Short range radio communication system with using improved authentication scheme

• US 20040203384A1
• Filed: 03/04/2003
• Published: 10/14/2004
• Est. Priority Date: 03/04/2002
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Sugikawa, Akihiko, Sata, Yutaka
• Granted Patent: US 7,076,209 B2
• Time in Patent Office: Days
• US Class Current: 455/41.2
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/77 Graphical identity
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

In a communication system having a first communication device and a second communication device for carrying out communications by setting up a communication link, the identification code generated at one of the first and second communication devices is presented to the other, and the authentication data are generated by using this identification code at the both of the communication devices, so that the illegal acquisition of the identification code can be prevented and the security performance can be improved.

Claims

1. A communication system comprising a first communication device and a second communication device for carrying out communications by setting up a communication link between the first communication device and the second communication device, wherein:

the first communication device has;

a first identification acquisition unit configured to acquire an identifier for communication possessed by the first communication device;

a first identifier generation unit configured to generate an identifier for presentation according to at least a part of bits of the identifier for communication;

a display control unit configured to display the identifier for presentation at a display unit of the first communication device; and

a connection mode setting unit configured to set the first communication device in a mode for receiving a connection request from the second communication device, after the identifier for presentation is displayed at the display unit; and

the second communication device has;

a second identifier acquisition unit configured to acquire the identifier for presentation displayed at the display unit;

a second identifier generation unit configured to generate the identifier for communication according to the identifier for presentation acquired by the second identifier acquisition unit; and

a connection request unit configured to make the connection request to the first communication device according to the identifier for communication generated by the second identifier generation unit.

2. The communication system of claim 1, wherein the second identifier acquisition unit acquires the identifier for presentation by reading the identifier for presentation in a form of a bar code image by using a bar code reader, or by imaging an Image of the identifier for presentation by using an imaging device.

3. The communication system of claim 1, wherein each one of the first communication device and the second communication device has:

an authentication unit configured to carry out an authentication processing by generating authentication data for authenticating each other according to the identifier for presentation.

4. The communication system of claim 3, wherein the authentication unit carries out authentication by generating an authentication key according to a predetermined number or a randomly generated number or a number generated by a calculation, and carrying out a challenge and response procedure according to the authentication key.

5. The communication system of claim 3, wherein each one of the first communication device and the second communication device has:

a warning unit configured to warn an occurrence of an illegal access when authentication by the authentication unit falls.

6. A communication system comprising a first communication device and a second communication device for carrying out communications by setting up a communication link between the first communication device and the second communication device, wherein:

the first communication device has;

a first identification acquisition unit configured to acquire an Identifier for communication possessed by the first communication device;

a first identifier generation unit configured to generate an identifier for presentation according to at least a part of bits of the identifier for communication;

a display control unit configured to display the Identifier for presentation at a display unit of the first communication device;

a search unit configured to search out the second communication device that acquired the identifier for presentation, after the identifier for presentation is displayed at the display unit; and

a connection request unit configured to make a connection request to the second communication device searched out by the search unit; and

the second communication device has;

a second Identifier acquisition unit configured to acquire the Identifier for presentation displayed at the display unit;

a second identifier generation unit configured to generate the identifier for communication according to the Identifier for presentation acquired by the second Identifier acquisition unit; and

a connection request permission Judgement unit configured to judge whether the connection request from the first communication device should be permitted or not, by comparing the identifier for communication of the first communication device that made the connection request and the identifier for communication generated by the second identifier generation unit.

7. The communication system of claim 6, wherein the second Identifier acquisition unit acquires the identifier for presentation by reading the identifier for presentation in a form of a bar code image by using a bar code reader, or by imaging an image of the identifier for presentation by using an imaging device.

8. The communication system of Claim 6, wherein each one of the first communication device and the second communication device has:

an authentication unit configured to carry out an authentication processing by generating authentication data for authenticating each other according to the identifier for presentation.

9. The communication system of claim 8, wherein the authentication unit carries out authentication by generating an authentication key according to a predetermined number or a randomly generated number or a number generated by a calculation, and carrying out a challenge and response procedure according to the authentication key.

10. The communication system of claim 8, wherein each one of the first communication device and the second communication device has:

a warning unit configured to warn an occurrence of an illegal access when authentication by the authentication unit fails.

11. A radio communication terminal for setting up a communication link with a correspondent radio communication device, the radio communication terminal comprising:

an identification acquisition unit configured to acquire an identifier for communication possessed by the radio communication terminal;

an identifier generation unit configured to generate an identifier for presentation according to at least a part of bits of the identifier for communication;

a display control unit configured to display the identifier for presentation at a display unit of the radio communication terminal; and

a connection mode setting unit configured to set the radio communication terminal in a mode for receiving a connection request from the correspondent radio communication device, after the identifier for presentation is displayed at the display unit.

12. The radio communication terminal of claim 11, further comprising:

an authentication unit configured to carry out an authentication processing by generating authentication data for authenticating the correspondent radio communication device according to the identifier for presentation.

13. A radio communication device for setting up a communication link with a radio communication terminal, the radio communication device comprising:

an identifier acquisition unit configured to acquire an identifier for presentation of the radio communication terminal that is displayed at a display unit of the radio communication terminal;

an identifier generation unit configured to generate an identifier for communication of the radio communication terminal according to the identifier for presentation acquired by the identifier acquisition unit; and

a connection request unit configured to make a connection request to the radio communication terminal according to the identifier for communication generated by the identifier generation unit.

14. The radio communication device of claim 13, wherein the identifier acquisition unit acquires the identifier for presentation by reading the Identifier for presentation in a form of a bar code image by using a bar code reader, or by Imaging an Image of the identifier for presentation by using an imaging device.

15. The radio communication device of claim 13, further comprising:

an authentication unit configured to carry out an authentication processing by generating authentication data for authenticating the radio communication terminal according to the identifier for presentation.

16. A radio communication terminal for setting a communication link with a correspondent radio communication device, the radio communication terminal comprising:

an identification acquisition unit configured to acquire an identifier for communication possessed by the radio communication terminal;

an identifier generation unit configured to generate an identifier for presentation according to at least a part of bits of the identifier for communication;

a display control unit configured to display the identifier for presentation at a display unit of the radio communication terminal;

a search unit configured to search out the correspondent radio communication device that acquired the identifier for presentation, after the identifier for presentation is displayed at the display unit; and

a connection request unit configured to make a connection request to the correspondent radio communication device searched out by the search unit.

17. The radio communication terminal, of claim 16, further comprising:

an authentication unit configured to carry out an authentication processing by generating authentication data for authenticating the correspondent radio communication device according to the identifier for presentation.

18. A radio communication device for setting up a communication link with a radio communication terminal, the radio communication device comprising:

an identifier acquisition unit configured to acquire an identifier for presentation of the radio communication terminal that is displayed at a display unit of the radio communication terminal;

an identifier generation unit configured to generate an identifier for communication of the radio communication terminal according to the identifier for presentation acquired by the identifier acquisition unit; and

a connection request permission Judgement unit configured to judge whether a connection request from the radio communication terminal should be permitted or not, by comparing the identifier for communication of the radio communication terminal that made the connection request and the identifier for communication generated by the identifier generation unit.

19. The radio communication device of claim 18, wherein the second identifier acquisition unit acquires the identifier for presentation by reading the identifier for presentation in a form of a bar code image by using a bar code reader, or by imaging an image of the identifier for presentation by using an imaging device.

20. The radio communication device of claim 18, further comprising:

an authentication unit configured to carry out an authentication processing by generating authentication data for authenticating the radio communication terminal according to the identifier for presentation.