JP2017108238A - Communication device and communication method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a communication device and a communication method that can verify validity of a communication opposite party between communication devices by using subscriber identification unit identification information associated with user identification information.SOLUTION: A communication device comprises: a subscriber identification unit for storing first subscriber identification unit identification information associated with a first telephone number of a communication network of a communication common carrier; and a communication unit for performing communication via the communication network connected by using the subscriber identification unit. The subscriber identification unit comprises a secret key storage unit for storing a secret key. The communication unit uses a communication service to notify a called side communication device of a caller number, i.e. a calling side telephone number, to transmit a public key paired with the secret key stored in the secret key storage unit to another communication device.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a communication device and a communication method.

  Conventionally, a public key cryptosystem is known as one technique for concealing communication data. In the public key cryptosystem, a public key (public key certificate) is generally exchanged using PKI (Public Key Infrastructure) (for example, see Non-Patent Document 1).

ITpro, “Introduction to Information Security-PKI (Part 2) --- X.509 Certificate and PKI Mechanism”, Internet <URL: http://itpro.nikkeibp.co.jp/article/COLUMN/20060725/244233/>

  However, in public key (public key certificate) exchanges using conventional PKI, the supplier of the public key (public key certificate) sends the public key to a certification authority (CA) of a third party organization. It took time and effort to send a public key certificate.

  The present invention has been made in consideration of such circumstances, and a communication device capable of verifying the validity of a communication partner between communication devices based on subscriber identification unit identification information associated with user identification information. It is another object of the present invention to provide a communication method.

(1) According to one aspect of the present invention, there is provided a subscriber identification unit that stores first subscriber identification unit identification information associated with a first telephone number of a communication network of a communication carrier, and the subscriber identification unit A communication unit that communicates via the communication network that is used and connected, the subscriber identification unit includes a secret key storage unit that stores a secret key, and the communication unit includes a telephone number on the calling side A communication service that notifies a communication device on the receiving side of a caller number that is a communication key that transmits a pair of public keys for the secret key stored in the secret key storage unit to another communication device. Device.
(2) According to one aspect of the present invention, in the communication device according to (1), the subscriber identification unit uses the secret key stored in the secret key storage unit to perform encryption using a public key cryptosystem. A first encryption processing unit that executes processing; and the communication device transmits transmission data including data of a result of the encryption processing by the first encryption processing unit and the first telephone number to the other It is a communication apparatus further provided with the data transmission part transmitted to a communication apparatus.
(3) According to one aspect of the present invention, in the communication device according to (1), the communication unit uses a communication service that notifies a caller number, which is a caller's phone number, to the callee communication device, A communication device that transmits the first subscriber identification unit identification information and a public key of a pair for the secret key stored in the secret key storage unit to the other communication device.
(4) According to one aspect of the present invention, in the communication device according to (3), the subscriber identification unit uses the secret key stored in the secret key storage unit to perform encryption using a public key cryptosystem. A first cryptographic processing unit that executes processing, and the communication device includes transmission data including data of the result of the cryptographic processing performed by the first cryptographic processing unit and the first subscriber identification unit identification information Is a communication device further comprising a data transmission unit for transmitting the message to the other communication device.

(5) According to one aspect of the present invention, there is provided a subscriber identification unit that stores first subscriber identification unit identification information associated with a first telephone number of a communication network of a communication carrier, and the subscriber identification unit A communication unit that communicates via the communication network that is used and connected, the subscriber identification unit includes a secret key storage unit that stores a secret key, and the communication unit includes a telephone number on the calling side Using a communication service for notifying a caller number to a communication device on the receiving side, and transmitting a public key of a pair for the secret key stored in the secret key storage unit to another communication device, The communication unit receives a caller number and a public key by the communication service, and the own communication device sets the public key received by the communication unit to the caller number notified by the communication service when the public key is received. Public key storage to store in association Further comprising a communication device.
(6) According to one aspect of the present invention, in the communication device according to (5), the subscriber identification unit uses the secret key stored in the secret key storage unit to perform encryption using a public key cryptosystem. A first encryption processing unit that executes processing; and the communication device transmits transmission data including data of a result of the encryption processing by the first encryption processing unit and the first telephone number to the other A data transmission unit to be transmitted to the communication device, a data reception unit for receiving the reception data including the data obtained as a result of the encryption processing of the public key cryptosystem and the second telephone number; Using the public key stored in the public key storage unit in association with the second telephone number included, execute encryption processing on the data resulting from the encryption processing of the public key cryptosystem included in the received data A second cryptographic processing unit; A communication device further comprising.

(7) According to one aspect of the present invention, there is provided a subscriber identification unit that stores first subscriber identification unit identification information associated with a first telephone number of a communication network of a communication carrier, and the subscriber identification unit A communication unit that communicates via the communication network that is used and connected, the subscriber identification unit includes a secret key storage unit that stores a secret key, and the communication unit includes a telephone number on the calling side Publishing a pair of the first subscriber identification unit identification information and the secret key stored in the secret key storage unit by using a communication service for notifying the caller number which is A key is transmitted to another communication device, the communication unit receives a caller number, a public key, and second subscriber identification unit identification information by the communication service, and the communication unit receives the own communication device. The received public key is transmitted to the communication unit when the public key is received. Received in association with the second subscriber identity unit identification information further comprises a public key storage unit for storing a communication device.
(8) According to one aspect of the present invention, in the communication device according to (7), the subscriber identification unit uses the secret key stored in the secret key storage unit to perform encryption using a public key cryptosystem. A first cryptographic processing unit that executes processing, and the communication device includes transmission data including data of the result of the cryptographic processing performed by the first cryptographic processing unit and the first subscriber identification unit identification information A data transmission unit for transmitting data to the other communication device, a data reception unit for receiving reception data including data obtained as a result of cryptographic processing using public key cryptography and second subscriber identification unit identification information, and the data Using the public key stored in the public key storage unit in association with the second subscriber identification unit identification information included in the reception data received by the reception unit, the public key encryption method included in the reception data The encryption result data A second encryption processing section that executes processing, which is further provided with a communication device.

(9) According to one aspect of the present invention, a communication unit that receives a caller number and a public key by a communication service that notifies a caller number that is a telephone number on the caller side to a communication device on the callee side, and the communication unit receives And a public key storage unit that stores the public key in association with the caller number notified by the communication service when the public key is received.
(10) According to one aspect of the present invention, in the communication device according to (9), a data reception unit that receives reception data including data and a telephone number as a result of public key cryptography, and the data reception unit Using the public key stored in the public key storage unit in association with the telephone number included in the received data received by the user, the encryption process for the data resulting from the encryption process of the public key cryptosystem included in the received data And a second cryptographic processing unit that executes.

(11) According to one aspect of the present invention, a communication unit that receives a caller number, a public key, and subscriber identification unit identification information by a communication service that notifies a caller number that is a telephone number on the caller side to a communication device on the callee side And a public key storage unit that stores the public key received by the communication unit in association with the subscriber identification unit identification information received by the communication unit when the public key is received.
(12) According to one aspect of the present invention, in the communication device according to (11), a data reception unit that receives reception data including data obtained as a result of cryptographic processing using public key cryptography and subscriber identification unit identification information; Using the public key stored in the public key storage unit in association with the subscriber identification unit identification information included in the received data received by the data receiving unit, encryption of the public key cryptosystem included in the received data And a second cryptographic processing unit that performs cryptographic processing on the data resulting from the processing.

(13) According to one aspect of the present invention, there is provided a subscriber identification unit that stores first subscriber identification unit identification information associated with a first telephone number of a communication network of a communication carrier, and the subscriber identification unit In a communication method of a communication device, comprising: a communication unit that performs communication via the communication network that is used and connected; and a public key storage unit; and a secret key storage step in which the subscriber identification unit stores a secret key; The secret key stored in the subscriber identification unit by the secret key storing step using a communication service in which the communication unit notifies a caller number, which is a telephone number on the caller side, to the callee communication device. A public key transmitting step of transmitting a public key of a pair to another communication device, a public key receiving step of receiving a caller number and a public key by the communication service, and a public key storage unit The received public key by the public key receiving step, a communication method including the public key storing step, the storing in association with the notified caller ID by the communication service upon receipt of the public key.

(14) According to one aspect of the present invention, there is provided a subscriber identification unit that stores first subscriber identification unit identification information associated with a first telephone number of a communication network of a communication carrier, and the subscriber identification unit In a communication method of a communication device, comprising: a communication unit that performs communication via the communication network that is used and connected; and a public key storage unit; and a secret key storage step in which the subscriber identification unit stores a secret key; The communication unit uses a communication service for notifying a caller number which is a caller's telephone number to a callee communication device, and the first subscriber identification unit identification information and the secret key storing step are used. A public key transmission step of transmitting a pair of public keys for the secret key stored in the subscriber identification unit to another communication device, and the communication unit uses the communication service to send a caller number, a public key, and a second Subscriber identity A public key receiving step for receiving the part identification information; and a second subscriber that has received the public key received by the public key receiving step by the public key receiving step when the public key is received. And a public key storage step of storing in association with the identification unit identification information.

  Advantageous Effects of Invention According to the present invention, there is an effect that it is possible to provide a communication device and a communication method that can verify the legitimacy of a communication partner between communication devices based on subscriber identification unit identification information associated with user identification information. can get.

1 is a configuration diagram showing a communication system 1 according to an embodiment of the present invention. It is explanatory drawing of Example 1 of the communication method which concerns on one Embodiment of this invention. It is explanatory drawing of the example 2 of the communication method which concerns on one Embodiment of this invention.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a configuration diagram showing a communication system 1 according to the present embodiment. In FIG. 1, the communication system 1 includes a communication device 3-1 and a communication device 3-2. The communication device 3-1 includes a SIM (Subscriber Identity Module) 100-1, a communication unit 130, a control unit 140, a wireless communication unit 160, and a public key storage unit 210. The SIM 100-1 stores SIM identification information simid1. The SIM identification information simid1 is identification information unique to the SIM 100-1. The SIM 100-1 includes a key generation unit 101, an encryption processing unit 104, and a secret key storage unit 106.

  The communication device 3-2 has the same configuration as the communication device 3-1. In the communication device 3-2 shown in FIG. 1, portions corresponding to the respective portions of the communication device 3-1 are denoted by the same reference numerals. In the following description, the communication device 3-1 and the communication device 3-2 are referred to as “communication device 3” unless otherwise distinguished. One communication device 3 may include a plurality of SIMs. For example, the communication device 3 may be a communication device that includes a plurality of SIM slots and can switch the connection destination to any communication network from among the communication networks corresponding to the SIMs inserted in the SIM slots. .

  The communication device 3-2 includes a SIM 100-2. The SIM 100-2 stores the SIM identification information simid2. The SIM identification information simid2 is identification information unique to the SIM 100-2.

  The wireless communication network 40 is a wireless communication network of a communication carrier. The SIM 100-1 is a SIM issued to a user authenticated by a communication carrier related to the wireless communication network 40. The SIM identification information simid 1 of the SIM 100-1 is stored in the communication carrier database 10 in association with the telephone number of the wireless communication network 40 assigned to the user authenticated by the communication carrier related to the wireless communication network 40. Similar to the SIM 100-1, the SIM 100-2 is a SIM issued to a user authenticated by a communication carrier related to the wireless communication network 40. The SIM identification information simid2 of the SIM 100-2 is stored in the communication carrier database 10 in association with the telephone number of the wireless communication network 40 assigned to the user authenticated by the communication carrier related to the wireless communication network 40. In the following description, when the SIM 100-1 and the SIM 100-2 are not particularly distinguished, they are referred to as “SIM 100”. The telephone number of the wireless communication network 40 is simply referred to as a telephone number. The SIM 100 may be a SIM issued to a user authenticated by a virtual network operator.

  For example, IMSI (International Mobile Subscriber Identity) or ICCID (Integrated Circuit Card ID) may be used as the SIM identification information.

The communication unit 130 of the communication device 3-1 and the communication unit 130 of the communication device 3-2 perform communication. Communication between the communication unit 130 of the communication device 3-1 and the communication unit 130 of the communication device 3-2 may be wireless communication or wired communication. For example, the communication unit 130 of the communication device 3-1 and the communication unit 130 of the communication device 3-2 may perform communication via a wireless communication network such as a wireless LAN or a mobile phone network. Alternatively, the communication unit 130 of the communication device 3-1 and the communication unit 130 of the communication device 3-2 may perform communication by directly transmitting and receiving signals using the short-range wireless communication technology. Or the communication part 130 of the communication apparatus 3-1 and the communication part 130 of the communication apparatus 3-2 may communicate via communication networks, such as the internet, a fixed telephone network, and wired LAN. Or the communication part 130 of the communication apparatus 3-1 and the communication part 130 of the communication apparatus 3-2 may be connected by a communication cable, and may communicate.
The communication unit 130 includes a data transmission unit 201 and a data reception unit 202.

  In the communication device 3, the control unit 140 includes a CPU (Central Processing Unit) and a memory, and controls each unit included in the communication device 3. The control unit 140 includes an application 150 as its function unit.

  The SIM 100 is a kind of computer and realizes a desired function by a computer program. In the SIM 100, the key generation unit 101 generates a public key / private key pair. The secret key storage unit 106 stores a secret key. The secret key storage unit 106 is provided in a non-volatile storage area that cannot be accessed from outside the SIM 100 among the storage areas in the SIM 100. Therefore, the secret key stored in the secret key storage unit 106 is not accessed from outside the SIM 100. Further, the SIM 100 has tamper resistance. Therefore, the secret key stored in the secret key storage unit 106 is protected from attacks on the SIM 100.

  The cryptographic processing unit 104 uses the private key stored in the private key storage unit 106 to perform public key cryptography cryptographic processing.

  In the communication device 3, the wireless communication unit 160 performs communication via the wireless communication network 40 connected using the SIM 100. The SIM 100 stores information for using the wireless communication network 40. The wireless communication unit 160 can use the wireless communication network 40 by using the SIM 100. The wireless communication unit 160 connects to the wireless communication network 40 through a wireless communication line established using the SIM 100.

  Next, the operation of the communication system 1 shown in FIG. 1 will be described with reference to FIGS. FIG. 2 is an explanatory diagram of Example 1 of the communication method according to the present embodiment. FIG. 3 is an explanatory diagram of Example 2 of the communication method according to the present embodiment.

[Example 1 of communication method]
With reference to FIG. 2, Example 1 of the communication method according to the present embodiment will be described. FIG. 2 shows a case where information is transmitted from the communication device 3-1 to the communication device 3-2. Here, a case where information is transmitted from the communication device 3-1 to the communication device 3-2 will be described as an example, but conversely, a case where information is transmitted from the communication device 3-2 to the communication device 3-1. It is. The same applies to the case where information is transmitted / received from / to another communication device other than the communication device 3-2 from the communication device 3-1. That is, the same applies to the case where information is transmitted and received between three or more communication devices.

  The control unit 140 of the communication device 3-1 includes a public key / private key issuing application and a signature generation application as the application 150. Processing of these applications is performed in a flash memory (Flash memory) in the control unit 140 of the communication device 3-1. The control unit 140 of the communication device 3-2 includes a public key management application and a signature verification application as the application 150. Processing of these applications is performed in the flash memory in the control unit 140 of the communication device 3-2.

[Procedure for sending public key]
First, steps S1 to S4 of the public key sending procedure will be described.

(Step S1) In the communication device 3-1, the public key / private key issuing application instructs the SIM 100-1 to generate a public key / private key pair. The key generation unit 101 of the SIM 100-1 generates a public key K1p and a secret key K1s in response to the instruction. The public key K1p and the secret key K1s are generated in a secure RAM (Secure RAM) in the SIM 100-1. The secure RAM in the SIM 100-1 is a volatile storage area that cannot be accessed from outside the SIM 100-1. Therefore, processing performed in the secure RAM in the SIM 100-1 is concealed from the outside of the SIM 100-1.

(Step S2) In the SIM 100-1, the secret key storage unit 106 stores the secret key K1s generated by the key generation unit 101. In FIG. 2, the secret key K1s is stored in a secure ROM (Secure ROM) in the SIM 100-1. The secure ROM in the SIM 100-1 is a non-volatile storage area that cannot be accessed from outside the SIM 100-1.
The SIM 100-1 passes the public key K1p generated by the key generation unit 101 to the public key / secret key issuing application.

(Step S3) In the communication device 3-1, the public key / secret key issuing application outputs the public key K1p received from the SIM 100-1 to the wireless communication unit 160. The wireless communication unit 160 uses the communication service 3 for notifying the caller number, which is the caller's telephone number, of the public key K1p input from the public key / private key issuing application to the callee communication device. -2. The wireless communication unit 160 of the communication device 3-2 receives the caller number, that is, the telephone number of the communication device 3-1, and the public key K1p by the communication service. In the communication device 3-2, the wireless communication unit 160 passes the received caller number, that is, the telephone number of the communication device 3-1, and the public key K1p to the public key management application.

(Example of public key transmission method)
Here, an example of a method for transmitting the public key K1p from the communication device 3-1 to the communication device 3-2 will be described. When transmitting the public key K1p to the communication device 3-2, the wireless communication unit 160 of the communication device 3-1 uses a communication service that notifies the caller number, which is the caller's phone number, to the callee communication device. To do. Examples of the communication service include a message service such as SMS (Short Message Service) that uses a telephone number as a destination address and a source address. An example of the communication service is a telephone service with a caller ID notification. Hereinafter, a case of using SMS (Example 1-1) and a case of using a telephone service with caller ID notification (Example 1-2) will be described.

(Example 1-1: When sending a public key using SMS)
In SMS, a telephone number is used for a destination address and a source address. The wireless communication unit 160 of the communication device 3-1 stores the public key K1p in the SMS message whose destination address is the telephone number of the communication device 3-2, and transmits the SMS message storing the public key K1p to the wireless communication network 40. To do. The SMS message is received by the wireless communication unit 160 of the communication device 3-2 via the wireless communication network 40. The source address of the SMS message received by the wireless communication unit 160 of the communication device 3-2 is the telephone number of the communication device 3-1. In the communication apparatus 3-2, the wireless communication unit 160 passes the received SMS message to the public key management application. The public key management application obtains the telephone number of the communication device 3-1 that is the transmission source address and the public key K1p from the SMS message.

(Example 1-2: When a public key is transmitted using a telephone service with a caller ID notification)
In the telephone service with caller number notification, the caller number, which is the caller's phone number, is notified to the communication device on the called side. The wireless communication unit 160 of the communication device 3-1 makes a call to the telephone number of the communication device 3-2 with a caller number notification. When the wireless communication unit 160 of the communication device 3-2 responds to the incoming call, the wireless communication unit 160 of the communication device 3-1 transmits the public key K1p by a modem signal. The wireless communication unit 160 of the communication device 3-2 receives the public key K1p by the modem signal. Moreover, the wireless communication part 160 of the communication apparatus 3-2 receives the telephone number of the communication apparatus 3-1 as a caller number at the time of the said incoming call. In the communication device 3-2, the wireless communication unit 160 passes the received public key K1p and the caller number, that is, the telephone number of the communication device 3-1, to the public key management application.

  The above is an explanation of an example of a public key transmission method. Returning to FIG.

(Step S4) In the communication device 3-2, when the public key management application receives the telephone number and the public key K1p of the communication device 3-1 from the wireless communication unit 160, the public key management application associates them with the telephone number of the communication device 3-1. The public key K1p is stored in the public key storage unit 210. In FIG. 2, the public key K1p is stored in the flash memory in the control unit 140 of the communication device 3-2.

[Information sending procedure]
Next, steps S5 to S10 of the information sending procedure will be described.

(Step S5) In the communication device 3-1, the signature generation application calculates a digest of information to be transmitted to the communication device 3-2. Here, a hash value is used as an example of the digest. The signature generation application passes the calculated hash value hash (information) to the SIM 100-1 and instructs generation of a signature.

(Step S <b> 6) The cryptographic processing unit 104 of the SIM 100-1 has the hash value hash (hash (information)) including the hash value hash (information) received from the signature generation application and the telephone number of the communication apparatus 3-1. , Phone number). Further, the encryption processing unit 104 encrypts the calculated hash value hash (hash (information), telephone number) with the secret key K1s stored in the secret key storage unit 106 of the SIM 100-1. The encrypted data K1s (hash (hash (information), telephone number)) is an electronic signature of information to be transmitted to the communication device 3-2. The electronic signature K1s (hash (hash (information), telephone number)) is generated in the secure RAM in the SIM 100-1.

(Step S7) The SIM 100-1 passes the electronic signature K1s (hash (hash (information), telephone number)) generated by the encryption processing unit 104 to the signature generation application.

(Step S8) In the communication device 3-1, the signature generation application outputs the electronic signature K1s (hash (hash (information), phone number)) received from the SIM 100-1 to the communication unit 130. The data transmission unit 201 of the communication unit 130 receives the electronic signature K1s (hash (hash (information), telephone number)), information to be transmitted to the communication device 3-2, and the telephone number of the own communication device 3-1. Transmit to the communication device 3-2.

  In the communication device 3-2, the data receiving unit 202 of the communication unit 130 receives the electronic signature K1s (hash (hash (information), telephone number)), information, and telephone number from the communication device 3-1. . The data receiving unit 202 of the communication unit 130 passes the received electronic signature K1s (hash (hash (information), telephone number)), information, and telephone number to the signature verification application.

(Step S <b> 9) In the communication device 3-2, the signature verification application calculates a verification hash value hash ′ (information) that is a hash value of information received from the communication device 3-1. Further, the signature verification application uses a verification hash value hash ′ (hash ′ (information), telephone) that is a hash value of data including the verification hash value hash ′ (information) and the telephone number received from the communication device 3-1. Number).

(Step S10) In the communication device 3-2, the signature verification application notifies the public key management application of the telephone number received from the communication device 3-1, and requests the public key. The public key management application passes the public key K1p stored in the public key storage unit 210 in association with the telephone number notified from the signature verification application to the signature verification application. The signature verification application decrypts the electronic signature K1s (hash (hash (information), telephone number)) received from the communication device 3-1 with the public key K1p received from the public key management application. By this decryption, decrypted data “K1p · K1s (hash (hash (information), telephone number))” is obtained. The signature verification application determines whether or not the verification hash value hash ′ (hash ′ (information), telephone number) matches the decrypted data “K1p · K1s (hash (hash (information), telephone number))”. As a result of this determination, if they match, the verification of the validity of the information received from the communication device 3-1 is acceptable. On the other hand, if they do not match, the verification of the validity of the information received from the communication device 3-1 fails. If it fails, the information received from the communication device 3-1 is discarded. Further, predetermined error processing may be executed. For example, it may be notified that the information received from the communication device 3-1 has been tampered with or that the information transmission side is a fake (spoofing).

[Example 2 of communication method]
With reference to FIG. 3, Example 2 of the communication method according to the present embodiment will be described. FIG. 3 shows a case where information is transmitted from the communication device 3-1 to the communication device 3-2. Here, a case where information is transmitted from the communication device 3-1 to the communication device 3-2 will be described as an example, but conversely, a case where information is transmitted from the communication device 3-2 to the communication device 3-1. It is. The same applies to transmission / reception of information from / to another communication device other than the communication device 3-2 from the communication device 3-1. That is, the same applies to the case where information is transmitted and received between three or more communication devices.
In FIG. 3, the same reference numerals are given to portions corresponding to the respective steps in FIG. Hereinafter, a difference between the communication method example 2 and the communication method example 1 will be mainly described.

[Procedure for sending public key]
First, steps S1 to S4a of the public key sending procedure will be described. Steps S1 and S2 are the same as those in the first example of the communication method in FIG. Step S3a is executed after steps S1 and S2.

(Step S3a) In the communication device 3-1, the public key / secret key issuing application outputs the public key K1p received from the SIM 100-1 to the wireless communication unit 160. The wireless communication unit 160 provides a communication service for notifying the caller number, which is the caller's telephone number, to the callee communication device, the public key K1p input from the public key / secret key issuing application and the SIM identification information simid1. The data is transmitted to the communication device 3-2. The transmission method using the communication service is the same as the example of the public key transmission method described above. For example, the wireless communication unit 160 of the communication device 3-1 stores the public key K1p and the SIM identification information simid1 in the SMS message whose destination address is the telephone number of the communication device 3-2, and the public key K1p and the SIM identification information simid1. Is transmitted to the wireless communication network 40. Alternatively, the wireless communication unit 160 of the communication device 3-1 makes a call to the telephone number of the communication device 3-2 with a caller number notification, and when the wireless communication unit 160 of the communication device 3-2 responds to the incoming call, it is disclosed. The key K1p and the SIM identification information simid1 are transmitted by a modem signal.

  The wireless communication unit 160 of the communication device 3-2 receives the caller number, that is, the telephone number of the communication device 3-1, the public key K1p, and the SIM identification information simid1 by the communication service. In the communication device 3-2, the wireless communication unit 160 passes the received public key K1p and the SIM identification information simid1 to the public key management application.

(Step S4a) In the communication device 3-2, when the public key management application receives the public key K1p and the SIM identification information simid1 from the wireless communication unit 160, the public key K1p is associated with the SIM identification information simid1 and stored in the public key. Stored in the unit 210. In FIG. 3, the public key K1p is stored in the flash memory in the control unit 140 of the communication device 3-2.

[Information sending procedure]
Next, steps S5 to S10a of the information sending procedure will be described. Step S5 is the same as Example 1 of the communication method of FIG. Step S6a is executed after step S5.

(Step S6a) The cryptographic processing unit 104 of the SIM 100-1 calculates a hash value hash (hash (information), simid1) of data including the hash value hash (information) received from the signature generation application and the SIM identification information simid1. To do. Further, the encryption processing unit 104 encrypts the calculated hash value hash (hash (information), simid1) with the secret key K1s stored in the secret key storage unit 106 of the SIM 100-1. The encrypted data K1s (hash (hash (information), simid1)) is an electronic signature of information to be transmitted to the communication device 3-2. The electronic signature K1s (hash (hash (information), simid1)) is generated in the secure RAM in the SIM 100-1.

(Step S7a) The SIM 100-1 passes the electronic signature K1s (hash (hash (information), simid1)) generated by the cryptographic processing unit 104 to the signature generation application.

(Step S8a) In the communication device 3-1, the signature generation application outputs the electronic signature K1s (hash (hash (information), simid1)) received from the SIM 100-1 to the communication unit 130. The data transmission unit 201 of the communication unit 130 transmits the electronic signature K1s (hash (hash (information), simid1)), information to be transmitted to the communication device 3-2, and the SIM identification information simid1 to the communication device 3-2. Send.

  In the communication device 3-2, the data reception unit 202 of the communication unit 130 receives the electronic signature K1s (hash (hash (information), simid1)), information, and SIM identification information simid1 from the communication device 3-1. To do. The data receiving unit 202 of the communication unit 130 passes the received electronic signature K1s (hash (hash (information), simid1)), information, and SIM identification information simid1 to the signature verification application.

(Step S <b> 9 a) In the communication device 3-2, the signature verification application calculates a verification hash value hash ′ (information) that is a hash value of information received from the communication device 3-1. Further, the signature verification application uses a verification hash value hash ′ (hash ′ (information)) that is a hash value of data including the verification hash value hash ′ (information) and the SIM identification information simid1 received from the communication device 3-1. , Simid1).

(Step S10a) In the communication device 3-2, the signature verification application notifies the public key management application of the SIM identification information simid1 received from the communication device 3-1, and requests a public key. The public key management application passes the public key K1p stored in the public key storage unit 210 in association with the SIM identification information simid1 notified from the signature verification application to the signature verification application. The signature verification application decrypts the electronic signature K1s (hash (hash (information), simid1)) received from the communication device 3-1 with the public key K1p received from the public key management application. By this decoding, decoded data “K1p · K1s (hash (hash (information), simid1))” is obtained. The signature verification application determines whether the verification hash value hash ′ (hash ′ (information), simid1) matches the decrypted data “K1p · K1s (hash (hash (information), simid1))”. As a result of this determination, if they match, the verification of the validity of the information received from the communication device 3-1 is acceptable. On the other hand, if they do not match, the verification of the validity of the information received from the communication device 3-1 fails. If it fails, the information received from the communication device 3-1 is discarded. Further, predetermined error processing may be executed. For example, it may be notified that the information received from the communication device 3-1 has been tampered with or that the information transmission side is a fake (spoofing).

  According to the present embodiment, when a public key is shared among a plurality of communication devices 3, it is disclosed by using a communication service that notifies a caller number that is a caller's telephone number to a caller's communication device. The telephone number of the communication device 3 on the key transmission side can be confirmed by the communication device 3 on the public key reception side. Since the caller number notified by the communication service is a telephone number that has been authenticated by the wireless communication network 40 of the communication carrier, it can serve as a basis for trusting the public key. As a result, the public key supplier does not need to send a public key to a third-party certification authority and issue a public key certificate for the public key trust base. Thereby, the effect that the effort of exchanging public keys can be reduced is obtained. Moreover, compared with the case where the conventional PKI is used, burdens such as costs and application procedures can be reduced.

  In the present embodiment, the cryptographic processing unit 104 of the SIM 100 is an example of a first cryptographic processing unit. A signature verification application that is one of the applications 150 of the control unit 140 of the communication apparatus 3 is an example of a second cryptographic processing unit. The SIM 100 is an example of a subscriber identification unit.

  Note that the person operating the communication device 3 and the communication device 3 may be bound (associated). For example, storage authentication for inputting a predetermined password is added to an operation or information to be authenticated. Specifically, for example, when the communication device 3 generates a public key, a person who operates the communication device 3 may input a predetermined password. In addition, when an electronic signature is attached with a secret key in the SIM 100 of the communication device 3, a person who operates the communication device 3 may input a predetermined password.

  In addition, on the condition that the owner of the communication device 3 is approved, the operation history of the communication device 3 (position information at the time of operation, application execution history, etc.) is described in a predetermined form and an electronic signature is applied. May be.

  Further, on the condition that the owner of the communication device 3 is approved, the information of the owner possessed by the communication carrier may be described in a predetermined form and an electronic signature may be applied.

  SIM is a general term for communication modules that store unique identification information associated with user identification information, and is not limited to communication modules used in a specific communication system. For example, UIM (User Identity Module), USIM (Universal Subscriber Identity Module), eSIM (Embedded Subscriber Identity Module), etc. may be used.

  The communication device 3 on the public key transmitting side may not have a public key storage function. Specifically, the communication device 3 on the public key transmission side may not include the public key storage unit 210 and the public key management application.

  Further, the communication device 3 on the public key receiving side may not have a function for generating a public key / private key pair. Specifically, the communication device 3 on the public key receiving side may not include the key generation unit 101 and the secret key storage unit 106.

In addition, the SIM 100 may store a public key / private key pair in advance. For example, when the SIM 100 is manufactured, a public key / private key pair may be stored in the SIM 100. When the SIM 100 stores a public key / private key pair in advance, the SIM 100 may not include the key generation unit 101.
Further, the SIM 100 may have a plurality of public key (public key certificate) and private key pairs generated or stored. In this case, for example, the communication device 3 may use a pair of a public key (public key certificate) and a private key depending on a communication partner. Further, the communication device 3 may switch to another pair when a public key (public key certificate) and private key pair leaks.

  In the communication device 3, the wireless communication unit 160 may have the functions of the data transmission unit 201 and the data reception unit 202. In this case, the communication device 3 may not include the communication unit 130 separately from the wireless communication unit 160.

  The communication device 3 may be a mobile communication terminal device such as a smartphone or a tablet computer (tablet PC).

  As mentioned above, although embodiment of this invention was explained in full detail with reference to drawings, the specific structure is not restricted to this embodiment, The design change etc. of the range which does not deviate from the summary of this invention are included.

Note that a computer program for realizing the functions of the communication device described above may be recorded on a computer-readable recording medium, and the program recorded on the recording medium may be read into a computer system and executed. Here, the “computer system” may include an OS and hardware such as peripheral devices.
“Computer-readable recording medium” refers to a flexible disk, a magneto-optical disk, a ROM, a writable nonvolatile memory such as a flash memory, a portable medium such as a DVD (Digital Versatile Disc), and a built-in computer system. A storage device such as a hard disk.

Further, the “computer-readable recording medium” means a volatile memory (for example, DRAM (Dynamic DRAM) in a computer system that becomes a server or a client when a program is transmitted through a network such as the Internet or a communication line such as a telephone line. Random Access Memory)), etc., which hold programs for a certain period of time.
The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.
The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

DESCRIPTION OF SYMBOLS 1 ... Communication system, 3-1 and 3-2 ... Communication apparatus, 10 ... Communication carrier database, 40 ... Wireless communication network, 100-1-2 ... SIM, 101 ... Key generation part, 104 ... Encryption processing part, 106 ... Secret key storage unit, 130 ... Communication unit, 140 ... Control unit, 160 ... Wireless communication unit, 201 ... Data transmission unit, 202 ... Data reception unit, 210 ... Public key storage unit

Claims (14)

A subscriber identification unit storing first subscriber identification unit identification information associated with a first telephone number of a communication carrier's communication network;
A communication unit that performs communication via the communication network that is connected using the subscriber identification unit,
The subscriber identification unit includes a secret key storage unit that stores a secret key,
The communication unit uses a communication service for notifying a caller number, which is a telephone number on the caller side, to a communication device on the callee side, and a public key of a pair for the secret key stored in the secret key storage unit To other communication devices,
Communication device. The subscriber identification unit further includes a first encryption processing unit that performs encryption processing of a public key cryptosystem using the secret key stored in the secret key storage unit,
The own communication device
A data transmission unit that transmits transmission data including the data of the result of the cryptographic processing by the first cryptographic processing unit and the first telephone number to the other communication device;
The communication apparatus according to claim 1. The communication unit is stored in the first subscriber identification unit identification information and the secret key storage unit using a communication service for notifying a caller number which is a telephone number on the caller side to a communication device on the callee side. A public key of a pair with respect to the secret key being transmitted to the other communication device,
The communication apparatus according to claim 1. The subscriber identification unit further includes a first encryption processing unit that performs encryption processing of a public key cryptosystem using the secret key stored in the secret key storage unit,
The own communication device
A data transmission unit for transmitting transmission data including the data of the result of the cryptographic processing by the first cryptographic processing unit and the first subscriber identification unit identification information to the other communication device;
The communication apparatus according to claim 3. A subscriber identification unit storing first subscriber identification unit identification information associated with a first telephone number of a communication carrier's communication network;
A communication unit that performs communication via the communication network that is connected using the subscriber identification unit,
The subscriber identification unit includes a secret key storage unit that stores a secret key,
The communication unit uses a communication service for notifying a caller number, which is a telephone number on the caller side, to a communication device on the callee side, and a public key of a pair for the secret key stored in the secret key storage unit To other communication devices,
The communication unit receives a caller ID and a public key by the communication service;
The own communication device
A public key storage unit that stores the public key received by the communication unit in association with the caller number notified by the communication service when the public key is received;
Communication device. The subscriber identification unit further includes a first encryption processing unit that performs encryption processing of a public key cryptosystem using the secret key stored in the secret key storage unit,
The own communication device
A data transmission unit for transmitting transmission data including the data of the result of the cryptographic processing by the first cryptographic processing unit and the first telephone number to the other communication device;
A data receiving unit for receiving received data including data obtained as a result of cryptographic processing of a public key cryptosystem and a second telephone number;
Using the public key stored in the public key storage unit in association with the second telephone number included in the received data received by the data receiving unit, encryption processing of the public key cryptosystem included in the received data A second cryptographic processing unit that performs cryptographic processing on the resulting data;
The communication device according to claim 5, further comprising: A subscriber identification unit storing first subscriber identification unit identification information associated with a first telephone number of a communication carrier's communication network;
A communication unit that performs communication via the communication network that is connected using the subscriber identification unit,
The subscriber identification unit includes a secret key storage unit that stores a secret key,
The communication unit is stored in the first subscriber identification unit identification information and the secret key storage unit using a communication service for notifying a caller number which is a telephone number on the caller side to a communication device on the callee side. A public key of a pair with respect to the secret key is transmitted to another communication device,
The communication unit receives a caller number, a public key, and second subscriber identification unit identification information by the communication service;
The own communication device
A public key storage unit that stores the public key received by the communication unit in association with the second subscriber identification unit identification information received by the communication unit when the public key is received;
Communication device. The subscriber identification unit further includes a first encryption processing unit that performs encryption processing of a public key cryptosystem using the secret key stored in the secret key storage unit,
The own communication device
A data transmission unit for transmitting transmission data including the data of the result of the cryptographic processing by the first cryptographic processing unit and the first subscriber identification unit identification information to the other communication device;
A data receiving unit that receives received data including data obtained as a result of cryptographic processing of a public key cryptosystem and second subscriber identification unit identification information;
Using the public key stored in the public key storage unit in association with the second subscriber identification unit identification information included in the received data received by the data receiving unit, the public key encryption included in the received data A second cryptographic processing unit that performs cryptographic processing on the data resulting from the cryptographic processing of the scheme;
The communication device according to claim 7, further comprising: A communication unit that receives a caller number and a public key by a communication service that notifies a caller number that is a telephone number of a caller to a communication device of a callee;
A public key storage unit that stores a public key received by the communication unit in association with a caller number notified by the communication service when the public key is received;
A communication device comprising: A data receiving unit that receives received data including data and a telephone number as a result of cryptographic processing of a public key cryptosystem;
Using the public key stored in the public key storage unit in association with the telephone number included in the received data received by the data receiving unit, the result of the cryptographic processing result of the public key cryptosystem included in the received data A second cryptographic processing unit that performs cryptographic processing on the data;
The communication device according to claim 9, further comprising: A communication unit that receives a caller number, a public key, and subscriber identification unit identification information by a communication service that notifies a caller number that is a telephone number on the caller side to a communication device on the callee side;
A public key storage unit that stores a public key received by the communication unit in association with subscriber identification unit identification information received by the communication unit when the public key is received;
A communication device comprising: A data receiving unit for receiving received data including data obtained as a result of cryptographic processing of a public key cryptosystem and subscriber identification unit identification information;
Using the public key stored in the public key storage unit in association with the subscriber identification unit identification information included in the received data received by the data receiving unit, encryption of the public key cryptosystem included in the received data A second cryptographic processing unit for performing cryptographic processing on the data resulting from the processing;
The communication device according to claim 11, further comprising: A subscriber identification unit storing first subscriber identification unit identification information associated with a first telephone number of a communication carrier's communication network;
A communication unit for performing communication via the communication network connected using the subscriber identification unit;
In a communication method of a communication device comprising a public key storage unit,
The subscriber identification unit stores a secret key, and stores a secret key;
About the secret key stored in the subscriber identification unit by the secret key storing step by using a communication service in which the communication unit notifies a caller number which is a telephone number on the caller side to a communication device on the callee side A public key sending step of sending the public key of the pair of
A public key receiving step in which the communication unit receives a caller number and a public key by the communication service;
A public key storage step in which the public key storage unit stores the public key received in the public key reception step in association with the caller number notified by the communication service when the public key is received;
Including a communication method. A subscriber identification unit storing first subscriber identification unit identification information associated with a first telephone number of a communication carrier's communication network;
A communication unit for performing communication via the communication network connected using the subscriber identification unit;
In a communication method of a communication device comprising a public key storage unit,
The subscriber identification unit stores a secret key, and stores a secret key;
The communication unit uses a communication service for notifying a caller number, which is a caller's telephone number, to a callee communication device, and uses the first subscriber identification unit identification information and the secret key storage step to perform the subscription. A public key transmission step of transmitting a pair of public keys for the secret key stored in the person identification unit to another communication device;
A public key receiving step in which the communication unit receives a caller number, a public key, and second subscriber identification unit identification information by the communication service;
The public key storage unit stores the public key received by the public key receiving step in association with the second subscriber identification unit identification information received by the public key receiving step when the public key is received. Steps,
Including a communication method.

Images