JP2017046268A5

JP2017046268A5 -

Info

Publication number: JP2017046268A5
Application number: JP2015168751A
Authority: JP
Filing date: 2015-08-28
Publication date: 2017-10-19
Anticipated expiration: 2035-08-28

Claims

A transmission unit for transmitting communication frame data to another communication device;
A receiving unit for receiving the communication frame data from the other communication device,
The transmitter is
The first check code generated based on the control communication data received from the control device, the first sequence number indicating the transmission order of the communication frame data, and the random number are separated in predetermined units, respectively. An electronic signature generation unit for generating an electronic signature obtained by converting a block consisting of a rearranged bit number sequence set by an encoder;
A transmission port for transmitting the communication frame data obtained by adding the electronic signature to the control communication data to another communication device;
The receiver is
A receiving port for extracting the electronic signature from the communication frame data received from the other communication device;
An information extraction unit that extracts the first check code, the first sequence number, and the random number from the block obtained by inversely transforming the electronic signature by a decoder in a reverse order to the predetermined order;
A result of comparing the extracted first check code with the second check code generated from the control communication data of the communication frame data, the extracted first sequence number, and the communication in the previous period A determination unit that allows the control device to capture the control communication data when the communication frame data is determined to be normal based on a result of comparison with the second sequence number added to the frame data; A communication device.

The electronic signature generation unit
A first check code generation unit that generates the first check code from the control communication data;
A sequence number generator that generates the first sequence number that is incremented each time the communication frame data is transmitted;
A random number generator for generating the random number;
A block generation unit that generates the block by rearranging the unit fixed length bits separated from each of the first check code, the first sequence number, and the random number in units of single bits or in units of multiple bits;
The communication device according to claim 1, further comprising: an encoding unit that converts the block by the encoder to generate the electronic signature.

The electronic signature generation unit includes a first time counter information generation unit that generates first time counter information,
The block generation unit includes unit fixed length bits separated from the first time counter information, the first check code, the first sequence number, and the random number in units of single bits or in units of multiple bits, respectively. The communication apparatus according to claim 2, wherein the blocks are generated by rearranging.

The communication apparatus according to claim 3, wherein the electronic signature generation unit includes a plurality of encoders and adds information related to the encoder used to generate the electronic signature to the electronic signature.

The information extraction unit includes:
A decrypting unit that reversely transforms the electronic signature by the decoder and decrypts the electronic signature;
Said single bits of the fixed-length extracted from the block sorted by the predetermined order, the first check code, the first sequence number, and bit extraction unit extracting the random number,
A second check code generation unit that generates the second check code based on the control communication data of the communication frame data;
A sequence number storage unit for storing the first sequence number extracted from the communication frame data of the previous period;
A first timing counter information storage unit that stores first timing counter information extracted from the communication frame data in the current cycle,
A second time counter information storage unit that stores the first time counter information extracted from the communication frame data of the previous period,
The determination unit
A check code determination unit that determines a difference between a first check code extracted from the communication frame data and a second check code generated from the control communication data of the communication frame data;
A first sequence number indicating the transmission order of the communication frame data extracted from the communication frame data of the current cycle, and the first sequence number extracted from the communication frame data of the previous cycle stored in the sequence number storage unit A sequence number determination unit for determining a difference from the sequence number of 2;
The first clock counter information of the current cycle stored in the first clock counter information storage unit and the first clock counter information of the previous cycle shifted to the second clock counter information storage unit An inter-period difference determining unit that determines whether the difference is within the first error range;
If the determination results of the check code determination unit, the sequence number determination unit, and the inter-period difference determination unit are normal, the control device allows the control communication data to be taken in. If the determination result is abnormal, The communication apparatus according to claim 1, further comprising: an authentication determination unit that discards the communication frame data.

The information extraction unit includes a second time counter information generation unit that generates second time counter information.
The determination unit determines whether or not a difference between the first time counter information extracted from the communication frame data and the second time counter information is within a second error range. It has a judgment part,
The communication apparatus according to claim 5, wherein the authentication determination unit performs processing on the communication frame data based on determination results of the current cycle difference determination unit, the check code determination unit, and the sequence number determination unit.

When the first check code and the second check code match and the first sequence number and the second sequence number are different, the information extraction unit includes the first time counter. The clock counter information of the previous cycle stored in the information storage unit is shifted to the second clock counter information storage unit, and the clock counter information of the current cycle is stored in the first clock counter information storage unit. 6. The communication device according to 6.

The first time counter information generated by the other communication device as a master and the second time counter information are not synchronized, and are in an incomplete synchronization state;
The first clock counter information of the current cycle stored in the first clock counter information storage unit and the first clock counter information of the previous cycle shifted to the second clock counter information storage unit If the difference is within the first error range,
The second clock counter information generation unit copies the first clock counter information of the current period stored in the first clock counter information storage unit to the first clock counter information. The communication apparatus according to claim 7, wherein the second time counter information is synchronized.

The communication apparatus according to claim 8, wherein the information extraction unit includes a plurality of the decoders, and decodes the electronic signature using the decoder selected based on information on the encoder added to the electronic signature.

The electronic signature generation unit encodes the electronic signature generated including a part of the control communication data,
The communication apparatus according to claim 1, wherein the determination unit does not use a part of the control communication data obtained by decrypting the electronic signature for determining the communication frame data.

The first check code generated based on the control communication data received from the control device, the first sequence number indicating the transmission order of the communication frame data, and the random number are each separated in a predetermined unit and rearranged in a predetermined order. An electronic signature generating unit that generates an electronic signature obtained by converting a block consisting of a set of bit sequences by an encoder;
A transmission port configured to transmit the communication frame data obtained by adding the electronic signature to the control communication data to another communication device.

A reception port that receives communication frame data transmitted by another communication device and extracts an electronic signature from the communication frame data;
What is the predetermined order in which the first check code, the first sequence number, and the random number generated by the other communication device based on the communication frame data are rearranged from the block obtained by inversely converting the electronic signature by the decoder? An information extractor for extracting the first check code, the first sequence number, and the random number in reverse order;
The result of comparing the extracted first check code with the second check code generated from the control communication data of the communication frame data, the extracted first sequence number, and the communication frame of the previous period A determination unit that permits the control device to capture the control communication data when the communication frame data is determined to be normal based on a result of comparison with the second sequence number added to the data. Receiver device.