Communication apparatus, control method, and storage medium

• US 9,843,444 B2
• Filed: 04/09/2013
• Issued: 12/12/2017
• Est. Priority Date: 05/01/2012
• Status: Active Grant

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Goto, Fumihide
• Primary Examiner(s): VOSTAL, ONDREJ C
• Application Number:
  US13/859,557
• Publication Number:
  US 20130297938A1
• Time in Patent Office: 1,708 Days
• Field of Search: 713171
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

Disclosed is a communication apparatus for executing processing for sharing an encryption key between itself and another party'"'"'s communication apparatus, wherein the communication apparatus executes the processing, respectively at least one time, as an authenticating apparatus and an authenticated apparatus. The communication apparatus determines which encryption key of an encryption key provided by this communication apparatus and an encryption key provided by the other party'"'"'s communication apparatus is the encryption key used in common by this communication apparatus and the other party'"'"'s communication apparatus, and decides, in accordance with result of the determination, which of this communication apparatus and the other party'"'"'s communication apparatus is to be made the authenticating apparatus first.

Claims

1. A communication apparatus, comprising:

a CPU coupled to a memory, wherein the CPU controls the communication apparatus to;

perform a first process for sharing a first encryption key between the communication apparatus and a second communication apparatus, with the first process initiated by the second communication apparatus;

perform a second process for transmitting a second encryption key without activating the first encryption key to the second communication apparatus, with the second process initiated by the communication apparatus, in a case where the first encryption key is shared;

perform a third process for transmitting the second encryption key encrypted by activating the first encryption key to the second communication apparatus, with the third process initiated by the communication apparatus, in a case where an error occurs in the second process, and not perform the third process in a case where the second process succeeds; and

activate the second encryption key for communication between the communication apparatus and the second communication apparatus after sharing of the second encryption key.

2. The apparatus according to claim 1, wherein the first process, the second process, and the third process are four-way handshake for sharing a unicast key and a group key.

3. The apparatus according to claim 1, wherein an apparatus starting the first process differs from an apparatus starting the second process, and wherein the apparatus starting the second process is the same as an apparatus starting the third process.

4. The apparatus according to claim 1, wherein the CPU further controls the communication apparatus to determine whether the communication apparatus operates as an authenticating side apparatus or an authenticated side apparatus in the first process.

5. The apparatus according to claim 1, wherein the first process, the second process and the third process are compliant with IEEE802.11 standard series.

6. The apparatus according to claim 1, wherein the first encryption key and the second encryption key are encryption keys for performing wireless communication in an ad hoc mode compliant with IEEE802.11 standard series.

7. A control method of a communication apparatus, comprising:

performing a first process for sharing a first encryption key between the communication apparatus and a second communication apparatus, with the first process initiated by the second communication apparatus;

performing a second process for transmitting a second encryption key without activating the first encryption key to the second communication apparatus, with the second process initiated by the communication apparatus, in a case where the first encryption key is shared;

in a case where an error occurs in the second process, performing a third process for transmitting the second encryption key encrypted by activating the first encryption key to the second communication apparatus, with the third process initiated by the communication apparatus, while the third process is not performed in a case where the second process succeeds; and

activating the second encryption key for communication between the communication apparatus and the other communication apparatus after sharing of the second encryption key.

8. A non-statutory computer-readable storage medium storing a computer program for causing a computer to perform a method comprising:

performing a first process for sharing a first encryption key between the communication apparatus and a second communication apparatus, with the first process initiated by the second communication apparatus;

performing a second process for transmitting a second encryption key without activating the first encryption key to the second communication apparatus, with the second process initiated by the communication apparatus, in a case where the first encryption key is shared;

in a case where an error occurs in the second process, performing a third process for transmitting the second encryption key encrypted by activating the first encryption key to the second communication apparatus, with the third process initiated by the communication apparatus, while the third process is not performed in a case where the second process succeeds; and

activating the second encryption key for communication between the communication apparatus and the second communication apparatus after sharing of the second encryption key.