JP5792261B2 - Transmission / reception system, transmission apparatus, reception apparatus, authentication apparatus, user apparatus, method executed by them, and program - Google Patents

Description

  The present invention relates to a technique for encrypting and transmitting / receiving predetermined data.

For example, in the fields of the Internet, e-mail, IP telephone, and the like, a technique of transmitting and receiving data via a predetermined network such as the Internet is widely used. Data transmitted / received via the network may include programs, moving image data, and other content data.
When data is transmitted and received, there is a possibility that data is wiretapped by a third party between a transmitting device that transmits data and a receiving device that receives data. In order to prevent such a situation, an encryption technique is widely used when data is transmitted and received.

There are various technologies for encryption, and among them, there is one using a one-time password.
One-time passwords are often used for authentication, but are generally implemented using a device that generates a personal identification number or other information called a token. The token may generate the above information depending on time, but may generate the above information depending on the order in which the information is generated. In any case, the authentication device and the token are allowed to generate the same information. The user sends this information generated by the token that the user has to the authentication device, and the authentication device collates the information generated by the user with the information received from the user, thereby judging the validity of the user.
Such a one-time password technology generates information that is common to both of the two transmission devices, and encrypts the data to be transmitted on the transmission side and the received data on the reception side. It can be applied to encrypted communication by using it for data decryption. The above-mentioned common information is used as, for example, a key for encrypting or decrypting data, a part of an algorithm, or information for newly generating or specifying a plurality of these. However, since it is not exchanged between the two communication devices, the encryption strength is relatively high.
The present inventor has already proposed a similar technique.
The technology is as follows.
The encryption technique proposed by the present inventor is based on an initial solution that is predetermined data, and a solution generating means for continuously generating a solution uniquely determined by the initial solution is provided by a transmitting device and a receiving device. It is characterized by having it. The transmitting device is adapted to use the solution generated from the solution generating means when encrypting the data to be transmitted into encrypted data, and the receiving device receives the solution generated from the solution generating means. The encrypted data is used when decrypted and restored to the original data. The above solution is used appropriately for encryption and decryption (for example, the solution is used as a key for encryption and decryption, or a key or algorithm for encryption and decryption). Used to generate at least one, or used to select an appropriate key or algorithm from a plurality of pre-existing keys or algorithms). The generated solutions are the same when comparing the generated solutions in the same order. This allows the receiving device to reproduce the key and algorithm used when encrypting with the transmitting device, using the same solution as used when encrypting with the transmitting device. Therefore, the encrypted data generated by the transmitting device can be decrypted by encrypting the predetermined data without receiving any information about the solution, key, and algorithm used at the time of encryption from the transmitting device. can do.

  The above-described technique proposed by the present inventor is achieved by generating a solution in which the transmitters and the receivers that are generated in the same order are the same. For this purpose, means for generating the same solution is required in the transmission device and the reception device. The inventor of the present application solves this problem by giving a specific solution (because it is the first solution, this is referred to as an initial solution in the present application) to the transmitting device and the receiving device in advance. That is, the transmitting device and the receiving device make a second solution using a common initial solution given in advance (there may be a plurality of initial solutions), and make three solutions using the second and previous solutions. The solution of the eye is created, and the fourth solution is created using the solution before the third, and so on, so that the solution is generated in the formula based on the initial solution.

Although the above-mentioned technique proposed by the present inventor can change the encryption method performed by the transmitting apparatus (for example, the key and the algorithm can be changed), the technique between the transmitting apparatus and the receiving apparatus can be changed. There is an excellent advantage that it is not necessary to exchange information necessary for specifying the solution, key, and algorithm used in the transmission apparatus. In other words, encryption using such technology is difficult to break.
The above-described technique is premised on giving a common initial solution to the transmitting apparatus that performs encryption and the receiving apparatus that performs decryption, and thus is suitable for one-to-one communication between the transmitting apparatus and the receiving apparatus. Of course, when the transmitting device and the receiving device are specified or restricted from the beginning, the above-described technique can be applied even if there are a plurality of one or both of the transmitting device and the receiving device.

However, when at least one of the transmission device and the reception device is plural and the transmission device and the reception device are in an unspecified state, it is difficult to apply the above technique. Even when the number of transmission devices and reception devices increases, it is difficult for the transmission device and the reception device to share the initial solution in advance. The transmitting device and the receiving device have a common initial solution for encryption and decryption (this may be achieved by knowing the initial solution possessed by the other party in some way. ) Is required, but there is currently no suitable technology to achieve this.
JP 2003-249929 A JP 2006-253745 A JP 2006-253746 A JP2007-013506

  An object of the present invention is to increase the versatility of a cryptographic technique in which solutions generated in the same order are the same in a transmitting apparatus and a receiving apparatus without degrading security.

  In order to solve this problem, the present inventor proposes a first invention and a second invention described below.

The first invention of the present application is as follows.
According to a first aspect of the present invention, there is provided a transmission device capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and the encrypted data from the transmission device to the network And a receiving device capable of receiving via the transmission / reception system.
Then, the transmitting device is a transmitting-side solution that continuously generates a solution that depends on the initial solution and is uniquely determined by the initial solution based on an initial solution that is predetermined data. Generating means, using the solution generated by the transmitting-side solution generating means, encrypting the transmission target data into encrypted data, and communicating with the receiving apparatus via the network Transmitting-side communication means.
Further, the receiving device continuously generates a solution that depends on the initial solution and is uniquely determined by the initial solution based on an initial solution that is predetermined data. If the same initial solution as that used in the generation unit is used, the reception side solution generation unit configured to generate the same solution as the transmission side solution generation unit, and the solution generated by the reception side solution generation unit And decryption means for decrypting encrypted data encrypted by the transmission apparatus, and reception side communication means for communicating with the transmission apparatus via the network.
When the encrypted data is transmitted / received, the transmitting device and the receiving device transmit data as the initial solution from one to the other, and the transmitting device and the receiving device The one of the transmission device and the other of the reception device receives the received data so that the transmission side solution generation unit or the reception side solution generation unit generates a solution using the transmitted data as an initial solution. Data is generated as an initial solution by the transmission side solution generation means or the reception side solution generation means, and the transmission side solution generation means and the reception side solution generation means negotiate with each other. After generating the predetermined number of solutions, the last solution of the predetermined number of solutions is used as a new initial solution to generate a solution, and the encryption unit is configured to generate a solution based on the new initial solution. Above The transmission target data is encrypted using the solution generated by the transmission side solution generation means, and the decryption unit is configured to decrypt the solution generated by the reception side solution generation unit based on the new initial solution. It is used to decrypt the encrypted data.

  In this transmission / reception system, data serving as an initial solution is transmitted from one of the transmission device and the reception device to the other. In this system, the initial solution can be shared between unspecified transmitters and receivers, which was difficult to realize in the past, by sending data that is the initial solution from one of the transmitter and receiver to the other. It will be possible. Moreover, the initial solution data sent from one of the transmitting device and the receiving device to the other is an initial solution for generating a solution used when encrypting or decrypting encrypted data transmitted and received by the transmitting device and the receiving device. It is not data, but data of an initial solution for generating an initial solution for generating a solution used when encrypting or decrypting encrypted data transmitted and received by a transmitting device and a receiving device. When the transmission device and the reception device perform encryption of the transmission target data or decryption of the encrypted data by generating a predetermined number of solutions based on the initial solution transmitted and received between the transmission device and the reception device. You will get an initial solution that will be used to generate the solution you want to use. In other words, in this transmission / reception system, initial solutions for generating a solution to be used when encrypting transmission target data or decrypting encrypted data are not transmitted / received between each other. A third party can know whether the transmitting device and the receiving device use the initial solution as the initial solution used to generate the solution used when encrypting the data to be transmitted or decrypting the encrypted data. There is no encryption strength.

Of the transmission device and the reception device included in the transmission / reception system according to the first aspect of the present invention, the one that transmits the data that is the initial solution uses the data that is the initial solution at a predetermined timing based on a predetermined rule. You may have the means to change in. By changing the data that is the initial solution sent from one of the transmission device and the reception device to the other, the encryption strength can be further increased.
As described above, the transmission side solution generation means and the reception side solution generation means of the transmission device and the reception device included in the transmission / reception system of the first invention negotiate with each other based on the received initial solution. After generating the predetermined number of solutions, the last solution of the predetermined number of solutions is used as a new initial solution to generate a solution to be used when encrypting data to be transmitted or decrypting encrypted data It has become. In this case, the “predetermined number” regarding the number of solutions as the initial solution does not necessarily have to be fixed, and is changed on condition that it is the same between the transmission device and the reception device. Is also possible. For example, based on information that can be acquired in common even if they are separated, such as the date and time when data transmission / reception is performed between the transmission device and the reception device, no data is exchanged between the transmission device and the reception device. In both cases, the “predetermined number” described above can be changed.

  As described above, the transmitting device and the receiving-side solution generating means of the receiving device and the receiving-side solution generating means included in the transmission / reception system of the first invention are: It is designed to generate a solution to be used when converting. At this time, the solution used for encrypting the transmission target data and the solution used for decrypting the encrypted data may each be one or more. In the latter case, the transmission / reception system of the present invention can be as follows. That is, the encryption unit cuts the transmission target data into a predetermined bit length to make the transmission target disconnection data, and then uses the different solutions generated by the transmission side solution generation unit for each of the transmission target disconnection data. The decryption means cuts the encrypted data into a predetermined bit length to obtain encrypted disconnected data, and generates each of the encrypted disconnected data on the receiving side solution. Decoding may be performed in order using different solutions generated by the means. In this case, a new solution is used every time the transmission target cut data is encrypted and every time the encrypted cut data is decrypted.

The present invention proposes a transmission apparatus that can be included in the above transmission / reception system as one of the first inventions of the present application. When the transmission device is configured to transmit the data serving as the initial solution to the reception device, the transmission device may be configured to receive the data serving as the initial solution from the reception device.
The same effect as that of the former transmission device can be obtained by the following method.
The method includes: a transmission device capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network; and transmitting the encrypted data from the transmission device to the network. A transmitting / receiving system comprising: a receiving device that is capable of receiving via the initial solution based on an initial solution that is predetermined data; and a solution that is uniquely determined by the initial solution Receiving-side solution generating means generated using the above-mentioned solution generated by the receiving-side solution generating means, decrypting means for decrypting the encrypted data into transmission target data, the transmitting device, and the Receiving-side communication means for performing communication via a network; and means for receiving the initial solution data from the transmitting device when the encrypted data is transmitted and received. And the receiving-side solution generating means generates a predetermined number of solutions negotiated with the transmitting device when the initial solution data is received from the transmitting device. , The last solution of the predetermined number of solutions is generated as a new initial solution, and the decoding means generates a new initial solution by the receiving side solution generating means. The encrypted data is decrypted using a solution generated as a solution, and is configured by a combination with the receiving device, and based on an initial solution that is predetermined data, A solution that depends on the initial solution and is uniquely determined by the initial solution is continuously generated, and if the same initial solution as that used by the receiving-side solution generating means is used, the receiving-side solution Can generate the same solution as the generator It is a method performed by the transmitting apparatus comprises a control means.
In this method, the control means transmits the data serving as the initial solution to the receiving device, transmits the encrypted data to the receiving device, and transmits the initial data transmitted to the receiving device. A process of generating a predetermined number of solutions negotiated with the receiving device as the initial solution of the data to be a solution, a process of generating a solution by using the last solution of the predetermined number of solutions as a new initial solution, And encrypting the transmission target data using a solution generated by using a last solution of a predetermined number of solutions as a new initial solution.
The former transmission device can be realized by the following computer program, for example. By using this computer program, a general-purpose computer (for example, a personal computer or a mobile phone) can obtain the same effect as that of the former transmission apparatus.
The computer program includes: a transmission device capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network; and the encrypted data from the transmission device to the network. And a receiving device that can receive the data via a receiving device that is dependent on the initial solution based on an initial solution that is predetermined data and continuously determines a solution uniquely determined by the initial solution. Receiving-side solution generating means, decrypting means for decrypting the encrypted data into transmission target data using the solution generated by the receiving-side solution generating means, and the transmitting device When the encrypted data is transmitted / received to / from the receiving-side communication means that performs communication via the network, the initial solution is received from the transmitting device. The receiving-side solution generating means generates a predetermined number of solutions negotiated with the transmitting device when data serving as the initial solution is received from the transmitting device. The decoding means generates a solution with a last solution of a predetermined number of solutions as a new initial solution, and the decoding means generates a predetermined number of solutions. The encrypted data is decrypted using the solution generated as the new initial solution as the last solution, and is configured in combination with the receiving device. Based on a certain initial solution, a solution that depends on the initial solution and is uniquely determined by the initial solution is continuously generated, and the same initial solution as that used by the reception-side solution generating means is obtained. If used, the receiving side solution generating means A process of transmitting the data serving as the initial solution to the receiving apparatus to the control means of the transmitting apparatus including control means capable of generating the same solution; a process of transmitting the encrypted data to the receiving apparatus The process of generating a predetermined number of solutions negotiated with the receiving device, using the data that is the initial solution transmitted to the receiving device as an initial solution, and adding the last solution of the predetermined number of solutions to a new one A computer program for executing a process of generating a solution as an initial solution and a process of encrypting the transmission target data using a solution generated as a new initial solution of a last solution of a predetermined number of solutions. .
The same effect as that of the latter transmitter can be obtained by the following method.
The method includes: a transmission device capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network; and transmitting the encrypted data from the transmission device to the network. A transmitting / receiving system comprising: a receiving device that is capable of receiving via the initial solution based on an initial solution that is predetermined data; and a solution that is uniquely determined by the initial solution Receiving-side solution generating means generated using the above-mentioned solution generated by the receiving-side solution generating means, decrypting means for decrypting the encrypted data into transmission target data, the transmitting device, and the Receiving-side communication means for performing communication via a network, and means for transmitting the initial solution data to the transmitting device when the encrypted data is transmitted and received. The receiving-side solution generating means generates a predetermined number of solutions negotiated with the transmitting device when data serving as the initial solution is transmitted to the transmitting device. , The last solution of the predetermined number of solutions is generated as a new initial solution, and the decoding means generates a new initial solution by the receiving side solution generating means. The encrypted data is decrypted using a solution generated as a solution, and is configured by a combination with the receiving device, and based on an initial solution that is predetermined data, A solution that depends on the initial solution and is uniquely determined by the initial solution is continuously generated, and if the same initial solution as that used by the receiving-side solution generating means is used, the receiving-side solution A system that can generate the same solution as the generating means Is a method performed by the transmission device comprising a means.
In this method, the control means receives the data as the initial solution from the receiving device, transmits the encrypted data to the transmitting device, and receives the initial data received from the receiving device. A process of generating a predetermined number of solutions negotiated with the receiving apparatus by using the data to be a solution as an initial solution, and a process of generating a solution using a last solution of the predetermined number of solutions as a new initial solution And encrypting the data to be transmitted using a solution that is generated by using a last solution of a predetermined number of solutions as a new initial solution.
The latter transmission device can be realized by the following computer program, for example. By using this computer program, a general-purpose computer (for example, a personal computer or a mobile phone) can obtain the same effect as the latter transmission apparatus.
The computer program includes: a transmission device capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network; and the encrypted data from the transmission device to the network. And a receiving device that can receive the data via a receiving device that is dependent on the initial solution based on an initial solution that is predetermined data and continuously determines a solution uniquely determined by the initial solution. Receiving-side solution generating means, decrypting means for decrypting the encrypted data into transmission target data using the solution generated by the receiving-side solution generating means, and the transmitting device When the encrypted data is transmitted / received to / from the receiving-side communication means that performs communication via the network, the initial solution is transmitted to the transmitting device. And the receiving-side solution generating means generates a predetermined number of solutions negotiated with the transmitting device when data serving as the initial solution is transmitted to the transmitting device. The decoding means generates a solution with a last solution of a predetermined number of solutions as a new initial solution, and the decoding means generates a predetermined number of solutions. The encrypted data is decrypted using the solution generated as the new initial solution as the last solution, and is configured in combination with the receiving device. Based on a certain initial solution, a solution that depends on the initial solution and is uniquely determined by the initial solution is continuously generated, and the same initial solution as that used by the reception-side solution generating means is obtained. If used, it is the same as the receiving side solution generating means. A step of receiving the data as the initial solution from the receiving device to the control means of the transmitting device comprising a control means capable of generating a solution; a step of transmitting the encrypted data to the transmitting device; The process of generating a predetermined number of solutions negotiated with the receiving device using the data that is the initial solution received from the receiving device as an initial solution, and the last solution of the predetermined number of solutions as a new initial solution It is a computer program for executing a process of generating a solution as a solution and a process of encrypting data to be transmitted using a solution generated by using a last solution of a predetermined number of solutions as a new initial solution.

The inventor of the present application also proposes a receiving apparatus that can be included in the above transmission / reception system as one of the first inventions of the present application. When the receiving device is configured to receive the data that is the initial solution from the transmitting device, the receiving device may be configured to transmit the data that is the initial solution to the transmitting device.
The same effects as those of the former receiving apparatus can be obtained by the following method.
The method includes: a transmission device capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network; and transmitting the encrypted data from the transmission device to the network. A transmitting / receiving system comprising: a receiving device that is capable of receiving via the initial solution based on an initial solution that is predetermined data; and a solution that is uniquely determined by the initial solution Using the solution generated by the transmission-side solution generation means, encrypting means for encrypting the transmission target data into encrypted data, the receiving device, and the receiving device A transmission-side communication unit that performs communication via a network; and a unit that transmits data serving as the initial solution to the reception device when the encrypted data is transmitted and received. The transmitting-side solution generating means generates a predetermined number of solutions negotiated with the receiving device when data serving as the initial solution is transmitted to the receiving device. , The last solution of the predetermined number of solutions is generated as a new initial solution, and the encryption means generates a new initial solution by the transmitting-side solution generating means. The transmission target data is encrypted using a solution generated as a solution, and is configured by a combination with the transmission device, based on an initial solution that is predetermined data, A solution that depends on the initial solution and is uniquely determined by the initial solution is continuously generated, and if the same initial solution as that used by the transmitting-side solution generating unit is used, the transmitting-side solution Can generate the same solution as the generator It is a method performed by the receiving apparatus comprises a control means.
In this method, the control means receives from the transmitting device the data that is the initial solution from the transmitting device, receives the encrypted data from the transmitting device, the transmitting device The process of generating a predetermined number of solutions negotiated with the transmission device using the data that is the initial solution received from the initial solution as the initial solution, and solving the last solution of the predetermined number of solutions as a new initial solution And a step of decrypting the encrypted data using a solution generated by using the last solution of a predetermined number of solutions as a new initial solution.
The former receiving apparatus can be realized by the following computer program, for example. By using this computer program, a general-purpose computer (for example, a personal computer or a mobile phone) can obtain the same effects as those of the former receiving apparatus.
The computer program includes: a transmission device capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network; and the encrypted data from the transmission device to the network. And a receiving device that can receive the data via a receiving device that is dependent on the initial solution based on an initial solution that is predetermined data and continuously determines a solution uniquely determined by the initial solution. Transmitting-side solution generating means generated using the above-mentioned solution generated by the transmitting-side solution generating means, encrypting means for encrypting the transmission target data into encrypted data, and the receiving device When the encrypted data is transmitted / received to / from the transmitting-side communication means that performs communication via the network, the initial solution is transmitted to the receiving device. The transmitting-side solution generating means generates a predetermined number of solutions negotiated with the receiving device when the data as the initial solution is transmitted to the receiving device. And generating a solution using a last solution of a predetermined number of solutions as a new initial solution, and the encrypting means is configured such that the transmitting-side solution generating means generates a predetermined number of solutions. The transmission target data is encrypted using the solution generated as the new initial solution as the last solution, and is configured in combination with the transmission device. Based on a certain initial solution, a solution that depends on the initial solution and is uniquely determined by the initial solution is continuously generated, and the same initial solution as that used in the transmitting-side solution generating means is used. If used, the transmission side solution generating means and A process of receiving the data serving as the initial solution from the transmitting apparatus, and a process of receiving the encrypted data from the transmitting apparatus to the control means of the receiving apparatus including a control unit capable of generating a solution The process of generating a predetermined number of solutions negotiated with the transmission device using the data that is the initial solution received from the transmission device as an initial solution, and adding a final solution of the predetermined number of solutions to a new one A computer program for executing a process of generating a solution as an initial solution and a process of decrypting the encrypted data using a solution generated by using a last solution of a predetermined number of solutions as a new initial solution .
The same effect as the latter receiving apparatus can be obtained by the following method.
The method includes: a transmission device capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network; and transmitting the encrypted data from the transmission device to the network. A transmitting / receiving system comprising: a receiving device that is capable of receiving via the initial solution based on an initial solution that is predetermined data; and a solution that is uniquely determined by the initial solution Using the solution generated by the transmission-side solution generation means, encrypting means for encrypting the transmission target data into encrypted data, the receiving device, and the receiving device A transmission-side communication unit that performs communication via a network; and a unit that receives the initial solution data from the reception device when the encrypted data is transmitted and received. The transmitting-side solution generating means generates a predetermined number of solutions negotiated with the receiving device when receiving data as the initial solution from the receiving device. , The last solution of the predetermined number of solutions is generated as a new initial solution, and the encryption means generates a new initial solution by the transmitting-side solution generating means. The transmission target data is encrypted using a solution generated as a solution, and is configured by a combination with the transmission device, based on an initial solution that is predetermined data, A solution that depends on the initial solution and is uniquely determined by the initial solution is continuously generated, and if the same initial solution as that used by the transmitting-side solution generating unit is used, the transmitting-side solution The same solution as the generation method can be generated It is a method performed by the receiving apparatus includes a control unit.
In this method, the control means transmits the data serving as the initial solution to the transmitting device, receives the encrypted data from the transmitting device, and transmits the initial data transmitted to the transmitting device. A process of generating a predetermined number of solutions negotiated with the transmitting device, using the data to be a solution as an initial solution, a process of generating a solution using a final solution of the predetermined number of solutions as a new initial solution, A step of decrypting the encrypted data using a solution generated by using a last solution of a predetermined number of solutions as a new initial solution.
The latter receiving device can be realized by the following computer program, for example. By using this computer program, a general-purpose computer (for example, a personal computer or a mobile phone) can obtain the same effect as the latter transmission apparatus.
The computer program includes: a transmission device capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network; and the encrypted data from the transmission device to the network. And a receiving device that can receive the data via a receiving device that is dependent on the initial solution based on an initial solution that is predetermined data and continuously determines a solution uniquely determined by the initial solution. Transmitting-side solution generating means generated using the above-mentioned solution generated by the transmitting-side solution generating means, encrypting means for encrypting the transmission target data into encrypted data, and the receiving device When transmission / reception of the encrypted data is performed with a transmission side communication unit that performs communication via the network, the initial solution is received from the reception device. The transmitting-side solution generating means generates a predetermined number of solutions negotiated with the receiving device when receiving the data as the initial solution from the receiving device. And the solution is generated by using the last solution of the predetermined number of solutions as a new initial solution. It is constituted by a combination with the transmission device, which is configured to encrypt the transmission target data using a solution generated as a new initial solution, and is predetermined data Based on the initial solution, a solution that depends on the initial solution and is uniquely determined by the initial solution is continuously generated, and the same initial solution as that used in the transmitting-side solution generating means is used. The transmission side solution generating means A process of transmitting the data serving as the initial solution to the transmission unit to the control unit of the reception apparatus including a control unit capable of generating the same solution; and a process of receiving the encrypted data from the transmission apparatus The process of generating a predetermined number of solutions negotiated with the transmission device using the data that is the initial solution transmitted to the transmission device as an initial solution, and adding a final solution of the predetermined number of solutions to a new A computer program for executing a process of generating a solution as an initial solution and a process of decrypting the encrypted data using a solution generated by using a last solution of a predetermined number of solutions as a new initial solution .

The second invention of the present application is as follows.
The second invention of the present application is capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and authenticates the validity of a plurality of user devices. And a plurality of user devices capable of receiving the encrypted data from the authentication device via the network when the authenticity is authenticated by the authentication device. System.
The authentication device of the transmission / reception system according to the second aspect of the present invention is configured such that the authentication device continuously depends on the initial solution based on an initial solution that is predetermined data, and continuously determines a solution uniquely determined by the initial solution. Authentication-side solution generating means that is generated, encryption means that encrypts the transmission target data into encrypted data using the solution generated by the authentication-side solution generation means, and unique to each user device An authentication side recording means for recording an ID, which is information, and an initial solution for each user device unique to each user device or a solution created from the initial solution, the user device and the network; Authentication side communication means for performing communication via communication, and authentication means for determining the validity of the user device.
Each of the user devices of the transmission / reception system according to the second invention continuously generates a solution that depends on the initial solution and is uniquely determined by the initial solution based on an initial solution that is predetermined data. If the same initial solution as that used in the authentication-side solution generation means is used, a user-side solution generation means capable of generating the same solution as the authentication-side solution generation means, and the user-side solution generation Decrypting means for decrypting encrypted data encrypted by the authentication device using the solution generated by the means, user-side recording means for recording the ID of the user device, and the authentication User-side communication means for communicating with the apparatus via the network.
When the encrypted data is transmitted / received, the user device generates the user-side solution generation unit based on the ID recorded in the user-side recording unit and the initial solution or the initial solution. And the authentication-side solution generating means of the authentication device is configured to transmit the solution to the authentication device, and the authentication-side solution generation means of the authentication device is associated with the same ID as the ID received from the user device. The solution generated from the solution is read from the authentication side recording means, and the solution is generated based on the initial solution or the solution. The authentication means of the authentication device generates the authentication side solution If it is determined whether the solution generated by the means is equal to the solution received from the user device and they match, the user device is determined to be valid, If the authentication means determines that the user device is valid, the authentication side solution generation means and the user side solution generation means generate a predetermined number of solutions negotiated between each other. The last solution of the predetermined number of solutions is generated as a new initial solution, and the encryption means generates the authentication side solution generation means based on the new initial solution. The transmission target data is encrypted using a solution, and the decryption means decrypts the encrypted data using the solution generated by the user-side solution generation means based on the new initial solution. It is supposed to be.

Roughly speaking, the authentication device of the second invention corresponds to the transmitting device of the first invention, and the user device of the second invention corresponds to the receiving device of the first invention. In addition, the authentication device according to the second aspect of the invention can also authenticate the validity of the transmission device by the authentication means.
In the transmission / reception system of the first invention, data as an initial solution is sent from one of the transmission device and the reception device to the other. However, in the transmission / reception system according to the second aspect of the present invention, the initial solution data need not be sent from one of the user device and the authentication device to the other, and is sent from the user device to the authentication device. The authentication device simply uses the received data as the initial solution to generate a predetermined number of solutions in the same manner as the data received as the initial solution of the transmitting device and the receiving device in the first invention. It is also used for user device authentication. In the second invention, because it is used for authentication of the user device, the initial solution data is a solution that is continuously generated by the user device. There is no such limitation on the data that is the initial solution of the first invention, and it is sufficient that the data that becomes the initial solution is appropriate data.
The initial solution used by the user device to generate the solution is unique to each user device. Therefore, the solutions that can be generated by each user device (some of the solutions will be used as initial solutions) are unique to each user device. Each user device has an ID unique to each user device, and when sending data as an initial solution to the authentication device, an ID is also transmitted together with the data. The authentication device records the ID, which is information unique to each user device, and the initial solution for each user device unique to each user device or a solution created from the initial solution in association with each other. Means. Therefore, the authentication device can reproduce and generate a solution that can be generated from the initial solution associated with the ID sent from the user device by the authentication side solution generating means. The authentication unit of the authentication device generates the initial solution sent from the user device in association with the ID sent together with the initial solution or recorded based on the initial solution recorded in the authentication side recording unit The user device is authenticated based on whether or not it can be generated from the obtained solution.
After the authentication device determines that the user device is valid, the method of encrypted communication performed between the user device and the authentication device is the same as in the first invention. Therefore, the encrypted communication performed in the transmission / reception system of the second invention also has a high encryption strength as in the case of the first invention.

As described above, the authentication-side recording means of the authentication device includes an ID that is information unique to each user device, an initial solution unique to each user device, or a solution created from the initial solution. Are recorded in association with each other. Both the initial solution for each user device recorded in the authentication-side recording means or the solution generated from the initial solution need not be recorded. As long as there is an initial solution assigned to each user device, the authentication-side solution generating means can generate the same solution as the solution generated by the user-side solution generating means of each user device. However, since the solution already used in each user device is no longer used in principle, the data of the initial solution sent together with the ID for authentication purposes from the user device is associated with the ID of the user device. Matching all of the initial solutions for the user device and the solutions generated from it is wasteful. For example, in the authentication device, when the data to be transmitted is encrypted data, the last used is recorded in the authentication-side recording unit in a state associated with the ID of each user device. Since the solution generated after that by a certain user device is included in the solution generated based on the solution, the data of the initial solution sent together with the ID for authentication purposes from the user device is collated Can save the waste.
In this case, the authentication apparatus of the transmission / reception system according to the second aspect of the invention provides the authentication-side recording means with the solution used for encrypting the transmission target data after the transmission target data is encrypted to be encrypted data. Of these, the last used one is recorded, and after the encrypted data is decrypted to be transmitted data, the user-side recording means decrypts the encrypted data. The last used solution among the solutions used can be recorded.

When the authentication device and the user-side solution generation means of the user device and the user-side solution generation means included in the transmission / reception system of the second invention perform encryption of data to be transmitted or decryption of encrypted data Generate the solution to use. At this time, the solution used for encrypting the transmission target data and the solution used for decrypting the encrypted data may each be one or more.
In the latter case, the encryption unit cuts the transmission target data into a transmission target disconnection data by cutting it to a predetermined bit length, and then transmits each of the transmission target disconnection data to the different solutions generated by the authentication side solution generation unit. And the decryption means cuts the encrypted data into a predetermined bit length into encrypted cut data, and then converts each encrypted cut data to the user side. Decoding may be performed in order using different solutions generated by the solution generation means.

The inventor of the present application also proposes an authentication apparatus that can be included in the above transmission / reception system as one of the second inventions of the present application.
The same effect as this authentication apparatus can be obtained by the following method.
The method is capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and authenticating the validity of a plurality of user devices. A transmission / reception system comprising: an authentication device capable of receiving; and a plurality of user devices capable of receiving the encrypted data from the authentication device via the network when its authenticity is authenticated by the authentication device; User-side solution generating means for continuously generating a solution that depends on the initial solution and is uniquely determined by the initial solution based on an initial solution that is predetermined data; and the user-side solution Decryption means for decrypting encrypted data encrypted by the authentication device using the solution generated by the generation means, and a user who records the ID of the user device When the encrypted data is transmitted / received to / from the recording means, the authentication device and the user side communication means, and is generated based on the ID and the initial solution or the initial solution. And a means for transmitting the solution to the authentication device, and the user-side solution generation unit generates a predetermined number of solutions negotiated with the authentication device. In addition, a solution is generated by using the last solution of the predetermined number of solutions as a new initial solution, and the decoding unit is configured so that the user side solution generating unit newly sets the last solution of the predetermined number of solutions. A user device configured to decrypt encrypted data received from the authentication device after the authentication device determines that the user device is valid by using a solution generated as an initial solution, Union The ID, which is information unique to each user device, and the initial solution for each user device unique to each user device or the solution created from the initial solution are recorded in association with each other. Based on an initial solution that is authentication side recording means and predetermined data, a solution that depends on the initial solution and is uniquely determined by the initial solution is continuously generated, and the user side solution generation If the same initial solution as that used in the means is used, the method is executed by the authentication apparatus including a control means capable of generating the same solution as the user side solution generating means.
The method is associated with the same ID as the ID received from the user device in the process of receiving the user device ID and the initial solution or a solution generated based on the initial solution from the user device. A process of reading the initial solution or a solution generated from the initial solution from the authenticating recording means and generating a solution based on the initial solution or the solution, and the generated solution received from the user device And if they match, if the user device is determined to be valid, if the user device is determined to be valid, received from the user device Using the initial solution or a solution generated based on the initial solution as an initial solution, a process of generating a predetermined number of solutions negotiated with the user device, a last solution of the predetermined number of solutions being a new one Using the solution that caused the Kikai, the process of encrypting the transmission subject data includes.
The authentication device can be realized by the following computer program, for example. By using this computer program, a general-purpose computer (for example, a personal computer) can obtain the same effects as the authentication device.
The computer program can transmit encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and authenticates the validity of a plurality of user devices. A transmission / reception system comprising: an authentication device capable of receiving the authentication data; and a plurality of user devices capable of receiving the encrypted data from the authentication device via the network when the authenticity is authenticated by the authentication device. A user-side solution generating means for continuously generating a solution that is dependent on the initial solution and is uniquely determined by the initial solution based on an initial solution that is predetermined data; and the user side Decryption means for decrypting encrypted data encrypted by the authentication device using the solution generated by the solution generation means, and an ID of the user device A user-side recording unit that records data, a user-side communication unit that communicates with the authentication device via the network, and the ID and the initial solution or the initial value when the encrypted data is transmitted and received. And a means for transmitting the solution generated based on the solution to the authentication device, and the user-side solution generation means outputs a predetermined number of solutions negotiated with the authentication device. And generating a solution using a last solution of a predetermined number of solutions as a new initial solution, and the decoding means includes a predetermined number of solutions. The encrypted data received from the authentication device is decrypted after the authentication device determines that the user device is valid by using the solution generated as the new initial solution. Have you It is configured by a combination with a device, and corresponds to an ID, which is information unique to each user device, and an initial solution for each user device unique to each user device or a solution created from the initial solution. On the basis of the authenticating recording means for recording and the initial solution that is predetermined data, a solution that depends on the initial solution and is uniquely determined by the initial solution is continuously generated. If the same initial solution as that used by the user-side solution generating means is used, the control device of the authentication device including the control means capable of generating the same solution as the user-side solution generating means is transferred from the user device to the control device. , A process of receiving the ID of the user device and the initial solution or a solution generated based on the initial solution, generated from the initial solution or the initial solution associated with the same ID as the ID received from the user device Reading the generated solution from the authenticating recording means and generating the solution based on the initial solution or the solution, determining whether the generated solution is equal to the solution received from the user device and matching them If the user device is determined to be valid, the user device is determined to be valid, based on the initial solution or the initial solution received from the receiving device. Using the generated solution as an initial solution, a process of generating a predetermined number of solutions negotiated with the user device, and using a solution generated as a new initial solution of the last solution of the predetermined number of solutions , A computer program for executing the process of encrypting the transmission target data.

The present application also proposes a user apparatus that can be included in the above transmission / reception system as one of the second inventions of the present application.
The same effect as this user apparatus can be obtained by the following method.
The method is capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and authenticating the validity of a plurality of user devices. A transmission / reception system comprising: an authentication device capable of receiving; and a plurality of user devices capable of receiving the encrypted data from the authentication device via the network when its authenticity is authenticated by the authentication device; Based on an initial solution that is predetermined data, an authentication side solution generating means that continuously generates a solution that depends on the initial solution and is uniquely determined by the initial solution, and the authentication side solution generating means are generated Using the solution, the encryption means for encrypting the transmission target data into encrypted data, an ID that is information unique to each user device, and a unique property for each user device An authentication-side recording unit that records an initial solution for each user device or a solution created from the initial solution in association with each other, an authentication-side communication unit that communicates with the user device via the network, and the user Authentication means for determining the validity of the device, and means for receiving from the user device the ID and the initial solution or a solution generated based on the initial solution when the encrypted data is transmitted and received And when the ID and the solution are accepted, the authentication side solution generating means is configured to use the initial solution or the initial solution associated with the same ID as the ID received from the user device. The generated solution is read from the authentication side recording means, and the solution is generated based on the initial solution or the solution, and the authentication means generates the solution generated by the authentication side solution generation means You It is determined whether or not they are equal to the solution received from the device, and if they match, the user device is determined to be valid, and the authentication side solution generator is When it is determined to be valid, a predetermined number of solutions negotiated with the user device are generated, and the last solution of the predetermined number of solutions is set as a new initial solution. The encryption unit generates the transmission target data using the solution generated by the authenticating solution generation unit as a new initial solution of the predetermined number of solutions. The authentication device is configured to be combined with the authentication device, and depends on the initial solution based on the initial solution that is predetermined data, and is uniquely determined by the initial solution. Generate successive solutions And a method executed by the user device having a control unit capable of generating the same solution as the authentication side initial solution generation unit if the same initial solution as that used by the authentication side solution generation unit is used. It is.
The method includes the step of transmitting the ID of the user device and the initial solution or a solution generated based on the initial solution to the authentication device, and the encrypted data from the authentication device. Receiving the initial solution transmitted to the authentication device or a solution generated based on the initial solution, and generating a predetermined number of solutions negotiated with the authentication device, And decrypting the encrypted data using a solution generated as a new initial solution of a predetermined number of last solutions.
The user device can be realized by the following computer program, for example. By using this computer program, a general-purpose computer (for example, a personal computer or a mobile phone) can obtain the same effects as the user apparatus.
The computer program can transmit encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and authenticates the validity of a plurality of user devices. A transmission / reception system comprising: an authentication device capable of receiving the authentication data; and a plurality of user devices capable of receiving the encrypted data from the authentication device via the network when the authenticity is authenticated by the authentication device. An authentication-side solution generating means that continuously generates a solution that depends on the initial solution and is uniquely determined based on the initial solution that is predetermined data; and the authentication-side solution generating means Using the generated solution, the encryption means for encrypting the transmission target data into encrypted data, an ID that is information unique to each user device, and each An authentication-side recording means for recording an initial solution for each user device unique to the user device or a solution created from the initial solution, and authentication for communicating with the user device via the network Side communication means, authentication means for determining the validity of the user device, and when the encrypted data is transmitted and received, the ID and the initial solution or a solution generated based on the initial solution Means for receiving from the user device, and the authentication side solution generating means, when the ID and the solution are received, is associated with the same ID as the ID received from the user device An initial solution or a solution generated from the initial solution is read from the authenticating-side recording means, and a solution is generated based on the initial solution or the solution. The authenticating means generates the authenticating-side solution Means are raw If the determined solution is equal to the solution received from the user device and they match, the user device is determined to be valid. When it is determined that the user device is valid, a predetermined number of solutions negotiated with the user device are generated, and the last solution of the predetermined number of solutions is generated. A solution is generated as a new initial solution, and the encryption unit uses the solution generated by the authenticating solution generation unit as a new initial solution of the last solution of a predetermined number of solutions. The transmission target data is configured to be combined with the authentication device, and is based on an initial solution that is predetermined data, and depends on the initial solution, and the initial solution Solution uniquely determined by The user apparatus includes a control unit that can generate the same solution as the authentication side initial solution generation unit if the same initial solution as that used by the authentication side solution generation unit is used. A process of transmitting an ID of the user apparatus and the initial solution or a solution generated based on the initial solution to the control apparatus, a process of receiving the encrypted data from the authentication apparatus, The initial solution transmitted to the authentication device or a solution generated based on the initial solution is used as an initial solution to generate a predetermined number of solutions negotiated with the authentication device. A computer program for executing a process of decrypting the encrypted data using a solution generated by using the last solution as a new initial solution.

The figure which shows the whole structure of the transmission / reception system of 1st Embodiment. The figure which shows the hardware constitutions of the communication apparatus contained in the transmission / reception system shown in FIG. The block diagram which shows the structure of the encryption communication part of the communication apparatus contained in the transmission / reception system shown in FIG. The block diagram which shows the structure of the encryption / decryption part contained in the encryption communication part shown in FIG. The flowchart which shows the flow of the process performed at the time of transmission with the transmission / reception system shown in FIG. The figure which shows the whole structure of the transmission / reception system of 2nd Embodiment. The figure which shows the hardware constitutions of the authentication apparatus contained in the transmission / reception system shown in FIG. The block diagram which shows the structure of the encryption communication part of the authentication apparatus contained in the transmission / reception system shown in FIG. The block diagram which shows the example of the data currently recorded on the initial common data group recording part shown in FIG. The flowchart which shows the flow of the process performed at the time of transmission with the transmission / reception system shown in FIG.

Hereinafter, first and second embodiments of the present invention will be described.
In both embodiments, the same reference numerals are given to the overlapping objects, and the overlapping description will be omitted in some cases.

<< First Embodiment >>
The transmission / reception system according to this embodiment is schematically configured as shown in FIG.
This transmission / reception system includes N communication devices 1 including a communication device 1-1, a communication device 1-2, a communication device 1-3,. The communication devices 1 are connected to each other via a predetermined network 3. The network 3 is the Internet in this embodiment, although not limited to this. The network 3 may be configured by something other than the Internet, such as a LAN, or may include something other than the Internet.

The communication device 1 includes a computer. The communication devices 1-1 to 1-N can transmit and receive data to and from each other. Speaking of the relationship with the first invention of the present application, all the communication devices 1 in this embodiment serve as both a transmission device and a reception device. Any data may be transmitted and received between the communication devices 1.
Although not limited to this, the communication device 1 in this embodiment is a general-purpose personal computer. The communication device 1 can also be configured by a mobile phone.
In this embodiment, data transmitted and received between each of the communication devices 1-1 to 1-N is not limited to this, but is e-mail data. In this embodiment, an electronic mail is encrypted and transmitted / received between each of the communication devices 1-1 to 1-N. Although not necessarily limited to this, the communication device 1 divides data to be transmitted and received into packets and performs packet communication in the present embodiment.

  Next, the configuration of the communication device 1 will be described. The configurations of the communication devices 1-1 to 1-N can be said to be the same in relation to the first invention of the present application.

FIG. 2 shows a hardware configuration of the communication device 1 common to the communication devices 1-1 to 1-N.
In this embodiment, the communication device 1 includes a central processing unit (CPU) 21, a hard disc drive (HDD) 22, a read only memory (ROM) 23, a random access memory (RAM) 24, an input device 25, a display device 26, The encryption communication unit 27 and the bus 28 are included. The CPU 21, HDD 22, ROM 23, RAM 24, input device 25, display device 26, and encrypted communication unit 27 can exchange data via a bus 28.
The ROM 23 stores a predetermined program and data necessary for executing the program. This program includes the program of the present invention. Note that the program of the present invention may execute processing described later in cooperation with another program such as an OS or other data. Further, this program may be installed in the communication device 1 from the time of shipment of the communication device 1, or may be installed by the user's hand after the communication device 1 is shipped. When a program is installed in the communication apparatus 1, the program may be installed in the communication apparatus 1 from a predetermined recording medium, or may be installed by distribution via a network. A part of the program, data, etc. recorded in the ROM 23 may be recorded in the HDD 22.
The HDD 22 is a large capacity recording medium. As described above, the HDD 22 can take over some of the functions of the ROM 23. In addition, a part of the functions of the RAM 24 can be taken over. The HDD 22 also records programs and data that are not recorded in the ROM 23 and RAM 24. For example, the HDD 22 stores an OS program for controlling the communication device 1 in this embodiment.
The CPU 21 controls the entire communication device 1 and executes processing to be described later based on programs and data stored in the ROM 23. The RAM 24 is used as a working storage area when the CPU 21 performs processing to be described later. In addition, an initial solution, which will be described later, is recorded in the RAM 24 as necessary.
The input device 25 is configured such that at least the communication device 1 can perform input necessary when communicating with another communication device 1. Although the input device 25 is not limited to this, it can be configured by a keyboard and a mouse. Of course, other known input means can be used for the input device 25.
The display device 26 is configured by, for example, an LCD (liquid crystal display). The display device 26 is configured to display the content input from the input device 25, the content of processing executed in the communication device 1, and the like. It goes without saying that known display means such as a CRT (cathode ray tube), an organic EL (electroluminescence) panel or the like can be adopted as the display device 26.
The encrypted communication unit 27 performs communication via the network 3. The encrypted communication unit 27 can perform encrypted communication using encrypted data in both cases of transmission and reception. The encrypted communication unit 27 of a certain communication device 1 can transmit / receive encrypted data to / from the encrypted communication unit 27 of another communication device. Details of the encrypted communication performed by the encrypted communication unit 27 will be described later.

Next, the configuration of the encrypted communication unit 27 will be described. FIG. 3 shows a block configuration diagram of the encrypted communication unit 27. Note that some of the functions of the encrypted communication unit 27 may be formed by the functions of the above-described program. In this embodiment, this is the case.
The encryption communication unit 27 includes an interface unit 31, a preprocessing unit 32, an encryption / decryption unit 33, a common data generation unit 34, a common data recording unit 34A, an algorithm generation unit 35, a key generation unit 36, and a communication unit 37. , A header generation unit 38, and a connection unit 39.
Note that the communication device 1 may function both as a transmission device that transmits data and as a reception device that receives data. The communication device 1 includes an encryption communication unit 27, an interface unit 31, a preprocessing unit 32, and encryption / decryption. The functions of the conversion unit 33, the common data generation unit 34, the algorithm generation unit 35, the key generation unit 36, the communication unit 37, the header generation unit 38, and the connection unit 39 are the same as when the communication device 1 functions as a transmission device and It may be different when functioning as a device. Therefore, in the following description, the former case is expressed as “at the time of transmission”, and the latter case is expressed as “at the time of reception”, and both are described separately.

The interface unit 31 exchanges data between the bus 28 and the encrypted communication unit 27.
At the time of transmission, the interface unit 31 functions as follows. The interface unit 31 sends data received from the bus 28 (for example, e-mail data described later) to the preprocessing unit 32. When the interface unit 31 receives voice data from the bus 28, the interface unit 31 notifies the common data generation unit 34 of the fact.
On the other hand, the interface unit 31 functions as follows during reception. The interface unit 31 has a function of sending data received from another communication device 1 via the network 3 (for example, e-mail data described later) to the bus 28.

At the time of transmission, the preprocessing unit 32 cuts data (for example, e-mail data) received from the bus 28 via the interface unit 31 into predetermined packets to form packets. The preprocessing unit 32 is configured to send the generated packet to the encryption / decryption unit 33.
At the time of reception, the preprocessing unit 32 functions as follows. When the pre-processing unit 32 receives the data of the e-mail, which is an enumeration of packets from the communication device 1 of the other party, via the communication unit 37, the pre-processing unit 32 sends it to the encryption / decryption unit 33. ing. When the preprocessing unit 32 receives data from the communication device 1 of the other party via the communication unit 37, the preprocessing unit 32 notifies the common data generation unit 34 to that effect.

The common data generation unit 34 sequentially generates common data. This common data corresponds to “solution” in the present invention. In this sense, the common data generation unit 34 functions as a transmission-side solution generation unit in the present application at the time of transmission and as a reception-side solution generation unit in the present application at the time of reception. In the description of the embodiment, “solution” and “common data” are synonymous.
The common data is generated based on the initial solution (initial common data). The common data may be, for example, numbers consecutive with 1, 2, 3,. In this embodiment, common data is continuously generated based on past solutions generated by the common data generation unit 34. In this embodiment, the common data generated in succession is not necessarily limited to this, but becomes a pseudo-random number that undergoes nonlinear transition, and exhibits chaotic behavior. In the common data recording unit 34A, data of an initial solution necessary for generating common data is recorded at least before the first communication is performed. In the common data recording unit 34A, common data generated in the past necessary for generating the common data is recorded as necessary. The common data generation unit 34 writes and updates the common data to the common data recording unit 34A.
When communication is performed between the communication devices 1, if the common data is the same in the initial solution, the common data generated in the same order is compared with that common to both communication devices 1 in which communication is performed. It is supposed to be. This mechanism will be explained later.
When the e-mail data is transmitted to the other communication device 1, the common data generation unit 34 receives the notification that the e-mail data has been received from the interface unit 31. When receiving a notification from the preprocessing unit 32 that the electronic mail data has been received, generation of common data is started.
The generated common data is sent to the preprocessing unit 32, the encryption / decryption unit 33, the algorithm generation unit 35, and the key generation unit 36 at the time of transmission and at the time of reception. It has become. At the time of transmission, the common data generation unit 34 sends initial solution data used to continuously generate solutions to the communication unit 37 and sends it to the communication device 1 on the receiving side via the communication unit 37. It is like that.
A mechanism for generating the common data, which is a pseudo-random number, in the same manner in two communication devices 1, that is, in a remote device such as the communication device 1 on the transmission side and the communication device 1 on the reception side. Will be described in detail later.

The encryption / decryption unit 33 encrypts data (for example, e-mail data) received from the pre-processing unit 32 at the time of transmission to be encrypted data, and receives data from the pre-processing unit 32 at the time of reception. The encrypted data is decrypted and returned to common data.
As shown in FIG. 4, the encryption / decryption unit 33 includes an encryption unit 33A and a decryption unit 33B. The encryption unit 33A performs encryption processing, and the decryption unit 33B performs decryption processing. Each is designed to run. The encrypted data generated by encrypting by the encryption unit 33A is sent to the connection unit 39. Data generated by decoding by the decoding unit 33B is sent to the interface unit 31.
Both the encryption unit 33A and the decryption unit 33B of the encryption / decryption unit 33 use an algorithm and a key when performing encryption or decryption processing. The algorithm generation unit 35 and the key generation unit 36 supply the algorithm and key to the encryption / decryption unit 33.

The algorithm generation unit 35 generates an algorithm based on the common data received from the common data generation unit 34. The generated algorithm is sent from the algorithm generation unit 35 to the encryption / decryption unit 33.
The key generation unit 36 generates a key based on the common data received from the common data generation unit 34. The key is sent from the key generation unit 36 to the encryption / decryption unit 33.
Although not necessarily so, in this embodiment, each of the algorithm generation unit 35 and the key generation unit 36 generates an algorithm or a key each time it receives common data from the common data generation unit 34. . Details of the algorithm and how to generate the key will be described later.

  The header generation unit 38 functions only at the time of transmission, and generates header data attached to each of the packets encrypted by the encryption / decryption unit 33 to become encrypted data. The header generally includes, for example, information for specifying the transmission source communication device 1, information for specifying the transmission destination communication device 1, and the amount of data included in the packet to which the header is attached. Contains necessary information. Data to be included in the header is sent to the header generation unit from somewhere, for example, from the interface unit 31 in advance. The header generation unit 38 sends the generated header data to the connection unit 39. The connection unit 39 functions only at the time of transmission, and is generated by the header generation unit 38 in the encrypted packet sent from the encryption / decryption unit 33 (for example, at the head of the packet). Has the function of integrating the header.

The communication unit 37 exchanges data with the network 3.
At the time of transmission, the communication unit 37 receives data from the connection unit 39 as a list of packets with a header and sends it to the other communication device 1 via the network 3. At the time of transmission, the communication unit 37 is configured to send the initial solution data received from the common data generation unit 134 to the communication device 1 on the reception side via the network 3.
At the time of reception, the communication unit 37 receives e-mail data from the communication device 1. The communication unit 37 sends this data to the preprocessing unit 32. At the time of reception, the communication unit 37 receives initial solution data from the transmission-side communication device 1 via the network 3. The communication unit 37 is configured to send the initial solution data received from the communication device 1 on the transmission side to the common data generation unit 34.

  Next, the flow of processing executed in this transmission / reception system will be described with reference to FIG.

When communication is performed in this communication system, first, one of the communication devices 1 on the transmission side includes information that specifies the other communication device 1 that is the other party of communication. E-mail data including data requesting communication is generated (S101).
Specifically, a user having the communication device 1 operates the input device 25 of his / her communication device 1 to specify information for identifying another communication device 1 that is a communication partner (this is, for example, This is an e-mail address that can be used in other communication devices 1), and the data of the content to be transmitted is input to create e-mail data. The e-mail data is generated, for example, by the function of a known program of the e-mail mailer recorded in the HDD 22 or the like. The generated e-mail data is encrypted later, but in this embodiment, it is once recorded in the HDD 22 before being encrypted.

Next, the communication device 1 on the transmission side sends an initial solution used for encrypting the e-mail to the communication device 1 on the reception side (S102).
Next, the communication device 1 on the transmission side encrypts the above-described e-mail data recorded in the HDD 22 (S103).
Next, the communication device 1 on the transmission side sends the encrypted electronic mail data to the communication device 1 on the reception side via the network 3 (S104).

The processing of S102 to S104 will be described in detail below.
Prior to transmission to the communication device 1 on the receiving side, the e-mail data is sent from the HDD 22 to the encryption communication unit 27 via the bus 28 based on an instruction from the CPU 21. The e-mail data is encrypted by the encryption communication unit 27.
The e-mail data is received by the interface unit 31 of the encrypted communication unit 27. The interface unit 31 sends the communication request data to the preprocessing unit 32 and notifies the common data generation unit 34 that the e-mail data has been received.
The preprocessing unit 32 cuts e-mail data every predetermined number of bits to generate a large number of packets. Although not necessarily limited to this, in this embodiment, the communication request data is sequentially cut from the front so that the order of data arrangement is not changed. Although not necessarily required, the preprocessing unit 32 of this embodiment disconnects the communication request data so that the data included in each packet has the same size. The packet generated by the preprocessing unit 32 is sent to the encryption / decryption unit 33.
On the other hand, the common data generation unit 34 that has received the above notification from the interface unit 31 generates common data.
The generation of common data in the common data generation unit 34 is performed as follows. The common data generation unit 34 generates the same number of common data as the number of packets generated by the preprocessing unit 32 by dividing the communication request data. Although not limited to this, the common data in this embodiment is a matrix (X) of 8 rows and 8 columns. The common data generation unit 34 does not necessarily have to be so, but in this embodiment, as described above, the common data is generated as a pseudo random number that undergoes nonlinear transition.
In order to continuously generate the common data so as to make a non-linear transition, for example, (1) include the calculation of the power of the past common data in the process of generating the common data, (2) in the process of generating the common data A method of including multiplication of two or more common data in the past or combining (1) and (2) can be considered.
In this embodiment, in the common data recording unit 34A, the 01st common data (X ₀₁ ) and the 02nd common data (X ₀₂ ) are recorded in advance as an initial matrix that is an initial solution (initial common data) ( The 01st common data and the 02nd common data may be recorded in advance in the ROM 23 or the like. Although not necessarily limited to this, in this embodiment, the initial matrices included in each communication device 1 are unique to each other.

The common data generation unit 34 reads this initial matrix from the common data recording unit 34A and uses it to generate common data. The common data generation unit 34 sends the initial common data read from the common data recording unit 34A to the communication unit 37 before generating the common data based on the initial common data. The communication unit 37 sends it to the receiving side communication device 1 via the network 3. Since the transmitted initial common data is used to decrypt the email data encrypted in the receiving side communication device 1 as described later, the initial common data is decrypted in the receiving side communication device 1. What is necessary is just to make it send to the communication apparatus 1 of a receiving side at an appropriate timing which the communication apparatus 1 of a receiving side receives at the time of conversion.
Subsequently, the common data generation unit 34 continuously generates common data using the same initial common data as that sent to the communication unit 37. The common data is generated by substituting the initial common data into the common data generation algorithm held by the common data generation unit 34.
From the initial common data, the first common data (X ₁ ) is generated as follows.
First common data (X ₁ ) = X ₀₂ X ₀₁ + α (α = 8 × 8 matrix)
This is the first common data generated.
Here, α is environment information. However, environmental information is not always necessary. α is, for example, “1” when appropriate information such as the date of the day or an e-mail address used in the communication device 1 on the transmission side is displayed again in binary according to an appropriate rule. It is assumed that the data string represented by “0” is sequentially applied to the elements of the 8 × 8 matrix. When the date of the day is re-displayed in binary, the number that makes up the data string represented by “1” and “0” is 64, which is the number of elements in the 8-by-8 matrix. If not, for example, α may be created by repeatedly using a data string composed of numbers “1” and “0” that are less than 64, and there are 64 numbers that make up the data string. For example, α may be created by cutting unnecessary numbers.
The common data generation unit 34 generates the second common data (X ₂ ) as follows.
Second common data (X ₂ ) = X ₁ X ₀₂ + α
Similarly, the common data generation unit 34 generates third common data, fourth common data,..., Nth common data as follows.
Third common data (X ₃ ) = X ₂ X ₁ + α
Fourth common data (X ₄ ) = X ₃ X ₂ + α
:
Nth common data (X _N ) = X _N−1 X _N−2 + α
The common data generated in the same number as the number of packets in this way is sent to the algorithm generation unit 35 and the key generation unit 36 and held in the common data generation unit 34 to generate the next common data. Will be. In this embodiment, in order to generate the Nth common data (X _N ), the N-1th common data (X _N-1 ) and the N-2th common data (X _N-2 ), that is, immediately before Two common data generated in the above are used. Therefore, the common data generation unit 34 must hold the two most recent common data generated in the past in order to generate new common data (or any other person who is not the common data generation unit 34 may have Two common data must be kept).
The common data generated in this way is chaotic with non-linear transition and becomes a pseudo-random number.
Note that α, which is environment information, is not necessarily used in all cases where common data is generated. For example, when generating the first common data,
(X ₁ ) = X ₀₂ X ₀₁ + α
When α is used to generate common data after the second common data,
(X _N ) = X _N-1 X _N-2 An expression that does not use α may be used.
In order to cause a non-linear transition in the generated common data, when obtaining the Nth common data,
Nth common data (X _N ) = X _N−1 X _N−2 (+ α)
In addition to using the following formula, it is conceivable to use the following formula.
Note that the parenthesis written to α is not necessarily required when generating all common data, including the following examples, or when generating common data after the second common data. It is shown that.
Formulas that can be used are, for example,
(A) Nth common data (X _N ) = (X _N−1 ) ^P (+ α)
(B) Nth common data ( _XN ) = ( _XN-1 ) ^P ( _XN-2 ) ^Q ( _XN-3 ) ^R ( _XN-4 ) ^S (+ α)
(C) Nth common data (X _N ) = (X _N−1 ) ^P + (X _N−2 ) ^Q (+ α)
Etc.
P, Q, R, and S are predetermined constants. Further, one initial matrix is recorded in the common data recording unit 34A when using the mathematical formula (a), two when using the mathematical formula (c), and four initial matrices when using the mathematical formula (b). There is a need. In this embodiment, when a series of encryption or decryption processing ends and generation of further common data is no longer necessary, the last generated common data is used as a new initial matrix. The common data generation unit 34 overwrites the common data recording unit 34A.

The common data generation unit 34 can continuously generate common data as described above.
Here, the common data generation unit 34 of this embodiment first generates an appropriate number of common data negotiated between the communication device 1 on the transmission side and the communication device 1 on the reception side. The “appropriate number negotiated between the communication device 1 on the transmission side and the communication device 1 on the reception side” is the same among all the communication devices 1 and is most easily fixed. Not necessarily that.
For example, the “number” is the time when the initial common data is sent from the communication device 1 on the transmission side to the communication device 1 on the reception side, or sent from the communication device 1 on the transmission side to the communication device 1 on the reception side. It may be variable so as to be determined based on the sum of numbers included in the matrix of initial common data. Further, for example, the above-mentioned “number” may be determined based on the difference between the e-mail address of the communication device 1 on the transmission side and the e-mail address of the communication device 1 on the reception side in the form of a number sequence. For example, the “number” varies depending on the combination of the communication device 1 on the transmission side and the communication device 1 on the reception side. All of these are examples, but the above-mentioned “number” may be determined by a combination thereof.
For the sake of simplicity, the “appropriate number negotiated between the communication device 1 on the transmission side and the communication device 1 on the reception side” is common and fixed among all the communication devices 1, and the number Is 10.
Ten common data are generated after reading the initial common data recorded in the common data recording unit 34A, and the initial common data recorded in the common data recording unit 34A is overwritten with the last generated common data. Note that the “common data generated last” may be plural when there is a plurality of common data necessary for the generation of common data thereafter. In this embodiment, since the common data is generated by the formula Nth common data (X _N ) = X _N−1 X _N−2 (+ α), the initial common data recorded in the common data recording unit 34A is used. The 9th generated common data and the 10th generated common data after reading are recorded in the common data recording unit 34A. This becomes new initial common data.
The common data generation unit 34 uses the new initial common data to generate new common data in the same manner as described above. However, the common data generation unit 34 can set the mathematical formula used when generating common data using new initial common data to be different from the mathematical formula used when generating new initial common data. . In that case, it is necessary to share the decision between the communication device 1 on the transmission side and the communication device 1 on the reception side.
The common data generation unit 34 sends the common data generated in order based on the new initial solution to the algorithm generation unit 35 and the key generation unit 36.

When the common data is received from the common data generation unit 34, the algorithm generation unit 35 generates an algorithm, and the key generation unit 36 generates a key.
The method of generating the algorithm and key is, for example, as follows. Both the algorithm and the key are created using common data in this embodiment.
In this embodiment, the algorithm generation unit 35 generates an algorithm as follows.
The algorithm in this embodiment is as follows: “When the common data to be encrypted is an 8-by-8 matrix Y, the 8 × 8 matrix X, which is the common data, is raised to the power a and then n × 90 clockwise. It is defined that what is obtained by multiplying the matrix rotated by 0 ° by Y is encrypted data ”.
Here, a may be a predetermined fixed constant, but in this embodiment, a is a number that changes based on common data. That is, the algorithm in this embodiment changes based on common data. For example, a is the remainder when the number obtained by adding all the numbers of matrix elements included in the common data which is a matrix of 8 rows and 8 columns is divided by 5 (however, when the remainder is 0) a = 1)).
Also, n described above is a key and is a predetermined number. If the key is a fixed number, n is fixed, but as described below, in this embodiment, the key changes based on common data. That is, in this embodiment, this n also changes based on the common data.
However, the algorithm can be determined as another one. Also, the algorithm may be unchanged, that is, fixed. The generation of the algorithm is not limited to the case where the algorithm is newly created as described above, and one of a plurality of algorithms prepared in advance is used by using common data (for example, paying attention to a part of the common data). Including the case of selecting.
In this embodiment, the algorithm generation unit 35 generates an algorithm each time it receives common data from the common data generation unit 34 and sends it to the encryption unit 33A of the encryption / decryption unit 33.
On the other hand, in parallel with the algorithm generation by the algorithm generation unit 35, the key generation unit 36 generates a key. As described above, the key generation unit 36 generates a key based on the common data. Key generation is not limited to the case where a key is newly created as described below, and one of a plurality of keys prepared in advance is used using common data (for example, paying attention to a part of the common data). Including the case of selecting.
In this embodiment, the key generation unit 36 generates a key as follows.
The key in this embodiment is a number obtained by adding all the numbers that are the elements of the matrix included in the common data that is a matrix of 8 rows and 8 columns. Thus, the key changes based on the common data in this embodiment. Note that the key can be determined as another one. For example, the key can be defined as the last two digits of the number obtained by multiplying all the numbers that are the elements of the matrix included in the common data that is a matrix of 8 rows and 8 columns.
In this embodiment, the key generation unit 36 generates a key each time it receives common data from the common data generation unit 34 and sends it to the encryption unit 33A of the encryption / decryption unit 33.

The encryption unit 33A encrypts the data received from the preprocessing unit 32 based on the algorithm received from the algorithm generation unit 35 and the key received from the key generation unit 36. Here, as described above, what is encrypted is a packet created by cutting electronic mail data.
As described above, when the common data to be encrypted is an 8 × 8 matrix Y, the algorithm raises the 8 × 8 matrix X, which is the common data, to the power of a, and then n × clockwise It is a rule that “the product obtained by multiplying the matrix rotated by 90 ° by Y is encrypted data”, and the key n is a number determined by the method described above.
For example, when a is 3 and n is 6, 8 obtained by rotating an 8 × 8 matrix obtained by raising X to the third power clockwise by 6 × 90 ° = 540 °. Encryption is performed by multiplying the matrix of 8 rows and the common data to be encrypted.
The data generated by this is encrypted data.
The encrypted data is sent to the connection unit 39.
Each time encrypted data is generated, the header generation unit 38 generates header data that is data serving as a header of the encrypted data. The header includes information as described above. The header includes at least information indicating which communication device 1 is the transmission destination of the packet, and information specifying which of the communication devices 1 is the transmission source of the packet. In order to align the number of encrypted data generated by the encryption unit 33A and the number of header data generated by the header generation unit 38, for example, the encryption unit 33A sends the encryption unit to the header generation unit 38. What is necessary is just to notify that every time a packet is encrypted in 33A, or to notify the number of times the encryption unit 33A has performed encryption. In addition, the preprocessing unit 32 may notify the header generation unit 38 of the number of generated packets.
The header generation unit 38 sends the generated header to the connection unit 39.
The connection unit 39 connects the header received from the header generation unit 38 to the head of the encrypted data (encrypted packet) received from the encryption unit 33A. The connection unit 39 performs this process for all packets.
The packet to which the header is connected is sent from the connection unit 39 to the communication unit 37.
The communication unit 37 sends the packet to the communication device 1 on the receiving side via the network 3. Each packet is sent to the correct communication device 1 according to the information written in the header.

As described above, initial common data is sent from the communication device 1 on the transmission side to the communication device 1 on the reception side. The sent initial common data is received by the communication device 1 on the receiving side (S201).
As described above, the encrypted electronic mail data is packetized and transmitted from the transmission-side communication device 1 to the reception-side communication device 1. The sent e-mail data is received by the communication device 1 on the receiving side (S202).
Both the initial common data and the e-mail data are received by the communication unit 37 included in the encrypted communication unit 27 of the communication device 1 on the receiving side.

Next, the communication device 1 on the receiving side decrypts the email data (S203).
Such decryption is performed by the encrypted communication unit 27.
The communication unit 37 sends the received packets to the preprocessing unit 32 one after another. When the preprocessing unit 32 receives a packet, the preprocessing unit 32 deletes the header from each packet and sends a notification that the packet has been received to the common data generation unit 34.

When the notification that the packet has been received is received from the preprocessing unit 32, the common data generation unit 34 generates common data.
The method of generating the common data in the common data generating unit 34 is the same as that at the time of transmission described above. That is, in this embodiment, common data is generated using the initial common data and the environment information.
The initial common data used by the common data generator 34 is sent from the communication device 1 on the transmission side. The initial common data is recorded in the common data recording unit 34A via the common data generating unit 34 from the communication unit 37 that has received the initial common data.
The common data generation unit 34 of the communication device 1 on the reception side is negotiated in advance between the communication device 1 on the transmission side and the communication device 1 on the reception side, as the common data generation unit 34 of the communication device on the transmission side does. The number (10) of common data is generated based on the initial common data received from the communication device 1 on the transmission side, and is recorded in the common data recording unit 34A. Then, the common data recording unit 34A uses the ninth and tenth common data generated last as new initial common data, and continuously generates common data based on the new initial common data. .
The common data generated based on the new common data is sent from the common data generation unit 34 to the algorithm generation unit 35 and the key generation unit 36.

The algorithm generation unit 35 and the key generation unit 36 generate an algorithm and a key each time the common data is received from the common data generation unit 34. The method of generating the algorithm and key is the same as that at the time of transmission.
The algorithm generation unit 35 uses common data when generating an algorithm. The process in which the algorithm generation unit 35 of the communication device 1 on the reception side generates the algorithm is the same as the process in which the algorithm generation unit 35 of the communication device 1 on the transmission side generates the algorithm. Since the algorithm generated in the same order in the communication device 1 on the transmission side and the communication device 1 on the reception side is generated based on the same common data, it is always the same.
On the other hand, the key generation unit 36 uses common data when generating a key. The process of generating the key by the key generation unit 36 of the communication device 1 on the receiving side is the same as the process of generating the key by the key generation unit 36 of the communication device 1 on the transmission side. Since the keys generated in the same order in the communication device 1 on the transmission side and the communication device 1 on the reception side are generated based on the same common data, they are always the same.
The algorithm generation unit 35 and the key generation unit 36 send the generated algorithm or key to the decryption unit 33B of the encryption / decryption unit 33.
The decryption unit 33B decrypts the encrypted data received from the preprocessing unit 32. When performing such decryption, the decryption unit 33B uses the algorithm and key received from the algorithm generation unit 35 and the key generation unit 36.
More specifically, the decryption unit 33B uses the algorithm received from the algorithm generation unit 35 (“8 × 8 matrix X, which is the common data, when the common data to be encrypted is an 8 × 8 matrix Y”). Is obtained by multiplying the matrix rotated by n × 90 ° clockwise by Y and multiplying it by a to the power a, and the decryption process is performed based on the definition of “encrypted data”. Algorithm (“When the encrypted data is viewed as an 8 × 8 matrix Z, the 8 × 8 matrix X, which is common data, is raised to a power and then rotated clockwise by n × 90 °. An operation in accordance with the above-described definition using the key received from the key generation unit 36 is generated by multiplying the inverse matrix of the matrix by Y to obtain the plaintext data before encryption ” To perform the decryption process.
In this way, the decryption unit 33B decrypts the encrypted data sent from the preprocessing unit 32 in order, and decrypts the email data divided into packets.

  The decryption unit 33B collectively sends the decrypted electronic mail data to the interface unit 31. This data is recorded in the HDD 22, RAM 24, etc. as necessary, and is used as appropriate by the communication device 1 on the receiving side.

<Modification>
In the first embodiment, initial common data is transmitted from the communication device 1 on the transmission side to the communication device 1 on the reception side.
However, the initial common data may be sent from the communication device 1 on the reception side to the communication device 1 on the transmission side.
In this case, for example, prior to the transmission of the e-mail data from the communication device 1 on the transmission side to the communication device 1 on the reception side, the e-mail is transmitted from the communication device 1 on the transmission side to the communication device 1 on the reception side. A receive request is sent requesting receipt. Then, the receiving side communication device 1 receives the initial common data recorded in the common data recording unit 34 </ b> A via the common data generating unit 34, the communication unit 37, and the network 3. Send to device 1. In this way, the communication device 1 on the transmission side and the communication device 1 on the reception side can have common initial common data.
The common data generation unit 34 on the transmission side and the common data generation unit 34 on the reception side generate new initial common data based on the received or transmitted initial common data, and encrypt or decrypt based on the new initial common data It is sufficient to generate common data used in

<< Second Embodiment >>
A communication system according to the second embodiment will be described.
The communication system according to the second embodiment includes communication devices 1-1 to 1-N and an authentication device 2 that are configured in substantially the same manner as in the first embodiment. These can be connected to each other via the network 3.
The communication devices 1-1 to 1-N according to the second embodiment can perform encrypted communication between the communication devices 1-1 to 1-N in the same manner as in the first embodiment. Yes. In addition, the communication devices 1-1 to 1-N of the second embodiment can be connected to the authentication device 2. As will be described later, the communication between the communication device 1 and the authentication device 2 is plain text communication in the case of data transmission from the communication device 1 to the authentication device 2, but data transmission from the authentication device 2 to the communication device 1 is performed. In this case, encrypted communication is assumed. Note that communication between the authentication device 2 and the communication device 1 is communication via a general-purpose Internet browser in this embodiment.
In the second embodiment, the authentication device 2 authenticates the communication device 1-1 to the communication device 1-N, and performs data on the communication device 1-1 to the communication device 1-N that have been authenticated as appropriate. For example, it is assumed that data of moving image content is transmitted.

  The communication device 1 of the second embodiment is configured in the same manner as the communication device 1 of the first embodiment. However, the initial common data recorded in the common data recording unit 34A of each of the communication devices 1-1 to 1-N according to the second embodiment is unique to each other.

  The authentication device 2 has the same basic configuration as the communication device 1 of the first embodiment.

Next, the configuration of the authentication device 2 will be described. The authentication device 2 is not limited to this, but is configured by a general-purpose computer in this embodiment. The authentication device 2 can be divided into two or more devices, for example, a transmission server that transmits content data to be described later and an authentication server that performs authentication processing to be described later. Naturally.
The hardware configuration of the authentication device 2 is shown in FIG.
In this embodiment, the authentication device 2 includes a CPU 121, an HDD 122, a ROM 123, a RAM 124, an input device 125, a display device 126, an encrypted communication unit 127, and a bus 128. The CPU 121, HDD 122, ROM 123, RAM 124, input device 125, display device 126, and encrypted communication unit 127 can exchange data via the bus 128.
The functions of the CPU 121, HDD 122, ROM 123, RAM 124, input device 125, display device 126, encrypted communication unit 127, and bus 128 are the CPU 21, HDD 22, ROM 23, RAM 24, input device 25, display device 26, encryption of the communication device 1. The functions of the communication unit 27 and the bus 28 are substantially the same. Note that the content data described above is recorded in the HDD 122 of the second embodiment.
The ROM 123 stores a predetermined program and data necessary for executing the program. The program includes a program for giving the authentication device 2 the function of the authentication device of the present invention. This program also includes a program for realizing the above-described browser. The programs included in the authentication device 2 including these programs may be executed alone or in cooperation with other programs such as the OS.
The CPU 121 controls the entire authentication device 2 and executes processing to be described later based on programs and data stored in the ROM 123. The RAM 124 is used as a working storage area when the CPU 121 performs processing to be described later. In addition, an initial solution, which will be described later, is recorded in the RAM 124 as necessary.
The input device 125 may be a known input device such as a keyboard and a mouse. Used when entering an initial solution. The display device 126 is configured by an LCD, for example. However, the input device 125 and the display device 126 are not necessarily used while the invention of the method of the present application is being implemented.
The encrypted communication unit 127 executes communication with the communication device 1 via the network 3. In this embodiment, the communication that the encrypted communication unit 127 uses as the communication device 1 is encrypted communication as described above.

Next, the configuration of the encrypted communication unit 127 will be described. FIG. 8 shows a block configuration diagram of the encrypted communication unit 127.
In the following description, the term “at the time of transmission” means that data is transmitted from the authentication device 2 to the communication device 1, and mainly means at the time of transmission of content data. The term “when receiving” in the following description means that the authentication device 2 receives data from the communication device 1, and the reception of ID and initial common data, which is information for specifying the communication device 1. It means time.
The encrypted communication unit 127 includes an interface unit 131, a preprocessing unit 132, an encryption unit 133, a common data generation unit 134, an initial common data group recording unit 134A, an algorithm generation unit 135, a key generation unit 136, a communication unit 137, The header generation unit 138, the connection unit 139, and the authentication unit C are included. The interface unit 131, preprocessing unit 132, encryption unit 133, common data generation unit 134, algorithm generation unit 135, key generation unit 136, communication unit 137, header generation unit 138, and connection unit 139 are connected to the communication device 1. Substantially the same as the interface unit 31, preprocessing unit 32, encryption / decryption unit 33, common data generation unit 34, algorithm generation unit 35, key generation unit 36, communication unit 37, header generation unit 38, and connection unit 39. It has the function of

The interface unit 131 exchanges data between the bus 128 and the encrypted communication unit 127.
At the time of transmission, the interface unit 131 functions as follows. The interface unit 131 sends data (content data in this embodiment) received from the bus 128 to the preprocessing unit 132. Further, when the interface unit 131 receives content data from the bus 128, the interface unit 131 notifies the common data generation unit 134 to that effect.
On the other hand, the interface unit 131 does not function particularly during reception.

At the time of transmission, the preprocessing unit 132 is configured to cut and packetize content data received from the bus 128 via the interface unit 131 for each predetermined number of bits. The preprocessing unit 132 is configured to send the generated packet to the encryption unit 133.
At the time of reception, when receiving the communication request data described later from the communication device 1, the preprocessing unit 132 extracts the ID from the data and sends it to the common data generation unit 134. .

The common data generation unit 134 continuously generates common data by the same method as the common data generation unit 34 of the communication device 1. The common data generated by the common data generation unit 134 is the same as that generated by the common data generation unit 34 of the communication device 1 if the same initial common data is used. The common data generation unit 134 receives a notification that the content data has been received from the interface unit 131 at the time of transmission, and receives a notification that audio data has been received from the preprocessing unit 132 at the time of reception. When received, generation of common data is started.
In the case of transmission, the generated common data is sent to the preprocessing unit 132, the encryption unit 133, the algorithm generation unit 135, and the key generation unit 136. In the case of reception, the common data is sent to the authentication unit C.
When generating the common data, unique initial common data is used for each communication device 1 recorded in the initial common data group recording unit 134A. In the initial common data group recording unit 134A, the unique ID assigned to each communication device 1 and the initial common data are recorded in a state of being linked to each other as shown in FIG. 9, for example. Yes. The initial common data for each communication device 1 is updated by a method described later, but the management is performed by the common data generation unit 134.

At the time of transmission, the encryption unit 133 encrypts the content data received from the common data generation unit 134 into encrypted data. The encryption unit 133 does not particularly function during reception. The encryption unit 133 may be said to have eliminated the function of the decryption unit 33B of the encryption / decryption unit 33 of the communication device 1.
The encrypted data generated by encryption by the encryption unit 133 is sent to the connection unit 139.
The encryption unit 133 uses an algorithm and a key when performing encryption processing. The algorithm generation unit 135 and the key generation unit 136 supply the algorithm and key to the encryption unit 133.

The algorithm generation unit 135 generates an algorithm based on the common data received from the common data generation unit 134. The generated algorithm is sent from the algorithm generation unit 135 to the encryption unit 133.
The key generation unit 136 generates a key based on the common data received from the common data generation unit 134. The key is sent from the key generation unit 136 to the encryption unit 133.
Although not necessarily so, in this embodiment, the algorithm generation unit 135 and the key generation unit 136 both generate an algorithm or a key each time the common data is received from the common data generation unit 134. .

  The header generation unit 138 functions only at the time of transmission, and generates header data attached to each packet encrypted by the encryption unit 133 to be encrypted data. The header includes, for example, generally necessary information such as transmission source information, transmission destination information, and the amount of data included in the packet to which the header is attached. The header generation unit 138 sends the generated header data to the connection unit 139. The connection unit 139 functions only at the time of transmission, and the header generated by the header generation unit 138 is integrated with the encrypted packet sent from the encryption unit 133 (for example, at the head of the packet). It has a function to make it.

The communication unit 137 exchanges data with the network 3.
At the time of transmission, the communication unit 137 receives from the connection unit 139 data that is a sequence of packets with a header, and sends the data to the communication device 1 via the network 3.
At the time of reception, the communication unit 137 receives transmission request data including an ID and initial common data from the communication device 1 via the network 3. The transmission request data is sent from the communication unit 137 to the preprocessing unit 132, but the initial common data included in the transmission request data is sent to the authentication unit C.

Next, the flow of processing executed in this transmission / reception system will be described with reference to FIG.
Since the communication between the communication devices 1-1 to 1-N is the same as that in the first embodiment, the description thereof will be omitted, and the second will be focused on the communication between the communication device 1 and the authentication device 2. A processing flow of the transmission / reception system of the embodiment will be described.

As described above, the communication between the communication device 1 and the authentication device 2 is executed as the transmission of content data from the authentication device 2 to the communication device 1. Prior to this, the communication device 1 of the authentication device 2. Authentication for is performed.
The specific processing flow is as follows.

First, transmission request data is generated in the communication device 1 (S301). The transmission request data includes the content requesting the authentication device 2 to transmit the content data, the ID of the communication device 1, and the initial common data recorded in the common data recording unit 34A of the communication device 1. Yes.
Specifically, the user having the communication device 1 operates the input device 25 of his / her communication device 1 to access the authentication device 2 using, for example, a general-purpose browser function, and displays his / her own screen on the screen. Transmission request data is generated by inputting the ID. At this time, for example, in accordance with an instruction from the CPU 21, the common data generation unit 34 reads the initial common data from the common data recording unit 34 </ b> A and sends it to the communication unit 37 to include the initial common data in the transmission request data. The transmission request data including the initial common data in the communication unit 37 is sent to the authentication device 2 via the network 3 (S302).

  The transmission request data transmitted from the communication device 1 is received by the authentication device 2 via the network 3 (S401). Specifically, the authentication device 2 receives the transmission request data by the communication unit 137 included in the encrypted communication unit 127.

The authentication device 2 that has received the transmission request data authenticates the communication device 1 that has transmitted the transmission request data (S402).
The authentication process is performed as follows.
The transmission request data received by the communication unit 137 is sent to the preprocessing unit 132. In addition, the communication unit 137 sends the initial common data included in the transmission request data to the authentication unit C.
The preprocessing unit 132 reads ID data from the transmission request data and sends it to the common data generation unit 134. The common data generation unit 134 reads the initial common data associated with the ID from the initial common data group recording unit 134A and sends it to the authentication unit C.
The communication device 1 that has sent the transmission request data is not communicating with another communication device 1 before this authentication is performed, and has not been authenticated by the authentication device 2 before this authentication is performed. In this case, the initial common data sent from the communication device 1 and the initial common data recorded in the initial common data group recording unit 134A of the authentication device 2 are both initial common data and coincide with each other. . In this way, when the initial common data sent from the communication device 1 matches the initial common data recorded in the initial common data group recording unit 134A of the authentication device 2, the communication that sent the transmission request data. The authentication unit C determines that the device 1 is valid.
The communication device 1 that has sent the transmission request data does not communicate with another communication device 1 before this authentication is performed, but has been authenticated by the authentication device 2 before this authentication is performed. Includes the initial common data recorded in the common data recording unit 34A of the communication apparatus 1 by the method described later (in the end, the same method as described in the first embodiment), and the authentication device. The initial common data recorded in the initial common data group recording unit 134A is updated with the same common data generated later, so that the initial common data sent from the communication device 1 The initial common data recorded in the initial common data group recording unit 134A of the authentication device 2 matches. Also in this case, the authentication unit C determines that the communication device 1 that has sent the transmission request data is valid.
The communication device 1 that has sent the transmission request data communicates with another communication device 1 before this authentication is performed, but is authenticated by the authentication device 2 before this authentication is performed, and The same applies to the case where communication with another communication device 1 is not performed thereafter.
The communication device 1 that has sent the transmission request data has not received authentication by the authentication device 2 in the past and has communicated with another communication device 1 before this authentication is performed, or When communication is performed with another communication device before authentication is performed and authentication is not performed by the authentication device 2 thereafter, the number of common data generated by the common data generation unit 34 of the communication device 1 is Since the number of common data generated by the common data generation unit 134 of the authentication device 2 is larger than the number of common data generated by the authentication device 2, the initial common data of the common data generation unit 34 of the communication device 1 is determined in the future by the common data generation unit 134 of the authentication device 2. Is overwritten with common data generated (not yet generated). That is, the initial common data sent from the communication device 1 and the initial common data recorded in the initial common data group recording unit 134A of the authentication device 2 do not match. In this case, the authentication unit C causes the common data generation unit 134 to generate the next common data based on the initial common data sent to the authentication unit C. The common data generation unit 134 sends the generated next common data to the authentication unit C. When the next common data generated by the common data generation unit 134 matches the initial common data sent from the communication device 1, the authentication unit C authenticates the communication device 1 that sent the transmission request data. Judge that it is. If the next common data generated by the common data generation unit 134 does not match the initial common data sent from the communication device 1, the authentication unit C sends the common data generation unit 134 to the authentication unit C. Next common data is generated based on the initial common data, and the above-described processing is repeated. As already described, the common data generation unit 34 of the communication device 1 and the common data generation unit 134 of the authentication device 2 can generate the same common data when the same initial common data is used. Therefore, the communication device 1 is not impersonated by a third party, and the initial common data sent by the communication device 1 is generated from the initial common data associated with the ID assigned to the communication device 1. If it is, the initial common data that is the same as the initial common data sent from the communication device 1 is supplied to the authentication unit C from the common data generation unit 134 sometime. The authentication unit C determines the legitimacy of the communication device 1 based on such a reason. Note that in this method, at which stage the authentication unit C stops the common data generation unit 134 from generating new common data, and at which stage the communication device 1 that has transmitted the transmission request data is not valid. There are some problems regarding whether to make a decision. This problem can be solved, for example, by determining in advance the number of times that the authentication unit C causes the common data generation unit 134 to generate new common data. As the number of times increases, there is a higher possibility that the communication device 1 can be correctly determined as valid when the communication device 1 is valid. Can be determined.

  As a result of the authentication as described above, when it is determined that the communication apparatus 1 that has sent the transmission request data is not valid (S402: No), the authentication unit C notifies the CPU 121 via the interface unit 131 to that effect. To tell. Receiving this, the CPU 121 ends the processing here (S403). In this case, the content data is not transmitted to the communication device 1 that has transmitted the transmission request data.

When it is determined that the communication device 1 that has sent the transmission request data is valid (S402: Yes), content encryption is started (S404).
Specifically, the transmission request data is received from the preprocessing unit 132 via the interface unit 131, and data indicating that the communication apparatus 1 that has transmitted the transmission request data is valid is received from the authentication unit C. The CPU 121 sends the content data recorded in the HDD 122 to the encryption communication unit 127.
The content data sent to the encrypted communication unit 127 is encrypted by the encrypted communication unit 127 in the same manner as when the email data is encrypted in the first embodiment, and is packetized. The transmission request data is transmitted to the communication apparatus 1 that has transmitted the transmission request data in the same manner as in the first embodiment (S405).
The initial common data used to generate the initial common data used to encrypt the data of the content sent to the communication device 1 that has sent the transmission request data is sent the transmission request data. This is the initial common data sent from the communication device 1. After it is determined that the communication device 1 that has sent the transmission request data in the authentication process is valid, the common data generation unit 134 uses the initial common data sent from the communication device 1 as the initial common data. The initial common data associated with the ID sent together with the initial common data recorded in the group recording unit 134A is updated. The initial common data is used to generate new initial common data and encrypted data to be used for encryption.

The communication device 1 receives the content data sent after being encrypted (S303), and decrypts it (S304).
The processing in which the communication device 1 receives content data and the processing in which content data is decrypted are the processing in which the receiving communication device 1 in the first embodiment receives email data, and the email data is decrypted. It is executed in the same way as the process to do.
The initial common data used for generating the initial common data used for the communication device 1 to decrypt the content data is the initial common data sent from the communication device 1 to the authentication device 2 together with the transmission request data.
The decrypted content is recorded in, for example, the HDD 22 and is appropriately used by the communication device 1.

DESCRIPTION OF SYMBOLS 1 Communication apparatus 2 Authentication apparatus 3 Network 31 Interface part 32 Preprocessing part 33 Encryption / decryption part 33A Encryption part 33B Decryption part 34 Common data generation part 34A Common data recording part 35 Algorithm generation part 36 Key generation part 37 Communication unit 122 HDD
131 Interface unit 132 Preprocessing unit 133 Encryption unit 134 Common data generation unit 134A Initial common data group recording unit 135 Algorithm generation unit 136 Key generation unit 137 Communication unit

Claims (20)

A transmission apparatus capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and receiving the encrypted data from the transmission apparatus via the network. A transmission / reception system comprising:
The transmitter is
Based on an initial solution that is predetermined data, a transmission-side solution generating means that continuously generates a solution that depends on the initial solution and is uniquely determined by the initial solution;
Using the solution generated by the transmission-side solution generating means, encrypting the transmission target data into encrypted data; and
Transmitting-side communication means for communicating with the receiving device via the network;
With
The receiving device is:
Based on an initial solution that is predetermined data, a solution that depends on the initial solution and is uniquely determined by the initial solution is continuously generated, and is used by the transmission-side solution generating means If the same initial solution is used, the receiving side solution generating means adapted to generate the same solution as the transmitting side solution generating means,
Decryption means for decrypting encrypted data encrypted by the transmission device using the solution generated by the reception-side solution generation means;
Receiving-side communication means for communicating with the transmitting device via the network;
With
When transmitting and receiving the encrypted data, the transmitting device and the receiving device are configured to transmit data serving as the initial solution from one to the other, and
The transmitting apparatus and the receiving apparatus are configured such that the one of the transmitting apparatus and the receiving apparatus generates a solution by the transmitting-side solution generating means or the receiving-side solution generating means with the transmitted data as an initial solution. The other of the generation of the received data as an initial solution is generated by the transmission side solution generation means, or the reception side solution generation means,
The transmitting side solution generating means and the receiving side solution generating means generate a predetermined number of solutions negotiated between each other, and then generate a solution using the last solution of the predetermined number of solutions as a new initial solution. Is supposed to let
The encryption unit encrypts the transmission target data using the solution generated by the transmission-side solution generation unit based on the new initial solution, and the decryption unit sets the new initial solution to the new initial solution. The encrypted data is decrypted using the solution generated by the receiving-side solution generating unit based on
A set of the transmission device, and in the receiving apparatus, the transmitting-side solution generating means, and the receiving solution generating means, so that automatically changes the predetermined number while allowing the same number both of It has become,
Transmission / reception system.   The transmission device included in the transmission / reception system according to claim 1, wherein the transmission device transmits the data as the initial solution.   The transmission apparatus included in the transmission / reception system according to claim 1, wherein the transmission apparatus receives the data as the initial solution.   The receiving apparatus included in the transmission / reception system according to claim 1, wherein the receiving apparatus is configured to transmit the data serving as the initial solution.   The receiving apparatus included in the transmission / reception system according to claim 1, wherein the receiving apparatus receives the data as the initial solution. A transmission apparatus capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and receiving the encrypted data from the transmission apparatus via the network. A receiving device capable of transmitting and receiving a transmission / reception system,
Based on an initial solution that is predetermined data, a receiving-side solution generating unit that continuously generates a solution that depends on the initial solution and is uniquely determined by the initial solution, and the receiving-side solution generating unit are generated A decryption unit that decrypts the encrypted data into data to be transmitted using the solution, a reception-side communication unit that communicates with the transmission apparatus via the network, and the encrypted data When transmission / reception is performed, the receiving device includes means for receiving data as the initial solution from the transmitting device, and the receiving-side solution generating means receives the data as the initial solution from the transmitting device, A predetermined number of solutions negotiated with the transmission device are generated, and the last solution of the predetermined number of solutions is generated as a new initial solution, Decryption means The recipient solution generating means is adapted to decrypt the encrypted data using the solution that caused a new initial solution the final solution of the solution of a predetermined number, the receiving device,
And based on an initial solution that is predetermined data, the solution depends on the initial solution, and a solution uniquely determined by the initial solution is continuously generated, If the same initial solution as that used in the receiving-side solution generating means is used, the method is executed by the transmitting device including a control means capable of generating the same solution as the receiving-side solution generating means,
The control means is
Transmitting the data as the initial solution to the receiving device;
Transmitting the encrypted data to the receiving device;
A process of generating a predetermined number of solutions negotiated with the receiving device, using the data that is the initial solution transmitted to the receiving device as an initial solution,
A process of generating a solution with a last solution of a predetermined number of solutions as a new initial solution,
Encrypting the transmission target data using a solution generated as a new initial solution of the last solution of a predetermined number of solutions;
In the set of the transmission device and the reception device, the process of automatically changing the predetermined number in the transmission device while being the same number as the predetermined number in the reception device,
Including methods. A transmission apparatus capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and receiving the encrypted data from the transmission apparatus via the network. A receiving device capable of transmitting and receiving a transmission / reception system,
Based on an initial solution that is predetermined data, a receiving-side solution generating unit that continuously generates a solution that depends on the initial solution and is uniquely determined by the initial solution, and the receiving-side solution generating unit are generated A decryption unit that decrypts the encrypted data into data to be transmitted using the solution, a reception-side communication unit that communicates with the transmission apparatus via the network, and the encrypted data And a means for transmitting the initial solution data to the transmitting device when transmission / reception is performed, and the receiving-side solution generating means is configured to transmit the initial solution data to the transmitting device. , A predetermined number of solutions negotiated with the transmission device are generated, and the last solution of the predetermined number of solutions is generated as a new initial solution, The decoding means is The receiving solution generating means is adapted to decrypt the encrypted data using the solution that caused a new initial solution the final solution of the solution of a predetermined number, the receiving device,
And based on an initial solution that is predetermined data, the solution depends on the initial solution, and a solution uniquely determined by the initial solution is continuously generated, If the same initial solution as that used in the receiving-side solution generating means is used, the method is executed by the transmitting device including a control means capable of generating the same solution as the receiving-side solution generating means,
The control means is
Receiving the data as the initial solution from the receiving device;
Transmitting the encrypted data to the receiving device;
The process of generating the predetermined number of solutions negotiated with the receiving device, using the data that is the initial solution received from the receiving device as an initial solution,
A process of generating a solution with a last solution of a predetermined number of solutions as a new initial solution,
Encrypting the transmission target data using a solution generated as a new initial solution of the last solution of a predetermined number of solutions;
In the set of the transmission device and the reception device, the process of automatically changing the predetermined number in the transmission device while being the same number as the predetermined number in the reception device,
Including methods. A transmission apparatus capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and receiving the encrypted data from the transmission apparatus via the network. A receiving device capable of transmitting and receiving a transmission / reception system,
Based on an initial solution that is predetermined data, a transmission-side solution generating means that continuously generates a solution that depends on the initial solution and is uniquely determined by the initial solution, and the transmission-side solution generation means are generated An encryption unit that encrypts the transmission target data into encrypted data using the solution, a transmission-side communication unit that communicates with the reception apparatus via the network, and the encrypted data And a means for transmitting data as the initial solution to the receiving device when transmission / reception is performed, wherein the transmitting-side solution generating means transmits the data as the initial solution to the receiving device. A predetermined number of solutions negotiated with the receiving device are generated, and the last solution of the predetermined number of solutions is generated as a new initial solution, The encryption means is The sender solution generating means is adapted to encrypt the transmitted data using the solution that caused a new initial solution the final solution of the solution of a predetermined number, the transmission device,
And based on an initial solution that is predetermined data, the solution depends on the initial solution, and a solution uniquely determined by the initial solution is continuously generated, If the same initial solution as that used in the transmission-side solution generating means is used, the method is executed by the receiving device including a control means capable of generating the same solution as the transmission-side solution generating means,
The control means is
Receiving the data as the initial solution from the transmitter;
Receiving the encrypted data from the transmitting device;
A process of generating a predetermined number of solutions negotiated with the transmission device, using the data that is the initial solution received from the transmission device as an initial solution,
A process of generating a solution with a last solution of a predetermined number of solutions as a new initial solution,
Decrypting the encrypted data using a solution generated as a new initial solution of a predetermined number of last solutions;
In the set of the transmission device and the reception device, the process of automatically changing the predetermined number in the reception device while being the same number as the predetermined number in the transmission device,
Including methods. A transmission apparatus capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and receiving the encrypted data from the transmission apparatus via the network. A receiving device capable of transmitting and receiving a transmission / reception system,
Based on an initial solution that is predetermined data, a transmission-side solution generating means that continuously generates a solution that depends on the initial solution and is uniquely determined by the initial solution, and the transmission-side solution generation means are generated An encryption unit that encrypts the transmission target data into encrypted data using the solution, a transmission-side communication unit that communicates with the reception apparatus via the network, and the encrypted data When transmission / reception is performed, the receiving device includes a means for receiving the data as the initial solution, and the transmitting-side solution generating means receives the data as the initial solution from the receiving device, A predetermined number of solutions negotiated with the receiving device are generated, and the last solution of the predetermined number of solutions is generated as a new initial solution. Encryption method The sender solution generating means is adapted to encrypt the transmitted data using the solution that caused a new initial solution the final solution of the solution of a predetermined number, the transmission device,
And based on an initial solution that is predetermined data, the solution depends on the initial solution, and a solution uniquely determined by the initial solution is continuously generated, If the same initial solution as that used in the transmission-side solution generating means is used, the method is executed by the receiving device including a control means capable of generating the same solution as the transmission-side solution generating means,
The control means is
Transmitting the data as the initial solution to the transmitter;
Receiving the encrypted data from the transmitting device;
A process of generating a predetermined number of solutions negotiated with the transmission device, using the data that is the initial solution transmitted to the transmission device as an initial solution,
A process of generating a solution with a last solution of a predetermined number of solutions as a new initial solution,
Decrypting the encrypted data using a solution generated as a new initial solution of a predetermined number of last solutions;
In the set of the transmission device and the reception device, the process of automatically changing the predetermined number in the reception device while being the same number as the predetermined number in the transmission device,
Including methods. A transmission apparatus capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and receiving the encrypted data from the transmission apparatus via the network. A receiving device capable of transmitting and receiving a transmission / reception system,
Based on an initial solution that is predetermined data, a receiving-side solution generating unit that continuously generates a solution that depends on the initial solution and is uniquely determined by the initial solution, and the receiving-side solution generating unit are generated A decryption unit that decrypts the encrypted data into data to be transmitted using the solution, a reception-side communication unit that communicates with the transmission apparatus via the network, and the encrypted data And a means for receiving the initial solution data from the transmitting device when transmission / reception is performed, and the receiving-side solution generating means receives the initial solution data from the transmitting device. , A predetermined number of solutions negotiated with the transmission device are generated, and the last solution of the predetermined number of solutions is generated as a new initial solution, The decryption hand It is the recipient solution generating means is adapted to decrypt the encrypted data using the solution that caused a new initial solution the final solution of the solution of a predetermined number, the receiving device,
And based on an initial solution that is predetermined data, the solution depends on the initial solution, and a solution uniquely determined by the initial solution is continuously generated, If the same initial solution as that used in the reception-side solution generation means is used, the control means of the transmission device including the control means capable of generating the same solution as the reception-side solution generation means,
Transmitting the data as the initial solution to the receiving device;
Transmitting the encrypted data to the receiving device;
A process of generating a predetermined number of solutions negotiated with the receiving device, using the data that is the initial solution transmitted to the receiving device as an initial solution,
A process of generating a solution with a last solution of a predetermined number of solutions as a new initial solution,
Encrypting the transmission target data using a solution generated as a new initial solution of the last solution of a predetermined number of solutions;
In the set of the transmission device and the reception device, the process of automatically changing the predetermined number in the transmission device while being the same number as the predetermined number in the reception device,
A computer program for running. A transmission apparatus capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and receiving the encrypted data from the transmission apparatus via the network. A receiving device capable of transmitting and receiving a transmission / reception system,
Based on an initial solution that is predetermined data, a receiving-side solution generating unit that continuously generates a solution that depends on the initial solution and is uniquely determined by the initial solution, and the receiving-side solution generating unit are generated A decryption unit that decrypts the encrypted data into data to be transmitted using the solution, a reception-side communication unit that communicates with the transmission apparatus via the network, and the encrypted data And a means for transmitting the initial solution data to the transmitting device when transmission / reception is performed, and the receiving-side solution generating means is configured to transmit the initial solution data to the transmitting device. , A predetermined number of solutions negotiated with the transmission device are generated, and the last solution of the predetermined number of solutions is generated as a new initial solution, The decoding means is The receiving solution generating means is adapted to decrypt the encrypted data using the solution that caused a new initial solution the final solution of the solution of a predetermined number, the receiving device,
And based on an initial solution that is predetermined data, the solution depends on the initial solution, and a solution uniquely determined by the initial solution is continuously generated, If the same initial solution as that used in the reception-side solution generation means is used, the control means of the transmission device including the control means capable of generating the same solution as the reception-side solution generation means,
Receiving the data as the initial solution from the receiving device;
Transmitting the encrypted data to the receiving device;
A process of generating a predetermined number of solutions negotiated with the receiving device, using the data that is the initial solution received from the receiving device as an initial solution,
A process of generating a solution with a last solution of a predetermined number of solutions as a new initial solution,
Encrypting the transmission target data using a solution generated as a new initial solution of the last solution of a predetermined number of solutions;
In the set of the transmission device and the reception device, the process of automatically changing the predetermined number in the transmission device while being the same number as the predetermined number in the reception device,
A computer program for running. A transmission apparatus capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and receiving the encrypted data from the transmission apparatus via the network. A receiving device capable of transmitting and receiving a transmission / reception system,
Based on an initial solution that is predetermined data, a transmission-side solution generating means that continuously generates a solution that depends on the initial solution and is uniquely determined by the initial solution, and the transmission-side solution generation means are generated An encryption unit that encrypts the transmission target data into encrypted data using the solution, a transmission-side communication unit that communicates with the reception apparatus via the network, and the encrypted data And a means for transmitting data as the initial solution to the receiving device when transmission / reception is performed, wherein the transmitting-side solution generating means transmits the data as the initial solution to the receiving device. A predetermined number of solutions negotiated with the receiving device are generated, and the last solution of the predetermined number of solutions is generated as a new initial solution, The encryption means is The sender solution generating means is adapted to encrypt the transmitted data using the solution that caused a new initial solution the final solution of the solution of a predetermined number, the transmission device,
And based on an initial solution that is predetermined data, the solution depends on the initial solution, and a solution uniquely determined by the initial solution is continuously generated, If the same initial solution as that used in the transmission-side solution generating means is used, the control means of the receiving device including the control means capable of generating the same solution as the transmission-side solution generating means,
Receiving the data as the initial solution from the transmitter;
Receiving the encrypted data from the transmitting device;
A process of generating a predetermined number of solutions negotiated with the transmission device, using the data that is the initial solution received from the transmission device as an initial solution,
A process of generating a solution with a last solution of a predetermined number of solutions as a new initial solution,
Decrypting the encrypted data using a solution generated as a new initial solution of a predetermined number of last solutions;
In the set of the transmission device and the reception device, the process of automatically changing the predetermined number in the reception device while being the same number as the predetermined number in the transmission device,
A computer program for running. A transmission apparatus capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and receiving the encrypted data from the transmission apparatus via the network. A receiving device capable of transmitting and receiving a transmission / reception system,
Based on an initial solution that is predetermined data, a transmission-side solution generating means that continuously generates a solution that depends on the initial solution and is uniquely determined by the initial solution, and the transmission-side solution generation means are generated An encryption unit that encrypts the transmission target data into encrypted data using the solution, a transmission-side communication unit that communicates with the reception apparatus via the network, and the encrypted data When transmission / reception is performed, the receiving device includes a means for receiving the data as the initial solution, and the transmitting-side solution generating means receives the data as the initial solution from the receiving device, A predetermined number of solutions negotiated with the receiving device are generated, and the last solution of the predetermined number of solutions is generated as a new initial solution. Encryption method The sender solution generating means is adapted to encrypt the transmitted data using the solution that caused a new initial solution the final solution of the solution of a predetermined number, the transmission device,
And based on an initial solution that is predetermined data, the solution depends on the initial solution, and a solution uniquely determined by the initial solution is continuously generated, If the same initial solution as that used in the transmission-side solution generating means is used, the control means of the receiving device including the control means capable of generating the same solution as the transmission-side solution generating means,
Transmitting the data as the initial solution to the transmitter;
Receiving the encrypted data from the transmitting device;
A process of generating a predetermined number of solutions negotiated with the transmission device, using the data that is the initial solution transmitted to the transmission device as an initial solution,
A process of generating a solution with a last solution of a predetermined number of solutions as a new initial solution,
Decrypting the encrypted data using a solution generated as a new initial solution of a predetermined number of last solutions;
In the set of the transmission device and the reception device, the process of automatically changing the predetermined number in the reception device while being the same number as the predetermined number in the transmission device,
A computer program for running. An authentication device capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and authenticating the validity of a plurality of user devices; A transmission / reception system including a plurality of user devices that can receive the encrypted data from the authentication device via the network when its authenticity is authenticated by the authentication device,
The authentication device
Authentication-side solution generating means for continuously generating a solution that depends on the initial solution and is uniquely determined by the initial solution based on an initial solution that is predetermined data;
Using the solution generated by the authentication-side solution generating unit, encrypting the transmission target data into encrypted data; and
An authentication side recording means for recording an ID that is information unique to each user device and an initial solution for each user device unique to each user device or a solution created from the initial solution in association with each other;
Authentication-side communication means for communicating with the user device via the network;
Authentication means for determining the legitimacy of the user device;
With
Each of the user devices is
Based on an initial solution that is predetermined data, a solution that depends on the initial solution and is uniquely determined by the initial solution is continuously generated, and used by the authentication-side solution generating means If the same initial solution is used, the user-side solution generating means configured to be able to generate the same solution as the authentication-side solution generating means,
Decryption means for decrypting encrypted data encrypted by the authentication device using the solution generated by the user-side solution generation means;
User-side recording means for recording the ID of the user device;
User-side communication means for communicating with the authentication device via the network;
With
When the encrypted data is transmitted / received, the user device includes the ID recorded in the user-side recording unit and the initial solution or the solution generated by the user-side solution generating unit based on the initial solution. Is transmitted to the authentication device,
The authentication side solution generating means of the authentication device reads the initial solution associated with the same ID as the ID received from the user device or the solution generated from the initial solution from the authentication side recording means, A solution is generated based on the initial solution or the solution,
The authentication unit of the authentication device determines whether the solution generated by the authentication-side solution generation unit is equal to the solution received from the user device, and if they match, the user device is valid. It has come to judge that there is,
If the authentication means determines that the user device is legitimate,
The authentication-side solution generating means and the user-side solution generating means generate a predetermined number of solutions negotiated between each other, and then generate a solution using the last solution of the predetermined number of solutions as a new initial solution Is supposed to let
The encryption unit encrypts the transmission target data using the solution generated by the authenticating solution generation unit based on the new initial solution, and the decryption unit uses the new initial solution. The encrypted data is decrypted using the solution generated by the user-side solution generating unit based on
A set of the authentication device, and in the user equipment, wherein the authentication-end solution generating means, and the user-side solution generating means, so that automatically changes the predetermined number while allowing the same number both of It has become,
Transmission / reception system.   The authentication apparatus contained in the transmission / reception system of Claim 14.   The user apparatus contained in the transmission / reception system of Claim 14. An authentication device capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and authenticating the validity of a plurality of user devices; A transmission / reception system including a plurality of user devices that can receive the encrypted data from the authentication device via the network when its authenticity is authenticated by the authentication device,
User-side solution generating means for continuously generating a solution that depends on the initial solution and is uniquely determined by the initial solution based on an initial solution that is predetermined data; and the user-side solution The decryption means for decrypting the encrypted data encrypted by the authentication device using the solution generated by the generation means; the user side recording means for recording the ID of the user device; The user side communication means for communicating with the authentication device via the network, and when the encrypted data is transmitted / received, the ID and the initial solution or a solution generated based on the initial solution are A means for transmitting to the authentication device, and the user-side solution generating means generates a predetermined number of solutions negotiated with the authentication device, and a predetermined number of solutions. At the end of the solution Is generated as a new initial solution, and the decoding means uses the solution generated by the user-side solution generating means as the new initial solution. A user device configured to decrypt encrypted data received from the authentication device after it is determined by the authentication device that the user device is valid,
The ID, which is information unique to each user device, is associated with an initial solution for each user device or a solution created from the initial solution. Based on the authentication-side recording means that is recording and the initial solution that is predetermined data, the solution depends on the initial solution, and the solution uniquely determined by the initial solution is generated continuously, If the same initial solution as that used by the user-side solution generating means is used, the method is executed by the authentication apparatus including a control unit capable of generating the same solution as the user-side solution generating means,
The control means is
Receiving from the user device an ID of the user device and the initial solution or a solution generated based on the initial solution;
The initial solution associated with the same ID as the ID received from the user device or the solution generated from the initial solution is read from the authenticating recording means, and a solution is generated based on the initial solution or the solution. process,
Determining whether the generated solution is equal to the solution received from the user device and if they match, determining that the user device is valid;
If it is determined that the user device is valid, the initial solution received from the user device or a solution generated based on the initial solution is used as the initial solution, and the user device has been negotiated Generating a predetermined number of solutions,
A process of encrypting the transmission target data using a solution generated as a new initial solution of a predetermined number of solutions,
In the set of the authentication device and the user device, the process of automatically changing the predetermined number in the authentication device while being the same number as the predetermined number in the user device,
Including methods. An authentication device capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and authenticating the validity of a plurality of user devices; A transmission / reception system including a plurality of user devices that can receive the encrypted data from the authentication device via the network when its authenticity is authenticated by the authentication device,
Based on an initial solution that is predetermined data, an authentication side solution generating means that continuously generates a solution that depends on the initial solution and is uniquely determined by the initial solution, and the authentication side solution generating means are generated Using the solution, the encryption means for encrypting the transmission target data into encrypted data, an ID that is information unique to each user device, and each user device unique to each user device Authentication-side recording means that records an initial solution or a solution created from the initial solution in association with each other, authentication-side communication means that communicates with the user device via the network, and validity of the user device And means for receiving from the user device the ID and the initial solution or a solution generated based on the initial solution when the encrypted data is transmitted and received. And the authentication When the ID and the solution are received, the solution generating means records the authentication side record of the initial solution associated with the same ID as the ID received from the user device or the solution generated from the initial solution. Read from the means and generates a solution based on the initial solution or the solution, and the authentication means determines whether the solution generated by the authentication-side solution generation means is equal to the solution received from the user device. If they match and they match, the user device is determined to be valid, and the authentication-side solution generator determines that the user device is valid In this case, a predetermined number of solutions negotiated with the user device are generated, and the last solution of the predetermined number of solutions is generated as a new initial solution. , The encryption Stage, the authentication-end solution generating means is adapted to encrypt the transmitted data using the solution that caused a new initial solution the final solution of the solution of a predetermined number, the authentication device,
And based on an initial solution that is predetermined data, the solution depends on the initial solution, and a solution uniquely determined by the initial solution is continuously generated, If the same initial solution as that used in the authentication side solution generation means is used, the method is executed by the user device including a control means capable of generating the same solution as the authentication side initial solution generation means,
The control means is
A process of transmitting to the authentication device an ID of the user device and the initial solution or a solution generated based on the initial solution;
Receiving the encrypted data from the authentication device;
The initial solution sent to the authentication device or a solution generated based on the initial solution is an initial solution, and a predetermined number of solutions negotiated with the authentication device are generated,
Decrypting the encrypted data using a solution generated as a new initial solution of a predetermined number of last solutions;
In the set of the authentication device and the user device, a process of automatically changing the predetermined number in the user device while being the same number as the predetermined number in the authentication device;
Including methods. An authentication device capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and authenticating the validity of a plurality of user devices; A transmission / reception system including a plurality of user devices that can receive the encrypted data from the authentication device via the network when its authenticity is authenticated by the authentication device,
User-side solution generating means for continuously generating a solution that depends on the initial solution and is uniquely determined by the initial solution based on an initial solution that is predetermined data; and the user-side solution The decryption means for decrypting the encrypted data encrypted by the authentication device using the solution generated by the generation means; the user side recording means for recording the ID of the user device; The user side communication means for communicating with the authentication device via the network, and when the encrypted data is transmitted / received, the ID and the initial solution or a solution generated based on the initial solution are A means for transmitting to the authentication device, and the user-side solution generating means generates a predetermined number of solutions negotiated with the authentication device, and a predetermined number of solutions. At the end of the solution Is generated as a new initial solution, and the decoding means uses the solution generated by the user-side solution generating means as the new initial solution. A user device configured to decrypt encrypted data received from the authentication device after it is determined by the authentication device that the user device is valid,
The ID, which is information unique to each user device, is associated with an initial solution for each user device or a solution created from the initial solution. Based on the authentication-side recording means that is recording and the initial solution that is predetermined data, the solution depends on the initial solution, and the solution uniquely determined by the initial solution is generated continuously, If the same initial solution as that used in the user-side solution generating means is used, the control device of the authentication apparatus including the control means capable of generating the same solution as the user-side solution generating means,
Receiving from the user device an ID of the user device and the initial solution or a solution generated based on the initial solution;
The initial solution associated with the same ID as the ID received from the user device or the solution generated from the initial solution is read from the authenticating recording means, and a solution is generated based on the initial solution or the solution. process,
Determining whether the generated solution is equal to the solution received from the user device and if they match, determining that the user device is valid;
When it is determined that the user device is valid, the initial solution received from the receiving device or the solution generated based on the initial solution is used as the initial solution, and the user device has been negotiated Generating a predetermined number of solutions,
A process of encrypting the transmission target data using a solution generated as a new initial solution of a predetermined number of solutions,
In the set of the authentication device and the user device, the process of automatically changing the predetermined number in the authentication device while being the same number as the predetermined number in the user device,
A computer program for running. An authentication device capable of transmitting encrypted data obtained by encrypting transmission target data, which is data to be transmitted, via a predetermined network, and authenticating the validity of a plurality of user devices; A transmission / reception system including a plurality of user devices that can receive the encrypted data from the authentication device via the network when its authenticity is authenticated by the authentication device,
Based on an initial solution that is predetermined data, an authentication side solution generating means that continuously generates a solution that depends on the initial solution and is uniquely determined by the initial solution, and the authentication side solution generating means are generated Using the solution, the encryption means for encrypting the transmission target data into encrypted data, an ID that is information unique to each user device, and each user device unique to each user device Authentication-side recording means that records an initial solution or a solution created from the initial solution in association with each other, authentication-side communication means that communicates with the user device via the network, and validity of the user device And means for receiving from the user device the ID and the initial solution or a solution generated based on the initial solution when the encrypted data is transmitted and received. And the authentication When the ID and the solution are received, the solution generating means records the authentication side record of the initial solution associated with the same ID as the ID received from the user device or the solution generated from the initial solution. Read from the means and generates a solution based on the initial solution or the solution, and the authentication means determines whether the solution generated by the authentication-side solution generation means is equal to the solution received from the user device. If they match and they match, the user device is determined to be valid, and the authentication-side solution generator determines that the user device is valid In this case, a predetermined number of solutions negotiated with the user device are generated, and the last solution of the predetermined number of solutions is generated as a new initial solution. , The encryption Stage, the authentication-end solution generating means is adapted to encrypt the transmitted data using the solution that caused a new initial solution the final solution of the solution of a predetermined number, the authentication device,
And based on an initial solution that is predetermined data, the solution depends on the initial solution, and a solution uniquely determined by the initial solution is continuously generated, If the same initial solution as that used in the authentication-side solution generation means is used, the control device of the user device having control means capable of generating the same solution as the authentication-side initial solution generation means,
A process of transmitting to the authentication device an ID of the user device and the initial solution or a solution generated based on the initial solution;
Receiving the encrypted data from the authentication device;
The initial solution sent to the authentication device or a solution generated based on the initial solution is an initial solution, and a predetermined number of solutions negotiated with the authentication device are generated,
Decrypting the encrypted data using a solution generated as a new initial solution of a predetermined number of last solutions;
In the set of the authentication device and the user device, a process of automatically changing the predetermined number in the user device while being the same number as the predetermined number in the authentication device;
A computer program for running.

Images