Group management apparatus, and information processing apparatus and method

• US 20070201087A1
• Filed: 02/07/2007
• Published: 08/30/2007
• Est. Priority Date: 08/20/2004
• Status: Active Grant

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushik Kiasha
• Inventors: Saito, Kentaro
• Granted Patent: US 8,208,631 B2
• Time in Patent Office: Days
• US Class Current: 358/1.150
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0833 involving conference or group key network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management

Abstract

A group management apparatus which manages a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication detects the position of an information processing apparatus and determines whether the information processing apparatus exists in a predetermined range. When determining that the information processing apparatus exists in the predetermined range, the group management apparatus notifies the information processing apparatus of an encryption key to be used in the group. Upon detecting, based on the position detection result, that the number of information processing apparatuses existing in the predetermined range has changed, the group management apparatus updates the encryption key.

Claims

1. A group management apparatus which manages a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication, said apparatus comprising:

a detection unit adapted to detect a position of an information processing apparatus;

a determination unit adapted to determine, based on a position detection result obtained by said detection unit, whether the information processing apparatus exists in a predetermined range;

a notification unit adapted to notify the information processing apparatus of an encryption key to be used in the group, when said determination unit determines that the information processing apparatus exists in the predetermined range; and

an updating unit adapted to update the encryption key when detecting, based on a position detection result obtained by said detection unit, that the number of information processing apparatuses existing in the predetermined range has changed.

2. The group management apparatus according to claim 1, further comprising an authentication unit adapted to perform user authentication when said determination unit determines that the information processing apparatus exists in the predetermined range,

wherein said notification unit notifies the information processing apparatus of an encryption key to be used in the group, when said authentication unit has succeeded authentication.

3. The group management apparatus according to claim 1, wherein said updating unit updates the encryption key every time a predetermined period of time elapses.

4. The group management apparatus according to claim 1, further comprising a cancellation unit adapted to cancel the group based on a position detection result obtained by said detection unit.

5. The group management apparatus according to claim 4, wherein said cancellation unit cancels the group when no information processing apparatus exists in the predetermined range.

6. The group management apparatus according to claim 4, comprising a discrimination unit adapted to discriminate whether an information processing apparatus in the predetermined range is a built-in device,

wherein said cancellation unit cancels the group when only an information processing apparatus determined to be a built-in device exists in the predetermined range.

7. The group management apparatus according to claim 1, further comprising

a display unit adapted to display information processing apparatuses existing in the predetermined range, and

a selection unit adapted to select an information processing apparatus, of the information processing apparatuses displayed by said display unit, which participates in the group.

8. A group management apparatus which manages a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication, said apparatus comprising:

a detection unit adapted to detect a position of an information processing apparatus;

a determination unit adapted to determine, based on a position detection result obtained by said detection unit, whether the information processing apparatus exists in a predetermined range;

an authentication unit adapted to perform user authentication using a first encryption key when said determination unit determines that the information processing apparatus exists in the predetermined range;

a notification unit adapted to notify the information processing apparatus of a second encryption key to be used in the group, when said authentication unit has succeeded authentication; and

a communication unit adapted to execute communication in the group using the second encryption key.

9. An information processing apparatus which can perform wireless communication with another information processing apparatus, said apparatus comprising:

an authentication unit adapted to perform authentication by using a first encryption key received from a management apparatus which manages a group;

an acquisition unit adapted to acquire, from the management apparatus, a second encryption key for encrypting communication in the group when said authentication unit has succeeded authentication; and

a communication unit adapted to execute communication in the group using the second encryption key.

10. The information processing apparatus according to claim 9, further comprising

a determination unit adapted to determine whether an encryption key used for encryption of communication in the group has been updated, when data is to be transmitted/received to/from an external device participating in the group, and

a requesting unit adapted to request a new second encryption key from the management apparatus, when the second encryption key has been updated.

11. The information processing apparatus according to claim 9, further comprising an inhibition unit adapted to, when data is to be transmitted to an external device participating in the group, inhibit data transmission when the management apparatus is requested to authenticate a position of the information processing apparatus, and authentication of the position fails.

12. An information processing apparatus which can perform wireless communication with another information processing apparatus, said apparatus comprising:

a reception unit adapted to receive an encryption key to be used in the group from a management apparatus which manages the group; and

a communication unit adapted to execute communication in the group by using the encryption key,

wherein when the number of information processing devices existing in a predetermined range changes, said communication unit executes communication in the group using an updated encryption key.

13. A group management method of managing a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication, said method comprising:

a detection step of detecting a position of an information processing apparatus;

a determination step of determining, based on the detection step, whether the information processing apparatus exists in a predetermined range;

a notification step of notifying the information processing apparatus of an encryption key to be used in the group, when it is determined in the determination step that the information processing apparatus exists in the predetermined range; and

an updating step of updating the encryption key when detecting, based on a position detection result obtained in the detection step, that the number of information processing apparatuses existing in the predetermined range has changed.

14. A group management method of managing a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication, said method comprising:

a detection step of detecting a position of an information processing apparatus;

a determination step of determining, based on the detection step, whether the information processing apparatus exists in a predetermined range;

an authentication step of performing user authentication using a first encryption key when it is determined in the determination step that the information processing apparatus exists in the predetermined range;

a notification step of notifying the information processing apparatus of a second encryption key to be used in the group, when authentication has succeeded in the authentication step; and

a communication step of executing communication in the group using the second encryption key.

15. An information processing method in an information processing apparatus which can perform wireless communication with another information processing apparatus, said method comprising:

an authentication step of performing authentication using a first encryption key received from a management apparatus which manages a group;

an acquisition step of acquiring, from the management apparatus, a second encryption key for encrypting communication in the group when authentication has succeeded in the authentication step; and

a communication step of executing communication in the group using the second encryption key.

16. An information processing method in an information processing apparatus which can perform wireless communication with another information processing apparatus, said method comprising:

a reception step of receiving an encryption key to be used in the group from a management apparatus which manages the group; and

a communication step of executing communication in the group by using the encryption key,

wherein when the number of information processing devices existing in a predetermined range changes, communication in the group is executed using an updated encryption key in the communication step.

17. A computer program which causes a computer to execute an information processing method of managing a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication, the information processing method comprising:

a detection step of detecting a position of an information processing apparatus;

a determination step of determining, based on the detection step, whether the information processing apparatus exists in a predetermined range;

a notification step of notifying the information processing apparatus of an encryption key to be used in the group, when it is determined in the determination step that the information processing apparatus exists in the predetermined range; and

an updating step of updating the encryption key when detecting, based on a position detection result obtained in the detection step, that the number of information processing apparatuses existing in the predetermined range has changed.

18. A computer program which causes a computer to execute an information processing method of managing a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication, the information processing method comprising:

a detection step of detecting a position of an information processing apparatus;

a determination step of determining, based on the detection step, whether the information processing apparatus exists in a predetermined range;

an authentication step of performing user authentication using a first encryption key when it is determined in the determination step that the information processing apparatus exists in the predetermined range;

a notification step of notifying the information processing apparatus of a second encryption key to be used in the group, when authentication has succeeded in the authentication step; and

a communication step of executing communication in the group using the second encryption key.

19. A computer program which causes a computer to execute an information processing method in an information processing apparatus which can perform wireless communication with another information processing apparatus, the information processing method comprising:

an authentication step of performing authentication using a first encryption key received from a management apparatus which manages a group;

an acquisition step of acquiring, from the management apparatus, a second encryption key for encrypting communication in the group when authentication has succeeded in the authentication step; and

a communication step of executing communication in the group using the second encryption key.

20. A computer program which causes a computer to execute an information processing method in an information processing apparatus which can perform wireless communication with another information processing apparatus, the information processing method comprising:

a reception step of receiving an encryption key to be used in the group from a management apparatus which manages the group; and

a communication step of executing communication in the group using the encryption key,

wherein when the number of information processing devices existing in a predetermined range changes, communication in the group is executed using an updated encryption key in the communication step.

21. A storage medium storing a computer program which causes a computer to execute an information processing method of managing a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication, the information processing method comprising:

a detection step of detecting a position of an information processing apparatus;

a determination step of determining, based on the detection step, whether the information processing apparatus exists in a predetermined range;

a notification step of notifying the information processing apparatus of an encryption key to be used in the group, when it is determined in the determination step that the information processing apparatus exists in the predetermined range; and

an updating step of updating the encryption key when detecting, based on a position detection result obtained in the detection step, that the number of information processing apparatuses existing in the predetermined range has changed.

22. A storage medium storing a computer program which causes a computer to execute an information processing method of managing a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication, the information processing method comprising:

a detection step of detecting a position of an information processing apparatus;

a determination step of determining, based on the detection step, whether the information processing apparatus exists in a predetermined range;

an authentication step of performing user authentication using a first encryption key when it is determined in the determination step that the information processing apparatus exists in the predetermined range;

a notification step of notifying the information processing apparatus of a second encryption key to be used in the group, when authentication has succeeded in the authentication step; and

a communication step of executing communication in the group using the second encryption key.

23. A storage medium storing a computer program which causes a computer to execute an information processing method in an information processing apparatus which can perform wireless communication with another information processing apparatus, the information processing method comprising:

an authentication step of performing authentication using a first encryption key received from a management apparatus which manages a group;

an acquisition step of acquiring, from the management apparatus, a second encryption key for encrypting communication in the group when authentication has succeeded in the authentication step; and

a communication step of executing communication in the group using the second encryption key.

24. A storage medium storing a computer program which causes a computer to execute an information processing method in an information processing apparatus which can perform wireless communication with another information processing apparatus, the information processing method comprising:

a reception step of receiving an encryption key to be used in the group from a management apparatus which manages the group; and

a communication step of executing communication in the group by using the encryption key,

wherein when the number of information processing devices existing in a predetermined range changes, communication in the group is executed using an updated encryption key in the communication step.