Communication system, communication device, vehicle and communication method

• US 10,374,796 B2
• Filed: 08/26/2015
• Issued: 08/06/2019
• Est. Priority Date: 08/28/2014
• Status: Active Grant

• Current Assignee: Renesas Electronics Corporation
• Original Assignee: Renesas Electronics Corporation
• Inventors: Oshida, Daisuke, Sato, Yoshiyuki, Sagesaka, Yasuhiro, Itome, Takeshi
• Primary Examiner(s): Cervetti, David Garcia
• Application Number:
  US14/836,787
• Publication Number:
  US 20160065367A1
• Time in Patent Office: 1,441 Days
• CPC Class Codes: G08G 1/096783 where the origin of the information is a roadside individual element
• CPC Class Codes: G08G 1/096791 where the origin of the information is another vehicle
• CPC Class Codes: G08G 1/162 event-triggered
• CPC Class Codes: H04B 1/3822 specially adapted for use in vehicles H04B1/3827 takes precedence
• CPC Class Codes: H04B 1/3827 Portable transceivers
• CPC Class Codes: H04L 2101/604 Address structures or formats
• CPC Class Codes: H04L 2101/668 Internet protocol [IP] address subnets
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 61/5053 Lease time; Renewal aspects
• CPC Class Codes: H04L 61/5092 by self-assignment, e.g. picking addresses at random and testing if they are already in use
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/025 using location based information parameters

Abstract

Provided is a high-speed and light-weighted authentication system that makes IP address filtering possible and does not impair real-time property even on a network including many and unspecific entities (communication devices). In a communication system that a plurality of communication devices are coupled together such that mutual communication is possible over the network, the communication devices communicate with a server under a secure environment, when authentication has been obtained from the server, random seeds of the same value and individual identifiers are issued to them, each communication device generates the IP address that includes a pseudorandom number and the identifier, and the communication devices establish communication between the communication devices that include the pseudorandom numbers that are mutually the same in their IP addresses.

Claims

1. A communication system comprising:

a plurality of communication devices coupled together such that a mutual communication between the communication devices is possible over a network; and

a server coupled to each of the communication devices such that each communication device selectively communicates with the server using a secure communication path as a secure environment,

wherein the communication devices request an authentication from the server using the secure environment,

wherein the server, upon authenticating the communication devices, issues to the communication devices random seeds of a same value and individual identifiers for each authenticated communication device,

wherein each of the communication devices stores its own area information and an IP address that includes a pseudorandom number that has been generated by using the communication device'"'"'s own area information and the issued random seed as seeds and the individual identifier that has been issued to that communication device,

wherein each of the communication devices further accesses time information, and the pseudorandom number is generated by using a value that has been generated with an irreversible compressibility function on a basis of the area information, the time information, and the issued random seed, the area information and the time information being different from the issued random seed,

wherein the communication devices establish a mutual communication between communication devices having pseudorandom numbers in their IP addresses that are mutually the same, and

wherein the communication devices share the irreversible compressibility function in each of the communication devices to generate the value.

2. The communication system according to claim 1, wherein each of the communication devices includes a GPS reception unit and the GPS reception unit generates the area information and the time information.

3. The communication system according to claim 1, wherein the server periodically reissues to the communication devices random seeds of values that are different from values of already-issued random seeds, wherein a same reissued random seed is sent to each of the communication devices, and each of the communication devices updates its IP address on a basis of the reissued random seed.

4. The communication system according to claim 1, wherein the plurality of communication devices comprise at least one of a communication device configured to be loaded on a vehicle and a communication device configured to be loaded on a roadside machine.

5. The communication system according to claim 4, wherein the communication devices comprise at least one communication device configured to be loaded on portable electronic equipment that a pedestrian carries with him/her and/or a communication device configured to be mounted on a bicycle.

6. The communication system according to claim 1, wherein the communication devices further each comprises the pseudorandom number generation circuit to generate the pseudorandom numbers in their IP addresses that are mutually the same, as a verification.

7. The communication system according to claim 1,

wherein the communication devices comprise a first communication device and a second communication device,

wherein the first communication device generates a first IP address including a first pseudorandom number as the IP address that includes the pseudorandom number,

wherein the second communication device generates a second IP address including a second pseudorandom number as the IP address that includes the pseudorandom number,

wherein the first communication device generates a message including the first IP address and sends the message to the second communication device when performing the mutual communication between the first communication device and the second communication device, and

wherein the second communication device receiving the message performs a verification of the first IP address included in the message and confirms whether the first pseudorandom number included in the message matches the second pseudorandom number in the second IP address generated by the second communication device.

8. The communication system according to claim 7,

wherein the second communication device performs a processing of the message and responds to the message as necessary when the first pseudorandom number and the second pseudorandom number mutually match, and

wherein the second communication device decides that the message is an illegal message and discards the message when the first pseudorandom number and the second pseudorandom number do not mutually match.

9. The communication system according to claim 8, wherein the second communication device informs the server of receiving the illegal message.

10. A communication device comprising an RF module for communicating with a server and for communicating with other communication devices over a network,

wherein the communication device stores an IP address that includes a pseudorandom number that has been generated by using a value generated with an irreversible compressibility function on a basis of area information and a random seed that has been issued from the server under a secure environment as a seed,

wherein the communication device further accesses time information,

wherein the pseudorandom number is generated by using a value generated with the irreversible compressibility function on a basis of the area information, the time information, and the random seed, the area information and the time information being different from the issued random seed,

wherein the communication device authenticates, as a communication object, another communication device that includes an IP address including a same pseudorandom number as its IP address, and

wherein the communication devices share the irreversible compressibility function in each of the communication devices to generate the value.

11. The communication device according to claim 10, further comprising:

a GPS reception unit, wherein the GPS reception unit generates the area information and the time information.

12. The communication device according to claim 10, wherein the random seed is periodically reissued from the server and the IP address is updated on the basis of the reissued random seed.

13. The communication device according to claim 10, wherein the communication device is formed on a single semiconductor substrate.

14. A vehicle configured to mount therein the communication device according to claim 10.

15. A communication method in a communication system in which a plurality of communication devices is coupled together such that a mutual communication is possible over a network and each of the communication devices is coupled with a server such that communication with the server is possible, the communication method comprising:

receiving an authentication request by the server from one or more of the communication devices under a secure environment;

authenticating, by the server, the one or more communication devices;

issuing, by the server, to individual ones of the one or more authenticated communication devices pseudo seeds having a same value, each of the communication devices having its own area information; and

generating, in each of the one or more authenticated communication devices, an IP address that includes a pseudorandom number generated by using a value generated with an irreversible compressibility function on a basis of the area information, time information, and the random seed as the seeds issued by the server and an identifier that has been issued to the communication device itself;

establishing, by the one or more authenticated communication devices, a mutual communication between the communication devices having same pseudorandom numbers in their IP addresses; and

sharing, in each of the one or more authenticated communication devices, an irreversible compressibility function to generate the value.

16. The communication method according to claim 15, wherein each of the communication devices includes a GPS reception unit and the GPS reception unit generates the area information and the time information.

17. The communication method according to claim 15, wherein the server periodically issues to the authenticated communication devices random seeds of values that are different from values of already-issued random seeds and are the same as one another and each of the communication devices updates its IP address on a basis of the reissued random seed.

18. The communication method according to claim 15, wherein the plurality of communication devices comprises at least one communication device configured to be loaded on a vehicle and a communication device configured to be loaded on a roadside machine.

19. The communication method according to claim 18, wherein the plurality of communication devices comprises at least one communication device configured to be loaded on portable electronic equipment that a pedestrian carries with him/her and/or a communication device configured to be mounted on a bicycle.