WO2017110969A1

WO2017110969A1 - Wireless communication system, server, terminal, wireless communication method, and program

Info

Publication number: WO2017110969A1
Application number: PCT/JP2016/088287
Authority: WO
Inventors: 雅幸佐藤
Original assignee: 日本電気株式会社
Priority date: 2015-12-24
Filing date: 2016-12-22
Publication date: 2017-06-29
Also published as: JP2017118312A

Abstract

The present invention improves the security of communication between a transmitting terminal and receiving terminal in a short-range wireless communication system. A wireless communication system provided with a server for updating a common key with prescribed timing, and a first terminal for transmitting a packet that includes prescribed information encrypted using a common key updated by the server to a second terminal on the basis of a short-range wireless communication technique. A second terminal receives the packet from the first terminal, and decrypts the prescribed information included in the packet using a common key updated by the server.

Description

Wireless communication system, server, terminal, wireless communication method, and program

[Description of related applications]
The present invention is based on a Japanese patent application: Japanese Patent Application No. 2015-251471 (filed on Dec. 24, 2015), and the entire description of the application is incorporated herein by reference.
The present invention relates to a wireless communication system, a server, a terminal, a wireless communication method, and a program, and more particularly, wireless based on short-range wireless communication technology such as BLE (Bluetooth (registered trademark) Low Energy) capable of communication with extremely low power. The present invention relates to a communication system, a key server that provides a common key used in such wireless communication, a beacon terminal that transmits an advertisement packet, a receiving terminal that receives the advertisement packet, a wireless communication method, and a program.

In recent years, beacon terminals have been increasingly installed as communication devices in stores and exhibition booths. The beacon terminal transmits an advertisement packet including the identifier of the beacon terminal based on BLE (Bluetooth (registered trademark) Low Energy) technology that enables communication with extremely low power. When a terminal (for example, a smartphone, tablet terminal, notebook PC (Personal Computer), etc., hereinafter referred to as “receiving terminal”) approaches a predetermined distance from the beacon terminal, an advertisement packet sent from the beacon terminal is received. Then, the application software installed in the receiving terminal in advance extracts the beacon terminal identifier from the advertisement packet, and sends the extracted identifier to a predetermined distribution server. The distribution server transmits information such as store product information and exhibition booth product information to the receiving terminal according to the identifier received from the receiving terminal. The receiving terminal displays the information received from the distribution server on the display. Thereby, for example, push-type advertisements related to store products, exhibition booth products, and the like are possible.

As a related technique of the present invention, Patent Document 1 discloses a technique of communicating using a common key between a beacon device and a server.

In Patent Document 2, in communication between a communication terminal and an electronic device (health device, housing facility, peripheral device) that is an operation target of the communication terminal, security is achieved by using BLE and encryption technology based on a common key. The technology to be secured is described.

Furthermore, Patent Document 3 describes a technique in which a service control device generates an authentication key used for communication between itself and a service using device every arbitrary period and distributes the authentication key to the service using device.

Non-Patent Document 1 describes a key derivation function (KDF, Key 、 Derivation Function) for generating a key.

International Publication No. 2015/118971 International Publication No. 2015/111444 JP 2003-244135 A

The entire disclosures of the above patent documents and non-patent documents are incorporated herein by reference. The following analysis was made by the present inventors.

A technology is known in which a beacon terminal (hereinafter also referred to as “transmitting terminal”) encrypts information included in an advertisement packet using a common key method. Specifically, the transmitting terminal encrypts information such as the identifier of the transmitting terminal with a common key and then sends it out as an advertisement packet, and the receiving terminal decrypts it with the common key so that the information such as the identifier of the transmitting terminal is transmitted. To extract. Here, the common key is generally embedded in hardware in each of the transmission terminal and the reception terminal, and is difficult to change. In this case, when a malicious person obtains the common key, information such as the identifier of the transmitting terminal may be decrypted, and “spoofing” of the transmitting terminal may be possible.

In the techniques described in Patent Documents 1 and 2, since the common key is invariant, if the common key is leaked, there is a possibility that a security problem may occur.

Patent Document 3 discloses a technique for generating an authentication key used for communication between itself and another device for each arbitrary period. However, when this technology is applied to a transmission terminal (beacon terminal) and a reception terminal that perform communication based on BLE (Bluetooth (registered trademark) Low Energy), the transmission terminal itself generates a common key. However, since it is difficult to establish communication for securely distributing a key between a transmitting terminal and a receiving terminal that perform communication by BLE, a key generated or updated by the transmitting terminal is received from the transmitting terminal. There arises a problem that it cannot be safely distributed to terminals.

Therefore, it is an issue to improve the security of communication between the transmission terminal and the reception terminal in the short-range wireless communication system. An object of the present invention is to provide a wireless communication system, a terminal, a server, a wireless communication method, and a program that contribute to solving such a problem.

The wireless communication system according to the first aspect of the present invention includes a server that updates a common key at a predetermined timing, and a packet that includes predetermined information encrypted using the common key updated by the server. A first terminal that transmits to a second terminal based on a communication technology, the second terminal receives the packet from the first terminal, and the predetermined information included in the packet is Decrypt using the shared key updated by the server.

The server according to the second aspect of the present invention provides a key update unit that updates a common key at a predetermined timing, and a packet that includes predetermined information encrypted using the common key, based on the short-range wireless communication technology. For the first terminal that transmits and the second terminal that receives the packet from the first terminal and decrypts the predetermined information included in the packet using a common key, the key update unit And a key providing unit that provides the updated common key.

The first terminal according to the third aspect of the present invention includes a key receiving unit that receives a common key updated by a server at a predetermined timing, and a packet that includes predetermined information encrypted using the common key. An encryption unit to be generated; and the second terminal that receives the packet from the first terminal and decrypts the predetermined information included in the packet using the common key generated by the server. And a packet transmission unit that transmits the data based on the short-range wireless communication technology.

A second terminal according to a fourth aspect of the present invention includes a key receiving unit that receives a common key updated by a server at a predetermined timing, and a packet that includes predetermined information encrypted using the common key. A packet receiving unit that receives the packet from a first terminal that transmits based on a short-range wireless communication technology; and a decrypting unit that decrypts predetermined information included in the packet using the common key. Yes.

The wireless communication method according to the fifth aspect of the present invention includes a step in which a server updates a common key at a predetermined timing, and a predetermined terminal encrypted by using the common key updated by the server. A step of transmitting a packet including information based on a short-range wireless communication technology; a second terminal receives the packet from the first terminal; and the server updates predetermined information included in the packet Decrypting using the common key.

The wireless communication method according to the sixth aspect of the present invention is a short-range wireless communication technique in which a server updates a common key at a predetermined timing, and a packet including predetermined information encrypted using the common key. Updating the first terminal that transmits based on the first terminal and the second terminal that receives the packet from the first terminal and decrypts the predetermined information included in the packet using a common key Providing a common key.

According to a seventh aspect of the present invention, there is provided a wireless communication method in which a first terminal receives a common key updated by a server at a predetermined timing, and predetermined information encrypted using the common key. Generating a packet including, for the second terminal that receives the packet from the first terminal and decrypts the predetermined information included in the packet using the common key generated by the server, Transmitting the packet based on short-range wireless communication technology.

According to an eighth aspect of the present invention, there is provided a wireless communication method in which a second terminal receives a common key updated by a server at a predetermined timing; and predetermined information encrypted using the common key. Receiving the packet from a first terminal that transmits the packet containing the packet based on short-range wireless communication technology; and decrypting predetermined information included in the packet using the common key.

According to a ninth aspect of the present invention, a program for updating a common key at a predetermined timing and a packet including predetermined information encrypted using the common key are transmitted based on a short-range wireless communication technique. Provide the updated common key to the first terminal and the second terminal that receives the packet from the first terminal and decrypts the predetermined information included in the packet using the common key Processing to be executed by the server.

A program according to a tenth aspect of the present invention is a process of accepting a common key updated by a server at a predetermined timing to a computer provided in a first terminal, and encrypted using the common key. Generating a packet including the predetermined information, receiving the packet from the first terminal, and decrypting the predetermined information included in the packet using a common key generated by the server And causing the terminal to execute processing for transmitting the packet based on a short-range wireless communication technology.

A program according to an eleventh aspect of the present invention is a process of accepting a common key updated by a server at a predetermined timing with respect to a computer provided in a second terminal, and encrypted using the common key. Processing for receiving the packet from the first terminal that transmits the packet including the predetermined information based on the near field communication technology, and processing for decrypting the predetermined information included in the packet using the common key And execute.

Note that the program can also be provided as a program product recorded in a non-transitory computer-readable storage medium.

According to the wireless communication system, the server, the terminal, the wireless communication method, and the program according to the present invention, it is possible to improve the security of communication between the transmitting terminal and the receiving terminal in the short-range wireless communication system.

It is a figure which illustrates the structure of the radio | wireless communications system which concerns on one Embodiment. It is a figure which illustrates other composition of the radio communications system concerning one embodiment. It is a block diagram which illustrates the composition of the server concerning one embodiment. It is a block diagram which illustrates the composition of the 1st terminal (transmission terminal) concerning one embodiment. It is a block diagram which illustrates the composition of the 2nd terminal (receiving terminal) concerning one embodiment. It is a figure which illustrates the structure of the radio | wireless communications system which concerns on 1st Embodiment. It is a block diagram which illustrates the composition of the radio communications system concerning a 1st embodiment. It is a sequence diagram which illustrates the operation | movement which distributes a common key to a beacon terminal in the radio | wireless communications system which concerns on 1st Embodiment. 4 is a sequence diagram illustrating an operation of distributing a common key to a receiving terminal in the wireless communication system according to the first embodiment. FIG. FIG. 5 is a sequence diagram illustrating an operation of authenticating a receiving terminal in the wireless communication system according to the first embodiment. It is a block diagram which illustrates the composition of the radio communications system concerning a 2nd embodiment. It is a sequence diagram which illustrates the operation | movement which distributes a common key to a beacon terminal in the radio | wireless communications system which concerns on 2nd Embodiment. It is a block diagram which illustrates the composition of the radio communications system concerning a 3rd embodiment. FIG. 10 is a sequence diagram illustrating an operation of distributing a common key to receiving terminals in a wireless communication system according to a third embodiment.

First, an outline of one embodiment will be described. Note that the reference numerals of the drawings attached to this summary are merely examples for facilitating understanding, and are not intended to limit the present invention to the illustrated embodiment.

FIG. 1 is a diagram illustrating a configuration of a wireless communication system according to an embodiment. Referring to FIG. 1, the wireless communication system includes a server 2 (for example, a key server) that updates a common key at a predetermined timing, and predetermined information (for example, a beacon terminal) encrypted using the common key updated by the server 2. Packet (for example, an advertisement packet) including the identifier of the terminal 4 that is a second terminal 6 (for example, a receiving terminal) based on short-range wireless communication technology (for example, BLE (Bluetooth (registered trademark) Low Energy)). A first terminal 4 (for example, a beacon terminal) for transmission is provided. Here, the second terminal 6 receives the packet from the first terminal 4, and decrypts the predetermined information included in the packet using the common key updated by the server 2.

According to such a wireless communication system, it is possible to improve the security of communication between the terminal 4 on the transmission side and the terminal 6 on the reception side in the short-range wireless communication system. Because the common key used by the terminal 4 for encrypting the predetermined information contained in the packet and used by the terminal 6 for decryption is updated by the server 2 at a predetermined timing. However, this is because a security problem occurs only temporarily.

FIG. 2 is a diagram illustrating another configuration of the wireless communication system according to the embodiment. Referring to FIG. 2, the wireless communication system further includes a relay station 8 that relays the common key updated by the server 2. At this time, the first terminal 4 (for example, a beacon terminal) receives the common key updated by the server 2 via the relay station 8 (for example, connectable to a WAN (Wide-Area-Network)). According to such a wireless communication system, the first terminal 4 cannot communicate directly with the server 2 (for example, the terminal 4 as a beacon terminal cannot connect to a LAN (Local Area Network) / WAN (Wide Area Network)). However, the common key used for encryption by the first terminal 4 can be updated.

Here, the relay station 8 can receive the shared key updated by the server 2 from the server 2 via SSL (Secure Socket Layer) communication established between the server 2 and the relay station 8. Further, the relay station 8 may display the common key received from the server 2. Further, the first terminal 4 may accept manual input of the common key by the user with reference to the common key displayed by the relay station 8. According to such a wireless communication system, the shared key updated by the server 2 can be safely distributed to the first terminal 4 on the assumption that the user who inputs the shared key can be trusted.

Further, the second terminal 6 (for example, the receiving terminal) may receive the shared key updated by the server 2 from the server 2 via the SSL communication established between the server 2 and the second terminal 6. Good. According to such a wireless communication system, the shared key updated by the server 2 can be safely distributed to the second terminal 6.

FIG. 3 is a block diagram illustrating the configuration of the server 2 (for example, key server) according to an embodiment. Referring to FIG. 3, the server 2 has a key update unit 10 that updates a common key at a predetermined timing, and a packet (for example, an advertisement packet) that includes predetermined information encrypted using the common key. A first terminal (terminal 4 in FIG. 1 or FIG. 2) that transmits based on a wireless communication technology (for example, BLE), and a packet received from the first terminal, and predetermined information included in the packet is transferred to the common key And a key providing unit 12 that provides a common key updated by the key updating unit 10 to a second terminal (terminal 6 in FIG. 1 or 2) that performs decryption using

FIG. 4 is a block diagram illustrating the configuration of the terminal 4 (for example, a beacon terminal) according to an embodiment. Referring to FIG. 4, the terminal 4 includes a key receiving unit 14 that receives a common key updated by a server (the server 2 in FIG. 1 or FIG. 2) at a predetermined timing, and a predetermined encrypted using the common key. An encryption unit 16 that generates a packet (for example, an advertisement packet) including information (for example, an identifier of the terminal 4), and a server that receives the packet from the first terminal 4 and generates predetermined information included in the packet A packet transmission unit 18 that transmits a packet to the second terminal (terminal 6 in FIG. 1 or FIG. 2) using the common key, based on a short-range wireless communication technology (for example, BLE). ing.

FIG. 5 is a block diagram illustrating the configuration of a terminal 6 (for example, a receiving terminal) according to an embodiment. Referring to FIG. 5, a key reception unit 20 that receives a common key updated by a server (server 2 in FIG. 1 or 2) at a predetermined timing, and a packet that includes predetermined information encrypted using the common key A packet receiving unit 22 that receives a packet from a first terminal (terminal 4 in FIG. 1 or 2) that transmits a packet based on short-range wireless communication technology, and predetermined information included in the packet using a common key And a decoding unit 24 for decoding.

According to these servers 2 (FIG. 3), terminal 4 (FIG. 4), or terminal 6 (FIG. 5), communication between the terminal 4 on the transmission side and the terminal 6 on the reception side in the short-range wireless communication system. Security can be improved. This is because the common key used by the terminal 4 for encrypting the predetermined information included in the packet and the terminal 6 used for decryption by the terminal 6 is updated by the server 2 at a predetermined timing. Even so, the security problem only occurs temporarily.

As described above, according to an embodiment, for example, information (for example, an identifier of a beacon terminal) included in an advertisement packet of a beacon terminal is encrypted by a common key method, and the common key is periodically updated to transmit a transmitter ( Distribution to a beacon terminal) and a receiver (BLE receiving terminal) makes it possible to enhance security. According to one embodiment, the key can be safely distributed (for example, by SSL) between the server 2 that updates the key and the relay station 8 or the terminal 6. There is no problem that the generated key cannot be securely distributed as in the case of applying.

<Embodiment 1>
Next, the wireless communication system according to the first embodiment will be described in detail with reference to the drawings.

[Constitution]
FIG. 6 is a diagram illustrating a configuration of the wireless communication system according to the present embodiment. Referring to FIG. 6, the wireless communication system includes a key server 32, a relay station 38, a beacon terminal 34, and a receiving terminal 36. The key server 32 and the relay station 38 are connected via a WAN (Wide Area Network). Similarly, the key server 32 and the receiving terminal 36 are also connected via the WAN. On the other hand, the beacon terminal 34 and the receiving terminal 36 communicate based on short-range wireless communication technology (here, BLE (Bluetooth (registered trademark) Low Energy) technology is used as an example)).

The key server 32 updates the common key used in the BLE communication between the beacon terminal 34 and the receiving terminal 36 at a predetermined timing. The relay station 38 relays the common key updated by the key server 32 to the beacon terminal 34. The beacon terminal 34 receives the common key updated by the key server 32 via the relay station 38. The beacon terminal 34 transmits an advertisement packet including the identifier of the beacon terminal 34 encrypted using the common key updated by the key server 32 based on BLE. The receiving terminal 36 receives the advertisement packet from the beacon terminal 34, and decrypts the identifier of the beacon terminal 34 included in the advertisement packet using the common key updated by the key server 32. The application software preinstalled in the receiving terminal 36 sends the identifier of the beacon terminal 34 extracted from the advertisement packet to a predetermined distribution server (not shown), and the distribution server determines the merchandise of the store according to the identifier. Receive information such as information and product information of exhibition booths.

FIG. 7 is a block diagram illustrating the configuration of each device included in the wireless communication system shown in FIG. Hereinafter, detailed configurations of the key server 32, the relay station 38, the beacon terminal 34, and the receiving terminal 36 will be described with reference to the block diagram of FIG.

Referring to FIG. 7, the key server 32 includes a key update unit 40 and a key provision unit 42.

The key update unit 40 updates the common key at a predetermined timing (for example, at a constant cycle). The key update unit 40 may use, as the updated common key, the message digest obtained by inputting the code assigned to each provider and the pre-update common key to the one-way hash function as a message and a key, respectively. . As an example, the key update unit 40 can use the following function as the one-way hash function.

Derived key = HMAC-SHA-256 (key, S)

Here, HMAC-SHA-256 is a one-way hash function for generating a hash message authentication code (HMAC: Hash Message Authentication Code). A one-way hash function has a property (irreversibility) that an input cannot be read from a generated code. The message digest (derived key) on the left side is the updated common key. The input key on the right side is the previous common key. The input S is a message for stirring the key, and here, it is a code (for example, 6 octets, that is, 48 bits) uniquely assigned to each operator. The length of the common key can be, for example, 16, 24 or 32 octets, that is, 128, 192, or 256 bits.

The key update unit 40 generates an initial common key based on, for example, a pseudo random number. On the other hand, when updating the key, the key updating unit 40 substitutes the previous common key for the input key on the right side of the above formula, and obtains the updated key as derived key. When the common key is generated based on the pseudo random number every time, there is a risk that a random key generation algorithm, a random number, and further a common key generated from the random number may be estimated. However, as in the present embodiment, by generating a new key using the immediately preceding key, it is difficult to guess the common key, and the common key can be generated safely.

Further, the frequency with which the key update unit 40 updates the common key (that is, the expiration date of the common key) can be set to several days as an example. In addition, although there is a merit that the time required for key renewal can be reduced by extending the validity period of the common key, there is a trade-off relationship in which the state in which the security is lost is prolonged when the common key is leaked.

The key providing unit 42 provides the common key updated by the key updating unit 40 to the beacon terminal 34 via the relay station 38 and also to the receiving terminal 36. Here, when providing the common key to the relay station 38 and the receiving terminal 36, the key providing unit 42 may also notify the expiration date of the common key. The key providing unit 42 may transmit the common key updated by the key updating unit 40 to the relay station 38 via SSL (Secure Socket Layer) communication established with the relay station 38. Similarly, the key providing unit 42 may transmit the common key updated by the key updating unit 40 to the receiving terminal 36 via SSL communication established with the receiving terminal 36.

Referring to FIG. 7, the relay station 38 includes a key reception unit 56 and a display unit 58. The key receiving unit 56 receives the common key from the key providing unit 42 of the key server 32. The display unit 58 displays the common key received by the key receiving unit 56 on a display or the like.

Referring to FIG. 7, the beacon terminal 34 includes a key reception unit 44, an encryption unit 46, and a packet transmission unit 48.

The key reception unit 44 receives the common key updated by the key server 32 via the relay station 38. Specifically, the key receiving unit 44 receives manual input (for example, keyboard input) of the common key by the user who refers to the common key displayed on the display unit 58 of the relay station 38.

The encryption unit 46 encrypts the identifier of the beacon terminal 34 using the common key received by the key reception unit 44, and generates an advertisement packet including the encrypted identifier. The packet transmission unit 48 transmits the advertisement packet generated by the encryption unit 46 to the receiving terminal 36 based on a short-range wireless communication technology such as BLE.

Referring to FIG. 7, the receiving terminal 36 includes a key receiving unit 50, a packet receiving unit 52, and a decrypting unit 54. The key receiving unit 50 receives the common key updated by the key server 32 and its expiration date. Here, the key receiving unit 50 may receive the common key updated by the key server 32 from the key server 32 via SSL communication established between the key server 32 and the receiving terminal 36. Further, the key receiving unit 50 may acquire a new common key from the key server 32 when the expiration date given to the common key updated by the key server 32 has expired. The packet receiving unit 52 receives an advertisement packet from the beacon terminal 34. The decrypting unit 54 decrypts the identifier of the beacon terminal 34 included in the advertisement packet using the common key received by the key receiving unit 50.

[Operation]
Next, the operation of the wireless communication system according to the present embodiment will be described with reference to the drawings.

FIG. 8 is a sequence diagram illustrating the common key distribution operation from the key server 32 to the beacon terminal 34.

Referring to FIG. 8, the key update unit 40 of the key server 32 generates a common key using a pseudo random number (step A1).

Next, the key providing unit 42 of the key server 32 and the key receiving unit 56 of the relay station 38 establish SSL communication (step A2). At this time, a server certificate for the key server 32 and a client certificate for the relay station 38 are used. Since communication based on SSL is publicly known, detailed description is omitted.

When the SSL communication is established, the key providing unit 42 of the key server 32 transmits the common key to the key receiving unit 56 of the relay station 38 (step A3).

The display unit 58 of the relay station 38 displays the common key received by the key receiving unit 56 on a display or the like (step A4).

The key receiving unit 44 of the beacon terminal 34 receives the input of the common key from the user who refers to the common key displayed on the relay station 38 (for example, via the numeric keypad) (step A5).

The sequence in FIG. 8 (steps A1 to A5) is repeated each time the key update unit 40 of the key server 32 updates the common key at a predetermined timing (for example, a constant cycle).

FIG. 9 is a sequence diagram illustrating the common key distribution operation from the key server 32 to the receiving terminal 36.

Referring to FIG. 9, the packet receiving unit 52 of the receiving terminal 36 receives an advertisement packet including the encrypted identifier of the beacon terminal 34 from the packet transmitting unit 48 of the beacon terminal 34 (step B1).

Next, the decryption unit 54 of the receiving terminal 36 decrypts the identifier of the beacon terminal 34 using the common key (step B2).

When the expiration date given to the common key updated by the key server 32 has expired (step B3), the key receiving unit 50 newly obtains a common key from the key server 32 by the following operations (steps B4 to B6). get.

First, the key server 32 authenticates the receiving terminal 36 (step B4).

FIG. 10 is a sequence diagram illustrating the authentication operation of the receiving terminal 36. Here, as an example of the authentication procedure, RADIUS authentication (IEEE 802.1X authentication) can be used.

Referring to FIG. 10, the receiving terminal 36 sends an authentication request to the key server 32 (step C1).

Next, the key server 32 transmits an authentication request to an authentication server (also referred to as a RADIUS server; not shown in FIGS. 6 and 7) (step C2).

The authentication server verifies whether or not the receiving terminal 36 belongs to a member registered in advance (step C3).

If the receiving terminal 36 is already registered, the authentication server transmits a notification of “authentication OK” to the key server 32 (step C4).

Upon receipt of the “authentication OK” notification, the key server 32 further transmits the notification to the receiving terminal 36 (step C5).

With the above procedure, the authentication of the receiving terminal 36 by the key server 32 (step B4 in FIG. 9) is completed.

Returning to FIG. 9, the key providing unit 42 of the key server 32 and the key receiving unit 50 of the receiving terminal 36 establish SSL communication (step B5). At this time, a server certificate for the key server 32 and a client certificate for the receiving terminal 36 are used. Since communication based on SSL is publicly known, detailed description is omitted.

When the SSL communication is established, the key providing unit 42 of the key server 32 transmits the common key to the key receiving unit 50 of the receiving terminal 36 (step B6).

The decrypting unit 54 of the receiving terminal 36 decrypts the information included in the advertisement packet using the updated common key received by the key receiving unit 50 (step B7).

[effect]
According to the wireless communication system of this embodiment, the security of communication between the beacon terminal 34 and the receiving terminal 36 that perform BLE communication can be improved. This is because the beacon terminal 34 is used for encrypting the identifier of the beacon terminal 34 included in the advertisement packet, and the common key used for the decryption by the receiving terminal 36 is updated by the key server 32 at a predetermined timing. For this reason, even if the common key is leaked, a security problem occurs only temporarily.

In the present embodiment, a relay station 38 that relays the updated common key is provided by the key server 32, and the beacon terminal 34 is connected to the WAN (Wide Area Network) via the relay station 38. Accept the updated common key. Thereby, even when the beacon terminal 34 cannot connect to a LAN (Local Area Network) / WAN or the like, the beacon terminal 34 can update the common key used for encryption.

Furthermore, the relay station 38 can receive the common key from the key server 32 via SSL communication established between the key server 32 and the relay station 38. Further, the receiving terminal 36 receives the common key from the key server 32 via SSL communication established between the receiving terminal 36 and the key server 32. As a result, the shared key updated by the key server 32 can be safely distributed to the beacon terminal 34 and the receiving terminal 36.

<Embodiment 2>
Next, a wireless communication system according to the second embodiment will be described in detail with reference to the drawings. In the first embodiment, the user manually sends the key from the relay station to the beacon terminal. In this embodiment, key distribution from the relay station to the beacon terminal is automated.

[Constitution]
FIG. 11 is a diagram illustrating a configuration of the wireless communication system according to the present embodiment. Referring to FIG. 11, the wireless communication system includes a key server 32, a relay station 39, a beacon terminal 35, and a receiving terminal 36. The configurations of the key server 32 and the receiving terminal 36 are the same as those in the first embodiment. Below, it demonstrates centering on the difference of this embodiment and 1st Embodiment.

In this embodiment, between the relay station 39 and the beacon terminal 35, the WiFi (Wireless Fidelity) connection setting based on the passphrase (for example, WPA2 (WiFi Protected Access 2) encryption setting) is completed in advance, Assume that a connection is established.

Referring to FIG. 11, the relay station 39 of the present embodiment includes a key reception unit 56 and a key transmission unit 59. When the key receiving unit 56 receives the common key from the key server 32, the key transmitting unit 59 notifies the beacon terminal 35 to that effect. When the key transmission unit 59 receives a request for a common key from the beacon terminal 35, the key transmission unit 59 transmits the common key to the beacon terminal 35.

Referring to FIG. 11, the beacon terminal 35 of this embodiment includes a key receiving unit 45, an encryption unit 46, and a packet transmission unit 48. When receiving a notification from the relay station 39 that the relay station 39 has received the common key from the key server 32, the key reception unit 45 requests the relay station 39 for the common key. In addition, the key receiving unit 45 receives the common key transmitted from the relay station 39 in response to the request and provides it to the encryption unit 46.

[Operation]
Next, the operation of distributing the common key to the beacon terminal 35 in the wireless communication system of the embodiment will be described. FIG. 12 is a sequence diagram illustrating such an operation.

The key server 32 transmits the common key to the relay station 39 via the SSL communication path when the common key is generated (step A1) or updated due to the expiration of the common key (steps A2 and A3).

When the key receiving unit 56 receives a new or updated common key from the key server 32, the key transmitting unit 59 of the relay station 39 notifies the beacon terminal 35 of the issuance of the common key via WiFi (step S31). A6).

Upon receiving such notification, the key receiving unit 45 of the beacon terminal 35 requests a common key from the relay station 39 (step A7).

Then, the key transmission unit 59 of the relay station 39 transmits the common key to the beacon terminal 35 via WiFi (for example, WPA2 encrypted), and the key reception unit 45 of the beacon terminal 35 receives the common key (step A8). .

When the beacon terminal 35 receives a new common key, the beacon terminal 35 starts using the received common key. Further, when there is a common key that is already in use, the beacon terminal updates the common key that is in use with the received common key.

[effect]
According to this embodiment, the distribution of the common key to the beacon terminal 35 is automated. Therefore, as in the first embodiment, it is possible to save the user from manually inputting the common key to the beacon terminal by periodically referring to the display of the relay station. In this embodiment, when distributing the common key to the beacon terminals, the SSL communication is used between the key server and the relay station, and the WiFi communication encrypted with WPA2 or the like between the relay station and the beacon terminal. Is used. This makes it possible to distribute the common key safely.

<Embodiment 3>
Next, a wireless communication system according to a third embodiment will be described in detail with reference to the drawings. In the wireless communication systems according to the first and second embodiments, when the receiving terminal detects that the common key issued or updated by the key server has expired (step B3 in FIG. 9), it receives a new common key from the key server. (Steps B4 to B6). On the other hand, in this embodiment, when the receiving terminal detects a common key mismatch between the beacon terminal and the receiving terminal, a new common key is acquired from the key server. In the present embodiment, as an example, an example in which this function is applied to the second embodiment will be described. However, this function can be similarly applied to the first embodiment. In the present embodiment, it is assumed that the beacon terminal holds the latest common key updated by the key server.

[Constitution]
FIG. 13 is a diagram illustrating a configuration of the wireless communication system according to the present embodiment. Referring to FIG. 13, the wireless communication system includes a key server 32, a relay station 39, a beacon terminal 60, and a receiving terminal 37. The configurations of the key server 32 and the relay station 39 are the same as those in the second embodiment. Below, it demonstrates centering on the difference of this embodiment and 2nd Embodiment.

Referring to FIG. 13, the beacon terminal 60 of this embodiment includes a key reception unit 45, an encryption unit 47, and a packet transmission unit 48. The encryption unit 47 encrypts the identifier of the beacon terminal 60 using the common key received by the key reception unit 45. Further, the encryption unit 47 obtains a hash value by applying a predetermined hash algorithm to the identifier of the beacon terminal 60. Further, the encryption unit 47 generates an advertisement packet including the encrypted identifier and the calculated hash value (for example, including the encrypted identifier added with the calculated hash value). To do. Here, the encryption unit 47 uses, for example, MD5 (Message Digest Algorithm 5), SHA1 (SecureHash Algorithm 1), SHA-256, SHA-384, SHA-512, RIPEMD-160 (RACE Integrity Primitives) as hash algorithms. Evaluation Message Digest 160) can be used.

Referring to FIG. 13, the receiving terminal 37 of this embodiment includes a packet receiving unit 52, a decrypting unit 55, and a key receiving unit 50. The decrypting unit 55 separates the hash value included in the advertisement packet received by the packet receiving unit 52 and the encrypted identifier. The decrypting unit 55 decrypts the encrypted identifier using the common key. Furthermore, the decryption unit 55 calculates a hash value by applying the same hash algorithm as that used by the encryption unit 47 of the beacon terminal 60 to the decrypted identifier. Here, the decoding unit 55 compares the calculated hash value with the hash value extracted from the advertisement packet. When the two hash values match, the decrypting unit 55 recognizes that the common key held by the beacon terminal 60 matches the common key held by the receiving terminal 37. On the other hand, if the two hash values do not match, the decrypting unit 55 determines that the common key held by the beacon terminal 60 and the common key held by the receiving terminal 37 do not match. If it is determined that they do not match, the decrypting unit 55 instructs the key receiving unit 50 to newly receive a common key from the key server 32. The key reception unit 50 receives the common key updated by the key server 32 in response to the instruction.

[Operation]
Next, an operation for distributing the common key to the receiving terminal 37 in the wireless communication system of the embodiment will be described. FIG. 14 is a sequence diagram illustrating such an operation.

Referring to FIG. 14, beacon terminal 60 transmits an advertisement packet including the identifier of beacon terminal 60 encrypted using the common key and the hash value of the identifier (step B8).

The receiving terminal 37 separates the hash value included in the received advertisement packet and the encrypted identifier, and decrypts the encrypted identifier using the common key (step B9). Further, the receiving terminal 37 calculates a hash value by applying the same hash algorithm as the beacon terminal 60 to the decrypted identifier. Here, when the calculated hash value and the hash value included in the advertisement packet do not match, the receiving terminal 37 does not match the common key held by the beacon terminal 60 and the common key held by the receiving terminal 37. It determines with a thing (step B10). When such determination is made, the receiving terminal 37 receives a new common key from the key server 32 in the same manner as in the first embodiment (see FIG. 9) (steps B4 to B6).

[effect]
In the present embodiment, when the receiving terminal detects a match between the common key held by the beacon terminal and the common key held by the receiving terminal, the receiving terminal newly receives the common key from the key server. According to this configuration, it is possible to eliminate the mismatch between the two common keys. In the present embodiment, the common key mismatch is detected based on the advertisement packet received from the beacon terminal by the receiving terminal. Therefore, when the key server distributes the common key, it is not necessary to notify the information regarding the expiration date.

<Modification>
The following modifications are possible for the above embodiment.

In the above embodiment, the configuration via the relay station when distributing the common key to the beacon terminals has been described. However, a specific receiving terminal (for example, a receiving terminal of a business operator who has installed a beacon terminal) among the plurality of receiving terminals assumes the function of a relay station, and the relay station may be omitted.

In addition, the key server in the above embodiment can be shared among a plurality of beacon terminals installed by a plurality of operators. At this time, the key server may generate a separate common key for each different beacon terminal, or may distribute the same common key to a plurality of beacon terminals.

When the common key is updated for a single operator, the key server may be omitted and the relay station may serve as the key server. In this case, if secure communication can be established between the beacon terminal and the receiving terminal, the relay station is also omitted, the beacon terminal itself updates the common key, and the updated common key is received by the receiving terminal. It can also be distributed to. At this time, the beacon terminal is an advertiser that generates an advertisement packet and also plays a role of a key update server.

In the present invention, the following modes are possible.
[Form 1]
The wireless communication system according to the first aspect is as described above.
[Form 2]
A relay station that relays the shared key updated by the server;
The first terminal receives the shared key updated by the server via the relay station,
The wireless communication system according to aspect 1.
[Form 3]
The relay station receives a shared key updated by the server from the server via SSL (Secure Socket Layer) communication established between the server and the relay station;
The wireless communication system according to mode 2.
[Form 4]
The relay station displays the common key received from the server,
The first terminal accepts an input of a common key by a user.
4. The wireless communication system according to mode 2 or 3.
[Form 5]
When the relay station receives the common key from the server, the relay station notifies the first terminal to that effect,
The first terminal acquires the common key from the relay station in response to the notification.
4. The wireless communication system according to mode 2 or 3.
[Form 6]
The second terminal receives a shared key updated by the server from the server via SSL communication established between the server and the second terminal;
The wireless communication system according to any one of Embodiments 1 to 5.
[Form 7]
The server updates the common key at a predetermined cycle.
The wireless communication system according to any one of Forms 1 to 6.
[Form 8]
The server uses the code assigned to each provider and the pre-update common key as a message and a key, respectively, and the message digest obtained by entering the one-way hash function as the post-update common key.
The wireless communication system according to any one of forms 1 to 7.
[Form 9]
The second terminal acquires a new common key from the server when the expiration date given to the common key updated by the server has expired.
The wireless communication system according to any one of Forms 1 to 8.
[Mode 10]
The first terminal includes a hash value obtained by applying a predetermined hash algorithm to the predetermined information and transmits the packet,
If the hash value included in the packet does not match the hash value obtained by applying the predetermined hash algorithm to a value obtained by decoding predetermined information included in the packet, the second terminal A new common key from
The wireless communication system according to any one of Forms 1 to 9.
[Form 11]
The first terminal transmits an advertisement packet including the identifier of the first terminal encrypted by using the common key updated by the server based on BLE (Bluetooth (registered trademark) Low Energy). A beacon terminal that
The second terminal has an application that acquires and displays information from the distribution server using the identifier of the first terminal.
The wireless communication system according to any one of Forms 1 to 10.
[Form 12]
As in the server according to the second aspect.
[Form 13]
The key providing unit provides the first terminal via a relay station that relays the common key updated by the key updating unit;
The server according to mode 12.
[Form 14]
The key providing unit transmits the common key updated by the key updating unit to the relay station via SSL communication established with the relay station;
The server according to Form 13.
[Form 15]
The key providing unit transmits the common key updated by the key updating unit to the second terminal via SSL communication established with the second terminal;
The server according to any one of forms 12 to 14.
[Form 16]
The key update unit updates the common key at a predetermined cycle.
The server according to any one of forms 12 to 15.
[Form 17]
The key update unit uses a message digest obtained by inputting a code assigned to each provider and a common key before update as a message and a key to a one-way hash function, respectively, as a common key after update.
The server according to any one of forms 12 to 16.
[Form 18]
As in the first terminal according to the third aspect.
[Form 19]
The key receiving unit receives an input of a common key by a user;
The 1st terminal of form 18.
[Form 20]
The key accepting unit obtains a shared key updated by the server from the relay station upon receiving notification from the relay station that relays the shared key updated by the server that the shared key has been received from the server.
The 1st terminal of form 18.
[Form 21]
A beacon terminal that transmits an advertisement packet including the identifier of the first terminal encrypted by using the shared key updated by the server based on BLE (Bluetooth (registered trademark) Low Energy).
21. The first terminal according to any one of forms 18 to 20.
[Form 22]
As in the second terminal according to the fourth aspect.
[Form 23]
The key receiving unit receives the shared key updated by the server from the server via SSL communication established between the server and the second terminal;
The 2nd terminal of form 22.
[Form 24]
The key reception unit acquires a new common key from the server when the expiration date given to the shared key updated by the server has expired.
The 2nd terminal of form 22 or 23.
[Form 25]
The first terminal includes a hash value obtained by applying a predetermined hash algorithm to the predetermined information and transmits the packet,
When the hash value included in the packet does not match the hash value obtained by applying the predetermined hash algorithm to a value obtained by decrypting the predetermined information included in the packet, the key receiving unit Obtain a new common key,
25. The second terminal according to any one of forms 22 to 24.
[Form 26]
The first terminal transmits an advertisement packet including the identifier of the first terminal encrypted using the common key updated by the server, based on BLE (Bluetooth (registered trademark) Low Energy). A beacon terminal that
The second terminal has an application that acquires and displays information from the distribution server using the identifier of the first terminal.
The second terminal according to any one of forms 22 to 25.
[Form 27]
The wireless communication method according to the fifth aspect is as described above.
[Form 28]
The wireless communication method according to the sixth aspect is as described above.
[Form 29]
The wireless communication method according to the seventh aspect is as described above.
[Form 30]
The wireless communication method according to the eighth aspect is as described above.
[Form 31]
A program according to the ninth aspect.
[Form 32]
A program according to the tenth aspect.
[Form 33]
A program according to the eleventh aspect.

It should be noted that the entire disclosure contents of the above patent documents and non-patent documents are incorporated by reference in this document. Within the scope of the entire disclosure (including claims) of the present invention, the embodiment can be changed and adjusted based on the basic technical concept. Further, various combinations or selections of various disclosed elements (including each element of each claim, each element of each embodiment, each element of each drawing, etc.) are possible within the framework of the entire disclosure of the present invention. is there. That is, the present invention of course includes various variations and modifications that could be made by those skilled in the art according to the entire disclosure including the claims and the technical idea. In particular, with respect to the numerical ranges described in this document, any numerical value or small range included in the range should be construed as being specifically described even if there is no specific description.

2 server 4 terminal 6 terminal 8 relay station 10 key updating unit 12 key providing unit 14 key receiving unit 16 encryption unit 18 packet transmitting unit 20 key receiving unit 22 packet receiving unit 24 decoding unit 32 key servers 34, 35, 60 beacon terminals 36, 37 Receiving terminal 38, 39 Relay station 40 Key updating unit 42

Key providing unit

44, 45 Key receiving unit 46, 47 Encryption unit 48 Packet transmitting unit 50 Key receiving unit 52

Packet receiving unit

54, 55 Decoding unit 56 Key reception Unit 58 display unit 59 key transmission unit

Claims

A server that updates the common key at a predetermined timing;
A first terminal that transmits a packet including predetermined information encrypted using a shared key updated by the server to a second terminal based on a short-range wireless communication technology,
The second terminal receives the packet from the first terminal, and decrypts predetermined information included in the packet using a common key updated by the server,
A wireless communication system.
A relay station that relays the shared key updated by the server;
The first terminal receives the shared key updated by the server via the relay station,
The wireless communication system according to claim 1.
The relay station receives a shared key updated by the server from the server via SSL (Secure Socket Layer) communication established between the server and the relay station;
The wireless communication system according to claim 2.
The relay station displays the common key received from the server,
The first terminal accepts an input of a common key by a user.
The wireless communication system according to claim 2 or 3.
When the relay station receives the common key from the server, the relay station notifies the first terminal to that effect,
The first terminal acquires the common key from the relay station in response to the notification.
The wireless communication system according to claim 2 or 3.
The second terminal receives a shared key updated by the server from the server via SSL communication established between the server and the second terminal;
The radio | wireless communications system of any one of Claim 1 thru | or 5.
The server updates the common key at a predetermined cycle.
The radio | wireless communications system of any one of Claim 1 thru | or 6.
The server uses the code assigned to each provider and the pre-update common key as a message and a key, respectively, and the message digest obtained by entering the one-way hash function as the post-update common key.
The radio | wireless communications system of any one of Claim 1 thru | or 7.
The second terminal acquires a new common key from the server when the expiration date given to the common key updated by the server has expired.
The radio | wireless communications system of any one of Claim 1 thru | or 8.
The first terminal includes a hash value obtained by applying a predetermined hash algorithm to the predetermined information and transmits the packet,
If the hash value included in the packet does not match the hash value obtained by applying the predetermined hash algorithm to a value obtained by decoding predetermined information included in the packet, the second terminal A new common key from
The wireless communication system according to any one of claims 1 to 9.
The first terminal transmits an advertisement packet including the identifier of the first terminal encrypted by using the common key updated by the server based on BLE (Bluetooth (registered trademark) Low Energy). A beacon terminal that
The second terminal has an application that acquires and displays information from the distribution server using the identifier of the first terminal.
The radio | wireless communications system of any one of Claim 1 thru | or 10.
A key update unit that updates the common key at a predetermined timing;
A first terminal that transmits a packet including predetermined information encrypted using a common key based on short-range wireless communication technology; and the packet is received from the first terminal and is included in the packet A key providing unit that provides a common key updated by the key updating unit to a second terminal that decrypts the predetermined information using the common key;
A server characterized by that.
The key providing unit provides the first terminal via a relay station that relays the common key updated by the key updating unit;
The server according to claim 12.
The key providing unit transmits the common key updated by the key updating unit to the relay station via SSL communication established with the relay station;
The server according to claim 13.
The key providing unit transmits the common key updated by the key updating unit to the second terminal via SSL communication established with the second terminal;
The server according to any one of claims 12 to 14.
The key update unit updates the common key at a predetermined cycle.
The server according to any one of claims 12 to 15.
The key update unit uses a message digest obtained by inputting a code assigned to each provider and a common key before update as a message and a key to a one-way hash function, respectively, as a common key after update.
The server according to any one of claims 12 to 16.
A key accepting unit that accepts a common key updated by the server at a predetermined timing;
An encryption unit for generating a packet including predetermined information encrypted using the common key;
Receiving the packet from the first terminal and decrypting the predetermined information contained in the packet using a common key generated by the server to the short-range wireless communication technology A packet transmission unit for transmitting based on,
The 1st terminal characterized by the above-mentioned.
The key receiving unit receives an input of a common key by a user;
The first terminal according to claim 18.
The key accepting unit obtains a shared key updated by the server from the relay station upon receiving notification from the relay station that relays the shared key updated by the server that the shared key has been received from the server.
The first terminal according to claim 18.
A beacon terminal that transmits an advertisement packet including the identifier of the first terminal encrypted by using the shared key updated by the server based on BLE (Bluetooth (registered trademark) Low Energy).
The first terminal according to any one of claims 18 to 20.
A key accepting unit that accepts a common key updated by the server at a predetermined timing;
A packet receiving unit that receives the packet from a first terminal that transmits a packet including predetermined information encrypted using the common key based on short-range wireless communication technology;
A decryption unit that decrypts the predetermined information included in the packet using the common key,
The 2nd terminal characterized by the above-mentioned.
The key receiving unit receives the shared key updated by the server from the server via SSL communication established between the server and the second terminal;
The second terminal according to claim 22.
The key reception unit acquires a new common key from the server when the expiration date given to the shared key updated by the server has expired.
The second terminal according to claim 22 or 23.
The first terminal includes a hash value obtained by applying a predetermined hash algorithm to the predetermined information and transmits the packet,
When the hash value included in the packet does not match the hash value obtained by applying the predetermined hash algorithm to a value obtained by decrypting the predetermined information included in the packet, the key receiving unit Obtain a new common key,
The second terminal according to any one of claims 22 to 24.
The first terminal transmits an advertisement packet including the identifier of the first terminal encrypted by using the common key updated by the server based on BLE (Bluetooth (registered trademark) Low Energy). A beacon terminal that
The second terminal has an application that acquires and displays information from the distribution server using the identifier of the first terminal.
The second terminal according to any one of claims 22 to 25.
A step in which the server updates the common key at a predetermined timing;
A first terminal transmitting a packet including predetermined information encrypted using a shared key updated by the server based on a short-range wireless communication technique;
A second terminal receiving the packet from the first terminal, and decrypting predetermined information included in the packet using a common key updated by the server,
A wireless communication method.
A server updating the common key at a predetermined timing;
A first terminal that transmits a packet including predetermined information encrypted using a common key based on short-range wireless communication technology; and the packet is received from the first terminal and is included in the packet Providing the updated common key to a second terminal that decrypts the predetermined information using the common key,
A wireless communication method.
A first terminal receiving a common key updated by a server at a predetermined timing;
Generating a packet including predetermined information encrypted using the common key;
Short-range wireless communication technology for receiving the packet from the first terminal and for decoding the predetermined information included in the packet using a common key generated by the server to the second terminal Transmitting based on:
A wireless communication method.
The second terminal accepting the common key updated by the server at a predetermined timing;
Receiving the packet from a first terminal that transmits a packet including predetermined information encrypted using the common key based on short-range wireless communication technology;
Decrypting predetermined information contained in the packet using the common key,
A wireless communication method.
A process of updating the common key at a predetermined timing;
A first terminal that transmits a packet including predetermined information encrypted using a common key based on short-range wireless communication technology; and the packet is received from the first terminal and is included in the packet Causing the server to execute a process of providing the updated common key to the second terminal that decrypts the predetermined information using the common key.
A program characterized by that.
A process of accepting a common key updated by a server at a predetermined timing with respect to a computer provided in the first terminal;
Generating a packet including predetermined information encrypted using the common key;
Short-range wireless communication technology for receiving the packet from the first terminal and for decoding the predetermined information included in the packet using a common key generated by the server to the second terminal And processing to transmit based on
A program characterized by that.
A process of accepting a common key updated by a server at a predetermined timing with respect to a computer provided in the second terminal;
A process of receiving the packet from a first terminal that transmits a packet including predetermined information encrypted using the common key based on short-range wireless communication technology;
A process of decrypting predetermined information included in the packet using the common key,
A program characterized by that.