WO2004012385A1 - Communication system - Google Patents

Abstract

A key number produced by a key information producing device (2) is transferred, as key information together with the fixed numbers of a network address and the like, to an electrode line (11). A personal computer (3) receives the key information through an electrostatic coupling with the electrode line (11) and performs, based on the key number, a cryptographic communication with a personal computer (4), which has the same key information, via a radio LAN communication part (12).

Description

Communication system, key information transmitting apparatus and method, information processing apparatus and method, recording medium, and program

 The present invention relates to a communication system, an apparatus and method for transmitting key information, an information processing apparatus and method, a recording medium, and a program, and in particular, easily and safely communicates among a plurality of information processing apparatuses. The present invention relates to a communication system, an apparatus and method for transmitting information, an information processing apparatus and method, a recording medium, and a program. Background art

Recently, among the plurality of information processing apparatus such as Nono ⁰ over Zona Honoré computer or PDA (Personal Dig ital Ass i stant ), such as by using a wireless LAN (Local Area Network) or infrared, the opportunity to exchange information It has become a lot. Among the plurality of information processing devices, each information processing device has a secret key in advance in order to keep the communication contents confidential, and the information thus encrypted is carried on a communication path such as a wireless LAN, for example. The communication method is generally used.

 At this time, as a key exchange method, for example, the Difficce-Hell lman method (public key exchange method) of transmitting only public information to a communication path and its improved algorithm are used.

 However, according to the method of diff-ce-hel lman method in which the public key is exchanged among a plurality of information processing apparatuses, the public key may be distributed to and stored in another information processing apparatus which the user does not intend. Therefore, there is a problem that information to be transmitted may be leaked to another information processing apparatus not intended by the user.

In addition, when exchanging public keys, the user has to follow various settings and procedures, which results in poor operability and further inability to communicate quickly. Disclosure of the invention

 The present invention has been made in view of such a situation, and a communication path can be established by a simple operation between a plurality of information processing apparatuses, and secure communication can be performed. It is.

 A communication system according to the present invention generates key information for communication by a plurality of information processing apparatuses, receives a key information transmitting apparatus for transmission, and receives decoy information transmitted by the key information transmitting apparatus, based on the key information. A communication system comprising: a first information processing apparatus for performing communication and a second information processing apparatus for receiving key information transmitted by the key information transmission apparatus and performing communication based on the key information; The key information transmitting device arranges key information generation means for generating a key number, fixed number storage means for storing a fixed number serving as a network address, and key information consisting of a key number and a fixed number at a limited position. The first information processing apparatus, and key information transmitting means for transmitting to the second information processing apparatus, wherein the first information processing apparatus receives the key information transmitted from the key information transmitting apparatus. Key information of Information encryption means for encrypting information based on the key means contained in the key information received by the first key information reception means, and the key information received by the first key information reception means And the information transmission means for transmitting the information encrypted by the information encryption means, using the fixed number as the network address, and the second information processing device receives the decoy information transmitted from the key information transmission device. A second key information receiving unit for receiving the encrypted information transmitted by the first information processing apparatus; and the encrypted information received by the information receiving unit, It is characterized by comprising: information decryption means for decrypting based on the key number contained in the key information received by the second key information reception means.

The key information transmitting apparatus of the present invention is limited in key number generation means for generating a key number, fixed number storage means for storing a fixed number serving as a network address, and key information including a key number and a fixed number. And a key information transmission unit for transmitting information to a plurality of information processing apparatuses arranged at a position. The information processing apparatus may further include key information modulation means for modulating key information including a key number and a fixed number, and the key information transmission means may transmit key information modulated by the key information modulation means.

 The key number generation means can generate a key number every predetermined time or when instructed by the user.

 The key information transmission means includes a communication medium disposed in a space for communicating with the information processing apparatus, and transmits the key information by performing close proximity communication with the information processing apparatus disposed in proximity to the communication medium. Can.

 The key information transmission means is accommodated in one portable case, and the key information transmission means can transmit the key information by performing close proximity communication with the information processing apparatus that has made contact.

 The housing may further contain key number generation means and fixed number storage means.

 The key number generation unit and the fixed number storage unit are provided independently of the housing, and the key information transmission unit is provided independently of the housing. The key number generation unit and the fixed number storage unit are generated The read key information can be read, and the read key information can be transmitted by close proximity communication with the information processing apparatus that has made contact. The key information transmission means transmits the key information to the information processing apparatus when connected to the information processing apparatus, and the proximity communication means for performing close proximity communication with another key information transmission apparatus that has made contact, and the contact made by the proximity communication means And a storage unit for storing key information transmitted by the first other key information transmission apparatus by performing close proximity communication with one of the other key information transmission apparatuses, the proximity communication unit further comprising: By performing close proximity communication with the key information transmitting apparatus of the above-mentioned configuration, it is possible to transmit the key information stored in the storage means to the second key information transmitting apparatus in contact with the key information transmitting apparatus.

The key information transmitting means can transmit the key information by performing close proximity communication with the information processing apparatus disposed in the space by using the infrared light. The key information transmitting means may further generate position information indicating a relative position in space, and may generate key information including a key number, a fixed number, and position information.

 The key information transmission means can transmit key information to the information processing apparatus via the user's body.

 A key information transmission method according to the present invention comprises: a key number generation step of generating a key number; an acquisition step of acquiring a fixed number to be a network address; and key information including the key number and the fixed number in limited positions. And a key information transmission step of transmitting to a plurality of arranged information processing apparatuses.

 The program recorded on the first recording medium of the present invention includes a key number generation step of generating a key number, an acquisition step of acquiring a fixed number to be a network address, and a key number and a fixed number. And transmitting key information to a plurality of information processing apparatuses arranged at a limited position.

 The first program of the present invention comprises a key number generation step for generating a key number, an acquisition step for acquiring a fixed number to be a network address, and a key information including a key number and a fixed number at a limited position. The computer is caused to execute a key information transmission step of transmitting to a plurality of arranged information processing apparatuses.

According to the information processing apparatus of the present invention, key information receiving means for receiving key information including a key number and a fixed number by position limited communication, and key numbers included in key information received by the key information receiving means. The information encryption means for encrypting information, and the fixed number included in the key information received by the key information reception means as the network address, the information encrypted by the information encryption means is disposed in the space. Information transmitting means for transmitting to another information processing apparatus, information receiving means for receiving encrypted information from the other information processing apparatus, encrypted information received by the information receiving means, key information reception It is characterized by comprising: information decryption means for decrypting based on a key number included in key information received by the means. The key information receiving means can receive the key information by performing close proximity communication when contacting the key information transmitting device for transmitting the key information.

 The key information receiving means can be configured to receive the key information from the key information transmitting device by performing close proximity communication when connected to the key information transmitting device for transmitting the key information.

 The key information receiving means can receive the key information by performing close proximity communication with the key information transmitting device for transmitting the key information arranged in the space through the infrared ray. The key information may further include position information indicating relative position in space.

 It is possible to further include display means for displaying the relative position of the other information processing device in the space based on the position information.

 The key information receiving means may receive key information via the user's body.

 The apparatus further includes key information generation means for generating key information and key information transmission means for transmitting key information when contacting with another information processing apparatus, and the key information generation means performs a predetermined operation by the user. In this case, key information can be updated to new key information.

 A first secret key, which is a secret key number, a first acquisition unit that acquires a public key corresponding to the first secret key, and a public key acquired by the first acquisition unit are processed by other information. Public key transmission means for transmitting to a management apparatus, and secret key reception means for receiving a second secret key of another information processing apparatus encrypted by the public key transmitted from another information processing apparatus And decrypting the encrypted second secret key received by the secret key receiving means with the first secret key to obtain a second secret key of another information processing apparatus. And means may be further included.

The information encryption means encrypts the information based on the second secret key acquired by the second acquisition means, and the information decryption means calculates the information based on the second secret key acquired by the second acquisition means. Information can be made to be decrypted. Based on a public key receiving unit that receives the public key of another information processing apparatus from another information processing apparatus, a private key acquisition unit that acquires its own private key, and a public key received by the public key receiving unit. Secret key encryption means for encrypting the secret key acquired by the secret key acquisition means; and secret key transmission means for transmitting the secret key encrypted by the secret key encryption means to another information processing apparatus. It can be further included.

 The information encryption means encrypts the information based on the secret key acquired by the secret key acquisition means, and the information decryption means decodes the information based on the secret key acquired by the secret key acquisition means. can do.

According to the information processing method of the present invention, a key information receiving step of receiving key information including a key number and a fixed number by position limited communication, and a key number included in key information received by the processing of the key information receiving step. The information encrypted in the information encryption step of the information encryption step, and the fixed number included in the key information received in the processing of the key information reception step is a network address. The information transmission step of transmitting to the other information processing apparatus disposed in the following, the information reception step of receiving the encrypted information from the other information processing apparatus, and the encrypted information received by the information reception step are The information processing apparatus is characterized by including an information decryption step of decrypting based on the key number included in the key information received by the key information reception step. The program recorded on the second recording medium of the present invention comprises: a key information receiving step of receiving key information including a key number and a fixed number by position limited communication; and key information received by the processing of the key information receiving step. The information encryption step of encrypting information on the basis of the key number contained in the step S. The fixed number included in the key information received by the processing of the key information reception step is taken as the network address. The information transmission step of transmitting the transmitted information to the other information processing apparatus arranged in the space, the information reception step of receiving the encrypted information from the other information processing apparatus, and reception by the process of the information reception step The decrypted information is decrypted based on the key number included in the key information received by the processing of the key information reception step. Information decryption Characterized in that it comprises a step. A second program according to the present invention is a key information reception step of receiving key information including a key number and a fixed number by position limited communication, and a key number included in key information received by the processing of the key information reception step. Based on the information encryption step of encrypting information and the fixed number included in the key information received by the processing of the key information reception step as the network address, the information encrypted by the processing of the information encryption step An information transmission step of transmitting to another information processing apparatus arranged in the space, an information receiving step of receiving encrypted information from the other information processing apparatus, and an encrypted information received by the information receiving step. And an information decryption step of decrypting the received information based on the key number included in the key information received by the processing of the key information reception step. A program characterized by executing.

 In the communication system of the present invention, the key information transmitting device generates a key number, stores a fixed number as a network address, and arranges key information including the key number and the fixed number at a limited position. It is transmitted to the first information processing apparatus and the second information processing apparatus. Also, the first information processing apparatus receives the key information transmitted from the key information transmitting apparatus, and the information is encrypted based on the key number included in the received key information and included in the key information. The fixed number is taken as the network address and encrypted information is sent. Furthermore, in the second information processing apparatus, the key information transmitted from the key information transmitting apparatus is received, and the encrypted information transmitted by the first information processing apparatus is received, and the encrypted information is received. Is decrypted based on the key number included in the key information.

 In the key information transmitting apparatus and method of the present invention, the first recording medium, and the first program, key information including a key number and a fixed number is generated, and a plurality of pieces of information arranged in a limited position It is sent to the processing unit.

In the information processing apparatus and method, the second recording medium, and the second program of the present invention, key information including a key number and a fixed number is received, and the information is determined based on the key number included in the key information. Encrypted and decrypted. Brief description of the drawings

 FIG. 1 is a diagram showing a configuration example of a communication system to which the present invention is applied.

 FIG. 2 is a block diagram showing a detailed configuration example of the key information generation device of FIG. FIG. 3 is a block diagram showing a detailed configuration example of the receiving device of FIG.

 FIG. 4 is a block diagram showing a detailed configuration example of the personal computer of FIG.

 FIG. 5 is a flow chart explaining key information transmission processing in the key information generation device of FIG.

 FIG. 6 is a flowchart for explaining key information reception processing in the receiving device of FIG.

 FIG. 7 is a flowchart for explaining communication processing in the personal computer of FIG.

 FIG. 8 is a diagram for explaining position limited communication using infrared light.

 FIG. 9 is a diagram for explaining position limited communication using electromagnetic induction.

 FIG. 10 is a diagram showing another example of the communication system by electrostatic coupling.

 FIG. 11 is a diagram showing an example of a communication system that transmits position numbers using electromagnetic induction.

 Fig. 12 is a diagram showing an example of a display screen in the communication system of Fig. 10 or Fig. 11;

 FIG. 13 is a flow chart for explaining the process for displaying the screen of FIG. FIG. 14 is a diagram showing the configuration of another communication system to which the present invention is applied.

 FIG. 15 is a diagram showing the configuration of the pen of FIG.

 FIG. 16 is a flowchart for explaining key information sharing processing in the communication system of FIG.

 FIG. 17 is a view showing the configuration of another pen.

 FIG. 18 is a diagram for explaining sharing of key information in the pen of FIG. 17;

FIG. 19 is a block diagram showing the configuration of another communication system of the present invention. FIG. 20 is a diagram for explaining transmission and reception of key information in the communication system of FIG. FIG. 21 is a diagram showing the configuration of a key device to which the present invention is applied.

 FIG. 22 is a flowchart explaining key information sharing processing in the key device of FIG.

 FIG. 23 is a diagram for explaining key information sharing processing in the key device of FIG. FIG. 24 is a diagram for explaining key information sharing processing in the key device of FIG. 21; FIG. 25 is a diagram for explaining key information sharing processing in the key device of FIG. FIG. 26 is a diagram for explaining another example of key information distribution.

 FIG. 27 is a diagram for explaining position limited communication in a public space.

FIG. 28 is a flow chart for explaining the communication processing in the PDA of FIG. 27 _c . FIG. 29 is a flow chart for explaining the communication processing in the personal computer of FIG. BEST MODE FOR CARRYING OUT THE INVENTION

 FIG. 1 shows a configuration example of a communication system to which the present invention is applied.

 A key information generation device 2 and an electrode line 11 are provided in a table 1 forming a space for communication. On this table 1 are placed devices that communicate in that space. In the example of FIG. 1, a personal computer 3 and a personal computer 4 are arranged.

 The key information generation device 2 generates key information for the devices arranged on the table 1 to communicate with each other. The generated key information is the electrode wire laid on Table 1.

It is transmitted via 1 1.

 The personal computer 3 has a wireless LAN (Local Area Network) communication unit 1

2 and receiver 13 are connected. The personal computer 3 directly exchanges information with the wireless LAN communication unit 12 and the receiver 13. The receiver 13 performs electrostatic coupling with the electrode wire 11 and receives key information transmitted through the electrode wire 11. The received key information is supplied to the personal computer 3, The son computer 3 communicates with other devices on the table 1 using the supplied key information.

 Similar to the personal computer 3, the personal computer 4 includes a wireless LAN communication unit 14 and a receiving device 15. The processes of the wireless LAN communication unit 14 and the reception device 15 are the same as those of the wireless LAN communication unit 12 and the reception device 13 of the personal computer, and thus the description thereof is omitted.

 Thus, communication is performed between the devices by making the receiving device 13 and the receiving device 15 receive the same key information. Although only two devices are shown in FIG. 1, three or more devices may be arranged.

 FIG. 2 shows a detailed configuration example of the key information generation device 2 of FIG.

 The key information generation device 2 is provided with an input unit 21, a clock, 22, a random number generation unit 23, a fixed number storage unit 24, and a modulation unit 25. The input unit 21 receives an operation by the user. Clock 22 performs clock operation. The random number generation unit 23 generates a new random number (key number serving as a secret key) at fixed time intervals based on the time output by the clock 22. The random number generation unit 23 generates a random number (key number serving as a secret key) when an operation such as generating a random number is input by the user to the input unit 21 (for example, the button is pressed). You can also do so.

 For example, the fixed number storage unit 24 including the flash R0M (Read Only Memory) stores a fixed number (for example, a table number for identifying a table) representing the receiving channel of Table 1. The modulation unit 25 combines the random number (key number serving as a secret key) generated by the random number generation unit 23 and the fixed number representing the reception channel of Table 1 and modulates the modulated signal. Transfer to the electrode wire 1 1 that is being used. The modulation frequency at this time is, for example, 300 kHz. Hereinafter, the random number (key number as a secret key) and the fixed number are collectively referred to as key information.

 FIG. 3 shows a detailed configuration example of the receiver 13 of FIG.

The receiver 13 is provided with an electrode 4 1, an amplifier 4 2, a BPF (band pass filter) 4 3, and a detector 4 4. Electrode 4 1 is being installed on Table 1 When placed in the vicinity of 1), it is capacitively coupled to the electrode wire 1 1 (connected via a virtual capacitor 40), and the key information signal transmitted to the electrode wire 1 1 (modulated Key information) is supplied to the amplifier 42. The amplifier 42 amplifies the supplied key information signal (key information being modulated) and supplies it to the BPF 4 3.

 The BFP 4 3 extracts a frequency component of a specific band from the signal input from the amplifier 4 2 and supplies it to the detector 4 4. The detector 44 detects the supplied modulated signal, and supplies key information (key number and fixed number) obtained by detection to the personal computer 3.

 The configuration of the receiving apparatus 15 is the same as that of the receiving apparatus 13 shown in FIG. In the following, the configuration of FIG. 3 is also referred to as the configuration of the receiving device 15.

 FIG. 4 shows a detailed configuration example of the personal computer 3 of FIG.

 CPU (Central Processing Unit) 61, 讓 62, and RAM (Random

Acces s Memory) 63 is interconnected via an internal bus 64. An input / output interface 65 is also connected to the internal bus 64.

 The input / output interface 65 includes an input unit 66 including a keyboard and a mouse, a display including a CRT (Cathode Ray Tube) and an LCD (Liquid Crystal Display), an output unit 67 including a speaker, and a hard disk. A communication unit 69 comprising a storage unit 68 comprising a etc., a modem, a terminal adapter etc. is connected. The communication unit 69 performs communication processing via various networks including satellite links and CATV. Further, the communication unit 69 exchanges information with the reception device 13 or the wireless LAN communication unit 12 by using, for example, an infrared ray or a USB (Universal Serial Bus).

The configuration of the personal computer 4 is the same as that of the personal computer 3 shown in FIG. 4, and thus the description thereof is omitted. In the following, FIG. 4 is also referred to as the configuration of the personal computer 4. Next, key information transmission processing in the key information generation device 2 of FIG. 2 will be described with reference to FIG. This process is started when the user turns on the key information generation device 2.

 In step S 1, the random number generation unit 23 generates a key number (number of keys) when the clock 22 counts a predetermined time, and supplies the key unit to the modulation unit 25.

 In step S2, the modulation unit 25 acquires the fixed number from the fixed number storage unit 24. The fixed number is not a secret but is a fixed number representing the communication channel of Table 1.

 In step S3, the modulation unit 25 combines the key number (random number) supplied by the process of step S1 and the fixed number acquired by the process of step S2, and based on that, based on the predetermined frequency Modulate the carrier. In this example, the carrier frequency is, for example, 300 kHz. By setting the modulation frequency to several 10 O kHz, the length of the electrode wire 11 becomes significantly shorter than the wavelength of the carrier, so the electrode wire 11 does not function as an antenna, and in the vicinity of the electrode wire 11 Only electrostatic field is generated. Since the strength of the electrostatic field is inversely proportional to the cube of the distance, the field strength rapidly decreases with the distance from Table 1. Therefore, the possibility that key information is acquired by the information processing apparatus arranged at a position distant from the table 1 is reduced. Therefore, secure communication is possible on the table 1 and in the restricted space.

 In step S4, the modulation unit 25 applies the modulated key information (information including the key number and the fixed number) to the electrode line 11 of Table 1. Thereby, the modulated key information is transmitted via the electrode line 11.

 In step S5, the random number generation unit 23 determines whether a predetermined time has elapsed from the previous transmission process (key information transmission process). If it is determined that the predetermined time has not elapsed, the process waits until it is determined that the predetermined time has elapsed.

If it is determined in step S5 that the predetermined time has elapsed, the process returns to step S1 and the subsequent processes are repeated. Since key information is generated at predetermined time intervals (in a fixed cycle) by the process of FIG. 5, only the personal computer 3 or the personal computer 4 placed on the table 1 share the same key information. be able to. For example, at time t 1, personal computer 3 and personal computer 4 are placed on table 1, and at time t 2, personal computer 3 is in a different place from table 1 (for example, another conference room When the personal computer 3 is placed on the personal computer 3 after the predetermined time has elapsed, the personal computer 3 can not communicate with the personal computer 4 because the personal computer 3 is not supplied with new key information. In this way, communication can be performed in a limited position (limited to the conference room (on the table 1)) (communications can be made only between devices arranged in the limited position).

 Next, with reference to the flowchart of FIG. 6, key information reception processing in the receiver 13 of FIG. 3 will be described. This process is started when the key information is transmitted to the electrode line 11 by the key information generation device δ and the power of the personal computer 3 and the receiver 13 is turned on by the user. Is executed repeatedly. In step S11, the electrode 41 of the receiver 13 is electrostatically coupled to the electrode wire 11 of the table 1 disposed in close proximity. Specifically, electrostatic coupling occurs when the electrode 41 is brought sufficiently close to the electrode wire 11. The signal of key information transmitted to the electrode wire 11 by electrostatic coupling is supplied to the receiver 13 via the electrode 41. In step S12, the amplifier 42 receives the signal of the key information transmitted to the electrode line 11 via the electrode 41.

 In step S13, the amplifier 42 amplifies the key information signal received in the process of step S12, and supplies the amplified signal to the BPF 43.

 In step S14, the BPF 4 3 extracts a specific frequency component (frequency component of carrier) from the supplied signal and supplies it to the detector 44.

In step S15, the detector 44 detects the signal of the input carrier. In step SI 6, the detector 4 4 supplies the signal of the detected key information to the communication unit 6 9 of the personal computer 3.

 The above process is reversed at a fixed cycle.

 The CPU 61 supplies and stores the key information RAM 63 supplied from the key information generation device 2 by the process of FIG.

 Similar processing is performed on all the devices arranged on Table 1. As a result, in the case of the example of FIG. 1, the personal computer 4 also acquires the same key information.

 Next, communication processing in the personal computer 3 of FIG. 4 will be described with reference to the flowchart of FIG. This process is started when execution of communication process is instructed by the user.

 In step S31, the CPU 61 reads out from the RAM 63 key information stored by the process of step S16 in FIG.

 In step S32, the CPU 61 detects a key number and a fixed number from the read key information. The key number is the key number generated by the random number generation unit 23 of the key information generation device 2 by the process of step S 1 of FIG. 5, and the fixed number is the fixed number storage unit 2 of the key information generation device 2. It is a fixed number stored in 4 (table number in this example).

 In step 33, the CPU 61 determines whether to send a message (eg, file) to another device. In this example, the other devices are the personal computer 4 arranged in the table 1 as shown in FIG. The CPU 61 determines whether or not a command to transmit a message to the personal computer 4 has been input to the input unit 66 by the user.

If it is determined in step S33 that a message (file) is to be sent to another device (personal computer 4), the process proceeds to step S34, and the CPU 61 executes the process of step S33. Encrypt the message (file) you want to send based on the detected key number. Also, CPU 61 has a fixed number The address is supplied to the wireless LAN communication unit 12 via the communication unit 69 as an address. The wireless LAN communication unit 12 transmits the supplied encrypted message to the wireless LAN communication unit having the same network address. Therefore, this message is sent to the information processing apparatus (personal computer 4 in this example) connected to the wireless LAN communication unit.

 If it is determined in step S33 that no message is to be sent to another device, or after the process of step S34, the CPU 61 in step S35 determines the other device (this example (this example). In the case, it is determined whether a message has been sent from the personal computer 4) (whether a message has been sent as a result of another device executing the process of step S34). If it is determined that a message has been sent, the process proceeds to step S 36, and the CPU 61 receives the message sent via the wireless LAN communication unit 12 and the communication unit 69. The other devices (in this example, the personal computer 4) are based on the network address (fixed number). A message can be sent to the wireless LAN communication unit 12 of one personal computer 3. The sent message is encrypted with the key number

(The message is encrypted with the key number as a result of another device executing the process of step S34). Therefore, the CPU 61 decrypts the encrypted message based on the key number read out from the RAM 63.

 At step S37, the CPU 61 determines whether or not the decryption is successful. If it is determined that the decoding has not succeeded, the process returns to step S31 and the subsequent processes are repeated.

If it is determined in step S37 that the decryption is successful, or if it is determined in step S35 that no message has been sent, the process proceeds to step S38, and the CPU 6 1 determines whether to end the process (whether or not a command to end the process is input to the input unit 66 by the user). If it is determined that the process is not ended, the process returns to step S31 and the subsequent processes are repeated. If it is determined in step S38 that the process is to be ended, the process is ended.

 According to the process of FIG. 7, the personal computer 3 sends information (messages) to the information processing apparatus arranged in the same table 1 (a predetermined restricted space) based on the key information received by the receiving apparatus 13. Can be sent. At this time, by using a fixed address as a network address, information can be transmitted only to information processors having the same fixed number. In addition, by encrypting information (message) using key information transmitted at regular intervals, the information processing apparatus arranged in Table 1 within the same time zone (within a regular interval) Information can be exchanged only between the parties.

 Further, in the example of FIG. 1, the case where proximity communication by electrostatic coupling is used as position limited communication performed only in a limited space has been described, but position limited communication is not limited to this.

 For example, as shown in FIG. 8, when the infrared key information generation device 130 is disposed almost directly above the center of Table 1, the infrared key information generation device 130 is the same as the key information generation device 2 of FIG. Similarly, key information is generated at regular intervals, and the key information is distributed in infrared to the devices (personal computer 3 and personal computer 4 in the example of Fig. 8) on the top of Table 1.

 In this case, the receiver 13 is provided with an infrared light receiving unit in place of the electrode 41, and a key information signal from an infrared ray is received.

 As described above, since infrared light is also difficult to transmit over long distances, position limited communication can be performed using it.

In addition, for example, as shown in FIG. 9, position-limited communication can be performed by proximity communication using electromagnetic induction. In the example of FIG. 9, the loop antenna 14 1 corresponds to the electrode line 11 of FIG. 1, and the key information generation device 1 40 corresponds to the key information generation device 2 of FIG. Key information generator 1 4 0 periodically performs key information, By distributing via the antenna 14 1 and using the electromagnetic induction to cause the receiving apparatus 13 and the receiving apparatus 15 to receive, it is possible to perform position-limited communication.

 Furthermore, for example, even if a device for generating an ultrasonic wave is provided on the surface of Table 1 and the receiving device 13 and the receiving device 15 are made to receive signals, position limited communication can be performed.

 Next, referring to FIG. 10, another example of the communication system by electrostatic coupling will be described. In the example of FIG. 10, a plurality of electrode lines (electrode lines 11 A, 11 11 B, 1 1 C, 1 1 D, 1 1 E, 1 1 F, electrode wire 11 G) Power S facility is installed, and a device (for example, a personal computer) is placed in the vicinity of one of a plurality of electrode wires 11 A to 11 G. The key information generator 2 has a fixed number as a network address corresponding to Table 1 and a number representing the relative position in Table 1 to the key number generated by the random number generator 23. A position number corresponding to A to electrode line 1 1 G is added to generate key information, which is modulated to transmit corresponding key information to each electrode line 1 1 to 1 1 G.

 In the example of FIG. 10, the personal computer 3 is disposed in the vicinity of the electrode wire 1 1 B, and the personal computer 4 is disposed in the vicinity of the electrode wire 1 1 F. The wireless LAN communication unit 1 6 1 and the receiving device A personal computer 90 having 1 62 is disposed in the vicinity of the electrode wire 1 1 E. Therefore, the personal computers 3, 4 and 90 receive the same key number and fixed number, respectively, and the personal computer 3 receives the position number corresponding to the electrode line 1 1 B, and the personal computer 4 receives the same number. The personal computer 90 receives the position number corresponding to the line 1 1 F, and receives the position number corresponding to the electrode line 1 1 E.

Figure 11 shows an example of a system that performs proximity communication using electromagnetic induction. In the example of FIG. 11, a plurality of loop antennas 1 4 1 A, 1 4 IB, 1 4 1 C, 1 4 1 D, 1 4 1 E and 1 4 1 F are installed in Table 1. Also, these loop antennas 1 4 1 A to 1 4 1 F are connected to the key generation device 1 4 0 respectively. It is done. A personal computer is placed on any of the plurality of loop antennas 1 4 1 A to 1 4 1 F. In the example of FIG. 11, the personal computer 3 is disposed on the loop antenna 1 4 1 B, and the personal computer 4 is disposed on the loop antenna 1 4 1 E. The key information generation device 140 adds a position number indicating a relative position in Table 1 to the fixed number as the network address corresponding to Table 1 and the key number generated by the random number generation unit 23. , Generate as key information, modulate it, and transmit to each loop antenna 1 4 1 A to 1 4 1 F.

 Therefore, in the example of FIG. 11, the receiver 13 of the personal computer 3 receives the position number corresponding to the loop antenna 1 41 B, in addition to the same key number and fixed number, and the personal computer 4 receives , Loop antenna 1 4 1 Receive the position number corresponding to E.

 As shown in FIG. 10 or FIG. 11, if a position number representing a relative position on Table 1 is added to key information and the key information is sent to the personal computer, the personal computer can As shown in FIG. 12, the icons of other personal computers can be displayed at the positions corresponding to their relative positions.

FIG. 12 shows a display example of the icons on the display unit of the personal computer 4 when the personal computers 3, 4, 90 are arranged on the table 1 as shown in FIG. 10. In this example, the icon 4 I of oneself (personal computer 4) is displayed at the lower center of the screen, and in the upper direction, it corresponds to the personal computer 3 located opposite the personal computer / recomputer 4. The icon 3 I is displayed, and the icon 90 I corresponding to the personal computer 90 located on the right of the personal computer 4 is displayed on the right side of itself. That is, the icon 3 I, 4 The display position of 1, 9 0 I substantially corresponds to the actual arrangement (arrangement centering on oneself) of “one personal computer 3, 4, 90”. Therefore, the user can select which personal preview It can be intuitively grasped from the relative positional relationship whether it is the icon of the data.

 For example, when the user of the personal computer 4 wants to transfer the file associated with the icon 190 to the personal computer 90, the user operates the input unit 6 6 (the input unit 6 6 of the personal computer 4 in FIG. 4). Then, drag and drop the mouse force 1 9 1 onto the icon 9 0 I corresponding to the personal computer 9 0 next to the right. Thus, the CPU 61 of the personal computer 4 reads the file corresponding to the icon 190 stored in the storage unit 68, and encrypts the file based on the key number distributed by the key information generation device 2 (e.g. For example, step S 3 4 in FIG. 7 causes the communication unit 69 to transmit.

 The communication unit 6 9 supplies the encrypted file to the communication unit 6 9 of the personal computer 90 via the wireless LAN communication unit 14 and the wireless LAN communication unit 16 1 of the personal computer 90. Do. The CPU 61 of the personal computer 90 decrypts the supplied encrypted file using the key number stored in the RAM 63 (for example, the process of step S 36 in FIG. 7). ), Get the contents of the file.

 In this way, by configuring as shown in FIG. 10 and FIG. 11 (including a plurality of electrode lines 1 1 and a plurality of loop antennas 1 4 1), a device (for example, personal computer 4) can be obtained. Can know the relative position (other than the personal computer 4 in the example of FIG. 12) of the other device (for example, the personal computer 3) on the table 1.

As a result, as shown in FIG. 12, the display unit (for example, the output unit 6 7 of the personal computer 4) of each device may be used to correspond to the other device (for example, personal device) corresponding to the relative position on the table 1. The icons of computer 3 and personal computer 90) can be displayed. Therefore, even if the user does not know the name or address of each device, the information (file in the example of FIG. 12) is transmitted to the desired device based on its physical position (the position on Table 1). Can be easily transferred. FIG. 13 is a flow chart for explaining, for example, a process of causing the display unit (output unit 6 7) of the personal computer 4 to display as shown in FIG. This process is started when execution of the user communication process is instructed.

 In step S41, the electrode 41 of the receiver 15 is electrostatically coupled to the electrode wire 11 F of the table 1 arranged in close proximity, and the key information transmitted to the electrode wire 11 F

(Key information including the position number corresponding to the electrode line 1 1 F) is received. Also, at this time, the information to be generated and transmitted by the key information generation device 2 includes all

 Relative position information indicating relative positions of A to 1 1 F is also included.

 In 4 2, the CPU 61 obtains the key number, fixed number, and position number (position number corresponding to the electrode wire 1 1 F) from the key information, and uses the fixed number as a network address, the position number (electrode wire 1) Add your own ID (in this example, ID corresponding to the personal computer 4) to the location number corresponding to 1 F, and transmit it to the wireless LAN communication unit with the same network address.

 Thus, the information processing apparatus (arranged on the table 1) connected to the wireless LAN communication unit (in the example of FIG. 10, the personal computer 3 and the personal The position number corresponding to line 1 1 F (the position number indicating the position of personal computer 4) and the ID of the sender (in this example, the ID corresponding to personal computer 4) are sent. The same processing is performed in the personal computer 3 and the personal computer 90 as well. At step S43, the CPU 61 receives position numbers corresponding to the respective electrode wires transmitted from other devices (in the example of FIG. 10, the personal computer 3 and the personal computer 90). And the ID of the transmission source (for example, the position number corresponding to the electrode wire 1 1 B or 1 1 E and the ID corresponding to the personal computer 3 or 90) via the wireless LAN communication unit 14 and the communication unit 6 9 To receive.

In step S 44, the CPU 61 has received the received position number (for example, the position number corresponding to the electrode wire 1 1 B and the ID corresponding to the personal computer 3) in the process of step S 41. Check relative position by comparing with relative position information Get out. In the example of Fig. 10, the ID of personal computer 3 and personal computer 90 and the position number corresponding to each electrode wire (in the case of personal computer 3, the position number corresponding to electrode wire 1 1 B) In the case of the personal computer 90, the CPU 61 is based on the position number corresponding to the electrode wire 1 1 E), and the personal computer 3 is located approximately opposite to itself, the personal computer 9 being 0 detects that you are positioned to the right of your self.

 In step S45, the CPU 61 displays a corresponding icon at the position detected by the process of step S44. That is, the CPU 61 displays its own icon 41 at the bottom center of the screen, and displays the icon 3 I of the personal computer 3 almost directly above the icon 4 I of its own, Display the 0 icon 9 0 I to the right of your own icon 4 I.

 Next, an example of another communication system will be described with reference to FIG. 14 and FIG. The pen 2 1 0 is a device that generates key information, and works in the same manner as the key information generation device 2 in FIG. When pen 2 120 is brought into contact with personal computer 3, personal computer 4 and persona ^ ^ computer 90 and moved as shown by an arrow on page W, each device (personal computer 3, 4, 90) Is capacitively coupled to pen 90 and reads key information (in this example, key number) from pen 90. Therefore, the personal computer 3, the personal computer 4 and the personal computer 90 are the receiving devices 2 2 1 2 2 2 2 2 corresponding to the receiving device 1 3 configured as shown in FIG. 3. Each has 3 built-in. In this way, the user can distribute the key information (key number) manually. Because this is a manual operation, the range over which keys can be distributed is limited by this operation. The device that has read the key information encrypts the information based on the key number included in the key information, and transmits the information via the wireless LAN communication unit (for example, in the case of the personal computer 3, the wireless LAN communication unit 1 2) Do.

As shown in FIG. 15, this pen 2 10 1 incorporates a random number generation unit 2 1 1 1 and an electrostatic coupling unit 2 1 3 in one case 2 1 0A. Also, in case 2 1 0 A The button 2 1 2 is provided. When the user presses the button 2 1 2, the random number generation unit 2 1 1 generates a new random number (key number).

 Next, the key information sharing process by the pen 210 of FIG. 14 will be described with reference to the flowchart of FIG. This process is started when the user turns on the pen 2 10.

 In step S 51, the random number generation unit 21 1 of the pen 2 1 0 determines whether the button 2 1 2 has been pressed. If it is determined that the button 2 1 2 is not pressed, it waits until it is determined that the button 2 1 2 is pressed.

 If it is determined in step S 51 that the button 2 1 2 has been pressed, the process proceeds to step S 5 2 and the random number generation unit 2 1 1 generates and stores a new random number (key number). At this time, the previously generated random number (key number) is updated and deleted.

 In step S 53, the electrostatic coupling unit 2 13 determines whether or not another device has been touched (electrostatic coupling), and if so, the stored key information in step S 54. (In this case, the key number) is supplied to the device via the built-in receiver (for example, in the case of the personal computer 3, the receiver 2 21). Thereafter, the process returns to step S53.

 If it is determined in step S53 that no other device has been touched, step

In S55, the random number generation unit 21 1 determines whether or not the button 2 1 2 is pressed. If it is determined in step S 54 that the button 2 1 2 has not been pressed, the process returns to step S 5 3. If it is determined that the button 2 1 2 has been pressed, the process returns to step S 5 2 and the random number generation unit 2 1 1 generates a new random number (key number).

Thus, the random number (key number) of the pen 2 1 0 is the same random number until the button 2 1 2 is pressed, and the device which wants to share the same random number (key number) (for example, personal computer 3, persona computer 4, and the personal computer 90) by reading through the built-in receiver, the same key information It can be shared. When the button ² 1 2 of the pen ² 1 0 is pressed again, the random number generation unit 2 1 1 of the pen 2 1 0 generates a new random number (key number), so that the key before the button ² 1 2 is pressed Information remains only in the device (in this example, personal computer 3, personal computer 4, personal computer 90) which touched pen 2 1 0 before button 2 1 2 was pressed.

 The personal computer 3 acquires key information from the electrostatic coupling unit 213 of the pen 210 via the receiving device 221, and executes the process shown in FIG. 7 described above. The same processing is performed on personal computer 4 and personal computer 90 as well.

 In this way, by providing the pen 210 as a device for randomly generating a key, communication can be easily performed even in a space other than a limited place such as a meeting room (the space where the table 1 does not exist). It can be done.

 Next, another communication system will be described with reference to FIGS. 17 and 18.

 In FIG. 17, the pen 250 is provided with a writable RFID (Radio Frequency Identification) chip 25 1 inside a housing 250 A. The random number generation device 2 40 has the same function as the random number generation unit 2 3 in FIG.

Random numbers (key numbers) are generated periodically based on the time output by (not shown). The random number (which becomes key information) generated by the random number generator 240 is transmitted to the pen 250 disposed directly in the coil 214 by electromagnetic induction. The pen 250 stores key information acquired via the coil 21 into the RFID chip 25 1.

In the example of FIG. 18, the personal computer 3, the personal computer 4, and the personal computer 90 are respectively provided with RFID reading units 26 0, 2 6 1, 2 6 2. The tip of the pen 250 (RFID chip 25 1) in which key information is stored as described with reference to FIG. 17 by the user is referred to as the RFID reader 26 6, 2 6 1, 2. 6 When approaching 2 (when making contact), the key information (key number) stored in the RFID chip 2 51 by electromagnetic induction コ FRID reading key The key information is supplied to personal computer 3, 4, 90, which is read through R 2 60, 2 6 1, 2 6 2.

 In the case of the example of FIG. 17 and FIG. 18, when writing new key information to the pen 250, the user brings the pen 250 back to the coil 214 of the random number generator 240 (contact ). As a result, new key information is written to the RFID chip 25 1.

 Next, another communication system of the present invention will be described with reference to FIG.

 In this example, the personal computer 3, the personal computer 4, the personal computer 90 and the personal computer 91 are mutually connected via the LAN 110. Also, LAN 1 10 is connected to Internet 1 2 0. The personal computer 3, the personal computer 4, and the personal computer 90 are capable of proximity communication by electrostatic coupling or electromagnetic induction (the configuration therefor is provided as described above). Therefore, when the key information is generated by the personal computer 3, the personal computer 3 may be generated. The key information can be supplied to the personal computer 4 and the personal computer 90 by bringing it into proximity to one personal computer 4 or personal computer 90.

 The CPU 61 of the personal computer 4 stores the supplied key information in the RAM 63. The same processing is also performed in the personal computer 90. The personal computer 3 encrypts the information to be sent to the personal computer 4 and the personal computer 90 (information generated based on the user's command) based on the key information (for example, step S 3 4 in FIG. 7). The encrypted information is transmitted to personal computer 4 and personal computer 90 via LAN 111 based on Ethernet (registered trademark) standard (step S 34 in FIG. 7).

The personal computer 4 and the personal computer 90 have the encrypted information in the form of Ethernet (registered trademark) 102 and Ethernet (registered trademark) 1. 0 via LAN 1 1 0 based on the 3 standards (step S 3 6 in FIG. 7). The personal computer 4 and the personal computer 90 decrypt the received information (the information encrypted by the personal computer 3) based on the key information received by proximity communication. Since personal computer 91 connected to the same LAN 110 is not in close proximity communication (or is not selected by the user), it is stored in personal computer 3, personal computer 4 and personal computer 90. No key information is provided.

 Thereby, the personal computer 91 is also capable of violating the encrypted information from the personal computer 3 even if the encrypted information is transmitted from the personal computer 3 via the LAN 110. Even if it is obtained, it is not possible to decrypt that information. This will ensure that information is protected.

 In the example of FIG. 19, the LAN 110 connecting each terminal may be configured by a wireless LAN communication unit based on a standard such as 802. l ib. In addition, Ethernet (registered trademark) and IEEE (Institut of El ectical and El ectronic

 Engineers) May be configured in combination with wireless LAN communication parts based on standards such as 801.1 lb.

 With reference to FIG. 20, transmission and reception of key information to which the principle of the communication system of FIG. 19 is applied will be described.

The PDA (Personal Digital Assistant) 300 (corresponding to the no- ^zero-to -sono-recombrator 3 in FIG. 19) includes the random number generation unit 21 1 in the pen 210 in FIG. A device 301 including the same configuration as the capacitive coupling portion 213 is incorporated. Also in the PDA 3 1 0 (corresponding to the personal computer 4 in FIG. 1 9 or the personal computer 9 0), the device 3 1 1 having the same configuration as the device 3 0 1 is incorporated as in the PDA 3 0 0 Device 3 0 1 and device 3 1 1 communicate in close proximity by electrostatic coupling. For example, if device 3 0 1 of PDA 3 0 generates key information (device 3 0 1 generates key information based on the user's command), device 3 0 1 approaches device 3 1 1 ( By bringing them in contact, both are electrostatically coupled, and the key information generated in the device 301 is supplied to the device 311. The device 3 1 1 receives the supplied whistle information and stores it in a storage (not shown) of the PDA 3 10. Thus, the same key information is shared. That is, the process shown in the flowchart of FIG. 16 is executed also in PDA 3 0 0 (device 3 0 1) or PDA 3 10 (device 3 1 1) (the description will be repeated. Omitted), key information is shared.

 FIG. 21 is a diagram for explaining a key device 330 to which the present invention is applied.

 The key device 330 is provided with a button 331, a Universal Serial Bus (USB) terminal 332, and a communication device 33. The key device 330 has a built-in random number generation unit 211 like the pen 210 shown in FIG. 15 and stores it in a built-in memory (for example, Memory Stick (trademark)). The key device 330 performs close proximity communication by electrostatic coupling with a force with which the USB terminal 332 is directly connected, or close proximity communication with the communication device 33. The key device 3 3 3 generates key information (key number) when the button 3 3 1 is pressed, and then performs close-key communication with other devices directly connected by electrostatic coupling or connector. Transmit information.

 FIG. 22 is a flow chart for explaining key information sharing processing of the key device (key device 330 and key device 340 of FIG. 23 described later). This process is started when the user turns on the key device 330.

In step S71, the key device 330 determines whether or not another key device has been touched. If it is determined that another key device has not been touched, the process waits until it is determined that another key device has been contacted. For example, as shown in FIG. 23, if the key device 330 is not in contact with another key device 340, processing waits. Note that this contact is as shown in FIG. If the communication device 3 3 3 of the bus 3 3 3 contacts the communication device 3 4 3 of the key device 3 4 3 and it is electrostatically coupled, the USB terminal 3 3 2 is directly connected to the connector of another device The case is also included. The configuration of the key device 340 is the same as that of the key device 3300, so the description will be omitted.

 If it is determined in step S71 that another key device (in this example, the key device 340) has been touched, the process proceeds to step S72 where the key device 3 3 Determine whether 1 has been pressed.

 If it is determined in step S 72 that the button 33 1 is pressed, the process proceeds to step S 7 3 and the key device 330 controls the built-in random number generator (not shown), Generate key information and send key information (by electrostatic coupling or directly) to the key device 340.

 If it is determined in step S72 that the button 3 3 1 is not pressed, the process proceeds to step S 7 4 and the key information transmitted from the key device 3 4 0 (other key device) is used. To receive. This means that the fact that the key 33 1 of the key device 3 3 0 is not pressed means that the other key device 3 4 0 being touched will generate a key. 3 4 1 is pressed and the key information generated by the key device 3 4 0 is transmitted (the process of step S 7 3 is executed by the key device 3 4 0 power S, and the key device 3 4 0 generates the key information And transmission).

 The key information (for example, key device 3 3 0) of one key device is transmitted to the other key device (for example, key device 3 4 0) by the processing of step S 7 3 and step S 7 4 and stored. Therefore, two key devices (key device 330 and key device 340) that are touched will store the same key information.

After the process of step S 73 or after the process of step S 74, the process proceeds to step S 75, and the key device 330 is a terminal (eg, key device 320) that is a terminal (eg, It is determined whether or not it is connected to the personal computer 3) in FIG. 1 (for example, whether the USB terminal 32 3 is attached to the USB terminal constituting the communication unit 6 9 of the terminal (personal computer 3 in FIG. 1)). . That is, as shown in FIG. The key device 330 and the key device 340, which are mutually contacted, are separated as shown in FIG. 25 and connected to the respective terminals (for example, personal computer 3 and personal computer 4). If it is determined in step S75 that the terminal is not connected, the process waits until it is determined that the terminal is connected. If it is determined in step S75 that the terminal is connected, the process proceeds to step S76, and the key device 330 receives the key information (key information generated by the process of step S73, Alternatively, the key information received by the process of step S 74 is transferred to the terminal (in this example, the personal computer 3 in FIG. 1) via the 1 ^ 8 terminal 3 32 (communication unit 6 9) .

 The other key device 340 performs the same processing, for example, transfers key information to another terminal (personal computer 4 in FIG. 1).

 Similarly, the same key information can be stored in an arbitrary number of key devices by bringing the key devices attached to each terminal into contact with each other and repeating the operation of transferring the key information from one to the other. it can. The key information transferred by each key device is supplied to the attached personal computer. Each personal computer executes the processing as shown in FIG. 7 described above, and performs position limited communication with the personal computer.

 In this example, the USB terminal is provided. However, other terminals may be used as long as they can be attached to the terminal connector. For example, when the key device 330 is a memory stick, the memory stick may be mounted as it is in the memory stick mounting slot (not shown) of the terminal.

 Next, another example of key information delivery will be described with reference to FIG.

In the example of FIG. 26, the physical information communication unit 4 causes the inside of the personal computer 3 and the personal computer 4 to receive and recognize the key information transmitted from the eyelid information generating device 401 attached to the user's body. A personal computer 3 and a personal computer 4 communicate with each other based on key information supplied from the same user. Specifically, communication between the key information generation apparatus 401 and the personal computers 3 and 4 worn by the user on the body is performed by the physical information communication unit provided inside the personal computer 3. , 400 by touching the user's hand. The key information generation device 401 transmits the user's unique identifier and the self-generated key information to the physical information communication unit 4 0 2 of the personal computer 3 via the user's hand 4 0 0. The detailed configuration can be applied to the configuration described in Japanese Patent Application Laid-Open No. 2 0 1 1 5 5 6 8 by the present applicant.

 In the example shown in Fig. 26, communication is made via hand 400, but other parts may be used as long as the body is used.

 The above explanation is a communication with a limited position (distance) (for example, limited to table 1), and it is not possible to see the contents of the communication (such as the information displayed on the screen) by unspecified others. It was assumed. In the office environment, etc., this communication can be used because there are only a limited number of people who can physically access the conference room and other tables. On the other hand, in public space, there is a risk that a device that intercepts this communication (communication by position limitation) will be used.

 Next, with reference to FIG. 27, an example of position limited communication in such a case (public space) will be described.

The PDA 40 and the personal computer 3 are disposed at positions where position limited communication can be performed. The communication method of position limited communication may be an example of proximity communication by electrostatic coupling as shown in FIG. 1 described above, infrared communication by infrared light as shown in FIG. 8, electromagnetic induction as shown in FIG. Proximity communication by proximity, Proximity communication by electrostatic coupling as shown in Fig. 10, Proximity communication by electromagnetic induction as shown in Fig. 1 1, Proximity communication by electrostatic coupling as shown in Fig. 1, Fig. 1 Proximity communication by electromagnetic induction as shown in FIG. 8, proximity communication by electrostatic coupling as shown in FIG. 20, proximity communication by electrostatic coupling as shown in FIG. 23 (or communication by direct connection), Or Any of the close proximity communication by physical information communication as shown in FIG. Note that the PDA 40 and the personal computer 3 perform position limited communication, respectively. Configuration (for example, in the case of the example of FIG. 1, the receiver 13 of the personal computer 3).

 The communication process in FIG. 27 will be described with reference to the flowcharts of FIG. 28 and FIG.

 First, the communication process in the PDA 410 will be described with reference to FIG. Note that this process is performed by the user of PDA 4 0,. It is started when a command to communicate with one personal computer 3 is given.

 In step S101, the PDA 410 obtains its own private key S1 and public key P1 from a certificate authority (not shown). The secret key S1 is higher than the public key P1, and can decrypt the information encrypted by the public key P1 with the secret key S1. Note that this process is performed by reading out the stored keys if these keys have already been obtained and stored.

 In step S102, the PDA 410 transmits the public key P1 obtained by the process of step S101 by position limited communication (for example, proximity communication by electrostatic coupling). When the personal computer 3 receives this public key P 1 (for example, it receives it by the receiving device 13) (step S 121 in FIG. 29 described later), it acquires the secret key S 2 (FIG. 29 described later) Step S 1 22) Encrypts the secret key S 2 with the public key P 1 and sends it (step S 1 24 in FIG. 29 described later).

 In step S103, the PDA 410 is encrypted by the public key P1 transmitted from the personal computer 3 (transmitted from the personal computer 3 by the process of step S124 in FIG. 29 described later). The received secret key S 2 is received. Note that in FIG. 27, E {K, D} means that D is processed (in this case, encrypted) by K. Therefore, in the example of FIG. 27, E {P 1, S 2} means that the secret key S 2 is encrypted with the public key P 1.

In step S104, the PDA 410 decrypts the secret key S2 encrypted by the public key P1 with the secret key S1 to obtain the secret key S2. In the case of the example of FIG. 27, E {S1, E {P1, S2}} power corresponds to this decoding process. In step S105, the PDA 410 determines whether the user has input a command to transmit information (eg, an image file). If it is determined that the information is to be transmitted, the PDA 4 10 encrypts the information (for example, an image file) with the secret key S 2 and transmits it to the personal computer 3 in step S 106. At this time, the communication method is normal wireless communication (for example, communication using a wireless LAN).

 In step S 107, whether the PDA 4 10 has transmitted information from the personal computer 3 (for example, transmitted by wireless LAN communication) (in step S 1 26 in FIG. 29 described later, the personal computer Determine whether information has been sent from 3). In this example, the information transmitted from the personal computer 3 is encrypted by the secret key S2. This information is shown as E {S 2, data} in the example of FIG.

 In step S108, the PDA 410 receives the information (information encrypted with the secret key S2) transmitted from the personal computer 3 (for example, the wireless LAN communication unit 12). In step S104, decryption is performed using the acquired secret key S2.

 If it is determined in step S 1 0 5 that no information is to be transmitted, or if it is determined in step S 1 0 7 that no information is transmitted, or, after the process of step S 1 0 8, the process ends. Be done.

 Next, the process of the personal computer 3 corresponding to the process executed by the PDA 410 of FIG. 28 will be described with reference to the flowchart of FIG.

 In step S 1 21, the communication unit 6 9 of the personal computer 3 is a public network P transmitted by position limited communication (for example, proximity communication by electrostatic coupling) in step S 102 in FIG. 28. Receive 1

In step S 12 2, the CPU 61 obtains its own secret key S 2 from the certificate authority. Information encrypted with public key P 2 is decrypted with secret key S 2 be able to. This process is also performed by reading out the stored secret key S 2 if it has already been obtained and stored.

 In step S123, the CPU 61 encrypts the secret key S2 acquired by the process of step S122 using the public key P1 received by the process of step S121. This process is shown as E {P l, S 2} in FIG. In step S 124, the CPU 61 controls the communication unit 69 to control the secret key S 2 (E {P 1, S 2}) encoded by the process of step S 132, It is transmitted to the PDA 4 10 using wireless communication (for example, communication via the wireless LAN communication unit 12).

 In step S125, the personal computer 3 determines whether or not a command to transmit information (for example, an image file) has been input by the user. If it is determined that the information is to be transmitted, the personal computer 3 encrypts the information (for example, an image file) with the secret key S 2 in step S 126 and transmits it to the PDA 4 10. At this time, the communication method is normal wireless communication (for example, communication using a wireless LAN) as described above.

 In step S 1 2 7, personal computer 3 has transmitted PDA 4 power, or other information has been transmitted (the processing in step S 1 0 6 in FIG. Whether or not it has been judged. In this example, the information sent from the PDA 4 10 is encrypted with the secret key S 2. This information is shown as E {S 2, data} in Figure 2 7.

 At step S 1 2 8, the personal computer 3 receives the information (the information encrypted by the secret key S 2) transmitted by the PDA 4 10, and the process at step S 1 2 2. Decrypt using the acquired secret key S2.

If it is determined in step S 1 2 5 that no information is to be transmitted, or if it is determined in step S 1 2 7 that no information is transmitted, or, after the process of step S 1 2 8, the process ends. Be done. Thus, after transmitting the public key P 1 by position limited communication (for example, proximity communication using electrostatic coupling) and encrypting the secret key S 2 using the public key P 1, the normal wireless is not transmitted. Even when there is a risk that communication may be intercepted in a public space, etc., by exchanging data encrypted using the secret key S 2 using communication (for example, communication by wireless LAN). It can communicate without the information being read by other users.

 By the above processing, the key information is distributed to a plurality of information processing devices arranged in a predetermined space (for example, on the table 1), and the secure communication is performed by exchanging the information encrypted by the key information. Can do.

 Also, communication can be established by a simple operation.

 Furthermore, if the position of the information processing apparatus arranged in a predetermined space (for example, on the table 1) is moved, the overhead information is updated after a predetermined time has elapsed, and thus the position moved information It is possible to prevent unauthorized use of information by the processing device. In addition, by arranging the plurality of electrode lines 11 (see FIGS. 10 and 11), the relative position of the plurality of information processing devices can be displayed on the display unit of the information processing device. Information transfer can be controlled from its physical location without knowing the name and address of each device).

 Furthermore, key information can be distributed by using a device (pen) that has the function of randomly generating keys (Fig. 14).

 In addition, the information processing apparatus itself can generate key information and transmit the key information to another information processing apparatus (FIG. 20).

 Furthermore, the key information can be generated on the device (Fig. 21) directly connected to the information processing device, the key information can be shared with other devices, and the key information can be transferred easily to the information processing device. Information can be shared.

Also, key information can be transferred through the body (Fig. 26). Furthermore, by distributing the public key to a plurality of information processing devices by position limited communication, each information processing device encrypts the secret key with the public key and performs communication, so that secure communication can be performed even in the public space or the like. It can be done.

 The series of processes described above can be performed not only by hardware but also by software. When a series of processes are to be executed by software, the various programs should be executed by installing a computer that is built into the dedicated hardware or various programs. It is installed from a network or recording medium, for example, on a general-purpose personal computer that can

 This recording medium is distributed to provide the program to the user separately from the main unit of the device. A magnetic disk (including a floppy disk) with recorded programs, an optical disk (CD-ROM (Compact Disk-Read) Devices not only composed of package media consisting of Only Memory), DVD (including Digital Versatility), Magneto-Optical Disk (including Mini-Disk), or semiconductor memory etc. It consists of a ROM, a hard disk, etc., with the program recorded, which is provided to the user in the state of being incorporated in the main unit.

 In the present specification, in the step of describing a computer program, of course, processing performed in chronological order according to the described order is of course processing executed in parallel or individually, even if not necessarily chronologically processing. Is also included. Also, in the present specification, the term "system" refers to an entire apparatus constituted by a plurality of apparatuses. Industrial applicability

 As described above, according to the present invention, communication can be performed. In particular, according to the present invention, communication can be performed easily and safely in a limited space.

Claims

The scope of the claims

 1. A key information transmission device for generating and transmitting key information for communication by a plurality of information processing devices, receiving the key information transmitted by the key information transmission device, and based on the key information A communication system comprising: a first information processing apparatus for performing communication; and a second information processing apparatus for receiving the key information transmitted by the key information transmitting apparatus and performing communication based on the key information. ,

 The key information transmitting device is

 Key number generation means for generating a key number;

 A fixed number storage unit for storing a fixed number to be a network address; and the first information processor and the second information processing device in which the key information including the key number and the fixed number is arranged at a limited position. A key information transmission unit to be transmitted to the information processing apparatus

 Equipped with

 The first information processing apparatus is

 First key information receiving means for receiving the key information transmitted from the key information transmitting device;

 An information encryption unit that encrypts information based on the key number included in the key information received by the first key information reception unit;

 An information transmission unit for transmitting the information encrypted by the information encryption unit, using the fixed number included in the key information received by the first key information reception unit as a network address;

 Equipped with

 The second information processing apparatus is

 Second key information receiving means for receiving the key information transmitted from the key information transmitting device;

Information receiving means for receiving the encrypted information transmitted by the first information processing apparatus; Information decryption means for decrypting the encrypted information received by the information reception means based on the key number included in the key information received by the second key information reception means;

 A communication system comprising:

2. A key information transmitting apparatus that generates key information for communication by a plurality of information processing apparatuses, which is disposed in a predetermined space, and transmits the key information

 Key number generation means for generating a key number;

 Fixed number storage means for storing a fixed number serving as a network address, Key information transmission for transmitting the key information including the key number and the fixed number to a plurality of the information processing devices arranged at limited positions Means and

 An apparatus for transmitting key information comprising:

 3. A key information modulation means for modulating the key information including the key number and the fixed number, further comprising:

 The key information transmission means transmits the key information modulated by the key information modulation means.

 The key information transmitting apparatus according to claim 2, wherein the key information transmitting apparatus.

4. The key number generation unit generates the key number every predetermined time or when instructed by the user

 The key information transmitting apparatus according to claim 2, wherein the key information transmitting apparatus.

 5. The key information transmitting means includes a communication medium disposed in the space for communicating with the information processing apparatus, and performs close communication with the information processing apparatus disposed in proximity to the communication medium. Send the key information

 The key information transmitting apparatus according to claim 2, wherein the key information transmitting apparatus.

 6. The key information transmission means is housed in one portable housing, and the key information transmission means transmits the key information by performing close proximity communication with the information processing device that has come in contact with the key information transmission means.

The key information transmitting apparatus according to claim 2, wherein the key information transmitting apparatus.

7. The key number generation means and the fixed number storage means are also accommodated in the case.

 The key information transmission device according to claim 6, characterized in that:

 8. The key number generation means and the fixed number storage means are provided independently of the housing, The key information transmission means is provided independently of the housing, The key number generation The key information generated by the means and the fixed number storage means, and transmitting the read key information by performing close proximity communication with the information processing apparatus that has made contact with the key information.

 The key information transmission device according to claim 6, characterized in that:

9. The key information transmission unit transmits the key information to the information processing device when connected to the information processing device.

 Close proximity communication means in close proximity communication with another key information transmission device that has come into contact;

 Storage means for storing the key information transmitted by the first other key information transmission device by performing close proximity communication with the first other key information transmission device that has come into contact by the proximity communication means;

 And further

 The proximity communication means transmits the key information stored in the storage means to the second other key information transmission device which has made contact, by performing close proximity communication with the second other key information transmission device which has made contact.

 The key information transmission device according to claim 6, characterized in that:

 The key information transmission unit transmits the key information by performing close proximity communication with the information processing apparatus disposed in the space through an infrared ray.

 The key information transmitting apparatus according to claim 2, wherein the key information transmitting apparatus.

 1 1. The key information transmitting means further generates position information indicating a relative position in the space, and generates the key information including the key number, the fixed number, and the position information.

The key information transmitting apparatus according to claim 2, wherein the key information transmitting apparatus.

The key information transmission means transmits the key information to the information processing apparatus via the user's body.

 The key information transmitting apparatus according to claim 2, wherein the key information transmitting apparatus.

 1 3. In the key information transmission method of the key information transmission apparatus, key information for communication with a plurality of information processing apparatuses arranged in a predetermined space is generated and transmitted.

 A key number generation step of generating a key number;

 Acquisition step of acquiring a fixed number to be a network address;

 A key information transmission step of transmitting the key information including the key number and the fixed number to a plurality of the information processing devices arranged at a limited position;

 A key information transmission method comprising:

 A program for generating key information for communication by a plurality of information processing apparatuses arranged in a predetermined space, and controlling the key information transmitting apparatus to be transmitted,

 A key number generation step of generating a key number;

 An acquisition step of acquiring a fixed number to be a network address;

 A key information transmission step of transmitting the key information including the key number and the fixed number to a plurality of the information processing devices arranged at a limited position;

 And a recording medium storing a computer readable program.

 1 5. A computer that generates key information for communication by a plurality of information processing apparatuses arranged in a predetermined space, and controls a key information transmitting apparatus to transmit

 A key number generation step of generating a key number;

 An acquisition step of acquiring a fixed number to be a network address;

 A key information transmission step of transmitting the key information including the key number and the fixed number to a plurality of the information processing devices arranged at a limited position;

 A program characterized by performing processing including:

1 6. In an information processing apparatus which is disposed in a predetermined space and which communicates with another information processing apparatus based on key information, Key information receiving means for receiving the key information including a key number and a fixed number by position limited communication;

 An information encryption unit that encrypts information based on the key number included in the key information received by the key information reception unit;

 The fixed number included in the key information received by the key information receiving means is a network address, and the information encrypted by the information encrypting means is stored in the other information processing apparatus disposed in the space. An information transmitting unit for transmitting, an information receiving unit for receiving the encrypted information from the other information processing apparatus, an encrypted information received by the information receiving unit, the key information receiving unit Information decryption means for decrypting based on the key number contained in the received key information;

 An information processing apparatus comprising:

 The key information receiving means receives the key information by performing close proximity communication when the key information receiving device contacts the key information transmitting device for transmitting the key information.

 The information processing apparatus according to claim 16, characterized in that:

 The key information receiving means receives the key information from the key information transmitting apparatus by performing close proximity communication when connected to a key information transmitting apparatus for transmitting the key information.

 The information processing apparatus according to claim 16, characterized in that:

 The key information receiving means receives the key information by performing near field communication with a key information transmitting device that transmits the key information arranged in the space with infrared light. The information processing apparatus according to claim 16.

The key information further includes position information indicating a relative position in the space

 The information processing apparatus according to claim 16, characterized in that:

Display means for displaying relative position of the other information processing device in the space based on the position information The information processing apparatus according to claim 20, further comprising:

The information processing apparatus according to claim 16, wherein the key information receiving means receives the key information via the user's body.

2 3. Key information generation means for generating the key information

 And a key information transmission unit that transmits the key information when contacting the other information processing apparatus.

 The key information generation unit updates the key information to new key information when a predetermined operation is performed by the user.

 The information processing apparatus according to claim 16, characterized in that:

A first secret key which is a secret key number, and a first obtaining means for obtaining a public key corresponding to the first secret key.

 Public key transmission means for transmitting the public key acquired by the first acquisition means to the other information processing apparatus;

 Secret key receiving means for receiving the second secret key of the other information processing apparatus, which is encrypted by the public key and transmitted from the other information processing apparatus;

 Decrypting the encrypted second secret key received by the secret key receiving means with the first secret key, and acquiring the second secret key of the other information processing apparatus With the second acquisition method

 The information processing apparatus according to claim 16, further comprising:

The information encryption unit encrypts the information based on the second secret key acquired by the second acquisition unit.

 The information decryption unit decrypts the information based on the second secret key acquired by the second acquisition unit.

 The information processing apparatus according to claim 24, characterized in that:

 2 6. Public key receiving means for receiving the public key of the other information processing apparatus from the other information processing apparatus,

Private key acquisition means for acquiring one's own private key, A secret key encryption unit that encrypts the secret key acquired by the secret key acquisition unit based on the public key received by the public key reception unit;

 Secret key transmission means for transmitting the secret key encrypted by the secret key encryption means to the other information processing apparatus;

 The information processing apparatus according to claim 16, further comprising:

The information encryption unit encrypts the information based on the secret key acquired by the secret key acquisition unit.

 The information decryption unit decrypts the information based on the secret key acquired by the secret key acquisition unit.

 The information processing apparatus according to claim 26, characterized in that:

 28. An information processing method of an information processing apparatus which is disposed in a predetermined space and which communicates with another information processing apparatus based on key information,

 A key information receiving step of receiving the key information including a key number and a fixed number by position limited communication;

 An information encryption step of encrypting information based on the key number included in the key information received by the processing of the key information reception step;

 The fixed number included in the key information received by the process of the key information receiving step is a network address, and the information encrypted by the process of the information encryption step is the other information arranged in the space. Transmitting information to the processing device;

 An information receiving step of receiving the encrypted information from the other information processing apparatus;

 An information decryption step of decrypting the encrypted information received by the process of the information receiving step, based on the key number included in the key information received by the key information receiving step;

An information processing method comprising:

29. A program for controlling an information processing apparatus disposed in a predetermined space and performing communication with another information processing apparatus based on key information,

 A key information receiving step of receiving the key information including a key number and a fixed number by position limited communication;

 An information encryption step of encrypting information based on the key number included in the key information received by the processing of the key information reception step;

 The fixed number included in the key information received by the process of the key information receiving step is a network address, and the information encrypted by the process of the information encryption step is the other information arranged in the space. Transmitting information to the processing device;

 An information receiving step of receiving the encrypted information from the other information processing apparatus;

 An information decryption step of decrypting the encrypted information received by the process of the information receiving step, based on the key number included in the key information received by the key information receiving step;

 And a recording medium storing a computer readable program.

 3 0. A computer that is disposed in a predetermined space and controls an information processing apparatus that communicates with another information processing apparatus based on key information

 A key information receiving step of receiving the key information including a key number and a fixed number by position limited communication;

 An information encryption step of encrypting information based on the key number included in the key information received by the processing of the key information reception step;

The fixed number included in the key information received by the process of the key information receiving step is a network address, and the information encrypted by the process of the information encryption step is the other information arranged in the space. Transmitting information to the processing device; An information receiving step of receiving the encrypted information from the other information processing apparatus;

 An information decryption step of decrypting the encoded information received by the processing of the information reception step, based on the key number included in the key information received by the processing of the key information reception step;

 A program characterized by performing processing including: