JP4239704B2

JP4239704B2 - Cryptographic communication system and cryptographic communication method

Info

Publication number: JP4239704B2
Application number: JP2003178884A
Authority: JP
Inventors: 洋明日沼
Original assignee: NEC Corp
Current assignee: NEC Corp
Priority date: 2003-06-24
Filing date: 2003-06-24
Publication date: 2009-03-18
Anticipated expiration: 2023-06-24
Also published as: JP2005020114A

Description

【０００１】
【発明の属する技術分野】
本発明は暗号化された音声あるいはファクシミリ信号等の情報を通信する暗号通信システムおよび暗号通信方法に係り、特に共通鍵暗号方式を用いた秘密鍵を使用して暗号処理を行い音声通信やファクシミリ通信等の情報通信を行う暗号通信システムおよび暗号通信方法に関する。
【０００２】
【従来の技術】
一般の交換網を使用して通話を行う場合に、企業戦略上の機密性の高い重要な会話のようにその通話内容を秘密にする必要がある場合がある。このような会話は、途中の交換網で盗聴されることを防止する必要がある。従来ではこのような場合、音声やファクシミリの画像情報を暗号化して通信を行うのが通常である。
【０００３】
通信端末が暗号通信を行う場合、一般には発信あるいは着信の呼接続処理に関しては通常の通信端末と同様に交換網が提供する呼接続シーケンスに基づいて行われる。この場合には、呼の接続が完了した後の段階で、以後に行われる通話内容を暗号化して通信が行われる。したがって、この通信方式を採用する場合には呼接続処理自体は通常の通信端末と全く同一の処理が行われることになる。このため、通常の電話端末との間で通常の呼接続を行って通常の音声通話を行うことも可能である。すなわち、暗号化されていない音声としての平音声による通信も従来通り行うことができる。
【０００４】
ところで、暗号処理の方式については、一般に共通鍵暗号方式と公開鍵暗号方式とが存在している。ここで共通鍵暗号方式は、暗号化と復号化に同じ鍵を使用する。公開鍵暗号方式では暗号化と復号化に異なった鍵を使用し一方の鍵を公開するようになっている。公開鍵暗号方式が一般に知られているが、共通鍵暗号方式の方が暗号処理速度がはるかに速い。そこで、共通鍵暗号方式で暗号処理を行うことも多い。
【０００５】
ところで、暗号によって通信を行う通信端末としての暗号通信端末が汎用の交換網に接続される場合を考える。すでに説明したように呼接続が通常の通信端末と通常の手法で行われる場合、呼接続を行った段階ではその通信相手が暗号による通信機能を備えていない場合があり得る。暗号による通信機能を備えていない通信端末との間では、暗号による通信を開始することができない。したがって、暗号による通信を開始しようとする暗号通信端末は、その前に相手端末が暗号による通信機能を有する端末であるかどうかを識別する必要がある。また、その相手端末が暗号による通信機能を有する端末である場合には、更にその相手端末が自端末と暗号通信が可能な鍵を有しているかどうかを確認し、有している場合にのみ暗号通信を開始することが必要である(たとえば特許文献１）。
【０００６】
特許文献１では、一方の音声暗号通信端末が暗号鍵Ｋａを生成し、更に暗号鍵Ｋａのハッシュ値Ｈａを生成している。このハッシュ値Ｈａを称呼する音声が相手先の音声暗号通信端末へ送出される。同様に相手先の音声暗号通信端末では暗号鍵Ｋｂを生成し、更に暗号鍵Ｋｂのハッシュ値Ｈｂを生成する。このハッシュ値Ｈｂはハッシュ値Ｈａの生成側の装置に送出される。このため、発呼側の音声暗号通信端末の通話者Ａは、通話相手の音質等に基づいてハッシュ値Ｈｂの発信元を特定し、２つのハッシュ値Ｈａ、Ｈｂを比較することで暗号鍵が共有されているかどうかを判別する。
【０００７】
【特許文献１】
特開２００１−２５５８１５号公報（第００３６段落、図１）
【０００８】
【発明が解決しようとする課題】
特許文献１にも示されているこのような手法は、ユーザが通話によって通信端末の識別を行うのを前提としている。このため、暗号通信が可能であるというユーザの判断を得る過程と、その後に手動操作で暗号通信に切り替える過程の２つを必要とする。したがって、操作性と迅速性を得ることができないという問題が生じる。これは、汎用の交換網では呼の接続シーケンスで互いに通信相手がどのような通信端末であるかを確実に識別することができないことによる。このため、従来から相手となる通信端末の認証は、呼の接続前には行われていない。すなわち、呼の接続後にユーザ同士が通常の音声で通話を行って、互いの通信端末と鍵の確認を行うか、同様に呼の接続後に通信端末同士が独自の端末認証シーケンスを実行することで、相手端末を認証している。
【０００９】
一方、呼接続後にユーザの処理を排除して、通信端末が独自の端末識別シーケンスによって相手端末を認証するようにする暗号通信装置も存在する。この装置では呼接続後にこの端末識別シーケンスで通信端末の種別と鍵について双方の認証を行う必要がある。このため、呼の接続完了から通話が可能になるまでの時間が長時間化するという問題がある。
【００１０】
また、暗号処理のために使用する鍵は、一般に暗号強度を維持する必要から、暗号通信を行うすべての装置に定期的に鍵を配布して最新のものに交換する必要がある。鍵の配布には従来から幾つかの手法が採られている。通信網を使用した電子配送を行う手法や、フロッピディスク等の電子的な媒体に鍵を記録し、これを人手を用いて配布する手法が代表的なものである。しかしながら、これらいずれの手法でも鍵が第三者に漏洩する危険性が皆無ではない。公開鍵方式を採用している場合には、配布された鍵は公開が前提である。このため配布された鍵が漏洩しても大きな問題とはならない。しかしながら、共通鍵方式を採用している場合は暗号化と復号化に同じ鍵（共通鍵）を使用する。したがって、漏洩した鍵を入手した第三者はこの鍵を用いて暗号の解読ができる可能性が高くなる。
【００１１】
そこで本発明の目的は、呼接続後にユーザが通話によって通信端末の識別を行う必要なく、直ちに共通鍵方式で通話やファクシミリ通信等の情報通信を開始することのできる暗号通信システムおよび暗号通信方法を提供することにある。
【００１２】
【課題を解決するための手段】
請求項１記載の発明では、（イ）発呼側の装置で独自に用意した素数と乱数および通話当事者の間でのみ共通して認知する整数としての発呼側共通整数を用いて発呼側公開鍵をこの発呼側の装置で生成する発呼側公開鍵生成手段と、（ロ）着呼側の装置で独自に用意した素数と乱数および通話当事者の間でのみ共通して認知する整数としての発呼側共通整数を用いて着呼側公開鍵をこの着呼側の装置で生成する着呼側公開鍵生成手段と、（ハ）前記した発呼側公開鍵生成手段の生成した発呼側公開鍵と前記した発呼側共通整数とを情報の通信を行おうとする着呼側の装置に呼の接続開始時点で送信する発呼側公開鍵送信手段と、（ニ）前記した着呼側公開鍵生成手段の生成した着呼側公開鍵を情報の通信を行おうとする発呼側の装置に呼の接続開始時点で送信する着呼側公開鍵送信手段と、（ホ）前記した着呼側公開鍵送信手段によって前記した着呼側の装置から送られてきた着呼側公開鍵と発呼側の前記した素数および乱数を用いて発呼側共有秘密鍵を生成する発呼側共有秘密鍵生成手段と、（へ）この発呼側共有秘密鍵生成手段によって生成した発呼側共有秘密鍵を用いて発呼側で前記した発呼側共通整数を暗号化する発呼側共通整数暗号化手段と、（ト）この発呼側共通整数暗号化手段によって暗号化後の暗号化発呼側共通整数を前記した着呼側の装置に送信する暗号化発呼側共通整数送信手段と、（チ）前記した発呼側公開鍵送信手段によって前記した発呼側の装置から送られてきた発呼側公開鍵と着呼側の前記した素数および乱数を用いて着呼側共有秘密鍵を生成する着呼側共有秘密鍵生成手段と、（リ）この着呼側共有秘密鍵生成手段によって生成した着呼側共有秘密鍵を用いて着呼側共通整数を着呼側の装置で暗号化する着呼側共通整数暗号化手段と、（ヌ）この着呼側共通整数暗号化手段によって暗号化後の暗号化着呼側共通整数を前記した発呼側の装置に送信する暗号化着呼側共通整数送信手段と、（ル）この暗号化着呼側共通整数送信手段によって送られてきた暗号化着呼側共通整数を発呼側共有秘密鍵を用いて復号化する発呼側暗号化着呼側共通整数復号化手段と、（ヲ）この発呼側暗号化着呼側共通整数復号化手段によって復号化した着呼側共通整数が発呼側の装置で認知していた着呼側共通整数と一致しているか否かを比較する発呼側比較手段と、（ワ）前記した暗号化発呼側共通整数送信手段によって送られてきた暗号化発呼側共通整数を着呼側の装置で着呼側共有秘密鍵を用いて復号化する着呼側暗号化発呼側共通整数復号化手段と、（カ）この着呼側暗号化発呼側共通整数復号化手段によって復号化した発呼側共通整数が着呼側の装置で認知していた発呼側共通整数と一致しているか否かを着呼側の装置で比較する着呼側比較手段と、（ヨ）前記した発呼側比較手段によって一致が判別されたとき、着呼側の装置との間の呼が接続された段階で着呼側の装置と前記した発呼側共有秘密鍵を使用した暗号処理で情報通信を開始させる発呼側情報通信開始手段と、（タ）前記した着呼側比較手段によって一致が判別されたとき、発呼側の装置との間の呼が接続された段階でこの発呼側の装置と前記した着呼側共有秘密鍵を使用した情報通信を開始させる着呼側情報通信開始手段とを暗号通信システムに具備させる。
【００１３】
すなわち本発明では、暗号で音声通信等の情報通信を行う通信端末同士が互いの通信端末を識別するために秘密鍵共有アルゴリズムを使用して共通の秘密鍵（共有秘密鍵）を生成する。そしてその秘密鍵を使用して通信端末固有の識別情報を暗号化して交換し、相手から送られてきた情報を自己の秘密鍵で正しく復号できるかを確認することによって相手端末の認証を行うようになっている。相手端末が送ってきた情報を自己の通信端末で正しく復号できた場合、相手端末でも自己と同じ秘密鍵を生成していることになり、その相手端末は自己と同じ暗号で情報通信を行うことができる通信端末と判断することができる。なお、秘密鍵の生成および相手端末の認証は、暗号を用いようとする通信端末同士が呼接続を行う過程で実施する。したがって、呼接続が完了すれば直ちに暗号を用いた情報通信が可能である。
【００１４】
一般的な秘密鍵共有アルゴリズムでは、予め２つの引数（パラメータ）を暗号でたとえば音声通信を行う通信端末同士が共有する必要がある。これらのうちの１つは整数であり、残りは素数である。１つ目の引数（整数）として、請求項１記載の発明の場合には交換網の加入者番号等の発呼側共通整数と着呼側共通整数を使用する。これらの発呼側共通整数と着呼側共通整数はそれぞれ該当する側の通信端末が自己の共通整数を予め設定しておく。秘密鍵共有アルゴリズムでは鍵の作成途中で生成される情報を相手端末に送信する必要があるが、これは呼接続の処理の行われているときに交換網を通じて相手端末と送受信する交換メッセージ等に付加して送信すればよい。発信側、着信側のそれぞれの通信端末は秘密鍵共有アルゴリズムで秘密鍵を生成した後、その秘密鍵を使用して自己の端末の加入者番号等の共通整数を暗号化し、互いに相手の通信端末に対して送信する。これと共に、相手端末から送信されてきた暗号化された加入者番号を秘密鍵で復号化する。復号化した結果が相手の加入者番号等の予め設定した共通整数であった場合には、相手端末でも同じ共通鍵を生成していることになる。そこで相手端末は自己の端末と同じ暗号機能の備えられた通信端末であると判断することができる。そこで呼接続が終了した時点で暗号による音声通信を行うことができる。このとき、暗号処理で生成した秘密鍵が共通鍵と共に使用される。これにより、共通鍵が第三者に漏洩したような場合にも、第三者が共通鍵から暗号化された通信内容を解読することは困難となる。発呼側共通整数と着呼側共通整数は、音声通信を行うそれぞれのペアが、ペアごとに独自に定めた１つの共通の整数を設定していてもよい。たとえばＡさんとＢさんが音声通信を行うときにはａｂという整数を互いに使用し、ＡさんとＣさんが音声通信を行うときにはａｃという整数を互いに使用することによっても本発明を適用することができる。
【００１５】
また本発明では、（イ）発呼側の装置で独自に用意した素数と乱数および発呼側の加入者番号を用いて発呼側公開鍵をこの発呼側の装置で生成する発呼側公開鍵生成手段と、（ロ）着呼側の装置で独自に用意した素数と乱数および発呼側の加入者番号を用いて着呼側公開鍵をこの着呼側の装置で生成する着呼側公開鍵生成手段と、（ハ）前記した発呼側公開鍵生成手段の生成した発呼側公開鍵と前記した発呼側の加入者番号とを情報の通信を行おうとする着呼側の装置に呼の接続開始時点で送信する発呼側公開鍵送信手段と、（ニ）前記した着呼側公開鍵生成手段の生成した着呼側公開鍵を情報の通信を行おうとする発呼側の装置に呼の接続開始時点で送信する着呼側公開鍵送信手段と、（ホ）前記した着呼側公開鍵送信手段によって前記した着呼側の装置から送られてきた着呼側公開鍵と発呼側の装置の前記した素数および乱数を用いて発呼側共有秘密鍵を生成する発呼側共有秘密鍵生成手段と、（へ）この発呼側共有秘密鍵生成手段によって生成した発呼側共有秘密鍵を用いて発呼側の装置で前記した発呼側の加入者番号を暗号化する発呼側加入者番号暗号化手段と、（ト）この発呼側加入者番号暗号化手段によって暗号化後の暗号化発呼側加入者番号を前記した着呼側の装置に送信する暗号化発呼側加入者番号送信手段と、（チ）前記した発呼側公開鍵送信手段によって前記した発呼側の装置から送られてきた発呼側公開鍵と着呼側の装置の前記した素数および乱数を用いて着呼側共有秘密鍵を生成する着呼側共有秘密鍵生成手段と、（リ）この着呼側共有秘密鍵生成手段によって生成した着呼側共有秘密鍵を用いて着呼側の加入者番号を着呼側の装置で暗号化する着呼側加入者番号暗号化手段と、（ヌ）この着呼側加入者番号暗号化手段によって暗号化後の暗号化着呼側加入者番号を前記した発呼側の装置に送信する暗号化着呼側加入者番号送信手段と、（ル）この暗号化着呼側加入者番号送信手段によって送られてきた暗号化着呼側加入者番号を発呼側の装置で発呼側共有秘密鍵を用いて復号化する発呼側加入者番号復号化手段と、（ヲ）この発呼側加入者番号復号化手段によって復号化した着呼側加入者番号が発呼側の装置で認知していた着呼側加入者番号と一致しているか否かを発呼側で比較する発呼側比較手段と、（ワ）前記した暗号化発呼側加入者番号送信手段によって送られてきた暗号化発呼側加入者番号を着呼側の装置で着呼側共有秘密鍵を用いて復号化する着呼側加入者番号復号化手段と、（カ）この着呼側加入者番号復号化手段によって復号化した発呼側加入者番号が着呼側の装置で認知していた発呼側加入者番号と一致しているか否かを着呼側の装置で比較する着呼側比較手段と、（ヨ）前記した発呼側比較手段によって一致が判別されたとき、着呼側の装置との間の呼が接続された段階で着呼側の装置と前記した発呼側共有秘密鍵を使用した暗号処理で情報通信を開始させる発呼側情報通信開始手段と、（タ）前記した着呼側比較手段によって一致が判別されたとき、発呼側の装置との間の呼が接続された段階で発呼側の装置と前記した着呼側共有秘密鍵を使用した暗号処理で情報通信を開始させる着呼側情報通信開始手段とを暗号通信システムに具備させる。
【００１６】
すなわち本発明では、請求項１記載の発明における発呼側共通整数と着呼側共通整数をそれぞれ自己の端末および相手端末の加入者番号（電話番号）としている。これらの加入者番号は、呼の接続の時点で使用されるので、実用的な整数となる。
【００１７】
更に本発明では、（イ）発呼側の装置で独自に用意した素数と乱数および発呼側の加入者番号を用いて発呼側公開鍵生成手段が発呼側公開鍵をこの発呼側の装置で生成する発呼側公開鍵生成ステップと、（ロ）着呼側の装置で独自に用意した素数と乱数および発呼側の加入者番号を用いて着呼側公開鍵生成手段が着呼側公開鍵をこの着呼側の装置で生成する着呼側公開鍵生成ステップと、（ハ）前記した発呼側公開鍵生成ステップで生成した発呼側公開鍵と前記した発呼側の加入者番号とを情報の通信を行おうとする着呼側の装置に発呼側の装置から発呼側公開鍵送信手段が呼の接続開始時点で送信する発呼側公開鍵送信ステップと、（ニ）前記した着呼側公開鍵生成ステップで生成した着呼側公開鍵を情報の通信を行おうとする発呼側の装置に着呼側の装置から着呼側公開鍵送信手段が呼の接続開始時点で送信する着呼側公開鍵送信ステップと、（ホ）前記した着呼側公開鍵送信ステップによって前記した着呼側の装置から送られてきた着呼側公開鍵と発呼側の前記した素数および乱数を用いて発呼側の装置で発呼側共有秘密鍵生成手段が発呼側共有秘密鍵を生成する発呼側共有秘密鍵生成ステップと、（へ）この発呼側共有秘密鍵生成ステップによって生成した発呼側共有秘密鍵を用いて発呼側の装置で発呼側加入者番号暗号化手段が前記した発呼側の加入者番号を暗号化する発呼側加入者番号暗号化ステップと、（ト）この発呼側加入者番号暗号化ステップによって暗号化後の暗号化発呼側加入者番号を前記した着呼側の装置に発呼側の装置から暗号化発呼側加入者番号送信手段が送信する暗号化発呼側加入者番号送信ステップと、（チ）前記した発呼側公開鍵送信ステップによって前記した発呼側の装置から送られてきた発呼側公開鍵と着呼側の前記した素数および乱数を用いて着呼側の装置で着呼側共有秘密鍵生成手段が着呼側共有秘密鍵を生成する着呼側共有秘密鍵生成ステップと、（リ）この着呼側共有秘密鍵生成ステップによって生成した着呼側共有秘密鍵を用いて着呼側の装置の加入者番号を着呼側の装置で着呼側加入者番号暗号化手段が暗号化する着呼側加入者番号暗号化ステップと、（ヌ）この着呼側加入者番号暗号化ステップによって暗号化後の暗号化着呼側加入者番号を前記した発呼側の装置に着呼側の装置から暗号化着呼側加入者番号送信手段が送信する暗号化着呼側加入者番号送信ステップと、（ル）この暗号化着呼側加入者番号送信ステップによって送られてきた暗号化着呼側加入者番号を発呼側の装置で発呼側加入者番号復号化手段が発呼側共有秘密鍵を用いて復号化する発呼側加入者番号復号化ステップと、（ヲ）この発呼側加入者番号復号化ステップによって復号化した着呼側加入者番号が発呼側の装置で認知していた着呼側加入者番号と一致しているか否かを発呼側の装置で発呼側比較手段が比較する発呼側比較ステップと、（ワ）前記した暗号化発呼側加入者番号送信ステップによって送られてきた暗号化発呼側加入者番号を着呼側の装置で着呼側加入者番号復号化手段が着呼側共有秘密鍵を用いて復号化する着呼側加入者番号復号化ステップと、（カ）この着呼側加入者番号復号化ステップによって復号化した発呼側加入者番号が着呼側の装置で認知していた発呼側加入者番号と一致しているか否かを着呼側の装置で着呼側比較手段が比較する着呼側比較ステップと、（ヨ）前記した発呼側比較ステップによって一致が判別されたとき、着呼側の装置との間の呼が接続された段階で着呼側の装置と前記した発呼側共有秘密鍵を使用した暗号処理で発呼側の装置が発呼側情報通信開始手段によって情報通信を開始させる発呼側情報通信開始ステップと、（タ）前記した着呼側比較ステップによって一致が判別されたとき、発呼側の装置との間の呼が接続された段階で発呼側の装置と前記した着呼側共有秘密鍵を使用した暗号処理で着呼側の装置が着呼側情報通信開始手段によって情報通信を開始させる着呼側情報通信開始ステップとを暗号通信方法に具備させる。
【００１８】
すなわち本発明では、請求項２記載の発明と同一の原理を方法として表わしたものである。
【００１９】
更にまた本発明では、請求項１または請求項２記載の暗号通信システムで、着呼側比較手段によって一致が判別されなかったとき発呼側の装置と着呼側の装置で通常の情報通信を開始させる不一致時情報通信開始手段を更に具備することを特徴としている。
【００２０】
すなわち本発明では、発呼側が暗号による情報通信を行えなかった場合で、この場合には呼の接続が完了した時点で暗号によらない通常の情報通信が行われる。反対に、請求項１あるいは請求項２記載の発明が適用できる場合には、呼の接続が完了した時点でそれらのペアが同じ秘密鍵を生成していれば発呼者や被呼者がこれを意識することなく暗号通信を直ちに行えることになる。
【００２１】
また、本発明では、請求項１または請求項２記載の暗号通信システムで、発呼側と着呼側の装置はＩＳＤＮ回線によって接続されることを特徴としている。
【００２２】
すなわち本発明では、ＩＳＤＮ回線に限定適用されるものではないが、たとえばＩＳＤＮ回線を使用することで、呼の接続の段階で暗号通信のために必要な情報を互いに相手端末に送信することができる。ＩＳＤＮ回線以外としてはたとえばＶｏＩＰ（Voice over IP）網等の他の方式の交換網を挙げることができる。
【００２３】
【発明の実施の形態】
【００２４】
【実施例】
以下実施例につき本発明を詳細に説明する。
【００２５】
図１は本発明の一実施例における暗号通信システムを構成する一方の暗号通信装置の構成を示したものである。この暗号通信装置１１は、共通鍵方式で音声通信を行う装置であり、共通鍵を生成するアルゴリズムを有する鍵共有アルゴリズム部１２を備えている。鍵共有アルゴリズム部１２は共有鍵の生成に使用する乱数を発生する乱数発生回路１３から乱数１４の入力を行うようになっている。そして、素数・共通鍵格納部１５から入力される素数１６および自端末加入者番号格納部１７から鍵共有アルゴリズム部１２に入力される加入者番号１８あるいは呼接続制御回路１９からこの鍵共有アルゴリズム部１２に入力される加入者番号２１と乱数１４とを用いて公開鍵２２を生成するようになっている。ここで呼接続制御回路１９は、呼の接続制御、すなわち図示しない交換機との交換メッセージの送受を行う。
【００２６】
鍵共有アルゴリズム部１２で生成した公開鍵２２は呼接続制御回路１９に送られる。そして呼接続制御回路１９から交換メッセージ２３としてＩＳＤＮ（Integrated Services Digital Network；ディジタル総合サービス網）インタフェース回路２４を経て、図示しない相手先の通信端末に送信されるようになっている。呼接続制御回路１９にはダイヤル番号入力回路２５が接続されており、相手先の加入者番号２６が入力されるようになっている。
【００２７】
図１の暗号通信装置１１と暗号で通信を行う相手先の通信端末も図１と全く同様の暗号通信装置を構成しており、その内部で生成した公開鍵を同様に図１に示した暗号通信装置１１に対して送信してくるようになっている。
【００２８】
ところで素数・共通鍵格納部１５の格納する素数１６と共通鍵３１は電子配送あるいは電子媒体を通じて図１に示す暗号通信装置１１に対のデータとして設定される情報である。共通鍵３１は暗号処理回路３２に送られる。鍵共有アルゴリズム部１２は相手先の通信端末から送られてきた公開鍵３３と乱数１４および素数１６を用いて共有秘密鍵３５を生成し、これを暗号処理回路３２と認証回路３６に供給する。暗号処理回路３２は送受話器３７から入力される暗号化前の平の、すなわち通常の信号形態としての音声信号３８を暗号化してこの暗号化音声信号３９をＩＳＤＮインタフェース回路２４を経て、前記した相手先の通信端末に送信するようになっている。この相手先の通信端末から送られてきた暗号化音声信号４１は暗号処理回路３２で平の音声信号４２に復元され、送受話器３７に送られ音声として出力される。
【００２９】
本実施例では鍵共有アルゴリズム部１２の使用する鍵共有アルゴリズムとして“Ｄｉｆｆｉｅ−Ｈｅｌｌｍａｎ”鍵共有アルゴリズムを使用している。
【００３０】
図２は従来提案された“Ｄｉｆｆｉｅ−Ｈｅｌｌｍａｎ”鍵共有アルゴリズムを簡単に図解したものである。Ａ暗号通信装置とＢ暗号通信装置はそれぞれ秘密鍵５１Ａ、５１Ｂと公開鍵５２Ａ、５２Ｂを所有している。公開鍵５２Ａ、５２Ｂは互いに相手に公開される。Ａ暗号通信装置側の暗号鍵生成部５３Ａでは自己の秘密鍵５１ＡとＢ暗号通信装置の公開鍵５２Ｂを使用して自己の暗号鍵５４Ａを生成する。同様にＢ暗号通信装置側の暗号鍵生成部５３Ｂでは自己の秘密鍵５１ＢとＡ暗号通信装置の公開鍵５２Ａを使用して自己の暗号鍵５４Ｂを生成する。
【００３１】
図３は、図１の構成の本実施例の暗号通信システムで暗号通信装置が相手先の通信端末と音声通信を行う際の処理の概要を示したものである。まず暗号通信装置１１の鍵共有アルゴリズム部１２は、素数・共通鍵格納部１５から入力される素数１６と、自端末加入者番号格納部１７から鍵共有アルゴリズム部１２に入力される加入者番号１８あるいは呼接続制御回路１９からこの鍵共有アルゴリズム部１２に入力される加入者番号２１と乱数１４とを用いて公開鍵２２と加入者番号を生成する（ステップＳ１０１）。次にこの生成した公開鍵２２を図示しない相手先の通信端末に送信する（ステップＳ１０２）。相手先の通信端末も同様の処理を行うので、相手先の通信端末からはその生成した公開鍵３３と加入者番号が送られてくる。そこで鍵共有アルゴリズム部１２は、この相手先の公開鍵３３と素数１６および乱数１４とを用いて共有秘密鍵３５を生成する（ステップＳ１０３）。
【００３２】
認証回路３６はこの共有秘密鍵３５を用いて加入者番号１８を暗号化した暗号化加入者番号６１を生成し、呼接続制御回路１９を経由してこれを相手先の通信端末に送信する（ステップＳ１０４）。認証回路３６はこれと共に相手先の通信端末から同様に送信されてきた暗号化加入者番号６２を入力して共有秘密鍵３５を用いて復号化する。そしてこれがダイヤル番号入力回路２５から入力された相手先の加入者番号２６と同じであるかどうかを比較する（ステップＳ１０５）。この結果として両者が一致した場合には（ステップＳ１０６：Ｙ）、相手先の通信端末が自己の暗号通信装置１１と同様に鍵共有アルゴリズムを有していることと、自己の通信端末と同一の共有鍵を備えている通信端末であることを判断する。そして、この場合には暗号処理回路３２に対して音声情報の暗号化処理を実行させる（ステップＳ１０７）。
【００３３】
暗号処理回路３２による暗号化処理の開始は呼の接続完了の時点である。呼の接続完了の時点から発信側であると着信側であるとを問わず、暗号処理回路３２は素数・共通鍵格納部１５の格納する共通鍵３１と鍵共有アルゴリズム部１２で生成された共有秘密鍵３５を用いて送受話器３７から入力される暗号化前の平の音声信号３８を暗号化し、この暗号化音声信号３９を相手先の通信端末に送出する。また、相手先の通信端末から送られてきた暗号化音声信号４１を平の音声信号４２に復号化し、送受話器３７から音声として出力させる。
【００３４】
ステップＳ１０６で一致しない場合には（Ｎ）、相手先の通信端末は自己の暗号通信装置１１と同様の鍵共有アルゴリズムを有している装置ではない。そこでこの場合には暗号処理回路３２を暗号化および復号化のために動作させず、平の音声信号３８がそのまま相手先の通信端末に送出される。相手先の通信端末から送られてきた音声信号もそのまま送受話器３７から音声として出力されることになる。これらステップＳ１０６による一致、不一致の結果は、暗号処理の実施あるいは停止を示す暗号処理制御信号４３として認証回路３６から暗号処理回路３２に出力されるようになっている。
【００３５】
以上の処理の流れを図１に示した暗号通信装置１１が発信元である場合と着信先である場合とを更に具体的に説明する。暗号通信装置１１が発信元である場合、呼接続制御回路１９はユーザがダイヤル番号入力回路２５を操作して相手先の加入者番号２６をダイヤルして発信操作を行うと、鍵共有アルゴリズム部１２が素数・共通鍵格納部１５から入力される素数１６と、自端末加入者番号格納部１７から入力される加入者番号１８と乱数１４とを用いて公開鍵２２を生成する（ステップＳ１０１）。そしてこれを呼接続制御回路１９に送る。呼接続制御回路１９はダイヤル番号入力回路２５で入力された加入者番号２６の相手先の端末に対して呼の接続シーケンスを開始する。その際、交換メッセージ２３に自端末としての暗号通信装置１１の加入者番号１８と公開鍵２２を付加して送信する（ステップＳ１０２）。
【００３６】
その後、図示しない相手先端末から公開鍵３３が交換メッセージに付加されて送られてくると、呼接続制御回路１９はこの公開鍵３３を交換メッセージ２３から分離して鍵共有アルゴリズム部１２に送出する。鍵共有アルゴリズム部１２は送られてきた公開鍵３３と素数１６と乱数１４とを用いて共有秘密鍵３５を生成する（ステップＳ１０３）。生成された共有秘密鍵３５は暗号処理回路３２と認証回路３６に送られる。認証回路３６では送られてきた共有秘密鍵３５を用いて自己の暗号通信装置１１の加入者番号１８を暗号化する。この暗号化された暗号化加入者番号６１は呼接続制御回路１９を経由して相手先の通信端末に送信される（ステップＳ１０４）。
【００３７】
一方、認証回路３６はこれと共に相手先端末から同様に送信されてきた暗号化加入者番号６２を入力して共有秘密鍵３５を用いて復号化する。そしてこれがダイヤル番号入力回路２５から入力された相手先の加入者番号２６と同じであるかどうかを比較する（ステップＳ１０５）。この結果として両者が一致した場合には（ステップＳ１０６：Ｙ）、暗号処理の実施を指示する暗号処理制御信号４３が認証回路３６から暗号処理回路３２に出力される。この場合には、相手先の通信端末が自己の暗号通信装置１１と同様に鍵共有アルゴリズムを有していることと、自己の通信端末と同一の共有鍵を備えている通信端末であることが判断されたので、暗号処理回路３２を用いて暗号化された音声通信が行われることになる（ステップＳ１０７）。
【００３８】
次に図１に示した暗号通信装置１１が着信先である場合について説明する。着信先の暗号通信装置１１では呼接続制御回路１９にＩＳＤＮインタフェース回路２４を経て呼の接続開始を示す交換メッセージ２３が入力されると、呼接続制御回路１９は交換シーケンスを開始する。そして交換メッセージ２３に付加して送られてきた相手先の通信端末としての発信元端末の加入者番号２１を鍵共有アルゴリズム部１２に入力する。鍵共有アルゴリズム部１２は素数・共通鍵格納部１５から入力される素数１６と、入力された加入者番号２１および乱数発生回路１３で生成された乱数１４とを用いて公開鍵２２を生成する（ステップＳ１０１）。鍵共有アルゴリズム部１２はこの生成した公開鍵２２を呼接続制御回路１９に送る。呼接続制御回路１９はこの公開鍵２２を交換メッセージ２３に付加して発信元端末に送信する（ステップＳ１０２）。
【００３９】
発信元端末から公開鍵３３が交換メッセージ２３に付加して送られてきたら、呼接続制御回路１９はその公開鍵３３を交換メッセージ２３から分離する。そして公開鍵３３を鍵共有アルゴリズム部１２に送出する。鍵共有アルゴリズム部１２は送られてきた公開鍵３３と素数１６と乱数１４とを用いて共有秘密鍵３５を生成する（ステップＳ１０３）。生成された共有秘密鍵３５は暗号処理回路３２と認証回路３６に送られる。認証回路３６では送られてきた共有秘密鍵３５を用いて自己の暗号通信装置１１の加入者番号１８を暗号化する。この暗号化された暗号化加入者番号６１は呼接続制御回路１９で交換メッセージ２３に付加されて発信元端末に送信される（ステップＳ１０４）。
【００４０】
一方、認証回路３６はこれと共に発信端末から送られてくる暗号化加入者番号６２を共有秘密鍵３５を用いて復号化する。そしてこれが発信元端末の加入者番号２１と同じであるかどうかを比較する（ステップＳ１０５）。この結果として両者が一致した場合には（ステップＳ１０６：Ｙ）、暗号処理の実施を指示する暗号処理制御信号４３によって発信元端末が自己の暗号通信装置１１と同様に鍵共有アルゴリズムを有していることと、自己の通信端末と同一の共有鍵を備えている通信端末であることが判断され、暗号処理回路３２を用いて暗号化された音声通信が行われることになる（ステップＳ１０７）。
【００４１】
なお、以上説明した実施例では暗号を用いた音声通信を行う場合を説明したが、暗号を用いたファクシミリ通信を行うこともできる。特にファクシミリ通信の場合にはユーザまたはオペレータが介在しないで暗号による通信を行える本発明の存在意義は大きい。
【００４２】
【発明の効果】
以上説明したように本発明によれば、共通秘密鍵の生成処理時に共通鍵と共に配布される情報を用いて通信相手が暗号通信可能な鍵を備えた通信端末であるかどうかを判別することができるので、通信端末は相手端末が暗号機能を備えているか否かの認証を呼の接続段階で行うことができ、迅速かつ確実に暗号化された音声通信やファクシミリ通信等の情報通信を開始することができる。また、共通秘密鍵の生成には乱数を使用するので、生成される共有秘密鍵は通話ごとに異なる。したがって、乱数を共通鍵と共に使用することで暗号の強度を向上させることができる。また、共通鍵が第三者に漏洩したような場合にも、暗号の解読を困難にすることができる。
【図面の簡単な説明】
【図１】本発明の一実施例における暗号通信システムの一方の暗号通信装置の構成を示したブロック図である。
【図２】従来提案された“Ｄｉｆｆｉｅ−Ｈｅｌｌｍａｎ”鍵共有アルゴリズムの説明図である。
【図３】図１の構成の暗号通信装置が相手先の通信端末と音声通信を行う際の処理の概要を示す流れ図である。
【符号の説明】
１１暗号通信装置
１２鍵共有アルゴリズム部
１３乱数発生回路
１４乱数
１５素数・共通鍵格納部
１６素数
１７自端末加入者番号格納部
１９呼接続制御回路
２５ダイヤル番号入力回路
２６加入者番号
３１共通鍵
３２暗号処理回路
３６認証回路
３７送受話器[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an encryption communication system and an encryption communication method for communicating information such as encrypted voice or a facsimile signal, and in particular, performs voice processing and facsimile communication by performing encryption processing using a secret key using a common key encryption method. The present invention relates to an encryption communication system and an encryption communication method for performing information communication such as the above.
[0002]
[Prior art]
When a call is made using a general exchange network, it may be necessary to keep the contents of the call secret like an important conversation with high confidentiality in corporate strategy. It is necessary to prevent such conversations from being eavesdropped on the exchange network. Conventionally, in such a case, communication is usually performed by encrypting voice or facsimile image information.
[0003]
When a communication terminal performs cryptographic communication, generally, call connection processing for outgoing or incoming calls is performed based on a call connection sequence provided by an exchange network in the same manner as a normal communication terminal. In this case, at the stage after the connection of the call is completed, communication is performed by encrypting the contents of the subsequent call. Therefore, when this communication method is adopted, the call connection process itself is exactly the same as that of a normal communication terminal. Therefore, it is possible to perform a normal voice call by performing a normal call connection with a normal telephone terminal. That is, communication using plain speech as unencrypted speech can be performed as before.
[0004]
By the way, there are generally a common key encryption method and a public key encryption method for the encryption processing method. Here, the common key cryptosystem uses the same key for encryption and decryption. In the public key cryptosystem, different keys are used for encryption and decryption, and one of the keys is made public. Public key cryptography is generally known, but common key cryptography is much faster in cryptographic processing. Therefore, encryption processing is often performed using a common key encryption method.
[0005]
By the way, the case where the encryption communication terminal as a communication terminal which communicates by encryption is connected to a general purpose switching network is considered. As described above, when call connection is performed with a normal communication terminal by a normal method, the communication partner may not have an encryption communication function at the stage of call connection. Encryption communication cannot be started with a communication terminal that does not have an encryption communication function. Therefore, the encryption communication terminal that intends to start encryption communication needs to identify whether or not the counterpart terminal is a terminal having the encryption communication function before that. In addition, when the partner terminal is a terminal having a communication function by encryption, it is further confirmed whether or not the partner terminal has a key capable of encrypted communication with the own terminal. It is necessary to start encrypted communication (for example, Patent Document 1).
[0006]
In Patent Document 1, one voice encryption communication terminal generates an encryption key Ka, and further generates a hash value Ha of the encryption key Ka. The voice calling this hash value Ha is sent to the other party's voice encryption communication terminal. Similarly, the other party's voice encryption communication terminal generates an encryption key Kb, and further generates a hash value Hb of the encryption key Kb. This hash value Hb is sent to the device on the generation side of the hash value Ha. Therefore, the caller A of the calling voice encryption communication terminal specifies the source of the hash value Hb based on the sound quality of the other party, and compares the two hash values Ha and Hb to obtain the encryption key. Determine if it is shared.
[0007]
[Patent Document 1]
JP 2001-255815 A (paragraph 0036, FIG. 1)
[0008]
[Problems to be solved by the invention]
Such a method shown also in patent document 1 presupposes that a user identifies a communication terminal by telephone call. For this reason, the process of obtaining the user's judgment that encryption communication is possible and the process of switching to encryption communication by manual operation after that are required. Therefore, there arises a problem that operability and quickness cannot be obtained. This is because in a general-purpose switching network, it is impossible to reliably identify communication terminals that are communication partners with each other in a call connection sequence. For this reason, authentication of a communication terminal as a counterpart has not been performed before connection of a call. In other words, after the call is connected, the users can talk with each other with a normal voice and confirm each other's communication terminal and the key, or similarly, the communication terminals can execute their own terminal authentication sequence after the call is connected. Authenticate the other terminal.
[0009]
On the other hand, there is also an encryption communication device that eliminates user processing after call connection and allows a communication terminal to authenticate a partner terminal using a unique terminal identification sequence. In this apparatus, it is necessary to authenticate both the type and key of the communication terminal in this terminal identification sequence after call connection. For this reason, there is a problem that it takes a long time from the completion of the call connection until the telephone call can be made.
[0010]
In addition, since the key used for cryptographic processing generally needs to maintain the cryptographic strength, it is necessary to periodically distribute the key to all devices performing cryptographic communication and exchange it for the latest one. Several methods have been used for key distribution. Typical techniques include electronic delivery using a communication network and techniques in which a key is recorded on an electronic medium such as a floppy disk and distributed manually. However, any of these methods does not completely eliminate the risk of the key being leaked to a third party. When the public key method is adopted, the distributed key is assumed to be public. For this reason, it is not a big problem if the distributed key is leaked. However, when the common key method is adopted, the same key (common key) is used for encryption and decryption. Therefore, a third party who has obtained the leaked key is more likely to decrypt the code using this key.
[0011]
SUMMARY OF THE INVENTION An object of the present invention is to provide an encryption communication system and an encryption communication method capable of immediately starting information communication such as a call or facsimile communication by a common key method without requiring the user to identify the communication terminal by calling after the call connection. It is to provide.
[0012]
[Means for Solving the Problems]
In the first aspect of the invention, (a) On the calling device The caller's public key is generated using a prime number, a random number, and a caller's common integer as an integer that is recognized only in common by the calling party. this Calling party Equipment Calling side public key generation means generated in (b) At the called device The caller's public key is generated by using a prime number, a random number, and a caller's common integer as an integer that is commonly recognized only by the calling party. this Callee Equipment Called-side public key generation means generated in (c) As described above The calling party public key generated by the calling party public key generating means As described above (D) a calling side public key transmitting means for transmitting a calling side common integer to a called side device which is going to communicate information at the time of call connection start; As described above A called-side public key transmitting means for transmitting the called-side public key generated by the called-side public key generating means to a calling-side apparatus that is to communicate information at the time of call connection start; As described above By the called party's public key transmission means As described above The called party's public key sent from the called party's device and the calling party's As described above A calling side shared secret key generating means for generating a calling side shared secret key using a prime number and a random number; and (f) a calling side shared secret key generated by the calling side shared secret key generating means. On the call side As described above A calling side common integer encryption means for encrypting the calling side common integer; and (g) an encrypted calling side common integer encrypted by the calling side common integer encryption means. As described above An encrypted calling-side common integer transmission means for transmitting to the called-side device; As described above By calling party public key transmission means As described above Calling side public key sent from the calling side device and called side As described above Called-side shared secret key generating means for generating the called-side shared secret key using prime numbers and random numbers, and (i) the called-side shared secret key generated by the called-side shared secret key generating means. Calling party common integer to called party Equipment The incoming call side common integer encryption means for encrypting with (1) the incoming call side common integer encryption means, As described above An encrypted called-side common integer transmitting means for transmitting to the calling-side device; and (l) the encrypted called-side common integer sent by the encrypted called-side common integer transmitting means. A calling-side encrypted called-side common integer decrypting means for decrypting using the key; and (e) a called-side common integer decrypted by the calling-side encrypted called-side common integer decoding means. Caller Equipment A calling side comparison means for comparing whether or not it matches the common integer of the called side recognized in (i) As described above Encrypted calling side common integer sent by encrypted calling side common integer transmission means Equipment And the callee side encrypted integer decoding means for decryption using the callee side shared secret key, and (f) the caller decrypted by the callee side encrypted caller side common integer decryption means. Calling party common integer is called party Equipment Whether the callee agrees with the caller's common integer Equipment Called party comparison means to compare with (yo) As described above When a match is determined by the calling side comparison means, the calling side device and the called side device are As described above Calling side information communication starting means for starting information communication by encryption processing using the calling side shared secret key; As described above When a match is determined by the called side comparing means, the calling side device and the calling side device are As described above The encryption communication system is provided with a callee information communication start means for starting information communication using the callee shared secret key.
[0013]
Ie The present invention Then, communication terminals that perform information communication such as voice communication by encryption generate a common secret key (shared secret key) using a secret key sharing algorithm in order to identify each other's communication terminals. Then, the identification information unique to the communication terminal is encrypted and exchanged using the secret key, and the other terminal is authenticated by confirming whether the information sent from the other party can be correctly decrypted with its own secret key. It has become. If the information sent by the partner terminal can be correctly decrypted by its own communication terminal, it means that the partner terminal generates the same secret key as itself, and that partner terminal performs information communication with the same encryption as itself. Can be determined as a communication terminal capable of Note that the generation of the secret key and the authentication of the partner terminal are performed in the process of call connection between communication terminals that intend to use encryption. Therefore, information communication using encryption can be performed immediately after call connection is completed.
[0014]
In a general secret key sharing algorithm, two arguments (parameters) need to be shared in advance by communication terminals that perform, for example, voice communication using encryption. One of these is an integer and the rest are prime numbers. As the first argument (integer), the calling side common integer and the called side common integer such as the subscriber number of the switching network are used in the case of the invention described in claim 1. The calling side common integer and the called side common integer are set in advance by the corresponding communication terminal in advance. In the secret key sharing algorithm, it is necessary to send information generated during key creation to the partner terminal. This is an exchange message that is sent and received with the partner terminal through the switching network when call connection processing is performed. What is necessary is just to add and transmit. Each communication terminal on the sending side and the receiving side generates a secret key using a secret key sharing algorithm, and then encrypts a common integer such as the subscriber number of its own terminal using the secret key, so that each other's communication terminal Send to. At the same time, the encrypted subscriber number transmitted from the partner terminal is decrypted with the secret key. If the decrypted result is a common integer set in advance, such as the other party's subscriber number, the same terminal generates the same common key. Therefore, it is possible to determine that the partner terminal is a communication terminal having the same encryption function as that of its own terminal. Therefore, encryption voice communication can be performed when the call connection is completed. At this time, the secret key generated by the cryptographic process is used together with the common key. As a result, even when the common key is leaked to a third party, it becomes difficult for the third party to decrypt the communication content encrypted from the common key. As the calling-side common integer and the called-side common integer, each pair that performs voice communication may set one common integer uniquely determined for each pair. For example, when Mr. A and Mr. B perform voice communication, the integer ab is used, and when Mr. A and Mr. C perform voice communication, the present invention can also be applied by using the integer ac.
[0015]
Also book In the invention, (i) On the calling device The caller's public key is generated using a prime number, a random number, and the caller's subscriber number. this Calling party Equipment Calling side public key generation means generated in (b) At the called device The callee public key is generated using a prime number, a random number, and the caller's subscriber number. this Callee Equipment Called-side public key generation means generated in (c) As described above The calling party public key generated by the calling party public key generating means As described above (D) a calling side public key transmitting means for transmitting a calling party's subscriber number to a called side device which is to communicate information at the time of call connection start; As described above A called-side public key transmitting means for transmitting the called-side public key generated by the called-side public key generating means to a calling-side apparatus that is to communicate information at the time of call connection start; As described above By the called party's public key transmission means As described above Calling side public key and calling side sent from the called side device Equipment of As described above A calling side shared secret key generating means for generating a calling side shared secret key using a prime number and a random number; and (f) a calling side shared secret key generated by the calling side shared secret key generating means. Caller Equipment so As described above Calling party subscriber number encryption means for encrypting the calling party subscriber number, and (g) an encrypted calling party subscriber number encrypted by the calling party subscriber number encryption means. As described above An encrypted calling subscriber number transmitting means for transmitting to the called device; As described above By calling party public key transmission means As described above Calling side public key sent from the calling side device and the called side Equipment of As described above Called-side shared secret key generating means for generating the called-side shared secret key using a prime number and a random number; Calling party's subscriber number Equipment And (nu) an encrypted called party number encrypted after being encrypted by the called party number encrypting means. As described above An encrypted called subscriber number transmitting means for transmitting to the calling side device, and (l) calling the encrypted called subscriber number sent by the encrypted called subscriber number transmitting means. ~ side Equipment The calling party subscriber number decrypting means for decrypting using the calling party shared secret key in (1) and (v) the called party subscriber number decrypted by the calling party subscriber number decrypting means is called. ~ side Equipment Calling party comparing means for comparing on the calling side whether or not it matches the called party subscriber number recognized in step (b). As described above Encrypting calling party subscriber number sent by encrypted calling party subscriber number transmission means is called side. Equipment The called party subscriber number decrypting means for decrypting by using the called party shared secret key, and (f) the calling party subscriber number decrypted by the called party subscriber number decrypting means. ~ side Equipment Called party whether it matches the calling party's subscriber number Equipment Called party comparison means to compare with (yo) As described above When a match is determined by the calling side comparison means, the calling side device and the called side device are As described above Calling side information communication starting means for starting information communication by encryption processing using the calling side shared secret key; As described above When a match is determined by the called side comparing means, the calling side device and the calling side device are As described above The encryption communication system is provided with a callee side information communication start means for starting information communication by encryption processing using the callee side shared secret key.
[0016]
Ie Book In the present invention, the calling-side common integer and the called-side common integer in the first aspect of the invention are the subscriber number (telephone number) of the own terminal and the partner terminal, respectively. Since these subscriber numbers are used at the time of call connection, they become practical integers.
[0017]
Furthermore, the present invention Then (I) On the calling device Using original prime numbers and random numbers and calling party's subscriber number Calling side public key generation means Calling party public key this Calling party Equipment Calling side public key generation step generated in (b) At the called device Using original prime numbers and random numbers and calling party's subscriber number The called party public key generation means Callee public key this Callee Equipment The incoming call side public key generation step generated in step (c) As described above The calling party public key generated in the calling party public key generation step and As described above To the called device that wants to communicate information with the calling subscriber number Calling side public key transmission means from the calling side device A calling party public key transmission step for transmitting at the start of call connection; (d) As described above The callee public key generated in the callee public key generation step is sent to the caller device that wants to communicate information. The called side public key transmission means is sent from the called side device. A callee public key transmission step for transmission at the start of call connection; (e) As described above By the called party's public key transmission step As described above The called party's public key sent from the called party's device and the calling party's As described above Using prime numbers and random numbers The calling-side shared secret key generation means in the calling-side device A calling party shared secret key generation step for generating a calling party shared secret key, and (f) a calling party using the calling party shared secret key generated by the calling party shared secret key generation step. Equipment so The calling party subscriber number encryption means described above A calling party subscriber number encryption step for encrypting a calling party subscriber number; and (g) an encrypted calling party subscriber number encrypted by the calling party subscriber number encryption step. As described above To the called device The encrypted calling party subscriber number transmission means from the calling side device An encrypted calling subscriber number transmission step for transmission; As described above Calling party public key transmission Step By As described above Calling side public key sent from the calling side device and called side As described above Using prime numbers and random numbers The called-side shared secret key generation means in the called-side device A callee shared secret key generation step for generating a callee shared secret key, and (i) a callee using the callee shared secret key generated by the callee shared secret key generation step. Equipment Calling party's subscriber number Equipment so Calling party subscriber number encryption means A callee subscriber number encryption step for encryption, and (n) an encrypted callee subscriber number encrypted by the callee subscriber number encryption step. As described above To the calling device Encrypted called subscriber number transmission means from the called device An encrypted callee subscriber number transmission step to transmit, and (l) the encrypted callee subscriber number sent by this encrypted callee subscriber number transmission step. Equipment so The calling subscriber number decoding means is A calling party subscriber number decrypting step for decrypting using the calling party shared secret key; and (v) the called party subscriber number decrypted by the calling party subscriber number decrypting step is the calling party. Equipment Whether it matches the called subscriber number Calling side comparison means in the calling side device Calling party comparison step to be compared; As described above Encrypted calling party subscriber number sent by encrypted calling party subscriber number transmission step is called party Equipment so The called subscriber number decoding means A callee subscriber number decrypting step for decryption using the callee shared secret key; and (f) the caller subscriber number decrypted by the callee subscriber number decryption step is called by the callee. Equipment Called party whether it matches the calling party's subscriber number Equipment so The called party comparison means Called party comparison step to compare, (yo) As described above When a match is determined by the caller comparison step, the callee device and the callee device are As described above In cryptographic processing using the calling party's shared secret key The calling side device uses the calling side information communication start means. A calling side information communication start step for starting information communication; As described above When a match is determined by the called-side comparison step, the calling-side device and the calling-side device are As described above In cryptographic processing using the called party's shared secret key The called-side device communicates with the called-side information communication start means. A called communication information start step for starting information communication is provided in the encryption communication method.
[0018]
Ie Book In the invention, the same principle as that of the invention described in claim 2 is expressed as a method.
[0019]
Furthermore, book According to the invention, in the cryptographic communication system according to claim 1 or 2, when the coincidence is not determined by the called side comparing means, the calling side Equipment And called party Equipment And a non-matching information communication starting means for starting normal information communication.
[0020]
Ie Book According to the present invention, when the calling party cannot perform information communication by encryption, in this case, normal information communication without encryption is performed at the time when the connection of the call is completed. On the contrary, if the invention of claim 1 or claim 2 is applicable, if the pair generates the same secret key when the call connection is completed, the calling party or called party This makes it possible to perform encrypted communication immediately without being aware of this.
[0021]
Also book The invention is characterized in that, in the cryptographic communication system according to claim 1 or 2, the calling side device and the called side device are connected by an ISDN line.
[0022]
Ie In the present invention, Although not limited to an ISDN line, for example, by using an ISDN line, information necessary for cryptographic communication can be transmitted to a partner terminal at the call connection stage. Other than the ISDN line, other types of switching networks such as a VoIP (Voice over IP) network can be cited.
[0023]
DETAILED DESCRIPTION OF THE INVENTION
[0024]
【Example】
Hereinafter, the present invention will be described in detail with reference to examples.
[0025]
FIG. 1 shows the configuration of one encryption communication apparatus constituting an encryption communication system in an embodiment of the present invention. The cryptographic communication device 11 is a device that performs voice communication using a common key method, and includes a key sharing algorithm unit 12 having an algorithm for generating a common key. The key sharing algorithm unit 12 inputs a random number 14 from a random number generating circuit 13 that generates a random number used to generate a shared key. The prime number 16 input from the prime / common key storage unit 15 and the subscriber number 18 input from the own terminal subscriber number storage unit 17 to the key sharing algorithm unit 12 or the key connection algorithm unit 19 from the call connection control circuit 19 The public key 22 is generated by using the subscriber number 21 and the random number 14 input to 12. Here, the call connection control circuit 19 performs call connection control, that is, exchange of an exchange message with an exchange (not shown).
[0026]
The public key 22 generated by the key sharing algorithm unit 12 is sent to the call connection control circuit 19. The call connection control circuit 19 transmits an exchange message 23 to a communication terminal of a partner (not shown) via an ISDN (Integrated Services Digital Network) interface circuit 24. A dial number input circuit 25 is connected to the call connection control circuit 19 so that the subscriber number 26 of the other party is input.
[0027]
The counterpart communication terminal that communicates with the encryption communication device 11 of FIG. 1 by encryption also forms the same encryption communication device as that of FIG. 1, and the public key generated inside the encryption communication device 11 is also the encryption shown in FIG. It transmits to the communication device 11.
[0028]
Incidentally, the prime number 16 and the common key 31 stored in the prime number / common key storage unit 15 are information set as a pair of data in the cryptographic communication apparatus 11 shown in FIG. 1 through electronic delivery or electronic medium. The common key 31 is sent to the cryptographic processing circuit 32. The key sharing algorithm unit 12 generates a shared secret key 35 using the public key 33, the random number 14, and the prime number 16 transmitted from the communication terminal of the other party, and supplies this to the encryption processing circuit 32 and the authentication circuit 36. The cipher processing circuit 32 encrypts a plain audio signal 38 inputted from the transmitter / receiver 37, that is, a normal signal form, and sends the encrypted voice signal 39 through the ISDN interface circuit 24 to the above-mentioned counterpart. It is sent to the previous communication terminal. The encrypted voice signal 41 sent from the communication terminal of the other party is restored to a flat voice signal 42 by the encryption processing circuit 32, sent to the handset 37 and output as voice.
[0029]
In this embodiment, the “Diffie-Hellman” key sharing algorithm is used as the key sharing algorithm used by the key sharing algorithm unit 12.
[0030]
FIG. 2 is a simple illustration of the conventionally proposed “Diffie-Hellman” key agreement algorithm. The A encryption communication device and the B encryption communication device have private keys 51A and 51B and public keys 52A and 52B, respectively. Public keys 52A and 52B are disclosed to each other. The encryption key generation unit 53A on the A encryption communication apparatus side generates its own encryption key 54A using its own secret key 51A and the public key 52B of the B encryption communication apparatus. Similarly, the encryption key generation unit 53B on the B encryption communication device side generates its own encryption key 54B using its own secret key 51B and the public key 52A of the A encryption communication device.
[0031]
FIG. 3 shows an outline of processing when the cryptographic communication apparatus performs voice communication with the counterpart communication terminal in the cryptographic communication system of the present embodiment having the configuration of FIG. First, the key sharing algorithm unit 12 of the cryptographic communication apparatus 11 includes a prime number 16 input from the prime number / common key storage unit 15 and a subscriber number 18 input from the own terminal subscriber number storage unit 17 to the key sharing algorithm unit 12. Alternatively, the public key 22 and the subscriber number are generated using the subscriber number 21 and the random number 14 input from the call connection control circuit 19 to the key sharing algorithm unit 12 (step S101). Next, the generated public key 22 is transmitted to a communication terminal of a partner (not shown) (step S102). Since the communication terminal of the other party performs the same processing, the generated public key 33 and the subscriber number are sent from the communication terminal of the other party. Therefore, the key sharing algorithm unit 12 generates a shared secret key 35 using the public key 33 of the other party, the prime number 16, and the random number 14 (step S103).
[0032]
The authentication circuit 36 generates an encrypted subscriber number 61 obtained by encrypting the subscriber number 18 using the shared secret key 35 and transmits it to the communication terminal of the other party via the call connection control circuit 19 ( Step S104). At the same time, the authentication circuit 36 receives the encrypted subscriber number 62 similarly transmitted from the communication terminal of the other party and decrypts it using the shared secret key 35. Then, it is compared whether or not this is the same as the destination subscriber number 26 input from the dial number input circuit 25 (step S105). As a result, if the two match (step S106: Y), the other party's communication terminal has the key sharing algorithm in the same manner as its own encryption communication apparatus 11, and the same as its own communication terminal. It is determined that the communication terminal has a shared key. In this case, the encryption processing circuit 32 is caused to execute encryption processing of voice information (step S107).
[0033]
The start of the encryption processing by the encryption processing circuit 32 is the time when the call connection is completed. Regardless of whether the caller is the caller or the callee from the time of call connection completion, the cryptographic processing circuit 32 uses the common key 31 stored in the prime / common key storage unit 15 and the shared key generated by the key sharing algorithm unit 12. The private voice signal 38 before encryption input from the handset 37 is encrypted using the secret key 35, and the encrypted voice signal 39 is sent to the communication terminal of the other party. Further, the encrypted voice signal 41 sent from the communication terminal of the other party is decrypted into a flat voice signal 42 and outputted from the transmitter / receiver 37 as voice.
[0034]
If they do not match in step S106 (N), the counterpart communication terminal is not an apparatus having the same key sharing algorithm as that of the encryption communication apparatus 11 of its own. Therefore, in this case, the encryption processing circuit 32 is not operated for encryption and decryption, and a flat audio signal 38 is transmitted as it is to the communication terminal of the other party. The voice signal sent from the communication terminal of the other party is also output as voice from the handset 37 as it is. The result of coincidence or non-coincidence in step S106 is output from the authentication circuit 36 to the encryption processing circuit 32 as an encryption processing control signal 43 indicating execution or stop of encryption processing.
[0035]
The case where the encryption communication apparatus 11 shown in FIG. 1 is a transmission source and the reception destination will be described in more detail with reference to the above processing flow. When the encryption communication device 11 is a caller, the call connection control circuit 19 operates the dial number input circuit 25 and dials the other party's subscriber number 26 to perform a call operation. The public key 22 is generated using the prime number 16 input from the prime number / common key storage unit 15, the subscriber number 18 input from the terminal subscriber number storage unit 17 and the random number 14 (step S101). This is sent to the call connection control circuit 19. The call connection control circuit 19 starts a call connection sequence with respect to the partner terminal of the subscriber number 26 inputted by the dial number input circuit 25. At that time, the subscriber number 18 and the public key 22 of the encryption communication apparatus 11 as the own terminal are added to the exchange message 23 and transmitted (step S102).
[0036]
Thereafter, when the public key 33 is added to the exchange message and sent from a partner terminal (not shown), the call connection control circuit 19 separates the public key 33 from the exchange message 23 and sends it to the key sharing algorithm unit 12. . The key sharing algorithm unit 12 generates the shared secret key 35 using the public key 33, the prime number 16, and the random number 14 that have been sent (step S103). The generated shared secret key 35 is sent to the cryptographic processing circuit 32 and the authentication circuit 36. The authentication circuit 36 encrypts the subscriber number 18 of its own encryption communication device 11 using the shared secret key 35 sent thereto. The encrypted encrypted subscriber number 61 is transmitted to the other communication terminal via the call connection control circuit 19 (step S104).
[0037]
On the other hand, the authentication circuit 36 inputs the encrypted subscriber number 62 transmitted in the same manner from the counterpart terminal and decrypts it using the shared secret key 35. Then, it is compared whether or not this is the same as the destination subscriber number 26 input from the dial number input circuit 25 (step S105). As a result, if the two match (step S106: Y), the cryptographic processing control signal 43 instructing execution of cryptographic processing is output from the authentication circuit 36 to the cryptographic processing circuit 32. In this case, the communication terminal of the other party has a key sharing algorithm as in the case of its own encryption communication device 11, and is a communication terminal having the same shared key as its own communication terminal. Since the determination is made, voice communication encrypted using the cryptographic processing circuit 32 is performed (step S107).
[0038]
Next, the case where the encryption communication apparatus 11 shown in FIG. 1 is a destination will be described. In the destination encryption communication apparatus 11, when the exchange message 23 indicating the start of call connection is input to the call connection control circuit 19 via the ISDN interface circuit 24, the call connection control circuit 19 starts an exchange sequence. Then, the subscriber number 21 of the caller terminal as the communication terminal of the other party sent in addition to the exchange message 23 is input to the key sharing algorithm unit 12. The key sharing algorithm unit 12 generates a public key 22 using the prime number 16 input from the prime number / common key storage unit 15 and the input subscriber number 21 and the random number 14 generated by the random number generation circuit 13 ( Step S101). The key sharing algorithm unit 12 sends the generated public key 22 to the call connection control circuit 19. The call connection control circuit 19 adds this public key 22 to the exchange message 23 and transmits it to the caller terminal (step S102).
[0039]
When the public key 33 is added to the exchange message 23 and sent from the source terminal, the call connection control circuit 19 separates the public key 33 from the exchange message 23. Then, the public key 33 is sent to the key sharing algorithm unit 12. The key sharing algorithm unit 12 generates the shared secret key 35 using the public key 33, the prime number 16, and the random number 14 that have been sent (step S103). The generated shared secret key 35 is sent to the cryptographic processing circuit 32 and the authentication circuit 36. The authentication circuit 36 encrypts the subscriber number 18 of its own encryption communication device 11 using the shared secret key 35 sent thereto. The encrypted encrypted subscriber number 61 is added to the exchange message 23 by the call connection control circuit 19 and transmitted to the source terminal (step S104).
[0040]
On the other hand, the authentication circuit 36 uses the shared secret key 35 to decrypt the encrypted subscriber number 62 sent from the transmitting terminal. Then, it is compared whether or not this is the same as the subscriber number 21 of the caller terminal (step S105). As a result, if both match (step S106: Y), the source terminal has a key sharing algorithm in the same manner as its own encryption communication device 11 by the encryption processing control signal 43 instructing the execution of the encryption processing. And that the communication terminal has the same shared key as that of its own communication terminal, and voice communication encrypted using the cryptographic processing circuit 32 is performed (step S107).
[0041]
In the embodiment described above, the case of performing voice communication using encryption has been described, but facsimile communication using encryption can also be performed. In particular, in the case of facsimile communication, the existence significance of the present invention that can perform communication by encryption without intervention of a user or an operator is significant.
[0042]
【The invention's effect】
As explained above Book According to the invention, it is possible to determine whether or not the communication partner is a communication terminal having a key that can be encrypted using the information distributed together with the common key at the time of generating the common secret key. Whether the partner terminal has an encryption function can be authenticated at the call connection stage, and information communication such as encrypted voice communication and facsimile communication can be started quickly and reliably. In addition, since a random number is used to generate the common secret key, the generated shared secret key is different for each call. Therefore, the strength of encryption can be improved by using a random number together with a common key. Further, even when the common key is leaked to a third party, it is possible to make it difficult to decrypt the code.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of one encryption communication device of an encryption communication system according to an embodiment of the present invention.
FIG. 2 is an explanatory diagram of a conventionally proposed “Diffie-Hellman” key sharing algorithm.
3 is a flowchart showing an outline of processing when the cryptographic communication apparatus having the configuration of FIG. 1 performs voice communication with a communication terminal of a counterpart.
[Explanation of symbols]
11 Cryptographic communication device
12 Key sharing algorithm part
13 Random number generator
14 Random numbers
15 Prime number / common key storage
16 prime numbers
17 Self-terminal subscriber number storage
19 Call connection control circuit
25 Dial number input circuit
26 Subscriber number
31 Common key
32 Cryptographic processing circuit
36 Authentication circuit
37 Handset

Claims

Generation in the apparatus of this caller calling party public key using the calling side common integer as an integer to recognize common only between Your own prime the random number and call party at the calling side of the apparatus A calling party public key generating means for
Generation in the apparatus of this called side to the called side public key using the calling side common integer as an integer to recognize common only between Your own prime the random number and the call parties in the apparatus of the called side A called-side public key generating means for performing,
Calling-side public key that is transmitted at the time of call connection start to the called-side device that wants to communicate information between the calling-side public key generated by the calling-side public-key generating means and the calling-side common integer A key transmission means;
A called-side public key transmitting means for transmitting the called-side public key generated by the called-side public key generating means to a calling-side apparatus that is to communicate information at the time of call connection start;
Calling-side shared key generating a calling-side shared secret key using the called-side public key sent from the called-side device by the called-side public key transmitting means and the prime and random numbers on the calling side A secret key generation means;
Calling side common integer encryption means for encrypting the calling side common integer on the calling side using the calling side shared secret key generated by the calling side shared secret key generation means;
Encrypted calling side common integer transmitting means for transmitting the encrypted calling side common integer encrypted by the calling side common integer encryption means to the called side device;
Called-side shared key for generating a called-side shared secret key using the calling-side public key sent from the calling-side device by the calling-side public key transmitting means and the prime and random numbers on the called-side A secret key generation means;
A called-side common integer encryption unit that encrypts the called-side common integer by the called-side device using the called-side shared secret key generated by the called-side shared secret key generating unit;
Encrypted called-side common integer transmitting means for transmitting an encrypted called-side common integer encrypted by the called-side common integer encryption means to the calling-side device;
A calling-side encrypted called-side common integer decrypting means for decrypting the encrypted called-side common integer sent by the encrypted called-side common integer transmitting means using a calling-side shared secret key;
A caller for comparing whether or not the callee common integer decrypted by the callee encrypted callee common integer decryption means matches the callee common integer recognized by the caller device. A caller comparison means;
Callee encryption caller common decrypted using the called party shared secret key encryption caller common integer sent by the called device by the encryption calling common integer transmission means Integer decoding means;
The called side determines whether or not the calling side common integer decrypted by the called side encrypted calling side common integer decrypting means matches the calling side common integer recognized by the called side device. Called-side comparing means for comparing with the device of
When a match is determined by the calling side comparison means, information is obtained by cryptographic processing using the called side device and the calling side shared secret key when the call is connected to the called side device. Calling side information communication starting means for starting communication;
When a match is determined by the callee comparison means, information communication using the callee device and the callee shared secret key is performed when a call is established between the callee device and the callee device. An encryption communication system comprising: an incoming call side information communication start means for starting.

And the calling-side public key generating means for generating in the apparatus of this caller calling party public key using the subscriber number of Your own prime the random number and the calling party at the calling side of the apparatus,
And the called-side public key generating means for generating a called party's public key in the device of this called party using a subscriber number of Your own prime the random number and the calling side apparatus called party,
A call that is transmitted at the start of call connection to a callee device that is to communicate information between the caller public key generated by the caller public key generation means and the subscriber number of the caller Side public key transmission means,
A called-side public key transmitting means for transmitting the called-side public key generated by the called-side public key generating means to a calling-side apparatus that is to communicate information at the time of call connection start;
A call that generates a caller-side shared secret key using the callee-side public key sent from the callee-side device by the callee-side public key transmission means and the prime number and random number of the caller-side device Side shared secret key generation means,
Calling side subscriber number encryption means for encrypting the calling party subscriber number in the calling side device using the calling side shared secret key generated by the calling side shared secret key generation means;
Encrypted calling party subscriber number transmission means for transmitting the encrypted calling party subscriber number encrypted by the calling party subscriber number encryption means to the called apparatus;
An incoming call that generates a called-side shared secret key using the calling-side public key sent from the calling-side device by the calling-side public key transmitting means and the prime and random numbers of the called-side device Side shared secret key generation means,
And the called-side subscriber number encryption means for encrypting the subscriber number of the called side at the called party apparatus using a called party shared secret key generated by the called party shared secret key generating unit,
Encrypted callee subscriber number transmitting means for transmitting the encrypted callee subscriber number encrypted by the callee subscriber number encryption means to the calling device;
Calling-side subscriber number decryption using the calling-side shared secret key to decrypt the encrypted called-side subscriber number sent by the encrypted called-side subscriber number transmission means at the calling-side device And
The calling party compares whether the called party subscriber number decoded by the calling party subscriber number decoding means matches the called party number recognized by the calling party device. Calling party comparing means to
The called subscriber number decoding decrypted using the called party shared secret key encrypted calling subscriber number sent by the called device by the encryption calling subscriber number transmission means And
The called party subscriber number decoding means apparatus of the called side whether the decoded calling subscriber number matches the calling subscriber number has been advised by the apparatus of the called side by the The called party comparing means to compare in
When a match is determined by the calling side comparison means, information is obtained by cryptographic processing using the called side device and the calling side shared secret key when the call is connected to the called side device. Calling side information communication starting means for starting communication;
When a match is determined by the callee comparison means, information is obtained by cryptographic processing using the callee device and the callee shared secret key when a call is established between the callee device and the callee device. An encryption communication system comprising: a called-side information communication start means for starting communication.

Calling the calling-side public key generation unit for generating a calling party public key in the device of this caller with the subscriber number of Your own prime the random number and the calling party at the calling side of the apparatus Public key generation step;
Called party the called public key generation unit with Your own subscriber number of the prime numbers and the random number and the calling side apparatus called side generates a called party's public key in the apparatus of this called party Public key generation step;
The caller side public key generated in the caller side public key generation step and the calling party's subscriber number are communicated to the called side device from the calling side device to the caller side public key. A calling side public key transmission step which is transmitted by the key transmission means at the start of call connection;
When the callee public key transmitting means starts the call connection from the callee device to the callee device to communicate information of the callee public key generated in the callee public key generation step. A callee public key sending step for sending;
Calling-side shared secret key generation at the calling-side device using the called-side public key sent from the called-side device and the prime and random numbers at the calling-side in the called-side public key transmission step A calling side shared secret key generating step in which the means generates a calling side shared secret key;
The calling side subscriber number encryption means encrypts the calling side subscriber number in the calling side device using the calling side shared secret key generated in the calling side shared secret key generation step. A calling subscriber number encryption step;
The encrypted calling side subscriber number transmission means transmits the encrypted calling side subscriber number encrypted by the calling side subscriber number encryption step from the calling side device to the called side device. An encrypted calling party subscriber number transmission step;
Using the calling side public key sent from the calling side device in the calling side public key transmitting step and the prime and random numbers on the called side, the called side shared secret key is generated by the called side device. A callee shared secret key generating step, wherein the means generates a callee shared secret key;
The called side subscriber secret number encryption means encrypts the subscriber number of the called side device in the called side device using the called side shared secret key generated in the called side shared secret key generation step. The called subscriber number encryption step;
The encrypted callee subscriber number transmission means transmits the encrypted callee subscriber number encrypted by the callee subscriber number encryption step from the callee device to the callee device. An encrypted called subscriber number transmission step;
Using the calling party shared secret key, the calling party subscriber number decrypting means converts the encrypted called party subscriber number sent in the encrypted called party number sending step into the calling party device. A calling subscriber number decoding step for decoding;
The calling side device determines whether or not the called side subscriber number decoded in the calling side subscriber number decoding step matches the called side subscriber number recognized by the calling side device. A calling side comparison step that the calling side comparison means compares,
Using the called party shared secret key, the called party subscriber number decryption means uses the encrypted calling party subscriber number sent in the encrypted calling party subscriber number transmission step in the called party device. A called subscriber number decoding step for decoding;
The called party subscriber number system of the called side whether the decoded calling subscriber number matches the calling subscriber number has been advised by the apparatus of the called side by the decoding step The called side comparing means to be compared by the called side comparing means ,
When a match by the calling comparison step is discriminated, originating in the encryption processing the call is used to wear the called party's device the calling shared secret key connected stages between the device of the called party and the calling party information communication starting step for starting the information communicated by the call side of the device the calling party information communication start means,
When a match by the called comparison step is discriminated, wearing cryptographic processing the call is using the called shared secret caller device connected stages between the calling side of the device An encryption communication method comprising: a called side information communication start step in which a call side device starts information communication by a called side information communication start means .

Claim, characterized by further comprising a mismatch at information communication start means for starting the normal data communication apparatus of the calling side of the apparatus and the called side when matched by the called comparison means it has not been determined The cryptographic communication system according to claim 1 or 2.

3. The cryptographic communication system according to claim 1, wherein the calling side device and the called side device are connected by an ISDN line.