JP2015162824A - Radio communication device and method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a radio communication device that can shorten the time required for authentication processing of a radio communication line as a switching destination when the radio communication line is switched.SOLUTION: A radio communication device has a first authentication processor for generating a first authentication key with a first authentication parameter according to a first authentication method adapted to a first communication method, a first communication unit for performing communications with the first authentication key according to the first communication method, a switching unit for switching the communication method from the first communication method to a second communication method, a determining unit for determining whether at least a part of the first authentication parameter is contained in a second authentication parameter or not, a parameter controller for controlling to contain at least a part of the first authentication parameter in a second authentication parameter when it is determined that at least a part of the first authentication parameter is contained in the second authentication parameter, a second authentication processor for generating a second authentication key with the second authentication parameter according to a second authentication method, and a second communication unit for performing communications with the second authentication key according to the second communication method.

Description

  The present disclosure relates to a wireless communication device and a wireless communication method. For example, the present disclosure relates to a wireless communication device that can be connected to a plurality of wireless communication lines.

  With the advancement of the functionality of portable communication terminals and the HD (High Density) of video content, it is common practice for communication terminals to transmit and receive high-quality video files or large-capacity files.

  In recent years, for example, millimeter-wave wireless communication using a 60 GHz band has attracted attention. The IEEE (The Institute of Electrical and Engineering Engineers, Inc.) 802.11, which is a wireless LAN (Local Area Network) standard, has also been drafted by the IEEE 802.11g / IEEE 802.11g / Wi standard for the use of the 60 GHz band. Has been made.

  The 60 GHz band enables ultra-high-speed transmission, but the communicable area is narrower than the 2.4 GHz band or 5 GHz band of microwaves widely used for conventional Wi-Fi. Therefore, it is useful to use a multiband device that can use a plurality of frequency bands (wireless communication lines). Using this multiband device, it is possible to communicate using the 60 GHz band within the communicable area of 60 GHz band, and communicate using the 2.4 GHz band or the 5 GHz band outside the communicable area of 60 GHz band. .

  It is necessary to perform an authentication process in 60 GHz band communication and 2.4 GHz band or 5 GHz band communication. As a device that performs authentication processing of a plurality of wireless communication lines, for example, a wireless communication device described in Patent Document 1 is disclosed.

  The wireless communication device disclosed in Patent Document 1 is a wireless communication device that can be connected to a plurality of wireless communication lines, and includes a first registration unit and a second registration unit. The first registration means performs authentication registration for connecting to another wireless communication apparatus via the first wireless communication line by a normal operation. The second registration means is information necessary for authentication registration for connecting to another wireless communication apparatus via the first wireless communication line that has already been authenticated and registered by the first registration means. By performing transmission / reception and synchronization processing, authentication registration of the second wireless communication line is performed.

JP2013-207729A

  In the wireless communication device of Patent Document 1, when switching wireless communication lines (communication methods), it is difficult to shorten the time required for authentication processing of the wireless communication line to be switched to.

  The present disclosure has been made in view of the above circumstances, and provides a wireless communication device and a wireless communication method capable of reducing the time required for authentication processing of a switching destination wireless communication line when switching wireless communication lines.

  The wireless communication device according to the present disclosure includes a first authentication processing unit that generates a first authentication key using a first authentication parameter according to a first authentication method according to the first communication method, A first communication unit that communicates using the first communication method, a switching unit that switches the communication method from the first communication method to the second communication method, and the first authentication. A determination unit for determining whether or not to include at least part of a parameter in a second authentication parameter used in a second authentication method according to the second communication method; and including in the second authentication parameter If determined, using the second authentication parameter in accordance with the parameter control unit that controls to include at least a part of the first authentication parameter in the second authentication parameter and the second authentication method Second A second authentication processor for generating a Akashikagi, using the second authentication key, and a second communication unit that communicates by the second communication method.

  According to the present disclosure, when a wireless communication line is switched, the time required for authentication processing of the switching destination wireless communication line can be shortened.

1 is a block diagram illustrating a configuration example of a wireless communication device of a wireless communication system according to a first embodiment. The flowchart which shows the operation example of the radio | wireless communication apparatus in 1st Embodiment. The schematic diagram which shows an example of the information which the parameter table in 1st Embodiment hold | maintains 6 is a flowchart illustrating an operation example of the wireless communication device according to the second embodiment. The flowchart which shows the operation example of the radio | wireless communication apparatus in the case of determining whether at least one part of the authentication process in 2nd Embodiment is omissible. The schematic diagram which shows an example of the information which the parameter table in 2nd Embodiment hold | maintains FIG. 5 is a block diagram illustrating a configuration example of a wireless communication device of a wireless communication system according to a third embodiment. 10 is a flowchart illustrating an operation example of a wireless communication apparatus according to the third embodiment. Schematic diagram showing an example of a roll of each communication unit of the wireless communication device in the comparative example The schematic diagram which shows an example of the roll of each communication part of the radio | wireless communication apparatus in 3rd Embodiment.

  Hereinafter, embodiments of the present disclosure will be described with reference to the drawings.

(Background to obtaining one form of the present disclosure)

  When communicating with another wireless communication device using Wi-Fi (hereinafter referred to as “Wi-Fi communication”), the wireless communication device performs authentication based on an authentication key exchanged in advance. As an example of this authentication, WPA (WiFi Protected Access) performed between a station (Station: hereinafter referred to as “STA”) and an access point (Access Point: hereinafter referred to as “AP”) is known.

  WPA is also applicable to WiGig. That is, a wireless communication device can communicate with another wireless communication device using WiGig (hereinafter referred to as “WiGig communication”). In WiGig, there are “STA” and PCP (Personal basic service set Central Point) having the same role as AP as the role of the wireless communication device.

  When switching between Wi-Fi communication and WiGig communication, for example, when a wireless connection of Wi-Fi communication is established, it is assumed that the WiGig communication area is approached. In this case, even if an attempt is made to switch to WiGig communication, it is not possible to switch to WiGig communication if authentication processing by WiGig communication is not completed. Further, when the authentication process using WiGig is performed, it takes time to switch to WiGig, and therefore, it is required to shorten the authentication process time using WiGig.

  When switching a plurality of wireless communication lines, the wireless communication device of Patent Document 1 needs to transmit and receive parameters necessary for authentication processing for connection via a switching destination wireless communication line. For this reason, it has been difficult to shorten the time required for the authentication processing of the switching destination wireless communication line.

  In the following embodiments, a wireless communication apparatus and a wireless communication method that can reduce the time required for authentication processing of a switching destination wireless communication line when switching wireless communication lines will be described.

  The wireless communication device in the following embodiments includes, for example, a mobile phone, a mobile communication terminal, a smartphone, a tablet terminal, a personal computer, a Blu-ray disc recorder, a television, a game machine, a music player, a dongle, an access point, a router, and other wireless communication devices. Is mentioned.

(First embodiment)
FIG. 1 is a block diagram illustrating a configuration example of the wireless communication devices 100 and 200 of the wireless communication system 1000 according to the first embodiment.

  The wireless communication apparatus 100 includes a first communication unit 110, a second communication unit 120, an authentication control unit 101, and a wireless switching control unit 102. The first communication unit 110 includes an encryption processing unit 111, a communication unit 112, and a storage unit 113. The second communication unit 120 includes an encryption processing unit 121, a communication unit 122, and a storage unit 123.

  The wireless communication apparatus 200 includes a first communication unit 210, a second communication unit 220, an authentication control unit 201, and a wireless switching control unit 202. The first communication unit 210 includes an encryption processing unit 211, a communication unit 212, and a storage unit 213. The second communication unit 220 includes an encryption processing unit 221, a communication unit 222, and a storage unit 223.

  Each component of the wireless communication device 100 and each component of the wireless communication device 200 have the same configuration and function, although the reference numerals are different. The code | symbol of the radio | wireless communication apparatus 100 is 100 series, and the code | symbol of the radio | wireless communication apparatus 200 is 200 series. In the wireless communication devices 100 and 200, components having the same last two digits have the same configuration and function. Here, the wireless communication device 100 will be described as an example, but the same applies to the wireless communication device 200.

  The communication unit 112 is an interface for performing wireless communication between the wireless communication device 100 and the wireless communication device 200. The communication unit 112 is an interface for performing communication according to the first communication method, for example, Wi-fi communication. The communication unit 122 is an interface for performing communication according to a second communication method different from that of the communication unit 112, for example, WiGig communication.

  The communication unit 112 communicates, for example, a first authentication parameter for generating a first authentication key with the communication unit 212 of the wireless communication apparatus 200 at the time of authentication processing, that is, when establishing a communication link. To do. After the authentication process is completed, for example, the communication unit 112 communicates encrypted data with the communication unit 212 of the wireless communication apparatus 200 using the first authentication key obtained by the authentication process. .

  The communication unit 122 communicates, for example, a second authentication parameter for generating a second authentication key with the communication unit 222 of the wireless communication apparatus 200 during the authentication process, that is, when establishing a communication link. To do. Note that communication may be omitted for the second authentication parameter. The communication unit 122 communicates data encrypted using the second authentication key obtained by the authentication process with the communication unit 222 of the wireless communication apparatus 200 after the authentication process is completed, for example. .

  Note that the authentication processing includes, for example, authentication parameter communication and authentication key generation processing.

  The encryption processing unit 111 performs encryption processing on data to be communicated. Here, the cryptographic process includes at least one of data encryption and decryption. The cryptographic processing unit 111 performs cryptographic processing using the first cryptographic algorithm. For example, when the second communication unit 120 performs Wi-Fi communication, the encryption processing unit 121 performs encryption processing using AES-CCMP (AES-counter with cipher block chaining / message authentication code protocol).

  In addition, when establishing a communication link between the first communication unit 110 and the first communication unit 210, the cryptographic processing unit 111 uses the first authentication parameter according to the first authentication method according to the first communication method. Is used to generate a first authentication key. That is, the cryptographic processing unit 111 has a function as a first authentication processing unit.

  The cryptographic processing unit 121 performs cryptographic processing using a second cryptographic algorithm different from that of the cryptographic processing unit 111. For example, when the first communication unit 110 performs WiGig communication, the encryption processing unit 111 performs encryption processing using AES-GCMP (Advanced Encryption Standard-Galois / Counter Mode Protocol).

  In addition, when establishing a communication link between the second communication unit 120 and the second communication unit 220, the encryption processing unit 121 uses the second authentication parameter according to the second authentication method according to the second communication method. Is used to generate a second authentication key. That is, the encryption processing unit 121 has a function as a second authentication processing unit.

  The storage unit 113 stores various types of information, for example, a second authentication parameter necessary for authentication processing in wireless communication. The storage unit 123 holds various types of information, for example, a second authentication parameter necessary for authentication processing in wireless communication. The authentication parameters (first authentication parameter and second authentication parameter) are held in common by the wireless communication device on the transmission side and the wireless communication device on the reception side.

  In addition, when the first authentication parameter and the second authentication parameter are not particularly distinguished, they are also simply referred to as authentication parameters. The authentication parameters include, for example, NONE (Number used ONCE), MAC address, and PMK (Pairwise Master Key) (see FIG. 3).

  Note that the cryptographic processing unit 111 generates a first authentication key (for example, a Wi-fi communication PTK (Pairwise Transient Key)) using the first authentication parameter. The cryptographic processing unit 121 generates a second authentication key (for example, PTK for WiGig communication) using the second authentication parameter. The PTK is used as key information in unicast communication, for example.

  The authentication control unit 101 checks each authentication method of the first communication unit 110 and the second communication unit 120. For example, it is assumed that the first communication unit 110 performs Wi-Fi communication and the second communication unit 120 performs WiGig communication. In this case, the encryption processing unit 111 uses AES-CCMP as the encryption algorithm, and the encryption processing unit 121 uses AES-GCMP as the encryption algorithm. AES-CCMP is an example of a first authentication method, and AES-GCMP is an example of a second authentication method.

  The authentication control unit 101 determines whether or not the encryption processing units 111 and 121 can use the first authentication parameter and the second authentication parameter in common. That is, the authentication control unit 101 has a function as a determination unit that determines whether or not at least a part of the first authentication parameter is included in the second authentication parameter. Further, when it is determined that at least part of the first authentication parameter is included in the second authentication parameter, the authentication control unit 101 performs control so that at least part of the first authentication parameter is included in the second authentication parameter. Function as a parameter control unit.

  Based on the notification information from the first communication unit 110 and the second communication unit 120, the radio switching control unit 102, for example, whether or not to switch communication methods, whether or not to switch radio frequency bands, and a communication unit to which a communication method is switched Specify the switching destination of the radio frequency band. This notification information includes, for example, the communication status of the communication unit via the wireless communication line. Accordingly, the wireless switching control unit 102 has a function as a switching unit that switches between a communication method, a communication unit, and a wireless communication line, for example.

  Next, an operation example during authentication processing between the wireless communication device 100 and the wireless communication device 200 will be described.

  First, an outline of the authentication process between the wireless communication device 100 and the wireless communication device 200 will be described.

  Each time the wireless communication devices 100 and 200 are wirelessly connected, for example, an authentication key (encryption key such as PTK) for Wi-Fi and WiGig communication is generated from the PMK for encrypting data. Authentication parameters for generating PTK from PMK include, for example, MAC address and Nonce.

  In the handshake of the authentication process of the wireless communication devices 100 and 200, the data encrypted using the generated PTK is correctly decrypted in the partner device, so that the wireless communication devices 100 and 200 have the mutual PTKs. Confirm that they are common.

  When data is encrypted (encrypted / decrypted) at the time of communication after the authentication process is completed, PTK for Wi-Fi communication or WiGig communication and header information added to data for Wi-Fi communication or WiGig Are used to encrypt the data.

  FIG. 2 is a flowchart illustrating an operation example during authentication processing by the wireless communication device 100 and the wireless communication device 200. In FIG. 2, it is assumed that authentication processing is performed by the first communication units 110 and 210, and authentication processing is performed by the second communication units 120 and 220 after the authentication processing. For example, the case where it switches from Wi-Fi communication to WiGig communication is assumed.

  Here, in wireless communication device 100, it is assumed that the MAC address used by first communication unit 110 and the MAC address used by second communication unit 120 are the same. For example, the MAC address used by the first communication unit 110 is held in the storage unit 113, and the MAC address used by the second communication unit 120 is held in the storage unit 123.

  In wireless communication apparatus 200, it is assumed that the MAC address used by first communication unit 210 and the MAC address used by second communication unit 220 are the same. For example, the MAC address used by the first communication unit 210 is held in the storage unit 213, and the MAC address used by the second communication unit 220 is held in the storage unit 223.

  First, in the wireless communication device 100, the communication unit 112 of the first communication unit 110 transmits a beacon to the wireless communication device 200 for association (S501). In the wireless communication device 200, the communication unit 212 of the first communication unit 210 receives a beacon from the wireless communication device 100 (S521). For example, the MAC address of the first communication unit 110 is included in this beacon.

  The communication unit 212 stores the MAC address of the first communication unit 110 in the storage unit 213 of the first communication unit 210 (S521). Further, the communication unit 212 registers information indicating that the MAC address has been acquired from the wireless communication device 100 as the counterpart device in the parameter table T1 (see FIG. 3) of the authentication control unit 201.

  In the wireless communication device 200, the communication unit 212 of the first communication unit 210 transmits a connection request for establishing a communication link to the wireless communication device 100 (S522). In the wireless communication device 100, the communication unit 112 of the first communication unit 110 receives a connection request from the wireless communication device 200 (S502). This connection request includes, for example, the MAC address of the first communication unit 210.

  The communication unit 112 stores the MAC address of the first communication unit 210 in the storage unit 113 of the first communication unit 110 (S502). In addition, the communication unit 112 registers information indicating that the MAC address has been acquired from the wireless communication device 200 as the counterpart device in the parameter table T1 of the authentication control unit 101.

  The communication unit 112 stores the MAC address of the first communication unit 210 in the storage unit 113 of the first communication unit 110. In addition, the communication unit 112 registers information indicating that the MAC address has been acquired from the wireless communication device 200 as the counterpart device in the parameter table T1 of the authentication control unit 101.

  In the wireless communication device 100, the communication unit 112 of the first communication unit 110 transmits a response to the connection request (S502). In the wireless communication device 200, the communication unit 212 of the first communication unit 210 receives a response to the connection request (S522).

  In the wireless communication device 100, the encryption processing unit 111 generates a NANCE included in the first authentication parameter based on the random number, and transmits the NANCE via the communication unit 112 (S503).

  In the wireless communication device 200, the communication unit 212 receives the NANCE from the wireless communication device 100 and stores the received NANCE in the storage unit 213 (S523). Further, the communication unit 212 registers information indicating that NONE has been acquired from the wireless communication device 100 as the counterpart device in the parameter table T1 of the authentication control unit 201.

  In the wireless communication device 200, the encryption processing unit 211 generates a NONE included in the first authentication parameter based on the random number, and transmits the NANCE via the communication unit 212 (S523).

  In the wireless communication device 100, the communication unit 112 receives the NANCE from the wireless communication device 200 and stores the received NANCE in the storage unit 113 (S503). In addition, the communication unit 112 registers information indicating that NONE is acquired from the wireless communication device 200 as the counterpart device in the parameter table T1 of the authentication control unit 101.

  In the wireless communication device 100, the encryption processing unit 111 generates a first authentication key (for example, PTK) used by the first communication unit 110 using the first authentication parameter stored in the storage unit 113, and the storage unit The first authentication key is stored in 113 (S504). The first authentication key generation method may be a known method according to the Wi-Fi standard, for example.

  The first authentication parameter includes the NONE and MAC address of the own device, the NONE and MAC address of the counterpart device, and PMK. NONE is an example of random number information. The MAC address is an example of identification information (network identification information) on the network of each wireless communication device.

  In the wireless communication device 200, the encryption processing unit 211 generates a first authentication key (for example, PTK) used by the first communication unit 210 by using the first authentication parameter stored in the storage unit 213, and the storage unit The first authentication key is stored in 213 (S524). This authentication parameter includes the NONE and MAC address of the own device, the NONE and MAC address of the partner device, and PMK.

  In the wireless communication device 100, the authentication control unit 101 refers to the parameter table T1 and determines whether or not the authentication process by the second communication unit 120 can be simplified (S505). In the wireless communication device 200, the authentication control unit 201 refers to the parameter table T1 and determines whether or not the authentication process by the second communication unit 220 can be simplified (S525). Here, the simplification of the authentication process includes omitting communication of the second authentication parameter by the second communication unit 120.

  Here, a procedure for determining whether or not the authentication processing by the authentication control units 101 and 201 can be simplified will be described.

  In WiGig communication and Wi-Fi communication, the information shown in FIG. 3 is used to generate the second authentication key. FIG. 3 is a schematic diagram illustrating an example of information held in the parameter table T1. The parameter table T1 is held by each of the authentication control units 101 and 201 of the wireless communication devices 100 and 200.

  The authentication control unit 101 is information indicating whether or not each first authentication parameter held in the storage unit 113 can be commonly used by the first communication unit 110 and the second communication unit 120 in the parameter table T1. (Common availability information) is retained. The common availability information is described in the “common” column in FIG. 3, for example, and is indicated by “OK” or “NG”. Whether or not they can be used in common is based on, for example, the correspondence between the cryptographic algorithms of the cryptographic processing unit 111 and the cryptographic processing unit 121.

  For example, when the cryptographic processing unit 111 performs cryptographic processing using AES-CCMP and the cryptographic processing unit 121 performs cryptographic processing using AES-GCMP, if the first authentication parameter is prepared, the authentication control unit 101 performs the first processing. It is determined that the authentication parameters can be used in common. Thereby, since communication of the second authentication parameter can be omitted between the wireless communication devices 100 and 200, the time required for authentication processing of the communication unit after switching can be shortened, and network traffic can also be reduced.

  For example, when the cryptographic processing unit 111 performs cryptographic processing using AES-CCMP and the cryptographic processing unit 121 performs cryptographic processing using KASUMI, the authentication control unit 101 may use the first authentication parameter in common. Judge that it is impossible.

  Note that the first authentication parameter may be used in common even in a case other than a combination of AES-CCMP and AES-GCMP (for example, a combination of TKIP (Temporal Key Integrity Protocol) and CCMP or GCMP).

  Further, in the parameter table T1, when the first communication units 110 and 210 and the second communication units 120 and 220 have a correspondence relationship that allows common encryption algorithms and the MAC addresses are the same, “OK” is held as address common availability information. On the other hand, even if the first communication units 110 and 210 and the second communication units 120 and 220 have a correspondence relationship in which the encryption algorithm can be shared, if the MAC address is different, “NG” is used as the MAC address common availability information. Is retained.

  In the present embodiment, since it is assumed that the MAC addresses are the same, “OK” is held as the MAC address common availability information (see FIG. 3). It should be noted that the information indicating whether or not NONE and PTK can be shared holds “OK” or “NG” information based on whether or not the encryption algorithm is compatible.

  Further, the authentication control unit 101 holds information (holding presence / absence information) indicating whether or not the NONE, MAC address, and PTK information as information of the counterpart device is held in the storage unit 113 in the parameter table T1. . The holding presence / absence information is indicated, for example, as “completed” if it has been held, and “not yet” if it has not been held.

  Note that the PMK is generated before the processing of S505 according to a predetermined algorithm between the wireless communication devices 100 and 200, and has been held until the processing of FIG. 2 is executed. The PMK may be acquired from a server device (not shown) or the like before the processing of S505.

  Similarly, the authentication control unit 201 holds common availability information and holding information on each first authentication parameter in the parameter table T1.

  For example, in the parameter table T1 of the authentication control unit 101, the common availability information (“common”) of each first authentication parameter indicates that it can be shared (“OK”), and the holding presence / absence information (“holding”) has been held. ("Done"). In this case, the authentication control unit 101 determines that the first authentication parameter and the second authentication parameter can be shared between the first communication unit 110 and the second communication unit 120 (S505). That is, the authentication control unit 101 determines that the authentication process by the second communication unit 120 after switching can be simplified.

  Similarly, for example, in the parameter table T1 of the authentication control unit 201, the common availability information (“common”) of each first authentication parameter indicates that it can be shared (“OK”), and holding presence / absence information (“holding”) Indicates that it has been retained ("done"). In this case, the authentication control unit 101 determines that the first authentication parameter and the second authentication parameter can be shared between the first communication unit 210 and the second communication unit 220 (S525). That is, the authentication control unit 201 determines that the authentication process by the second communication unit 220 after switching can be simplified.

  When it is determined in S505 that the authentication process by the second communication unit 120 can be simplified, the authentication control unit 101 uses the first authentication parameter stored in the storage unit 113 of the first communication unit 110 as the second communication unit. To the storage unit 123. The sent first authentication parameter is stored (copied) as the second authentication parameter (S506).

  Similarly, when it is determined in S525 that the authentication process by the second communication unit 220 can be simplified, the authentication control unit 201 uses the first authentication parameter stored in the storage unit 213 of the first communication unit 210 as the first authentication parameter. The data is sent to the storage unit 223 of the second communication unit. The sent first authentication parameter is stored (copied) as the second authentication parameter (S526).

  On the other hand, when it is determined in S505 that the authentication process by the second communication unit 120 cannot be simplified, the second communication unit 120 performs the authentication process according to the communication method (for example, WiGig method) of the second communication unit 120. Similarly, when it is determined in S525 that the authentication process by the second communication unit 220 cannot be simplified, the second communication unit 220 performs the authentication process according to the communication method (for example, WiGig method) of the second communication unit 220.

  That is, the second communication units 120 and 220 execute the same processing as S501 to S503 and S521 to S523 without omitting the communication of the second authentication parameter (MAC address, NONE) in the authentication processing.

  In the wireless communication device 100, the encryption processing unit 121 of the second communication unit 120 uses the second authentication parameter stored in the storage unit 123 to use the second authentication key (for example, PTK) used by the second communication unit 120. And the storage unit 123 holds the second authentication key (S507). The second authentication key generation method may be a known method according to the WiGig standard, for example. When the authentication parameter is copied, the second authentication key generated in S507 is the same as the first authentication key generated in S504.

  In the wireless communication device 200, the encryption processing unit 221 of the second communication unit 220 uses the second authentication parameter stored in the storage unit 223 to use the second authentication key (for example, PTK) used by the second communication unit 220. And the storage unit 223 holds the second authentication key (S527). Note that the second authentication key generated in S527 is the same as the first authentication key generated in S524.

  In the wireless communication device 100, the cryptographic processing unit 121 determines that the authentication process of the second communication unit 120 has been completed when the second authentication key used by the second communication unit 120 is generated (S508). Thereby, the authentication process of the wireless communication apparatus 100 accompanying the switching of the communication method is completed.

  In the wireless communication device 200, the encryption processing unit 221 determines that the authentication process of the second communication unit 220 has ended due to the generation of the authentication key used by the second communication unit 220 (S528). Thereby, the authentication process of the wireless communication apparatus 200 accompanying the switching of the communication method is completed.

  According to the wireless communication devices 100 and 200, by completing the authentication process by the first communication units 110 and 210, the authentication parameters are shared with the second communication units 120 and 220 according to the authentication method (for example, encryption algorithm). Can be used. Therefore, the communication of the second authentication parameter by the second communication units 120 and 220 can be omitted, and the second authentication process by the second communication units 120 and 220 can be omitted.

  That is, when the authentication process by the switching source communication unit is completed, the authentication process by the switching destination communication unit is simplified, and the authentication parameters can be shared between the STA and the PCP (or AP). Therefore, the time required for the authentication process by the switching destination communication unit can be shortened, and the time until connection to the switching destination wireless communication line can be shortened.

(Second Embodiment)
In the first embodiment, the case where all of the first authentication parameters (NONE and MAC addresses of the own device and the partner device, and PMK) are used as the second authentication parameters has been illustrated. In the present embodiment, it is assumed that a part of the first authentication parameter is used as the second authentication parameter.

  The configuration examples of the wireless communication system 1000 and the wireless communication devices 100 and 200 according to the present embodiment are the same as the configuration example of the wireless communication system 1000 and the wireless communication devices 100 and 200 illustrated in FIG.

  In the wireless communication apparatus 100, the MAC address used by the first communication unit 110 and the MAC address used by the second communication unit 120 are different. For example, the MAC address used by the first communication unit 110 is held in the storage unit 113, and the MAC address used by the first communication unit 120 is held in the storage unit 123.

  In the wireless communication device 200, the MAC address used by the first communication unit 210 and the MAC address used by the second communication unit 220 are different. For example, the MAC address used by the first communication unit 210 is held in the storage unit 213, and the MAC address used by the first communication unit 220 is held in the storage unit 223.

  Next, an operation example during authentication processing between the wireless communication device 100 and the wireless communication device 200 will be described.

  FIG. 4 is a flowchart illustrating an operation example during authentication processing by the wireless communication device 100 and the wireless communication device 200. In FIG. 4, it is assumed that authentication processing is performed by the first communication units 110 and 210, and authentication processing is performed by the second communication units 120 and 220 after the authentication processing. For example, a case where switching from Wi-fi communication to WiGig communication is assumed.

  In FIG. 4, steps that perform the same processing as the steps shown in FIG. 2 are given the same reference numerals, and descriptions thereof are omitted or simplified.

  First, the wireless communication device 100 executes the processes of S501 to S504. The wireless communication device 200 executes the processes of S521 to S524.

  Subsequently, in the wireless communication device 100, the authentication control unit 101 refers to the parameter table T2 (see FIG. 6) and determines whether or not the authentication process of the second communication unit 120 can be simplified (S505B). In the wireless communication device 200, the authentication control unit 201 refers to the parameter table T2 and determines whether or not the authentication process of the second communication unit 220 can be simplified (S525B).

  Here, an operation example of the wireless communication devices 100 and 200 when it is determined in steps S505B and S525B whether or not the authentication processing by the cryptographic processing units 111 and 211 can be simplified will be described. FIG. 5 is a flowchart illustrating an operation example of the wireless communication devices 100 and 200 when the authentication control units 101 and 201 determine whether or not the authentication processing by the cryptographic processing units 111 and 211 can be simplified.

  FIG. 6 is a schematic diagram showing an example of information held in the parameter table T2. The parameter table T2 holds shareability information in addition to the information held by the parameter T1 shown in FIG. The shareability information indicates whether or not the first authentication parameters can be shared between the first communication units 110 and 210 and the second communication units 120 and 220.

  Whether or not sharing is possible, for example, when the first authentication parameter (for example, MAC address) and the second authentication parameter (for example, MAC address) are different, the different first authentication parameter is shared as the second authentication parameter. Indicates whether or not to do. That is, whether or not the use of the different first authentication parameter as the second authentication parameter is permitted even when the first authentication parameter and the second authentication parameter are different. In FIG. 6, when sharing is possible, “possible” is indicated in the “sharing” column, and when sharing is not possible, “impossible” is indicated in the “sharing” column.

  First, the authentication control units 101 and 201 share the first authentication parameter and the second authentication parameter in the first communication unit 110 and 210 and the second communication unit 120 and 220 with reference to the parameter table T2. It is determined whether or not it is possible (S601). The criterion for determining whether or not sharing is possible is the same as in the first embodiment.

  When the first authentication parameter cannot be shared, the authentication control units 101 and 201 determine whether or not the first authentication parameter and the second authentication parameter can be shared with reference to the parameter table T2. (S602). Information on whether or not the first authentication parameter can be shared is determined according to the authentication level and held in the parameter table T2. Note that the authentication level is set in advance by the user via the operation unit, for example. The authentication level is set commonly or individually in the cryptographic processing units 111 and 121.

  For example, when the authentication level is set to “high”, the first authentication parameter cannot be shared. In this case, since the authentication parameters are individually used between the first communication units 110 and 210 and the second communication units 120 and 220, security is further improved.

  For example, when the authentication level is set to “low”, the first authentication parameter can be shared. Since communication of at least a part of the second authentication parameter used by the switching destination second communication unit 120, 220 can be omitted, the time required for the authentication processing by the switching destination second communication unit 120, 220 can be shortened.

  When the first authentication parameter can be shared (Yes in S601) or can be shared (Yes in S602), the authentication control units 101 and 201 store the first authentication parameter that can be shared or shared as the storage unit 113. , 213 are stored (copied) in the storage units 123, 223 (S603). Therefore, when the MAC addresses of the first communication unit 110 and 210 and the second communication unit 120 and 220 are the same, the first authentication parameter is set as the second authentication parameter as in the first embodiment. Will be copied. Thereby, the effect similar to 1st Embodiment is acquired.

  When the first authentication parameter cannot be shared (No in S601) and cannot be shared (No in S602), the wireless communication devices 100 and 200 use the authentication parameters used for the authentication process by the switching destination communication unit. (Corresponding to S511 and S512 in FIG. 4). Note that this authentication parameter is an authentication parameter that cannot be shared and cannot be shared, and the authentication parameter that can be shared or shared does not need to be exchanged by the second communication units 120 and 220. Accordingly, both security and shortening of the time required for authentication processing can be achieved.

  For example, assume that the parameter table T2 holds the information shown in FIG. In FIG. 6, the MAC address cannot be shared and cannot be shared. In this case, in the wireless communication device 100, the communication unit 122 of the second communication unit 120 transmits a beacon for association (S511). In the wireless communication device 200, the communication unit 222 of the second communication unit 220 receives a beacon from the wireless communication device 100 (S531). This beacon includes, for example, the MAC address of the second communication unit 120. The communication unit 222 stores the MAC address of the second communication unit 120 in the storage unit 223 of the second communication unit 220 (S531).

  In the wireless communication device 200, the communication unit 222 of the second communication unit 220 transmits a connection request for establishing a communication link to the wireless communication device 100 (S532). In the wireless communication device 100, the communication unit 122 of the second communication unit 120 receives a connection request from the wireless communication device 200 (S512). This connection request includes, for example, the MAC address of the second communication unit 220. The communication unit 122 stores the MAC address of the second communication unit 220 in the storage unit 123 of the second communication unit 120 (S512).

  Then, in the wireless communication device 100, the communication unit 122 of the second communication unit 120 transmits a response to the connection request (S512). In the wireless communication device 200, the communication unit 222 of the second communication unit 220 receives a response to the connection request (S532).

  After the exchange of the MAC address is completed in the second communication unit 120 and the second communication unit 220, the authentication control unit 101 uses at least a part of the authentication parameters stored in the storage unit 113 of the first communication unit 110 as the first parameter. The data is sent to the storage unit 123 of the second communication unit 120 and stored (copied) (S506B). Here, the information of NANCE and PTK is copied to the storage unit 123. Note that the MAC address information used by the second communication unit 220 of the counterpart device is held in the storage unit 123 in S512.

  Similarly, after the exchange of the MAC address is completed between the second communication unit 120 and the second communication unit 220, the authentication control unit 201 performs at least a part of the authentication parameters stored in the storage unit 213 of the first communication unit 210. Is sent to the storage unit 223 of the second communication unit 220 and stored (copied) (S526B). Here, the information of NANCE and PTK is copied to the storage unit 223. Note that the MAC address information used by the second communication unit 120 of the counterpart device is held in the storage unit 223 in S532.

  After the process of S526B, the wireless communication apparatus 100 executes the processes of S507 and S508, and the wireless communication apparatus 200 executes the processes of S527 and S528.

  In S505B and S525B, when it is determined that the MAC address that is one of the first authentication parameters can be shared, the processes of S511, S512, S531, and S532 are omitted. Further, the authentication control unit 101 performs the process of S506 instead of the process of S506B. That is, the first authentication parameter including the MAC address is copied to the storage unit 123 of the second communication unit 120 and is stored in the storage unit 123 as the second authentication parameter. Similarly, the authentication control unit 201 performs the process of S526 instead of the process of S526B. That is, the first authentication parameter including the MAC address is copied to the storage unit 223 of the second communication unit 220 and is stored in the storage unit 223 as the second authentication parameter.

  Therefore, when it is determined in S505B and 525B that the MAC address can be shared, in S507, S508, S527, and S528, the fourth authentication that is different from the third authentication key that the second communication units 120 and 220 should originally generate is used. A key will be generated. The third authentication key is an authentication key based on the MAC address used by the second communication units 120 and 220. The fourth authentication key is an authentication key based on the MAC address used by the first communication units 110 and 210. Even in this case, the second communication units 120 and 220 can uniquely identify the MAC address and can identify the second authentication key, so that the second communication units 120 and 220 can normally communicate with each other. it can. In addition, since the communication of the MAC address by the second communication units 120 and 220 is omitted, the time required for the authentication process can be shortened.

  According to the wireless communication devices 100 and 200 of the present embodiment, even when the first authentication parameter and the second authentication parameter are different, the authentication process can be simplified and the time required for the authentication process can be shortened. In addition, since the second authentication key is generated according to the authentication level, a desired security level can be ensured.

(Third embodiment)
In the third embodiment, it is assumed that the wireless communication device operates in consideration of the role of its own device. In the present embodiment, it is mainly assumed that the wireless communication device exists other than the wireless communication devices 100C and 200C.

  FIG. 7 is a block diagram illustrating a configuration example of the wireless communication devices 100C and 200C of the wireless communication system 1000C according to the third embodiment.

  The wireless communication device 100C includes a first communication unit 110, a second communication unit 120, an authentication control unit 101, a wireless switching control unit 102, and a roll control unit 103. The wireless communication device 200C includes a first communication unit 210, a second communication unit 220, an authentication control unit 201, a wireless switching control unit 102, and a roll control unit 203.

  In the wireless communication system 1000C illustrated in FIG. 7, the same reference numerals are given to the same configurations as those of the wireless communication system 1000 illustrated in FIG. 1, and description thereof is omitted or simplified.

  The role control units 103 and 203 are switched communication units (for example, the second communication units 120 and 220) based on the role determined by the authentication process by the switching source communication unit (for example, the first communication unit 110 and 210). Specify the role. The role of the switching source communication unit is specified by a known method, and for example, a method defined by the Wi-fi standard or the WiGig standard may be applied.

  For example, when the role of the first communication unit 110 that is the switching source is AP, the role control unit 103 specifies PCP as the role of the second communication unit 120 that is the switching destination. In addition, when the role of the second communication unit 120 that is the switching source is PCP, the role control unit 103 specifies the AP as the role of the first communication unit 110 that is the switching destination.

  Further, when the role of the first communication unit 110 that is the switching source is an STA, the role control unit 103 designates the STA as the role of the second communication unit 120 that is the switching destination. Further, when the role of the second communication unit 120 that is the switching source is STA, the role control unit 103 designates STA as the role of the first communication unit 110 that is the switching destination.

  Here, the role designation of the role control unit 103 has been illustrated, but the same applies to the role designation of the role control unit 203.

  Next, an operation example during authentication processing between the wireless communication device 100C and the wireless communication device 200C will be described.

  FIG. 8 is a flowchart illustrating an operation example during authentication processing by the wireless communication device 100C and the wireless communication device 200C. In FIG. 8, it is assumed that authentication processing is performed by the first communication units 110C and 210C, and authentication processing by the second communication units 120C and 220C is performed after the authentication processing. For example, the case where it switches from Wi-Fi communication to WiGig communication is assumed.

  In FIG. 8, steps that perform the same processing as the steps shown in FIG. 2 are assigned the same reference numerals, and descriptions thereof are omitted or simplified.

  First, the wireless communication device 100C executes the processes of S501 and S502. The wireless communication device 200C executes the processes of S521 and S522.

  After the process of S502, in the wireless communication device 100C, the role control unit 103 performs the first communication unit 110 and the second communication according to the results of beacon transmission / reception (S501), connection request reception and response (S502), for example. The role of the unit 120 is designated (S515).

  The role control unit 103 specifies the role of the first communication unit 110 according to, for example, the Wi-Fi standard or the WiGig standard. The role control unit 103 specifies the role of the second communication unit 120 according to the role of the first communication unit 110. For example, when the role of the first communication unit 110 is AP, PCP is designated as the role of the second communication unit 120. When the role of the first communication unit 110 is STA, STA is designated as the role of the second communication unit 120.

  Similarly, after the processing of S522, in the wireless communication device 200C, the role control unit 203 determines whether the first communication unit 210 and the communication unit 210C and the first communication unit 210 and The role of the second communication unit 220 is designated (S535).

  The role control unit 203 specifies the role of the first communication unit 210 according to, for example, the Wi-Fi standard or the WiGig standard. The role control unit 203 specifies the role of the second communication unit 220 according to the role of the first communication unit 210. For example, when the role of the first communication unit 210 is AP, PCP is designated as the role of the second communication unit 220. When the role of the first communication unit 210 is STA, STA is designated as the role of the second communication unit 220.

  Subsequently, the wireless communication device 100C performs the processes of S503 and S504. The wireless communication device 200C performs the processes of S523 and S524.

  After the processing of S504, in the wireless communication device 100C, the encryption processing unit 111 determines whether the role of the first communication unit 110 is AP or PCP. When the role of the first communication unit 110 is AP or PCP, the cryptographic processing unit 111 uses the first authentication parameter stored in the storage unit 113 to use the first group authentication key used by the first communication unit 110. (For example, GTK (Group Transient Key)) is generated. GTK is used as key information in multicast communication or broadcast communication, for example. The first authentication parameter includes the NONE of the own device, the MAC address of the own device, and a group master key (GMK (Group Master Key)) generated by a random number in the own device. The first group authentication key generation method may be a known method according to the Wi-Fi standard, for example.

  The encryption processing unit 111 causes the storage unit 113 to store the generated first group authentication key. In addition, the encryption processing unit 111 transmits the first group authentication key to another wireless communication device (for example, the wireless communication device 200C) via the communication unit 112, and the first group authentication key is transmitted to the wireless communication system 1000C. Share (S516).

  On the other hand, when the role of the first communication unit 110 is STA, the cryptographic processing unit 111 does not generate and transmit a group authentication key. The group authentication key is acquired from another wireless communication device (for example, wireless communication device 200C) whose role is AP or STA, and the communication unit 112 stores it in the storage unit 113 (S516).

  Similarly, after the processing of S524, the wireless communication device 200C determines whether the encryption processing unit 211 has the role of the first communication unit 210 as AP or PCP. When the role of the first communication unit 210 is AP or PCP, the cryptographic processing unit 211 uses the first authentication parameter stored in the storage unit 213 to use the first group authentication key used by the first communication unit 210. (Eg, GTK) is generated. This first authentication parameter includes the NONE of the own device, the MAC address of the own device, and a group master key (GMK) generated by a random number in the own device.

  The encryption processing unit 211 causes the storage unit 213 to store the generated first group authentication key. In addition, the encryption processing unit 211 transmits the first group authentication key to another wireless communication device (for example, the wireless communication device 100C) via the communication unit 212, and the first group authentication key is transmitted to the wireless communication system 1000C. Share (S536).

  On the other hand, when the role of the first communication unit 210 is STA, the cryptographic processing unit 211 does not generate and transmit a group authentication key. The group authentication key is acquired from another wireless communication device (for example, the wireless communication device 100C) whose role is AP or STA, and the communication unit 212 stores it in the storage unit 213 (S536).

  Subsequently, the wireless communication device 100C performs the processes of S505 to S508. The wireless communication device 200C performs the processes of S525 to S528.

  After the processing of S508, the cryptographic processing unit 121 uses the second authentication parameter stored in the storage unit 213 to perform the second communication when the role of the second communication unit 120 is AP or PCP, as in S516. A second group authentication key (for example, GTK) used by the unit 120 is generated. The second communication unit 120 transmits the second group authentication key to each wireless communication device (S517).

  Similarly, after the processing of S528, the encryption processing unit 221 uses the second authentication parameter stored in the storage unit 223 when the role of the second communication unit 220 is AP or PCP, as in S536. A second group authentication key (for example, GTK) used by the second communication unit 220 is generated. The second communication unit 220 transmits the second group authentication key to each wireless communication device.

  FIG. 9 is a schematic diagram showing a roll of each communication unit in the wireless communication system 1000X of the comparative example. In FIG. 9, the role of the first communication unit 110X of the wireless communication device 100X is PCP, and the role of the second communication unit 120X is STA. The role of the first communication unit 210X of the wireless communication device 200X is STA, and the role of the second communication unit 220X is AP.

  In this case, for example, the first communication unit 110X before switching and the second communication unit 220X after switching generate a group authentication key, and a group authentication key is generated in different wireless communication devices.

  FIG. 10 is a schematic diagram showing a roll of each communication unit in the wireless communication system 1000C of the present embodiment. In FIG. 10, the role of the first communication unit 110 of the wireless communication device 100C is PCP, and the role of the second communication unit 120 is STA. The role of the first communication unit 210 of the wireless communication apparatus 200C is AP, and the role of the second communication unit 220 is STA.

  In this case, for example, the first communication unit 110 before switching and the second communication unit 120 after switching generate a group authentication key, and a group authentication key is generated in the same wireless communication device. .

  According to the wireless communication devices 100C and 200C of the present embodiment, the role before and after the switching of the communication method is designated to be from AP to PCP or from STA to STA, so the wireless communication device 100C or the wireless communication device The role of 200C is not changed. Therefore, every time the communication method is switched, a group authentication key is generated by a different wireless communication device, and the group authentication key can be prevented from becoming complicated.

  In the present embodiment, the authentication parameters may be copied from the storage units 113 and 213 to the storage units 123 and 223 as in the first embodiment. That is, the authentication parameter may be used in common by the first communication unit 110 and 210 and the second communication unit 120 and 220. Thereby, the time required for generating the group authentication key can be shortened.

  In the present embodiment, as in the second embodiment, at least a part of the authentication parameters may be copied from the storage units 113 and 213 to the storage units 123 and 223. That is, at least a part of the authentication parameters may be used in common by the first communication unit 110, 210 and the second communication unit 120, 220. Thereby, the time required for generating the group authentication key can be shortened.

  The present disclosure is not limited to the configuration of the above-described embodiment, and any configuration that can achieve the functions shown in the claims or the functions of the configuration of the present embodiment is possible. Is also applicable.

  For example, in the above-described embodiment, each wireless communication device is exemplified to include two communication units. However, even when three or more communication units are provided, the authentication process can be similarly simplified.

  For example, in the above-described embodiment, the switching of the communication unit from the first communication unit to the second communication unit is mainly exemplified, but the same applies to the case where the communication unit is switched from the second communication unit to the first communication unit.

  In the above embodiment, the case where the present disclosure is configured by hardware has been described as an example. However, the present disclosure can also be realized by software in cooperation with hardware.

  Each functional block used in the description of the above embodiment is typically realized as an LSI that is an integrated circuit. These may be individually made into one chip, or may be made into one chip so as to include a part or all of them. Here, it may be an LSI, or may be referred to as an IC, a system LSI, a super LSI, or an ultra LSI depending on the degree of integration.

  Further, the method of circuit integration is not limited to LSI's, and implementation using dedicated circuitry or general purpose processors is also possible. For example, a Field Programmable Gate Array (FPGA) that can be programmed after manufacturing the LSI, connection of circuit cells in the LSI, or a reconfigurable processor whose settings can be reconfigured may be used.

  Further, if integrated circuit technology comes out to replace LSI's as a result of the advancement of semiconductor technology or a derivative other technology, it is naturally also possible to carry out function block integration using this technology. Biotechnology can be applied.

(Overview of one aspect of the present disclosure)
The first wireless communication device of the present disclosure is:
A first authentication processing unit that generates a first authentication key using a first authentication parameter in accordance with a first authentication method according to the first communication method;
A first communication unit that communicates with the first communication method using the first authentication key;
A switching unit for switching the communication method from the first communication method to the second communication method;
A determination unit that determines whether or not at least a part of the first authentication parameter is included in a second authentication parameter used in a second authentication method according to the second communication method;
A parameter control unit that controls to include at least a part of the first authentication parameter in the second authentication parameter when it is determined to be included in the second authentication parameter;
A second authentication processing unit for generating a second authentication key using the second authentication parameter in accordance with the second authentication method;
A second communication unit that communicates with the second communication method using the second authentication key;
Is provided.

The second wireless communication device of the present disclosure is a first wireless communication device,
The first authentication parameter includes network identification information used by the first communication unit of the wireless communication device, network identification information used by the wireless communication device of the communication destination, random number information generated by the wireless communication device, and communication destination Random number information generated by the wireless communication device.

The third wireless communication device of the present disclosure is a second wireless communication device,
Whether the determination unit includes at least a part of the first authentication parameter in the second authentication parameter according to the first authentication method, the second authentication method, and the first authentication parameter. Determine whether or not.

The fourth wireless communication device of the present disclosure is a third wireless communication device,
The communication destination wireless communication device includes the first communication unit and the second communication unit,
The first authentication parameter includes first network identification information used by the first communication unit of the wireless communication device, and third network identification used by the first communication unit of the communication destination wireless communication device. Information, and
The parameter control unit corresponds to the first authentication method and the second authentication method, and the first network identification information and the second network used by the second communication unit of the wireless communication device. If the identification information is the same, control is performed so that the first authentication parameter is included in the second authentication parameter.

A fifth wireless communication device of the present disclosure is a third wireless communication device,
The communication destination wireless communication device includes the first communication unit and the second communication unit,
The first authentication parameter includes first network identification information used by the first communication unit of the wireless communication device, and third network identification used by the first communication unit of the communication destination wireless communication device. Information, and
The determination unit corresponds to the first authentication method and the second authentication method, and the first network identification information and a second network identification used by the second communication unit of the wireless communication device. If the information is different, the first network identification information and the third network identification information are changed according to the authentication levels of the first authentication processing unit and the second authentication processing unit. Determine whether to include in the authentication parameters.

A sixth wireless communication device of the present disclosure is a fifth wireless communication device,
When the determination unit determines that the second communication unit does not include the first network identification information and the third network identification information in the second authentication parameter, the wireless communication device of the communication destination The fourth network identification information used by the second communication unit of the communication destination wireless communication apparatus is received, and the fourth network identification information is included in the second authentication parameter.

A seventh wireless communication device of the present disclosure is any one of the first to sixth wireless communication devices,
According to the role of the first communication unit, a roll control unit that specifies the role of the second communication unit is provided.

The wireless communication method according to the present disclosure includes:
A wireless communication method in a wireless communication device,
Generating a first authentication key using a first authentication parameter according to a first authentication scheme according to a first communication scheme;
Using the first authentication key to communicate by the first communication method;
Switching the communication method from the first communication method to the second communication method;
Determining whether to include at least a part of the first authentication parameter in a second authentication parameter used in a second authentication scheme according to the second communication scheme;
Controlling to include at least a portion of the first authentication parameter in the second authentication parameter if it is determined to be included in the second authentication parameter;
Generating a second authentication key using the second authentication parameter according to the second authentication scheme;
Communicating with the second communication method using the second authentication key;
Have

  The present disclosure is useful for a wireless communication device, a wireless communication method, and the like that can shorten the time required for authentication processing of a switching destination wireless communication line when switching wireless communication lines.

1000, 1000C Wireless communication system 100, 100C, 200, 200C Wireless communication device 101, 201 Authentication control unit 102, 202 Wireless switching control unit 103, 203 Roll control unit 110, 210 First communication unit 120, 220 Second communication unit 111 , 121, 211, 221 Cryptographic processing unit 112, 122, 212, 222 Communication unit 113, 123, 213, 223 Storage unit

Claims (8)

A first authentication processing unit that generates a first authentication key using a first authentication parameter in accordance with a first authentication method according to the first communication method;
A first communication unit that communicates with the first communication method using the first authentication key;
A switching unit for switching the communication method from the first communication method to the second communication method;
A determination unit that determines whether or not at least a part of the first authentication parameter is included in a second authentication parameter used in a second authentication method according to the second communication method;
A parameter control unit that controls to include at least a part of the first authentication parameter in the second authentication parameter when it is determined to be included in the second authentication parameter;
A second authentication processing unit for generating a second authentication key using the second authentication parameter in accordance with the second authentication method;
A second communication unit that communicates with the second communication method using the second authentication key;
A wireless communication device comprising: The first authentication parameter includes network identification information used by the first communication unit of the wireless communication device, network identification information used by the wireless communication device of the communication destination, random number information generated by the wireless communication device, and communication destination Random number information generated by the wireless communication device of
The wireless communication apparatus according to claim 1. Whether the determination unit includes at least a part of the first authentication parameter in the second authentication parameter according to the first authentication method, the second authentication method, and the first authentication parameter. Determine whether or not
The wireless communication apparatus according to claim 2. The communication destination wireless communication device includes the first communication unit and the second communication unit,
The first authentication parameter includes first network identification information used by the first communication unit of the wireless communication device, and third network identification used by the first communication unit of the communication destination wireless communication device. Information, and
The parameter control unit corresponds to the first authentication method and the second authentication method, and the first network identification information and the second network used by the second communication unit of the wireless communication device. If the identification information is the same, control to include the first authentication parameter in the second authentication parameter,
The wireless communication apparatus according to claim 3. The communication destination wireless communication device includes the first communication unit and the second communication unit,
The first authentication parameter includes first network identification information used by the first communication unit of the wireless communication device, and third network identification used by the first communication unit of the communication destination wireless communication device. Information, and
The determination unit corresponds to the first authentication method and the second authentication method, and the first network identification information and a second network identification used by the second communication unit of the wireless communication device. If the information is different, the first network identification information and the third network identification information are changed according to the authentication levels of the first authentication processing unit and the second authentication processing unit. Determine whether to include in authentication parameters,
The wireless communication apparatus according to claim 3. When the determination unit determines that the second communication unit does not include the first network identification information and the third network identification information in the second authentication parameter, the wireless communication device of the communication destination The fourth network identification information used by the second communication unit of the communication destination wireless communication apparatus is received, and the fourth network identification information is included in the second authentication parameter.
The wireless communication apparatus according to claim 5. Furthermore, according to the role of said 1st communication part, the roll control part which designates the role of said 2nd communication part is provided,
The wireless communication apparatus according to any one of claims 1 to 6. A wireless communication method in a wireless communication device,
Generating a first authentication key using a first authentication parameter according to a first authentication scheme according to a first communication scheme;
Using the first authentication key to communicate by the first communication method;
Switching the communication method from the first communication method to the second communication method;
Determining whether to include at least a part of the first authentication parameter in a second authentication parameter used in a second authentication scheme according to the second communication scheme;
Controlling to include at least a portion of the first authentication parameter in the second authentication parameter if it is determined to be included in the second authentication parameter;
Generating a second authentication key using the second authentication parameter according to the second authentication scheme;
Communicating with the second communication method using the second authentication key;
A wireless communication method.

Images