JP6471039B2 - Wireless communication system and wireless terminal - Google Patents

Description

The present invention relates to a radio communication system and a free line ends late.

  Currently, a wireless terminal (for example, a smart phone) having a function capable of communicating through both a mobile communication network and a wireless local area network (LAN), and a function of performing communication through a wireless LAN without being connected to the mobile communication network There are users who possess both a wireless terminal (for example, a tablet terminal, a portable game machine). Generally, when these wireless terminals connect to a public wireless LAN access point installed by a mobile communication carrier, an authentication operation (user authentication) is performed.

  Authentication methods include a method using SIM (subscriber identity module) (for example, Patent Document 1) and a method not using SIM. The SIM is mounted on a wireless terminal capable of communication through a mobile communication network such as a smartphone, and includes subscriber identification information that is unique information assigned when a user contracts with a mobile communication carrier. Authentication methods using SIM include, for example, EAP-SIM and EAP-AKA, and authentication methods not using SIM include, for example, WPA2-PSK.

  In the authentication method using SIM (hereinafter sometimes referred to as “SIM authentication method”), communication between the wireless terminal and the access point is performed using information associated with the SIM subscriber identification information of the wireless terminal. An encryption key to be encrypted is generated. On the other hand, in an authentication method that does not use SIM (hereinafter sometimes referred to as “password authentication method”), communication between the access point and the wireless terminal is encrypted using a password set in advance in the access point. An encryption key is generated.

  A password set for an access point (for example, a public wireless LAN access point) used by an unspecified user is common to a plurality of users who use the access point (a plurality of users use the same password). In other words, when a wireless terminal connects to an access point by an authentication operation using a password authentication method, the encryption of communication between the access point and the wireless terminal is known to be shared by users other than the user of the wireless terminal. An encryption key generated using a password is used. Therefore, the encryption key created by the password authentication method is easily identified as compared to the encryption key generated by the SIM authentication method using information associated with the subscriber identification information unique to the SIM of the wireless terminal. there is a possibility. As a result, the communication between the access point connected by the authentication operation using the password authentication method and the wireless terminal is less confidential than the communication between the access point connected by the authentication operation using the SIM authentication method and the wireless terminal. It is understood that

  When connecting to an access point using a password authentication method, a user of a wireless terminal needs to manually enter a password and perform an authentication operation for each access point having a different SSID (service set ID). On the other hand, when connecting to an access point using the SIM authentication method, an authentication operation is performed using SIM information of the wireless terminal, so that the user of the wireless terminal does not need to input a password.

JP 2014-155038 A

  As described above, compared to the password authentication method, the SIM authentication method can provide the user with advantages such as high safety and convenience. However, a wireless terminal such as a tablet terminal that does not have a SIM (that is, does not have subscriber identification information in a mobile communication network) cannot perform an authentication operation using the SIM authentication method.

  The present invention has been made in view of the above problems, and is intended to enable an authentication method using subscriber identification information to be used even for a wireless terminal that does not have subscriber identification information in a mobile communication network. Objective.

  A radio communication system according to the present invention includes a plurality of radio terminals including a first radio terminal having subscriber identification information in a mobile communication network and a second radio terminal having no subscriber identification information in the mobile communication network. And an access point that relays communication between the first wireless terminal and the mobile communication network, and the second wireless terminal performs communication with the first wireless terminal, A first authentication request for requesting the first wireless terminal to acquire authentication information used for connecting the second wireless terminal to the access point by proxy is sent to the first wireless terminal through the second terminal communication unit. A proxy authentication requesting unit for transmitting, wherein the first wireless terminal receives the first authentication request when receiving the first authentication request, and a first terminal communication unit that performs communication with the second wireless terminal. Subscriber identification information Comprises an authentication information request unit that requests have, the authentication information acquired in response to a request of the authentication information request part, the authentication information transmitting unit for transmitting to the second wireless terminal through the first terminal communication unit.

  A radio terminal of the present invention includes a plurality of radio terminals including a first radio terminal having subscriber identification information in a mobile communication network and a second radio terminal having no subscriber identification information in the mobile communication network; The first wireless terminal in a wireless communication system comprising an access point that relays communication between the first wireless terminal and the mobile communication network, the first terminal performing communication with the second wireless terminal After receiving a first authentication request from the communication unit and the second wireless terminal requesting that the first wireless terminal obtains authentication information used by the second wireless terminal to connect to the access point by proxy The authentication information requesting unit that requests the authentication information using the subscriber identification information, and the authentication information acquired in response to the request of the authentication information requesting unit through the first terminal communication unit. And a authentication information transmitting unit for transmitting to the line terminal.

  Another radio terminal according to the present invention includes a plurality of radios including a first radio terminal having subscriber identification information in a mobile communication network and a second radio terminal having no subscriber identification information in the mobile communication network. A second wireless terminal in a wireless communication system comprising a terminal and an access point that relays communication between the first wireless terminal and the mobile communication network, the first wireless terminal performing communication with the first wireless terminal; A two-terminal communication unit and a first authentication request for requesting the first wireless terminal to acquire authentication information used by the second wireless terminal to connect to the access point by proxy, through the second terminal communication unit A proxy authentication request unit that transmits to the first wireless terminal, and the second terminal communication unit receives the authentication information transmitted from the first wireless terminal in response to the first authentication request.

  ADVANTAGE OF THE INVENTION According to this invention, the authentication method using subscriber identification information can be used also about the radio | wireless terminal which does not have subscriber identification information in a mobile communication network.

It is a block diagram which shows the structure of the radio | wireless communications system which concerns on 1st Embodiment of this invention. It is a flowchart which shows an example of the proxy authentication operation | movement of 1st Embodiment. It is a flowchart which shows an example of the proxy authentication operation | movement of 1st Embodiment. It is a block diagram which shows the structure of the 1st radio | wireless terminal which concerns on 1st Embodiment. It is a block diagram which shows the structure of the 2nd radio | wireless terminal which concerns on 1st Embodiment. It is a block diagram which shows the structure of the access point which concerns on 1st Embodiment. It is a block diagram which shows the structure of the authentication apparatus which concerns on 1st Embodiment. It is a flowchart which shows an example of the proxy authentication operation | movement of 2nd Embodiment. It is a flowchart which shows an example of the proxy authentication operation | movement of 2nd Embodiment. It is a block diagram which shows the structure of the 1st radio | wireless terminal which concerns on 2nd Embodiment. It is a block diagram which shows the structure of the 2nd radio | wireless terminal which concerns on 2nd Embodiment. It is a flowchart which shows a part of modification of proxy authentication operation | movement. It is a block diagram which shows the structure of the 1st radio | wireless terminal of 1st Embodiment which concerns on a modification. It is a block diagram which shows the structure of the 1st radio | wireless terminal of 2nd Embodiment which concerns on a modification. It is a block diagram which shows the structure of the 2nd radio | wireless terminal of 1st Embodiment which concerns on a modification. It is a block diagram which shows the structure of the 2nd radio | wireless terminal of 2nd Embodiment which concerns on a modification.

  Hereinafter, various embodiments according to the present invention will be described with reference to the accompanying drawings.

1. First Embodiment In the present embodiment, the first wireless terminal STA1 having the subscriber identification information SID in the mobile communication network MNW makes its own subscription as a proxy for the second wireless terminal STA2 having no subscriber identification information SID. Authentication operation (user authentication) is performed using the person identification information SID. The first wireless terminal STA1 transmits a temporary key PTK (pairwise transient key), which is a temporary encryption key for encrypting communication with the access point AP, obtained as a result of the authentication operation, to the second wireless terminal STA2. To do.

1-1. Configuration of Radio Communication System FIG. 1 shows a configuration of a radio communication system CS according to the first embodiment of the present invention. The radio communication system CS includes a first radio terminal STA1, a second radio terminal STA2, an access point AP, an authentication device AAA, and a subscriber information management device HSS. The mobile communication network MNW includes an authentication device AAA and a subscriber information management device HSS among the above elements. A plurality of the above elements may exist in the radio communication system CS.

  The first wireless terminal STA1 and the second wireless terminal STA2 can wirelessly communicate with each other. For communication between the first wireless terminal STA1 and the second wireless terminal STA2, a predetermined wireless communication technology such as Bluetooth (registered trademark), NFC (Near Field Communication), or the like is used.

The first wireless terminal STA1 has subscriber identification information SID in the mobile communication network MNW and subscriber registration information K associated with the subscriber identification information SID. The first wireless terminal STA1 requests the authentication apparatus AAA in the mobile communication network MNW to authenticate itself with an authentication method using the subscriber identification information SID using its own subscriber identification information SID. be able to.
On the other hand, the second wireless terminal STA2 does not have the subscriber identification information SID in the mobile communication network MNW. For this reason, the second wireless terminal STA2 cannot request the authentication device AAA to authenticate itself with an authentication method using the subscriber identification information SID.

  The subscriber information management device HSS stores the subscriber identification information SID of the first wireless terminal STA1 and the subscriber registration information K in association with each other. That is, each of the first wireless terminal STA1 and the subscriber information management device HSS has subscriber identification information SID and subscriber registration information K corresponding to the subscriber identification information SID.

  The subscriber information management device HSS is connected to the authentication device AAA by wire or wireless. The communication between the authentication device AAA and the subscriber information management device HSS and the communication between the authentication device AAA and the first wireless terminal STA1 are based on a predetermined access technology (Radio Access Technology), for example, 3GPP standard (Third Generation Partnership Project). It is executed in accordance with the specified LTE / SAE (Long Term Evolution / System Architecture Evolution).

  The access point AP is connected to the authentication device AAA and the Internet IN that is an external network of the radio communication system CS. The above connection form may be wired or wireless. The access point AP functions as a base station that performs wireless communication with each of the first wireless terminal STA1 and the second wireless terminal STA2. Specifically, the access point AP relays communication between the first wireless terminal STA1 and the authentication device AAA and communication between the first wireless terminal STA1 and the Internet IN. The access point AP relays communication between the second wireless terminal STA2 and the Internet IN.

  The access point AP and each wireless terminal (first wireless terminal STA1, second wireless terminal STA2) perform wireless communication according to a predetermined wireless access technology, for example, a wireless LAN standard (for example, IEEE 802.11n, IEEE 802.11ac). Hereinafter, a mode in which the access point AP and each wireless terminal perform wireless communication according to the wireless LAN standard will be described as an example. However, the technical scope of the present invention is not limited. The present invention can be applied to other radio access technologies (for example, WiMAX defined in IEEE 802.16-2004 and IEEE 802.16e) with necessary design modifications.

1-2. Proxy authentication operation 1-2-1. Outline of Proxy Authentication Operation Hereinafter, an example of the proxy authentication operation of the present embodiment will be described with reference to FIGS. 2 and 3. In the present specification, the “proxy authentication operation” means that the first wireless terminal STA1 having the subscriber identification information SID is the proxy of the second wireless terminal STA2 having no subscriber identification information SID. The authentication operation is performed using the subscriber identification information SID, and a series of operations for transmitting the authentication information (for example, communication encryption key) obtained as a result to the second wireless terminal STA2 is indicated.

  Schematically, the second wireless terminal STA2 that starts communication with the Internet IN via the access point AP requests the first wireless terminal STA1 to perform an authentication operation on behalf of the second wireless terminal STA2. . In response to a request from the second wireless terminal STA2, the first wireless terminal STA1 performs an authentication operation using its own subscriber identification information SID, and transmits a temporary key PTK generated by the authentication operation to the second wireless terminal STA2. .

  In each of the following embodiments, a master key PMK (pairwise master key) shared by a wireless terminal and an access point AP is generated according to EAP-AKA, and a temporary key PTK shared by the wireless terminal and the access point AP is a 4-way hand. Although it will be described how it is generated according to a shake (4-way handshake), it is not intended to limit the technical scope of the present invention. Other authentication protocols (eg, EAP-SIM) may be used with the necessary design variations.

1-2-2. Example of Proxy Authentication Operation FIGS. 2 and 3 are flowcharts showing an example of the proxy authentication operation. In the example of FIGS. 2 and 3, each of the first wireless terminal STA1 and the subscriber information management device HSS has previously registered the subscriber identification information SID of the first wireless terminal STA1 and the subscriber corresponding to the subscriber identification information SID. It is assumed that registration information K is included.

  When the second wireless terminal STA2 starts communication with the Internet IN, which is an external network, via the access point AP, the second wireless terminal STA2 first establishes a connection with the first wireless terminal STA1 (S100). After establishing the connection with the first wireless terminal STA1, the second wireless terminal STA2 encrypts the communication between the first wireless terminal STA1 and the second wireless terminal STA2, and the inter-terminal encryption key TEK. An inter-terminal decryption key TDK for decrypting the communication encrypted in step S110 is generated (S110), and the inter-terminal encryption key TEK is transmitted to the first wireless terminal STA1 (S120).

  The first wireless terminal STA2 requests the first wireless terminal STA1 to obtain a temporary key PTK, which is authentication information used for the second wireless terminal STA2 to connect and communicate with the access point AP, on the proxy. An authentication request is transmitted to the first wireless terminal STA1 (S130). The first authentication request may include destination information (for example, a MAC address) of the wireless terminal STA (that is, the second wireless terminal STA2) that transmits the first authentication request.

  After receiving the first authentication request, the first wireless terminal STA1 generates a master key PMK. The master key PMK is an encryption key generated prior to the temporary key PTK that is a communication encryption key used for encryption of communication between the access point AP and the first wireless terminal STA1, and the temporary key PTK is the master key. Generated based on PMK. The procedure for generating the master key PMK (steps S140 to S230) will be described below.

  When receiving the first authentication request, the first wireless terminal STA1 transmits a second authentication request carrying its own subscriber identification information SID to the authentication device AAA via the access point AP (S140). The second authentication request is a message requesting that the authentication device AAA authenticate the wireless terminal STA having the installed subscriber identification information SID (that is, the first wireless terminal STA1).

  Upon receiving the second authentication request, the authentication device AAA transmits an authentication parameter request message to the subscriber information management device HSS (S150). The authentication parameter request message is a message for requesting an authentication parameter, and includes the subscriber identification information SID mounted in the second authentication request. The authentication parameter is information corresponding to the subscriber identification information SID, and is information for authenticating the wireless terminal STA (that is, the first wireless terminal STA1) having the subscriber identification information SID.

  When receiving the authentication parameter request message, the subscriber information management device HSS searches for subscriber registration information K corresponding to the subscriber identification information SID included in the authentication parameter request message. Then, an authentication parameter corresponding to the subscriber identification information SID is generated using the subscriber registration information K (S160) and transmitted to the authentication device AAA (S170). The authentication parameter includes key information KM used for generating the master key PMK, a network authentication token AUTN used by the first wireless terminal STA1 to verify the mobile communication network MNW, and the authentication device AAA using the first wireless terminal. And terminal verification parameter XRES used for verifying STA1.

  When receiving the authentication parameter, the authentication device AAA generates the access point master key APMK using the key information KM included in the received authentication parameter (S180). Then, a challenge message including the first message authentication code MAC1 generated using the access point master key APMK and the network authentication token AUTN is transmitted to the first wireless terminal STA1 via the access point AP. (S190).

  When receiving the challenge message, the first wireless terminal STA1 verifies that the communicating party is a valid mobile communication network MNW based on the network authentication token AUTN included in the challenge message. Subsequently, the first wireless terminal STA1 generates key information KM using the subscriber registration information K that it has, and generates a terminal master key SPMK using the key information KM (S200). Then, based on the first message authentication code MAC1 included in the challenge message, it is verified that the terminal master key SPMK generated by the first wireless terminal STA1 matches the access point master key APMK generated by the authentication device AAA. Thereafter, the first wireless terminal STA1 includes a response including the terminal verification parameter RES used by the authentication device AAA for verifying the first wireless terminal STA1 and the second message authentication code MAC2 generated using the terminal master key SPMK. A message is transmitted to the authentication device AAA via the access point AP (S210). The terminal verification parameter RES is a parameter generated by the first wireless terminal STA1 using its own subscriber registration information K.

  Upon receiving the response message, the authentication device AAA communicates based on the terminal verification parameter RES included in the response message and the terminal verification parameter XRES included in the authentication parameter received from the subscriber information management device HSS. It is verified that the other party is a valid first wireless terminal STA1. Further, based on the second message authentication code MAC2 included in the response message, it is verified that the terminal master key SPMK generated by the first wireless terminal STA1 matches the access point master key APMK generated by the authentication device AAA. After the verification of the terminal verification parameter RES and the second message authentication code MAC2, the authentication device AAA makes a determination to authenticate the first wireless terminal STA1 (S220), and the determination is made via the access point AP. (Authentication success) is notified to the first wireless terminal STA1 (S230). Further, the authentication device AAA transmits the access point master key APMK to the access point AP (S240).

  After being notified of successful authentication, the first wireless terminal STA1 generates a temporary key PTK that is a communication encryption key used for encryption of communication with the access point AP. The temporary key PTK is generated based on a master key PMK (terminal master key SPMK, access point master key APMK) common to the first wireless terminal STA1 and the access point AP. The procedure for generating the temporary key PTK (steps S250 to S300) will be described below.

  After receiving the access point master key APMK, the access point AP generates an access point random number ANONCE and transmits a first message frame including the access point random number ANONCE to the first wireless terminal STA1 (S250).

  After receiving the first message frame, the first wireless terminal STA1 generates a terminal random number SNANCE. Then, the terminal temporary key SPTK is generated based on the terminal random number SNANCE, the access point random number ANONCE included in the received first message frame, and the terminal master key SPMK (S260). Subsequently, a second message frame including the first message integrity code MIC1 generated based on the terminal temporary key SPTK and the terminal random number SNONCE is transmitted to the access point AP (S270).

  The second message frame includes a terminal temporary key SPTK generated by the first wireless terminal STA1 and a wireless key STA that the first wireless terminal STA1 substitutes for the temporary key PTK generated by the access point AP based on the second message frame. (In other words, it includes terminal information notification that informs the access point AP that it is used for communication with the second wireless terminal STA2). The terminal information notification includes destination information of the second wireless terminal STA2 (for example, the MAC address of the second wireless terminal STA2).

  Upon receiving the second message frame, the access point AP generates an access point temporary key APTK based on the terminal random number SNANCE, the access point random number ANONCE, and the access point master key APMK included in the second message frame (S280). ). Then, it is verified that the message integrity code MIC that matches the first message integrity code MIC1 generated based on the terminal temporary key SPTK can be generated using the access point temporary key APTK generated by the access point AP. Thereafter, the access point AP transmits a third message frame including the second message integrity code MIC2 generated based on the access point temporary key APTK to the first wireless terminal STA1 (S290).

  When receiving the third message frame, the first wireless terminal STA1 generates a message integrity code MIC that matches the second message integrity code MIC2 generated based on the access point temporary key APTK. It is verified that the terminal temporary key SPTK can be generated. Thereafter, a fourth message frame including the third message integrity code MIC3 generated based on the terminal temporary key SPTK is transmitted from the first wireless terminal STA1 to the access point AP (S300).

  After receiving the fourth message frame, the access point AP verifies the third message integrity code MIC3 included in the fourth message frame in the same procedure as described above. Thereafter, the access point AP sets itself to use the access point temporary key APTK for communication with the wireless terminal STA notified by the terminal information notification (that is, the second wireless terminal STA2).

  After transmitting the fourth message frame to the access point AP, the first wireless terminal STA1 encrypts the generated terminal temporary key SPTK with the inter-terminal encryption key TEK received from the second wireless terminal STA2 in step S120, and the second wireless terminal STA1 It transmits to terminal STA2 (S310). The terminal temporary key SPTK may be transmitted after the terminal information notification is transmitted, and may be transmitted before the transmission of the fourth message frame.

  After receiving the encrypted terminal temporary key SPTK from the first wireless terminal STA1, the second wireless terminal STA2 decrypts it using the inter-terminal decryption key TDK generated in step S110, and uses the terminal temporary key SPTK to access the access point. Connect to the AP and start communication (S320).

  While the connection between the second wireless terminal STA2 and the access point AP is maintained, the access point AP and the first wireless terminal STA1 intermittently execute the above-described common temporary key PTK generation procedure (S250 to S300) ( S330 to S380). The terminal information notification may be transmitted each time the common temporary key PTK generation procedure is executed (included in the second message frame in steps S270 and S350), or only the initial common temporary key PTK generation procedure. (Only included in the second message frame in step S270).

  Each time the terminal temporary key SPTK is newly generated, the first wireless terminal STA1 encrypts the new terminal temporary key SPTK with the inter-terminal encryption key TEK and transmits it to the second wireless terminal STA2 (S390). That is, after the second wireless terminal STA2 transmits the first authentication request (S130), until the connection between the second wireless terminal STA2 and the access point AP is disconnected, the first wireless terminal STA1 and the second wireless terminal STA2 Connection is maintained.

  After the connection between the second wireless terminal STA2 and the access point AP is disconnected (S400), the connection between the first wireless terminal STA1 and the second wireless terminal STA2 is disconnected (S410).

  According to the proxy authentication operation described above, the authentication method using the subscriber identification information SID can be applied to the second wireless terminal STA2 that does not have the subscriber identification information SID in the mobile communication network MNW.

1-3. Configuration of each element 1-3-1. Configuration of First Wireless Terminal FIG. 4 is a block diagram showing a configuration of the first wireless terminal STA1 according to the first embodiment. The first wireless terminal STA1 includes a wireless communication unit 110, a terminal communication unit 120, a storage unit 130, and a control unit 140. In addition, illustration of the output device which outputs an audio | voice, an image | video, etc., the input device which receives the instruction | indication from a user is abbreviate | omitted for convenience.

  The wireless communication unit 110 is an element for performing wireless communication with the access point AP, and includes a reception circuit that receives a wireless signal and a transmission circuit that transmits the wireless signal. The terminal communication unit 120 is an element for performing wireless communication with the second wireless terminal STA2, and includes a reception circuit that receives a wireless signal and a transmission circuit that transmits the wireless signal. When the first wireless terminal STA1 and the second wireless terminal STA2 perform wireless communication in accordance with a wireless LAN standard such as Wi-Fi Direct, the first wireless terminal STA1 does not include the terminal communication unit 120 and is transmitted by the wireless communication unit 110. Wireless communication with the second wireless terminal STA2 may be performed.

  The storage unit 130 stores a computer program related to the control of the first wireless terminal STA1 and information related to the authentication operation (for example, a terminal master key SPMK and an inter-terminal encryption key TEK). The control unit 140 includes an authentication information request unit 142, a master key generation unit 144, a response transmission unit 146, a terminal random number generation unit 148, a temporary key generation unit 150, a frame transmission unit 152, and an inter-terminal communication encryption. Unit 154 and authentication information transmission unit 156 as elements.

  When receiving the first authentication request from the second wireless terminal STA2, the authentication information requesting unit 142 requests authentication information used for connecting to the access point AP using the subscriber identification information SID of the first wireless terminal STA1. The second authentication request is transmitted to the authentication device AAA via the access point AP. The master key generation unit 144 generates a terminal master key SPMK based on the subscriber registration information K. After receiving the challenge message, the response transmission unit 146 transmits a response message including the second message authentication code MAC2 and the like to the authentication device AAA. The terminal random number generation unit 148 generates a terminal random number SNONCE. Temporary key generation unit 150 generates terminal temporary key SPTK based on access point random number ANONCE, terminal random number SNONCE, and terminal master key SPMK. The frame transmission unit 152 transmits message frames (second message frame, fourth message frame) to the access point AP. The inter-terminal communication encryption unit 154 encrypts the terminal temporary key SPTK transmitted to the second wireless terminal STA2 using the inter-terminal encryption key TEK. The authentication information transmission unit 156 transmits the encrypted terminal temporary key SPTK to the second wireless terminal STA2 through the terminal communication unit 120.

  The control unit 140 and each element included in the control unit 140 have a CPU (Central Processing Unit) (not shown) in the first wireless terminal STA1 execute a computer program stored in the storage unit 130 and function according to the computer program. It is a functional block realized by doing.

1-3-2. Configuration of Second Wireless Terminal FIG. 5 is a block diagram showing a configuration of the second wireless terminal STA2 according to the first embodiment. The second wireless terminal STA2 includes a wireless communication unit 210, a terminal communication unit 220, a storage unit 230, and a control unit 240. In addition, illustration of the output device which outputs an audio | voice, an image | video, etc., the input device which receives the instruction | indication from a user is abbreviate | omitted for convenience.

  The wireless communication unit 210 is an element for executing wireless communication with the access point AP, and has the same configuration as the wireless communication unit 110 of the first wireless terminal STA1. The terminal communication unit 220 is an element for performing wireless communication with the second wireless terminal STA2, and has the same configuration as the terminal communication unit 120 of the first wireless terminal STA1. When the first wireless terminal STA1 and the second wireless terminal STA2 perform wireless communication according to a wireless LAN standard such as Wi-Fi Direct, the second wireless terminal STA2 does not include the terminal communication unit 220 and is transmitted by the wireless communication unit 210. Wireless communication with the first wireless terminal STA1 may be performed.

  The storage unit 230 stores a computer program related to the control of the second wireless terminal STA2 and information related to authentication (for example, a terminal temporary key SPTK, an inter-terminal decryption key TDK). The control unit 240 includes a proxy authentication request unit 242, an inter-terminal key generation unit 250, and an inter-terminal key transmission unit 252 as elements.

  The proxy authentication request unit 242 transmits the first authentication request to the first wireless terminal STA1 through the terminal communication unit 220. The inter-terminal key generation unit 250 generates an inter-terminal encryption key TEK and an inter-terminal decryption key TDK. The inter-terminal key transmission unit 252 transmits the inter-terminal encryption key TEK generated by the inter-terminal key generation unit 250 to the first wireless terminal STA1.

  The control unit 240 and each element included in the control unit 240 are realized by a CPU (not shown) in the second wireless terminal STA2 executing a computer program stored in the storage unit 230 and functioning according to the computer program. Functional block.

1-3-3. Configuration of Access Point FIG. 6 is a block diagram showing a configuration of the access point AP according to the first embodiment. The access point AP includes a wireless communication unit 310, a network communication unit 320, an external network communication unit 330, a storage unit 340, and a control unit 350.

  The wireless communication unit 310 is an element for performing wireless communication with each of the first wireless terminal STA1 and the second wireless terminal STA2, and includes a receiving circuit that receives a wireless signal and a transmitting circuit that transmits the wireless signal. . The network communication unit 320 is an element for executing communication with the authentication device AAA, and transmits and receives electrical signals by wire or wirelessly. The external network communication unit 330 is an element for performing communication with the Internet IN, and transmits and receives electrical signals by wire or wirelessly. In addition, the external network communication unit 330 performs protocol conversion of signals as necessary. The storage unit 340 stores a computer program related to the control of the access point AP and information related to authentication (for example, the access point master key APMK). The control unit 350 includes an access point random number generation unit 352, a frame transmission unit 354, and a temporary key generation unit 356.

  The access point random number generator 352 generates an access point random number ANONCE. The frame transmission unit 354 transmits a message frame (first message frame, third message frame) to the first wireless terminal STA1. Temporary key generation unit 356 generates access point temporary key APTK based on access point random number ANONCE, terminal random number SNANCE, and access point master key APMK.

  The control unit 350 and each element included in the control unit 350 are functions realized by a CPU (not shown) in the access point AP executing a computer program stored in the storage unit 340 and functioning according to the computer program. It is a block.

1-3-4. Configuration of Authentication Device FIG. 7 is a block diagram showing the configuration of the authentication device AAA according to the first embodiment. The authentication device AAA includes a network communication unit 410, a storage unit 420, and a control unit 430.

  The network communication unit 410 is an element for executing communication with the subscriber information management device HSS and the access point AP, and has the same configuration as the network communication unit 320 of the access point AP. The storage unit 420 stores a computer program related to the control of the authentication device AAA and information (for example, an authentication parameter) related to the authentication operation. The control unit 430 includes an authentication parameter acquisition unit 432, a master key generation unit 434, a challenge transmission unit 436, an authentication determination unit 438, a determination result notification unit 440, and a master key transmission unit 442.

  The authentication parameter acquisition unit 432 is an element that acquires an authentication parameter corresponding to the subscriber identification information SID included in the second authentication request from the subscriber information management device HSS, and transmits an authentication parameter request message. The master key generation unit 434 generates an access point master key APMK using information included in the acquired authentication parameter. The challenge transmission unit 436 transmits a challenge message including the first message authentication code MAC1 and the like to the first wireless terminal STA1. The authentication determination unit 438 determines to authenticate the first wireless terminal STA1 based on information included in the response message received from the first wireless terminal STA1. The determination result notification unit 440 notifies the determination made by the authentication determination unit 438 (for example, successful authentication) to the first wireless terminal STA1 via the access point AP. The master key transmission unit 442 transmits the access point master key APMK generated by the master key generation unit 434 to the access point AP.

  The control unit 430 and each element included in the control unit 430 are functions realized by a CPU (not shown) in the authentication device AAA executing a computer program stored in the storage unit 420 and functioning according to the computer program. It is a block.

1-4. Effects of this Embodiment According to the above configuration, the authentication method using the subscriber identification information SID can be used also for the second wireless terminal STA2 that does not have the subscriber identification information SID in the mobile communication network MNW. Specifically, the second wireless terminal STA2 communicates with the access point AP using a communication encryption key (temporary key PTK) that is authentication information generated by an authentication operation using an authentication method using the subscriber identification information SID. Can be encrypted. As described above, the communication encryption key generated by the authentication method using the subscriber identification information SID is more difficult to specify than the communication encryption key generated by the authentication method not using the subscriber identification information SID. It is understood that there is. Therefore, in the example of the present embodiment, the second wireless terminal STA2 and the access point AP are more confidential than the configuration in which the authentication operation using the authentication method that does not use the subscriber identification information SID is performed to connect to the access point AP. High communication can be performed.

  Furthermore, according to the above configuration, since the authentication operation is performed using the subscriber identification information SID of the first wireless terminal STA1, the user of the second wireless terminal STA2 needs to input authentication information such as a password. Absent. Therefore, the user of the second wireless terminal STA2 can connect to the access point AP more easily.

2. Second Embodiment A second embodiment of the present invention will be described below. In each embodiment illustrated below, about the element which an effect | action and a function are equivalent to 1st Embodiment, the code | symbol referred by the above description is diverted and each description is abbreviate | omitted suitably.

2-1. Example of Proxy Authentication Operation In the first embodiment, a temporary key PTK (terminal temporary key SPTK) is transmitted from the first wireless terminal STA1 to the second wireless terminal STA2. In the second embodiment, the master key PMK is transmitted from the first wireless terminal STA1 to the second wireless terminal STA2.

  An example of the proxy authentication operation of the present embodiment will be described with reference to FIGS. In this example, as in the first embodiment (FIGS. 2 and 3), each of the first wireless terminal STA1 and the subscriber information management device HSS previously stores the subscriber identification information SID of the first wireless terminal STA1 and the subscription. It is assumed that the subscriber registration information K corresponding to the subscriber identification information SID is included.

  The transmission of the access point master key APMK from the authentication device AAA to the access point AP (S640) from the establishment of the connection with the first wireless terminal STA1 by the second wireless terminal STA2 (S640) starts from step S100 of the first embodiment. Since it is the same as that up to S240, the description is omitted.

  After the authentication device AAA is notified of the successful authentication of the first wireless terminal STA1 (S630), the first wireless terminal STA1 generates the master key PMK (terminal master key SPMK generated by the first wireless terminal STA1 and the access point AP, respectively. , The access point master key APMK) transmits to the access point AP a terminal information notification informing that the access point master key APMK is used for communication with the wireless terminal STA that the first wireless terminal STA1 acts on (ie, the second wireless terminal STA2) (S650). ). The terminal information notification includes destination information of the second wireless terminal STA2 (for example, the MAC address of the second wireless terminal STA2). After that, the first radio terminal STA1 encrypts the terminal master key SPMK with the inter-terminal encryption key TEK received from the second radio terminal STA2 in step S520, and transmits it to the second radio terminal STA2 (S660). After the transmission is completed, the connection between the first wireless terminal STA1 and the second wireless terminal STA2 is disconnected (S670).

  After receiving the access point master key APMK, the access point AP generates an access point random number ANONCE, and the wireless terminal STA notified by the terminal information notification (that is, the second wireless terminal) includes the first message frame including the access point random number ANONCE. To STA2) (S680).

  After receiving the first message frame, the second wireless terminal STA2 generates a terminal random number SNANCE. Based on the terminal random number SNANCE, the access point random number ANONCE included in the received first message frame, and the terminal master key SPMK decrypted using the inter-terminal decryption key TDK generated in step S510, the terminal temporary A key SPTK is generated (S690). Subsequently, the second wireless terminal STA2 transmits a second message frame including the first message integrity code MIC1 generated based on the terminal temporary key SPTK and the terminal random number SNANCE to the access point AP. (S700).

  Upon receiving the second message frame, the access point AP generates an access point temporary key APTK based on the terminal random number SNONCE, the access point random number ANONCE, and the access point master key APMK included in the second message frame ( S710). Then, it is verified that the message integrity code MIC that matches the first message integrity code MIC1 generated based on the terminal temporary key SPTK can be generated using the access point temporary key APTK generated by the access point AP. Thereafter, the access point AP transmits a third message frame including the second message integrity code MIC2 generated based on the access point temporary key APTK to the second wireless terminal STA2 (S720).

  When the third message frame is received, the second wireless terminal STA2 generates a message integrity code MIC that matches the second message integrity code MIC2 generated based on the access point temporary key APTK. It is verified that the terminal temporary key SPTK can be generated. Thereafter, the second wireless terminal STA2 transmits a fourth message frame including the third message integrity code MIC3 generated based on the terminal temporary key SPTK to the access point AP (S730).

  After receiving the fourth message frame, the access point AP verifies the third message integrity code MIC3 included in the fourth message frame in the same procedure as described above. Thereafter, the access point AP sets itself to use the access point temporary key APTK for communication with the second wireless terminal STA2.

  After transmitting the fourth message frame to the access point AP, the second wireless terminal STA2 connects to the access point AP using the generated terminal temporary key SPTK and starts communication (S740).

  After the second wireless terminal STA2 is connected to the access point AP, the connection between the second wireless terminal STA2 and the access point AP is disconnected (S810) (that is, between the second wireless terminal STA2 and the access point AP). While the connection is maintained, the access point AP and the second wireless terminal STA2 intermittently execute the above-described common temporary key PTK generation procedure (S680 to S730) (S750 to S800).

  In the present embodiment, an example is shown in which the connection between the first wireless terminal STA1 and the second wireless terminal STA2 is disconnected (S670) after transmission of the terminal master key SPMK (S660). However, the connection between the first wireless terminal STA1 and the second wireless terminal STA2 only needs to be maintained from the transmission of the first authentication request (S530) to the completion of transmission of the terminal master key SPMK (S660). It may be cut. For example, as in the first embodiment (S410), after the connection between the second wireless terminal STA2 and the access point AP is disconnected (S810), the connection between the first wireless terminal STA1 and the second wireless terminal STA2 is disconnected. May be.

  According to the proxy authentication operation described above, the authentication method using the subscriber identification information SID can be applied to the second wireless terminal STA2 that does not have the subscriber identification information SID in the mobile communication network MNW.

2-2. Configuration of each element 2-2-1. Configuration of First Wireless Terminal FIG. 10 is a block diagram showing a configuration of the first wireless terminal STA1 according to the second embodiment. The first wireless terminal STA1 includes a wireless communication unit 110, a terminal communication unit 120, a storage unit 130, and a control unit 140. In addition, illustration of the output device which outputs an audio | voice, an image | video, etc., the input device which receives the instruction | indication from a user is abbreviate | omitted for convenience.

  The wireless communication unit 110 and the terminal communication unit 120 have the same configurations as the wireless communication unit 110 and the terminal communication unit 120 included in the first wireless terminal STA1 of the first embodiment, respectively, and thus description thereof is omitted.

  The storage unit 130 stores a computer program related to the control of the first wireless terminal STA1 and information related to the authentication operation (for example, a terminal master key SPMK and an inter-terminal encryption key TEK). The control unit 140 includes an authentication information request unit 142, a master key generation unit 144, a response transmission unit 146, an inter-terminal communication encryption unit 154, and an authentication information transmission unit 156 as elements.

  When receiving the first authentication request from the second wireless terminal STA2, the authentication information requesting unit 142 requests authentication information for connecting to the access point AP using the subscriber identification information SID of the first wireless terminal STA1. The second authentication request is transmitted to the authentication device AAA via the access point AP. The master key generation unit 144 generates a terminal master key SPMK based on the subscriber registration information K. After receiving the challenge message, the response transmission unit 146 transmits a response message including the second message authentication code MAC2 and the like to the authentication device AAA. The terminal-to-terminal communication encryption unit 154 encrypts the terminal master key SPMK to be transmitted to the second wireless terminal STA2 using the terminal-to-terminal encryption key TEK. The authentication information transmission unit 156 transmits the encrypted terminal master key SPMK to the second wireless terminal STA2 through the terminal communication unit 120.

  The control unit 140 and each element included in the control unit 140 are realized by a CPU (not shown) in the first wireless terminal STA1 executing a computer program stored in the storage unit 130 and functioning according to the computer program. Functional block.

2-2-2. Configuration of Second Wireless Terminal FIG. 11 is a block diagram showing an example of the configuration of the second wireless terminal STA2 according to the second embodiment. The second wireless terminal STA2 includes a wireless communication unit 210, a terminal communication unit 220, a storage unit 230, and a control unit 240. In addition, illustration of the output device which outputs an audio | voice, an image | video, etc., the input device which receives the instruction | indication from a user is abbreviate | omitted for convenience.

  The wireless communication unit 210 and the terminal communication unit 220 have the same configurations as the wireless communication unit 210 and the terminal communication unit 220 included in the second wireless terminal STA2 of the first embodiment, respectively, and thus description thereof is omitted.

  The storage unit 230 stores a computer program related to the control of the second wireless terminal STA2 and information related to authentication (for example, a terminal master key SPMK and an inter-terminal decryption key TDK). The control unit 240 includes the proxy authentication request unit 242, the terminal random number generation unit 244, the temporary key generation unit 246, the frame transmission unit 248, the inter-terminal key generation unit 250, and the inter-terminal key transmission unit 252 as elements. Including.

  The proxy authentication request unit 242 transmits the first authentication request to the first wireless terminal STA1 through the terminal communication unit 220. The terminal random number generation unit 244 generates a terminal random number SNONCE. Temporary key generation unit 246 generates terminal temporary key SPTK based on access point random number ANONCE, terminal random number SNONCE, and terminal master key SPMK. The frame transmission unit 248 transmits message frames (second message frame, fourth message frame) to the access point AP. The inter-terminal key generation unit 250 generates an inter-terminal encryption key TEK and an inter-terminal decryption key TDK. The inter-terminal key transmission unit 252 transmits the inter-terminal encryption key TEK generated by the inter-terminal key generation unit 250 to the first wireless terminal STA1.

  The control unit 240 and each element included in the control unit 240 are realized by a CPU (not shown) in the second wireless terminal STA2 executing a computer program stored in the storage unit 230 and functioning according to the computer program. Functional block.

2-2-3. Configuration of Access Point Since the access point AP of the second embodiment has the same configuration as the access point AP of the first embodiment, description thereof is omitted. However, the frame transmission unit 354 sends a message frame (first message frame, first message frame) to the radio terminal STA notified by the terminal information notification (S650) (that is, the second radio terminal STA2) instead of the first radio terminal STA1. 3 message frames).

2-2-4. Configuration of Authentication Device The authentication device AAA according to the second embodiment has the same configuration as that of the authentication device AAA according to the first embodiment, and a description thereof will be omitted.

2-3. Effects of this Embodiment According to the above configuration, the authentication method using the subscriber identification information SID can be used also for the second wireless terminal STA2 that does not have the subscriber identification information SID in the mobile communication network MNW. Specifically, the second wireless terminal STA2 encrypts communication with the access point AP using a master key PMK that is authentication information generated by an authentication operation using an authentication method using the subscriber identification information SID. An encryption key (temporary key PTK) can be generated and used for encryption of communication with the access point AP. As described above, the communication encryption key based on the authentication information generated by the authentication method using the subscriber identification information SID is more than the communication encryption key generated by the authentication method not using the subscriber identification information SID. It is understood that it may be difficult to identify. Therefore, in the example of the present embodiment, the second wireless terminal STA2 and the access point AP are more confidential than the configuration in which the authentication operation using the authentication method that does not use the subscriber identification information SID is performed to connect to the access point AP. High communication can be performed.

  Furthermore, according to the above configuration, since user authentication is performed using the subscriber identification information SID of the first wireless terminal STA1, there is no need for the user of the second wireless terminal STA2 to input authentication information such as a password. . Therefore, the user of the second wireless terminal STA2 can connect to the access point AP more easily.

3. Modifications The above embodiment can be variously modified. Specific modifications are exemplified below. Two or more aspects arbitrarily selected from the following examples can be appropriately combined as long as they do not contradict each other.

3-1. Modification 1
In each of the above embodiments, the authentication information transmitted from the first wireless terminal STA1 is encrypted using the inter-terminal encryption key TEK generated by the inter-terminal key generation unit 250 of the second wireless terminal STA2. Similarly, the first wireless terminal STA1 generates an inter-terminal encryption key, and communication (for example, the first authentication request) from the second wireless terminal STA2 to the first wireless terminal STA1 is encrypted using the inter-terminal encryption key. May be used.

3-1-1. Modification 1 (1)
With reference to FIG. 12, the operation | movement flow of this modification is demonstrated. This operation flow can be executed in place of steps S100 to S130 in FIG. 2 and steps S500 to S530 in FIG.

  The connection between the first wireless terminal STA1 and the second wireless terminal STA2 (S900) is the same as in each of the embodiments described above. Thereafter, the first wireless terminal STA1 performs communication encrypted with the second inter-terminal encryption key TEK2 for encrypting communication between the first wireless terminal STA1 and the second wireless terminal STA2, and the communication encrypted with the second inter-terminal encryption key TEK2. A second inter-terminal decryption key TDK2 to be decrypted is generated (S910), and the second inter-terminal encryption key TEK2 is transmitted to the second wireless terminal STA2 (S920). Similar to the above-described embodiments, the second wireless terminal STA2 generates an inter-terminal encryption key TEK (S930) and transmits it to the first wireless terminal STA1 (S940). The second wireless terminal STA2 encrypts the first authentication request using the received second inter-terminal encryption key TEK2, and transmits it to the first wireless terminal STA1 (S950).

  FIG. 13 is a block diagram illustrating a configuration example of the first wireless terminal STA1 of the first embodiment to which the present modification is applied, and FIG. 14 is a first wireless terminal STA1 of the second embodiment to which the present modification is applied. It is a block diagram which shows the example of a structure. In each of FIG. 13 and FIG. 14, the first wireless terminal STA1 includes an inter-terminal key generation unit 158 and an inter-terminal key transmission unit 160 in addition to the elements described above in the embodiments. The inter-terminal key generation unit 158 generates the second inter-terminal encryption key TEK2 and the second inter-terminal decryption key TDK2. The inter-terminal key transmission unit 160 transmits the second inter-terminal encryption key TEK2 to the second radio terminal STA2.

  FIG. 15 is a block diagram showing a configuration example of the second wireless terminal STA2 of the first embodiment to which the present modification is applied, and FIG. 16 is a second wireless terminal STA2 of the second embodiment to which the present modification is applied. It is a block diagram which shows the example of a structure. In each of FIG. 15 and FIG. 16, the second wireless terminal STA2 includes an inter-terminal communication encryption unit 254 in addition to the elements described above in each embodiment. The terminal-to-terminal communication encryption unit 254 encrypts the first authentication request using the second terminal-to-terminal encryption key TEK2 received from the first wireless terminal STA1. The encrypted first authentication request is transmitted to the first wireless terminal STA1 by the proxy authentication request unit 242.

  According to this modification, the first authentication request transmitted from the second wireless terminal STA2 is encrypted and transmitted. As a result, the confidentiality of communication between the first wireless terminal STA1 and the second wireless terminal STA2, and thus the confidentiality of communication between the second wireless terminal STA2 and the access point AP, can be kept higher.

  FIG. 12 shows an example in which the second inter-terminal encryption key TEK2 is transmitted from the first radio terminal STA1 (S920) before the inter-terminal encryption key TEK is transmitted from the second radio terminal STA2 (S940). However, the second inter-terminal encryption key TEK2 may be transmitted from the first radio terminal STA1 after the inter-terminal encryption key TEK is transmitted from the second radio terminal STA2. In this case, the same effect as described above can be obtained.

3-1-2. Modification 1 (2)
In the modification described above, the first authentication request is encrypted using the second terminal encryption key TEK2. In the configuration in which the second inter-terminal encryption key TEK2 is transmitted before the inter-terminal encryption key TEK, the second wireless terminal STA2 uses the second inter-terminal encryption key TEK2 in addition to the first authentication request. May be used for encryption and transmission.

  According to this modification, it is understood that since the inter-terminal encryption key TEK is transmitted after being encrypted, the risk of eavesdropping on the inter-terminal encryption key TEK is reduced. Therefore, the confidentiality of communication between the first wireless terminal STA1 and the second wireless terminal STA2, and thus the confidentiality of communication between the second wireless terminal STA2 and the access point AP can be further enhanced. This effect is understood to be particularly remarkable when an encryption method (for example, a common key encryption method) in which the inter-terminal encryption key TEK and the inter-terminal decryption key TDK match is used.

3-2. Modification 2
A common key cryptosystem may be used as an encryption scheme for communication between the first radio terminal STA1 and the second radio terminal STA2. In this case, the inter-terminal key generation unit 250 of the second wireless terminal STA2 generates a common key that serves as both the inter-terminal encryption key TEK and the inter-terminal decryption key TDK (S110, S510). The inter-terminal key transmission unit 252 of the second wireless terminal STA2 transmits the common key to the first wireless terminal STA1 (S120, S520). The inter-terminal communication encryption unit 154 of the first wireless terminal STA1 encrypts authentication information (terminal temporary key SPTK, terminal master key SPMK) using the received common key. The second wireless terminal STA2 decrypts the encrypted authentication information by using the same common key as the common key transmitted by the inter-terminal key transmission unit 252.

3-3. Modification 3
A public key cryptosystem may be used as an encryption scheme for communication between the first radio terminal STA1 and the second radio terminal STA2. In this case, the inter-terminal key generation unit 250 of the second wireless terminal STA2 generates a public key as the inter-terminal encryption key TEK and generates a secret key as the inter-terminal decryption key TDK (S110, S510). The inter-terminal key transmission unit 252 of the second wireless terminal STA2 transmits the public key to the first wireless terminal STA1 (S120, S520). The inter-terminal communication encryption unit 154 of the first wireless terminal STA1 encrypts authentication information (terminal temporary key SPTK, terminal master key SPMK) using the received public key. The second wireless terminal STA2 uses the private key to decrypt the authentication information encrypted with the public key.

  When the present modification is employed, the secret key that is the inter-terminal decryption key TDK is held only by the second radio terminal STA2, and is not transmitted to the first radio terminal STA1. Therefore, a configuration in which an inter-terminal encryption key TEK that matches the inter-terminal decryption key TDK is transmitted (for example, a configuration in which a common key cryptosystem is used as an encryption scheme for communication between the first radio terminal STA1 and the second radio terminal STA2). In comparison, it is understood that the terminal-to-terminal decryption key TDK is not easily specified by eavesdropping or the like. As a result, the confidentiality of communication between the first wireless terminal STA1 and the second wireless terminal STA2, and thus the confidentiality of communication between the second wireless terminal STA2 and the access point AP, can be maintained higher.

3-4. Modification 4
The encryption method for communication between the first wireless terminal STA1 and the second wireless terminal STA2 is an encryption method using both a public key encryption method and a secret key encryption method (for example, a TLS (transport layer security) encryption method). Can be used. In this case, it is preferable that the first radio terminal STA1 has the configuration described in the first modification.

  Specifically, the inter-terminal key generation unit 158 of the first wireless terminal STA1 generates a public key as the second inter-terminal encryption key TEK2, and generates a secret key as the second inter-terminal decryption key TDK2 (S910). The inter-terminal key transmission unit 160 transmits the public key (second inter-terminal encryption key TEK2) to the second wireless terminal STA2 (S920). The inter-terminal key generation unit 250 of the second wireless terminal STA2 generates a common key that serves as both the inter-terminal encryption key TEK and the inter-terminal decryption key TDK (S110, S510, S930). The inter-terminal communication encryption unit 254 of the second wireless terminal STA2 encrypts the common key (inter-terminal encryption key TEK) with the public key (second inter-terminal encryption key TEK2) received from the first wireless terminal STA1, and first Transmit to the wireless terminal STA1 (S120, S520, S940). The first wireless terminal STA1 decrypts the encrypted common key (inter-terminal encryption key TEK) using the secret key (second inter-terminal decryption key TDK2). The inter-terminal communication encryption unit 154 of the first wireless terminal STA1 encrypts the authentication information (terminal temporary key SPTK, terminal master key SPMK) using the decrypted common key (inter-terminal encryption key TEK). The second wireless terminal STA2 uses the common key (inter-terminal decryption key TDK) to decrypt the authentication information encrypted with the common key (inter-terminal encryption key TEK).

  When this modification is adopted, the common key that is the inter-terminal encryption key TEK is encrypted with the public key (second inter-terminal encryption key TEK2) generated by the inter-terminal key generation unit 158 of the first wireless terminal STA1. (Ie, only the secret key (second inter-terminal decryption key TDK2) generated by the inter-terminal key generation unit 158 of the first wireless terminal STA1 can be decrypted). Therefore, it is understood that the risk that the common key is specified by eavesdropping or the like is low. As a result, the confidentiality of communication between the first wireless terminal STA1 and the second wireless terminal STA2, and thus the confidentiality of communication between the second wireless terminal STA2 and the access point AP, can be maintained higher.

3-5. Modification 5
In the above example, communication between the first wireless terminal STA1 and the second wireless terminal STA2, such as authentication information (terminal temporary key SPTK, terminal master key SPKM) transmitted to the second wireless terminal STA2, is an inter-terminal encryption key. Encryption is performed using both the TEK or the inter-terminal encryption key TEK and the second inter-terminal encryption key TEK2. However, the communication between the first wireless terminal STA1 and the second wireless terminal STA2 may not be encrypted. In this case, the step of generating the inter-terminal key (S110, S510, S910, S930) and the step of transmitting the inter-terminal key (S120, S520, S920, S940) are unnecessary. Further, the first wireless terminal STA1 may not include at least one element among the inter-terminal communication encryption unit 154, the inter-terminal key generation unit 158, and the inter-terminal key transmission unit 160. The second wireless terminal STA2 may not include at least one element among the inter-terminal key generation unit 250, the inter-terminal key transmission unit 252, and the inter-terminal communication encryption unit 254.

3-6. Modification 6
In the example of the first embodiment described above (including the modification of the first embodiment), as a wireless communication technique used for communication between the first wireless terminal STA1 and the second wireless terminal STA2, the first wireless terminal STA1 and Wireless communication is possible even if the second wireless terminal STA2 is not located at a close distance (for example, within 10 centimeters) (for example, communication is possible if it is located within several meters to several tens of meters). It is preferable to use a communication technology (for example, Bluetooth (registered trademark), Wi-Fi Direct) (hereinafter sometimes referred to as “non-proximity wireless communication technology”).

  In the example of the first embodiment, while the connection between the second wireless terminal STA2 and the access point AP is maintained, the connection between the first wireless terminal STA1 and the second wireless terminal STA2 is also maintained. When the non-proximity wireless communication technology is used for communication between the first wireless terminal STA1 and the second wireless terminal STA2, the user can communicate with the first wireless terminal STA1 within a range in which communication is possible using the non-proximity wireless communication technology. The second radio terminal STA2 can be used apart. Therefore, even while the connection between the second wireless terminal STA2 and the access point AP is maintained (that is, while the connection between the first wireless terminal STA1 and the second wireless terminal STA2 is maintained), the user There can be an effect that it is easy to use both the wireless terminal STA of the first wireless terminal STA1 and the second wireless terminal STA2.

3-7. Modification 7
In the example of the second embodiment described above (including the modification of the second embodiment), as a wireless communication technique used for communication between the first wireless terminal STA1 and the second wireless terminal STA2, the first wireless terminal STA1 and When a wireless communication technology (for example, NFC) (hereinafter, may be referred to as “proximity wireless communication technology”) that requires the second wireless terminal STA2 to be located at a close distance (for example, within 10 centimeters) is used. Is preferred.

  In the example of the second embodiment, the terminal master key SPMK is transmitted from the first wireless terminal STA1 to the second wireless terminal STA2. A temporary key PTK (terminal temporary key SPTK, access point temporary key APTK) for encrypting communication between the wireless terminal STA and the access point AP is generated based on the master key PMK (terminal master key SPMK, access point master key APMK). Therefore, if the master key PMK is wiretapped, there is a possibility that the risk of specifying the temporary key PTK is increased. For this reason, it is understood that it is preferable to use a wireless communication technique that is less susceptible to eavesdropping for communication between the first wireless terminal STA1 and the second wireless terminal STA2.

  When the first wireless terminal STA1 and the second wireless terminal STA2 communicate using the proximity wireless communication technology, a wireless communication technology having a wider communication range (for example, within several tens of meters) than the proximity wireless communication technology is used. It is understood that there is less room for the third device other than the communicating terminals to enter the communicable range as compared with the case of using. As a result, the communication between the first wireless terminal STA1 and the second wireless terminal STA2 is not easily intercepted by the third device. Therefore, when communication is performed using the proximity wireless communication technology, the confidentiality of communication between the first wireless terminal STA1 and the second wireless terminal STA2, and hence the confidentiality of communication between the second wireless terminal STA2 and the access point AP is higher. The effect of being kept high can be produced.

3-8. Modification 8
In the example of the first embodiment described above, the terminal wireless key SPTK generated by the first wireless terminal STA1 and the access point temporary key APTK generated by the access point AP are the second represented by the first wireless terminal STA1. A terminal information notification notifying that it is used for communication with the wireless terminal STA2 is included in the second message frame and transmitted to the access point AP.

  However, the terminal information notification is accessed after the authentication device AAA transmits the access point master key APKMK to the access point AP until the first wireless terminal STA1 transmits the terminal temporary key SPTK to the second wireless terminal STA2. It may be transmitted to the point AP. Further, as exemplified in the second embodiment (S650), the terminal information notification may be transmitted as an independent message. For example, the terminal information notification may be transmitted by being included in the fourth message frame, or may be transmitted as an individual message after the fourth message frame is transmitted and before the terminal temporary key SPTK is transmitted. Good.

3-9. Modification 9
In each element in the wireless communication system CS (first wireless terminal STA1, second wireless terminal STA2, access point AP, authentication device AAA, subscriber information management device HSS), the functions executed by the CPU are instead of the CPU. The program may be executed by hardware, or may be executed by a programmable logic device such as an FPGA (Field Programmable Gate Array) or a DSP (Digital Signal Processor).

AAA ... Authentication device, ANONCE ... Access point random number, AP ... Access point, APMC ... Access point master key, APTK ... Access point temporary key, CS ... Wireless communication system, HSS ... Subscriber information management device , K: Subscriber registration information, KM: Key information, IN: Internet, MAC: Message authentication code, MIC (MIC1, MIC2, MIC3) ... Message integrity code, MNW: Mobile communication network, PMK ... Master key, PTK ... Temporary key, SID ... Subscriber identification information, SNONCE ... Terminal random number, SPKK ... Terminal master key, SPTK ... Terminal temporary key, STA1 ... First wireless terminal, STA2 ... ... second wireless terminal, TDK ... decryption key between terminals, TDK2 ... decryption key between second terminals, TEK ... between terminals Number key, TEK2 ... second terminal encryption key, 120 ... terminal communication unit, 130 ... storage unit, 142 ... authentication information request unit, 144 ... master key generation unit, 146 ... response transmission unit, 148 ...... Terminal random number generation unit, 150... Temporary key generation unit, 152... Frame transmission unit, 154... Inter-terminal communication encryption unit, 156. …… Inter-terminal key transmission unit, 220 …… Terminal communication unit, 230 …… Storage unit, 242 …… Proxy authentication request unit, 244 …… Terminal random number generation unit, 246 …… Temporary key generation unit, 248 …… Frame transmission , 250... Inter-terminal key generation unit, 252... Inter-terminal key transmission unit, 254... Inter-terminal communication encryption unit, 340... Storage unit, 352. 356 ... Temporary key Generation unit 420... Storage unit 432 .. authentication parameter acquisition unit 434... Master key generation unit 436. Challenge transmission unit 438... Authentication determination unit 440. ... Master key transmitter.

Claims (10)

A first wireless terminal having subscriber identification information in a mobile communication network;
A plurality of wireless terminals including a second wireless terminal not having subscriber identification information in the mobile communication network;
An access point that relays communication between the first wireless terminal and the mobile communication network ;
An authentication device for authenticating a wireless terminal having subscriber identification information in the mobile communication network ,
The second wireless terminal is
A second terminal communication unit for performing communication with the first wireless terminal;
A first authentication request for requesting the first wireless terminal to acquire authentication information used for connecting the second wireless terminal to the access point by proxy is sent to the first wireless terminal through the second terminal communication unit. A proxy authentication requesting unit for transmission,
The first wireless terminal is
A first terminal communication unit for performing communication with the second wireless terminal;
Upon receiving the first authentication request, an authentication information requesting unit that requests the authentication information from the authentication device using the subscriber identification information;
A wireless communication system comprising: an authentication information transmitting unit configured to transmit the authentication information acquired in response to a request from the authentication information requesting unit to the second wireless terminal through the first terminal communication unit. The first wireless terminal is
Having subscriber registration information corresponding to the subscriber identification information of the first wireless terminal;
Said mobile communication network,
The authentication device and a subscriber information management device for the storage in association with the subscriber registration information of the said first said subscriber identification information of the wireless terminal first wireless terminal,
The subscriber information management device includes:
Information for authenticating the first wireless terminal having the subscriber identification information corresponding to the subscriber identification information, and an authentication parameter including key information used for generating a master key, the subscriber registration Generated using information,
The authentication information request unit of the first wireless terminal is
In response to the first authentication request received from the proxy authentication request unit, the subscriber identification information of the first wireless terminal is mounted and a request is made to authenticate the first wireless terminal having the subscriber identification information. Sending a second authentication request to the authentication device via the access point;
The authentication device
An authentication parameter acquisition unit that acquires the authentication parameter corresponding to the subscriber identification information mounted in the second authentication request from the subscriber information management device;
A master key generation unit that generates an access point master key using the key information included in the authentication parameter acquired from the subscriber information management device;
A challenge transmission unit that transmits a challenge message including the first message authentication code generated using the access point master key to the first wireless terminal via the access point;
The first wireless terminal further includes
A master key generating unit that generates a terminal master key that matches the access point master key based on the subscriber registration information of the first wireless terminal;
A storage unit for storing the terminal master key;
A response transmission unit that transmits a response message including the second message authentication code generated using the terminal master key to the authentication device via the access point after receiving the challenge message;
The authentication device further includes:
A master key transmitter for transmitting the access point master key to the access point;
The access point is
A storage unit for storing the received access point master key;
The first wireless terminal further includes
A temporary key generation unit that generates a terminal temporary key using the terminal master key stored in the storage unit of the first wireless terminal;
The access point further includes
Using the access point master key stored in the storage unit of the access point, a temporary key generation unit that generates an access point temporary key that matches the terminal temporary key;
The authentication information transmission unit of the first wireless terminal is
The wireless communication system according to claim 1, wherein the terminal temporary key is transmitted to the second wireless terminal as the authentication information. The first wireless terminal is
Having subscriber registration information corresponding to the subscriber identification information of the first wireless terminal;
Said mobile communication network,
The authentication device and a subscriber information management device for the storage in association with the subscriber registration information of the said first said subscriber identification information of the wireless terminal first wireless terminal,
The subscriber information management device includes:
Information for authenticating the first wireless terminal having the subscriber identification information corresponding to the subscriber identification information, and an authentication parameter including key information used for generating a master key, the subscriber registration Generated using information,
The authentication information request unit of the first wireless terminal is
In response to the first authentication request received from the proxy authentication request unit, the subscriber identification information of the first wireless terminal is mounted and a request is made to authenticate the first wireless terminal having the subscriber identification information. Sending a second authentication request to the authentication device via the access point;
The authentication device
An authentication parameter acquisition unit that acquires the authentication parameter corresponding to the subscriber identification information mounted in the second authentication request from the subscriber information management device;
A master key generation unit that generates an access point master key using the key information included in the authentication parameter acquired from the subscriber information management device;
A challenge transmission unit that transmits a challenge message including the first message authentication code generated using the access point master key to the first wireless terminal via the access point;
The first wireless terminal further includes
A master key generating unit that generates a terminal master key that matches the access point master key based on the subscriber registration information of the first wireless terminal;
A storage unit for storing the terminal master key;
A response transmission unit that transmits a response message including the second message authentication code generated using the terminal master key to the authentication device via the access point after receiving the challenge message;
The authentication device further includes:
A master key transmitter for transmitting the access point master key to the access point;
The access point is
A storage unit for storing the received access point master key;
The authentication information transmission unit of the first wireless terminal is
Transmitting the terminal master key as the authentication information to the second wireless terminal;
The second wireless terminal further includes
A storage unit for storing the received terminal master key;
A temporary key generating unit that generates a terminal temporary key using the terminal master key stored in the storage unit of the second wireless terminal;
The access point further includes
The wireless communication system according to claim 1, further comprising: a temporary key generation unit that generates an access point temporary key that matches the terminal temporary key using the access point master key stored in the storage unit of the access point. The temporary key generation unit of the first wireless terminal is
A new terminal temporary key is intermittently generated using the terminal master key stored in the storage unit of the first wireless terminal,
The temporary key generation unit of the access point is
Using the access point master key stored in the storage unit of the access point, to generate a new access point temporary key that matches the newly generated terminal temporary key,
The authentication information transmission unit of the first wireless terminal is
The wireless communication system according to claim 2, wherein each time a terminal temporary key is newly generated, the terminal temporary key is transmitted as the authentication information to the second wireless terminal. The connection established between the second terminal communication unit and the first terminal communication unit is:
The wireless communication according to any one of claims 1 to 4, wherein the wireless communication is maintained until the connection between the second wireless terminal and the access point is disconnected after the second wireless terminal transmits the first authentication request. system. The connection established between the second terminal communication unit and the first terminal communication unit is:
This is maintained until the transmission of the terminal master key to the second wireless terminal by the authentication information transmitting unit of the first wireless terminal is completed after the second wireless terminal transmits the first authentication request. The wireless communication system according to claim 3. The second wireless terminal further includes
An inter-terminal encryption key for encrypting communication between the first wireless terminal and the second wireless terminal, and an inter-terminal decryption key for decrypting communication encrypted with the inter-terminal encryption key are generated. An inter-terminal key generator that
An inter-terminal key transmission unit that transmits the inter-terminal encryption key to the first wireless terminal;
The first wireless terminal further includes
An inter-terminal communication encryption unit that encrypts the authentication information acquired in response to the request of the authentication information request unit using the inter-terminal encryption key received from the inter-terminal key transmission unit;
The authentication information transmission unit of the first wireless terminal is
The wireless communication system according to any one of claims 1 to 6, wherein the authentication information encrypted using the inter-terminal encryption key is transmitted to the second wireless terminal. The first wireless terminal further includes
A second inter-terminal encryption key for encrypting communication between the first wireless terminal and the second wireless terminal; and a second terminal for decrypting communication encrypted with the second inter-terminal encryption key. An inter-terminal key generation unit that generates an inter-decryption key;
An inter-terminal key transmission unit that transmits the second inter-terminal encryption key to the second wireless terminal;
The second wireless terminal further includes
An inter-terminal communication encryption unit that encrypts the first authentication request with the received second inter-terminal encryption key;
The wireless communication system according to claim 7, wherein the proxy authentication request unit transmits the encrypted first authentication request to the first wireless terminal. A first wireless terminal having subscriber identification information in a mobile communication network;
A plurality of wireless terminals including a second wireless terminal not having subscriber identification information in the mobile communication network;
An access point that relays communication between the first wireless terminal and the mobile communication network ;
The first wireless terminal in a wireless communication system comprising an authentication device for authenticating a wireless terminal having subscriber identification information in the mobile communication network ,
A first terminal communication unit for performing communication with the second wireless terminal;
After receiving from the second wireless terminal a first authentication request for requesting that the first wireless terminal obtains authentication information used by the second wireless terminal to connect to the access point by proxy, the authentication device On the other hand, an authentication information request unit that requests the authentication information using the subscriber identification information;
A wireless terminal comprising: an authentication information transmission unit that transmits the authentication information acquired in response to a request from the authentication information request unit to the second wireless terminal through the first terminal communication unit. A first wireless terminal having subscriber identification information in a mobile communication network;
A plurality of wireless terminals including a second wireless terminal not having subscriber identification information in the mobile communication network;
An access point that relays communication between the first wireless terminal and the mobile communication network ;
A second wireless terminal in a wireless communication system comprising an authentication device for authenticating a wireless terminal having subscriber identification information in the mobile communication network ;
A second terminal communication unit for performing communication with the first wireless terminal;
A first authentication request for requesting the first wireless terminal to acquire authentication information used for connecting the second wireless terminal to the access point by proxy is sent to the first wireless terminal through the second terminal communication unit. A proxy authentication requesting section for transmission, and
The second terminal communication unit
A wireless terminal that receives the authentication information that the first wireless terminal acquires and transmits from the authentication device in response to the first authentication request.

Images