JP4631289B2 - Communications system - Google Patents

Description

The present invention relates to a communication system and a program for performing communication using a secret key, and particularly to setting of a secret key.

  In recent years, white appliances such as air conditioners and refrigerators, security devices such as intrusion sensors, and home controllers installed in the home are connected wirelessly and connected to a mobile phone via the home controller. In-home network systems have been developed that control devices such as air conditioners and notify security information in the home to a home away from home via a mobile phone.

  However, the wireless network system has a drawback that eavesdropping is relatively easy. For this reason, it is conceivable that the data is stolen or mischievous due to impersonation. For this reason, wireless network systems are often used with security functions such as encryption.

  In order to encrypt data, it is necessary to share a key called a secret key with a communication partner. As a method of sharing this secret key with a communication partner, there is a method of inputting a secret key to each device using an input means such as a keyboard. However, in many white goods home appliances, a keyboard for inputting the secret key is used. The present situation does not have a simple input means.

  As a method of sharing a secret key with a communication partner in a white home appliance that does not have such an input means, there is one described in Patent Document 1. Hereinafter, a conventional example described in Patent Document 1 will be described.

FIG. 6 is a configuration diagram of a conventional communication system. Bluetooth (R) is used as a communication medium. Initially, since the PIN codes (corresponding to the secret key in the present invention) between the home appliance 1 and the access point 3 are different, communication between the two is not established. Therefore, the household electrical appliance 1 performs an inquiry scan for inspecting the presence or absence of a communication device that has issued a connection request to the network. The controller 2 tries to establish communication with the household electrical appliance 1 performing an inquiry scan with the initial value of the PIN code of 1 of the household electrical appliance, which is known in advance. At this time, the controller 2 designates the home appliance 1 as a communication partner and issues an inquiry. The inquiry is supplemented by the home appliance 1, and the PIN code of the home appliance 1 and the controller 2 is the same, and communication is established between them. The controller 2 can be provided with an input device such as a keyboard, and can input the initial value of the PIN code of the home appliance 1 in advance. 4 is a network.
JP 2004-7567 A

  However, in the conventional configuration, it is necessary to input the initial value of the PIN code of the home appliance 101 to the controller 102 in advance, and there is a problem that work becomes difficult when the number of home appliances connected to the network increases. .

  In addition, when distinguishing between devices that require encrypted communication, such as sensor devices related to security, and devices that do not use encrypted communication due to cost requirements, there is no major problem even if tampered with. There was a problem.

The present invention solves the above-mentioned conventional problems, and a secret key is surely transferred by a simple operation, and a mixture of devices that support encryption communication and devices that do not support encryption communication can be mixed in the same network. An object of the present invention is to provide a communication system and a program for enabling the communication system .

It is composed of a parent communication device and a child communication device, and indicates that the parent communication device and the child communication device are the same system from the parent communication device to the child communication device by performing predetermined registration procedures respectively. In a communication system having an identification code registration function for assigning a system identification code and a device identification code indicating individual identification of the slave communication device, when the registration procedure is executed, the master communication device receives from the slave communication device. detecting an identifier indicating whether the cryptographic functions included in the control information in the identification code grant request signal, if the identifier indicates a cryptographic function, for the system identification code and the device identification code and encrypted the private key information formed in one response packet, the response packet to the terminal communication device sets an identifier indicating that it has cryptographic functions at the control information of the response packet It is obtained by a configuration in which signal.

  This makes it possible to pass a secret key with a simple operation, identify devices that support the encryption function and devices that do not support the encryption function, and perform various initial settings in a message format that supports each device. Can be performed.

By using the communication system and program of the present invention, it is possible to mix equipment having no equipment and cryptographic functions with cryptographic functions.

The first invention is composed of a parent communication device and a child communication device, and the parent communication device and the child communication device perform the same registration procedure from the parent communication device to the child communication device respectively. In a communication system having an identification code registration function for assigning a system identification code indicating a system and an apparatus identification code indicating individual identification of the child communication device, when the registration procedure is executed, the parent communication device is: detecting an identifier indicating whether the cryptographic functions included in the control information in the identification code grant request signal from the slave communication device, if the identifier indicates an encryption function, the system identification code and the device identification code and the secret key information for encryption formed in one response packet, sets an identifier indicating that it has cryptographic functions at the control information of the response packet said to said terminal communication device With the construction that transmits the answer packet can be imparted to the private key to the slave radio device having an encryption function with a simple operation.

The second invention is composed of a parent communication device and a child communication device, and the parent communication device and the child communication device perform the same registration procedure from the parent communication device to the child communication device. In a communication system having an identification code registration function for assigning a system identification code indicating a system and a device identification code indicating individual identification of the slave communication device, when the registration procedure is executed, the slave communication device is: sends said identification code grant request signal placed on the control information in the identification code grant request signal for requesting the application of the system identification code and the device identification code an identifier having a cryptographic function to said master communication device, said receiving a response packet from said master communication device for identification code grant request signal, if it is set identifier with a cryptographic function included in the control information of the response packet, the response Packet recognizes that the packet containing the secret key information, with the construction for obtaining the secret key, it is possible to retrieve the private key from the master radio set having an encryption function with a simple operation.

The third invention is composed of a parent communication device and a child communication device, and the parent communication device and the child communication device perform the same registration procedure from the parent communication device to the child communication device respectively. In a communication system having an identification code registration function for assigning a system identification code indicating a system and a device identification code indicating individual identification of the slave communication device, when the registration procedure is executed, the slave communication device is: sends said identification code grant request signal placed on the control information in the identification code grant request signal for requesting the application of the system identification code and the device identification code an identifier having a cryptographic function to said master communication device, said master communication device detects an identifier indicating the presence or absence of the encryption function included in the control information in the identification code grant request signal from the slave communication device, if the identifier indicates a cryptographic function, before Constitute the secret key information for system identification code and the device identification code and encrypted into one of a response packet, the terminal communication sets an identifier indicating that it has cryptographic functions at the control information of the response packet transmitting the response packet to the machine, it slave communicator, if it is set identifier with a cryptographic function included in the control information of the response packet, the response packet is a packet containing the secret key information Is recognized, and the secret key is obtained , so that the master radio having an encryption function can issue the secret key to the slave radio with a simple operation, and the slave radio can obtain the secret key. .

  In a fourth aspect of the invention, prior to data communication, the first communication device transmits a key request signal for requesting the second key to the second communication device, and the second communication device transmits the second request signal to the second communication device. When a key is received, data is scrambled using a secret key shared with the second communication device in advance and a code generated from the second key, and then the scrambled data By creating a packet to which control information including an encryption identifier indicating an encrypted message is added and transmitting the packet, encryption with high confidentiality can be performed with a simple configuration.

  According to a fifth aspect of the present invention, prior to data communication, the second communicator receives a second key from the first communicator in response to a key request signal for requesting a second key from the first communicator. When a signal from the first communication device is received within a predetermined time after being transmitted to the communication device, the encryption identifier included in the control information of the signal is detected and shared with the first communication device in advance. With the configuration in which the received data included in the signal is descrambled using the code generated from the secret key and the second key, it is possible to release a highly confidential cipher with a simple configuration.

  In a sixth aspect of the present invention, prior to data communication, a key request signal for requesting a second key is transmitted from the first communication device to the second communication device, and the second communication device transmits the key request signal. The second key is transmitted to the first communicator, and the second communicator is preliminarily shared between the first communicator and the second communicator, and the second key. After scrambled the transmission data using a code generated from the key, a packet with control information including an encryption identifier indicating that the data is encrypted is added to the scrambled data. When the communication device of 2 receives the signal from the first communication device within a predetermined time after transmitting the second key to the first communication device, the encryption identifier included in the control information of the signal is received. A secret key previously detected and shared with the first communication device By using a configuration in which the received data included in the signal is descrambled using a code generated from the second key, the transmission side can perform highly confidential encryption with a simple configuration, The receiving side can cancel the encryption with high confidentiality.

  In the seventh invention, the identifier indicating that the encryption function is provided and the encryption identifier are shared, so that the two functions can be identified according to the situation without increasing the identifier of the control information area.

  In the eighth aspect of the invention, by sharing the identifier indicating the encryption function and the encryption identifier, the two functions can be identified depending on the situation without increasing the identifier of the control information area.

According to a ninth aspect of the invention, the function of the present invention can be realized with simple hardware by using a program for causing a computer to realize at least a part of the communication system according to any one of the first to eighth aspects.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. Note that the present invention is not limited to the embodiments.

(Embodiment 1)
FIG. 1 is a block diagram of a communication apparatus according to the first embodiment of the present invention.

  In FIG. 1, the wireless communication unit 106 includes a transmission unit 102, a reception unit 103, a code generation unit 104, and a code decoding unit 105. The antenna 101 is connected to a transmission unit 102 and a reception unit 103 constituting the wireless communication unit 106. The code generation unit 104 and the code decoding unit 105 are connected to the home appliance 111. The identifier detection unit 107, the identifier addition unit 109, and the encryption control unit 108 are connected to the wireless communication unit 106. Reference numeral 110 denotes a communication device.

  FIG. 2 shows a system example using the communication apparatus according to the first embodiment of the present invention.

  In FIG. 2, a block composed of the controller 121 and the communication device A 122 is a home controller, and a block composed of the communication device B 123 and the sensor 124 is a network compatible device controlled from the home controller. Although not shown in FIG. 2, the home controller has a touch panel, and the sensor 124 can be controlled by pressing a button on the touch panel. The communication device A 122 constituting the home controller and the communication device B 123 connected to the sensor 124 are connected by a protocol using a specific low power radio wave of 429 MHz band.

  The communication device A 122 or the communication device B 123 in FIG. 2 corresponds to the communication device 110 in FIG. The controller 121 or the sensor 124 in FIG. 2 corresponds to the home appliance 111 in FIG.

  Here, the message structure transmitted and received between the communication device A 122 and the communication device B 123 in FIG. 2 will be described with reference to FIG.

  In FIG. 3, (1) shows the entire data format configuration. In (1) of FIG. 3, section (a) is called a preamble part, and is set to one (bit synchronization signal 1 + frame synchronization signal 1 + data signal 1) in order to cope with a reception method in which a plurality of channels are sequentially scanned and waited. The block is repeatedly transmitted N times as one block. For example, when the receiving side sequentially scans and waits for three channels, two blocks are required for each channel, and thus the block is repeated six times. The section (b) is called an information part. The section C is a signal indicating the end of transmission, but it may not be present. The detailed configuration of data 1 is shown in (2) of FIG. The detailed configuration of data 2 is shown in (3) of FIG. Data 1 includes a receiving device identification code indicating a destination and a partial wireless system identification code which is a part of a wireless system identification code for identifying whether or not the system belongs to itself. The partial radio system identification code is a radio system identification code divided into three parts. Data 2 includes a wireless system identification code and a transmission device identification code indicating a transmission source. Whether it is a message of the system to which it belongs is determined by a wireless system identification code, and whether it is a broadcast is determined by a certain bit of the control code 1 and the pattern of the receiving device identification code.

  The control code 2 of the data 2 includes a plurality of identifiers for identifying various types of information related to transmission / reception of the transmission source. For example, if the communication device of the transmission source has an encryption function, a certain bit of the control code 2 is transmitted with “1”, and if it does not have an encryption function, the bit is set to “0”. To send. The bit is an identifier indicating a cryptographic function.

  Data 1 and data 2 are error control encoded with 1-bit extended BCH (31, 16) code (hereinafter referred to as BCH (32, 16) code) obtained by extending the original data by 1 bit from the BCH (31, 16) code, respectively. After that, scramble coding for performing exclusive OR processing with a 32-bit scramble code is performed.

  As shown in FIG. 3 (4), the data (1) to data (3) to be transmitted and the parity and dummy are scrambled for encryption in the transmission data block of data 2. When scrambled for encryption, the identifier indicating the encryption function of the control code 2 is set to “1”. When encryption is not applied, the identifier indicating the encryption function is set to “0”, and the data (1) to data (3), the parity and the dummy are not scrambled and are put in the transmission data block of data 2 as they are.

  The scrambling for encryption is realized by performing an exclusive OR process on a 16-bit encryption code and 16-bit data. Data (1) to data (3) are 8-bit data blocks. The parity and dummy are each 8 bits. Since scrambling is performed in units of 16 bits, a dummy is inserted when the data to be sent does not become an integral multiple of 16 bits including parity.

An example of a method for creating the 16-bit encryption code will be described below.
(1) Each communication device has a 32-bit secret key common to the system.
(2) A 16-bit public key is set for each communication separately from the 32-bit secret key.
(3) A modulo-2 division process is performed on the 32-bit secret key with the 16-bit public key.
(4) A 16-bit remainder is generated by the processing in (3).
(5) A 16-bit encryption code obtained by the remainder of the 16 bits. Note that the 16-bit quotient obtained by the processing in (3) instead of the remainder can be used as the 16-bit encryption code.

  The communication device on the data receiving side obtains the 16-bit encryption code using the secret key common to the system and the public key set for each communication, and scrambles the received transmission data block. Solved, data (1) to data (3) and parity are taken out. The length of transmission data is described in one block message length, and whether or not a dummy is included can be identified by the information of the one block message length. If there is no error in the parity, the data (1) to data (3) are received as correct data.

  The calculation process for obtaining the encryption code is exactly the same as the calculation process for performing BCH (32, 16) encoding and decoding, and the calculation process for BCH (32, 16) encoding and decoding can be used. Encryption processing can be easily performed without increasing the circuit scale or software scale.

  Various processes for the encryption are performed by the encryption control means 108 in FIG.

  With respect to the communication apparatus configured as described above, the delivery of the secret key will be described with reference to FIGS.

  FIG. 4 is a sequence diagram showing a registration procedure. The communication device A is a parent radio device, and the communication device B is a child radio device.

  Step 1 (ST1): A registration mode transition operation is performed using means such as a switch from the parent radio device or a message from the controller side. Then, the parent wireless device transitions to the registered state, and waits for radio waves from the child wireless device on the wireless channel dedicated to the registered state.

  Step 2 (ST2): A registration mode transition operation is performed using means such as a switch of a slave radio or a message from a sensor device. Then, the slave radio device transitions to the registration state.

  Step 3 (ST3): When the slave radio device transitions to the registration state, the slave radio device wirelessly transmits an identification code provision request signal on a radio channel dedicated to the registration state. At this time, the temporary device identification code of the child wireless device temporarily allocated by the child wireless device is added to the signal to be wirelessly transmitted and transmitted. At this time, if the slave radio device has an encryption function, the identifier indicating the encryption function of the control code 2 shown in FIG.

  Step 4 (ST4): Upon reception of the identification code grant request signal, the master radio device refers to the device identification code table of the slave radio group managed by the parent radio device and has not yet given the device identification code and radio system identification The code is sent on the identification code assignment signal to the device having the temporary device identification code. At this time, if the identifier indicating the encryption function included in the received identification code grant request signal is “1”, the identifier indicating the encryption function of the control code 2 shown in FIG. A 16-bit secret key is added to the allocation signal and transmitted.

  Step 5 (ST5): When the slave radio receives the identification code assignment signal, the slave radio stores the radio system identification code and device identification code assigned by the parent radio and uses them thereafter as its own identification code. Then, the intermittent reception cycle information of the child wireless device is transmitted on the response signal to the parent wireless device, the registration process is completed, and the normal operation state is entered. At this time, if the identifier indicating the encryption function included in the received identification code assignment signal is “1”, the identification code assignment signal is recognized as a signal to which a 16-bit secret key is added, Obtain the 16-bit secret key.

  Step 6 (ST6): Upon receiving the response signal, the master radio stores the intermittent reception cycle information of the slave radio included in the response signal in pairs with the device identification code assigned to the slave radio, and performs registration processing. Complete and transition to normal operating state.

  By using an identifier indicating an encryption function, it is possible to distinguish between a wireless device having an encryption function and a wireless device not having an encryption function, and thus a message format that can be received by each wireless device can be transmitted. Even if wireless devices having no encryption function are mixed, the necessary information can be set in the child wireless device in a short time without increasing the number of messages exchanged between the parent wireless device and the child wireless device.

  Next, the transmission / reception sequence of unencrypted plaintext and the transmission / reception of encrypted encrypted telegram will be described with reference to FIG.

(A) In the case of individual communication without encryption function The communication device A123 has an encryption function, but the communication device C125 does not have an encryption function. Communication in this case will be described.
1) A transmission request 127 is generated from the home controller 121 to the communication device C125.
2) The communication device A 122 knows from the table information stored therein that the communication device C 125 does not have an encryption function, and an encryption identifier indicating that it is an encrypted message of the control code 2 in FIG. The message 128 is transmitted to the communication device C125 in plain text without being scrambled for encryption.
3) The communication device C125 receives the telegram 128, transmits an acknowledge signal (hereinafter referred to as ACK) 129, and transmits a telegram 130 to the air conditioner 126.

(B) In the case of individual communication with encryption function Communication when the communication apparatus A 122 and the communication apparatus B 123 both have an encryption function will be described.
1) A transmission request 131 is generated from the home controller 121 to the communication device B123.
2) The communication device A 122 knows from the table information stored therein that the communication device B 123 has an encryption function, and sets an encryption identifier indicating that it is an encrypted message of the control code 2 in FIG. The message 132 requesting a 16-bit public key is transmitted to the communication device B123 in plain text.
3) Upon receiving the signal 132 requesting the 16-bit public key, the communication device B123 sets the encryption identifier indicating the encrypted message of the control code 2 in FIG. 3 to “0” and randomly in plaintext. The generated 16-bit public key attached message 133 is transmitted to the communication apparatus A122.
4) Upon receiving the 16-bit public key attached message 133, the communication device A 122 acquires a 16-bit public key. Then, an encryption code is created by the method already described by using the secret key and the public key previously held, and the data to be transmitted is encrypted. Then, the encrypted identifier indicating that the encrypted message of the control code 2 in FIG. 3 is “1”, and the encrypted encrypted message 134 is transmitted to the communication apparatus B 123.
5) If the communication device B123 receives the encrypted message 134 within a predetermined time, the communication device B123 creates an encrypted code by the method already described using the private key and the public key that are held in advance, and transmits the received data Break encryption. Then, an ACK 135 is returned, and the received telegram 136 is transmitted to the sensor 124. In the above operation, when the encrypted message 134 is received after a predetermined time, the received data is discarded because there is a possibility that a third party is impersonating.

  Prior to communication from the receiving side, the procedure for acquiring a public key increases the effect of preventing third party impersonation.

  A configuration in which 16-bit public key information is inserted into the ciphertext 134 and transmitted is also possible. In this case, the 16-bit public key portion to be inserted is sent as plain text without being encrypted. With this configuration, there is no need to obtain a public key from the communication device B123. That is, since the communication device A 122 performs encryption using a 16-bit public key randomly generated by the communication device A 122 itself and sends the public key on the encrypted message 134, the communication device B 123 on the receiving side transmits the encrypted message 134. The cipher can be decrypted using the public key sent on board.

  In broadcast communication, since there are a plurality of communication partners, a public key cannot be obtained from the receiving side. Therefore, a method of transmitting a public key on a cipher message is particularly useful in broadcast communication.

  It is possible to share the identifier indicating the presence or absence of the encryption function used in the registration procedure of FIG. 4 and the encryption identifier indicating the encrypted message used in the communication of FIG. . By sharing the above two identifiers, the bits of the control code 2 can be given a margin, and other functions can be added to the control code 2.

  Note that all or part of the configuration shown in FIG. 1 can be executed by a program on a computer.

  In the present embodiment, communication device A (first communication device) and communication device B (second communication device) have been described. However, the present invention may be applied to a parent communication device and a child communication device.

As described above, the communication system and the program according to the present invention can pass a secret key with a simple operation, and can identify a device that supports the encryption function and a device that does not support the encryption function, Encryption can be realized with a simple configuration.

Block diagram of a communication apparatus according to Embodiment 1 of the present invention Communication system diagram using the communication device according to the first embodiment of the present invention. Data format diagram transmitted by communication device in embodiment 1 of the present invention The sequence diagram which shows the registration operation | movement of the communication apparatus in Embodiment 1 of this invention Communication sequence diagram of communication apparatus according to Embodiment 1 of the present invention Block diagram of a conventional communication device

Explanation of symbols

DESCRIPTION OF SYMBOLS 101 Antenna 102 Transmission means 103 Reception means 104 Code generation means 105 Decoding means 106 Wireless communication part 107 Identifier detection means 108 Encryption control means 109 Identifier assignment means 110 Communication apparatus 111 Home appliance

Claims (3)

It is composed of a parent communication device and a child communication device, and indicates that the parent communication device and the child communication device are the same system from the parent communication device to the child communication device by performing predetermined registration procedures respectively. In a communication system having an identification code registration function for assigning a system identification code and a device identification code indicating individual identification of the slave communication device,
When the registration procedure is executed, the master communication device detects an identifier indicating the presence or absence of the encryption function included in the control information in the identification code provision request signal from the slave communication device, and the identifier has the encryption function. An identifier indicating that the system identification code, the device identification code, and the secret key information for encryption are configured in one response packet, and that the control information of the response packet has an encryption function. A communication system configured to transmit the response packet to the slave communication device. It is composed of a parent communication device and a child communication device, and indicates that the parent communication device and the child communication device are the same system from the parent communication device to the child communication device by performing predetermined registration procedures respectively. In a communication system having an identification code registration function for assigning a system identification code and a device identification code indicating individual identification of the slave communication device,
When the registration procedure is executed, the slave communication device controls the identifier having an encryption function for the master communication device in an identification code provision request signal for requesting the provision of the system identification code and the device identification code. The identification code grant request signal is transmitted on the information, the response packet from the master communication device for the identification code grant request signal is received, and an identifier having an encryption function included in the control information of the response packet is set. If so, a communication system configured to recognize that the response packet is a packet including secret key information and acquire the secret key. It is composed of a parent communication device and a child communication device, and indicates that the parent communication device and the child communication device are the same system from the parent communication device to the child communication device by performing predetermined registration procedures respectively. In a communication system having an identification code registration function for assigning a system identification code and a device identification code indicating individual identification of the slave communication device,
When the registration procedure is executed, the slave communication device controls the identifier having an encryption function for the master communication device in an identification code provision request signal for requesting the provision of the system identification code and the device identification code. Transmit the identification code grant request signal on the information,
The master communication device detects an identifier indicating the presence or absence of an encryption function included in control information in the identification code provision request signal from the slave communication device, and when the identifier indicates an encryption function, the system The slave communication device is configured such that an identification code, the device identification code, and secret key information for encryption are configured in one response packet, and an identifier indicating an encryption function is set in the control information of the response packet Send the response packet to
If the identifier having a cryptographic function included in the control information of the response packet is set, the slave communication device recognizes that the response packet is a packet including secret key information and acquires the secret key. A communication system configured as described above.

Images