Source: https://patents.google.com/patent/JP4727860B2/en
Timestamp: 2020-01-29 21:34:56
Document Index: 278837292

Matched Legal Cases: ['art 11', 'art 12', 'art 13', 'art 14', 'art 11', 'art 11', 'art 11', 'art 11', 'art 11', 'art 11', 'art 14', 'art 14', 'art 13', 'art 13', 'art 1', 'art\n13', 'art\n14', 'art\n23']

JP4727860B2 - Wireless operation device and program - Google Patents
Wireless operation device and program Download PDF
JP4727860B2
JP4727860B2 JP2001236869A JP2001236869A JP4727860B2 JP 4727860 B2 JP4727860 B2 JP 4727860B2 JP 2001236869 A JP2001236869 A JP 2001236869A JP 2001236869 A JP2001236869 A JP 2001236869A JP 4727860 B2 JP4727860 B2 JP 4727860B2
JP2001236869A
JP2003051815A5 (en
JP2003051815A (en
信之 小池
2001-08-03 Application filed by 富士通株式会社 filed Critical 富士通株式会社
2001-08-03 Priority to JP2001236869A priority Critical patent/JP4727860B2/en
2003-02-21 Publication of JP2003051815A publication Critical patent/JP2003051815A/en
2006-10-05 Publication of JP2003051815A5 publication Critical patent/JP2003051815A5/ja
2011-07-20 Publication of JP4727860B2 publication Critical patent/JP4727860B2/en
The present invention relates to a key information processing technique.
Conventionally, key information has been used in various situations in human society. For example, an encryption key is used in data communication that requires information to be concealed. In addition, as a key for a building or office, a key in which key information is recorded on a magnetic stripe is used instead of a metal key matched to the shape of a keyhole. Hereinafter, key information such as an encryption key and a building is collectively referred to as key information.
However, in the conventional system, such key information cannot be easily changed and reissued. Alternatively, since it is necessary to store the cipher even if it can be reissued, reissuing requires re-storage and is complicated. Therefore, even if an encryption key is used in communication between information devices such as personal computers, simple communication used in daily life, for example, a television receiver and its wireless remote controller (hereinafter simply referred to as a wireless remote controller). The encryption key is not used in communication between the wireless keyboard and the personal computer.
However, in the future, for example, when considering home banking via a wireless remote controller or a wireless keyboard, it is desirable to encrypt these communications. This is because a bank account password may be intercepted.
In order for a communication partner to decrypt such a cipher, it is necessary to make a cipher agreement between communicating devices. Therefore, there is a need for a system that can easily and securely issue an encryption key between a television receiver and a wireless remote controller, and between a personal computer and a wireless keyboard.
On the other hand, for example, a magnetic stripe type or IC card key (hereinafter referred to as an electronic key) used to open and close a lock in a building or office is easily lost or stolen as much as it is convenient to carry. . Such keys are collected at the center of a key (or building) management company, for example.
For this reason, if such a key is lost, all keys distributed to use the building or office must be collected and the key information must be rewritten. Such a trouble of collecting and reissuing the keys is very troublesome.
The present invention has been made in view of such problems of the conventional technology. That is, an object of the present invention is to ensure sufficient safety from interception in communication between an information device and a wireless operation device.
Another object of the present invention is to simply issue key information to a key information holding device that holds key information.
Moreover, the subject of this invention is ensuring sufficient safety | security from interception in issue of such key information.
The present invention employs the following means in order to solve the above problems. That is, the present invention is a key information issuing device (1, 1A, 1B) that issues key information to the key information holding device (2, 2A, 2B), and an authentication unit (14, 3), an output unit (13) that outputs the key information to the key information holding device, and a recording unit (11) that records the issued key information in association with the key information holding device. The key information is issued according to the instructions of the issuer.
Preferably, the key information holding device (2, 2A, 2B) is a wireless operation device (2, 2A) wirelessly connected to an information device, and a key information input unit (23) that inputs information by contact. The output unit (13) includes a contact unit that outputs the key information in contact with the key information input unit (23), and issues the key information through the contact unit. Good.
Preferably, the key information holding device (2, 2A, 2B) is a wireless operation device (2, 2A) wirelessly connected to an information device, and has a medium input unit for inputting information from a recording medium. The output unit (13) stores information on the recording medium. The A recording medium writing unit for writing may be included, and key information may be issued via the recording medium.
Preferably, the key information holding device (2, 2A, 2B) is a wireless operation device (2, 2A) that is wirelessly connected to an information device, and has a proximity communication unit that cannot communicate outside a predetermined distance. The output unit (13) may include a proximity communication unit that cannot communicate with the key information holding device outside a predetermined distance and issue key information via the proximity communication unit.
Preferably, the key information issuing device (1, 1A) is encrypted by the receiving unit (13) that receives a radio signal from the key information holding device and the encryption key information included in the radio signal. You may further provide the decoding part (11) which decodes information.
Further, the present invention is a wireless operation device (2, 2A) wirelessly connected to an information device, and includes a key information input unit (23) for inputting key information for encrypting information, and the key information. A recording unit (24) for recording, an operation unit (22) for detecting a user's operation, an encryption unit (21) for encrypting input information by the operation with the key information, and encrypted input information May be provided with a transmission unit (25) that transmits the information to the information device.
Preferably, the key information input unit (23) may include a contact unit that inputs key information in contact.
Preferably, the key information input unit (23) may include a medium input unit for inputting information from a recording medium.
Preferably, the key information input unit (23) may include a proximity communication unit that cannot communicate outside a predetermined distance.
Preferably, the wireless operation device (2, 2A) further includes a setting unit (27) for setting the presence / absence of encryption, and the encryption unit (21) receives input information when encryption is instructed. May be encrypted.
Further, the present invention is a wireless operation device (2, 2A) that is wirelessly connected to an information device, and includes an operation unit (22) that detects a user operation, and a transmission unit (22) that transmits input information by the above operation. 25) and a confirmation unit (21) for confirming the presence or absence of a response signal from the information device with respect to the transmitted input information, and transmission of the input information may be stopped when the response signal is not obtained. .
Further, the present invention is a wireless operation device (2, 2A) wirelessly connected to an information device, detects an operation of a user, generates an input information, and simulates the input information. The simulation information generation unit (21) that generates the simulated information and the transmission unit (25) that transmits the input information or the simulation information may be provided.
Preferably, the simulation information may be transmitted regardless of whether or not an operation is performed by the user (S2A-S2C).
Preferably, the key information holding device (2, 2A, 2B) may be an electronic key (2B) that unlocks a predetermined area.
Further, the present invention is a method for managing key information issued to a key information holding device, the step of authenticating the issuer of key information (S10-S11), the step of generating key information (S15), There may be included a step (S16) of outputting the key information to the key information holding device and a step (S1B) of recording the issued key information in association with the key information holding device.
Further, the present invention may be a program that causes a computer to realize any one of the functions described above. Further, the present invention may be a program in which such a program is recorded on a computer-readable recording medium.
<< First Embodiment >> A first embodiment of the present invention will be described below with reference to the drawings of FIGS. 1 is an overall view of the information system according to the first embodiment, FIG. 2 is a block diagram of the wireless remote controller 2 shown in FIG. 1, and FIG. 3 shows the main body 1 and the wireless remote controller 2 shown in FIG. 4 is a data structure diagram of packets exchanged between the main body unit 1 and FIG. 4 is a flowchart showing a procedure for distributing an encryption key from the main unit 1 to the wireless remote controller 2. FIG. To Figure 7 FIG. 8 is a flowchart showing processing during operation of the wireless remote controller 2, and FIG. 8 is a flowchart showing processing during reception operation of the main unit 1.
<Functional Overview> The information system of this embodiment is operated by a remote controller using wireless communication. This information system authenticates a user and issues an encryption key for each remote control used by the user. At this time, the information system records the encryption key issued for each remote controller.
When the user operates the information system with the remote controller, the input information is encrypted with the encryption key. Then, the remote controller transmits a communication start request to the information system, and transmits the encrypted input information.
The information system identifies the remote control by a communication start request transmitted from the remote control. Then, the information system refers to the recorded encryption key issued to the remote controller. Then, the input information is decrypted with the encryption key, and the user's operation is detected.
The procedure for distributing the encryption key is as follows.
(1) The main body side device of the information system performs authentication of the user. This process is a confirmation operation of whether or not the user has a key information distribution operation qualification.
(2) Next, the main body side apparatus confirms the proximity of the remote control to the main body side apparatus.
(3) Next, the main body side device generates an encryption key (for example, a random number).
(4) The device on the main body side transmits the encryption key to the remote controller through a secure communication path that prevents interception.
(5) The device on the main body side confirms that the remote control has safely received the encryption key.
<Overall Configuration> FIG. 1 shows an overall configuration diagram of the information system. As shown in FIG. 1, this information system includes a main body side device (hereinafter referred to as a main body portion 1) and a wireless remote controller 2.
The main body 1 is an information processing apparatus that can communicate with an external system through a network (not shown), and is, for example, a personal computer (hereinafter abbreviated as a personal computer), a digital television, a set top box, or the like.
The main body 1 includes a PC-equivalent function part 11, a remote control proximity confirmation part 12, a remote control communication part 13, and an authentication function part 14.
The personal computer equivalent function portion 11 includes a CPU that provides an information processing function, a memory that stores information, a communication interface that accesses a network, and the like. Such a configuration and an action are widely known at present, and the description thereof will be omitted. The personal computer equivalent function part 11 controls the main body 1 by such a configuration and provides various information processing functions.
For example, the personal computer equivalent function part 11 generates an encryption key to be transmitted to the wireless remote controller. In this encryption key generation, a random number (or prime number) is generated by a predetermined method. Since the generated encryption key is necessary for remote communication, it is recorded / saved in a memory (not shown) of the main unit 1.
The personal computer equivalent function part 11 includes an ID for identifying the wireless remote controller 2 in this key. The personal computer equivalent function part 11 records a correspondence table between the ID of the wireless remote controller 2 and the distributed encryption key.
The serial number of the wireless remote controller 2 may be used as this ID. Further, the ID of the wireless remote controller may be generated using a random number. Thereby, this information system can manage a plurality of remote controls. However, this ID is not required when multiple remote controllers are not used. Any other necessary information may be included as part of the encryption key.
Also, the personal computer equivalent function part 11 confirms whether or not the wireless remote controller 2 has received the encryption key. In this case, for example, the encryption key itself may simply be returned from the wireless remote controller 2 and the personal computer equivalent function part 11 may confirm it. Alternatively, only the checksum may be returned from the wireless remote controller 2. Even if the transmission of the encryption key has failed, the wireless remote controller 2 can no longer be used, and can be used by redoing the distribution procedure. Therefore, if the reliability of the encryption key transmission process is sufficiently high, confirmation of whether or not the wireless remote controller 2 has received the encryption key can be omitted.
The authentication function part 14 provides a function of authenticating the user himself / herself. As an authentication method, a method according to required confidentiality and realization cost, such as biometric authentication such as fingerprints / voiceprints, authentication using a personal identification number, and password authentication can be selected.
The authentication function part 14 confirms whether or not the user is qualified to instruct distribution of the encryption key to the wireless remote controller 2 by such an authentication method. If the user is not qualified to instruct the distribution of the encryption key, the main body unit 1 interrupts the process at the time when it is found.
The remote control proximity confirmation portion 12 is, for example, a push button. When the user brings the wireless remote controller 2 close to the main body 1, the user operates the remote controller proximity confirmation portion 12 (for example, presses a push button). Thereby, the main body 1 recognizes the proximity of the wireless remote controller 2.
In this state, the main body 1 communicates with the wireless remote controller 2 by wired communication or wireless communication using weak radio waves. The lower part of FIG. 1 illustrates the main body 1 and the wireless remote controller 2 in such a state.
The remote control communication portion 13 provides a function of transmitting an encryption key to the wireless remote controller 2. The remote control communication part 13 is composed of a communication interface and a communication program. As a communication interface, a serial system such as RS232C, a parallel system conforming to the Centronics standard, and other wired interfaces can be used.
As described above, in this information system, a wired system is used for encryption key transmission, separately from the wireless communication interface, so that it is difficult to intercept. The wireless communication interface is, for example, an infrared light receiving unit or a wireless LAN interface. However, wireless communication may be used for transmitting the encryption key by using an electromagnetic shield or the like together.
Further, a short-range wireless system that cannot communicate over a predetermined distance may be used. In that case, the remote control communication portion 13 may have both a function of transmitting an encryption key and a function of receiving an encrypted operation signal from the wireless remote controller 2.
In this case, in addition to the shield, an intercept measure such as narrowing the transmission output when approaching may be taken. There is no limitation on the data format in the key information distribution as described above.
FIG. 2 shows a block diagram of the wireless remote controller 2. As shown in FIG. 2, the wireless remote controller 2 includes a processing device 21 that controls each unit of the wireless remote controller 2, a keyboard 22 that detects an operation on the information system by the user and generates input information, and a main body 1 of the information system. An encryption key receiving unit 23 that receives an encryption key, a memory 24 in which information is written or read by the processing device 21, a transmission / reception device 25 that transmits / receives information by wireless communication according to instructions from the processing device 21, It has a display device 26 that displays various information according to instructions, an encryption on / off switch 27 that designates whether or not to execute encryption, and a power supply unit (battery) that supplies power to the wireless remote controller 2.
The processing device 21 is, for example, a microprocessor. The processing device 21 executes the control program loaded in the memory 24 and provides the function of the wireless remote controller 2. For example, the processing device 21 receives an encryption key from the main body unit 1 through the encryption key receiving unit 23. Further, the processing device 21 encrypts information to be transmitted to the main unit 1 using the received encryption key.
The keyboard 22 includes various buttons, an on / off switch and the like in addition to keys such as alphanumeric characters. The user operates these keys, buttons, and switches to input instructions for the information system.
The encryption key receiving unit 23 is a communication interface corresponding to the remote control communication part 13 of the main body unit 1 described above.
The memory 24 includes a random access memory (RAM) and a read only memory (ROM). The memory 24 stores a program executed by the processing measure 21, a table used by the processing device 21, and the like.
The transmission / reception device 25 is a communication interface that performs wireless communication with the main body 1. This is, for example, an infrared light emitting unit, an infrared light receiving unit, a wireless LAN interface, or the like.
The display device 26 displays the operating state of the wireless remote controller 26 and the like. For example, the display device 26 is a power lamp or the like.
An encryption on / off switch (described as an encryption On / Off switch in FIG. 2) 27 designates whether or not the processing apparatus 21 encrypts information. For example, in communication with a television receiver or the like, it is necessary to encrypt information, but it is not necessary to encrypt an operation signal of the air conditioner (the control unit of the air conditioner does not support encryption). In this case, the wireless remote controller 2 is provided for general use. The user sets encryption on / off using the encryption on / off switch 27 in accordance with an object to be operated by the wireless remote controller 2.
<Data Structure> FIG. 3 shows a data structure example of wireless communication data exchanged between the main unit 1 and the wireless remote controller 2 (hereinafter, such wireless communication data is referred to as a packet). Such a packet as shown in FIG. age In this information system, a communication start packet, a communication permission packet, a button information / dummy packet, and a reception confirmation packet are prepared.
The communication start packet is a packet for requesting the main body unit 1 to start communication from the wireless remote controller 2. As shown in FIG. 3, the communication start packet has storage units for a header, a packet ID, a remote control ID, dummy data, and a checksum.
The header is a bit string indicating a packet communicated between the main body 1 and the wireless remote controller 2 in the information system. In FIG. 3, a bit string (hexadecimal number) “55AA” is exemplified as the header.
The packet ID is a number indicating the type of packet. In FIG. 3, the communication start packet includes 000. 0 ID is specified.
The dummy data of the communication start packet is a bit string that fills an unused area of the communication start packet. The checksum is information for confirming the validity of data at the time of packet reception.
The communication permission packet is a packet that notifies the wireless remote controller 2 of communication permission in response to the communication start packet from the wireless remote controller 2. As shown in FIG. 3, the communication permission packet has storage units for a header, a packet ID, a remote control ID, a session ID, dummy data, and a checksum.
Among these, the header, packet ID, remote controller ID, dummy data, and checksum are the same as those in the communication permission packet. The session ID is Exchange In addition, the wireless remote controller 2 is notified from the main unit 1 every time reception is confirmed. The wireless remote controller 2 encrypts the input information based on the received key information and this session ID.
The button information / dummy data packet is classified into a button information packet and a dummy packet. The button information packet is a packet for transmitting button information (input information of a button operated by the user) from the wireless remote controller 2 to the main unit 1. The dummy packet is a packet for transmitting dummy data.
As shown in FIG. 3, the button information / dummy packet has a storage unit for a header, a packet ID, a remote control ID, encrypted button information or dummy data, and a checksum.
Among these, the encrypted button information is input information when the user operates the wireless remote controller 2. This button information is encrypted in advance using the encryption key transmitted from the main unit 1 to the wireless remote controller 2 and the session ID. The dummy packet is a packet for preventing a third party from intercepting the button information packet. The dummy packet has dummy data simulating button information. An unspecified number of dummy packets are transmitted before and after the button information packet.
The reception confirmation packet is a packet for notifying the wireless remote controller 2 of the reception confirmation in response to the button information / dummy packet from the wireless remote controller 2. As shown in FIG. 3, the reception confirmation packet includes a header, a packet ID, a remote control ID, a checksum of the received packet, a next session ID, and a checksum storage.
Among these, the checksum of the received packet is the checksum of the packet received in the previous session. The next session ID is used when the button information is encrypted next time.
<Operation> FIG. 4 is a flowchart showing an example of an encryption key distribution procedure. This process is a process of a program executed by the main body 1 (PC equivalent function portion 11) when an encryption key is transmitted from the main body 1 to the wireless remote controller 2.
In this process, the main body 1 first performs user authentication (S10). User authentication consists of reading the remote control ID, reading authentication information from the user, and confirming the authentication information. The authentication information from the user is a fingerprint, a voiceprint, a recitation number, or a password.
Next, based on the authentication result, the main body 1 determines whether or not the user is eligible to receive the encryption key (S11). This determination is a comparison between the input authentication information and the authentication information registered in the main body unit 1. If the main unit 1 determines that the user is not qualified, the main unit 1 determines that the user is an unauthorized user and ends the process.
On the other hand, if the user is qualified, the main body 1 waits for the wireless remote controller 2 to come close (S12). Then, the main body 1 determines whether or not the wireless remote controller 2 has been approached (S13).
If the wireless remote controller 2 is not in proximity, the main body 1 determines whether or not the time has expired (S14). If the time has not expired, the main body 1 returns the control to S12. On the other hand, when the time expires, the main body unit 1 ends the process.
If it is determined in S13 that the remote controller is close, the main body 1 generates an encryption key (S15). Next, the main unit 1 transmits the encryption key to the wireless remote controller 2 (S16).
Next, the main body 1 waits for a response from the remote controller (S17). When there is no response, the main body 1 determines whether or not the time has expired (S19). And when it is not time-out, the main-body part 1 returns control to S17. On the other hand, when the time expires, the main body unit 1 ends the process.
If there is a response in the determination in S18, the main body 1 determines whether or not it is a normal response (S1A). When the response is not normal, the main body 1 returns the control to S12 and repeats the same processing.
If it is determined in S1A that the response is normal, the main body 1 creates and updates a correspondence table between the remote control ID and the encryption key (S1B). Thereafter, the main body unit 1 ends the process.
FIG. 5 shows a flowchart of the remote control operation. This process is a program process executed by the processing device 21 of the wireless remote controller 2. This process is executed when the wireless remote controller 2 is turned on or when a reset button (not shown) is pressed.
In this process, first, the wireless remote controller 2 initializes itself and waits for reception of an encryption key (S20). Next, the wireless remote controller 2 determines whether or not reception of the encryption key is completed (S21).
When the reception of the encryption key is completed, the wireless remote controller 2 stores the received encryption key together with its own remote controller ID, and sends a reception completion response (S22). Thereafter, the wireless remote controller 2 enters a dormant state (S23). This dormant state continues until a new encryption key is next transmitted or a user button operation is detected.
That is, when reception of the encryption key is started, the wireless remote controller 2 returns control to S21 and confirms completion of reception. On the other hand, when the user's button operation is detected, the wireless remote controller 2 transmits a communication start packet (S24).
Then, the wireless remote controller 2 waits for a communication permission packet (S25). If the communication permission packet cannot be received from the main body 1 even after waiting for a predetermined time, the wireless remote controller 2 shifts to a dormant state (S23).
On the other hand, when the communication permission packet is received, the wireless remote controller 2 executes button information encryption (S27). That is, the wireless remote controller 2 encrypts input information by a user's button operation.
Next, the wireless remote controller 2 sends a dummy packet (S28). The number of dummy packet transmissions is indefinite (random).
Next, the wireless remote controller 2 sends out a button information packet (S29). Next, the wireless remote controller 2 sends a dummy packet (S2A). The number of dummy packet transmissions is also an indefinite number (random).
Next, the wireless remote controller 2 further determines whether or not a button operation has been performed (S2B). Furthermore, when there is a button operation, the wireless remote controller 2 returns control to S27.
On the other hand, when there is no next button operation, the wireless remote controller 2 determines whether or not the time has expired (S2C). If the time has not expired, the wireless remote controller 2 returns control to S2A. Thereby, even if the user does not operate the wireless remote controller 2, the dummy packet is transmitted an indefinite number of times until the time expires. On the other hand, when the time expires, the wireless remote controller 2 shifts to a dormant state (S23).
FIG. 6 shows details of the button information encryption process (S27 in FIG. 5). In this process, the wireless remote controller 2 first determines whether or not the encryption on / off switch 27 is on (S270).
When the encryption on / off switch 27 is off, the wireless remote controller 2 ends the button information encryption process. On the other hand, when the encryption on / off switch 27 is on, the wireless remote controller 2 reads the key information (S271).
Next, the wireless remote controller 2 reads the session ID (S272). This session ID is obtained from a communication permission packet or a reception confirmation packet (see FIG. 3).
Next, the wireless remote controller 2 encrypts the input information using the key information and the session ID. (S273) . Thereafter, the wireless remote controller 2 ends the button information encryption process.
FIG. 7 shows details of the button information packet and dummy packet transmission processing (S28, S29 or S2A in FIG. 5).
In this process, first, the wireless remote controller 2 transmits a packet (button information packet or dummy packet) (S41).
Next, the wireless remote controller 2 waits for a reception confirmation packet (S42). Then, the wireless remote controller 2 determines whether or not a reception confirmation packet has been received (S43). When the reception confirmation packet is received, the wireless remote controller 2 advances the control to the next process.
On the other hand, when it is determined in S43 that the reception confirmation packet has not been received, the wireless remote controller 2 determines whether or not the time has expired (S44). If the time has not expired, the wireless remote controller 2 returns control to S42. On the other hand, when it is determined in S44 that the time has expired, the wireless remote controller 2 shifts to a dormant state.
FIG. 8 shows a flowchart of the receiving operation of the main unit 1. When this process is started, the main unit 1 waits for reception of a communication start packet (S30). Then, the main body 1 determines whether or not reception of the communication start packet is completed (S31).
When the reception of the communication start packet is completed, the wireless remote controller 2 illuminates the received remote controller ID (simply described as “ID” in FIG. 6) and the correspondence table (created and communicated in 1B of FIG. 4). Match (S32).
Next, the main body 1 determines whether or not the received remote control ID is legitimate (S33). If the received remote control ID is not genuine, the main body unit 1 returns control to S30.
On the other hand, if the received remote control ID is authentic, the main body 1 sends a communication permission packet (S34). Next, the main unit 1 waits to receive button information / dummy packets. Then, the main body 1 determines whether or not the reception of the button information / dummy packet is completed (S36).
When the reception of the button information / dummy packet is completed, the main body 1 sends out a reception confirmation packet and further executes a decoding process (S37).
Next, the main body 1 determines whether or not the received packet is a dummy packet (S38). If the received packet is a dummy packet, the main unit 1 returns the control to S35.
If the received packet is not a dummy packet, the main body 1 captures button information (S39). Thereafter, the main body 1 returns the control to S35.
<Effects of the Embodiment> As described above, according to the information system of this embodiment, the button information of the wireless remote controller 2 is encrypted when the wireless remote controller 2 operates the main body 1 or the information system. It becomes. For this reason, in the operation of the information system via the wireless remote controller 2, the possibility that the operation signal is intercepted by a third party can be reduced.
At this time, according to this information system, the encryption key is distributed from the main body 1 to the wireless remote controller 2 by wired communication in which the wireless remote controller 2 contacts the main body 1 or communication by weak radio waves in the vicinity. For this reason, the risk that the encryption key itself is intercepted by a third party can be reduced.
Further, according to the information system of the present embodiment, information is exchanged by a predetermined shake hand procedure such as a communication start packet and a response packet to the packet. For this reason, in the operation of the information system by the wireless remote controller, it is possible to reduce the risk of intercepting the operation signal by a third party.
Further, according to the information system of this embodiment, for example, the dummy packet is transmitted before and after the transmission of the button information packet. For this reason, in the operation of the information system by the wireless remote controller 2, it is possible to reduce the risk of the operation signal being intercepted by a third party.
<Modification> In the above embodiment, the main unit 1 and the wireless remote controller 2 communicate with each other by a packet as shown in FIG. However, the implementation of the present invention is not limited to such a configuration or procedure. For example, in the communication start packet, it is basically sufficient that the remote controller ID can be transmitted, and a header, a packet ID, etc. may or may not be added as necessary.
The data size of the packet may be a fixed length or a variable length. In the case of a fixed length, the length may be adjusted with dummy data as shown in FIG.
In the above embodiment, the encryption key receiving unit of the wireless remote controller 2 from the remote control communication unit 13 of the main unit 1. 23 The key information is input to the wireless remote controller 2 by communication with the wireless remote controller 2. However, the implementation of the present invention is not limited to such a configuration. Key information may be input from the main unit 1 to the wireless remote controller 2 via a computer-readable recording medium such as a flash memory card.
In that case, the main body unit 1 may be provided with a unit for writing to a recording medium (for example, a card slot). The wireless remote controller 2 may be provided with a reading unit (for example, a card slot) from the recording medium. Since the configuration of the access device to such a recording medium is widened, the description thereof is omitted.
In the above embodiment, the input information is encrypted using the encryption key and the session ID. However, the implementation of the present invention is not limited to such a procedure. For example, the input information may be encrypted using only the encryption key without using the session ID.
Also, for example, consider a case where all devices in the home are controlled by a single remote controller. When such a remote controller with an encryption function as described above is used, the air conditioner on / off, the TV channel, and the operation of the personal computer are all encrypted.
Of these, signals such as on / off of the air conditioner need not be encrypted, and it may be difficult to provide an encryption / decryption function on the air conditioner side. In such a case, the remote controller may select whether or not to encrypt as necessary and perform communication. In that case, the encryption on / off switch 27 shown in FIG. 2 may be set to off.
Or leave all remote control communication to the computer, use all encrypted communication, let the computer decrypt Moyo Yes. In that case, the personal computer controls devices such as an air conditioner. In this case, without a personal computer, the device cannot be controlled and the remote control cannot be used. Therefore, the range of use of such a system is limited.
Second Embodiment Hereinafter, a second embodiment of the present invention will be described with reference to FIG. FIG. 9 is a system configuration diagram of an information system that performs home banking in the second embodiment.
In the first embodiment, the configuration and operation of the information system including the wireless remote controller 2 with an encryption function and the main body 1 operated by the wireless remote controller 2 have been described. In this embodiment, an example in which such an information system is applied to home banking will be described. Other configurations and operations of the present embodiment are the same as those of the first embodiment. Therefore, the same components are denoted by the same reference numerals and the description thereof is omitted. Further, the drawings in FIGS. 1 to 8 are referred to as necessary.
This information system includes a personal computer 1A with a remote control function, a remote control 2A with a keyboard for operating the personal computer, and a bank host computer connected via a LAN (Local Area Network) / WAN (Wide Area Network).
The configuration and operation of the personal computer 1A with a remote control function are the same as those of the main body 1 in the first embodiment. The configuration and operation of the keyboard-equipped remote controller 2A are the same as those of the wireless remote controller 2 in the first embodiment.
In home banking, a user inputs a recitation number or the like to the personal computer 1A with a remote control function via the remote control 2A with a keyboard. Communication from the keyboard-equipped remote control 2A to the personal computer 1A with the remote control function is encrypted as in the information system of the first embodiment. With such a configuration, it is possible to reduce the possibility that a recitation number or the like when using home banking is intercepted by a third party.
In the LAN / WAN communication from the personal computer 1A with a remote control function to the host computer of the bank, security is conventionally secured by various methods.
Therefore, the personal computer 1A with a remote control function and the remote control 2A with a keyboard according to the present embodiment cover a portion with the lowest security in home banking.
<Modification> In the second embodiment, an example in which the remote controller 2A with a keyboard having an encryption function is applied to home banking has been described. However, the implementation of the present invention is not limited to such application examples. That is, the remote controller 2A with keyboard and the wireless remote controller 2 with encryption function shown in the first embodiment can be applied to various information systems.
For example, the system can be applied when connecting to an Internet provider. This is because the password for connecting to an Internet provider can be used in the same way as a credit card. As the encryption on the network and on the telephone line is progressing, the remote control portion is the weakest part of the entire system, and the wireless remote control 2 has the security of such a portion, that is, the system Improve overall security.
<< Third Embodiment >> Hereinafter, an embodiment of the present invention will be described with reference to FIG. FIG. 10 is a system configuration diagram of an information system for executing office security management in the third embodiment.
This system includes a key information management personal computer 1B that issues an electronic key 2B for entry used by office employees, an authentication information input device 3 that authenticates the issuer of key information, a lock management device for a building entrance, It is composed of a lock management device at the entrance of the office, and a key information communication path for connecting these lock management devices and the key information management personal computer 1B.
The configuration of the key information management personal computer 1B is the same as that of the main body 1 in the first embodiment. In the present embodiment, the key information management personal computer 1B has a key information management table for managing issued key information for each electronic key 2B that is issued. This key information management table records the ID of the electronic key 2B that issued the key information and the issued key information as a pair.
The authentication information input device 3 is an input device for authenticating whether or not an issuer that issues key information is a valid issuer. The authentication information input device 3 is, for example, a fingerprint reading device, a voiceprint analysis device, a keyboard for inputting a password or a password.
The electronic key 2B has a memory for recording key information. The electronic key 2B is, for example, a card having a magnetic stripe, an IC card, or a stick on which information is recorded by magnetism or IC. The key information of the electronic key 2B is transferred to the locking device at the entrance of the building or the locking device at the entrance of the office. input Then, the key ID of the electronic key 2B and the key information thereof are transmitted to the key information management personal computer 1B through the key information communication path. When the combination of the key ID and the key information has already been stored in the key information management table, a lock release command is transmitted from the key information management personal computer 1B to the locking device, and the locking is released.
This electronic key 2B is distributed to employees who unlock the entrance of the building or the entrance of the office. When such employees are newly increased, key information is issued by an issuer in which authentication information is registered.
That is, the issuer first authenticates itself by the authentication information input device 3, and then instructs the key information management personal computer 1B to issue the key information. Thereby, the key information is written in the new electronic key 2B. At this time, the ID of the electronic key 2B and the issued key information are written in the key information management table.
If the electronic key 2B is lost, the employee notifies the issuer that the electronic key 2B has been lost. The issuer deletes the key information of the electronic key 2B distributed to the employee from the key information management table. Further, the issuer inputs key information to the new electronic key 2B in the same procedure as described above, and delivers it to the employee.
Thus, according to the system of the present embodiment, the electronic key 2B can be easily issued by an authenticated issuer. Further, even when the electronic key 2B is lost, the lost electronic key 2B can be invalidated without affecting other employees.
<< Computer-readable recording medium >> A program for causing a computer to execute any of the processes in the above embodiments can be recorded on a computer-readable recording medium. Then, by causing the computer to read and execute the program of the recording medium, the main body unit 1, the personal computer 1A with the remote control function, the encryption key issuing device 1B, the wireless remote control 2, or the keyboard shown in the above embodiment is provided. The function of the remote controller 2A can be provided.
Here, the computer-readable recording medium refers to a recording medium in which information such as data and programs is accumulated by electrical, magnetic, optical, mechanical, or chemical action and can be read from a computer. Examples of such recording media that can be removed from the computer include a floppy (registered trademark) disk, a magneto-optical disk, a CD-ROM, a CD-R / W, a DVD, a DAT, an 8 mm tape, and a memory card. .
<< Data communication signal embodied in carrier wave >> The program can be stored in a hard disk or memory of a computer and distributed to other computers through a communication medium. In this case, the program is transmitted through a communication medium as a data communication signal embodied by a carrier wave. The distributed computer can be provided with the functions of the main body 1, the personal computer 1A with remote control function, the encryption key issuing device 1B, the wireless remote control 2, or the remote control 2A with keyboard.
Here, the communication medium may be a wired communication medium, for example, metal cables including a coaxial cable and a twisted pair cable, an optical communication cable, or the like, or a wireless communication medium, for example, satellite communication or terrestrial radio communication.
<< Others >> Furthermore, the present embodiment discloses the following invention.
(Supplementary Note 1) A key information issuing device that issues key information to a key information holding device, an authentication unit that authenticates an issuer of the key information, an output unit that outputs key information to the key information holding device, and an issuance And a recording unit that records the key information associated with the key information holding device, and issues key information according to an instruction from an authorized issuer. (1)
(Supplementary Note 2) The key information holding device is a wireless operation device that is wirelessly connected to an information device, and has a key information input unit that inputs key information in contact with a previous key information issuing device, The key information issuing device according to supplementary note 1, wherein the output unit includes a contact unit that contacts the key information input unit and outputs the key information, and issues the key information through the contact unit. (2)
(Additional remark 3) The said key information holding | maintenance apparatus is a radio | wireless operation apparatus connected to information apparatus by radio | wireless, It has a medium input part which inputs information from a recording medium, The said output part is on the said recording medium. information The The key information issuing device according to appendix 1, which has a recording medium writing unit for writing and issues key information through the recording medium.
(Supplementary Note 4) The key information holding device is a wireless operation device that is wirelessly connected to an information device, includes a proximity communication unit that cannot communicate outside a predetermined distance, and the output unit includes the key information holding device. And a key information issuing device according to appendix 1, which issues key information via the proximity communication unit.
(Supplementary note 5) The supplementary note 1, further comprising: a reception unit that receives a radio signal from the key information holding device; and a decryption unit that decrypts the information encrypted by the encryption key information included in the radio signal. Key information issuing device.
(Additional remark 6) It is a radio | wireless operation apparatus connected to information equipment by radio | wireless, The key information input part which inputs the key information for encrypting information, The recording part which records the said key information, User's operation A wireless operation device comprising: an operation unit that detects input information; an encryption unit that encrypts input information obtained by the operation using the key information; and a transmission unit that transmits the encrypted input information to an information device. (3)
(Additional remark 7) The said key information input part is a radio | wireless operation apparatus of Additional remark 6 which has a contact part which contacts and inputs the said key information.
(Supplementary note 8) The wireless operation device according to supplementary note 6, wherein the key information input unit includes a medium input unit for inputting information from a recording medium.
(Supplementary note 9) The wireless operation device according to supplementary note 6, wherein the key information input unit includes a proximity communication unit that cannot communicate outside a predetermined distance.
(Supplementary note 10) The wireless operation device according to supplementary note 6, further comprising a setting unit configured to set the presence / absence of encryption, wherein the encryption unit encrypts input information when encryption is instructed.
(Additional remark 11) It is a radio | wireless operation apparatus connected to information equipment by radio | wireless, The operation part which detects a user's operation, The transmission part which transmits the input information by the said operation, From the said information apparatus with respect to the transmitted input information And a confirmation unit that confirms the presence / absence of the response signal, and when the response signal cannot be obtained, the wireless operation device stops transmission of the input information.
(Additional remark 12) It is a radio | wireless operating device connected to an information apparatus by radio | wireless, The operation part which detects operation of a user and produces | generates input information, The simulation information generation part which generate | occur | produces the simulation information which simulated the said input information And a wireless operation device comprising: a transmission unit that transmits the input information or the simulated information.
(Supplementary note 13) The wireless operation device according to supplementary note 12, wherein the simulation information is transmitted regardless of whether or not an operation is performed by a user.
(Supplementary note 14) The key information issuing device according to supplementary note 1, wherein the key information holding device is an electronic key that unlocks a predetermined area. (4)
(Supplementary Note 15) A method for managing key information issued to a key information holding device,
A step of authenticating an issuer of the key information; a step of generating key information; a step of outputting key information to the key information holding device; and recording the issued key information in association with the key information holding device. And managing the key information.
(Supplementary Note 16) The key information holding device is a wireless input device that is wirelessly connected to an information device, and has an input unit that inputs information by contact, and the outputting step includes the input unit. A method for managing key information according to appendix 15, wherein the key information is issued via the key.
(Supplementary Note 17) The key information holding device is a wireless input device that is wirelessly connected to an information device, includes a medium input unit that inputs information from a recording medium, and the outputting step includes the recording medium A method for managing key information according to appendix 15, wherein the key information is issued via the recording medium.
(Supplementary Note 18) The key information holding device is a wireless input device that is wirelessly connected to an information device, and includes a proximity communication unit that cannot communicate outside a predetermined distance, and the outputting step includes the proximity communication unit. A method for managing key information according to appendix 15, wherein the key information is issued via the key.
(Supplementary note 19) receiving a wireless signal from the key information holding device;
16. The method for managing key information according to appendix 15, further comprising: decrypting information encrypted with the encryption key information included in the wireless signal.
(Additional remark 20) It is the apparatus control method by a radio signal, The step which inputs the key information for encrypting information, The step which records the key information for said encryption, The step which detects a user's operation A device control method comprising: encrypting input information by the operation with the key information; and transmitting the encrypted input information by a radio signal.
(Supplementary note 21) The device control method according to supplementary note 20, wherein in the step of inputting the key information, the key information is input by a contact signal different from the wireless signal.
(Supplementary note 22) The device control method according to supplementary note 20, wherein the step of inputting the key information includes inputting the key information from a recording medium.
(Supplementary note 23) The device control method according to supplementary note 20, wherein the step of inputting the key information includes inputting the key information by proximity communication that cannot be performed outside a predetermined distance.
(Supplementary note 24) The device control method according to supplementary note 20, further comprising the step of setting the presence or absence of encryption, wherein the step of encrypting encrypts the input information when encryption is instructed.
(Supplementary Note 25) A device control method using a radio signal, the step of detecting a user operation, the step of transmitting input information by the operation, the step of confirming the presence or absence of a response signal to the transmitted input information, And a step of stopping transmission of input information when a response signal cannot be obtained.
(Supplementary Note 26) A device control method using a radio signal, detecting a user operation, generating input information, generating simulated information simulating the input information, and transmitting the input information And a device control method comprising: transmitting the simulation information.
(Supplementary note 27) The device control method according to supplementary note 26, wherein the simulation information is transmitted regardless of whether there is an operation by a user.
(Additional remark 28) The said key information holding | maintenance apparatus is a method of managing the key information of Additional remark 15 which is an electronic key which cancels | releases locking of a predetermined area | region.
(Supplementary note 29) A program for causing a computer to manage key information issued to a key information holding device, authenticating an issuer of the key information, generating key information, and A program comprising: outputting key information; and recording the issued key information in association with the key information holding device. (5)
(Supplementary Note 30) The key information holding device is a wireless input device that is wirelessly connected to an information device, and has an input unit that inputs information by contact, and the output step includes the input unit. Item 29. The program according to appendix 29, which causes key information to be issued.
(Supplementary Note 31) The key information holding device is a wireless input device that is wirelessly connected to an information device, includes a medium input unit that inputs information from a recording medium, and the outputting step includes the recording medium 32. The program according to appendix 29, wherein the program has a step of writing information to the key and issues key information through the recording medium.
(Supplementary Note 32) The key information holding device is a wireless input device that is wirelessly connected to an information device, and includes a proximity communication unit that cannot communicate outside a predetermined distance, and the outputting step includes the proximity communication unit. Item 29. The program according to appendix 29, wherein key information is issued via
(Supplementary Note 33) Receiving a radio signal from the key information holding device;
30. The program according to appendix 29, further comprising: decrypting information encrypted with the encryption key information included in the wireless signal.
(Supplementary Note 34) A program for causing a computer to execute device control using a radio signal, the step of inputting key information for encrypting information, the step of recording the key information for encryption, and a user And a step of encrypting input information by the operation with the key information, and transmitting the encrypted input information by a radio signal.
(Supplementary note 35) The program according to supplementary note 34, wherein the step of inputting the key information causes the key information to be input by a contact signal different from the wireless signal.
(Supplementary note 36) The program according to supplementary note 34, wherein the step of inputting the key information causes the key information to be input from a recording medium.
(Supplementary note 37) The program according to supplementary note 34, wherein the step of inputting the key information causes the key information to be input by proximity communication that cannot communicate outside a predetermined distance.
(Supplementary note 38) The program according to supplementary note 34, further comprising a step of setting presence / absence of encryption, wherein the encryption step encrypts the input information when encryption is instructed.
(Supplementary Note 39) A program for causing a computer to perform device control using a radio signal. The step of detecting a user operation, the step of transmitting input information by the operation, and the presence or absence of a response signal to the transmitted input information. A program comprising: a step of confirming; and a step of stopping transmission of input information when the response signal is not obtained.
(Supplementary Note 40) A program for causing a computer to perform device control using a radio signal, detecting a user operation, generating input information, generating simulated information simulating the input information, A program comprising a step of transmitting input information and a step of transmitting the simulation information.
(Additional remark 41) The said simulated information is a program of Additional remark 40 transmitted regardless of the presence or absence of operation by a user.
(Additional remark 42) The said key information holding | maintenance apparatus is a program which manages the key information of Additional remark 29 which is an electronic key which cancels | releases locking of a predetermined area | region.
(Supplementary Note 43) A program that causes a computer to manage key information issued to a key information holding device, authenticating an issuer of the key information, generating key information, and A computer-readable recording medium on which a program having a step of outputting key information and a step of recording the issued key information in association with the key information holding device is recorded.
As described above, according to the present invention, sufficient safety from interception can be ensured by communication between the information device and the wireless remote controller. According to the present invention, key information can be easily issued to a key information holding device that holds key information. Further, according to the present invention, sufficient safety from interception can be ensured in issuing such key information.
FIG. 1 is an overall view of an information system according to a first embodiment of the present invention.
FIG. 2 is a block diagram of the remote control 2
Fig. 3 Data structure of packet
FIG. 4 is a flowchart showing a procedure for distributing an encryption key from the main unit 1 to the remote controller 2;
FIG. 5 is a flowchart showing processing during remote control operation.
FIG. 6 is a flowchart showing details of button information encryption processing;
FIG. 7 is a flowchart showing details of button information packet and dummy packet transmission processing;
FIG. 8 is a flowchart showing processing during reception operation of the main unit 1
FIG. 9 is a system configuration diagram of an information system for performing home banking in the second embodiment of the present invention.
FIG. 10 is a system configuration diagram of an information system that executes office security management in the third embodiment of the present invention;
1A PC with remote control function
1B Key information management personal computer
Remote control with 2A keyboard
2B electronic key
3 Authentication information input device
11 PC equivalent functions
12 Remote control proximity confirmation part
13 Remote control communication part
14 Authentication function part
23 Encryption key receiver
25 Transceiver
27 Encryption on / off switch
A wireless operation device connected wirelessly to another wirelessly communicable device,
A key information input unit for inputting key information for encrypting the information;
A recording unit for recording the key information;
An operation unit for detecting a user operation;
An encryption unit for encrypting input information by the operation with the key information;
A transmission unit for transmitting the encrypted input information to the other device capable of wireless communication,
The key information is generated by operating an operation unit of the other device capable of wireless communication,
An initial setting required for encryption using the key information is performed.
The wireless operation device according to claim 1, wherein the key information input unit includes a proximity communication unit that cannot communicate outside a predetermined distance, and the key information is input via the proximity communication unit.
It further comprises a setting unit for setting the presence or absence of encryption,
The wireless operation device according to claim 1, wherein the encryption unit encrypts input information when encryption is instructed.
A confirmation unit for confirming the presence / absence of a response signal from the other device capable of wireless communication with respect to the transmitted input information;
The wireless operation device according to claim 1, wherein transmission of input information is stopped when the response signal is not obtained.
A simulation information generating unit that generates simulation information simulating input information;
The wireless operation device according to claim 1, wherein the transmission unit transmits input information or the simulated information.
The wireless operation device according to claim 5, wherein the simulated information is transmitted regardless of whether or not an operation is performed by a user.
The wireless operation device according to claim 1, wherein an operation unit of the other device capable of wireless communication is a push button.
JP2001236869A 2001-08-03 2001-08-03 Wireless operation device and program Active JP4727860B2 (en)
JP2001236869A JP4727860B2 (en) 2001-08-03 2001-08-03 Wireless operation device and program
US10/047,564 US7081806B2 (en) 2001-08-03 2002-01-14 Key information issuing device, wireless operation device, and program
EP07114568A EP1860618A3 (en) 2001-08-03 2002-01-23 Key information issuing device, wireless operation device and program
EP20020250448 EP1282083A3 (en) 2001-08-03 2002-01-23 Key information issuing device, wireless operation device and program
US10/850,061 US7561695B2 (en) 2001-08-03 2004-05-20 Key information issuing device, wireless device, and medium
US12/418,256 US8437477B2 (en) 2001-08-03 2009-04-03 Key information issuing device, wireless operation device, and program
JP2003051815A JP2003051815A (en) 2003-02-21
JP2003051815A5 JP2003051815A5 (en) 2006-10-05
JP4727860B2 true JP4727860B2 (en) 2011-07-20
JP2001236869A Active JP4727860B2 (en) 2001-08-03 2001-08-03 Wireless operation device and program
JP3527499B2 (en) * 2002-03-27 2004-05-17 コナミスポーツライフ株式会社 Electronic locking system, locking management device, locking device management method, and program
EP2250491A4 (en) 2008-03-07 2013-06-26 California Inst Of Techn Effective-inductance-change based magnetic particle sensing
MX2013003253A (en) * 2010-09-24 2013-12-16 Xped Holdings Pty Ltd Remote control and remote control systems.
ES2453077T3 (en) * 2010-11-01 2014-04-03 Nagravision S.A. Method to create an improved data flow
US10437745B2 (en) * 2018-01-05 2019-10-08 Denso International America, Inc. Mobile de-whitening
FR1291750A (en) * 1961-03-17 1962-04-27 Csf Flat antenna for radar single pulse
2001-08-03 JP JP2001236869A patent/JP4727860B2/en active Active
2002-01-14 US US10/047,564 patent/US7081806B2/en active Active
2002-01-23 EP EP07114568A patent/EP1860618A3/en not_active Withdrawn
2002-01-23 EP EP20020250448 patent/EP1282083A3/en not_active Withdrawn
2004-05-20 US US10/850,061 patent/US7561695B2/en active Active
2009-04-03 US US12/418,256 patent/US8437477B2/en active Active
EP1282083A2 (en) 2003-02-05
US7081806B2 (en) 2006-07-25
US20040247130A1 (en) 2004-12-09
US20090225989A1 (en) 2009-09-10
JP2003051815A (en) 2003-02-21
EP1860618A2 (en) 2007-11-28
US20030025589A1 (en) 2003-02-06
EP1282083A3 (en) 2005-09-07
US7561695B2 (en) 2009-07-14
US8437477B2 (en) 2013-05-07
EP1860618A3 (en) 2011-07-06
US9319405B2 (en) 2016-04-19 System and methods for assignation and use of media content subscription service privileges