WO2007088671A1

WO2007088671A1 - Lan system, lan setting device, and lan setting method

Info

Publication number: WO2007088671A1
Application number: PCT/JP2006/323816
Authority: WO
Inventors: Hiromi Kondo; Masami Suzuki
Original assignee: Pioneer Corporation
Priority date: 2006-01-31
Filing date: 2006-11-29
Publication date: 2007-08-09

Abstract

A LAN setting device for more easily performing LAN setting. A transmission-side LAN setting device (TX) is provided to the device on the access point side; a reception-side LAN setting device (RX) is provided to the device on the station side. The transmission-side LAN setting device (TX) generates at least one encrypted shared key (KEY) by encrypting a shared key (WEP) according to the transmission-side identification information IDtx created from the information on the physical feature presented by the user, transmits (distributes) the encrypted shared keys (KEY) as a encrypted shared key bunch (KEYT) to the station-side device. The reception-side LAN setting device (RX) decrypts the encrypted shared keys (KEY) included in the received encrypted shared key bunch (KEYT) according to the reception-side identification information IDrx created from the information on the physical feature presented by the user and thereby reproduces the shared key (WEP). With this, the same shared key (WEP) as the access point side device and the station side device is set, and the user can easily perform LAN setting.

Description

Specification

LAN system, LAN setting device and LAN setting method

Technical field

TECHNICAL FIELD [0001] The present invention relates to a LAN system that encrypts and communicates information between a plurality of devices, and in particular, a LAN setting device that sets setting information such as a shared key necessary for encryption and decryption of information in each device. And LAN setting method.

Background art

In recent years, a local area network (LAN) that connects a plurality of computers, printers, and other devices so as to be communicable and realizes a highly convenient network has become widespread. In addition to LANs for mainstream office equipment, it is developing into a LAN that can connect devices other than office equipment such as audio equipment and video equipment to the network.

[0003] With the widespread use of such LANs, there is a need for technology that can secure a secure LAN environment that is convenient and secure for users. For example, there has been proposed in Patent Document 1 .

[0004] In the technique of Patent Document 1, only a specific administrator manages a predetermined recording medium (memory card or the like), and when an access point and a device on the terminal side are connected via a network via a wireless LAN. The following operations are to be performed.

[0005] First, as schematically shown in Fig. 1 (a), an administrator attaches a recording medium to a slot provided in a parent device (such as a personal computer) as an access point, and performs keyboard input and mouse operation. When you enter a password (identification information) that also has characters and symbolic power, the access point automatically generates setting information such as a WEP (Wired Equivalent Privicy) key that is a shared key based on the password and saves it as internal information At the same time, it is stored in a recording medium.

[0006] Next, as shown in Fig. 1 (b), when the administrator removes the recording medium from the access point and inserts it into the slot of the terminal device, the device automatically records the recording medium force WEP key. Is read and saved as internal information. [0007] As described above, when the administrator inserts the recording medium into the access point and inputs the password, and then attaches the recording medium to the terminal device, the setting information such as the WEP key that is the shared key is stored in the access point. Therefore, encryption communication can be performed between the access point and the device using a common WEP key.

[0008] According to the conventional technology that can be used, an administrator or the like can easily set up a LAN between an access point and a terminal device using a recording medium, and only a specific administrator can However, it is said that security can be ensured by appropriately managing the recording media.

Patent Document 1: Japanese Patent Application Laid-Open No. 2005-191989

Disclosure of the invention

Problems to be solved by the invention

[0010] However, in the above conventional technique, only a specific administrator needs to manage the recording medium, and furthermore, only the administrator needs to perform LAN setting between the access point and the device on the terminal side.

There are problems such as inconvenience for other LAN users.

[0011] For example, in the case of a home LAN that is used only by family members when devices such as audio devices and video devices are connected to a network in a limited house, only a specific family member becomes an administrator and becomes a recording medium. Since no one in the family can set up the LAN, it is inconvenient for the specific person who manages the recording medium, and inconvenient for the rest of the family.

[0012] To give a more specific example, it is inconvenient if a family member tries to add a new device by managing the recording media!

[0013] In addition, in order to prevent secret leaks to third parties other than family members, family members other than the administrator can easily perform setting operations even if they try to update the setting information such as shared keys as appropriate. It is inconvenient because you cannot.

[0014] Also, when performing encrypted communication between devices such as audio devices and video devices via an access point, not only the administrator but also each family member operates the device, for example, a remote control It is necessary to enter the password as identification information, but if the password is forgotten, the desired operation cannot be performed and it is inconvenient because the LAN between the access point and the device must be set again. . [0015] In addition, it is troublesome for the user to input and set a shared key or the like by inputting a password having characters and symbol power, and there is a problem that good operability cannot be obtained.

[0016] The present invention has been made in view of such a conventional problem, and provides a LAN system, a LAN setting device, and a LAN setting method capable of more easily performing LAN settings and ensuring security. The purpose is to provide.

Means for solving the problem

[0017] The invention described in claim 1 is configured by connecting one or more devices including a transmission-side LAN unit and one or more devices including a reception-side LAN setting unit by wire or wirelessly.

In the LAN system, the transmission-side LAN setting means detects shared key generation means for generating a shared key, and physical characteristics of one or more users as unique information, and transmits the transmission-side identification information from the unique information. A transmission side unique information input means for generating the encryption key and the transmission side identification information to encrypt the shared key to generate an encryption key and configure the generated one or more encryption key sharing keys Cryptographic key sharing key generation means for generating a cryptographic key sharing key ring as an element, and transmission for transmitting the encrypted shared key ring to one or more devices comprising the receiving LAN setting means The receiving side LAN setting means detects the physical characteristics of one or more users as unique information, and generates receiving side identification information from the unique information. And the transmitter of the device comprising the transmission side LAN setting means Receiving means for receiving the encrypted shared key ring transmitted from the receiver, and one or more encrypted shared keys included in the encrypted shared key ring received by the receiving means for identifying the receiving side And a shared key decrypting unit that reproduces the shared key generated by one or more devices including the transmission side LAN setting unit by decrypting with information.

[0018] The invention described in claim 3 is a LAN setting device provided in a plurality of devices for constructing a wired or wireless LAN system, and includes a shared key generating means for generating a shared key, and one or more users A transmitting-side unique information input unit that detects physical characteristics as unique information and generates transmitting-side identification information from the unique information, and encrypts the shared key with the transmitting-side identification information to obtain an encrypted shared key. Generate one or more generated encrypted shared keys An encrypted shared key ring generating unit that generates an encrypted shared key ring as a constituent element, and a transmitting unit that transmits the encrypted shared key ring to a device on the receiving side. .

[0019] The invention according to claim 5 is a LAN setting device provided in a plurality of devices that construct a wired or wireless LAN system, and detects physical characteristics of one or more users as unique information, Receiving-side unique information input means for generating receiving-side identification information from unique information; receiving means for receiving an encrypted shared key bundle transmitted from another device; and the encryption received by the receiving means Shared key decryption means for reproducing the shared key generated by the other device by decrypting one or more of the encrypted shared keys included in the shared key ring with the receiving side identification information It is characterized by.

[0020] The invention according to claim 6 includes at least one device including a transmission-side LAN setting means, and a reception side.

A LAN setting method in a LAN system configured by connecting one or more devices having a LAN setting means by wire or wirelessly, wherein the transmitting side LAN setting means generates a shared key for generating a shared key. A step of detecting the physical characteristics of each of the one or more users as unique information, generating the unique information power transmitting side identification information, and encrypting the shared key by the transmitting side identification information. Generating an encrypted shared key, generating an encrypted shared key bundle having one or more of the generated encrypted shared keys as components, and the encrypted shared key bundle Transmitting to the receiving device, and the receiving LAN setting means detects physical characteristics of one or more users as unique information and receives from the unique information. Side identification information is generated. An information input step, a reception step of receiving the encrypted shared key ring transmitted from the device on the transmission side, and one or more of the ciphers included in the encrypted shared key ring received in the reception step And a shared key decrypting step of reproducing the shared key generated by the device on the transmitting side by decrypting the encrypted shared key with the receiving side identification information.

[0021] The invention described in claim 7 is a LAN setting method for setting a plurality of devices that construct a wired or wireless LAN system, and detects physical characteristics of one or more users as specific information. And transmitting side unique information input for generating the transmitting side identification information. Generating an encrypted shared key by encrypting the shared key using the transmitting side identification information and generating one or more generated encrypted shared keys as a constituent element An encrypted shared key bundle generating step; and a transmitting step of transmitting the encrypted shared key bundle to a receiving device.

[0022] The invention according to claim 8 is a LAN setting method for setting a plurality of devices for constructing a wired or wireless LAN system, and detects physical characteristics of one or more users as specific information. A receiving-side unique information input step for generating receiving-side identification information from the unique information, a receiving step for receiving an encrypted shared key bundle transmitted from another device, and the encryption received in the receiving step. Having a shared key decryption step of reproducing the shared key generated by the other device by decrypting one or more encrypted shared keys included in the shared key ring with the receiving side identification information. Features.

Brief Description of Drawings

[0023] FIG. 1 is an explanatory diagram for outlining the configuration of a conventional LAN system.

FIG. 2 is an explanatory diagram outlining the configuration of the LAN system according to the embodiment of the present invention.

FIG. 3 is a block diagram showing configurations of a transmission side LAN setting device and a reception side LAN setting device according to an embodiment of the present invention.

圆 4] It is a block diagram showing the configuration of the transmission side LAN setting device and the reception side LAN setting device according to the embodiment.

FIG. 5 is a flowchart for explaining an operation example of the transmission side LAN setting device and the reception side LAN setting device shown in FIG. 4.

BEST MODE FOR CARRYING OUT THE INVENTION

A preferred embodiment of the present invention will be described with reference to FIGS. 2 and 3.

First, an overview of the LAN system in this embodiment will be described with reference to FIG.

In FIG. 2, the LAN system 1 includes a personal computer 2 having a communication function using a wired LAN or a wireless LAN, a tuner 3 that receives a television broadcast, a printer 4, a DVD (Digital Versatile Disk), a hard disk, and the like. Record on storage media It is possible to construct a wired LAN or wireless LAN between multiple devices such as recording and playback devices 5 and 6 that perform video recording and the like.

[0026] In the case of a wireless LAN system, at least one of the devices constituting the wireless LAN system is operated as an access point or a master device for wireless communication control, and the remaining devices are used as devices on the terminal side. It is possible to function as a (station). Multiple devices can be connected to the network.

[0027] Also, in the case of a wired LAN system, it is possible to operate at least one of the devices constituting the wired LAN system as a master device for communication control, and a LAN connected via Ethernet. Multiple devices can be connected to the network via a wired connection, such as a system, a LAN system connected by a power line, a LAN system connected by an antenna coaxial line, and the like.

Each device may be provided with a transmission side LAN setting device TX or a reception side LAN setting device RX shown in FIG. 3 according to the function of each device.

[0029] For example, a device that performs only passive operations, such as the printer 4 that receives information from other devices and performs printing, can at least function as a station. A receiving side LAN setting device RX is provided. In addition, a transmitter-side LAN setting device TX is provided for devices such as tuner 3 that exclusively transmit information to other devices. In addition, devices that have the function of receiving information from other devices such as personal computers 2 and recording / reproducing devices 5 and 6 and transmitting information to other devices also function as access points and master devices. The receiving side LAN setting device RX is provided in addition to the transmitting side LAN setting device TX that makes it possible to demonstrate the above. In addition, a dedicated machine that functions as an access point or a master device is equipped with a sending LAN setting device TX and a receiving LAN setting device RX.

[0030] A device including at least the transmission-side LAN setting device TX can function as an access point or a master device.

[0031] However, such a configuration is merely an example, and when each device is commercialized, the transmission side The LAN setting device TX or the receiving side LAN setting device RX can be combined in various ways, and at least a device including the transmitting side LAN setting device TX can function as an access point or a master device.

Next, the configuration of the transmission-side LAN setting device TX will be described with reference to FIG.

[0033] The transmission-side LAN setting device TX is configured to include a unique information input unit 10, a shared key generation unit 11, an encryption key sharing key bundle generation unit 12, and a transmission unit 13. The shared key bundle KEY T is broadcast or transmitted by wire or wireless to another device that is provided with at least the receiving-side LAN setting device RX and can function as a station.

[0034] Here, the unique information input unit (hereinafter referred to as "transmitter-specific information input unit") 10 is a human physical feature (for example, fingerprint, iris, signature, A detection sensor that optically detects or detects voice (information such as a face, speech voice, etc.) and a feature extraction unit that extracts feature information from the detection output of the detection sensor and uses it as identification information IDtx Configured.

That is, the transmission side unique information input unit 10 detects physical feature information that is unique information of each person, and the feature of the detected unique information is a predetermined feature extraction algorithm (in other words, For example, identification information (hereinafter referred to as “transmission side identification information”) IDtx for identifying each person who has operated the device is generated by performing extraction according to feature extraction calculation processing. In addition, when one or more users present (input) the physical characteristics of one or more people, the sender-specific information input unit 10 receives the physical characteristics of each human being. Each time a sender identification information IDtx is generated.

[0036] Shared key generation unit 11 generates a random number when the power is turned on and becomes operable, and generates a shared key WEP based on the generated random number. That is, the shared key generation unit 11 includes an “encryption key” for the encryption unit 100 to encrypt a so-called plaintext into a ciphertext and a “decryption key” for the other device to receive and decrypt the ciphertext. The shared key WEP used as The generated random number may be used as it is as the shared key WEP, or the shared key WEP may be generated by processing the random number based on a predetermined algorithm.

[0037] The encrypted shared key ring generation unit 12 encrypts the shared key WEP generated by the shared key generation unit 11 with the transmission side identification information IDtx generated by the transmission side unique information input unit 10. Thus, the encryption key KEY corresponding to the number of sender identification information IDtx generated so far is generated, and the set of the generated encryption key KEY is an electronic key ring. Shared key ring KEYT.

[0038] That is, the physical characteristics of one or more users are presented (input) one or more times, and the sender-side identification information corresponding to the number of pieces presented in the sender-specific information input unit 10 is provided. When IDtx is generated, the encrypted shared key bundle generation unit 12 encrypts the shared key WEP generated by the shared key generation unit 11 with each of the transmission side identification information IDtx, thereby Generate as many encrypted shared keys KEY as possible and increase it as a component of the encrypted shared key bundle KE YT.

[0039] For example, when the transmission-side unique information input unit 10 generates the transmission-side identification information IDtxa (l) based on the physical characteristics that one user ( _a ) is also presented for the first time, the encrypted shared key The bundle generation unit 12 generates the encryption key shared key KEYa (l) by encrypting the shared key WEP generated by the shared key generation unit 11 with the transmission side identification information IDtxa (l). A single encryption shared key KEYa (l) is a component of the encryption key KEYT. Next, when the transmission-side unique information input unit 10 generates the transmission-side identification information IDtxa (2) based on the physical characteristics presented for the second time by the same user (a), the encrypted shared key ring generation unit 12 further generates the encryption key shared key KEYa (2) by encrypting the shared key WEP with the sender identification information IDtxa (2), and the components of the encryption key shared key bundle KEYT are The number of encryption keys is increased to two, the shared key KEYa (l) and the new encrypted shared key KEYa (2). Even when the same user (a) makes a third or more presentation, a new encryption key ring is generated and added to the key key KEYT each time the user is presented. Increase it.

[0040] In addition, the transmission side identification information IDtx, shared key WEP, encryption key shared key KEY, and encryption key shared key ring KEYT related to one user ( _a ). User IDs of (a), (b), (c), etc. Sender side identification information IDtx, shared key WEP, encryption key shared key KEY, and encryption key shared key ring KEYT are generated in the same way .

That is, for example, based on the physical characteristics presented at any time by a plurality of users (a), (b), (c), the transmission side unique information input unit 10 transmits the transmission side identification information IDtxa (l) to IDt xa (n), IDtxb (l) to IDtxb (m), IDtxc (l) to IDtxc (k) The bundle generation unit 12 converts the shared key WEP generated by the shared key generation unit 11 into identification information IDtxa (l) to IDtxa (n), IDtxb (l) to IDtxb (m), IDtxc (l ) ~ IDtxc (k) based on! /, And encrypted to encrypt encrypted shared keys KEYa (l) to KEYa (n), KEYb (l) to KEYb (m), KEY c (l) to KEYc ( k) is generated and increased as a component of the encrypted shared key ring KEYT. In this way, the encrypted shared key ring generation unit 12 increases the encryption key shared key KEY that is a constituent element of the encrypted key shared key bundle KEYT as the transmission side identification information IDtx increases.

[0042] The transmission unit 13 has a communication function for performing wired or wireless communication with the reception unit 21 in each reception-side LAN setting device RX provided in one or more other devices. When connected (in the case of wired LAN), the encryption key shared key ring KEYT is broadcasted as a broadcast packet (that is, widely distributed to devices equipped with the receiving LAN setting device RX) and wirelessly transmitted. When connected by (in the case of wireless LAN), the encrypted key-sharing KEYT is broadcast on the beacon.

[0043] Next, the configuration of the receiving-side LAN setting device RX will be described.

The reception-side LAN setting device RX includes a unique information input unit 20, a reception unit 21, and a shared key decryption unit 22.

[0044] The unique information input unit (hereinafter referred to as "reception-side unique information input unit") 20 is similar to the transmission-side unique information input unit 10 provided in the transmission-side LAN setting device TX described above. The detection sensor that detects the human physical feature presented from and the feature information extracted from the detection output of the detection sensor to identify the identification information (hereinafter referred to as "reception side identification information") I Drx feature extraction It is comprised with the part. That is, the receiving side unique information input unit 20 also detects the physical characteristic information that is unique information of each person, and, similarly to the transmitting side unique information input unit 10, Receiving side identification information IDrx for identifying each person who has operated the device is generated by extracting according to a predetermined feature extraction algorithm.

[0045] Then, when the user tries to use the device provided with the receiving-side LAN setting device RX and connected to the access point or the master device side by LAN, the fingerprint is displayed on the unique information input unit 20. The receiving side identification information IDrx is generated by inputting physical feature information such as the iris and iris. [0046] The receiving unit 21 communicates with the transmitting unit 13 in the transmission side LAN setting device TX provided in another device having a function as an access point or a master device by wire or wirelessly. Has a communication function. And when wired connection (in case of wired LAN), it receives the encryption key shared key ring KEYT broadcasted as a broadcast packet, and when connected wirelessly (in case of wireless LAN) , Receive the encryption key shared key ring KEYT sent on the beacon.

[0047] The shared key decryption unit 22 inputs the reception side identification information IDr X generated by the reception side unique information input unit 20 and the latest encryption key shared key ring KEYT received by the reception unit 21. The encrypted shared key ring KEYT contains each encrypted shared key KEY with the receiving side identification information IDrx, so that it can be installed on other devices that become access points and master devices. The transmitting side LAN setting device reproduces the same shared key WEP as the shared key WEP generated by the shared key generation unit 11 in the TX.

In other words, as described above, the unique information input unit in which the user desires to use the device provided with the receiving-side LAN setting device RX by connecting to the access point or the master device side LAN. The physical feature information is input to 20 and the encrypted identification key KEY is encrypted by the same transmission side identification information IDtx as the reception side identification information IDrx generated based on the physical feature information. If the key is included in the shared key ring KEYT, the shared key decryption unit 22 decrypts the encrypted shared key KEY based on the receiving side identification information IDrx, so that it can be Therefore, the same shared key WEP as the shared key WEP set in the device is properly decrypted. Then, by supplying the shared key WEP to the decryption unit 200 in the device provided with the receiving LAN setting device RX, the encryption that has been transmitted as the access point or the master device is transmitted. Try to decrypt the sentence into plaintext.

[0049] When a plurality of devices including the transmission-side LAN setting device TX or the reception-side LAN setting device RX of the present embodiment having the above-described configuration are connected to each other by a wired or wireless LAN, the user can send the transmission-side LAN setting device. Select a desired device equipped with TX, and send information on one or more physical features (in other words, unique to the sending side LAN setting device TX to the sending side unique information input unit 10 Just enter (Information) and the shared key WEP is encrypted. It is possible to send the encrypted key-shared key bundle KEYT, which is a bundle of the encrypted key-shared key KEY, to another device, and the user is provided with the receiving side LAN setting device RX. To the receiving side unique information input unit 20 provided in the receiving side LAN setting device RX, and the transmitting side specific information provided in the transmitting side LAN setting device TX described above. It is possible to set the shared key WEP by decrypting the encryption key KEY by simply inputting at least one piece of physical characteristic information (that is, unique information) that is input to the input unit 10. I'll do it.

[0050] In other words, information on at least one or more physical characteristics is transmitted to one or more users each of the transmission side LAN setting device TX provided in the device that should be the access point or the master device. If the key is entered, the cipher key-sharing KEYT consisting of a set of cipher key-sharing keys corresponding to the number of physical feature information that has been input is the station with the receiving LAN setting device RX. Because it is broadcasted to the other device, the same physical features information entered by any of the above-mentioned users for the access point or master device's sending LAN setting device TX is entered. By simply inputting to the receiving side LAN setting device RX provided in the station side device, it is easy to share the same access point / master device side device with the station side device. It is possible to set the WEP.

[0051] Therefore, in the conventional technology, the user has to set the necessary shared key for the device (station) on the terminal side by using a remote controller or the like, and using the means, the method is very large. In contrast to the load, in this embodiment, it is possible to easily perform encrypted communication by setting a common shared key WEP for the access point or master device and the station device. Can provide excellent operability.

[0052] Further, in the conventional technology, when setting the same shared key as the access point or master device on the station side device, if the user forgets the password as identification information, it is connected to the wireless LAN. However, in this embodiment, the devices on the access point and master device side must be re-set by entering a new password for all the devices Just enter at least one physical feature information that is the same as at least one physical feature you entered in Since the common shared key WEP can be set for the point or master device and the station device, encrypted communication can be performed, so which part of the physical characteristics to be input to the station device The burden of memorizing whether or not there is can be greatly reduced, and excellent operability can be provided.

[0053] For example, when a user inputs fingerprints of multiple fingers on the right hand to the access point or master device side transmitter LAN setting device TX, and then forgets or forgets the fingerprints of misplaced fingers Set the same shared key WEP as the shared key WEP set in the device on the access point or master device by entering at least one fingerprint of the device on the station side. V, remember that the fingerprint of the misplaced finger was input to the access point or master device, and what fingerprint should be input to the station device The necessity will be greatly reduced probabilistically.

[0054] Also, since the communication power between the device provided with the transmission side LAN setting device TX and the device provided with the reception side LAN setting device RX is formed by a shared key WEP, it is secure. A LAN environment can be secured.

[0055] Further, the encryption key sharing key bundle is transferred from the access point or master device side device provided with the transmission side LAN setting device TX to the station side device provided with the reception side LAN setting device RX. Since KEYT is broadcast, the station side device has the same shared key WEP as the access point or master device side device. A simple configuration without the need to implement the protocol can be achieved.

Example

Next, a more specific example will be described with reference to FIGS. 4 and 5.

FIG. 4 is a block diagram showing the configurations of the transmission-side LAN setting device TX and the reception-side LAN setting device RX of the present embodiment, and the same or corresponding parts as those in FIG. 3 are denoted by the same reference numerals. FIG. 5 is a flowchart for explaining an operation example of the transmission side LAN setting device TX and the reception side LAN setting device RX.

First, referring to FIG. 4, the use of the transmission side LAN setting device TX and the reception side LAN setting device RX The application form is outlined. The transmission side LAN setting device TX is provided in a device for performing the function as an access point or a master device, and the reception side LAN setting device RX is provided in a device for exhibiting at least the function as a station. In addition, a device for functioning as an access point or a master device is provided together with the transmission side RAN setting device TX.

Next, the configuration of the transmission side LAN setting device TX of the present embodiment will be described.

The transmission side LAN setting device TX is formed by a processor, a digital signal processor (DSP), an electronic circuit, a semiconductor memory, etc. that perform arithmetic and control functions according to a predetermined computer program. 10, a shared key generation unit 11, an encrypted shared key generation unit 12 a, an encrypted shared key bundle storage unit 12 b, a transmission unit 13, and a shared key storage unit 14. Further, the encrypted shared key generation unit 12a and the encrypted shared key bundle storage unit 12b realize a configuration corresponding to the encrypted shared key generation unit 12 shown in FIG.

Here, the shared key storage unit 14 is formed of a semiconductor memory or the like, and the random number generated by the shared key generation unit 11 that is operable when the power is turned on, that is, the latest random number is shared key. In accordance with a read request from the encryption key generation unit 12a, the latest shared key WEP stored therein is supplied to the encryption key generation unit 12a, and the transmission side LAN In accordance with a read request from the encryption key unit 100 in the device provided with the setting device TX, the latest shared key WEP stored therein is supplied to the encryption key unit 100.

[0060] The transmission-side specific information input unit 10 detects an optical sensor that detects the human-specific physical characteristics (for example, any information such as fingerprints, irises, signatures, faces, speech sounds, etc.) for which user power is also presented. It is configured to include a detection sensor formed by a voice detection sensor and a feature extraction unit that extracts feature information from the detection output of the detection sensor and identifies it as identification information (transmission side identification information) IDtx .

That is, when the transmission side unique information input unit 10 is configured to generate the transmission side identification information IDtx based on the fingerprint information, an optical detection sensor that optically detects the fingerprint, and its detection And a feature extraction unit for extracting feature information by image processing the output. ing.

[0062] Further, in the case where the transmission side identification information IDtx is generated based on the iris information! /, The optical detection sensor for optically detecting the iris and the detection output thereof are subjected to image processing. And a feature extraction unit for extracting feature information.

[0063] Further, when the transmission side identification information IDtx is generated based on the signature information, the optical detection sensor for optically detecting the signed pattern, or the writing pressure of the signed pattern And a feature extraction unit that extracts feature information by performing image processing, pattern recognition processing, and the like on the detection output.

[0064] Also, in the case where the transmission side identification information IDtx is generated based on the face information, the optical detection sensor that optically detects the face and the detection output are subjected to image processing. And a feature extraction unit for extracting feature information.

[0065] Further, in the case where the transmission side identification information IDtx is generated based on the information of the uttered voice, a voice detection sensor such as a microphone that detects the uttered voice, and its detection output It is configured to include a feature extraction unit that extracts features by analyzing the frequency characteristics and so on.

[0066] However, as long as the information can identify an individual person, not only a fingerprint, an iris, a signature, a face, and a speech voice, but also other physical features may be detected and feature extraction may be performed. .

As a representative example, the following description will be given on the assumption that the transmission side unique information input unit 10 generates the transmission side identification information IDtx based on the above-described fingerprint information.

[0068] When the user presents the fingerprint and the transmission side identification information IDtx is supplied from the transmission side unique information input unit 10 by the user presenting the fingerprint, the encryption key shared key generation unit 12a of the present embodiment stores the shared key storage unit 14 in the shared key storage unit 14. By encrypting the latest shared key WEP stored in memory using the transmission side identification information IDtx, an encrypted shared key KEY is generated and supplied to the encrypted shared key bundle storage unit 12b.

[0069] That is, the encryption key sharing unit 12a encrypts the latest shared key WEP with the sender identification information IDtx each time the user presents a fingerprint, thereby obtaining the encryption key shared key KEY. Generated and supplied to the encrypted shared key ring storage unit 12b. In addition, there is already one or more sender identification information. When the IDtx is generated, the latest shared key WEP is encrypted with each of the transmission side identification information IDtx, so that the number of encryption key shared keys corresponding to the respective transmission side identification information IDtx is obtained. Generate KEY.

[0070] The encryption key sharing key storage unit 12b is formed of a semiconductor memory or the like. The encryption key sharing key KEY generated by the encryption key sharing key generation unit 12a up to now is encrypted. It is stored as a shared key ring KEY T.

[0071] The transmission unit 13 has a communication function of performing wired or wireless communication with the reception unit 21 in each reception-side LAN setting device RX provided in one or more other devices. When connected (in the case of wired LAN), the encryption key shared key ring KEYT is broadcasted as a broadcast packet (that is, widely distributed to devices equipped with the receiving LAN setting device RX) and wirelessly transmitted. When connected by (in the case of wireless LAN), the encrypted key-sharing KEYT is broadcast on the beacon.

Next, the configuration of the reception side LAN setting device RX of the present embodiment will be described.

The receiving side LAN setting device RX is composed of a processor, digital signal processor (DSP), electronic circuit, semiconductor memory, etc. that perform arithmetic and control functions according to a predetermined computer program. Side unique information input unit) 20, a receiving unit 21, a shared key decryption unit 22a, and a shared key storage unit 22b.

Here, the receiving-side unique information input unit 20 is similar to the transmitting-side unique information input unit 10, for example, human physical characteristics (for example, any information such as fingerprints, irises, signatures, faces, speech sounds, etc.) ) And a feature extraction unit that extracts the detection output force characteristic information of the detection sensor and obtains identification information (reception side identification information) IDrx. That is, as described above, if the transmission side unique information input unit 10 is configured to generate the transmission side identification information IDtx based on the fingerprint information, the reception side unique information input unit 20 is also based on the fingerprint information. Receiving side identification information IDrx is generated.

[0074] The receiving unit 21 communicates with the transmitting unit 13 in the transmission-side LAN setting device TX provided in another device having a function as an access point or a master device by wire or wirelessly. Has a communication function. When a wired connection is made (in the case of a wired LAN), the encryption key transmitted as a broadcast packet is shared. When keyed key bundle KEYT is received and wireless connection is established (in the case of wireless LAN), the encrypted key shared key bundle KEYT transmitted on the beacon is received.

[0075] The shared key decryption unit 22 of the present embodiment uses the latest reception side identification information IDrx generated by the reception side unique information input unit 20 and the encryption key shared key bundle KEYT received by the reception unit 21. Input and decrypt each encrypted shared key KEY included in the encrypted key shared key ring KEYT with the latest receiving side identification information IDrx, so that it is provided in the device on the access point or master device side. The same shared key WEP as the latest shared key WEP generated by the shared key generator 11 in the transmitting LAN setting device TX is properly played back.

The shared key storage unit 22b is formed of a semiconductor memory or the like, and stores the latest shared key WEP decrypted (reproduced) by the shared key decryption unit 22. Then, by supplying the latest shared key WEP to the decryption unit 200 in the device provided with the receiving side LAN setting device RX, it has been transmitted from the access point or the device device on the master device side. Enables decryption of ciphertext into plaintext.

Next, an operation example of the transmission side LAN setting device TX and the reception side LAN setting device RX of the present embodiment having the configuration described above will be described with reference to the flowchart of FIG. Figure 5 shows the settings of the sending LAN setting device TX and the receiving LAN setting when the user constructs a new LAN system or when a device as a station is newly added in the already constructed LAN system. This shows the operation of the device RX. In addition, the operation when the user constructs a wireless LAN system will be described.

[0078] First, in step S1, when the user turns on the power of the device provided with the transmission side LAN setting device TX, the shared key generation unit 11 in the transmission side LAN setting device TX is set to a random number. And a shared key WEP is generated and stored in the shared key storage unit 14.

[0079] Next, in step S2, the display means provided in the transmission-side LAN setting device TX

(Not shown) Suggests to input fingerprint information, which is a physical feature unique to the user.

[0080] In step S3, when a fingerprint is input to the optical sensor provided in the transmission side unique information input unit 10, the transmission side unique information input unit 10 also transmits the fingerprint power. Side identification information IDtx is generated, and the encryption key generation unit 12a encrypts the shared key storage unit 14 by encrypting the latest shared key WEP stored with the transmission side identification information IDtx.匕匕 shared key KEY is generated and stored in the encrypted shared key bundle storage unit 12b as a component of the encrypted shared key bundle KEYT.

[0081] When the user inputs not only one but also a plurality of fingerprints, for example, the fingerprints of a plurality of fingers, the transmission side unique information input unit 10 displays a plurality of transmission sides related to each fingerprint. The identification information IDtx is generated, and the encrypted shared key generation unit 12a encrypts the shared key WEP based on each of the transmission side identification information IDtx, thereby generating a plurality of encrypted shared keys KEY. It is generated and stored in the encryption key sharing key storage unit 12b as a constituent element of the encryption key sharing key KEYT.

[0082] Next, in step S4, the transmission unit 13 broadcasts and transmits the encrypted key shared key bundle KEYT stored in the encrypted shared key bundle storage unit 12b to other devices on a beacon.

[0083] Thereafter, the transmission unit 13 continuously transmits a beacon to other devices in a preset cycle. Therefore, the encrypted shared key ring KEYT is also broadcast to other devices according to the beacon transmission cycle.

[0084] On the other hand, when the receiving side LAN setting device RX provided in the station side device receives the beacon by the receiving unit 21, in step S5, the encrypted sharing transmitted on the beacon is transmitted. Receive the key ring KEYT and enter it. In step S6, the display means (not shown) provided in the receiving-side LAN setting device RX suggests that information on the fingerprint, which is a user-specific physical feature, is input.

[0085] Next, in step S7, when the user inputs a fingerprint to the optical sensor provided in the receiving side unique information input unit 20, the receiving side unique information input unit 20 recognizes the fingerprint force receiving side identification. Information IDtx is generated. Here, if the fingerprint input by the user is the same as one or more of the fingerprints input to the access point or the master device, the shared key decryption unit 22a receives the receiving side identification information. Based on IDtx, the decryption process is applied to the encryption key shared key KEY in the encryption key shared key KEYT, so that the shared key WEP can be decrypted properly. Decrypt The shared key WEP is stored in the shared key storage unit 33b.

[0086] When the reception side LAN setting device RX performs the processing of steps S5 to S8 described above, the device as the access point or master device provided with the transmission side LAN setting device TX and the reception side The same shared key WEP is set in the device as a station provided with the LAN setting device RX, and encrypted communication can be performed between both devices.

[0087] As described above, according to this embodiment, the user selects a desired device provided with the transmission-side LAN setting device TX, and is provided in the transmission-side LAN setting device TX. Just enter one or more physical feature information (in other words, unique information) into the sender's unique information input unit 10, and the encrypted key EP the shared key WEP is encrypted. An encryption key KEYT can be transmitted to another device, and the user selects a desired device provided with the receiving LAN setting device RX, The same body as the one input to the receiving side unique information input unit 20 provided in the receiving side LAN setting device RX to the transmitting side unique information input unit 10 provided in the transmission side LAN setting device TX described above. Just enter at least one piece of characteristic information (that is, unique information) and decrypt the encrypted shared key KEY. , The shared key WEP can be set.

[0088] In other words, information on at least one or more physical features of each of one or more users with respect to the transmission-side LAN setting device TX provided in the device to be the access point or master device If the key is entered, the cipher key-sharing KEYT consisting of a set of cipher key-sharing keys corresponding to the number of physical feature information that has been input is the station with the receiving LAN setting device RX. Because it is broadcasted to the other device, the same physical features information entered by any of the above-mentioned users for the access point or master device's sending LAN setting device TX is entered. By simply inputting to the receiving side LAN setting device RX provided in the station side device, it is easy to share the same access point / master device side device with the station side device. It is possible to set the WEP.

[0089] Therefore, since the common key WEP can be easily set for the access point or master device side device and the station side device for encrypted communication, the user can Therefore, it is possible to provide excellent operability.

[0090] Also, when re-setting or updating a common shared key WEP for a plurality of devices that have already been set up with a LAN, one or more users can connect with an access point or a master device. At least one physical feature information is input to the transmitter LAN setting device TX provided in the device to be received, and the receiver side LAN provided in the device on the station side. The setting device RX can be reconfigured or updated simply by inputting at least one physical feature that is the same as the physical feature entered for the transmission side LAN setting device TX on the access point or master device side. Therefore, it is possible to provide excellent operability for the user.

[0091] In addition, when a user tried to input physical characteristics as identification information to a device on the desired station side after constructing a LAN system, it was forgotten which part of the physical characteristics was forgotten. Even at this point, just enter at least one physical feature information that is the same as at least one physical feature entered on the access point or master device. Since it is possible to set the shared key WEP common to the device and the station side device and perform encrypted communication, it is necessary to memorize which part is the physical feature to be input to the station side device. Can be greatly reduced, and excellent operability can be provided.

[0092] Further, since the communication power between the device provided with the transmission-side LAN setting device TX and the device provided with the reception-side LAN setting device RX is formed by the shared key WEP, it is secure. A LAN environment can be secured.

[0093] Further, the encryption key sharing key bundle is transferred from the access point provided with the transmission side LAN setting device TX or the device on the master device side to the device on the station side provided with the reception side LAN setting device RX. Since KEYT is broadcast, the station side device has the same shared key WEP as the access point or master device side device. A simple configuration without the need to implement the protocol can be achieved.

[0094] Further, when constructing a home LAN that is used only by a specific family member, each of the transmission side LAN setting devices TX provided in the access point and the master device side has each If each family member has entered information on one or more physical characteristics, at least one receiving LAN setting device RX is installed in each family member station device. By entering physical feature information, you can set the LAN settings for each family member, and eliminate the inconvenience that only a specific family member can set the LAN settings. All the family members will be able to set up the LAN.

In other words, if only a specific member of the family can set up the LAN, each family member cannot use the LAN easily, but in this example, each family member can access it. If the information on one or more physical features is input to the transmitter LAN setting device TX provided on the point or master device side, the receiving side provided on the station side device By entering at least one physical feature information into the LAN setting device RX, each person can easily use the LAN. For this reason, this example demonstrates an excellent effect when constructing a home LAN system.

Claims

The scope of the claims

[1] A LAN system configured by connecting one or more devices including a transmission-side LAN setting unit and one or more devices including a reception-side LAN setting unit by wire or wirelessly, LAN setting means

A shared key generating means for generating a shared key;

One or more physical features of each user are detected as unique information, and the unique information power transmitting side unique information input means for generating the transmitting side identification information;

An encrypted shared key is generated by encrypting the shared key based on the transmission side identification information, and an encrypted key shared key bundle including the generated one or more encrypted key shared key as a constituent element is generated. A shared key ring generation means;

Transmitting means for transmitting the encrypted shared key ring to one or more devices comprising the receiving side LAN setting means,

The receiving LAN setting means includes:

Receiving-side specific information input means for detecting physical characteristics of one or more users as specific information and generating the specific-information-receiving-side identification information;

Receiving means for receiving the encrypted shared key ring transmitted from the transmitting means of a device comprising the transmitting side LAN setting means;

The transmission side LAN setting means comprises the transmission side LAN setting means by decrypting the one or more encryption key shared keys included in the encrypted shared key ring received by the reception means with the reception side identification information. A shared key decryption means for reproducing the shared key generated by the device of

LAN system characterized by

2. The LAN system according to claim 1, wherein the shared key generation means uses a generated random number as the shared key.

[3] A LAN setting device provided in a plurality of devices for constructing a wired or wireless LAN system,

A shared key generating means for generating a shared key; One or more physical features of each user are detected as unique information, and the unique information power transmitting side unique information input means for generating the transmitting side identification information;

An encrypted shared key is generated by encrypting the shared key with the sender identification information.

An encrypted shared key bundle generating means for generating an encrypted shared key bundle having the generated one or more of the encrypted shared keys as constituent elements;

A LAN setting device comprising: a transmission unit configured to transmit the encrypted shared key ring to a receiving device.

4. The LAN setting device according to claim 3, wherein the shared key generating means uses a generated random number as the shared key.

[5] A LAN setting device provided in a plurality of devices for constructing a wired or wireless LAN system,

Receiving means for receiving an encrypted shared key ring transmitted from another device;

The one or more encryption key shared keys included in the encrypted shared key ring received by the receiving unit are decrypted by the receiving side identification information, thereby generating a shared key generated by the other device. Having a shared key decryption means for reproducing

A LAN setting device.

[6] A LAN setting method in a LAN system configured by connecting one or more devices including a transmission-side LAN setting means and one or more devices including a reception-side LAN setting means by wired or wireless connection. And

In the transmission side LAN setting means,

A shared key generation step for generating a shared key;

One or more physical features of each user are detected as unique information, and the unique information power transmitting side identification information is generated,

An encrypted shared key is generated by encrypting the shared key based on the transmission side identification information, and an encrypted key shared key bundle including the generated one or more encrypted key shared key as a constituent element is generated. A shared key ring generation process; A transmission step of transmitting the encrypted shared key ring to a receiving device, and the receiving LAN setting means includes:

A receiving-side unique information input step of detecting physical characteristics of one or more users as unique information and generating the unique-information-receiving-side identification information;

A receiving step of receiving the encrypted shared key ring transmitted from the device on the transmitting side; and the receiving of one or more of the encrypted shared key included in the encrypted shared key ring received in the receiving step A shared key decrypting step of reproducing the shared key generated by the device on the transmitting side by decrypting with the side identification information,

LAN setting method characterized by.

[7] A LAN setting method for LAN setting of multiple devices that construct a wired or wireless LAN system,

An encrypted shared key is generated by encrypting the shared key based on the transmission side identification information, and an encrypted key shared key bundle including the generated one or more encrypted key shared key as a constituent element is generated. A shared key ring generation process;

A LAN setting method comprising: a transmitting step of transmitting the encrypted shared key ring to a receiving device.

[8] A LAN setting method for LAN setting of multiple devices that construct a wired or wireless LAN system,

A receiving step of receiving an encrypted shared key ring transmitted from another device;

The one or more encrypted shared keys included in the encrypted shared key ring received in the receiving step are decrypted with the receiving side identification information to reproduce the shared key generated by the other device. Having a shared key decryption step,

LAN setting method characterized by.