JP2020120407A - Wireless communication system, server, terminal, wireless communication method, and program - Google Patents

Abstract

To improve the security of communication between a transmission terminal and a reception terminal in a short-range wireless communication system.SOLUTION: A wireless communication system includes: a server that updates a common key at a predetermined timing; and a first terminal that transmits a packet including predetermined information encrypted with the common key updated by the server to a second terminal based on a short-range wireless communication technique. The second terminal receives the packet from the first terminal and decrypts the predetermined information included in the packet using the common key updated by the server.SELECTED DRAWING: Figure 1

Description

The present invention relates to a wireless communication system, a server, a terminal, a wireless communication method, and a program, and in particular, a wireless communication based on a short-range wireless communication technology such as BLE (Bluetooth (registered trademark) Low Energy) that enables communication with extremely low power. The present invention relates to a communication system, a key server that provides a common key used in such wireless communication, a beacon terminal that transmits an advertisement packet, a receiving terminal that receives an advertisement packet, a wireless communication method, and a program.

In recent years, the opportunity to install a beacon terminal as a communication device in a store, an exhibition booth, etc. is increasing. The beacon terminal transmits an advertisement packet containing the identifier of the beacon terminal based on the BLE (Bluetooth Low Energy) technology that enables communication with extremely low power. When a terminal (for example, a smartphone, a tablet terminal, a notebook computer (Personal Computer), etc., hereinafter referred to as a “reception terminal”) approaches a predetermined distance from the beacon terminal, the advertisement packet transmitted from the beacon terminal is received. Then, the application software installed in the receiving terminal in advance extracts the beacon terminal identifier from the advertisement packet and sends the extracted identifier to a predetermined distribution server. The distribution server transmits information such as store product information and exhibition booth product information to the receiving terminal according to the identifier received from the receiving terminal. The receiving terminal displays the information received from the distribution server on the display. This enables, for example, push-type advertisements related to products in stores and products in exhibition booths.

As a related technique of the present invention, Patent Document 1 discloses a technique for communicating between a beacon device and a server using a common key.

Further, in Patent Document 2, in communication between a communication terminal and an electronic device (health device, housing equipment, peripheral device) that is an operation target of the communication terminal, security is provided by using BLE and encryption technology based on a common key. The technology to secure is described.

Further, Patent Document 3 describes a technique in which the service control device generates an authentication key used for communication between itself and the service using device at every arbitrary period and distributes it to the service using device.

Non-Patent Document 1 describes a key derivation function (KDF) for generating a key.

International Publication No. 2015/118971 International Publication No. 2015/111444 JP, 2003-244135, A

3GPP TS 33.401 v13.0.0 (2015-09): "3rd Generation Partnership Project; Technical Specification Group Services and System Aspects; 3GPP System Architecture Evolution (SAE); Security architecture (Release 13)."

The entire disclosures of the above patent documents and non-patent documents are incorporated herein by reference. The following analysis was made by the present inventor.

There is known a technique in which a beacon terminal (hereinafter, also referred to as “transmission terminal”) encrypts information included in an advertisement packet with a common key method. Specifically, the transmitting terminal encrypts information such as the identifier of the transmitting terminal with a common key and then sends it out as an advertisement packet, and the receiving terminal decrypts it with the common key to obtain information such as the identifier of the transmitting terminal. To extract. Here, the common key is generally embedded in hardware in each of the transmitting terminal and the receiving terminal and is difficult to change. In this case, when a malicious person obtains the common key, the information such as the identifier of the transmitting terminal may be decrypted, and the "impersonation" of the transmitting terminal may be possible.

Since the common key is unchanged in the technologies described in Patent Documents 1 and 2, if the common key is leaked, there is a possibility that a security problem may similarly occur.

Patent Document 3 discloses a technique of generating an authentication key used for communication between itself and another device for each arbitrary period. However, when such a technique is applied to a transmitting terminal (beacon terminal) and a receiving terminal that perform communication based on BLE, the transmitting terminal itself generates a common key. However, since it is difficult to establish communication for securely distributing the key between the transmitting terminal and the receiving terminal that perform BLE communication, the key generated or updated by the transmitting terminal is received from the transmitting terminal. There is a problem that it cannot be safely distributed to terminals.

Therefore, it is an issue to improve the security of communication between the transmitting terminal and the receiving terminal in the short-range wireless communication system. An object of the present invention is to provide a wireless communication system, a terminal, a server, a wireless communication method, and a program that contribute to solving the problems.

A wireless communication system according to a first aspect of the present invention uses a server that updates a common key at a predetermined timing and a short-range wireless communication that includes a packet including predetermined information encrypted using the common key updated by the server. A first terminal for transmitting to a second terminal based on a communication technology, wherein the second terminal receives the packet from the first terminal, and outputs predetermined information included in the packet, Decrypt using the common key updated by the server.

A server according to a second aspect of the present invention provides a key updating unit that updates a common key at a predetermined timing, and a packet including predetermined information encrypted using the common key, based on a short-range wireless communication technology. The key updating unit is provided for a first terminal that transmits and a second terminal that receives the packet from the first terminal and decrypts predetermined information included in the packet using a common key. And a key providing unit that provides the updated common key.

A first terminal according to a third aspect of the present invention includes a key reception unit that receives a common key updated by a server at a predetermined timing, and a packet including predetermined information encrypted using the common key. The encryption unit that generates the packet and the second terminal that receives the packet from the first terminal and decrypts the predetermined information included in the packet using the common key generated by the server. And a packet transmission unit for transmitting the packet based on the short-range wireless communication technology.

A second terminal according to the fourth aspect of the present invention includes a key reception unit that receives a common key updated by a server at a predetermined timing, and a packet including predetermined information encrypted using the common key. A packet receiving unit that receives the packet from the first terminal that transmits based on the short-distance wireless communication technology; and a decrypting unit that decrypts predetermined information included in the packet using the common key. There is.

In a wireless communication method according to a fifth aspect of the present invention, a step in which a server updates a common key at a predetermined timing, and a first terminal transmits a predetermined key encrypted using the common key updated by the server. Transmitting a packet including information based on a short-range wireless communication technology, a second terminal receives the packet from the first terminal, and the server updates predetermined information included in the packet. Decrypting using the shared key.

A wireless communication method according to a sixth aspect of the present invention is a short-range wireless communication technology in which a server updates a common key at a predetermined timing and a packet including predetermined information encrypted using the common key. To a first terminal which transmits based on the above, and a second terminal which receives the packet from the first terminal and decrypts predetermined information contained in the packet using a common key. Providing the shared secret key.

A wireless communication method according to a seventh aspect of the present invention provides a step in which a first terminal receives a common key updated by a server at a predetermined timing, and predetermined information encrypted using the common key. Generating a packet containing the packet, and receiving the packet from the first terminal, and decrypting predetermined information contained in the packet using the common key generated by the server, to the second terminal, Transmitting the packet based on near field communication technology.

A wireless communication method according to an eighth aspect of the present invention provides a step in which a second terminal receives a common key updated by a server at a predetermined timing, and predetermined information encrypted using the common key. The method further includes the steps of receiving the packet from a first terminal that transmits the packet including the packet based on a short-range wireless communication technology, and decrypting predetermined information included in the packet using the common key.

A program according to a ninth aspect of the present invention performs a process of updating a common key at a predetermined timing and a packet including predetermined information encrypted using the common key, based on a short-range wireless communication technique. Providing the updated common key to the first terminal and the second terminal that receives the packet from the first terminal and decrypts the predetermined information included in the packet using the common key And the server to execute the processing.

A program according to a tenth aspect of the present invention, for a computer provided in a first terminal, a process of accepting a common key updated by a server at a predetermined timing, and encrypted using the common key. A step of generating a packet including the predetermined information, and a second step of receiving the packet from the first terminal and decrypting the predetermined information included in the packet using a common key generated by the server. And causing the terminal to execute a process of transmitting the packet based on the short-range wireless communication technology.

A program according to an eleventh aspect of the present invention is a process in which a computer provided in a second terminal receives a common key updated by a server at a predetermined timing, and is encrypted using the common key. Processing for receiving the packet from the first terminal that transmits a packet including predetermined information based on the short-range wireless communication technology, and processing for decrypting the predetermined information included in the packet using the common key And execute.

The program can also be provided as a program product recorded in a non-transitory computer-readable storage medium.

According to the wireless communication system, the server, the terminal, the wireless communication method, and the program according to the present invention, it is possible to improve the security of communication between the transmitting terminal and the receiving terminal in the short-range wireless communication system.

It is a figure which illustrates the structure of the radio|wireless communications system which concerns on one Embodiment. It is a figure which illustrates the other structure of the radio|wireless communications system which concerns on one Embodiment. It is a block diagram which illustrates the composition of the server concerning one embodiment. It is a block diagram which illustrates the composition of the 1st terminal (transmission terminal) concerning one embodiment. It is a block diagram which illustrates the composition of the 2nd terminal (receiving terminal) concerning one embodiment. It is a figure which illustrates the structure of the radio|wireless communications system which concerns on 1st Embodiment. It is a block diagram which illustrates the composition of the radio communications system concerning a 1st embodiment. FIG. 6 is a sequence diagram illustrating an operation of distributing a common key to beacon terminals in the wireless communication system according to the first embodiment. FIG. 6 is a sequence diagram illustrating an operation of distributing a common key to receiving terminals in the wireless communication system according to the first embodiment. FIG. 6 is a sequence diagram illustrating an operation of authenticating a receiving terminal in the wireless communication system according to the first embodiment. It is a block diagram which illustrates the composition of the radio communications system concerning a 2nd embodiment. FIG. 11 is a sequence diagram illustrating an operation of distributing a common key to beacon terminals in the wireless communication system according to the second embodiment. It is a block diagram which illustrates the composition of the radio communication system concerning a 3rd embodiment. FIG. 11 is a sequence diagram illustrating an operation of distributing a common key to receiving terminals in the wireless communication system according to the third embodiment.

First, an outline of one embodiment will be described. Note that the reference numerals in the drawings attached to this outline are merely examples for helping understanding, and are not intended to limit the present invention to the illustrated modes.

FIG. 1 is a diagram illustrating a configuration of a wireless communication system according to an embodiment. Referring to FIG. 1, the wireless communication system includes a server 2 (for example, a key server) that updates a common key at a predetermined timing, and predetermined information (for example, a beacon terminal) encrypted using the common key updated by the server 2. First, a packet (for example, an advertisement packet) including the terminal 4) is transmitted to the second terminal 6 (for example, a receiving terminal) based on a short-range wireless communication technology (for example, BLE (Bluetooth Low Energy)). Terminal 4 (for example, a beacon terminal). Here, the second terminal 6 receives the packet from the first terminal 4 and decrypts the predetermined information included in the packet using the common key updated by the server 2.

According to this wireless communication system, it is possible to improve the security of communication between the terminal 4 on the transmitting side and the terminal 6 on the receiving side in the short-range wireless communication system. This is because the common key used by the terminal 4 to encrypt the predetermined information included in the packet and the common key used by the terminal 6 for decryption is updated by the server 2 at a predetermined timing. However, this is because the security problem occurs only temporarily.

FIG. 2 is a diagram illustrating another configuration of the wireless communication system according to the embodiment. Referring to FIG. 2, the wireless communication system further includes a relay station 8 that relays the common key updated by the server 2. At this time, the first terminal 4 (for example, a beacon terminal) receives the common key updated by the server 2 via the relay station 8 (for example, connectable to a WAN (Wide Area Network)). According to such a wireless communication system, this is the case where the first terminal 4 cannot directly communicate with the server 2 (for example, when the terminal 4 which is a beacon terminal cannot be connected to a LAN (Local Area Network)/WAN (Wide Area Network)). However, it becomes possible to update the common key used by the first terminal 4 for encryption.

Here, the relay station 8 can receive the common key updated by the server 2 from the server 2 via SSL (Secure Socket Layer) communication established between the server 2 and the relay station 8. Further, the relay station 8 may display the common key received from the server 2. Further, the first terminal 4 may accept a manual input of the common key by the user who refers to the common key displayed by the relay station 8. According to such a wireless communication system, the common key updated by the server 2 can be safely distributed to the first terminal 4 on the assumption that the user who inputs the common key is reliable.

Furthermore, the second terminal 6 (for example, the receiving terminal) may receive the common key updated by the server 2 from the server 2 via the SSL communication established between the server 2 and the second terminal 6. Good. According to this wireless communication system, the common key updated by the server 2 can be safely distributed to the second terminal 6.

FIG. 3 is a block diagram illustrating the configuration of the server 2 (for example, a key server) according to the embodiment. Referring to FIG. 3, the server 2 uses a key update unit 10 that updates a common key at a predetermined timing and a packet (for example, an advertisement packet) including predetermined information encrypted using the common key, at a short distance. A first terminal (terminal 4 in FIG. 1 or FIG. 2) that transmits based on a wireless communication technology (for example, BLE), and a packet received from the first terminal, and predetermined information included in the packet is transferred to a common key. The key providing unit 12 that provides the common key updated by the key updating unit 10 to the second terminal (the terminal 6 in FIG. 1 or 2) that decrypts using the.

FIG. 4 is a block diagram illustrating the configuration of the terminal 4 (for example, a beacon terminal) according to the embodiment. Referring to FIG. 4, the terminal 4 includes a key reception unit 14 that receives a common key updated by a server (server 2 in FIG. 1 or 2) at a predetermined timing, and a predetermined key encrypted using the common key. An encryption unit 16 that generates a packet (for example, an advertisement packet) that includes information (for example, the identifier of the terminal 4) and a packet that is received from the first terminal 4 and the server generates predetermined information included in the packet. A packet transmitting unit 18 for transmitting a packet to the second terminal (the terminal 6 in FIG. 1 or FIG. 2) for decrypting using the shared key based on the short-range wireless communication technology (for example, BLE). ing.

FIG. 5 is a block diagram illustrating the configuration of the terminal 6 (for example, the receiving terminal) according to the embodiment. Referring to FIG. 5, a key reception unit 20 that receives a common key updated by a server (server 2 in FIG. 1 or FIG. 2) at a predetermined timing, and a packet including predetermined information encrypted using the common key. A packet receiving unit 22 for receiving a packet from a first terminal (terminal 4 in FIG. 1 or FIG. 2) that transmits a packet based on a short-range wireless communication technology, and predetermined information included in the packet using a common key. And a decoding unit 24 for decoding.

According to the server 2 (FIG. 3), the terminal 4 (FIG. 4), or the terminal 6 (FIG. 5), communication between the terminal 4 on the transmitting side and the terminal 6 on the receiving side in the short-range wireless communication system. Security can be improved. This is because the common key used by the terminal 4 to encrypt the predetermined information included in the packet and the common key used by the terminal 6 for the decryption is updated by the server 2 at a predetermined timing. Even if there is, the security problem only occurs temporarily.

As described above, according to one embodiment, for example, information included in an advertisement packet of a beacon terminal (for example, an identifier of a beacon terminal) is encrypted by a common key method, and the common key is updated periodically to generate a transmitter ( The security can be enhanced by distributing it to the beacon terminal) and the receiver (BLE receiving terminal). Further, according to one embodiment, the key can be safely (for example, SSL) distributed between the server 2 that updates the key and the relay station 8 or the terminal 6, and the technique described in Patent Document 2 can be used. There is no problem that the generated key cannot be safely distributed, as in the case of applying.

<Embodiment 1>
Next, the wireless communication system according to the first embodiment will be described in detail with reference to the drawings.

[Constitution]
FIG. 6 is a diagram illustrating a configuration of the wireless communication system according to the present embodiment. Referring to FIG. 6, the wireless communication system includes a key server 32, a relay station 38, a beacon terminal 34, and a receiving terminal 36. The key server 32 and the relay station 38 are connected via a WAN (Wide Area Network). Similarly, the key server 32 and the receiving terminal 36 are also connected via WAN. On the other hand, the beacon terminal 34 and the receiving terminal 36 communicate with each other based on a short-range wireless communication technology (here, as an example, a BLE (Bluetooth Low Energy) technology).

The key server 32 updates the common key used in the BLE communication between the beacon terminal 34 and the receiving terminal 36 at a predetermined timing. The relay station 38 relays the common key updated by the key server 32 to the beacon terminal 34. The beacon terminal 34 receives the common key updated by the key server 32 via the relay station 38. The beacon terminal 34 transmits an advertisement packet containing the identifier of the beacon terminal 34 encrypted using the common key updated by the key server 32 based on BLE. The receiving terminal 36 receives the advertisement packet from the beacon terminal 34, and decrypts the identifier of the beacon terminal 34 included in the advertisement packet using the common key updated by the key server 32. The application software pre-installed in the receiving terminal 36 sends the identifier of the beacon terminal 34 extracted from the advertisement packet to a predetermined distribution server (not shown), and the distribution server sends the product in the store according to the identifier. Receive information such as information and product information on exhibition booths.

FIG. 7 is a block diagram illustrating the configuration of each device included in the wireless communication system illustrated in FIG. Hereinafter, the detailed configurations of the key server 32, the relay station 38, the beacon terminal 34, and the receiving terminal 36 will be described with reference to the block diagram of FIG. 7.

Referring to FIG. 7, the key server 32 includes a key updating unit 40 and a key providing unit 42.

The key update unit 40 updates the common key at a predetermined timing (for example, a fixed cycle). The key updating unit 40 may use a message digest obtained by inputting a code assigned to each business operator and a common key before updating into a one-way hash function as a message and a key, respectively, as a common key after updating. .. The key updating unit 40 can use the following function as an example of the one-way hash function.

derived key = HMAC-SHA-256(key, S)

Here, HMAC-SHA-256 is a one-way hash function for generating a Hash Message Authentication Code (HMAC). The one-way hash function has the property that the input cannot be read from the generated code (irreversibility). The message digest (derived key) on the left side is the updated common key. The input key on the right side is the previous common key. The input S is a message for mixing the keys, and here, it is assumed that the code is uniquely assigned to each business operator (for example, 6 octets, that is, 48 bits). Note that the length of the common key can be set to 16, 24 or 32 octets, that is, 128, 192 or 256 bits, for example.

The key updating unit 40 generates the first common key based on, for example, a pseudo random number. On the other hand, when updating the key, the key updating unit 40 substitutes the previous common key into the input key on the right side of the above equation, and obtains the updated key as the derived key. In addition, when the common key is generated each time based on the pseudo random number, there is a possibility that the random number generation algorithm, the random number, and the common key generated from the random number may be guessed. However, by generating a new key using the immediately preceding key as in the present embodiment, it becomes difficult to guess the common key and it is possible to generate the common key safely.

The frequency at which the key updating unit 40 updates the common key (that is, the validity period of the common key) can be set to about several days, for example. In addition, although there is an advantage that the labor of renewing the key is reduced if the validity period of the common key is lengthened, there is a trade-off relationship that the state in which the security is compromised is prolonged when the common key is leaked.

The key providing unit 42 provides the common key updated by the key updating unit 40 to the beacon terminal 34 via the relay station 38 and also to the receiving terminal 36. Here, the key providing unit 42 may also notify the expiration date of the common key when providing the common key to the relay station 38 and the receiving terminal 36. Further, the key providing unit 42 may transmit the common key updated by the key updating unit 40 to the relay station 38 via SSL (Secure Socket Layer) communication established with the relay station 38. Similarly, the key providing unit 42 may transmit the common key updated by the key updating unit 40 to the receiving terminal 36 via the SSL communication established with the receiving terminal 36.

Referring to FIG. 7, the relay station 38 includes a key reception unit 56 and a display unit 58. The key receiving unit 56 receives the common key from the key providing unit 42 of the key server 32. The display unit 58 displays the common key received by the key reception unit 56 on a display or the like.

Referring to FIG. 7, the beacon terminal 34 includes a key reception unit 44, an encryption unit 46, and a packet transmission unit 48.

The key reception unit 44 receives the common key updated by the key server 32 via the relay station 38. Specifically, the key receiving unit 44 receives a manual input (for example, keyboard input) of the common key by the user who refers to the common key displayed on the display unit 58 of the relay station 38.

The encryption unit 46 encrypts the identifier of the beacon terminal 34 using the common key accepted by the key acceptance unit 44, and generates an advertisement packet including the encrypted identifier. The packet transmission unit 48 transmits the advertisement packet generated by the encryption unit 46 to the reception terminal 36 based on a short-range wireless communication technique such as BLE.

Referring to FIG. 7, the receiving terminal 36 includes a key receiving unit 50, a packet receiving unit 52, and a decrypting unit 54. The key receiving unit 50 receives the common key updated by the key server 32 and the expiration date thereof. Here, the key receiving unit 50 may receive the common key updated by the key server 32 from the key server 32 via SSL communication established between the key server 32 and the receiving terminal 36. Further, the key reception unit 50 may obtain a new common key from the key server 32 when the expiration date assigned to the common key updated by the key server 32 has expired. The packet receiving unit 52 receives the advertisement packet from the beacon terminal 34. The decryption unit 54 decrypts the identifier of the beacon terminal 34 included in the advertisement packet using the common key received by the key reception unit 50.

[motion]
Next, the operation of the wireless communication system according to the present embodiment will be described with reference to the drawings.

FIG. 8 is a sequence diagram illustrating an operation of distributing the common key from the key server 32 to the beacon terminal 34.

Referring to FIG. 8, the key updating unit 40 of the key server 32 generates a common key using a pseudo random number (step A1).

Next, the key providing unit 42 of the key server 32 and the key receiving unit 56 of the relay station 38 establish SSL communication (step A2). At this time, the server certificate for the key server 32 and the client certificate for the relay station 38 are used. Communication based on SSL is publicly known, and detailed description thereof will be omitted.

When the SSL communication is established, the key providing unit 42 of the key server 32 transmits the common key to the key receiving unit 56 of the relay station 38 (step A3).

The display unit 58 of the relay station 38 displays the common key received by the key reception unit 56 on a display or the like (step A4).

The key receiving unit 44 of the beacon terminal 34 receives the input of the common key from the user who has referred to the common key displayed on the relay station 38 (for example, via the ten-key pad) (step A5).

The sequence (steps A1 to A5) of FIG. 8 is repeated each time the key updating unit 40 of the key server 32 updates the common key at a predetermined timing (for example, a fixed cycle).

FIG. 9 is a sequence diagram illustrating an operation of distributing the common key from the key server 32 to the receiving terminal 36.

Referring to FIG. 9, the packet receiving unit 52 of the receiving terminal 36 receives the advertisement packet including the encrypted identifier of the beacon terminal 34 from the packet transmitting unit 48 of the beacon terminal 34 (step B1).

Next, the decryption unit 54 of the receiving terminal 36 decrypts the identifier of the beacon terminal 34 using the common key (step B2).

When the expiration date assigned to the common key updated by the key server 32 has expired (step B3), the key reception unit 50 performs a new common key from the key server 32 by the following operations (steps B4 to B6). get.

First, the key server 32 authenticates the receiving terminal 36 (step B4).

FIG. 10 is a sequence diagram illustrating an authentication operation of the receiving terminal 36. Here, as an example of the authentication procedure, RADIUS authentication (IEEE802.1X authentication) can be used.

Referring to FIG. 10, the receiving terminal 36 sends an authentication request to the key server 32 (step C1).

Next, the key server 32 transmits an authentication request to an authentication server (also called a RADIUS server, not shown in FIGS. 6 and 7) (step C2).

The authentication server verifies whether the receiving terminal 36 belongs to a member registered in advance (step C3).

If the receiving terminal 36 has already been registered, the authentication server sends a notification of "authentication OK" to the key server 32 (step C4).

Upon receiving the notification of "authentication OK", the key server 32 further transmits the notification to the receiving terminal 36 (step C5).

With the above procedure, the authentication of the receiving terminal 36 by the key server 32 (step B4 in FIG. 9) is completed.

Returning to FIG. 9, the key providing unit 42 of the key server 32 and the key receiving unit 50 of the receiving terminal 36 establish SSL communication (step B5). At this time, the server certificate for the key server 32 and the client certificate for the receiving terminal 36 are used. Communication based on SSL is publicly known, and detailed description thereof will be omitted.

When the SSL communication is established, the key providing unit 42 of the key server 32 transmits the common key to the key receiving unit 50 of the receiving terminal 36 (step B6).

The decryption unit 54 of the reception terminal 36 decrypts the information included in the advertisement packet using the updated common key received by the key reception unit 50 (step B7).

[effect]
According to the wireless communication system of the present embodiment, it is possible to improve the security of communication between the beacon terminal 34 and the receiving terminal 36 that perform BLE communication. This is because the beacon terminal 34 uses the identifier of the beacon terminal 34 included in the advertisement packet to be encrypted, and the common key used by the receiving terminal 36 for decryption is updated by the key server 32 at a predetermined timing. Therefore, even if the common key is leaked, the security problem only occurs temporarily.

Further, in this embodiment, the relay station 38 that relays the common key updated by the key server 32 is provided, and the beacon terminal 34 passes the common key updated by the key server 32 via the relay station 38 connectable to the WAN. Accept. As a result, even if the beacon terminal 34 cannot connect to a LAN (Local Area Network)/WAN (Wide Area Network) or the like, it is possible to update the common key used by the beacon terminal 34 for encryption.

Further, the relay station 38 can receive the common key from the key server 32 via the SSL communication established between the key server 32 and the relay station 38. The receiving terminal 36 also receives the common key from the key server 32 via SSL communication established between the receiving terminal 36 and the key server 32. As a result, the common key updated by the key server 32 can be safely distributed to the beacon terminal 34 and the receiving terminal 36.

<Embodiment 2>
Next, a wireless communication system according to the second embodiment will be described in detail with reference to the drawings. In the first embodiment, the user manually sends the key from the relay station to the beacon terminal. In the present embodiment, the key distribution from the relay station to the beacon terminals is automated.

[Constitution]
FIG. 11 is a diagram illustrating a configuration of the wireless communication system according to this embodiment. Referring to FIG. 11, the wireless communication system includes a key server 32, a relay station 39, a beacon terminal 35, and a receiving terminal 36. The configurations of the key server 32 and the receiving terminal 36 are the same as those in the first embodiment. Below, it demonstrates centering around the difference of this embodiment and 1st Embodiment.

In the present embodiment, a WiFi (Wireless Fidelity) connection setting (for example, WPA2 (WiFi Protected Access 2) encryption setting) based on a passphrase has been completed in advance between the relay station 39 and the beacon terminal 35, and is always available. It is assumed that the connection is established.

Referring to FIG. 11, the relay station 39 of this embodiment includes a key reception unit 56 and a key transmission unit 59. When the key reception unit 56 receives the common key from the key server 32, the key transmission unit 59 notifies the beacon terminal 35 of that fact. Further, when the key transmitting unit 59 receives a request for the common key from the beacon terminal 35, the key transmitting unit 59 transmits the common key to the beacon terminal 35.

Referring to FIG. 11, the beacon terminal 35 of this embodiment includes a key reception unit 45, an encryption unit 46, and a packet transmission unit 48. Upon receiving the notification from the relay station 39 that the relay station 39 has received the common key from the key server 32, the key reception unit 45 requests the relay station 39 for the common key. Further, the key reception unit 45 receives the common key transmitted from the relay station 39 in response to the request, and provides it to the encryption unit 46.

[motion]
Next, an operation of distributing the common key to the beacon terminal 35 in the wireless communication system of the embodiment will be described. FIG. 12 is a sequence diagram illustrating such an operation.

The key server 32 transmits the common key to the relay station 39 via the SSL communication path when the common key is generated (step A1) or when the common key is updated due to expiration of the validity period (steps A2 and A3).

When the key reception unit 56 receives the new or updated common key from the key server 32, the key transmission unit 59 of the relay station 39 notifies the beacon terminal 35 of the issuance of the common key via WiFi (step A6).

Upon receiving this notification, the key reception unit 45 of the beacon terminal 35 requests the relay station 39 for a common key (step A7).

Then, the key transmission unit 59 of the relay station 39 transmits the common key to the beacon terminal 35 via WiFi (for example, WPA2 encrypted), and the key reception unit 45 of the beacon terminal 35 receives the common key (step A8). ..

When the beacon terminal 35 newly receives the common key, the beacon terminal 35 starts to use the received common key. Further, the beacon terminal updates the in-use common key with the received common key when the in-use common key already exists.

[effect]
According to this embodiment, distribution of the common key to the beacon terminals 35 is automated. Therefore, as in the first embodiment, it becomes possible to save the user the trouble of periodically referring to the display of the relay station and manually inputting the common key into the beacon terminal. Further, in the present embodiment, when the common key is distributed to the beacon terminals, SSL communication is used between the key server and the relay station, and WiFi communication encrypted by WPA2 or the like is performed between the relay station and the beacon terminal. To use. This makes it possible to securely distribute the common key.

<Embodiment 3>
Next, a wireless communication system according to the third embodiment will be described in detail with reference to the drawings. In the wireless communication systems according to the first and second embodiments, when the receiving terminal detects expiration of the common key issued or updated by the key server (step B3 in FIG. 9), the receiving terminal receives a new common key from the key server. (Steps B4 to B6). On the other hand, in the present embodiment, when the receiving terminal detects the mismatch of the common key between the beacon terminal and the receiving terminal, the new common key is acquired from the key server. In the present embodiment, as an example, an example in which such a function is applied to the second embodiment will be described. However, such a function can be similarly applied to the first embodiment. In the present embodiment, it is assumed that the beacon terminal holds the latest common key updated by the key server.

[Constitution]
FIG. 13 is a diagram illustrating a configuration of the wireless communication system according to this embodiment. Referring to FIG. 13, the wireless communication system includes a key server 32, a relay station 39, a beacon terminal 60, and a receiving terminal 37. The configurations of the key server 32 and the relay station 39 are similar to those of the second embodiment. Below, it demonstrates centering around the difference of this embodiment and 2nd Embodiment.

With reference to FIG. 13, the beacon terminal 60 of this embodiment includes a key reception unit 45, an encryption unit 47, and a packet transmission unit 48. The encryption unit 47 encrypts the identifier of the beacon terminal 60 using the common key accepted by the key acceptance unit 45. Further, the encryption unit 47 applies a predetermined hash algorithm to the identifier of the beacon terminal 60 to obtain a hash value. Furthermore, the encryption unit 47 generates an advertisement packet including the encrypted identifier and the obtained hash value (for example, including the encrypted identifier with the obtained hash value added to the head). To do. Here, the encryption unit 47 uses, for example, MD5 (Message Digest Algorithm 5), SHA1 (Secure Hash Algorithm 1), SHA-256, SHA-384, SHA-512, and RIPEMD-160 (RACE Integrity Primitives) as hash algorithms. Evaluation Message Digest 160) etc. can be used.

Referring to FIG. 13, the receiving terminal 37 of this embodiment includes a packet receiving unit 52, a decrypting unit 55, and a key receiving unit 50. The decryption unit 55 separates the hash value included in the advertisement packet received by the packet reception unit 52 from the encrypted identifier. The decryption unit 55 also decrypts the encrypted identifier using the common key. Further, the decryption unit 55 applies the same hash algorithm as that used by the encryption unit 47 of the beacon terminal 60 to the decrypted identifier to calculate a hash value. Here, the decryption unit 55 compares the calculated hash value with the hash value extracted from the advertisement packet. When both hash values match, the decryption unit 55 recognizes that the common key held by the beacon terminal 60 and the common key held by the receiving terminal 37 match. On the other hand, when the hash values do not match, the decryption unit 55 determines that the common key held by the beacon terminal 60 and the common key held by the receiving terminal 37 do not match. When it is determined that they do not match, the decryption unit 55 instructs the key reception unit 50 to newly receive the common key from the key server 32. The key receiving unit 50 receives the common key updated by the key server 32 in response to the instruction.

[motion]
Next, the operation of distributing the common key to the receiving terminal 37 in the wireless communication system of the embodiment will be described. FIG. 14 is a sequence diagram illustrating such an operation.

Referring to FIG. 14, the beacon terminal 60 transmits an advertisement packet including the identifier of the beacon terminal 60 encrypted by using the common key and the hash value of the identifier (step B8).

The receiving terminal 37 separates the hash value included in the received advertisement packet from the encrypted identifier, and decrypts the encrypted identifier using the common key (step B9). Further, the receiving terminal 37 applies the same hash algorithm as that of the beacon terminal 60 to the decrypted identifier to calculate a hash value. Here, when the calculated hash value and the hash value included in the advertisement packet do not match, the receiving terminal 37 does not match the common key held by the beacon terminal 60 and the common key held by the receiving terminal 37. (Step B10). Upon receiving the determination, the receiving terminal 37 newly accepts the common key from the key server 32, similarly to the first embodiment (see FIG. 9) (steps B4 to B6).

[effect]
In the present embodiment, when the receiving terminal detects a match between the common key held by the beacon terminal and the common key held by the receiving terminal, the receiving terminal newly receives the common key from the key server. According to such a configuration, it is possible to eliminate the mismatch between the two common keys. In addition, in the present embodiment, the receiving terminal detects the mismatch of the common key based on the advertisement packet received from the beacon terminal. Therefore, when the key server distributes the common key, it is not necessary to notify the expiration date together with the information.

<Modification>
The following modifications can be made to the above embodiment.

In the above embodiment, the configuration in which the common key is distributed to the beacon terminals via the relay station has been described. However, a specific receiving terminal (for example, a receiving terminal of an operator who installed a beacon terminal) of the plurality of receiving terminals assumes the function of the relay station, and the relay station can be omitted.

Further, the key server in the above embodiment can be shared among a plurality of beacon terminals installed by a plurality of businesses. At this time, the key server may generate a separate common key for each different beacon terminal, or may distribute the same common key to a plurality of beacon terminals.

When the common key is updated for a single business, the key server may be omitted and the relay station may function as the key server. Further, in this case, if secure communication can be established between the beacon terminal and the receiving terminal, the relay station is also omitted, the beacon terminal itself updates the common key, and the updated common key is received by the receiving terminal. It can also be distributed to. At this time, the beacon terminal serves not only as an advertiser for generating advertisement packets but also as a key update server.

In the present invention, the following modes are possible.
[Form 1]
This is as in the wireless communication system according to the first aspect.
[Form 2]
A relay station for relaying the common key updated by the server,
The first terminal accepts the common key updated by the server via the relay station,
The wireless communication system according to mode 1.
[Form 3]
The relay station receives a common key updated by the server from the server via SSL (Secure Socket Layer) communication established between the server and the relay station.
The wireless communication system according to mode 2.
[Form 4]
The relay station displays the common key received from the server,
The first terminal receives a common key input by a user,
The wireless communication system according to mode 2 or 3.
[Form 5]
When the relay station receives the common key from the server, it notifies the first terminal of that fact,
The first terminal acquires the common key from the relay station according to the notification,
The wireless communication system according to mode 2 or 3.
[Form 6]
The second terminal receives a common key updated by the server from the server via SSL communication established between the server and the second terminal.
6. The wireless communication system according to any one of modes 1 to 5.
[Form 7]
The server updates the common key at a predetermined cycle,
7. The wireless communication system according to any one of modes 1 to 6.
[Form 8]
The server uses a code assigned to each business operator and a common key before updating as a message and a message digest obtained by inputting the message as a key to a one-way hash function, respectively, as the common key after updating.
8. The wireless communication system according to any one of modes 1 to 7.
[Form 9]
The second terminal acquires a new common key from the server when the expiration date assigned to the common key updated by the server has expired,
9. The wireless communication system according to any one of modes 1 to 8.
[Form 10]
The first terminal transmits a hash value obtained by applying a predetermined hash algorithm to the predetermined information in the packet.
If the hash value included in the packet and the hash value obtained by applying the predetermined hash algorithm to the value obtained by decoding the predetermined information included in the packet do not match, the second terminal is configured to perform the server operation. Get a new common key from
10. The wireless communication system according to any one of modes 1 to 9.
[Form 11]
The first terminal is a beacon terminal that transmits an advertisement packet containing the identifier of the first terminal encrypted using the common key updated by the server based on BLE (Bluetooth Low Energy). Yes,
The second terminal has an application that acquires and displays information from a distribution server using the identifier of the first terminal.
11. The wireless communication system according to any one of modes 1 to 10.
[Form 12]
This is the same as the server according to the second aspect.
[Mode 13]
The key providing unit provides the common key updated by the key updating unit to the first terminal via a relay station that relays the common key;
A server according to mode 12.
[Form 14]
The key providing unit transmits the common key updated by the key updating unit to the relay station via SSL communication established with the relay station,
A server according to mode 13.
[Form 15]
The key providing unit transmits the common key updated by the key updating unit to the second terminal via SSL communication established with the second terminal,
15. The server according to any one of modes 12 to 14.
[Mode 16]
The key updating unit updates the common key at a predetermined cycle,
16. The server according to any one of modes 12 to 15.
[Form 17]
The key update unit, a code assigned to each business and a common key before update, a message digest obtained by inputting a message and a key to the one-way hash function as a key, respectively, and the common key after update,
17. The server according to any one of modes 12 to 16.
[Form 18]
This is as in the case of the first terminal according to the third aspect.
[Form 19]
The key reception unit receives a common key input by a user,
A first terminal according to aspect 18.
[Form 20]
When the key reception unit receives a notification from the relay station that relays the common key updated by the server that the common key has been received from the server, the key reception unit acquires the common key updated by the server from the relay station.
A first terminal according to aspect 18.
[Mode 21] BLE communication by beacon terminal Beacon for transmitting an advertisement packet including the identifier of the first terminal encrypted using the common key updated by the server based on BLE (Bluetooth Low Energy) Is a terminal,
21. The first terminal according to any one of modes 18 to 20.
[Form 22]
This is as in the second terminal according to the fourth aspect.
[Form 23]
The key reception unit receives a common key updated by the server from the server via SSL communication established between the server and the second terminal,
A second terminal according to aspect 22.
[Mode 24]
The key reception unit acquires a new common key from the server when the expiration date assigned to the common key updated by the server has expired,
The second terminal according to the aspects 22 or 23.
[Form 25]
The first terminal transmits a hash value obtained by applying a predetermined hash algorithm to the predetermined information in the packet.
When the hash value included in the packet and the hash value obtained by applying the predetermined hash algorithm to the value obtained by decoding the predetermined information included in the packet do not match, the key receiving unit determines whether the hash value is received from the server. Obtain a new common key,
25. The second terminal according to any one of modes 22 to 24.
[Form 26]
The first terminal is a beacon terminal that transmits an advertisement packet containing the identifier of the first terminal encrypted using the common key updated by the server based on BLE (Bluetooth Low Energy). Yes,
The second terminal has an application that acquires and displays information from a distribution server using the identifier of the first terminal.
The second terminal according to any one of modes 22 to 25.
[Form 27]
This is as in the wireless communication method according to the fifth aspect.
[Form 28]
This is as in the wireless communication method according to the sixth aspect.
[Form 29]
This is as in the wireless communication method according to the seventh aspect.
[Form 30]
This is as in the wireless communication method according to the eighth aspect.
[Form 31]
The program is according to the ninth aspect.
[Form 32]
The program is according to the tenth aspect.
[Form 33]
The program is according to the eleventh aspect.

In addition, all the disclosure contents of the said patent document and a non-patent document shall be rewritten and described in this document with reference. Modifications and adjustments of the exemplary embodiment are possible within the scope of the overall disclosure (including claims) of the present invention and based on the basic technical concept of the invention. Further, various combinations of various disclosed elements (including each element of each claim, each element of each embodiment, each element of each drawing, and the like) or various selections are possible within the scope of the entire disclosure of the present invention. is there. That is, it goes without saying that the present invention includes various variations and modifications that can be made by those skilled in the art according to the entire disclosure including the claims and the technical idea. In particular, with regard to the numerical range described in this specification, any numerical value or small range included in the range should be construed as specifically described even if not otherwise specified.

2 server 4 terminal 6 terminal 8 relay station 10 key update unit 12 key providing unit 14 key accepting unit 16 key accepting unit 16 encrypting unit 18 packet transmitting unit 20 key accepting unit 22 packet receiving unit 24 decrypting unit 32 key server 34, 35, 60 beacon terminal 36, 37 Receiving terminal 38, 39 Relay station 40 Key updating unit 42 Key providing unit 44, 45 Key receiving unit 46, 47 Encryption unit 48 Packet transmitting unit 50 Key receiving unit 52 Packet receiving unit 54, 55 Decoding unit 56 Key receiving Unit 58 display unit 59 key transmission unit

Claims (13)

A server that updates the common key at a predetermined timing,
A first terminal that transmits a packet including predetermined information encrypted using the common key updated by the server to a second terminal based on a short-range wireless communication technique;
A relay station that relays the common key updated by the server,
Equipped with
The relay station displays the common key updated by the server, which is received from the server,
The first terminal receives an input of a common key updated by the server by the user,
The second terminal receives the packet from the first terminal, and decrypts predetermined information included in the packet using a common key updated by the server,
A wireless communication system characterized by the above. The relay station receives a common key updated by the server from the server via SSL (Secure Socket Layer) communication established between the server and the relay station.
The wireless communication system according to claim 1. When the relay station receives the common key from the server, it notifies the first terminal of that fact,
The first terminal acquires the common key from the relay station according to the notification,
The wireless communication system according to claim 1. The second terminal receives a common key updated by the server from the server via SSL communication established between the server and the second terminal.
The wireless communication system according to any one of claims 1 to 3. The server updates the common key at a predetermined cycle,
The wireless communication system according to any one of claims 1 to 4. The server uses a code assigned to each business operator and a common key before updating as a message and a message digest obtained by inputting the message as a key to a one-way hash function, respectively, as the common key after updating.
The wireless communication system according to any one of claims 1 to 5. The second terminal acquires a new common key from the server when the expiration date assigned to the common key updated by the server has expired,
The wireless communication system according to any one of claims 1 to 6. The first terminal transmits a hash value obtained by applying a predetermined hash algorithm to the predetermined information in the packet.
If the hash value included in the packet and the hash value obtained by applying the predetermined hash algorithm to the value obtained by decoding the predetermined information included in the packet do not match, the second terminal is configured to perform the server operation. Get a new common key from
The wireless communication system according to any one of claims 1 to 7. The first terminal is a beacon terminal that transmits an advertisement packet containing the identifier of the first terminal encrypted using the common key updated by the server based on BLE (Bluetooth Low Energy). Yes,
The second terminal has an application that acquires and displays information from a distribution server using the identifier of the first terminal.
The wireless communication system according to any one of claims 1 to 8. A key receiving unit that receives the common key input by the user, which is updated by the server at a predetermined timing and received and displayed by the relay station,
An encryption unit that generates a packet containing predetermined information encrypted using the common key;
The packet is transmitted to the short-range wireless communication technology to the second terminal which receives the packet from the first terminal and decrypts the predetermined information included in the packet using the common key generated by the server. And a packet transmission unit that transmits based on
A first terminal characterized in that. A step in which the server updates the common key at a predetermined timing,
The relay station displaying the server-updated common key received from the server;
A first terminal accepting an input of a common key updated by the server by a user,
A step in which the first terminal transmits a packet including predetermined information encrypted by using the common key updated by the server, based on the short-range wireless communication technology;
A second terminal receives the packet from the first terminal and decrypts predetermined information contained in the packet using a common key updated by the server.
A wireless communication method characterized by the above. A step in which the first terminal receives the input of the common key by the user, which is updated by the server at a predetermined timing and is received and displayed by the relay station;
Generating a packet containing predetermined information encrypted using the common key;
A short-distance wireless communication technique for receiving the packet from the first terminal and decoding the predetermined information included in the packet using a common key generated by the server to the second terminal. Transmitting based on,
A wireless communication method, comprising: A process of accepting a user's input of the common key, which is updated by the server at a predetermined timing with respect to the computer provided in the first terminal and received and displayed by the relay station;
Generating a packet containing predetermined information encrypted using the common key;
A short-distance wireless communication technique for receiving the packet from the first terminal and decoding the predetermined information included in the packet using a common key generated by the server to the second terminal. The process of sending based on
A program characterized by the following.

Images