tamper resistant and secure proximity communication;
A slave side high-speed communication means for performing the high-speed communication;
Storage means for reading and writing data exchanged by the high-speed communication;
Power receiving means for receiving power for performing the high-speed communication transmitted by wireless power transmission from the master communication device;
Power supply control means for supplying power for performing the high-speed communication,
The master communication device is
A master side secure communication means for performing the secure communication;
A master-side high-speed communication means for performing the high-speed communication;
A power transmission means for transmitting the power for performing the high-speed communication by wireless power transmission by the slave communication device;
In the slave communication device,
The slave side secure communication means performs mutual authentication with the master communication device,
The power supply control means, when the mutual authentication is successful, supplying power for performing the high-speed communication;
In the master communication device,
The master side secure communication means is
Perform mutual authentication with the slave communication device,
After the mutual authentication is successful, the slave side secure communication means of the slave communication device receives a password stored in advance from the slave communication device by the secure communication,
When the password received from the slave communication device matches the password inputted from the outside, the master side high-speed communication means encrypts the data with the encryption key generated from the matching password. Exchanging the encrypted data through the high-speed communication.

Images