Ad-hoc radio communication verification system

• US 20020023216A1
• Filed: 06/19/2001
• Published: 02/21/2002
• Est. Priority Date: 06/20/2000
• Status: Active Grant

• Current Assignee: Lenovo PC International Limited (Lenovo Group Ltd.)
• Original Assignee: International Business Machines Corporation
• Inventors: Noguchi, Tetsuya, Shimotono, Susumu
• Granted Patent: US 7,215,775 B2
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

An aspect of the present invention is to easily verify data integrity in data transmission and reception by means of an ad-hoc radio connection. A requester and requested end of an establishment of a cipher communication path are defined as source A and destination B, respectively. A predetermined verification data generation algorithm ID1 is arranged in advance between source A and destination B. Source A sends its own public key Kp to destination B, and at the same time generates verification data Xp based on Kp using ID1 and outputs Xp to its own verification image display section. On the other hand, destination B receives data Kx that is transmitted from source A as Kp, then generates verification data Xx based on Kx using ID1 and outputs Xx to its own verification image display section. A verifier determines that data integrity is secured if Xp and Xx displayed in the verification image display sections of source A and destination B match.

Claims

1. An ad-hoc radio communication verification system, comprising:

means for sending data for verification data generation from one data send/receive device to the other send/receive device, wherein the two send/receive devices are mutually connected by an ad-hoc radio connection;

in the one data send/receive device, means for generating verification data from the sent data for verification data generation based on a first generation algorithm and outputting the generated verification data to its own verification data output section;

in the other data send/receive device, means for generating verification data from the received data for verification data generation based on the first generation algorithm and outputting the generated verification data to its own verification data output section; and

means for determining whether the verification data at the verification data output sections of both the data send/receive devices matches mutually.

2. The ad-hoc radio communication verification system according to claim 1, wherein the verification data is visual or auditory verification data.

3. The ad-hoc radio communication verification system according to claim 1, wherein the verification data is output at the verification data output section both in the visual form and auditory form.

4. The ad-hoc radio communication verification system according to claim 1, further comprising:

means for defining a function as an operator, a numeric on which the operator operates as an input of the operator, and an operation result of the operator as an output of the operator;

means for establishing a serial sequence of operators that are composed of one or more of operators arranged in series, wherein the operators relate to the same or different one-way functions; and

means for letting an input to the serial sequence of operators be the data for verification data generation and an output from the serial sequence of operators or a corresponding value be the verification data.

5. The ad-hoc radio communication verification system according to claim 1, wherein the first generation algorithm generates a plurality of verification data, wherein for each verification data, it is determined whether the verification data at the verification data output sections of both the data send/receive devices match mutually.

6. The ad-hoc radio communication verification system according to claim 5, further comprising:

means for defining a function as an operator, a numeric on which the operator operates as an input of the operator, and an operation result of the operator as an output of the operator;

means for establishing a serial sequence of operators that are composed of two or more of operators arranged in series, wherein the operators relate to the same or different one-way functions;

means for letting an input to the serial sequence of operators be the data for verification data generation and outputs of two or more of operators selected from all operators composing the serial sequence of operators or corresponding values be the verification data respectively; and

means for determining for each verification data whether the verification data match mutually at the verification data output sections of both the data send/receive devices.

7. The ad-hoc radio communication verification system according to claim 5, further comprising:

means for defining a function as an operator, a numeric on which the operator operates as an input of the operator, and an operation result of the operator as an output of the operator;

means for establishing a plurality of operators that relate to mutually different one-way functions;

means for letting the data for verification data generation be a common input to each operator and an output of each operator or a corresponding value be the verification data respectively; and

means for determining for each verification data whether the verification data match mutually at the verification data output sections of both the data send/receive devices.

8. The ad-hoc radio communication verification system according to claim 1, wherein the data for verification data generation is a public key of either data send/receive device.

9. An ad-hoc radio communication data send/receive system utilizing the ad-hoc radio communication verification system according to claim 8, comprising a portable terminal having a radio communication function and a personal computer having a radio communication function that are owned by each user, wherein the portable terminal and personal computer of each user are connected by a secure communication path;

when the ad-hoc radio communication verification system verifies that a public key Kp of one user is transmitted from the portable terminal of the one user to the portable terminal of the other user without being tampered with, the public key Kp is transmitted from the portable terminal to the personal computer of each user, then the personal computer of the other user generates a symmetric key Kc based on a second generation algorithm, while the personal computer of the one user generates the symmetric key Kc based on the second generation algorithm from information transmitted from the personal computer of the other user in cipher according to the public key; and

thereafter both the personal computers send and receive data in cipher according the symmetric key Kc.

10. An ad-hoc radio communication data send/receive system utilizing the ad-hoc radio communication verification system according to claim 8, comprising a portable terminal having a radio communication function and a personal computer having a radio communication function that are owned by each user, wherein the portable terminal and personal computer of each user are connected by a secure communication path;

when the ad-hoc radio communication verification system verifies that a public key Kp of one user is transmitted from the portable terminal of the one user to the portable terminal of the other user without being tampered with, the portable terminal of the other user generates a symmetric key Kc based on a second generation algorithm, while the portable terminal of the one user generates the symmetric key Kc based on the second generation algorithm from information transmitted from the portable terminal of the other user in cipher according to the public key, then the symmetric key Kc is transmitted from the portable terminal to the personal computer of each user; and

thereafter both the personal computers send and receive data in cipher according to the symmetric key Kc.

31. A computer program product comprising a computer usable medium having computer readable program code means embodied therein for causing ad-hoc radio communication, the computer readable program code means in said computer program product comprising computer readable program code means for causing a computer to effect the the funtions of claim 1.

32. 31. A computer program product comprising a computer usable medium having computer readable program code means embodied therein for causing ad-hoc radio communication, the computer readable program code means in said computer program product comprising computer readable program code means for causing a computer to effect the the functions of claim 1.

33. A computer program product comprising a computer usable medium having computer readable program code means embodied therein for causing ad-hoc radio communication, the computer readable program code means in said computer program product comprising computer readable program code means for causing a computer to effect the the functions of claim 9.

34. A computer program product comprising a computer usable medium having computer readable program code means embodied therein for causing ad-hoc radio communication, the computer readable program code means in said computer program product comprising computer readable program code means for causing a computer to effect the the functions of claim 10.

11. An ad-hoc radio communication data send/receive system, comprising a portable terminal having a radio communication function and a personal computer having a radio communication function that are owned by each user, wherein the portable terminal and personal computer of each user are connected by a secure communication path;

when it is verified that a public key Kp of one user is transmitted from the portable terminal of the one user to the portable terminal of the other user without being tampered with, the public key Kp is transmitted from the portable terminal to the personal computer of each user, then the personal computer of the other user generates a symmetric key Kc based on a second generation algorithm, while the personal computer of the one user generates the symmetric key Kc based on the second generation algorithm from information transmitted from the personal computer of the other user in cipher according to the public key; and

thereafter both the personal computers send and receive data in cipher according to the symmetric key Kc.

14. The method according to claim 13, wherein the verification data is visual or auditory verification data.

15. The method according to claim 13, wherein the verification data is output at the verification data output section both in the visual form and auditory form.

16. The method according to claim 13, further comprising the steps of:

defining a function as an operator, a numeric on which the operator operates as an input of the operator, and an operation result of the operator as an output of the operator;

establishing a serial sequence of operators that are composed of one or more of operators arranged in series, wherein the operators relate to the same or different one-way functions;

letting an input to the serial sequence of operators be the data for verification data generation and an output from the serial sequence of operators or a corresponding value be the verification data.

17. The method according to claim 13, wherein the first generation algorithm generates a plurality of verification data, wherein for each verification data, it is determined whether the verification data at the verification data output sections of both the data send/receive devices match mutually.

18. The method according to claim 17, further comprising the steps of:

defining a function as an operator, a numeric on which the operator operates as an input of the operator, and an operation result of the operator as an output of the operator;

establishing a serial sequence of operators that are composed of two or more of operators arranged in series, wherein the operators relate to the same or different one-way functions;

letting an input to the serial sequence of operators be the data for verification data generation and outputs of two 10 or more of operators selected from all operators composing the serial sequence of operators or corresponding values be the verification data respectively; and

determining for each verification data whether the verification data match mutually at the verification data output sections of both the data send/receive devices.

19. The method according to claim 17, further comprising the steps of:

defining a function as an operator, a numeric on which the operator operates as an input of the operator, and an operation result of the operator as an output of the operator;

establishing a plurality of operators that relate to mutually different one-way functions;

letting the data for verification data generation be a common input to each operator and an output of each operator or a corresponding value be the verification data respectively; and

determining for each verification data whether the verification data match mutually at the verification data output sections of both the data send/receive devices.

20. The method according to claim 13, wherein the data for verification data generation is a public key of either data send/receive device.

21. The method for sending and receiving ad-hoc radio communication data, utilizing the verification method according to claim 20, comprising:

a portable terminal having a radio communication function and a personal computer having a radio communication function that are owned by each user, wherein the portable terminal and personal computer of each user are connected by a secure communication path;

when the verification method verifies that a public key Kp of one user is transmitted from the portable terminal of the one user to the portable terminal of the other user without being tampered with, the public key Kp is transmitted from the portable terminal to the personal computer of each user, then the personal computer of the other user generates a symmetric key Kc based on a second generation algorithm, while the personal computer of the one user generates the symmetric key Kc based on the second generation algorithm from information transmitted from the personal computer of the other user in cipher according to the public key; and

thereafter both the personal computers send and receive data in cipher according to the symmetric key Kc.

22. The method for sending and receiving ad-hoc radio communication data, utilizing the verification method according to claim 20, comprising:

a portable terminal having a radio communication function and a personal computer having a radio communication function that are owned by each user, wherein the portable terminal and personal computer of each user are connected by a secure communication path;

when the verification method verifies that a public key Kp of one user is transmitted from the portable terminal of the one user to the portable terminal of the other user without being tampered with, the portable terminal of the other user generates a symmetric key Kc based on a second generation algorithm, while the portable terminal of the one user generates the symmetric key Kc based on the second generation algorithm from information transmitted from the portable terminal of the other user in cipher according to the public key, then the symmetric key Kc is transmitted from the portable terminal to the personal computer of each user; and

thereafter both the personal computers send and receive data in cipher according to the symmetric key Kc.

26. The recording medium according to claim 25, wherein the verification data is visual or auditory verification data.

27. The recording medium according to claim 25, wherein the verification data is-output at the verification data output section both in the visual form and auditory form.

28. The recording medium according to claim 25, wherein the verification system further comprising:

means for defining a function as an operator, a numeric on which the operator operates as an input of the operator, and an operation result of the operator as an output of the operator;

means for establishing a serial sequence of operators that are composed of one or more of operators arranged in series, wherein the operators relate to the same or different one-way functions; and

means for letting an input to the serial sequence of operators be the data for verification data generation and an output from the serial sequence of operators or a corresponding value be the verification data.

29. The recording medium according to claim 25, wherein the first generation algorithm generates a plurality of verification data, wherein for each verification data, it is determined whether the verification data at the verification data output sections of both the data send/receive devices match mutually.

35. A computer program product comprising a computer usable medium having computer readable program code means embodied therein for causing ad-hoc radio communication, the computer readable program code means in said computer program product comprising computer readable program code means for causing a computer to effect the functions of claim 11.

37. An article of manufacture comprising a computer usable medium having computer readable program code means embodied therein for causing ad-hoc radio communication, the computer readable program code means in said article of manufacture comprising computer readable program code means for causing a computer to effect the steps of claim 13.

38. An article of manufacture comprising a computer usable medium having computer readable program code means embodied therein for causing ad-hoc radio communication, the computer readable program code means in said article of manufacture comprising computer readable program code means for causing a computer to effect the steps of claim 21.

39. An article of manufacture comprising a computer usable medium having computer readable program code means embodied therein for causing ad-hoc radio communication, the computer readable program code means in said article of manufacture comprising computer readable program code means for causing a computer to effect the steps of claim 22.

40. An article of manufacture comprising a computer usable medium having computer readable program code means embodied therein for causing ad-hoc radio communication, the computer readable program code means in said article of manufacture comprising computer readable program code means for causing a computer to effect the steps of claim 23.

41. An article of manufacture comprising a computer usable medium having computer readable program code means embodied therein for causing ad-hoc radio communication, the computer readable program code means in said article of manufacture comprising computer readable program code means for causing a computer to effect the steps of claim 24.

42. An article of manufacture comprising a computer usable medium having computer readable program code means embodied therein for causing ad-hoc radio communication, the computer readable program code means in said article of manufacture comprising computer readable program code means for causing a computer to effect the steps of claim 24.

12. An ad-hoc radio communication data send/receive system, comprising a portable terminal having a radio communication function and a personal computer having a radio communication function that are owned by each user, wherein the portable terminal and personal computer of each user are connected by a secure communication path;

when it is verified that a public key Kp of one user is transmitted from the portable terminal of the one user to the portable terminal of the other user without being tampered with, the portable terminal of the other user generates a symmetric key Kc based on a second generation algorithm, while the portable terminal of the one user generates the symmetric key Kc based on the second generation algorithm from information transmitted from the portable terminal of the other user in cipher according to the public key, then the symmetric key Kc is transmitted from the portable terminal to the personal computer of each user;

thereafter both the personal computers send and receive data in cipher according to the symmetric key Kc.

13. A method for verifying an ad-hoc radio communication, comprising the steps of:

sending data for verification data generation from one data send/receive device to the other send/receive device, wherein the two send/receive devices are mutually connected by an ad-hoc radio connection;

in the one data send/receive device, generating verification data from the sent data for verification data generation based on a first generation algorithm and outputting the generated verification data to its own verification data output section;

in the other data send/receive device, generating verification data from the received data for verification data generation based on the first generation algorithm and outputting the generated verification data to its own verification data output section; and

determining whether the verification data at the verification data output sections of both the data send/receive devices matches mutually.

23. The method for sending and receiving ad-hoc radio communication data, comprising:

a portable terminal having a radio communication function and a personal computer having a radio communication function that are owned by each user, wherein the portable terminal and personal computer of each user are connected by a secure communication path;

when it is verified that a public key Kp of one user is transmitted from the portable terminal of the one user to the portable terminal of the other user without being tampered with, the public key Kp is transmitted from the portable terminal to the personal computer of each user, then the personal computer of the other user generates a symmetric key Kc based on a second generation algorithm, while the personal computer of the one user generates the symmetric key Kc based on the second generation algorithm from information transmitted from the personal computer of the other user in cipher according to the public key; and

thereafter both the personal computers send and receive data in cipher according to the symmetric key Kc.

24. The method for sending and receiving ad-hoc radio communication data, comprising:

a portable terminal having a radio communication function and a personal computer having a radio communication function that are owned by each user, wherein the portable terminal and personal computer of each user are connected by a secure communication path;

when it is verified that a public key Kp of one user is transmitted from the portable terminal of the one user to the portable terminal of the other user without being tampered with, the portable terminal of the other user generates a symmetric key Kc based on a second generation algorithm, while the portable terminal of the one user generates the symmetric key Kc based on the second generation algorithm from information transmitted from the portable terminal of the other user in cipher according to the public key, then the symmetric key Kc is transmitted from the portable terminal to the personal computer of each user;

thereafter both the personal computers send and receive data in cipher according to the symmetric key Kc.

25. A recording medium recording a program for an ad-hoc radio communication verification system, wherein the verification system comprising:

means for sending data for verification data generation from one data send/receive device to the other send/receive device, wherein the two send/receive devices are mutually connected by an ad-hoc radio connection;

in the one data send/receive device, means for generating verification data from the sent data for verification data generation based on a first generation algorithm and outputting the generated verification data to its own verification data output section;

in the other data send/receive device, means for generating verification data from the received data for verification data generation based on the first generation algorithm and outputting the generated verification data to its own verification data output section; and

means for determining whether the verification data at the verification data output sections of both the data send/receive devices matches mutually.

43. An article of manufacture comprising a computer usable medium having computer readable program code means embodied therein for causing ad-hoc radio communication, the computer readable program code means in said article of manufacture comprising computer readable program code means for causing a computer to effect the steps of claim 25.

30. A delivery system for delivering a program for an ad-hoc radio communication system, the verification system comprising:

means for sending data for verification data generation from one data send/receive device to the other send/receive device, wherein the two send/receive devices are mutually connected by an ad-hoc radio connection;

in the one data send/receive device, means for generating verification data from the sent data for verification data generation based on a first generation algorithm and outputting the generated verification data to its own verification data output section;

in the other data send/receive device, means for generating verification data from the received data for verification data generation based on the first generation algorithm and outputting the generated verification data to its own verification data output section; and

means for determining whether the verification data at l1r the verification data output sections of both the data send/receive devices matches mutually.

36. A computer program product comprising a computer usable medium having computer readable program code means embodied therein for causing ad-hoc radio communication, the computer readable program code means in said computer program product comprising computer readable program code means for causing a computer to effect the functions of claim 30.