JP4227358B2 - Encryption key distribution system for wireless communication, encryption key distribution method for wireless communication, and user terminal program for encryption key distribution system for wireless communication - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention dynamically delivers a communication encryption key used for encrypted communication in a wireless LAN (Local Area Network) to a user's wireless terminal using the wireless LAN while keeping personal authentication information secret. Regarding the method.
[0002]
[Prior art]
Wireless LAN is attracting attention as a convenient Internet connection method. In particular, in a hot spot that provides data communication services such as Internet connection to unspecified users in public spaces such as airport waiting rooms and station premises, wireless LAN provides a highly convenient network connection environment for users. .
[0003]
However, communication by wireless LAN has high convenience, but there is a serious problem that communication contents can be easily wiretapped due to communication interception.
[0004]
Such a problem of communication content leakage can be made equivalent to a wired LAN by encrypting communication contents and limiting communication partners. Here, a group of communication terminals that perform secret communication using a common encryption key is referred to as a “community”.
[0005]
[Problems to be solved by the invention]
Communication content leakage in wireless LAN communication can be solved by encrypted communication as described above. The solution by encrypted communication is effective because it can be easily implemented when members of the community of the wireless terminal are fixed in advance.
[0006]
However, since a wireless LAN installed as a hot spot in an airport waiting room is assumed to be used by an unspecified user, a terminal device (hereinafter referred to as a user terminal) carried by the user in advance is assumed. On the other hand, it is impossible to set an encryption key to be used in wireless LAN encryption communication in advance.
[0007]
As an existing method for solving this problem, there is a method in which a key distribution server is installed in a hot spot, user authentication of a user terminal is performed, and then an encryption key is distributed to the user terminal in a secure manner.
[0008]
When using this existing key distribution method, all the key distribution servers in the hotspots installed in public spaces around the world must register in advance the authentication information of all users who can visit there. It is necessary to go. However, pre-registration of such user authentication information is practically extremely difficult and not scalable.
[0009]
In addition, in order for the key distribution server to distribute the encryption key only to an appropriate user, the user's personal information is requested to confirm the user's authority. However, such personal information can be used to track personal behavior such as “who, when, where, what attribute, what” and so on. It is not appropriate.
[0010]
In addition, since the key distribution server manages the encryption key, it is impossible to create a new community temporarily because only the encryption key targeted for the community pre-registered in the key distribution server can be distributed. Yes, poor flexibility.
[0011]
An object of the present invention is to provide an unspecified user terminal that participates in a community without registering user authentication information in a server installed in a hot spot when providing a wireless LAN communication service using, for example, a hot spot. On the other hand, it is to provide a system capable of delivering an encryption key for encrypted communication.
[0012]
It is another object of the present invention to provide a system capable of delivering an encryption key used in a community that can dynamically and flexibly generate a community that uses a hot spot.
[0013]
[Means for Solving the Problems]
In order to solve the above problems, the present invention forms a community composed of user terminals that use the same communication encryption key in a wireless LAN, and transmits the communication encryption key to a user terminal having authority belonging to the community. A communication key distribution system for wireless communication, wherein the server stores community information including a community attribute and an encrypted communication encryption key for the community, and the community information Community information management means for managing the access of the user, and the user terminal stores the community attribute storage means for storing the attribute of the community to which the user terminal belongs and the attribute authentication encryption key associated with the community; Upload information or community information from the server A server communication means for downloading, and a communication encryption key generation means for generating a communication encryption key for the community if the community information downloaded from the server does not include an attribute of the community to which the server belongs. Encryption processing means for encrypting the generated communication encryption key with the attribute authentication encryption key, and when the community information downloaded from the server includes an attribute of its own community Decryption processing means for decrypting an encrypted communication encryption key corresponding to the attribute with the encryption key, and wireless communication processing means for performing encrypted communication processing in the community by incorporating the decrypted communication encryption key With.
[0014]
The user terminal includes the community attribute storage unit, the communication encryption key generation unit, the encryption processing unit, and the decryption processing unit in a tamper resistant device that can be incorporated in the user terminal.
[0015]
The community information management means sets a valid period for retaining community information and performs a process of deleting the community information after the valid period has elapsed.
[0016]
Further, the present invention forms a community composed of user terminals that use the same communication encryption key in a wireless LAN, and delivers the communication encryption key to user terminals having authority belonging to the community. A user terminal, which is a component of a wireless communication encryption key distribution system, includes community attribute storage means, server communication means, communication encryption key generation means, encryption processing means, decryption processing means, and wireless communication processing means. Encryption key distribution method for wireless communication to be executed Because
The server communication means comprises a community information storage means for storing community information including a community attribute and an encrypted communication encryption key for the community provided in the server of the wireless communication encryption key distribution system, Download community information Processing process to , The communication encryption key generating means When accessing the community attribute storage means that stores the attribute of the community to which the user belongs and the attribute authentication encryption key associated with the community, and the downloaded community information does not include the attribute of the community to which the user belongs , Generate communication encryption key for the community Processing process to , The encryption processing means is Encrypt the generated communication encryption key with the attribute authentication encryption key. Processing process to , The server communication means is Upload community information including encrypted communication encryption key to the server Processing process to , The decryption processing means comprises: If the downloaded community information contains the attribute of your community, the encrypted communication encryption key corresponding to the attribute is decrypted with the attribute authentication encryption key. Processing process to , The wireless communication processing means is Incorporate the decrypted communication encryption key to perform encrypted communication within the community With process Is.
[0017]
The present invention also provides a computer. ,in front It is a program for user terminals for functioning as a user terminal which comprises the above-mentioned encryption key distribution system for wireless communications.
[0018]
In the present invention, not the authentication server but a server that only stores and manages information related to the community formed by the hot spot is installed in the hot spot. The server stores community information including a community attribute (such as an identifier) and an encrypted communication encryption key Kt for the community uploaded from a user terminal that is the first member in the community. The server only downloads the stored community information in response to a request from another user terminal.
[0019]
The user terminal stores the attribute of the community to which the user terminal belongs and the attribute authentication encryption key Ka associated with the attribute in the community attribute storage means, and the community information downloaded from the server includes the attribute of its own community. If not, the communication encryption key Kt is generated, the communication encryption key Kt is encrypted with the attribute authentication encryption key Ka, and the community information including the community attribute and the encrypted communication encryption key Kt Is uploaded to the server.
[0020]
After that, when the community information downloaded from the server includes the attribute of its own community, the other user terminal uses the attribute authentication encryption key Ka to encrypt the communication encryption key Kt for communication corresponding to the attribute. And the encrypted communication encryption key Kt is incorporated to perform encrypted communication within the community.
[0021]
In this way, user terminals in the same community can perform wireless LAN encrypted communication with each other using the communication encryption key Kt that is downloaded, decrypted, and incorporated into the wireless communication processing means.
[0022]
Since the server only transmits community information to the user terminal in response to the request, the server can be provided with scalability.
[0023]
Moreover, the process which authenticates the attribute of a community from the community information which the user terminal downloaded is performed in the user terminal side, and also is performed in the tamper resistant device in the user terminal. That is, since there is no need to send personal information for authentication from the user terminal to the server, the user's privacy can be strongly protected.
[0024]
A process, element, or configuration that implements the present invention can be realized by a program that can be executed by a computer. Such a program can be stored in an appropriate recording medium such as a portable medium memory, a semiconductor memory, or a hard disk, which can be read by a computer, provided by being recorded on these recording media, or via a communication interface. It is provided by transmission and reception using various communication networks.
[0025]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, an embodiment of the present invention will be described by taking as an example a case where the system according to the present invention is implemented in a hot spot using a wireless LAN installed in a public space.
[0026]
FIG. 1 is a diagram for explaining an outline of processing in one embodiment of the present invention.
[0027]
The system according to the present invention includes a community directory server 1 and a user terminal 2 of a user who has visited a hot spot.
[0028]
The community directory server 1 has a wireless LAN communication function, stores and manages community information generated and uploaded by the user terminal 2 based on its own community attribute, and responds to a request from the user terminal 2 A device that downloads information.
[0029]
The community attribute is information indicating an attribute of a community to which the user has authority, and a pair of a community identifier ID and an attribute authentication encryption key Ka is used as basic information. The attribute authentication encryption key Ka is used to authenticate the community attribute given to the user, and is different from the communication encryption key Kt used for encrypted communication in the wireless LAN.
[0030]
The community information is data registered in the community directory server 1, and is an identifier of the community (community identifier) to which the user terminal 2 who is the first registrant of the unformed community belongs, and the registered user terminal 2 includes a pair with a communication encryption key Kt generated in the tamper resistant device 2 and encrypted with the attribute authentication encryption key Ka. The community information is stored in a list format by the community directory server 1, but is dynamically registered by the user terminal 2 using the hot spot, and is not registered in advance.
[0031]
The user terminal 2 stores the attributes of the community to which the user terminal belongs, generates a communication encryption key Kt as necessary, and encrypts the communication with the attribute authentication encryption key Ka corresponding to the community attribute. The encryption key Kt is uploaded to the community directory server 1 or the community attribute is authenticated from the community information downloaded from the community directory server 1, and the corresponding communication encryption key Kt is decrypted. A terminal that is incorporated in a wireless communication means and performs wireless encrypted communication within a community.
[0032]
In the user terminal 2, means for storing community attributes, means for generating the communication encryption key Kt, and means for encrypting / decrypting the communication encryption key Kt are configured in the tamper resistant device.
[0033]
The tamper-resistant device is a device having a physical or logical protection function that prevents data from being tampered with or intercepted from the outside, and is realized by an IC card or an IC chip embedded device.
[0034]
(A) In FIG. 1, the user terminal 2 which is the first member _a1 Generates the communication encryption key K1, encrypts the generated communication encryption key K1 with the attribute authentication encryption key Ka in the tamper resistant device, and sets the community A identifier aaa and the encrypted communication encryption key K1. The included community information “aaa (K1)” is generated. Then, the community information is registered in the “aaa (K1)” community directory server 1 by wireless communication without encryption. The community directory server 1 stores the community information “aaa (K1)” as the attribute a in the community information list.
[0035]
(B) Next, the user terminal 2 which becomes the first member of another community B _b1 Similarly, the communication encryption key K2 is generated, the generated communication encryption key K2 is encrypted with the attribute authentication encryption key Kb, and the community B includes the identifier bbb and the encrypted communication encryption key K2. Information “bbb (K2)” is generated and registered in the community directory server 1 by wireless communication without encryption. The community directory server 1 adds community information “bbb (K2)” as the attribute b to the community information list.
[0036]
At this time, community information (attribute a, attribute b) of a plurality of communities is registered in the community information list stored in the community directory server 1.
[0037]
Here, the community information is registered in the community directory server 1 by wireless communication without encryption. The encrypted communication encryption keys K1 and K2 in the community information are stored in the user terminal 2 having the community attribute. Since decryption is possible only within the tamper resistant device, it is possible to register safely.
[0038]
(C) Thereafter, the user terminal 2 belonging to the community A _a2 Accesses the community directory server 1 and downloads the community information list. Then, the community information “attribute a” corresponding to the community identifier aaa set as the community attribute is extracted from the community information list, the encrypted communication encryption key K1 is decrypted, and the wireless communication mechanism The communication encryption key K1 is incorporated into the encryption processing mechanism included therein.
[0039]
Similarly, user terminal 2 _a3 And user terminal 2 _a4 Also, the community directory server 1 is accessed, the community information list is downloaded, the community information “attribute a” is acquired, the encrypted communication encryption key K1 is decrypted, and the communication encryption key K1 is wirelessly communicated. It is incorporated in the encryption processing means in the means.
[0040]
Thereafter, the user terminal 2 in the community A _a1 ~ 2 _a4 The mutual data communication is performed by wireless encrypted communication using the communication encryption key K1.
[0041]
(D) On the other hand, user terminals 2 belonging to community B _b2 And user terminal 2 _b3 Is the user terminal 2 _a2 The communication encryption key K2 for community B is acquired by the same process as that described above and incorporated into the encryption processing means of the wireless communication means.
[0042]
Thereby, the user terminal 2 in the community B after that _b1 ~ 2 _b3 The mutual data communication is performed by wireless encrypted communication using the communication encryption key K2.
[0043]
In the present invention, in the process of acquiring the encrypted communication encryption key Kt registered in the community directory server 1 by the user terminal 2 as the first member, the authentication process of the community attribute to which the user belongs, the encryption The decryption process of the communication encryption key is performed in the tamper resistant device (IC card) of the user terminal 2. Thereby, since the attribute information of the user is never sent to the community directory server 1, the strong privacy protection is realized.
[0044]
Further, since the community directory server 1 does not need to store authentication information in advance, it can be operated flexibly corresponding to a community that is dynamically formed by a hot spot.
[0045]
FIG. 2 shows a configuration example of the community directory server and a configuration example of the user terminal 2.
[0046]
The community directory server 1 includes a wireless communication unit 11, a community information management unit 12, and a community information storage unit 13.
[0047]
The wireless communication unit 11 is means for performing wireless communication with the user terminal 2.
[0048]
The community information management unit 12 is means for storing community information uploaded by the user terminal 2 in the community information storage unit 13 as a community information list and downloading a community information list stored in response to a request from the user terminal 2. In addition, the community information management unit 12 has a function of setting an expiration date or the like in the community information, automatically updating registration in the community information list, or deleting community information that has expired from the community information list. You may make it have.
[0049]
The user terminal 2 includes a wireless communication unit 21, a communication processing unit 22, an encryption / decryption processing unit 23, a communication encryption key generation unit 24, and a community attribute storage unit 25. The encryption / decryption processing unit 23, the communication encryption key generation unit 24, and the community attribute storage unit 25 are provided as a tamper resistant device 26.
[0050]
The wireless communication unit 21 corresponds to the server communication unit and the wireless communication processing unit described in the claims, and is a unit that performs wireless communication with the community directory server 1 and other user terminals 2. .
[0051]
The wireless communication unit 21 has an encrypted communication function, and the communication encryption key Kt decrypted by the encryption / decryption processing unit 23 is securely incorporated into the encrypted communication function and processed by the communication processing unit 22 and the like. Encrypt data and communicate wirelessly.
[0052]
The communication processing unit 22 is a means for performing communication processing with another application (not shown) provided in the user terminal 2.
[0053]
The encryption / decryption processing unit 23 is a unit corresponding to the encryption processing unit and the decryption processing unit described in the claims, and includes a communication encryption key Kt generated by the communication encryption key generation unit 24. Is encrypted using the attribute authentication encryption key Ka stored in the community attribute storage unit 25, or the encrypted communication encryption key Kt included in the community information acquired from the community directory server 1 is used. This is a means for decrypting using the attribute authentication encryption key Ka.
[0054]
The communication encryption key generation unit 24 is a means for generating a communication encryption key Kt used in the community by generating a random number when the community to which the user terminal 2 belongs has not yet been formed.
[0055]
The community attribute storage unit 25 is a means for storing community attributes of communities to which the user belongs.
[0056]
In this embodiment, a company that provides a communication service at a hot spot stores a community attribute storage unit 25 that stores community attributes including a community identifier and an attribute authentication encryption key Ka, an encryption / decryption processing unit 23, The IC card including the communication encryption key generation unit 24 is distributed to the user in advance, and the user incorporates the IC card distributed to the user terminal 2.
[0057]
Further, the user terminal 2 is configured to include a tamper-resistant device 26 in advance, and data necessary for realizing the encryption / decryption processing unit 23, the communication encryption key generation unit 24, and the community attribute storage unit 25. Alternatively, the communication service provider or the like may write the processing program into the tamper resistant device 26 via data communication.
[0058]
As a specific example of the community attribute, the community attribute aaa and the attribute authentication encryption key Ka are stored in the community attribute storage unit 25 of the tamper resistant device 26 of the user terminal 2 of the user X who can use the community A provided by the airline A. Including community attributes are stored. Accordingly, the user X can participate in the community A provided by the airline A and can perform data communication by wireless LAN encryption communication with other user terminals 2 and servers in the community.
[0059]
In addition, the community attribute storage unit 25 of the user terminal 2 tamper resistant device 26 (IC card) of the user Y who can use the community B provided by the airline B stores the community identifier bbb and the corresponding attribute certification encryption key Kb. The pair is remembered. As described above, the user X having the IC card distributed by the airline A and the user Y having the IC card distributed by the airline B have different community attributes. When a single user can possess a plurality of community attributes, the tamper resistant device 26 of the user terminal 2 is provided with processing means for selecting community attributes.
[0060]
Next, a process of uploading community information to the hotspot community directory server 1 will be described.
[0061]
In the initial state, no community information is registered in the community directory server 1. When the user visits a hot spot where the community directory server 1 is installed and registers his / her community information in the community directory server 1, preparation for exchanging the encryption key for communication by wireless LAN can be made.
[0062]
For example, when the user X participates in a hot spot, if there is no community information of the airline A in the community directory server 1 of the hot spot, the user terminal 2 uses the generated data including the communication encryption key K1. Register as community information for airline A.
[0063]
In actual operation, rather than the case where the user is the first registrant, the server prepared for the service provided by the airline A or the like at the hot spot becomes the “registrant who is the first user”. There are many. A user who does not have an IC card distributed by the airline A or a user who has only an IC card of another airline cannot access such a server.
[0064]
FIG. 3 shows a process flow of the community information registration process.
[0065]
The wireless communication unit 21 of the user terminal 2 that is the first user for a certain community accesses the community directory server 1 by wireless communication that is not encrypted, and downloads a registered community information list (step S1).
[0066]
The encryption / decryption processing unit 23 searches whether the community information (attribute) of the community to which the user belongs is registered in the community information list downloaded from the community directory server 1 by using the community identifier as a key (step) S2).
[0067]
If the community information list is not registered in the community directory server 1 or if the community information list is not registered in the community information list, the communication encryption key generation unit 24 generates a random number. A communication encryption key Kt used for wireless communication in the community is generated (step S3).
[0068]
Then, the encryption / decryption processing unit 23 encrypts the generated communication encryption key Kt using the attribute authentication encryption key Ka stored in the community attribute storage unit 25 (step S4), and further, the community identifier And community information including the encrypted communication encryption key Kt is generated (step S5).
[0069]
The wireless communication unit 21 registers community information in the community directory server 1 by wireless communication without encryption (step S6). In the community directory server 1, the wireless communication unit 11 receives community information from the user terminal 2, and the community information management unit 12 adds the received community information to the community information list and stores it in the community information storage unit 13. .
[0070]
On the other hand, when the community information to which the encryption / decryption processing unit 23 belongs is registered in the community information list downloaded from the community directory server 1 (step S2), the encryption / decryption processing unit 23 ends the community information registration process. .
[0071]
Next, a process for downloading community information registered in the community directory server 1 of the hot spot will be described. FIG. 4 shows a process flow of the community information acquisition process.
[0072]
The wireless communication unit 21 of another user terminal 2 that has visited the hot spot accesses the community directory server 1 by wireless communication without encryption and downloads the community information list (step S11).
[0073]
Next, the encryption / decryption processing unit 23 determines whether community information (attributes) of the community to which the user belongs has already been registered in the community information list acquired from the community directory server 1, using the community identifier as a key. Search is performed (step S2).
[0074]
If the community information is registered in the community information list, the encryption / decryption processing unit 23 extracts the corresponding community information from the community information list and stores the corresponding community information in the community attribute storage unit 25. Using the encryption key Ka, the encrypted communication encryption key Kt included in the extracted community information is decrypted to extract the communication encryption key Kt (step S12).
[0075]
The wireless communication unit 21 incorporates the decrypted communication encryption key Kt into the encrypted communication mechanism (step S13).
[0076]
Accordingly, in the community, each user terminal 2 can perform wireless encrypted communication by encrypting the communication data processed by the communication processing unit 22 with the communication encryption key Kt by the wireless communication unit 21.
[0077]
As mentioned above, although this invention was demonstrated by the embodiment, it cannot be overemphasized that a various deformation | transformation is possible for this invention in the range of the main point.
[0078]
The features of the embodiments and examples of the present invention are listed as follows.
(Additional remark 1) The encryption for wireless communication which forms the community comprised by the user terminal which uses the same encryption key for communication within wireless LAN, and delivers the said encryption key for communication to the user terminal which has the authority which belongs to the said community A key distribution system,
The server
Community information storage means for storing community information including community attributes and an encrypted communication encryption key for the community;
Community information management means for managing access to the community information,
User terminal
Community attribute storage means for storing an attribute of a community to which the user belongs and an attribute authentication encryption key associated with the community;
Server communication means for uploading community information to the server or downloading community information from the server;
A communication encryption key generating means for generating a communication encryption key for the community when the community attribute downloaded from the server does not include an attribute of the community to which the server belongs;
Encryption processing means for encrypting the generated communication encryption key with the attribute authentication encryption key;
Decryption processing means for decrypting an encrypted communication encryption key corresponding to the attribute with the attribute authentication encryption key when the community information downloaded from the server includes an attribute of the community When,
Wireless communication processing means for performing encrypted communication processing within the community by incorporating the decrypted encryption key for communication
An encryption key distribution system for wireless communication.
(Supplementary Note 2) The user terminal includes the community attribute storage unit, the communication encryption key generation unit, the encryption processing unit, and the decryption processing unit in a tamper resistant device that can be incorporated in the user terminal.
The wireless communication encryption key distribution system according to appendix 1, wherein
(Additional remark 3) The said community information management means sets the effective period which holds community information, and deletes the said community information after the said effective period passes
The wireless communication encryption key distribution system according to appendix 1, wherein
(Supplementary Note 4) Wireless communication encryption that forms a community composed of user terminals that use the same communication encryption key in a wireless LAN and distributes the communication encryption key to user terminals having authority belonging to the community A key delivery method,
Download the community information including the community attributes and the encrypted communication encryption key for the community, stored by the server,
Accessing the community attribute storage means for storing the attribute of the community to which the user belongs and the attribute authentication encryption key associated with the community;
When the downloaded community information does not include an attribute of the community to which the community belongs, a communication encryption key for the community is generated, and the communication encryption key generated by the attribute authentication encryption key is generated. And upload the community information including the encrypted communication encryption key to the server,
When the downloaded community information includes an attribute of its own community, the encrypted communication encryption key corresponding to the attribute is decrypted with the attribute authentication encryption key, and the decrypted communication key is used. Encrypted communication within the community by incorporating an encryption key
An encryption key distribution method for wireless communication.
(Supplementary Note 5) A wireless communication encryption key distribution processing program for causing a computer to execute the step of realizing the wireless communication encryption key distribution method according to Supplementary Note 4.
(Supplementary Note 6) A wireless communication cryptographic key distribution processing program for causing a computer to execute the steps of realizing the wireless communication cryptographic key distribution method according to Supplementary Note 4 is recorded.
A wireless communication encryption key distribution processing program recording medium.
[0079]
【The invention's effect】
As described above, according to the present invention, the communication encryption key used in the wireless encryption communication is registered in the community directory server in an encrypted state, and encrypted according to the request of the user terminal. It is downloaded in the state, and the community attribute is authenticated in the tamper resistant device of each user terminal so that the corresponding communication encryption key can be decrypted and used.
[0080]
Thereby, this invention can deliver the encryption key for communication shared for every community safely to a user terminal, without installing an authentication server in a hot spot.
[0081]
Further, in the present invention, since the community directory server installed in the hot spot does not need to register user authentication information in advance, the operation of the hot spot is easy and scalable.
[0082]
Furthermore, the community sharing the communication encryption key can be generated dynamically and flexibly as necessary.
[0083]
In the present invention, even when the community attribute is authenticated, no personal information is transmitted from the tamper resistant device of the user terminal, so that strong privacy protection can be realized.
[0084]
With these characteristics and effects of the present invention, data communication using a wireless LAN can be performed safely in a public space, so that the hot spot service can be made more practical and highly useful.
[Brief description of the drawings]
FIG. 1 is a diagram for explaining an overview of processing in an embodiment of the present invention;
2 is a diagram showing a configuration example of a community directory server and a configuration example of a user terminal shown in FIG. 1;
FIG. 3 is a diagram showing a processing flow of community information registration processing;
FIG. 4 is a diagram showing a processing flow of community information acquisition processing;
[Explanation of symbols]
1 Community directory server
11 Wireless communication unit
12 Community Information Management Department
13 Community information storage
2 User terminal
21 Wireless communication unit
22 Communication processing unit
23 Encryption / Decryption Processing Unit
24 Communication encryption key generator
25 Community attribute storage
26 Tamper resistant device (IC card)

Claims (5)

A wireless communication encryption key distribution system that forms a community composed of user terminals that use the same communication encryption key in a wireless LAN and distributes the communication encryption key to user terminals having authority belonging to the community. There,
The server
Community information storage means for storing community information including community attributes and an encrypted communication encryption key for the community;
Community information management means for managing access to the community information,
User terminal
Community attribute storage means for storing an attribute of a community to which the user belongs and an attribute authentication encryption key associated with the community;
Server communication means for uploading community information to the server or downloading community information from the server;
A communication encryption key generating means for generating a communication encryption key for the community when the community attribute downloaded from the server does not include an attribute of the community to which the server belongs;
Encryption processing means for encrypting the generated communication encryption key with the attribute authentication encryption key;
Decryption processing means for decrypting an encrypted communication encryption key corresponding to the attribute with the attribute authentication encryption key when the community information downloaded from the server includes an attribute of the community When,
A wireless communication encryption key distribution system comprising: wireless communication processing means for performing encrypted communication processing within a community by incorporating the decrypted encryption key for communication. The user terminal includes the community attribute storage unit, the communication encryption key generation unit, the encryption processing unit, and the decryption processing unit in a tamper resistant device that can be incorporated in the user terminal. The encryption key distribution system for wireless communication according to claim 1. The wireless communication encryption key distribution system according to claim 1, wherein the community information management unit sets an effective period for holding community information, and deletes the community information after the effective period has elapsed. A wireless communication encryption key distribution system that forms a community composed of user terminals that use the same communication encryption key in a wireless LAN and distributes the communication encryption key to user terminals having authority belonging to the community. Wireless communication encryption key distribution executed by a user terminal, which is a constituent element and includes community attribute storage means, server communication means, communication encryption key generation means, encryption processing means, decryption processing means, and wireless communication processing means A method,
From the community information storage means for storing community information including the community attribute and the encrypted communication encryption key for the community, the server communication means is provided in the server of the wireless communication encryption key distribution system; A process of downloading information,
The communication encryption key generation means accesses the community attribute storage means for storing the attribute of the community to which the communication belongs and the attribute authentication encryption key associated with the community. A process of generating a communication encryption key for the community when the attribute of the community to which it belongs is not included;
A process in which the encryption processing means encrypts the generated communication encryption key with the attribute authentication encryption key;
A process in which the server communication means uploads community information including the encrypted communication encryption key to the server;
When the downloaded community information includes an attribute of its own community, the decryption processing unit decrypts the encrypted communication encryption key corresponding to the attribute with the attribute authentication encryption key. Processing process
A wireless communication encryption key distribution method comprising: a wireless communication processing means including a process of performing encrypted communication within a community by incorporating the decrypted communication encryption key. A wireless communication encryption key distribution system that forms a community composed of user terminals that use the same communication encryption key in a wireless LAN and distributes the communication encryption key to user terminals having authority belonging to the community. A user terminal program,
Computer
Community attribute storage means for storing an attribute of a community to which the user belongs and an attribute authentication encryption key associated with the community;
Server communication means for uploading community information to the server or downloading community information from the server;
A communication encryption key generating means for generating a communication encryption key for the community when the community attribute downloaded from the server does not include an attribute of the community to which the server belongs;
Encryption processing means for encrypting the generated communication encryption key with the attribute authentication encryption key;
Decryption processing means for decrypting an encrypted communication encryption key corresponding to the attribute with the attribute authentication encryption key when the community information downloaded from the server includes an attribute of the community When,
A program for a user terminal of an encryption key distribution system for wireless communication, comprising: a wireless communication processing unit that incorporates the decrypted encryption key for communication and performs encrypted communication processing within a community.

Images