WO2019031343A1 - Data transfer system, and data transmission device and data reception device therefor - Google Patents

Abstract

The present invention can enhance the security of data in unidirectional communication. A data transmission device is used while being mounted to or gripped by a specific site of a user together with a data reception device, and comprises: a detection unit for detecting mechanical motion applied to the data transmission device; a creation unit for creating an encryption key on the basis of the detection result of the mechanical motion applied to the data transmission device; an encryption processing unit for encrypting transmission data by using the encryption key; and a packet transmission processing unit for storing the encrypted transmission data in a packet for unidirectional communication and transmitting the packet.

Description

Data transmission system and data transmission apparatus and data reception apparatus

The present invention relates to data transmission / reception technology by one-way communication.

A blood pressure monitor having a function of transferring blood pressure data to a user's portable information terminal has been put on the market. As the portable information terminal, for example, a smartphone, a tablet type terminal, or a notebook personal computer is used. By using this function, the user can list the measurement results of his / her blood pressure under various conditions on the portable information terminal. Also, for the transfer of blood pressure data, near field communication technology, in particular Bluetooth (registered trademark) technology is typically used. Generally, Bluetooth communication (connection) can be realized on a smaller scale and with less power consumption than wireless local area network (WLAN) communication. Version 4.0 of the Bluetooth specification, also called BLE (Bluetooth Low Energy), can further reduce power consumption compared to previous specifications.

In BLE, bi-directional communication called connection can be performed. However, in the connection, the operation imposed on the user for pairing is complicated, the communication procedure after pairing is complicated, the portable information terminal side needs to support BLE, only the portable information terminal In addition, the blood pressure monitor requires high-performance hardware (processor, memory), high development / evaluation cost, large communication overhead, and is not suitable for small-capacity data transmission.

On the other hand, BLE can also perform one-way communication called advertising. Japanese Patent No. 5852620 discloses a technique for transmitting data including optional data in the margin of the data field of an advertisement packet.

If blood pressure data is transmitted using advertising, pairing and subsequent complicated communication procedures become unnecessary, so the above problem is eliminated or alleviated. In addition, in blood pressure data transmission using advertising, if blood pressure data is encrypted, leakage of blood pressure data to a third party can be prevented.

However, in the above-mentioned advertising, since bi-directional communication is not performed between the transmitting device and the receiving device, the encryption key can not be passed between the transmitting device and the receiving device. Therefore, it is difficult for the receiving device to properly decrypt the encrypted blood pressure data.

An object of the present invention is to provide a data transmission system capable of enhancing security of data in one-way communication, and a data transmission apparatus and a data reception apparatus therefor.

According to a first aspect of the present invention, there is provided a data transmission system comprising a data transmission apparatus and a data reception apparatus used in a state of being attached to or held by a specific part of a user, wherein the data transmission apparatus is the data transmission apparatus. A detection unit for detecting a mechanical motion applied to the data transmission device, a generation unit for generating a first encryption key based on the detection result of the mechanical motion applied to the data transmission apparatus, and the first encryption An encryption processing unit that encrypts transmission data using a key; a packet transmission processing unit that stores the encrypted transmission data in a packet for one-way communication; and transmits the packet; A detection unit for detecting a dynamic movement applied to the data receiving apparatus, and a generation unit for generating a second encryption key based on a detection result of the dynamic movement applied to the data receiving apparatus A packet reception processing unit for receiving a packet for one-way communication in which the encrypted transmission data is stored, which is transmitted from the data transmission apparatus, and the transmission data stored in the received packet A data transmission system comprising: a decryption processing unit that decrypts using the second encryption key.

According to the first aspect of the present invention, the data transmission apparatus creates the same encryption key as the encryption key generated by the data reception apparatus based on the detection result of the dynamic motion added to the data transmission apparatus. can do. As a result, the data transmission apparatus can encrypt transmission data using the same encryption key as the encryption key used to decrypt the transmission data by the data reception apparatus. The data receiving apparatus can create the same encryption key as the encryption key generated by the data transmitting apparatus based on the detection result of the dynamic motion added to the data receiving apparatus. As a result, even if the encryption key can not be passed between the data transmission apparatus and the data reception apparatus, the data reception apparatus can decrypt the transmission data encrypted by the data transmission apparatus.

A second aspect of the present invention is a data transmission apparatus used in a state of being attached to or gripped by a specific part of a user together with a data reception apparatus, which detects mechanical motion applied to the data transmission apparatus. A detection unit; a creation unit that creates an encryption key based on the detection result of the dynamic motion applied to the data transmission apparatus; an encryption processing unit that encrypts transmission data using the encryption key; And a packet transmission processing unit that stores encrypted transmission data in a packet for one-way communication and transmits the packet.

According to the second aspect of the present invention, the data transmission apparatus creates the same encryption key as the encryption key generated by the data reception apparatus based on the detection result of the dynamic motion applied to the data transmission apparatus. can do. As a result, the data transmission apparatus can encrypt transmission data using the same encryption key as the encryption key used to decrypt the transmission data by the data reception apparatus.

According to a third aspect of the present invention, in the data transmission device according to the second aspect, the creation unit uses a detection result regarding a predetermined one direction based on a mechanical motion applied to the data transmission device. The encryption key is created.

According to the third aspect of the present invention, even if the mechanical motion applied to the data transmission apparatus is complex, the data transmission apparatus uses the detection result on one direction determined in advance to obtain the encryption key. Can be created. As a result, when, for example, the user gives the data transmission apparatus and the data reception apparatus the same mechanical motion, the data transmission apparatus receives the data of the encryption key generated by the data transmission apparatus. It is possible to reduce the possibility of being different from the encryption key generated by the device.

According to a fourth aspect of the present invention, in the data transmitting apparatus according to the second aspect, the generation unit compares the data amount of the detection result with a reference value, and the data amount of the detection result is less than the reference value The encryption key is created using the detection result based on the comparison result indicating that.

According to the fourth aspect of the present invention, the data transmission device creates the encryption key based on the dynamic motion applied to the uncomplicated data transmission device such that the amount of data is less than the reference value. it can. As a result, when, for example, the user gives the data transmission apparatus and the data reception apparatus the same mechanical motion, the data transmission apparatus receives the data of the encryption key generated by the data transmission apparatus. It is possible to reduce the possibility of being different from the encryption key generated by the device.

According to a fifth aspect of the present invention, in the data transmitting apparatus according to the second aspect, the creating unit creates the encryption key based on an operation instructing the user to create the encryption key. It is.

According to the fifth aspect of the present invention, the data transmitting apparatus can create an encryption key triggered by an operation instructing the user to create an encryption key. Therefore, the data transmitting apparatus can prevent the user from creating the encryption key at a timing when the creation of the encryption key is not desired. As a result, for example, when the user simultaneously gives the data transmitting device and the data receiving device an operation of instructing creation of the encryption key, the data transmitting device is the same as the encryption key generated by the data receiving device. You can create a key.

A sixth aspect of the present invention is a data receiving apparatus used in a state of being attached to or gripped by a specific part of a user together with a data transmitting apparatus, which detects mechanical motion applied to the data receiving apparatus. A detection unit, a generation unit for generating an encryption key based on the detection result of the dynamic motion applied to the data reception apparatus, and encrypted transmission data to be transmitted from the data transmission apparatus; A data reception apparatus comprising: a packet reception processing unit for receiving a packet for one-way communication; and a decryption processing unit for decrypting transmission data stored in the received packet using the encryption key.

According to the sixth aspect of the present invention, the data receiving apparatus creates the same encryption key as the encryption key generated by the data transmitting apparatus based on the detection result of the dynamic motion added to the data receiving apparatus. can do. As a result, even if the encryption key can not be passed between the data transmission apparatus and the data reception apparatus, the data reception apparatus can decrypt the transmission data encrypted by the data transmission apparatus.

According to a seventh aspect of the present invention, in the data receiving apparatus according to the sixth aspect, the creating unit uses a detection result regarding a predetermined one direction based on a mechanical motion applied to the data receiving apparatus. The encryption key is created.

According to the seventh aspect of the present invention, the data receiving apparatus uses the detection result on one direction determined in advance, even if the mechanical motion applied to the data receiving apparatus is complex. Can be created. As a result, for example, when the user gives the data transmission apparatus and the data reception apparatus the same mechanical motion, the data reception apparatus transmits data of the encryption key generated by the data reception apparatus. It is possible to reduce the possibility of being different from the encryption key generated by the device.

According to an eighth aspect of the present invention, in the data receiving device according to the sixth aspect, the generation unit compares the data amount of the detection result with a reference value, and the data amount of the detection result is less than the reference value The encryption key is created using the detection result based on the comparison result indicating that.

According to the eighth aspect of the present invention, the data receiving apparatus creates the encryption key based on the mechanical motion applied to the uncomplicated data receiving apparatus such that the amount of data is less than the reference value. it can. As a result, for example, when the user gives the data transmission apparatus and the data reception apparatus the same mechanical motion, the data reception apparatus transmits data of the encryption key generated by the data reception apparatus. It is possible to reduce the possibility of being different from the encryption key generated by the device.

According to a ninth aspect of the present invention, in the data receiving apparatus according to the sixth aspect, the creation unit creates the encryption key based on an operation instructing the user to create the encryption key. It is.

According to the ninth aspect of the present invention, the data receiving apparatus can create an encryption key triggered by an operation of instructing creation of an encryption key by the user. Therefore, the data receiving apparatus can prevent the user from creating the encryption key at a timing when the creation of the encryption key is not desired. As a result, for example, when the user simultaneously gives the data transmitting device and the data receiving device an operation of instructing creation of an encryption key, the data receiving device may use the same encryption key as the encryption key created by the data transmitting device. You can create a key.

According to the present invention, it is possible to provide a technique for enhancing the security of data in one-way communication.

FIG. 1 is a block diagram showing an application example of the data transmission apparatus and the data reception apparatus according to the embodiment. FIG. 2 is a block diagram illustrating a data transmission system including the data transmission apparatus and the data reception apparatus according to the embodiment. FIG. 3 is a block diagram illustrating the hardware configuration of the data transmission apparatus according to the embodiment. FIG. 4 is a block diagram illustrating the software configuration of the data transmission apparatus according to the embodiment. FIG. 5 is a block diagram illustrating the hardware configuration of the data receiving apparatus according to the embodiment. FIG. 6 is a block diagram illustrating the software configuration of the data receiving apparatus according to the embodiment. FIG. 7 is an explanatory diagram of advertising performed in BLE. FIG. 8 is a diagram illustrating the data structure of packets transmitted and received in BLE. FIG. 9 is a diagram illustrating the data structure of the PDU field of the advertisement packet. FIG. 10 is a flowchart illustrating the operation of the data transmission apparatus according to the embodiment. FIG. 11 is a flowchart illustrating the operation of the data receiving apparatus according to the embodiment.

Hereinafter, an embodiment according to one aspect of the present invention (hereinafter, also referred to as “the present embodiment”) will be described based on the drawings.

Hereinafter, elements which are the same as or similar to the already described elements are denoted by the same or similar reference numerals, and redundant descriptions will be basically omitted.
11 Application example
First, one application example of the present invention will be described using FIG. FIG. 1 schematically shows an application example of the data transmitting apparatus 100 and the data receiving apparatus 200 according to the present embodiment. The data transmitting apparatus 100 and the data receiving apparatus 200 are used in a state of being mounted or gripped at a specific site of the user. Thereby, the data transmission device 100 and the data reception device 200 add the same dynamic motion according to the motion of the specific part of the user.

The data transmission device 100 is a sensor device that measures the amount of biological information or activity information of the user on a daily basis. The data transmission apparatus 100 is an apparatus capable of one-way communication such as BLE.
The data transmission apparatus 100 includes a creation unit 1111, an encryption processing unit 1112 and a packet transmission processing unit 1113.

The creation unit 1111 creates an encryption key based on the detection result of the dynamic motion added to the data transmission apparatus 100.
The encryption processing unit 1112 encrypts measurement data indicating biological information or activity information of the user using the encryption key generated by the generation unit 1111.
The packet transmission processing unit 1113 stores the encrypted transmission data in the advertisement packet in BLE, and transmits the advertisement packet.
Thus, the data transmitting apparatus 100 can transmit an advertisement packet using one-way communication of BLE.

The data reception device 200 is a portable information terminal such as a smartphone or a tablet. The data receiving apparatus 200 is an apparatus capable of BLE wireless communication. The data receiving apparatus 200 receives, from the data transmitting apparatus 100, an advertisement packet in which encrypted measurement data is stored.

The creation unit 2111 creates an encryption key based on the detection result of the dynamic motion added to the data receiving apparatus 200.
The decryption processing unit 2112 decrypts the encrypted measurement data stored in the advertisement packet, using the encryption key generated by the generation unit 2111.
The data processing unit 2113 transmits the decoded measurement data to another device.

As described above, according to the present embodiment, the data transmitting apparatus 100 and the data receiving apparatus 200 can enhance the security of data in one-way communication.

22 Configuration example
<Data transmission system>
An example of the data transmission system according to the present embodiment will be described with reference to FIG. FIG. 2 is a block diagram illustrating a data transmission system including the data transmission apparatus 100 and the data reception apparatus 200 according to the present embodiment. The data transmitting apparatus 100 and the data receiving apparatus 200 are used in a state of being mounted or gripped at a specific site of the user. Thereby, the data transmission device 100 and the data reception device 200 add the same dynamic motion according to the motion of the specific part of the user.

The data transmission device 100 is a sensor device that routinely measures an amount related to biological information or activity information of the user, such as a blood pressure monitor, a thermometer, an activity meter, a pedometer, a body composition meter, and a weight scale. The data transmission apparatus 100 is an apparatus capable of one-way communication such as BLE. In the example of FIG. 2, the appearance of a wristwatch type wearable sphygmomanometer is shown as the data transmission device 100, but the data transmission device 100 is not limited to this, and may be a stationary sphygmomanometer. It may be a sensor device that measures quantities related to other biometric information or activity information. The data transmitting apparatus 100 transmits measurement data indicating biological information or activity information to the data receiving apparatus 200 by one-way communication. Measurement data may be referred to as transmission data. The data transmission device 100 is used with the data reception device 200 in a state of being attached to or gripped by a specific part of the user. As a result, the data transmitting apparatus 100 applies the same mechanical motion as the mechanical motion applied to the data receiving device 200 according to the motion of the specific part of the user.

The data reception device 200 is a portable information terminal such as a smartphone or a tablet. The data receiving apparatus 200 is mainly an apparatus capable of wireless communication such as BLE, mobile communication (3G, 4G, etc.) and WLAN. The data receiving apparatus 200 is used with the data transmitting apparatus 100 in a state of being attached to or gripped by a specific part of the user. The data receiving apparatus 200 has the same mechanical movement as the mechanical movement applied to the data transmitting apparatus 100 according to the movement of the specific part of the user.

The data receiving apparatus 200 receives the measurement data from the data transmitting apparatus 100 by BLE. The data receiving apparatus 200 transmits measurement data to the server 300 via the network. The data receiving apparatus 200 uses, for example, mobile communication or WLAN.

The server 300 corresponds to a database that manages biometric information or activity information of a large number of users based on measurement data.

<Data transmission device>
[Hardware configuration]
Next, an example of the hardware configuration of the data transmission apparatus 100 according to the present embodiment will be described with reference to FIG. FIG. 3 schematically shows an example of the hardware configuration of the data transmission apparatus 100. As shown in FIG.

As shown in FIG. 3, the data transmission apparatus 100 includes a control unit 111, a storage unit 112, a communication interface 113, an input device 114, an output device 115, an external interface 116, a battery 117, and a living body sensor 118. And the motion sensor 119 are electrically connected. In FIG. 3, the communication interface and the external interface are described as “communication I / F” and “external I / F”, respectively.

The control unit 111 includes a central processing unit (CPU), a random access memory (RAM), a read only memory (ROM), and the like. The CPU is an example of a processor. The CPU develops the program stored in the storage unit 112 in the RAM. Then, the CPU interprets and executes this program, whereby the control unit 111 can execute various information processing, for example, processing of functional blocks described in the item of software configuration.

The storage unit 112 is a so-called auxiliary storage device, and may be, for example, a semiconductor memory such as a built-in or external flash memory, a hard disk drive (HDD), or a solid state drive (SSD). The storage unit 112 stores a program executed by the control unit 111, data used by the control unit 111, and the like. The program can also be referred to as an instruction to operate the control unit 111.

The communication interface 113 includes at least a wireless module for transmitting (advertising) a packet of one-way communication such as BLE. Advertising of BLE will be described later. The wireless module receives, from the control unit 111, an advertisement packet in BLE in which encrypted measurement data is stored. The encryption of measurement data will be described later. The wireless module sends an advertisement packet. The wireless module may be referred to as a transmitter. Note that BLE may be replaced by another low power consumption, one-way communication standard that can be used in the future. In that case, the following description may be read appropriately.

The input device 114 is a device for receiving user input such as a touch screen, a button, and a switch.

The output device 115 is, for example, a device for performing output such as a display and a speaker.

The external interface 116 is a universal serial bus (USB) port, a memory card slot, or the like, and is an interface for connecting to an external device.

The battery 117 supplies the power supply voltage of the data transmission apparatus 100. The battery 117 may be replaceable. Data transmission apparatus 100 may be connectable to a commercial power supply via an AC (Alternating Current) adapter. In this case, the battery 117 can be omitted.

The biometric sensor 118 obtains measurement data by measuring the amount of biometric information of the user. The operation of the biological sensor 118 is controlled by, for example, a sensor control unit (not shown). The measurement data is stored in the storage unit 112 in association with date and time data. Biosensor 118 typically includes a blood pressure sensor that obtains blood pressure data by measuring an amount related to the user's blood pressure. In this case, the measurement data includes blood pressure data. Blood pressure data may include, but is not limited to, for example, systolic blood pressure SBP (systolic blood pressure) and diastolic blood pressure DBP (diastolic blood pressure) values and pulse rate. In addition, measurement data can include electrocardiogram data, pulse wave data, body temperature data, and the like.

The blood pressure sensor may include a blood pressure sensor (hereinafter also referred to as a continuous blood pressure sensor) capable of continuously measuring an amount related to the user's blood pressure every one beat. The continuous blood pressure sensor may continuously measure an amount related to the user's blood pressure from pulse wave transit time (PTT), or may realize continuous measurement by tonometry or other techniques.

The blood pressure sensor is a blood pressure sensor that performs a measurement operation in response to a user operation or at a preset measurement time instead of or in addition to a continuous blood pressure sensor (hereinafter referred to as discontinuous blood pressure Can also be included). A non-continuous blood pressure sensor, for example, uses a cuff as a pressure sensor to measure an amount related to the user's blood pressure (oscillometric method).

Non-continuous blood pressure sensors (especially, blood pressure sensors using oscillometric method) tend to have higher measurement accuracy than continuous blood pressure sensors. Therefore, the blood pressure sensor is replaced with the continuous blood pressure sensor, for example, triggered by that a certain condition is satisfied (for example, the amount related to the user's blood pressure measured by the continuous blood pressure sensor suggested a predetermined state) By operating the non-continuous blood pressure sensor, the amount related to blood pressure may be measured with higher accuracy.

The motion sensor 119 may be, for example, an acceleration sensor or a gyro sensor. The motion sensor 119 detects acceleration / angular velocity received by the motion sensor 119 to obtain a detection result indicating acceleration / angular velocity data (hereinafter also referred to as motion data) of three axes. Thus, the motion sensor 119 detects the mechanical motion applied to the data transmission device 100. The motion sensor 119 may be referred to as a detection unit. The operation of the motion sensor 119 is controlled by, for example, a sensor control unit (not shown). The detection result is used to create an encryption key for encrypting measurement data as described later.

In addition, regarding the specific hardware configuration of the data transmission apparatus 100, omission, substitution, and addition of components can be appropriately made according to the embodiment. For example, the control unit 111 may include a plurality of processors. The data transmission device 100 may be configured by a plurality of sensor devices.

<Data transmission device>
Software Configuration
Next, an example of the software configuration of the data transmitting apparatus 100 according to the present embodiment will be described with reference to FIG. FIG. 4 schematically illustrates an example of the software configuration of the data transmission apparatus 100.
The control unit 111 implements a creation unit 1111, an encryption processing unit 1112 and a packet transmission processing unit 1113.

The creation unit 1111 will be described.
The creation unit 1111 creates the encryption key based on the detection result of the dynamic motion added to the data transmission apparatus 100 as exemplified below. For example, the creation unit 1111 creates the encryption key based on an operation instructing the user to create the encryption key. For example, the data transmission apparatus 100 is worn on the wrist of the user and moves in response to the movement of the user. The creation unit 1111 receives the detection result of the dynamic motion applied to the data transmission apparatus 100 from the motion sensor 119 in time series. In one example, the creation unit 1111 receives, from the motion sensor 119, the detection result of the dynamic motion added to the data transmission apparatus 100 during a predetermined time after detecting an instruction regarding the creation start of the encryption key by the user. Alternatively, in another example, the creating unit 1111 is added to the data transmitting apparatus 100 after detecting an instruction regarding the start of creation of the encryption key by the user until detecting an instruction regarding the end of creation of the encryption key by the user. The detection result of the dynamic motion may be received from the motion sensor 119. The creation unit 1111 creates an encryption key using detection results along a time series according to a predetermined algorithm.
The creation unit 1111 outputs the encryption key to the encryption processing unit 1112.

The encryption processing unit 1112 will be described.
The encryption processing unit 1112 encrypts measurement data using an encryption key as exemplified below. The encryption processing unit 1112 receives the encryption key from the creation unit 1111. In addition, the encryption processing unit 1112 acquires measurement data from the storage unit 112. The encryption processing unit 1112 encrypts measurement data using the encryption key generated by the data transmission apparatus 100 according to a predetermined algorithm. As the encryption method, for example, the transmitting side and the receiving side have a common key, and the transmitting side substitutes the plaintext into a ciphertext using the common key and transmits it, and the receiving side receives the ciphertext using the common key A common key scheme to decrypt is used. As the encryption method, any method may be used as long as the transmitting side and the receiving side use the common key.
The encryption processing unit 1112 outputs the encrypted measurement data to the packet transmission processing unit 1113.

The packet transmission processing unit 1113 will be described.
The packet transmission processing unit 1113 stores the encrypted measurement data in the advertisement packet in BLE, and transmits the advertisement packet. The packet transmission processing unit 1113 transmits an advertisement packet via the communication interface 113.

<Data receiving device>
[Hardware configuration]
Next, an example of the hardware configuration of the data receiving apparatus 200 according to the present embodiment will be described using FIG. FIG. 5 schematically illustrates an example of the hardware configuration of the data receiving apparatus 200.

As shown in FIG. 5, in the data receiving apparatus 200, the control unit 211, the storage unit 212, the communication interface 213, the input device 214, the output device 215, the external interface 216, and the motion sensor 217 are electrically connected. Is a computer connected to In FIG. 5, the communication interface and the external interface are described as “communication I / F” and “external I / F”, respectively.

The control unit 211 includes a CPU, a RAM, a ROM, and the like. The CPU is an example of a processor. The CPU develops the program stored in the storage unit 212 in the RAM. Then, the CPU interprets and executes this program, whereby the control unit 211 can execute various information processing, for example, processing of the functional blocks described in the item of the software configuration.

The storage unit 212 is a so-called auxiliary storage device, and may be, for example, a semiconductor memory such as a built-in or external flash memory. The storage unit 212 stores a program executed by the control unit 211, data used by the control unit 211, and the like. The program can also be referred to as an instruction to operate the control unit 211.

The communication interface 213 mainly includes various wireless communication modules for BLE, mobile communication (3G, 4G, etc.) and WLAN. The communication interface 213 may further include a wired communication module such as a wired LAN (Local Area Network) module. The communication module for BLE receives the advertisement packet, which is transmitted from the data transmitting apparatus 100, in which the encrypted measurement data is stored. The communication module for BLE may be referred to as a packet reception processor.

The input device 214 is a device for receiving user input such as a touch screen, for example.

The output device 215 is, for example, a device for performing an output such as a display or a speaker.

The external interface 216 is a USB port, a memory card slot, or the like, and is an interface for connecting to an external device.

The motion sensor 217 may be, for example, an acceleration sensor or a gyro sensor, similar to the motion sensor 119 described above. The motion sensor 217 detects an acceleration / angular velocity received by the motion sensor 217 to obtain a detection result indicating acceleration / angular velocity data of three axes. Thus, the motion sensor 217 detects the mechanical motion applied to the data receiving device 200. The motion sensor 217 may be referred to as a detection unit. The operation of the motion sensor 217 is controlled by, for example, a sensor control unit (not shown). The detection result is used to create an encryption key for decrypting the encrypted measurement data as described later.

In addition, regarding the specific hardware configuration of the data receiving apparatus 200, omission, replacement, and addition of components can be appropriately made according to the embodiment. For example, the control unit 211 may include a plurality of processors.

<Data receiving device>
Software Configuration
Next, an example of the software configuration of the data receiving apparatus 200 according to the present embodiment will be described with reference to FIG. FIG. 6 schematically illustrates an example of the software configuration of the data receiving apparatus 200.
The control unit 211 mounts the creation unit 2111, the decoding processing unit 2112, and the data processing unit 2113.

The creation unit 2111 creates the encryption key based on the detection result of the dynamic motion added to the data receiving apparatus 200 as illustrated below. For example, the creation unit 2111 creates an encryption key based on an operation instructing the user to create an encryption key. For example, the data receiving apparatus 200 moves with the data transmitting apparatus 100 according to the movement of the user by being held by the hand of the user to which the data transmitting apparatus 100 is attached. The creation unit 2111 receives the detection result of the dynamic motion added to the data reception device 200 from the motion sensor 217 in time series. In one example, the creation unit 2111 receives, from the motion sensor 217, the detection result of the dynamic motion added to the data reception device 200 during a predetermined time after detecting an instruction regarding the creation start of the encryption key by the user. Alternatively, in another example, the creating unit 2111 is added to the data receiving apparatus 200 after detecting an instruction regarding the start of creation of the encryption key by the user until detecting an instruction regarding the end of creation of the encryption key by the user. The detection result of the mechanical motion may be received from the motion sensor 217. The creation unit 2111 creates an encryption key using detection results along a time series according to a predetermined algorithm.
The creation unit 2111 outputs the encryption key to the decryption processing unit 2112.

The decryption processing unit 2112 will be described.
The decryption processing unit 2112 decrypts the measurement data using the encryption key generated by the data receiving apparatus 200 as exemplified below. The decryption processing unit 2112 receives the encryption key from the creation unit 2111. Also, the decryption processing unit 2112 receives, from the communication interface 213, an advertisement packet in which the encrypted measurement data is stored. The decryption processing unit 2112 decrypts the encrypted measurement data stored in the advertisement packet using the encryption key generated by the data receiving apparatus 200 according to a predetermined algorithm.
The decoding processing unit 2112 outputs the decoded measurement data to the data processing unit 2113.

The data processing unit 2113 will be described.
The data processing unit 2113 stores the measurement data in the storage unit 212. Furthermore, the data processing unit 2113 transmits measurement data to the server 300 via the network in accordance with a predetermined communication protocol.

[Advertisement of BLE]
An outline of the advertisement of BLE will be described.
In the passive scanning scheme employed in BLE, as illustrated in FIG. 7, a new node periodically transmits an advertisement packet that announces its own presence. The new node can save power consumption by entering a low power consumption sleep state after transmitting an advertisement packet once and before transmitting it. In addition, since the receiving side of the advertisement packet also operates intermittently, the power consumption for transmitting and receiving the advertisement packet is small.

FIG. 8 shows the basic structure of the BLE wireless communication packet. The BLE wireless communication packet has a 1-byte preamble, a 4-byte access address, a 2-39-byte (variable) protocol data unit (PDU), and a 3-byte cyclic redundancy check (CRC: Cyclic). And Redundancy Checksum). The length of the BLE wireless communication packet is 10 to 47 bytes, depending on the length of the PDU. A 10-byte BLE wireless communication packet (PDU is 2 bytes) is Empty
Also called a PDU packet, it is periodically exchanged between the master and the slave.

The preamble field is prepared for synchronization of BLE wireless communication, and stores "01" or "10" repetitions. The access address is a fixed numerical value in the advertising channel and a random access address in the data channel. In the present embodiment, an advertisement packet, which is a BLE wireless communication packet transmitted on an advertising channel, is targeted. The CRC field is used to detect a reception error. The calculation range of CRC is only the PDU field.

Next, the PDU field of the advertisement packet will be described using FIG. Although the PDU field of the data communication packet which is a BLE wireless communication packet transmitted on the data channel has a data structure different from that of FIG. 9, the data communication packet is not targeted in the present embodiment, and therefore, the description is omitted.

The PDU field of the advertisement packet includes a 2-byte header and a payload of 0 to 37 bytes (variable). The header further includes a 4-bit PDU Type field, a 2-bit unused field, a 1-bit TxAdd field, a 1-bit RxAdd field, a 6-bit Length field, and a 2-bit unused field. Including.

The PDU Type field stores a value indicating the type of this PDU. Several values, such as "connectable advertising" and "not connected advertising", have been defined. In the TxAdd field, a flag indicating whether or not there is a transmission address in the payload is stored. Similarly, in the RxAdd field, a flag indicating whether or not there is a reception address in the payload is stored. In the Length field, a value indicating the byte size of the payload is stored.

The payload can store any data. Therefore, the data transmission apparatus 100 stores measurement data and date and time data in the payload using a predetermined data structure. This data structure is, for example, an identifier representing a user, an identifier representing the data transmission apparatus 100 as a transmission source apparatus, an identifier representing a data reception apparatus 200 as a destination apparatus, date and time data, systolic blood pressure SBP associated with date and time data, It may include one or more measurement data such as diastolic blood pressure DBP, pulse rate, activity, and the like.

3 3 Operation example
<Data transmission device>
Next, an operation example of the data transmission apparatus 100 will be described using FIG. FIG. 10 is a flowchart illustrating an example of the operation of the data transmission apparatus 100. Here, the data transmitting apparatus 100 is used with the data receiving apparatus 200 in a state of being attached to or gripped by a specific part of the user. As a result, it is assumed that the data transmitting apparatus 100 adds the same mechanical motion as the mechanical motion applied to the data receiving device 200 according to the motion of the specific part of the user. For example, it is assumed that the data transmission apparatus 100 is worn on the wrist of the user. In addition, the process sequence demonstrated below is only an example, and each process may be changed as much as possible. In addition, with regard to the processing procedure described below, depending on the embodiment, omission, substitution, and addition of steps can be made as appropriate.

As described above, the creation unit 1111 creates the encryption key based on the detection result of the dynamic motion added to the data transmission apparatus 100 (step S101).

The encryption processing unit 1112 acquires measurement data from the storage unit 112 (step S102).

As described above, the encryption processing unit 1112 encrypts the measurement data using the encryption key generated by the data transmission apparatus 100 (step S103).

As described above, the packet transmission processing unit 1113 stores the encrypted measurement data in the advertisement packet, and transmits the advertisement packet (step S104).

By the above process, the data transmitting apparatus 100 can transmit the advertisement packet storing the encrypted measurement data to the data receiving apparatus 200.

In step S101, the creating unit 1111 creates an encryption key using a detection result on one direction determined in advance based on the dynamic movement applied to the data transmitting apparatus 100 as illustrated below. You may

In this example, the creation unit 1111 extracts a detection result along a time series of predetermined unidirectional components from the detection results along the time series. The predetermined one direction is, for example, the vertical direction, but may be another direction. The creation unit 1111 creates an encryption key using a predetermined one-way component detection result. In one example, the creation unit 1111 can create the encryption key using the detection result of the predetermined one-way component as it is according to the predetermined algorithm. Instead of this, in another example, the creating unit 1111 detects the number of vibrations in one direction determined in advance from the detection result of the component in one direction determined in advance, and creates an encryption key based on the number of vibrations. be able to.

According to this example, the creation unit 1111 can create the encryption key using the simplified detection result.

In step S101, the generation unit 1111 compares the data amount of the detection result of the dynamic motion added to the data transmission apparatus 100 with the reference value as exemplified below, and the data amount of the detection result is the reference The detection result may be used to create the encryption key based on the comparison result indicating that the value is less than the value.

In this example, the creation unit 1111 compares the detection result along the time series with the reference value. The reference value is appropriately set so that the data amount of the detection result does not become too large. The reason is that, as the amount of data of the detection result increases, the possibility that the encryption key generated by the data transmission apparatus 100 will not match the encryption key generated by the data reception apparatus 200 increases. The creation unit 1111 creates an encryption key using the detection result based on the comparison result indicating that the data amount of the detection result is less than the reference value. On the other hand, the creation unit 1111 discards the detection result based on the comparison result indicating that the data amount of the detection result is equal to or greater than the reference value. The creation unit 1111 controls the output device 115 to output a message prompting the user to create the encryption key again. Thus, the creation unit 1111 receives the detection result of the dynamic motion newly added to the data transmission apparatus 100 from the motion sensor 119. The creating unit 1111 compares the data amount of the new detection result with the reference value, and processes the same as the above according to the comparison result.

According to this example, the creation unit 1111 can create the encryption key using the detection result that the amount of data does not become too large.

<Data receiving device>
Next, an operation example of the data receiving apparatus 200 will be described using FIG. FIG. 11 is a flowchart illustrating an example of the operation of the data receiving apparatus 200. Here, the data receiving apparatus 200 is used together with the data transmitting apparatus 100 in a state of being attached to or gripped by a specific part of the user. As a result, it is assumed that the data receiving apparatus 200 adds the same mechanical movement as the mechanical movement applied to the data transmitting apparatus 100 according to the movement of the specific part of the user. For example, it is assumed that the data receiving apparatus 200 is held by the user's hand on which the data transmitting apparatus 100 is attached. Thus, the mechanical motion applied to the data receiving apparatus 200 according to the motion of the user's hand is the same as the mechanical motion applied to the data transmitting apparatus 100. In addition, the process sequence demonstrated below is only an example, and each process may be changed as much as possible. In addition, with regard to the processing procedure described below, depending on the embodiment, omission, substitution, and addition of steps can be made as appropriate.

As described above, the creating unit 2111 creates the encryption key based on the detection result of the dynamic motion added to the data receiving apparatus 200 (step S201).

As described above, the decryption processing unit 2112 receives, from the communication interface 213, the advertisement packet in which the encrypted measurement data is stored (step S202).

As described above, the decryption processing unit 2112 decrypts the encrypted measurement data stored in the advertisement packet using the encryption key generated by the data receiving apparatus 200 (step S203).

By the above process, the data receiving apparatus 200 can use the decoded measurement data.

In step S201, the creating unit 2111 creates the encryption key using the detection result on one direction determined in advance based on the mechanical movement applied to the data receiving apparatus 200 as illustrated below. You may

In this example, the creating unit 2111 extracts a detection result along a time series of predetermined unidirectional components from the detection results along the time series. The predetermined one direction is, for example, the vertical direction, but may be another direction. The creation unit 2111 creates an encryption key using a predetermined one-way component detection result. In one example, the creation unit 2111 can create the encryption key using the detection result of the predetermined one-way component as it is according to the predetermined algorithm. Instead of this, in another example, the creating unit 2111 detects the number of vibrations in one direction determined in advance from the detection result of the component in one direction determined in advance, and creates an encryption key based on the number of vibrations. be able to.

According to this example, the creation unit 2111 can create the encryption key using the simplified detection result.

In step S201, the generation unit 2111 compares the data amount of the detection result of the dynamic motion added to the data receiving apparatus 200 with the reference value as exemplified below, and the data amount of the detection result is a reference The detection result may be used to create the encryption key based on the comparison result indicating that the value is less than the value.

In this example, the creation unit 2111 compares the detection result along the time series with a reference value. The reference value is appropriately set so that the data amount of the detection result does not become too large. The reason is that as the amount of data of the detection result increases, the possibility that the encryption key generated by the data receiving apparatus 200 will not match the encryption key generated by the data transmitting apparatus 100 increases. The creation unit 2111 creates an encryption key using the detection result based on the comparison result indicating that the data amount of the detection result is less than the reference value. On the other hand, the creating unit 2111 discards the detection result based on the comparison result indicating that the data amount of the detection result is equal to or more than the reference value. The creation unit 2111 controls the output device 215 to output a message prompting the user to create the encryption key again. Thus, the creation unit 2111 receives from the motion sensor 217 the detection result of the dynamic motion newly added to the data receiving apparatus 200. The creating unit 2111 compares the data amount of the new detection result with the reference value, and processes the same as the above according to the comparison result.

According to this example, the creating unit 2111 can create the encryption key using the detection result that the amount of data does not become too large.

[Operation and Effect]
As described above, in the present embodiment, the data transmission system includes the data transmitting apparatus 100 and the data receiving apparatus 200 which are used in a state of being attached to or gripped by a specific part of the user. The data transmission apparatus 100 creates an encryption key based on the detection result of the dynamic motion applied to the data transmission apparatus 100, encrypts transmission data using the encryption key, and advertises encrypted transmission data. Store in a packet and send an advertisement packet. The data receiving apparatus 200 creates an encryption key based on the detection result of the dynamic motion applied to the data receiving apparatus 200, and uses the encryption key for the encrypted transmission data stored in the advertisement packet. To decrypt.

Accordingly, the data transmitting apparatus 100 can create the same encryption key as the encryption key generated by the data receiving apparatus 200 based on the detection result of the dynamic motion added to the data transmitting apparatus 100. As a result, the data transmitting apparatus 100 can encrypt the transmission data using the same encryption key as the encryption key used to decrypt the transmission data by the data receiving apparatus 200. The data receiving apparatus 200 can create the same encryption key as the encryption key generated by the data transmitting apparatus 100 based on the detection result of the dynamic motion added to the data receiving apparatus 200. As a result, even if the encryption key can not be passed between the data transmitting apparatus 100 and the data receiving apparatus 200, the data receiving apparatus 200 can decrypt the transmission data encrypted by the data transmitting apparatus 100. it can.

Furthermore, in the present embodiment, the data transmission apparatus 100 creates an encryption key using the detection result regarding one predetermined direction based on the dynamic motion added to the data transmission apparatus 100.

Thereby, even if the dynamic motion applied to the data transmission apparatus 100 is complex, the data transmission apparatus 100 can create an encryption key using the detection result on one direction determined in advance. As a result, for example, when the user holds the data transmitting apparatus 100 and the data receiving apparatus 200 and applies the same mechanical motion to them, the data transmitting apparatus 100 generates the code generated by the data transmitting apparatus 100. It is possible to reduce the possibility that the key will be different from the encryption key generated by the data receiving apparatus 200.

Furthermore, in the present embodiment, the data transmitting apparatus 100 compares the data amount of the detection result of the dynamic motion added to the data transmitting device 100 with the reference value, and the data amount of the detection result is less than the reference value. The encryption key is created using the detection result based on the comparison result indicating.

As a result, the data transmitting apparatus 100 can create the encryption key based on the dynamic motion applied to the data transmitting apparatus 100 which is not complicated such that the amount of data is less than the reference value. As a result, for example, when the user holds the data transmitting apparatus 100 and the data receiving apparatus 200 and applies the same mechanical motion to them, the data transmitting apparatus 100 generates the code generated by the data transmitting apparatus 100. It is possible to reduce the possibility that the key will be different from the encryption key generated by the data receiving apparatus 200.

Furthermore, in the present embodiment, the data transmitting apparatus 100 creates the encryption key based on the operation of instructing the creation of the encryption key by the user.

As a result, the data transmitting apparatus 100 can create an encryption key, triggered by an operation of instructing creation of an encryption key by the user. Therefore, the data transmitting apparatus 100 can prevent the creation of the encryption key at the timing when the user does not want to create the encryption key. As a result, for example, when the user gives the data transmitting apparatus 100 and the data receiving apparatus 200 an operation of simultaneously instructing creation of an encryption key, the data transmitting apparatus 100 generates the encryption key generated by the data receiving apparatus 200. The same encryption key can be created. 0 can decrypt the measurement data encrypted by the data transmission apparatus 100.

Furthermore, in the present embodiment, the data receiving apparatus 200 creates an encryption key using the detection result regarding one predetermined direction based on the mechanical motion applied to the data receiving apparatus 200.

As a result, even if the dynamic motion applied to the data receiving apparatus 200 is complex, the data receiving apparatus 200 can create an encryption key using the detection result on one direction determined in advance. As a result, for example, when the user holds the data transmitting apparatus 100 and the data receiving apparatus 200 and applies the same dynamic motion to them, the data receiving apparatus 200 generates the code generated by the data receiving apparatus 200. It is possible to reduce the possibility that the key will be different from the encryption key generated by the data transmission device 100.

Furthermore, in the present embodiment, the data receiving apparatus 200 compares the data amount of the detection result of the dynamic motion added to the data receiving device 200 with the reference value, and the data amount of the detection result is less than the reference value. The encryption key is created using the detection result based on the comparison result indicating.

Thereby, the data receiving apparatus 200 can create the encryption key based on the dynamic motion applied to the data receiving apparatus 200 which is not complicated such that the amount of data is less than the reference value. As a result, for example, when the user holds the data transmitting apparatus 100 and the data receiving apparatus 200 and applies the same dynamic motion to them, the data receiving apparatus 200 generates the code generated by the data receiving apparatus 200. It is possible to reduce the possibility that the key will be different from the encryption key generated by the data transmission device 100.

Furthermore, in the present embodiment, the data receiving apparatus 200 creates an encryption key based on an operation of instructing creation of an encryption key by the user.

As a result, the data receiving apparatus 200 can create an encryption key using an operation instructing the creation of an encryption key by the user as a trigger. Therefore, the data receiving apparatus 200 can prevent the creation of the encryption key at the timing when the user does not want to create the encryption key. As a result, for example, when the user simultaneously gives the data transmitting apparatus 100 and the data receiving apparatus 200 an operation of instructing creation of an encryption key, the data receiving apparatus 200 generates the encryption key generated by the data transmitting apparatus 100. The same encryption key can be created.

4 4 Modifications While the embodiments of the present invention have been described in detail, the above description is merely illustrative of the present invention in all respects. It goes without saying that various improvements and modifications can be made without departing from the scope of the present invention. That is, in the implementation of the present invention, a specific configuration according to the embodiment may be appropriately adopted. Although data appearing in the above-described embodiment is described in natural language, more specifically, it is specified by a pseudo language, a command, a parameter, a machine language or the like that can be recognized by a computer.

Although the above embodiment has been described with regard to transmission and reception of encrypted measurement data, the present invention is not limited to this. The encrypted data transmitted and received between the devices may be data other than the measurement data.

5 5
A part or all of each embodiment described above can be described as shown in the following appendices in addition to the claims, but is not limited thereto.
(Supplementary Note 1)
A data transmission device used in a state of being mounted or held on a specific part of a user together with a data reception device,
A detection unit for detecting a mechanical movement applied to the data transmission device;
Generating an encryption key based on the detection result of the dynamic motion added to the data transmission device;
Encrypt transmission data using the encryption key,
A processor configured to store the encrypted transmission data in a packet for one-way communication and transmit the packet;
A memory storing instructions for operating the processor;
A data transmission apparatus comprising:
(Supplementary Note 2)
A data receiving apparatus used in a state of being mounted or held on a specific part of a user together with a data transmitting apparatus,
A detection unit for detecting a mechanical movement applied to the data receiving apparatus;
A packet reception processing unit that receives, from the data transmission apparatus, a packet for one-way communication in which encrypted transmission data is stored;
Creating an encryption key based on the detection result of the dynamic motion added to the data receiving device;
A processor configured to decrypt transmission data stored in the received packet using the encryption key;
A memory storing instructions for operating the processor;
A data receiver comprising:

100 ... data transmission device
111 ... control unit
112 ... storage unit
113 ... Communication interface
114 ... input device
115: Output device
116: External interface
117 ... Battery
118 ... living body sensor
119 ... motion sensor
200 ... data receiver
211 ... control unit
212 ... storage unit
213 ... Communication interface
214 ... input device
215: Output device
216: External interface
217 ... motion sensor
300 ... server
1111 ... making department
1112 ... encryption processing unit
1113 ... packet transmission processing unit
2111 ... creation unit
2112 ... Decoding processing unit
2113 ... data processing unit

Claims (9)

1. What is claimed is: 1. A data transmission system comprising a data transmission device and a data reception device which are used in a state of being mounted or held at a specific part of a user,
   The data transmission apparatus
   A detection unit for detecting a mechanical movement applied to the data transmission device;
   A creation unit that creates a first encryption key based on the detection result of the dynamic motion added to the data transmission apparatus;
   An encryption processing unit that encrypts transmission data using the first encryption key;
   A packet transmission processing unit that stores the encrypted transmission data in a packet for one-way communication and transmits the packet;
   The data receiving apparatus
   A detection unit for detecting a mechanical movement applied to the data receiving apparatus;
   A creation unit that creates a second encryption key based on the detection result of the dynamic motion added to the data receiving apparatus;
   A packet reception processing unit that receives, from the data transmission apparatus, a packet for one-way communication in which the encrypted transmission data is stored;
   A decryption processing unit that decrypts transmission data stored in the received packet using the second encryption key;
   Data transmission system comprising:
2. A data transmission device used in a state of being mounted or held on a specific part of a user together with a data reception device,
   A detection unit for detecting a mechanical movement applied to the data transmission device;
   A creation unit that creates an encryption key based on the detection result of the dynamic motion added to the data transmission device;
   An encryption processing unit that encrypts transmission data using the encryption key;
   A packet transmission processing unit that stores the encrypted transmission data in a packet for one-way communication and transmits the packet;
   A data transmission apparatus comprising:
3. The data transmission device according to claim 2, wherein the generation unit generates the encryption key using the detection result regarding a predetermined one direction based on a mechanical movement applied to the data transmission device.
4. The creation unit compares the amount of data of the detection result with a reference value, and uses the detection result based on a comparison result indicating that the amount of data of the detection result is less than the reference value. create,
   The data transmission device according to claim 2.
5. The data transmission device according to claim 2, wherein the generation unit generates the encryption key based on an operation instructing the generation of the encryption key by the user.
6. A data receiving apparatus used in a state of being mounted or held on a specific part of a user together with a data transmitting apparatus,
   A detection unit for detecting a mechanical movement applied to the data receiving apparatus;
   A creation unit that creates an encryption key based on the detection result of the dynamic motion added to the data receiving apparatus;
   A packet reception processing unit that receives, from the data transmission apparatus, a packet for one-way communication in which encrypted transmission data is stored;
   A decryption processing unit that decrypts transmission data stored in the received packet using the encryption key;
   A data receiver comprising:
7. The data receiving device according to claim 6, wherein the creating unit creates the encryption key using the detection result regarding a predetermined one direction based on a mechanical motion applied to the data receiving device.
8. The creation unit compares the amount of data of the detection result with a reference value, and uses the detection result based on a comparison result indicating that the amount of data of the detection result is less than the reference value. create,
   The data receiving device according to claim 6.
9. The data receiving apparatus according to claim 6, wherein the creation unit creates the encryption key based on an operation instructing the user to create the encryption key.

Images