WO2018092313A1 - Dispositif de communication, système de communication et procédé de communication - Google Patents

Dispositif de communication, système de communication et procédé de communication Download PDF

Info

Publication number
WO2018092313A1
WO2018092313A1 PCT/JP2016/084482 JP2016084482W WO2018092313A1 WO 2018092313 A1 WO2018092313 A1 WO 2018092313A1 JP 2016084482 W JP2016084482 W JP 2016084482W WO 2018092313 A1 WO2018092313 A1 WO 2018092313A1
Authority
WO
WIPO (PCT)
Prior art keywords
communication device
plaintext
communication
transmitted
time
Prior art date
Application number
PCT/JP2016/084482
Other languages
English (en)
Japanese (ja)
Inventor
崇宏 小玉
Original Assignee
三菱電機株式会社
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 三菱電機株式会社 filed Critical 三菱電機株式会社
Priority to PCT/JP2016/084482 priority Critical patent/WO2018092313A1/fr
Publication of WO2018092313A1 publication Critical patent/WO2018092313A1/fr

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L27/00—Modulated-carrier systems
    • H04L27/32—Carrier systems characterised by combinations of two or more of the types covered by groups H04L27/02, H04L27/10, H04L27/18 or H04L27/26
    • H04L27/34—Amplitude- and phase-modulated carrier systems, e.g. quadrature-amplitude modulated carrier systems

Definitions

  • the present invention relates to a communication device, a communication system, and a communication method that perform bidirectional communication while suppressing information leakage and tampering.
  • information security needs to be strengthened to prevent information leakage and tampering.
  • Information security is to ensure confidentiality, integrity, and availability.
  • OSI Open Systems Interconnection
  • the function of enhancing the confidentiality of information is mainly handled by the transport layer of the fourth layer.
  • cross-layer processing in which encryption is performed in a plurality of layers is required.
  • confidentiality is regarded as important, and it is a problem to improve the confidentiality of data in order to prevent an attack from an eavesdropper on the transmission path.
  • plain text the original data to be transmitted, that is, data that has not been encrypted or encoded is referred to as plain text.
  • AES Advanced Encryption Standard
  • AES Advanced Encryption Standard
  • Patent Document 1 discloses that a ciphertext is generated from a signature generated from plaintext and a sender-side secret key on the transmission side. A method has been proposed in which the original plaintext can be restored by decrypting the signature on the receiver side using the private key on the receiver side.
  • the technique described in Patent Document 1 is a technique for unidirectional transmission, and encryption is necessary in each of the forward direction and the opposite direction during bidirectional transmission.
  • Common key cryptosystems can be broadly classified into two types: block cryptosystems and stream cryptosystems.
  • the block cipher system is a system that guarantees secrecy by the amount of calculation required for decryption because the length of the secret key is shorter than the plaintext length.
  • the stream encryption method is a method in which the length of the secret key is equal to or longer than the plaintext length, and complete secrecy is guaranteed by a one-time pad.
  • the stream encryption method is a method with high encryption strength that guarantees complete secrecy, but generally the hardware circuit scale is larger than that of the block encryption method.
  • This invention is made in view of the above, Comprising: Obtaining the communication apparatus which can suppress the increase in a hardware circuit scale after ensuring the secrecy of a bidirectional transmission path in bidirectional
  • a communication device includes a receiver that receives a first encoded text from a communication device of a communication partner, and a first that is transmitted at a first time. And a second plaintext obtained by decoding the first encoded text transmitted from the communication device of the communication partner at a second time before the first time. And an encoder for generating a second encoded sentence.
  • the communication device decodes the first encoded text using the transmitter that transmits the second encoded text to the communication device of the communication partner and the first plaintext that is transmitted at the second time. And a decoder for generating two plaintexts.
  • the communication apparatus has an effect that it is possible to suppress an increase in the hardware circuit scale while ensuring the secrecy of the bidirectional transmission path in bidirectional transmission.
  • FIG. 11 is a sequence diagram illustrating an example of a procedure until the encoded transmission according to the first embodiment is started.
  • N is an integer greater than or equal to 2 of Embodiment 1
  • FIG. The figure which shows the structural example of the communication system concerning Embodiment 2.
  • FIG. The figure which shows the concept of the encoding and encryption method of Embodiment 2.
  • FIG. 4 is a diagram showing a concept of a block encryption method in Embodiment 3 using both the encoding method described in Embodiment 1 and a multi-level phase amplitude modulation method.
  • FIG. 11 is a diagram illustrating a concept of a block encryption method according to the third embodiment using both the encoding method described in the first embodiment and the multi-channel multilevel phase amplitude modulation method.
  • FIG. 10 is a diagram illustrating a configuration example of a communication device when a stream data pad method is applied to a multi-level phase amplitude modulation signal using multi-channel according to the third embodiment.
  • the figure which shows the structural example of the control circuit of Embodiment 1 to Embodiment 3.
  • FIG. 1 is a diagram of a configuration example of a communication system according to the first embodiment of the present invention.
  • a communication system 100 according to the present embodiment includes a communication device 1-1 and a communication device 1-2.
  • a communication device 1-1 as a first communication device includes a control unit 10, an encoder 11, a transmitter 12, memories 13, 14, a receiver 15, and a decoder 16.
  • the communication device 1-2 which is the second communication device, has the same configuration as that of the communication device 1-1.
  • the communication device 1-1 and the communication device 1-2 can perform bidirectional communication via the transmission path 2.
  • the transmission path 2 may be a wired transmission path including an optical transmission path or a wireless transmission path.
  • the communication device 1-1 is a transmission device
  • the communication device 1-2 is a reception device.
  • the communication device 1-2 In communication from the communication device 1-2 to the communication device 1-1, the communication device 1-2 is a transmission device, and the communication device 1-1 is a reception device.
  • the communication device 1-1 and the communication device 1-2 are shown without distinction, they are referred to as the communication device 1.
  • the control unit 10 controls each unit in the communication device 1.
  • the encoder 11 performs encoding based on plaintext that is data to be transmitted and data stored in the memory 13. Further, the encoder 11 stores the plaintext used for encoding, that is, the plaintext to be transmitted, in the memory 14 which is the first memory.
  • the memory 14 stores the plain text used for encoding in the encoder 11.
  • the transmitter 12 transmits the encoded data to the opposite device via the transmission path 2.
  • the receiver 15 receives data from the opposite device and outputs it to the decoder 16.
  • the decoder 16 decrypts the data input from the receiver 15 using the data stored in the memory 14 to obtain plain text, and stores the plain text obtained by the decryption in the memory 13.
  • the memory 13 as the second memory stores the plain text obtained by the decryption.
  • the opposite device that is, the communication partner device for the communication device 1-1 is the communication device 1-2
  • the opposite device that is, the communication partner device for the communication device 1-2 is the communication device 1-1.
  • an encryption device In communication using a common common key cryptosystem, an encryption device generates a ciphertext by performing encryption using a plaintext and a secret key in a transmission apparatus. Specifically, the encryptor of the transmission apparatus using a general common key cryptosystem encrypts the plaintext D tA (t) using the secret key K A (t) and encrypts the ciphertext Y shown in the following formula (1). Generate A. Note that t indicates time, D tA (t) indicates plaintext encoded by encoding at time t, and K A (t) indicates a secret key used for encoding at time t.
  • the decryptor of the receiving apparatus using a general common key cryptosystem restores the transmitted plaintext D tA (t) by decrypting the ciphertext Y A using the secret key K A (t).
  • the decryptor of the receiving device in the opposite direction transmission decrypts the ciphertext Y B by using the secret key K B (t) to restore the transmitted plain text D tB (t).
  • K B secret key
  • D tB transmitted plain text
  • FIG. 2 is a diagram showing the concept of the encoding method of the present embodiment.
  • the encoding method according to the present embodiment will be described with reference to FIGS.
  • the communication device 1-1 shown in FIG. 1 is shown on the left side
  • the communication device 1-2 shown in FIG. 1 is shown on the right side.
  • the direction from the communication device 1-1 to the communication device 1-2 is referred to as a forward direction
  • the direction from the communication device 1-2 to the communication device 1-1 is referred to as a facing direction.
  • the encoder 11 calculates an exclusive OR of the plaintext D tA (t) and the plaintext D rB (t ⁇ t) stored in the memory 13. By doing so, the encoded sentence Y ′ A shown in Expression (3) is calculated.
  • the transmitter 12 of the communication device 1-1 transmits Y ′ A via the transmission path 2 to the communication device 1-2 that is a reception device in forward transmission.
  • the plaintext D rB (t- ⁇ t) is the plaintext D tB (t- ⁇ t) encoded by the communication device 1-2 which is the receiving device in the forward transmission at the time t- ⁇ t. Plain text obtained by being received and decrypted. ⁇ t is the time for which each memory holds data.
  • the transmission time from the communication apparatus 1-2 to the communication apparatus 1-1 obtained by adding the processing time in the communication apparatus 1-1 and the communication apparatus 1-2 times
  • T h Delta] t is the T h or more values Any value can be set.
  • a method of setting ⁇ t will be described later. Here, it is assumed that the time required for encoding is negligible, and the time when D tA (t) and D tB (t) are encoded and the time when they are transmitted are the same. That is, the plain text encoded at time t is transmitted as the encoded text at time t.
  • the receiver 15 receives Y ′ A, and the receiver 15 gives the received Y ′ A to the decoder 16.
  • the decoder 16 calculates the exclusive OR of the encoded text Y ′ A and the plain text D tB (t ⁇ t) stored in the memory 13 to obtain the transmitted plain text D tA (t). Restore.
  • the plain text D tB (t ⁇ t) is plain text encoded by the communication device 1-2 at the time t ⁇ t, and is stored in the memory 13 by the encoder 11.
  • the plaintext D rB (t- ⁇ t) is received and restored by the communication device 1-1 after the plaintext D tB (t- ⁇ t) used for encoding by the communication device 1-2 is encoded. is there. Therefore, the plaintext D rB (t- ⁇ t) and the plaintext D tB (t- ⁇ t) match. Therefore, D tA (t) is restored by exclusive OR of the encoded text Y ′ A and the plain text D tB (t ⁇ t).
  • the encoder 11 excludes the plaintext D tB (t) and the plaintext D rA (t ⁇ t) stored in the memory 13.
  • the encoded sentence Y ′ B shown in Expression (4) is calculated.
  • the transmitter 12 of the communication apparatus 1-2 through the transmission path 2 transmits the Y 'B the opposing direction communication device 1-1 is a receiving apparatus in the transmission of.
  • the receiver 15 receives Y ′ B , it inputs it to the decoder 16.
  • the decoder 16 calculates the exclusive OR of the encoded text Y ′ B and the plain text D rA (t ⁇ t) stored in the memory 14, thereby obtaining the transmitted plain text D tB (t). Restore.
  • the receiver 15 of the communication device 1-1 is a first receiver that receives Y ′ B that is the first encoded text from the communication device 1-2.
  • the encoder 11 of the communication device 1-1 which is the first encoder, transmits the first plaintext D tA (t) to be transmitted at time t, which is the first time, and the second plaintext before the first time.
  • the transmitter 12 of the communication device 1-1 that is the first transmitter transmits Y ′ A to the communication device 1-2.
  • the decoder 16 of the communication device 1-1 serving as the first decoder decodes the first encoded text Y ′ B using the first plaintext D tA (t ⁇ t) transmitted to t ⁇ t. To generate the second plaintext D rB (t).
  • the receiver 15 of the communication device 1-2 is a second receiver that receives Y ′ A that is the second encoded text from the communication device 1-1.
  • the encoder 11 of the communication device 1-2 which is the second encoder, transmits the second plaintext D tB (t) transmitted at time t and the second plaintext D tB (t) transmitted from the communication device 1-1 at time t- ⁇ t.
  • D rA (t- ⁇ t) of the encoded sentences is first plaintext obtained by decoding, to generate a first encoded sentences Y 'B by carrying out the coding using.
  • the transmitter 12 of the communication device 1-2 which is the second transmitter transmits Y ′ B to the communication device 1-1.
  • the decoder 16 of the communication device 1-2 as the second decoder decodes the second encoded text Y ′ A using the second plaintext D tB (t ⁇ t) transmitted to t ⁇ t. To generate a first plaintext D rA (t).
  • FIG. 3 is a diagram illustrating an example of data transmission by encoding according to the present embodiment.
  • FIG. 3 shows an example in which each plaintext is composed of 6 bits.
  • Six numerical values such as 110111 indicate examples of 6-bit data values.
  • 110111 is stored in the memory 13 of the communication device 1-1 as plain text DrB (t- ⁇ t) received and restored by communication in the opposite direction.
  • the encoder 11 of the communication device 1-1 exclusively uses 101100, which is plain text D tA (t), and 110111, which is D rB (t ⁇ t), in forward communication.
  • a logical sum is calculated and 011011 is obtained as the encoded sentence Y ′ A.
  • the encoded text Y ′ A is transmitted in the forward direction as shown in FIG.
  • 110111 that is a plaintext D tB (t ⁇ t) transmitted from the communication device 1-2 in the past is stored in the memory 14 of the communication device 1-2.
  • Decoder 16 of the communication device 1-2 calculates an exclusive OR of the 110111 is a code-text Y 'A 011011 plaintext D tB (t- ⁇ t) performs decoding by, obtaining 101100 as D rA (t) is a plaintext received in the forward communications. Since D rA (t) is the reconstructed D tA (t), the communication apparatus 1-2 determines 101100, which is the plaintext D tA (t) transmitted from the communication apparatus 1-1, by the above processing. Can be restored.
  • 010101 is stored in the memory 13 of the communication device 1-2 as the plain text DrA (t- ⁇ t) received and restored by communication in the opposite direction.
  • the encoder 11 of the communication device 1-2 as shown in FIG. 3 (B1), 110011 which is plaintext D tB (t) and 010101 which is plaintext D rA (t ⁇ t).
  • the exclusive OR is calculated and 100110 is obtained as the encoded sentence Y ′ B.
  • the encoded text Y ′ B is transmitted in the opposite direction as shown in FIG. 3 (B2).
  • 010101 is stored in the memory 14 of the communication device 1-1 as the plaintext D tA (t ⁇ t) transmitted from the communication device 1-1 in the past.
  • Decoder 16 of the communication apparatus 11 calculates an exclusive OR of the 010101 is a code-text Y 'B 100110 plaintext D tA (t- ⁇ t)
  • decryption is performed, and 110011 is obtained as DrB (t) which is a plaintext received in the opposite communication. Since D rB (t) is the restored D tB (t), the communication apparatus 1-1 has received 110011, which is the plaintext D tB (t) transmitted from the communication apparatus 1-2, through the above processing. Can be restored.
  • FIG. 4 is a sequence diagram illustrating an example of a procedure until the encoded transmission of the present embodiment is started.
  • the mode in which the communication apparatus 1-1 and the communication apparatus 1-2 perform the above-described encoded transmission is referred to as an encoded transmission mode.
  • the communication device 1-1 and the communication device 1-2 are not performing the above-described encoded transmission.
  • the control unit 10 of the communication device 1-1 transmits a notification ACK for starting the encoded transmission mode to the communication device 1-2 via the transmitter 12 (step S1).
  • the control unit 10 of the communication apparatus 1-2 receives the notification ACK of the start of the encoded transmission mode via the receiver 15, the control unit 10 transmits a RES, which is a response indicating that the notification is accepted, via the transmitter 12.
  • a RES which is a response indicating that the notification is accepted
  • the control unit 10 of the communication apparatus 1-1 determines whether data is transmitted between the communication apparatus 1-1 and the communication apparatus 1-2 in order to determine the time ⁇ t for holding the plaintext during transmission in the opposite direction in the memory.
  • the MEA which is a signal for measuring the time spent for one round trip
  • the time spent for one round trip of data between the communication device 1-1 and the communication device 1-2 is measured (step S3). ). That is, the communication device 1-1 stores the time when the MEA is transmitted, and stores the time when the response to the MEA is received. Then, the difference between the time when the response to the MEA is received and the time when the MEA is transmitted is calculated as the time spent for one round trip.
  • any signal may be used as long as the reception device returns a response as soon as it is received.
  • the signal for measurement may be any signal.
  • the control unit 10 of the communication device 1-1 determines the calculated time spent for one round trip as the memory retention time, and transmits the memory retention time information storing the memory retention time to the communication device 1-2. (Step S4). As a result, the memory holding time is shared between the communication device 1-1 and the communication device 1-2.
  • the control unit 10 of the communication device 1-2 transmits RES, which is a response indicating that the notification has been received, to the communication device 1-1 (step S5).
  • the control unit 10 of the communication device 1-1 and the communication device 1-2 controls the memory 13 and the memory 14 so that the data retention time in the memory 13 and the memory 14 becomes the above-described memory retention time. As a result, the oldest data stored in each memory becomes data at a time before the current time t by the memory holding time ⁇ t.
  • the memory holding time can be set to an arbitrary value equal to or longer than the time spent for one round trip.
  • control unit 10 of the communication device 1-1 transmits a data transmission start notification to the communication device 1-2 (step S6).
  • the control unit 10 of the communication device 1-2 transmits RES, which is a response indicating that the notification has been received, to the communication device 1-1 (step S7).
  • the communication device 1-1 generates a ciphertext by encoding a plaintext by using a predetermined fixed secret key or a secret key generated by higher layer processing as an initial vector. Then, the ciphertext is transmitted to the communication device 1-2 (step S8).
  • the plaintext received by the transmission in the opposite direction is not stored in the memory 13.
  • the communication apparatus 1-1 performs encoding using the above-described initial vector instead of the plain text received in the memory 13 by transmission in the opposite direction.
  • the communication device 1-1 stores the transmitted plain text in the memory 14.
  • the plaintext at the start of data transmission refers to the first frame when the plaintext is transmitted in units of frames, and in the case of stream transmission, refers to the arbitrarily set bits from the start of transmission.
  • the communication device 1-2 decrypts the encoded text received by the forward transmission using the same secret key as that used by the communication device 1-1 for encoding, and stores the decrypted text in the memory 13. Further, as described above, the communication device 1-2 encodes and transmits the plaintext to be transmitted in the opposite direction using the plaintext stored in the memory 13 (step S9).
  • the communication device 1-1 decodes the encoded text received by the transmission in the opposite direction using the plain text stored in the memory 14. Further, the communication device 1-1 encodes and transmits the plain text to be transmitted in the forward direction using the plain text stored in the memory 13 (step S10).
  • the communication device 1-2 decodes the encoded text received by the forward transmission using the plain text stored in the memory 14. Further, the communication device 1-2 encodes and transmits the plain text to be transmitted in the opposite direction using the plain text stored in the memory 13 (step S11). Thereafter, step S10 and step S11 are repeated until the end of encoded transmission.
  • a bidirectional transmission form of 1: 1 node as shown in FIG. 5 similar to FIG. 1 may be used, or both 1: N (N is an integer of 2 or more) nodes as shown in FIG. It may be in the form of bidirectional transmission.
  • the form of bidirectional transmission via a plurality of nodes as shown in FIG. 7 may be used.
  • the communication device 1-2 to the communication device 1-5 illustrated in FIG. 6 have the same configuration as the communication device 1-1.
  • the communication devices 3-1 to 3-3 shown in FIG. 7 are not particularly limited in configuration as long as the communication devices have a relay function.
  • the present embodiment uses the fact that the communication apparatuses 1-1 and 1-2 perform bidirectional communication, that is, the communication apparatuses 1-1 and 1-2 are also transmitting apparatuses and are in the reverse direction. Utilizing the fact that it is also a receiving device in transmission, the transmitted plaintext is stored in the memory 13 and encoding is performed using the plaintext obtained by restoring the received data. That is, the plaintext received in the past is used as a key for encryption, and the plaintext transmitted in the past is used as a key for decryption. As a result, the communication devices 1-1 and 1-2 can decrypt the received data using the plaintext transmitted by the communication devices 1-1 and 1-2.
  • the plaintext used for decryption by the decoder is information that can only be obtained by the communication partner, confidentiality can be ensured. Furthermore, since the processing can be realized by a circuit that performs exclusive OR with the memory, it can be realized by simple hardware.
  • FIG. FIG. 8 is a diagram illustrating a configuration example of a communication system according to the second exemplary embodiment of the present invention.
  • the communication system 100a of the present embodiment includes a communication device 1a-1 and a communication device 1a-2.
  • the communication device 1a-1 includes an encryptor 17 that is an encoder according to the present embodiment instead of the encoder 11 according to the first embodiment, and instead of the decoder 16 according to the first embodiment. Except for the provision of the decoder 18, it is the same as the communication apparatus 1-1 of the first embodiment. Components having the same functions as those in the first embodiment are denoted by the same reference numerals as those in the first embodiment, and redundant description is omitted.
  • the configuration of the communication device 1a-2 is the same as that of the communication device 1a-1.
  • the direction from the communication device 1a-1 as the first communication device to the communication device 1a-2 as the second communication device is referred to as the forward direction, and from the communication device 1a-2 to the communication device 1a-1. The direction is called the facing direction.
  • FIG. 9 is a diagram showing the concept of the encoding and encryption method of the present embodiment.
  • the encryptor 17 of the communication device 1a-1 includes the plaintext D tA (t), the plaintext D rB (t ⁇ t) stored in the memory 13 of the communication device 1a-1, and the secret key K A ( A coded sentence transmitted in the forward direction is generated by exclusive OR with t).
  • the decoder 18 of the communication device 1a-2 performs exclusive OR of the encoded text transmitted in the forward direction, the plaintext D tB (t ⁇ t) stored in the memory 14 and the secret key K A (t). By calculating, the plaintext D tA (t) transmitted from the communication device 1a-1 is restored.
  • the encryption device 17 of the communication device 1a-2 performs the plaintext D tB (t), the plaintext D rA (t ⁇ t) stored in the memory 13 of the communication device 1a-2, and the secret key K.
  • a coded sentence transmitted in the opposite direction is generated by exclusive OR with B (t).
  • the decoder 18 of the communication device 1a-1 performs an exclusive OR operation between the encoded text transmitted in the opposite direction, the plaintext D tA (t ⁇ t) stored in the memory 14, and the secret key K B (t). By calculating, the plaintext D tB (t) transmitted from the communication device 1a-2 is restored.
  • a method for generating and updating a secret key K A (t) and a secret key K B (t), which are common secret keys between the communication device 1-1 and the communication device 1-2, is a common common key encryption method.
  • the memory holding time described in Embodiment 1 may be used as a secret key.
  • the memory holding time is shared between the communication device 1-1 and the communication device 1-2. For this reason, the memory retention time can be used as the above-described common secret key.
  • FIG. 10 is a diagram for performing an encryption and encoding procedure in the first method.
  • the first method shown in FIG. 10 is a scheme in which the transmitting device encodes the plaintext to be transmitted using the plaintext received from the opposite device after encrypting with the secret key.
  • the encryptor 17 of the communication device 1a-1 transmits plaintext D tA (t) transmitted in the forward direction with 001010 which is the secret key K A (t). Is encrypted by an exclusive logical operation to generate a ciphertext 100110. Thereafter, as shown in FIG. 10 (A12), the encryptor 17 of the communication device 1a-1 performs an exclusive OR operation between the ciphertext 100110 and the plaintext DrB (t ⁇ t) 110111 received in the communication in the opposite direction. Is obtained as an encoded sentence. This encoded text is transmitted in the forward direction as shown in FIG. 10 (A13).
  • the decoder 18 of the communication device 1a-2 exclusively receives the received encoded text 010001 and the plain text D tB (t ⁇ t) 110111 transmitted in the opposite direction. Decrypt by logical operation. Thereafter, as shown in (A15) of FIG. 10, a decoder 18 of the communication device 1a-2 is decoded by an exclusive logical operation between the result of decryption 100110 and a secret key K A (t) 001010 To obtain plain text D rA (t) 101100 received in the forward direction. D rA (t) is the same as D tA (t) transmitted in the forward direction.
  • the encryptor 17 of the communication device 1a-2 is plaintext D tB to transmit at 010101 and opposing direction is the private key K B (t) (
  • the ciphertext 100110 is generated by encrypting 110011 that is t) by an exclusive logical operation.
  • the exclusive logical sum of the encryptor 17 of the communication device 1a-2 is a plaintext D rA received by the communication ciphertext 100110 and forward (t- ⁇ t) 100011 000101 is generated as an encoded sentence.
  • This encoded text is transmitted in the opposite direction as shown in FIG. 10 (B13).
  • the decoder 18 of the communication device 1a-1 exclusively uses the received encoded text 00101 and the plaintext D tA (t ⁇ t) 1000011 transmitted in the forward direction. Decrypt by logical operation. Thereafter, as shown in (B15) of FIG. 10, the decryptor 18 of the communication device 1a-2 decrypts the result of the decryption by the exclusive logical operation of 100110 as the decrypted result and 010101 as the secret key K B (t). And plaintext D rB (t) 110011 received in the opposite direction is obtained. D rB (t) is the same as D tB (t) transmitted in the forward direction.
  • FIG. 11 is a diagram for performing encryption and encoding procedures in the second method.
  • the second method shown in FIG. 11 is a method in which the transmitting device performs an exclusive logical operation on a secret key and a plaintext received in the past used as a kind of key in advance and then performs an exclusive logical operation on the plaintext.
  • encryptor 17 of the communication device 1a-1 in the transmission of the forward, encryptor 17 of the communication device 1a-1 is a received in the opposing direction of the communication plaintext D rB (t- ⁇ t) An exclusive logical operation of a certain 110111 and a secret key K A (t) 001010 is performed to generate 111101 as an encryption key.
  • the encryptor 17 of the communication device 1a-1 performs exclusive logic on the encryption key 111101 and the plaintext D tA (t) 101100 transmitted in the forward direction.
  • An encoded sentence 010001 is generated by encoding by calculation. This encoded text is transmitted in the forward direction as shown in FIG. 11 (A23).
  • the decryptor 18 of the communication device 1a-2 has 110111 as the plaintext D tB (t ⁇ t) transmitted in the opposite direction and 000010 as the secret key K A (t). And 111101 is generated as an encryption key.
  • the decryptor 18 of the communication device 1a-2 decrypts the encryption key 111101 and the received encoded text 010001 by an exclusive logical operation, and sequentially The plaintext D rA (t) 101100 received in the direction is obtained.
  • D rA (t) is the same as Dt A (t) transmitted in the forward direction.
  • the encoding method described in the first embodiment and the common key cryptosystem are used in combination. Thereby, it is possible to improve confidentiality as compared with the first embodiment.
  • Embodiment 3 The coding schemes of the first and second embodiments can be considered as a stream type scheme, but in this embodiment, a scheme for further improving the cryptographic strength by using together with the block type cryptographic scheme. Will be explained.
  • a rule such as assigning each bit information in the bit block included in the received symbol to which bit information in the transmission bit block is assigned to the reference table.
  • the confidentiality of the data in a transmission line can be improved by sharing the information of a reference table between a transmitter and a receiver. Further, when the bit block size is increased, the possible combinations of received data assigned to transmission data are increased and the key space is expanded, so that the confidentiality of data is improved.
  • a method for increasing the bit block size there is a form using a modulation technique or a signal processing technique.
  • a method for increasing the bit block size using a modulation technique there is a multi-valued method using a phase amplitude modulation method. That is, there is a method of transmitting the encoded text after performing multi-value amplitude phase modulation.
  • a technique for increasing the bit block size using a signal processing technique there is a method of sub-channeling using a plurality of carriers, that is, a method of transmitting a coded sentence using a plurality of frequencies.
  • FIG. 12 is a diagram showing the relationship between the signal points of the quaternary phase modulation signal on the IQ plane and the bit values assigned to the signal points.
  • FIG. 13 is a diagram showing the relationship between the signal points of the 16-level phase amplitude modulation signal on the IQ plane and the bit values assigned to the signal points.
  • b i, j in the bit numbers b i, j , j is fixed and the description is omitted and shown as b i .
  • i is 1, 2,.
  • FIG. 14 is a diagram illustrating the relationship between the signal points of the quaternary phase modulation signal and the bit values assigned to the signal points.
  • FIG. 15 is a diagram illustrating a relationship between signal points of the polarization multiplexed 16-level phase amplitude modulation signal and bit values assigned to the signal points.
  • i 1, 2,...
  • the bit number i is determined so that the bit number increases from the most significant bit to the lower bit of the polarization.
  • FIG. 16 is a diagram showing a concept of a block encryption method using both the encoding method described in the first embodiment and the multi-level phase amplitude modulation method.
  • FIG. 16 shows an example in which the encoding method and the 16-level phase amplitude modulation method are used in combination.
  • the transmitting apparatus converts 0111, which is plaintext DrB (t ⁇ t) received in transmission in the opposite direction, into a bit string according to a reference table held in advance. Bit string conversion based on rules. In the example shown in FIG. 16, a rule for converting the first and third upper bits is used.
  • the transmitting device code statements coded by an exclusive logical operation 1011 and a plaintext D tA sent in 1101 and forward is a data bit string conversion (t) 0110 is generated as follows.
  • the encoded text 0110 is modulated by the 16-value phase amplitude modulation method and transmitted in the forward direction.
  • the receiving apparatus in the forward transmission receives the modulated signal, demodulates the analog signal, and calculates 0110 which is an encoded sentence. Then, as shown in (A34) of FIG. 16, the receiving apparatus decodes the encoded text 0110 and the plain text D tB (t ⁇ t) 1101 transmitted in the opposite direction by performing an exclusive logical operation. , 1011 which is the plaintext D rA (t) received in the forward transmission is obtained. As shown in (A35) of FIG. 16, the receiving device converts 1011 as plain text DrA (t) into 1011 according to the bit string conversion rule of the same reference table as the reference table used by the transmitting device and stores it in the memory. Store.
  • the plaintext D rA (t) stored here is subjected to an exclusive logical operation with the plaintext that is bit-string converted and transmitted in the opposite transmission when encoding in the opposite direction transmission is performed later. That is, the plaintext D rA (t) is used in the FIG. 16 (B31). In the transmission in the opposite direction, (B31) to (B36) are performed as in the forward transmission.
  • FIG. 17 is a diagram showing a frequency arrangement of a signal composed of n subchannels. In order from the subchannel on the low frequency side, j is set to 1, 2,.
  • FIG. 18 is a diagram showing the concept of a block encryption method using both the encoding method described in the first embodiment and the multichannel multilevel phase amplitude modulation method.
  • the multi-channel multi-level phase amplitude modulation method is a method in which subchannelization and multi-level phase amplitude modulation method are combined. In the example shown in FIG. 18, a case where a 2-subchannel 16-value phase amplitude modulation method is applied is shown.
  • the transmission device converts 01111001, which is plaintext DrB (t ⁇ t) received in transmission in the opposite direction, into a bit string by a reference table that is held in advance. Bit string conversion based on rules. In the example shown in FIG. 18, it is assumed that a rule for converting the first upper bit of the first subchannel and the first lower bit of the second subchannel is used.
  • the transmission apparatus encodes 11111000 which is data after bit string conversion and 10110110 which is plaintext D tA (t) transmitted in the forward direction by an exclusive logical operation. 01101110 is generated as As shown in (A43) of FIG. 18, the encoded text 01101110 is modulated by the 2-subchannel 16-value phase amplitude modulation method and transmitted in the forward direction.
  • the receiving device in the forward transmission receives the modulated signal, demodulates the analog signal, and calculates 11111000 which is an encoded sentence. Then, as shown in (A44) of FIG. 18, the receiving apparatus decodes the encoded text 11111000 and the plaintext D tB (t ⁇ t) 11111000 transmitted in the opposite direction by performing an exclusive logical operation. , 10110110, which is the plaintext D rA (t) received in the forward transmission.
  • (m, n) is (2, 5), and the bit block size is 10 bits.
  • (m, n) is (4, 5), and the bit block size is 20 bits.
  • FIG. 19 is a diagram showing the amount of calculation that an eavesdropper needs to decrypt for the bit block size.
  • the horizontal axis indicates the bit block size
  • the vertical axis indicates the calculation time.
  • the calculation time for the bit block size in AES is shown as a characteristic 501
  • the calculation time for the bit block size of the present embodiment is shown as a characteristic 502.
  • the bit block size may be 60 bits.
  • FIG. 20 is a diagram illustrating a configuration example of the communication apparatus 200 when the stream data pad method is applied to a multi-level phase amplitude modulation signal using multi-channel.
  • the communication device 200 includes a transmission device 5, a reception device 6, and a data processing unit 70.
  • the data processing unit 70 includes a first memory 71, a second memory 72, a reference table processing unit 73, and a hard decision unit 74.
  • the 1: nDeMUX (demultiplexer) 51 of the transmission device 5 branches n bits of serial data to be transmitted into n bits for each bit, and branches to 1: mDeMUX (demultiplexer) 52-1 to 52-n. Output each data.
  • the mDeMUXs 52-1 to 52-n branch the input data every m bits.
  • Data output from the mDeMUXs 52-1 to 52-n is stored in the first memory 71. Further, the data stored in the second memory 72 is bit string converted by the reference table processing unit 73.
  • Data output from mDeMUXs 52-1 to 52-n are encoded by performing an exclusive logical operation on the result of bit string conversion, and input to signal point map units 53-1 to 53-n. .
  • Signal point map units 53-1 to 53-n assign signal points to the input data, and output the data after assigning the signal points to digital filters 54-1 to 54-n, respectively.
  • the digital filters 54-1 to 54-n shape the frequency shape of the input data and output it to the n: 1 MUX (multiplexer) 56.
  • the n: 1 MUX 56 multiplexes the input data and outputs the multiplexed data to a DAC (Digital to Analog Converter) 57.
  • the DAC 57 converts the input data into an analog signal and outputs it to the driver 58.
  • the driver 58 amplifies the input analog signal and outputs it to the modulator 59.
  • the modulator 59 modulates the input signal and outputs it as a transmission signal.
  • the receiver 61 receives the transmitted signal and outputs it to an ADC (Analog to Digital Converter) 62.
  • the ADC converts the input signal into a digital signal and outputs it to the 1: nDeMUX 63.
  • 1: nDeMUX 63 branches the signal into n and outputs the branched signals to digital filters 64-1 to 64-n, respectively.
  • Each of the digital filters 64-1 to 64-n corresponds to one subchannel, and performs filtering so as to transmit the signal of the corresponding subchannel and outputs the filtered signals to the equalizers 65-1 to 65-n.
  • the equalizers 65-1 to 65-n perform processing for compensating for the influence of the transmission path on the data received from the digital filters 64-1 to 64-n, and the processed data is processed by the data processing unit 70. Output to.
  • the hard decision unit 74 of the data processing unit 70 makes a hard decision on the input signal, restores the original bit value, and outputs it to the reference table processing unit 73.
  • the reference table processing unit 73 performs bit string conversion using the reference table, and stores the converted value in the second memory 72.
  • the data output from the equalizers 65-1 to 65-n is subjected to an exclusive logical operation with data obtained by rearranging the data stored in the second memory 72 by the reference table processing unit 73.
  • the result of this exclusive logical operation is received by m: 1 MUX 66-1 to 66-n.
  • m: 1 MUX 66-1 to 66-n combine the received data and output as received data.
  • each other than the receiver, transmitter, and memory is realized by a processing circuit.
  • the processing circuit may be an analog circuit or a digital circuit.
  • the processing circuit may be dedicated hardware or a control circuit including a processor.
  • the encoder, the encryptor, and the decoder that perform the encoding according to the present invention can be realized by an exclusive OR circuit.
  • the control circuit has, for example, the configuration shown in FIG.
  • FIG. 21 is a diagram illustrating a configuration example of the control circuit.
  • the control circuit 300 includes a processor 301 and a memory 302.
  • the processor 301 is a CPU (Central Processing Unit), a microprocessor, or the like.
  • each unit realized in the control circuit executes a program stored in the memory 302 by the processor 301 Is realized.
  • the memory 302 is also used as a storage area when a program is executed by the processor 301.
  • the configuration described in the above embodiment shows an example of the contents of the present invention, and can be combined with another known technique, and can be combined with other configurations without departing from the gist of the present invention. It is also possible to omit or change the part.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

Un dispositif de communication (1-1), selon la présente invention, comprend : un récepteur (15) qui reçoit un premier texte codé à partir d'un dispositif de communication (1-2) servant de partenaire de communication ; un codeur (11) qui génère un second texte codé en effectuant un codage à l'aide d'un premier texte en clair devant être transmis à un premier instant, et un second texte en clair qui est un texte en clair obtenu par le décodage du premier texte codé transmis à partir du dispositif de communication (1-2) à un deuxième instant antérieur au premier instant ; un émetteur (12) qui transmet le deuxième texte codé au dispositif de communication (1-2) ; et un décodeur (16) qui génère le second texte en clair par le décodage du premier texte codé à l'aide du premier texte en clair transmis au second instant.
PCT/JP2016/084482 2016-11-21 2016-11-21 Dispositif de communication, système de communication et procédé de communication WO2018092313A1 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PCT/JP2016/084482 WO2018092313A1 (fr) 2016-11-21 2016-11-21 Dispositif de communication, système de communication et procédé de communication

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/JP2016/084482 WO2018092313A1 (fr) 2016-11-21 2016-11-21 Dispositif de communication, système de communication et procédé de communication

Publications (1)

Publication Number Publication Date
WO2018092313A1 true WO2018092313A1 (fr) 2018-05-24

Family

ID=62146363

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2016/084482 WO2018092313A1 (fr) 2016-11-21 2016-11-21 Dispositif de communication, système de communication et procédé de communication

Country Status (1)

Country Link
WO (1) WO2018092313A1 (fr)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH03129936A (ja) * 1989-10-14 1991-06-03 Mitsubishi Electric Corp ネツトワーク方法とその装置
JPH0983507A (ja) * 1995-09-19 1997-03-28 Hitachi Inf Syst Ltd 暗号鍵の生成および共有方法
JPH09238132A (ja) * 1996-02-29 1997-09-09 Oki Electric Ind Co Ltd 携帯用端末通信システム及びその通信方法
JPH10327143A (ja) * 1997-05-23 1998-12-08 Nec Corp データ伝送システム

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH03129936A (ja) * 1989-10-14 1991-06-03 Mitsubishi Electric Corp ネツトワーク方法とその装置
JPH0983507A (ja) * 1995-09-19 1997-03-28 Hitachi Inf Syst Ltd 暗号鍵の生成および共有方法
JPH09238132A (ja) * 1996-02-29 1997-09-09 Oki Electric Ind Co Ltd 携帯用端末通信システム及びその通信方法
JPH10327143A (ja) * 1997-05-23 1998-12-08 Nec Corp データ伝送システム

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
TAKESHI HATTORI, OFDM/OFDMA TEXTBOOK, 21 September 2008 (2008-09-21), pages 2-6, 17 - 18 *

Similar Documents

Publication Publication Date Title
JP6740902B2 (ja) 認証暗号化方法、認証復号方法および情報処理装置
RU2638639C1 (ru) Кодер, декодер и способ кодирования и шифрования входных данных
JP2016513825A (ja) 安全通信方法および装置
US20160173276A1 (en) Authenticated encryption device, authenticated encryption method, and program for authenticated encryption
KR101600016B1 (ko) 동형 암호화 알고리즘을 이용한 암호화 방법 및 이를 수행하는 컴퓨팅 장치
EP2556613A1 (fr) Traitement de paquets de transport
JP4860708B2 (ja) ストリーム暗号方法および暗号システム
US20150016606A1 (en) Generating device, re-encrypting device, method, and computer program product
JP2007043353A (ja) 送受信システムおよび方法、送信装置および方法、受信装置および方法、並びにプログラム
WO2016067524A1 (fr) Appareil de chiffrement authentifié, appareil de déchiffrement authentifié, système de cryptographie authentifiée, procédé de chiffrement authentifié et programme
US20140044262A1 (en) Low Latency Encryption and Authentication in Optical Transport Networks
JP2017216619A (ja) 情報処理装置、情報処理方法及びプログラム
CN114244507A (zh) 基于单路传输的量子直接通信方法、装置、设备和系统
JP6187624B1 (ja) 情報処理装置、情報処理方法及びプログラム
WO2017094561A1 (fr) Dispositif de chiffrement, système de communication cryptographique et procédé de transmission de données chiffrées
US11057193B2 (en) Enhanced randomness for digital systems
US20170041133A1 (en) Encryption method, program, and system
JP2009088641A (ja) 送受信方法、通信システムおよび送信装置
CN116208326A (zh) 数据传输方法、装置、系统、存储介质和电子设备
CN109889327B (zh) 共享密钥生成方法和装置
JP2008124935A (ja) 送信装置、受信装置、情報通信システム
WO2018092313A1 (fr) Dispositif de communication, système de communication et procédé de communication
US11196447B2 (en) Computer-implemented method for error-correction-encoding and encrypting of a file
JP2015022269A (ja) 暗号化装置、復号装置、暗号化方法、復号方法及びプログラム
CN108737075B (zh) 一种生成共享密钥的方法、装置及系统

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16921940

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16921940

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: JP