Group management apparatus, and information processing apparatus and method

• US 8,208,631 B2
• Filed: 02/07/2007
• Issued: 06/26/2012
• Est. Priority Date: 08/20/2004
• Status: Expired due to Fees

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Saito, Kentaro
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): KANAAN, SIMON P
• Application Number:
  US11/703,107
• Publication Number:
  US 20070201087A1
• Time in Patent Office: 1,966 Days
• Field of Search: None
• US Class Current: 380/258
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0833 involving conference or group key network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management

Abstract

A group management apparatus which manages a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication detects the position of an information processing apparatus and determines whether the information processing apparatus exists in a predetermined range. When determining that the information processing apparatus exists in the predetermined range, the group management apparatus notifies the information processing apparatus of an encryption key to be used in the group. Upon detecting, based on the position detection result, that the number of information processing apparatuses existing in the predetermined range has changed, the group management apparatus updates the encryption key.

Claims

1. A group management apparatus which manages a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication, the apparatus comprising:

a detection unit configured to detect a position of an information processing apparatus;

a determination unit configured to determine, based on the detection unit, whether the information processing apparatus exists in a predetermined range;

a notification unit configured to notify the information processing apparatus of an encryption key to be used in the group, when the determination unit determines that the information processing apparatus exists in the predetermined range;

a holding unit configured to hold a table indicating an attribute of an information processing apparatus belonging to the group, the attribute including;

a terminal name, a position of the apparatus, identification information, and type information indicative of whether or not the apparatus is a built-in device that is not mobile;

a discrimination unit configured to discriminate whether an information processing apparatus which exists in the predetermined range is a built-in device based on the attribute indicated by the table;

a cancellation unit configured to cancel the group when only an information processing apparatus determined to be a built-in device exists in the predetermined range; and

a generation unit configured to generate a new group of a plurality of information processing apparatuses when it is detected, based on a position detection result obtained by the detection unit, that a number of information processing apparatuses existing in the predetermined range has changed after the cancellation unit cancels the group, the new group using a new encryption key different from the encryption key used before the cancellation unit cancelled the group.

2. The group management apparatus according to claim 1, further comprising an authentication unit configured to perform user authentication when the determination unit determines that the information processing apparatus exists in the predetermined range,

wherein the notification unit notifies the information processing apparatus of an encryption key to be used in the group, when the authentication unit has succeeded authentication.

3. The group management apparatus according to claim 1, further comprising an updating unit configured to update the encryption key every time a predetermined period of time elapses.

4. The group management apparatus according to claim 1, further comprising an updating unit configured to update the encryption key when detecting, based on the position detection result obtained by the detection unit, that the number of information processing apparatuses existing in the predetermined range has changed.

5. The group management apparatus according to claim 1, wherein the cancellation unit cancels the group when no information processing apparatus exists in the predetermined range.

6. The group management apparatus according to claim 1, further comprising

a display unit configured to display information processing apparatuses existing in the predetermined range, and

a selection unit configured to select an information processing apparatus, of the information processing apparatuses displayed by the display unit, which participates in the group.

7. The group management apparatus according to claim 1, wherein the built-in device that is not mobile comprises at least one of copying machine, printer, projector, or electronic white board.

8. The group management apparatus according to claim 1, further comprising:

a monitoring unit configured to monitor the number of the information processing apparatuses within the predetermined range to detect whether the number of the information processing apparatuses increased or decreased;

a first judging unit configured to judge whether or not a group exists in the predetermined range when it is detected that the number of the information processing apparatuses increased; and

a second judging unit configured to judge whether or not there is an information processing apparatus in the predetermined range when it is detected that the number of the information processing apparatuses decreased,

wherein;

the generation unit generates the new group when it is judged by the first judging unit that no group exists in the predetermined range; and

the cancelation unit cancels the group when it is judged by the second judging unit that there is no information processing apparatus in the predetermined range or when an information processing apparatus determined to be a built-in device exists in the predetermined range.

9. A group management apparatus which manages a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication, the apparatus comprising:

a detection unit configured to detect a position of an information processing apparatus;

a determination unit configured to determine, based on the detection unit, whether the information processing apparatus exists in a predetermined range;

an authentication unit configured to perform user authentication using a first encryption key when the determination unit determines that the information processing apparatus exists in the predetermined range;

a notification unit configured to notify the information processing apparatus of a second encryption key to be used in the group, when the authentication unit has succeeded authentication;

a communication unit configured to execute communication in the group using the second encryption key;

a holding unit configured to hold a table indicating an attribute of an information processing apparatus belonging to the group, the attribute including;

a terminal name, a position of the apparatus, identification information, and type information indicative of whether or not the apparatus is a built-in device that is not mobile;

a discrimination unit configured to discriminate whether an information processing apparatus which exists in the predetermined range is a built-in device based on the attribute indicated by the table;

a cancellation unit configured to cancel the group when only an information processing apparatus determined to be a built-in device exists in the predetermined range; and

a generation unit configured to generate a new group of a plurality of information processing apparatuses when it is detected, based on a position detection result obtained by the detection unit, that a number of information processing apparatuses existing in the predetermined range has changed after the cancellation unit cancels the group, the new group using a new encryption key different from the second encryption key used before the cancellation unit cancelled the group.

10. The group management apparatus according to claim 9, further comprising:

a monitoring unit configured to monitor the number of the information processing apparatuses within the predetermined range to detect whether the number of the information processing apparatuses increased or decreased;

a first judging unit configured to judge whether or not a group exists in the predetermined range when it is detected that the number of the information processing apparatuses increased; and

a second judging unit configured to judge whether or not there is an information processing apparatus in the predetermined range when it is detected that the number of the information processing apparatuses decreased,

wherein;

the generation unit generates the new group when it is judged by the first judging unit that no group exists in the predetermined range; and

the cancelation unit cancels the group when it is judged by the second judging unit that there is no information processing apparatus in the predetermined range or when an information processing apparatus determined to be a built-in device exists in the predetermined range.

11. A group management method of managing a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication, the method comprising:

a detection step of detecting a position of an information processing apparatus;

a determination step of determining, based on the detection step, whether the information processing apparatus exists in a predetermined range;

a notification step of notifying the information processing apparatus of an encryption key to be used in the group, when it is determined in the determination step that the information processing apparatus exists in the predetermined range;

a holding step of holding a table indicating an attribute of an information processing apparatus belonging to the group, the attribute including;

a terminal name, a position of the apparatus, identification information, and type information indicative of whether or not the apparatus is a built-in device that is not mobile;

a discrimination step of discriminating whether an information processing apparatus which exists in the predetermined range is a built-in device based on the attribute indicated by the table;

a cancellation step of canceling the group when only an information processing apparatus determined to be a built-in device exists in the predetermined range; and

a generation step of generating a new group of a plurality of information processing apparatuses when it is detected, based on a position detection result obtained in the detection step, that a number of information processing apparatuses existing in the predetermined range has changed after the group is cancelled in the cancellation step, the new group using a new encryption key different from the encryption key used before the group is cancelled in the cancellation step.

12. The group management method according to claim 11, further comprising:

a monitoring step of monitoring the number of the information processing apparatuses within the predetermined range to detect whether the number of the information processing apparatuses increased or decreased;

a first judging step of judging whether or not a group exists in the predetermined range when it is detected that the number of the information processing apparatuses increased; and

a second judging step of judging whether or not there is an information processing apparatus in the predetermined range when it is detected that the number of the information processing apparatuses decreased,

wherein;

the generation step generates the new group when it is judged in the first judging step that no group exists in the predetermined range; and

the cancellation step cancels the group when it is judged in the second judging step that there is no information processing apparatus in the predetermined range or when an information processing apparatus determined to be a built-in device exists in the predetermined range.

13. A group management method of managing a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication, the method comprising:

a detection step of detecting a position of an information processing apparatus;

a determination step of determining, based on the detection step, whether the information processing apparatus exists in a predetermined range;

an authentication step of performing user authentication using a first encryption key when it is determined in the determination step that the information processing apparatus exists in the predetermined range;

a notification step of notifying the information processing apparatus of a second encryption key to be used in the group, when authentication has succeeded in the authentication step;

a communication step of executing communication in the group using the second encryption key;

a holding step of holding a table indicating an attribute of an information processing apparatus belonging to the group, the attribute including;

a terminal name, a position of the apparatus, identification information, and type information indicative of whether or not the apparatus is a built-in device that is not mobile;

a discrimination step of discriminating whether an information processing apparatus which exists in the predetermined range is a built-in device based on the attribute indicated by the table;

a cancellation step of canceling the group when only an information processing apparatus determined to be a built-in device exists in the predetermined range; and

a generation step of generating a new group of a plurality of information processing apparatuses when it is detected, based on a position detection result obtained in the detection step, that a number of information processing apparatuses existing in the predetermined range has changed after the group is cancelled in the cancellation step, the new group using a new encryption key different from the second encryption key used before the group is cancelled in the cancellation step.

14. The group management method according to claim 13, further comprising:

a monitoring step of monitoring the number of the information processing apparatuses within the predetermined range to detect whether the number of the information processing apparatuses increased or decreased;

a first judging step of judging whether or not a group exists in the predetermined range when it is detected that the number of the information processing apparatuses increased; and

a second judging step of judging whether or not there is an information processing apparatus in the predetermined range when it is detected that the number of the information processing apparatuses decreased,

wherein;

the generation step generates the new group when it is judged in the first judging step that no group exists in the predetermined range; and

the cancellation step cancels the group when it is judged in the second judging step that there is no information processing apparatus in the predetermined range or when an information processing apparatus determined to be a built-in device exists in the predetermined range.

15. A computer program stored on a computer-readable storage medium which causes a computer to execute an information processing method of managing a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication, the information processing method comprising:

a detection step of detecting a position of an information processing apparatus;

a determination step of determining, based on the detection step, whether the information processing apparatus exists in a predetermined range;

a notification step of notifying the information processing apparatus of an encryption key to be used in the group, when it is determined in the determination step that the information processing apparatus exists in the predetermined range;

a holding step of holding a table indicating an attribute of an information processing apparatus belonging to the group, the attribute including;

a terminal name, a position of the apparatus, identification information, and type information indicative of whether or not the apparatus is a built-in device that is not mobile;

a discrimination step of discriminating whether an information processing apparatus which exists in the predetermined range is a built-in device based on the attribute indicated by the table;

a cancellation step of canceling the group when only an information processing apparatus determined to be a built-in device exists in the predetermined range; and

a generation step of generating a new group of a plurality of information processing apparatuses when it is detected, based on a position detection result obtained in the detection step, that a number of information processing apparatuses existing in the predetermined range has changed after the group is cancelled in the cancellation step, the new group using a new encryption key different from the encryption key used before the group is cancelled in the cancellation step.

16. The computer program according to claim 15, the information processing method further comprising:

a monitoring step of monitoring the number of the information processing apparatuses within the predetermined range to detect whether the number of the information processing apparatuses increased or decreased;

a first judging step of judging whether or not a group exists in the predetermined range when it is detected that the number of the information processing apparatuses increased; and

a second judging step of judging whether or not there is an information processing apparatus in the predetermined range when it is detected that the number of the information processing apparatuses decreased,

wherein;

the generation step generates the new group when it is judged in the first judging step that no group exists in the predetermined range; and

the cancellation step cancels the group when it is judged in the second judging step that there is no information processing apparatus in the predetermined range or when an information processing apparatus determined to be a built-in device exists in the predetermined range.

17. A computer program stored on a computer-readable storage medium which causes a computer to execute an information processing method of managing a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication, the information processing method comprising:

a detection step of detecting a position of an information processing apparatus;

a determination step of determining, based on the detection step, whether the information processing apparatus exists in a predetermined range;

an authentication step of performing user authentication using a first encryption key when it is determined in the determination step that the information processing apparatus exists in the predetermined range;

a notification step of notifying the information processing apparatus of a second encryption key to be used in the group, when authentication has succeeded in the authentication step;

a communication step of executing communication in the group using the second encryption key;

a holding step of holding a table indicating an attribute of an information processing apparatus belonging to the group, the attribute including;

a terminal name, a position of the apparatus, identification information, and type information indicative of whether or not the apparatus is a built-in device that is not mobile;

a discrimination step of discriminating whether an information processing apparatus which exists in the predetermined range is a built-in device based on the attribute indicated by the table;

a cancellation step of canceling the group when only an information processing apparatus determined to be a built-in device exists in the predetermined range; and

a generation step of generating a new group of a plurality of information processing apparatuses when it is detected, based on a position detection result obtained in the detection step, that a number of information processing apparatuses existing in the predetermined range has changed after the group is cancelled in the cancellation step, the new group using a new encryption key different from the second encryption key used before the group is cancelled in the cancellation step.

18. The computer program according to claim 17, the information processing method further comprising:

a monitoring step of monitoring the number of the information processing apparatuses within the predetermined range to detect whether the number of the information processing apparatuses increased or decreased;

a first judging step of judging whether or not a group exists in the predetermined range when it is detected that the number of the information processing apparatuses increased; and

a second judging step of judging whether or not there is an information processing apparatus in the predetermined range when it is detected that the number of the information processing apparatuses decreased,

wherein;

the generation step generates the new group when it is judged in the first judging step that no group exists in the predetermined range; and

the cancellation step cancels the group when it is judged in the second judging step that there is no information processing apparatus in the predetermined range or when an information processing apparatus determined to be a built-in device exists in the predetermined range.

19. A computer-readable storage medium storing a computer program which causes a computer to execute an information processing method of managing a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication, the information processing method comprising:

a detection step of detecting a position of an information processing apparatus;

a determination step of determining, based on the detection step, whether the information processing apparatus exists in a predetermined range;

a notification step of notifying the information processing apparatus of an encryption key to be used in the group, when it is determined in the determination step that the information processing apparatus exists in the predetermined range;

a holding step of holding a table indicating an attribute of an information processing apparatus belonging to the group, the attribute including;

a terminal name, a position of the apparatus, identification information, and type information indicative of whether or not the apparatus is a built-in device that is not mobile;

a discrimination step of discriminating whether an information processing apparatus which exists in the predetermined range is a built-in device based on the attribute indicated by the table;

a cancellation step of canceling the group when only an information processing apparatus determined to be a built-in device exists in the predetermined range; and

a generation step of generating a new group of a plurality of information processing apparatuses when it is detected, based on a position detection result obtained in the detection step, that a number of information processing apparatuses existing in the predetermined range has changed after the group is cancelled in the cancellation step, the new group using a new encryption key different from the encryption key used before the group is cancelled in the cancellation step.

20. The computer-readable storage medium according to claim 19, the information processing method further comprising:

a monitoring step of monitoring the number of the information processing apparatuses within the predetermined range to detect whether the number of the information processing apparatuses increased or decreased;

a first judging step of judging whether or not a group exists in the predetermined range when it is detected that the number of the information processing apparatuses increased; and

a second judging step of judging whether or not there is an information processing apparatus in the predetermined range when it is detected that the number of the information processing apparatuses decreased,

wherein;

the generation step generates the new group when it is judged in the first judging step that no group exists in the predetermined range; and

the cancellation step cancels the group when it is judged in the second judging step that there is no information processing apparatus in the predetermined range or when an information processing apparatus determined to be a built-in device exists in the predetermined range.

21. A computer-readable storage medium storing a computer program which causes a computer to execute an information processing method of managing a group in which one or a plurality of information processing apparatuses connect to each other by wireless communication, the information processing method comprising:

a detection step of detecting a position of an information processing apparatus;

a determination step of determining, based on the detection step, whether the information processing apparatus exists in a predetermined range;

an authentication step of performing user authentication using a first encryption key when it is determined in the determination step that the information processing apparatus exists in the predetermined range;

a notification step of notifying the information processing apparatus of a second encryption key to be used in the group, when authentication has succeeded in the authentication step;

a communication step of executing communication in the group using the second encryption key;

a holding step of holding a table indicating an attribute of an information processing apparatus belonging to the group, the attribute including;

a terminal name, a position of the apparatus, identification information, and type information indicative of whether or not the apparatus is a built-in device that is not mobile;

a discrimination step of discriminating whether an information processing apparatus which exists in the predetermined range is a built-in device based on the attribute indicated by the table;

a cancellation step of canceling the group when only an information processing apparatus determined to be a built-in device exists in the predetermined range; and

a generation step of generating a new group of a plurality of information processing apparatuses when it is detected, based on a position detection result obtained in the detection step, that a number of information processing apparatuses existing in the predetermined range has changed after the group is cancelled in the cancellation step, the new group using a new encryption key different from the second encryption key used before the group is cancelled in the cancellation step.

22. The computer-readable storage medium according to claim 21, the information processing method further comprising:

a monitoring step of monitoring the number of the information processing apparatuses within the predetermined range to detect whether the number of the information processing apparatuses increased or decreased;

a first judging step of judging whether or not a group exists in the predetermined range when it is detected that the number of the information processing apparatuses increased; and

a second judging step of judging whether or not there is an information processing apparatus in the predetermined range when it is detected that the number of the information processing apparatuses decreased,

wherein;

the generation step generates the new group when it is judged in the first judging step that no group exists in the predetermined range; and

the cancellation step cancels the group when it is judged in the second judging step that there is no information processing apparatus in the predetermined range or when an information processing apparatus determined to be a built-in device exists in the predetermined range.