JP4069666B2 - Wireless data communication device - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a wireless data communication apparatus that receives, stores, and displays information provided via a wireless communication path, and more particularly, wireless data communication that guarantees that the received information is actually provided by the information provider himself / herself. Relates to the device.
[0002]
[Prior art]
With the widespread use of wireless data communication devices such as mobile phones and PHS (Personal Handy Phone System), communication services for connecting to the Internet using wireless communication have become widespread. In such communication services, telephone companies often served as Internet providers. In Internet communication, a terminal specifies a URL of a server that provides information and sends a request to acquire information. Therefore, the URL of the server is input each time or registered in advance in an address book or the like. There was a need.
[0003]
On the other hand, Japanese Patent Application Laid-Open No. 11-68965 discloses an information distribution technique using a broadcast channel. This is a method of transmitting information to a wireless data communication apparatus existing in a service area using a broadcast channel when the service is provided in the area by a relatively narrow wireless zone. This method uses a control broadcast channel that has been conventionally used for a base station to call a terminal, and the terminal receives passively broadcast information.
[0004]
Such a conventional method can realize a service of automatically receiving data when a wireless data communication device (mobile phone) that receives information comes close to a service area of an information provider that provides information. Therefore, there is a need for means for confirming whether the information received at this time is really provided by the information provider and whether the information has been altered by a third party.
[0005]
As a method for confirming whether the information is reliable, there is a method using publicly known public key cryptography. The authentication method using public key cryptography means that information distributed by the information provider is signed with a secret key, and the terminal that receives the information is disclosed by the information provider from a trusted certificate authority that is different from the communication partner or information provider. In this method, a key is obtained, and an electronic signature attached to information provided by an information provider is decrypted and authenticated.
[0006]
The electronic signature is a method for verifying identity verification and tampering using public key cryptography. That is, the information provider keeps his / her private key secretly, encrypts the information to be provided with the private key, and forms an electronic signature. The information receiving terminal that has received the electronic signature decrypts the ciphertext that has been digitally signed with the public key that is disclosed by the information provider, and checks whether the decrypted text matches the information provided by the information provider. It is possible to confirm that the electronic signature is signed with the private key of the person and has not been tampered with. This is because the ciphertext encrypted with a certain private key cannot be decrypted correctly except by the corresponding public key, and it takes a lot of time to guess the private key from the public key. It is based on the basic property of public key generation that is difficult in practice. However, when a public key published by an information provider is directly received from a communication partner or an information provider, a third party can impersonate the information provider. Therefore, it is necessary to obtain a public key from a trusted certificate authority. If the certificate authority is unknown, it is necessary to obtain the public key of the certificate authority from another reliable certificate authority. As typical public key cryptography, RSA (Rivest-Shamir-Adleman) cryptography, elliptic curve cryptography and the like are known.
[0007]
[Problems to be solved by the invention]
However, in order to start communication with a trusted certificate authority, it is necessary to open a communication path such as the Internet separately from the wireless communication path that is sending and receiving information, so the received information is stored after the authentication of the electronic signature. I had to do it. For this reason, when displaying the received information, there is a problem that reliable information and information (unauthenticated) that cannot be confirmed are mixed. In addition, even when the authentication of the received information fails, the information is still stored and mixed with the information described above.
[0009]
[Means for Solving the Problems]
In order to solve the above-described problem, a wireless data communication device according to the present invention includes a storage unit that stores reception information received by a wireless communication unit via a wireless communication path, and displays the received information stored in the storage unit. A display data creation unit that creates possible data and displays it on a display unit, wherein the wireless communication unit obtains a public key from a certificate authority via the wireless communication path, and is included in the received information the electronic signature decrypted by the public key includes a signature authentication unit for authenticating that the storage unit, the stored as signed signature authentication history information when the authentication unit is successfully authenticated, the display data creating unit, the Referring to signature authentication history information stored in the storage unit, only by using the received information the authentication is successful, creates the displayable data, wireless communication for receiving the reception information, the Characterized in that than wireless communication for request a Hirakikagi communicating over wireless communication channel is a short-range wireless.
[0010]
The wireless data communication apparatus according to claim 2 , wherein the storage unit stores the signature authentication history information as unauthenticated when the wireless communication unit receives the wireless communication unit via the wireless communication path, and the signature authentication unit is authenticated. In the case of failure, the signature authentication history information is stored as an authentication failure, and the display data creation unit creates the displayable data with reference to the signature authentication history information stored in the storage unit. To do. According to a third aspect of the present invention, the wireless data communication apparatus includes a control unit that deletes received information stored in the storage unit when the signature authentication unit fails in authentication.
[0011]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, an embodiment of the present invention will be described based on the drawings as an example applied to a wireless data communication apparatus (for example, a mobile phone).
[0012]
FIG. 2 is a diagram showing a network around the present invention. In FIG. 2, 19 is a wireless data communication device, 20 is a wireless communication channel, 21 is a wireless information providing device, 22 is a wireless packet switching network such as a PDC (Personal Digital Cellular) system, 23 is the Internet, and 24 is an information provider. A terminal, 25 is an http server that provides a home page of an information provider, 26 is a server of an authentication station used by the present invention, 27 is a wireless base station, and 28 is a wireless communication path between the wireless base station 27 and the terminal in mobile communication. It is.
FIG. 1 is a block diagram of a wireless data communication apparatus showing a preferred embodiment of the present invention. In FIG. 1, 1 is a wireless communication unit that performs wireless communication with the wireless information providing device 21 and the wireless packet switching network 22, 2 is a storage unit that stores information received from the wireless information providing device 21, 3 is a key operation unit, 4 is a display data creation unit, 5 is a liquid crystal display unit, 6 is a signature authentication unit, 10 is an arithmetic processing unit (CPU), 11 is a RAM, 12 is a ROM, 13 is a bus, and 14 is an LCD controller.
[0013]
The wireless communication unit 1 in FIG. 1 communicates with the wireless information providing apparatus 21 via the wireless communication path 20. An outline of information received from the wireless information providing apparatus 21 via the wireless communication unit 1 and information with an electronic signature are stored in the storage unit 2. The wireless communication unit 1 and the storage unit 2 are coupled via a bus 13, and the key operation unit 3, the arithmetic processing unit 10, the RAM 11, the ROM 12, and the LCD controller 14 are further coupled to the bus 13.
[0014]
The storage unit 2 is a non-volatile memory and is retained even when the main power of the main body of the wireless data communication device 19 is turned off. When the information received from the wireless information providing apparatus 21 is stored in the storage unit 2, the authentication history information of the electronic signature of the received information is set to a value meaning “unauthenticated” and stored in association with it.
[0015]
The display data creation unit 4 creates and supplies data to be displayed on the liquid crystal display unit 5 from the data stored in the RAM 11 and the storage unit 2. In order to create various displayable data according to the operation status of the apparatus, the display data creation unit 4 is indicated by a dotted line including the arithmetic processing unit 10, the RAM 11, the ROM 12, and the liquid crystal controller 14. The operation of the system of FIG. 1 is described by a program stored in the ROM 12 and is controlled by the operation of the arithmetic processing unit 10. The arithmetic processing unit 10 uses the RAM 11 as a temporary storage for work.
[0016]
Next, the operation of this embodiment will be described. In this embodiment, the wireless data communication device 19 and the wireless information providing device 21 communicate via a wireless communication path 20 that is a short-range wireless. Unlike the radio communication path 28 between the radio base station 27 and the terminal in the mobile communication, the radio communication path 20 which is a short-range radio is configured so that the radio communication path 20 can communicate only in a relatively narrow range. Radio waves are output with relatively weak transmission power. Therefore, the wireless communication path 20 is established when the wireless information providing apparatus 21 comes close to the wireless data communication apparatus 19. When the wireless communication path 20 is established, the wireless information providing apparatus 21 transmits information provided by the information provider, an outline thereof, and an electronic signature signed by the information provider with a private key to the wireless data communication apparatus 19. The outline of the information is not subject to the signature by the electronic signature, but is attached to notify the identifier of the information provider or classify the information provided.
[0017]
The wireless data communication device 19 in the vicinity of the wireless information providing device 21 starts communication with the wireless information providing device 21, receives the reception information described above, and accumulates the digital signature in the storage unit 2 later.
The user of the wireless data communication device 19 operates this device by pressing a key installed in the key operation unit 3. When a key is pressed, an interrupt occurs in the arithmetic processing unit 10, and the arithmetic processing unit 10 acquires the code of the pressed key. The user can start authentication of unauthenticated received data by operating the key operation unit 3, and can also start display of received data.
[0018]
When the user operates the key operation unit 3 to specify authentication of unauthenticated received data, the authentication history information of the electronic signature is checked from the received information stored in the storage unit 2 and there is unauthenticated received data. For example, the identifier of the information provider is extracted from the received data, and the public key corresponding to the identifier is acquired from the certificate authority 26. Therefore, the wireless communication unit 1 is connected to the wireless packet switching network 22 that can be connected to the Internet 23 via the wireless base station 27. The URL and public key of the server (certificate authority) 26 on the Internet 23 to be accessed as the reliable certificate authority 26 are recorded in the wireless data communication apparatus 19 of the present invention at the time of factory shipment. It can be confirmed whether a malicious third party is impersonating the certificate authority 26. The public key of the information provider is issued by the certificate authority 26, and can be obtained by the terminal 19 that needs to access the certificate authority 26 via the Internet 23 and receiving the identifier of the information provider.
[0019]
After acquiring the public key of the information provider in this way, the signature authenticating unit 6 decrypts the electronic signature of the received data with the public key and performs authentication. Since the function of the signature authentication unit 6 is realized by calculation, the signature authentication unit 6 is shown by a dotted line including the calculation processing unit 10, the RAM 11, and the ROM 12 in FIG.
Next, when the authentication is successful, that is, when it is confirmed that the information received from the wireless information providing device 21 is really signed by the information provider and has not been tampered with, the signature authenticating unit 6 stores the storage unit. The signature authentication history information stored in 2 is rewritten to a value meaning “success”. If the authentication fails, the signature authentication unit 6 deletes the received information. When the public key cannot be obtained from the certificate authority, the signature authentication unit 6 keeps the signature authentication history information of the received information as “unauthenticated”.
[0020]
The user can also specify to display the received list of information on the liquid crystal display device 5 by operating the key operation unit 3. At this time, the display data creation unit 4 refers to the signature authentication history information stored in the storage unit 2, skips the received information that has not been successfully authenticated without using it, and stores data indicating successful authentication. For the received data, list data is created based on the information, and further displayable data is created. For this reason, since the presence of received data that has not been successfully authenticated cannot be recognized by the user, it is possible to automatically suppress display of uncertain and unreliable information or information transmitted by malicious intent.
[0021]
After the authentication is successful and the list data is displayed, the user can operate the key operation unit 3 to retrieve more detailed information provided by the information provider from the http server 25 via the Internet.
It is also possible to create a list data based on the received data in which data indicating “unauthenticated” is stored by referring to the signature authentication history information of the received information by the user's operation. is there. As a result, it is possible to confirm all of the received information that has not yet been acquired or that has not been authenticated. Furthermore, in the above-described embodiment, the reception information that has failed in authentication is set to be deleted, but when authentication fails, the signature authentication history information of the received information is rewritten to a value that means “failure”, and Similarly, a list can be displayed. In this case, when the list is displayed, the data displayed in the list can be collectively deleted by a user operation. Thereby, when the capacity of the storage unit becomes full, the user can easily check and delete unnecessary received information, and the capacity of the storage unit can be secured.
[0022]
In order to set the information provided by the information provider in the wireless information providing apparatus 21, the information provider terminal 24 is used to communicate and set up via the Internet 23 and the wireless packet switching network 22.
In the present embodiment, the wireless information providing apparatus 21 communicates with the wireless data communication apparatus 19 via the wireless communication path 20 that is a short-range wireless communication. The base station 27 may be used. In this case, information is transmitted to the wireless data communication device 19 during standby or communication using the broadcast channel (CCH) or communication channel (TCH).
[0023]
Another object of the present invention is to prevent a mixture of unreliable information and reliable information from being received while receiving various data via a wireless communication path. Systems that are locally limited to narrow areas (wireless LAN and PHS), wireless communication channels are asynchronously shared by many information providers (wireless LAN and Ethernet), and information providers wirelessly communicate A system (Internet) that is not managed by a road provider and can be freely transmitted by anyone, a system that automatically establishes a data communication path when a terminal is in close proximity (wireless LAN), and downloading data for specific data Any system such as a system (so-called push-type communication, notification-type communication, and broadcast) that is executed without request It can also be adapted.
[0024]
【The invention's effect】
According to the wireless data communication apparatus of the present invention, when the received information is unreliable or cannot be confirmed, the information can be automatically suppressed from being displayed on the display unit. Therefore, it is possible to prevent the display of unreliable and unreliable information and information transmitted by malicious intent.
[0025]
Further, by deleting information that has failed authentication as needed, useless operations for deletion are not required. Furthermore, it is possible to effectively use the memory by deleting unnecessary information as needed.
[Brief description of the drawings]
FIG. 1 is a block diagram of a preferred embodiment of a wireless data communication device according to the present invention.
FIG. 2 is a diagram showing a network around the wireless data communication apparatus of the present invention.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 Wireless communication part 2 Memory | storage part 3 Key operation part 4 Display data creation part 5 Liquid crystal display device 6 Signature authentication part 10 Arithmetic processing apparatus 11 RAM
12 ROM
13 bus 14 LCD controller 19 wireless data communication device 20 wireless communication path 21 wireless information providing device 22 wireless packet switching network 23 internet 24 information provider terminal 25 http server 26 providing information provider's home page Server 27 of certification authority to be used Wireless base station 28 Wireless communication path between wireless base station and terminal in mobile communication

Claims (3)

A storage unit that stores reception information received by the wireless communication unit via the wireless communication path; a display data generation unit that generates displayable data from the reception information stored in the storage unit and displays the data on the display unit; In a wireless data communication device having
The wireless communication unit includes a signature authentication unit that obtains a public key from a certificate authority via the wireless communication channel, decrypts the electronic signature included in the received information with the public key, and authenticates the signature. The storage unit includes the signature When the authentication of the authentication unit is successful, it is stored as signature authentication history information, and the display data creation unit refers to the signature authentication history information stored in the storage unit and uses only the received information that has been successfully authenticated. Create the displayable data ,
The wireless data communication apparatus according to claim 1, wherein the wireless communication for receiving the reception information is performed via a wireless communication path that is a short-range wireless communication than the wireless communication for obtaining the public key.    The storage unit stores the signature authentication history information as unauthenticated when the wireless communication unit receives via the wireless communication path, and sets the signature authentication history information as an authentication failure when the authentication of the signature authentication unit fails. The wireless data communication apparatus according to claim 1, wherein the display data creation unit creates the displayable data with reference to signature authentication history information stored in the storage unit.    The wireless data communication apparatus according to claim 1, further comprising a control unit that deletes received information stored in the storage unit when the signature authentication unit fails in authentication.

Images