Security realizing system in network

• US 20030051146A1
• Filed: 08/05/2002
• Published: 03/13/2003
• Est. Priority Date: 09/11/2001
• Status: Abandoned Application

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Higuchi, Tatsushi, Suzuki, Masato, Ishii, Masato, Ebina, Akihiro, Takita, Isao, Makimoto, Yoshinobu, Sawamura, Shinichi, Kamimaki, Hideki
• Application Number:
  US10/211,517
• Publication Number:
  US 20030051146A1
• Time in Patent Office: Days
• US Class Current: 713/185
• CPC Class Codes: H04L 12/2803 Home automation networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

In a system for easily realizing security in a homenetwork by preventing communication from being made with a terminal illegally connected to the homenetwork, an information appliance and a key management server are connected to a homenetwork via network connector. By inserting an authentication tag into the information appliance, authentication with the key management server is performed and a public encryption key for allowing communication to be made with another information appliance connected to the homenetwork is obtained, thereby enabling safe communication to be made in the homenetwork.

Claims

1. A terminal having network connecting means, comprising:

a slot for reading an authentication tag in which information for using a network has been recorded,

wherein by inserting said authentication tag, data can be transmitted and received between information appliances connected to said network.

2. A terminal according to claim 1, further comprising:

means for reading the information recorded in said authentication tag when the authentication tag is inserted into said slot of the terminal;

means for recording the information recorded in said authentication tag into the terminal; and

means for performing an encryption of transmission data and a decryption of reception data by using an encryption key of the recorded information.

3. A terminal according to claim 1, further comprising:

means for copying a program recorded in said authentication tag onto a recording medium which the terminal possesses; and

means for executing the copied program.

4. A terminal according to claim 1, further comprising:

means for transmitting information peculiar to the terminal to a key management server; and

means for receiving a public encryption key updated by said key management server and updating the public encryption key recorded in the terminal.

5. A terminal according to claim 4, wherein said key management server further comprises:

means for authenticating the terminal connected to the network; and

means for recording information of the terminal connected to said network as a table into said key management server and managing it.

6. A terminal according to claim 5, wherein said key management server further comprises:

means for forming an encryption key; and

means for distributing said encryption key to the terminal connected to said network on the basis of said table information.

7. A security system comprising:

a terminal apparatus having a slot into which an authentication tag is inserted;

a key management server having a slot into which said authentication tag is inserted; and

a network for connecting said terminal apparatus to said key management server,

wherein said key management server records first key information into said authentication tag,

said terminal apparatus reads out second key information recorded in said authentication tag and transmits said second key information to said key management server via said network, and

said key management server compares said second key information with said first key information stored in said key management server and, when said first key information and said second key information coincide, said key management server transmits third key information for enabling said terminal apparatus to access another apparatus connected to said network to said terminal apparatus.

8. A system according to claim 7, wherein said third key information can be updated.

9. An information appliance which can be connected to a network, comprising:

a slot into which an authentication tag is inserted;

a portion for reading out information recorded in said authentication tag;

a portion for transmitting said read-out information onto said network; and

a portion for receiving information which corresponds to the information transmitted onto said network and shows that said information appliance can be used.

10. A key management server which can be connected to a network, comprising:

a slot into which an authentication tag is inserted;

a portion for forming key information for authenticating another apparatus connected to said network; and

a portion for storing said key information into said authentication tag inserted into said slot.

11. A server according to claim 10, further comprising:

a portion for receiving authentication information outputted from said another apparatus connected to said network;

a portion for comparing said authentication information with authentication information stored in said key management server; and

a portion for transmitting a result of said comparison to said another apparatus.