Wireless communication system, wireless communication apparatus and method

Abstract

To provide a wireless communication system, a wireless communication device, and a method capable of reducing a load for authenticating a wireless communication device to be newly entered into a wireless multi-hop network.SOLUTION: A wireless communication system according to an embodiment includes a plurality of wireless communication devices constituting a wireless multi-hop network. A first wireless communication device that operates to manage a wireless multi-hop network among a plurality of wireless communication devices requests a second wireless communication device different from the first wireless communication device to perform proxy authentication of a third wireless communication device that is to newly join the wireless multi-hop network. The second radio communication device performs authentication communication for authenticating the third radio communication device with the third radio communication device. While the authentication communication is being performed, the first wireless communication device and the second wireless communication device do not perform communication related to the authentication.SELECTED DRAWING: Figure 6

Description

[Technical Field]

[0001] FIELD OF THE INVENTION Embodiments of the present invention relate to wireless communication systems, devices and methods. [Background technology]

[0002] In recent years, it has become known to construct wireless multi-hop networks for applications such as wide-area sensing, and to perform communication (multi-hop communication) via the wireless multi-hop networks. Multi-hop communication is a communication method that achieves long-distance communication by transferring data (packets) in a bucket brigade format among multiple nodes (wireless communication devices) that make up the wireless multi-hop network. Multi-hop communication has advantages in terms of the cost of constructing the network (the installation cost of each node) and scalability.

[0003] Incidentally, it is possible to expand the size of a wireless multi-hop network by adding a new node to the wireless multi-hop network (i.e., adding a new node as a node constituting the wireless multi-hop network), but in order to operate the wireless multi-hop network properly, it is necessary to authenticate the new node.

[0004] However, when the wireless multi-hop network described above becomes large in scale, the load of authenticating new nodes becomes large. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Patent No. 6717468 [Non-patent literature]

[0006] [Non-Patent Document 1] Bluetooth Mesh Profile 1.1, [online], Internet<URL:https: / / www.bluetooth.com / ja-jp / specifications / specs / mesh-protocol / > Summary of the Invention [Problem to be solved by the invention]

[0007] Therefore, the problem that the present invention aims to solve is to provide a wireless communication system, a wireless communication device, and a method that can reduce the load required to authenticate a wireless communication device that is newly added to a wireless multi-hop network. [Means for solving the problem]

[0008] A wireless communication system according to an embodiment includes a plurality of wireless communication devices that configure a wireless multi-hop network. A first wireless communication device among the plurality of wireless communication devices, which operates to manage the wireless multi-hop network, requests a second wireless communication device different from the first wireless communication device to perform authentication of a third wireless communication device that is to newly join the wireless multi-hop network on behalf of the first wireless communication device. The second wireless communication device performs authentication communication with the third wireless communication device to authenticate the third wireless communication device. While the authentication communication is being performed, the first wireless communication device and the second wireless communication device do not perform communication related to the authentication. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 is a diagram showing an example of a network configuration of a wireless communication system according to a first embodiment. [Figure 2] FIG. 1 is a diagram showing an example of application of a wireless multi-hop network. [Figure 3] FIG. 1 is a diagram showing an example of the functional configuration of a wireless communication device that operates as a provisioner. [Figure 4] FIG. 2 is a diagram showing an example of the functional configuration of a wireless communication device operating as an agent. [Figure 5]FIG. 1 is a diagram showing an example of a hardware configuration of a wireless communication device. [Figure 6] 10 is a sequence chart showing an example of a processing procedure when a new node joins a wireless multi-hop network. [Figure 7] 10 is a sequence chart showing an example of a processing procedure when a new node is allowed to join the wireless multi-hop network in the second embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, embodiments will be described with reference to the drawings. (First embodiment) First, a first embodiment will be described. Fig. 1 shows an example of a network configuration of a wireless communication system according to this embodiment. Fig. 1 shows wireless communication devices 10-1 to 10-4 provided in the wireless communication system. Each of the wireless communication devices 10-1 to 10-4 is configured to be able to perform, for example, short-range wireless communication.

[0011] Note that the short-range wireless communication in this embodiment includes wireless communication based on Bluetooth Low Energy (registered trademark) (hereinafter referred to as BLE). In this case, the wireless communication devices 10-1 to 10-4 are realized by various electronic devices (devices equipped with a BLE function) such as IoT (Internet of Things) devices and smartphones that are capable of performing wireless communication based on BLE.

[0012] Here, BLE has a function of forming a wireless multi-hop network called Bluetooth (registered trademark) Mesh, and each of the wireless communication devices 10-1 to 10-4 shown in FIG. 1 operates as a node that constitutes the wireless multi-hop network (Bluetooth Mesh network) formed by the Bluetooth Mesh.

[0013] In the above-described wireless multi-hop network, for example, multi-hop communication can be performed in which data transmitted from wireless communication device 10-1 is relayed by wireless communication device 10-2 or 10-3, and the data relayed by wireless communication device 10-2 or 10-3 is received by wireless communication device 10-4. This allows, for example, wireless communication device 10-1 to realize communication (transmission and reception of data) with wireless communication device 10-4, which is beyond the BLE-based communication range of wireless communication device 10-1.

[0014] 2 shows an example of application of a wireless multi-hop network in this embodiment, which is assumed to be applied to a building such as a multi-floor building.

[0015] In the example shown in Figure 2, wireless communication device 10-1 is a smartphone used by a building manager or the like, wireless communication devices 10-2 and 10-3 are lights (lighting devices equipped with BLE functionality) installed on each floor of the building, and wireless communication device 10-4 is a camera installed on a floor different from the floor on which wireless communication devices 10-2 and 10-3 are installed.

[0016] This allows wireless communication device 10-1 to communicate (transmit various data) with wireless communication device 10-4 via wireless communication device 10-2 or 10-3 located within the building, even if wireless communication device 10-1 is located far from wireless communication device 10-4.

[0017] Here, it is assumed that data transmitted from wireless communication device 10-1 is received by wireless communication device 10-4, and wireless communication device 10-1, which is the source of the data, is called a transmitting node, and wireless communication device 10-4, which is the destination of the data, is called a receiving node. Also, wireless communication devices 10-2 and 10-3, which relay the data transmitted from wireless communication device 10-1 (transmitting node) to wireless communication device 10-4 (receiving node), are called relay nodes.

[0018] In this embodiment, wireless communication devices 10-1 to 10-4 constituting the wireless multi-hop network can operate as a transmitting node, a receiving node, and a relay node, respectively. Specifically, for example, when wireless communication device 10-3 operates as a transmitting node and wireless communication device 10-1 operates as a receiving node, wireless communication devices 10-2 and 10-4 may operate as relay nodes. Furthermore, at least one of the multiple wireless communication devices 10-1 to 10-4 may be a wireless communication device that operates only as a relay node.

[0019] The Bluetooth Mesh network described above uses flooding to achieve highly reliable multi-hop communication. In flooding, each node in a wireless multi-hop network forwards data to all nodes within its communication range. This type of flooding does not require the selection of a specific route for multi-hop communication, simplifying network management. Even if communication between some nodes in the network is interrupted, communication can continue without major disruption.

[0020] In the above-mentioned flooding communication, all nodes constituting the wireless multi-hop network are involved in the data transfer (transmission). Therefore, from the viewpoint of properly operating the wireless multi-hop network, it is important to know the nodes constituting (participating in) the wireless multi-hop network.

[0021] In Bluetooth Mesh, nodes that make up a wireless multi-hop network can be identified by authenticating a node (hereinafter referred to as a new node) that newly joins the wireless multi-hop network in accordance with provisioning. Provisioning corresponds to the procedure for allowing a new node (wireless communication device) to join the wireless multi-hop network.

[0022] In this case, a network management node called a provisioner is generally present among the multiple nodes that make up the wireless multi-hop network, and the provisioner is generally responsible for authenticating new nodes that join the network.

[0023] To authenticate a new node, the provisioner must communicate with the new node using BLE wireless communication. However, this BLE-based wireless communication is short-range wireless communication, and the provisioner must be close enough to the new node to perform this short-range wireless communication. The distance over which BLE-based wireless communication can be performed is, for example, about 10 meters. When the scale of a wireless multi-hop network is expanded by taking advantage of the advantages of a wireless multi-hop network, the load of authenticating the new node increases. Specifically, in a large-scale wireless multi-hop network in which many new nodes are located far from each other, the owner of the provisioner must move the provisioner near each new node to authenticate the new node (i.e., to perform the provisioning process), which is a time-consuming task.

[0024] Therefore, in this embodiment, a configuration will be described in which authentication of a new entry node is performed by a node (wireless communication device) other than the provisioner, thereby realizing authentication of the new entry node from a remote location.

[0025] In the following description, a node other than the provisioner that acts as a proxy for authenticating a new node will be referred to as an agent (authentication proxy node).

[0026] 1 and 2, for example, if wireless communication device 10-1 is a provisioner, wireless communication device 10-5 is a new entry node, and wireless communication device 10-5 is not within the BLE-based communication range of wireless communication device 10-1, wireless communication device 10-4 located near wireless communication device 10-5 acts as an agent and performs authentication on behalf of wireless communication device 10-5. This makes it possible to authenticate the new entry node (i.e., allow the new entry node to enter the wireless multi-hop network) without moving the provisioner near the new entry node.

[0027] The functional configuration of a wireless communication device according to this embodiment will be described below. Fig. 3 shows an example of the functional configuration of a wireless communication device (hereinafter simply referred to as a provisioner) that operates as a provisioner among a plurality of wireless communication devices that configure a wireless multi-hop network. A provisioner 10A shown in Fig. 3 (for example, the wireless communication device 10-1 shown in Figs. 1 and 2) operates to manage a network in Bluetooth Mesh, and can also operate in the same way as other nodes that configure a normal wireless multi-hop network.

[0028] As shown in FIG. 3, the provisioner 10A includes a transmitting / receiving unit 11A, a network management unit 12A, an application processing unit 13A, an authentication management unit 14A, and an agent management unit 15A.

[0029] The transmitter / receiver 11A transmits and receives data to and from other nodes via, for example, an antenna mounted on the provisioner 10A.

[0030] The network management unit 12A manages information necessary for performing multi-hop communication (communication via a wireless multi-hop network). The information necessary for performing multi-hop communication includes, for example, a network key used for performing the multi-hop communication and a unicast address assigned to each node constituting the wireless multi-hop network. The network management unit 12A also performs processes related to encryption and decryption using the network key, and processes for transferring data to other nodes in the multi-hop communication.

[0031] The wireless multi-hop network of this embodiment can be used to provide services realized by various applications. The application processing unit 13A manages application keys corresponding to each of the various applications.

[0032] As described above, the provisioner 10A can operate in the same manner as other nodes constituting the wireless multi-hop network (i.e., normal Bluetooth Mesh network nodes), but the application processing unit 13A executes processing based on an application applied to the application processing unit 13A (provisioner 10A). The processing based on the application includes processing to generate data (application data) according to the application.

[0033] The authentication management unit 14A is responsible for the authentication procedure for a new node and executes processing related to the authentication of the new node. Specifically, the authentication management unit 14A executes processing such as issuing unicast addresses to be assigned to nodes constituting the wireless multi-hop network.

[0034] The agent management unit 15A manages an agent that acts on behalf of the authentication of a new entry node. Note that, for example, when a new entry node is placed, the agent management unit 15A executes processing such as requesting an agent to act on behalf of the authentication of the new entry node.

[0035] Fig. 4 shows an example of the functional configuration of a wireless communication device (hereinafter simply referred to as an agent) that operates as an agent among multiple wireless communication devices that configure a wireless multi-hop network. Agent 10B (for example, wireless communication device 10-4 shown in Figs. 1 and 2) shown in Fig. 4 normally operates in the same manner as other nodes that configure the wireless multi-hop network, and also operates as an agent in response to a request from a provisioner.

[0036] As shown in FIG. 4, the agent 10B includes a transmitting / receiving unit 11B, a network management unit 12B, an application processing unit 13B, and an authentication agent unit 14B.

[0037] The transmitter / receiver 11B transmits and receives data to and from other nodes via, for example, an antenna mounted on the agent 10B.

[0038] The network management unit 12B manages information necessary for multi-hop communication. Note that the network management unit 12A (i.e., the provisioner 10A) shown in FIG. 3 manages the unicast addresses of all nodes constituting the wireless multi-hop network, but the network management unit 12B does not need to manage all of the unicast addresses; it is sufficient for it to manage the unicast address of the agent 10B. The information necessary for multi-hop communication managed by the network management unit 12B includes the network key described above. The network management unit 12B also executes, for example, processes related to encryption and decryption using the network key, processes for transferring data to other nodes in multi-hop communication, and the like.

[0039] The application processing unit 13B manages application keys corresponding to applications applied to the agent 10B. Furthermore, the application processing unit 13B executes processing based on the applications applied to the agent 10B.

[0040] In response to a request from the provisioner 10A, the authentication proxy unit 14B acts as a proxy for authenticating a new entry node (that is, acts on behalf of the provisioner 10A).

[0041] Fig. 5 shows an example of the hardware configuration of a node (wireless communication device) that configures a wireless multi-hop network. Note that, although the hardware configuration of one node is described in Fig. 5, the hardware configuration is the same whether the node is a provisioner 10A or an agent 10B.

[0042] As shown in FIG. 5, a node constituting a wireless multi-hop network includes a CPU 101, a non-volatile memory 102, a main memory 103, a communication device 104, and the like.

[0043] The CPU 101 is a processor that controls the operation of each component in the node. The CPU 101 executes various programs loaded from the nonvolatile memory 102, which is a storage device, to the main memory 103. The communication device 104 is configured to perform at least the above-described wireless communication based on BLE.

[0044] Although omitted in Figure 5, if a node (e.g., provisioner 10A) is realized by a smartphone, the node may further include a touch screen display or the like that is configured as an input device and a display device integrated together.

[0045] Furthermore, if the provisioner 10A shown in Fig. 3 has the hardware configuration shown in Fig. 5, some or all of the units 11A to 15A shown in Fig. 3 are realized by, for example, causing the CPU 101 shown in Fig. 5 to execute a predetermined program, that is, by software. However, some or all of the units 11A to 15A shown in Fig. 3 may be realized by hardware such as an IC (Integrated Circuit), or may be realized by a configuration that combines software and hardware.

[0046] Furthermore, assuming that the agent 10B shown in Fig. 4 has the hardware configuration shown in Fig. 5, some or all of the units 11B to 14B shown in Fig. 4 are realized by, for example, executing a predetermined program by the CPU 101 shown in Fig. 5, that is, by software. However, some or all of the units 11B to 14B shown in Fig. 4 may be realized by hardware, or may be realized by a configuration that combines software and hardware.

[0047] An example of a processing procedure for allowing a new node to join a wireless multi-hop network in this embodiment will be described below with reference to the sequence chart of Fig. 6. Note that Fig. 6 shows the operations of the provisioner 10A, the agent 10B, and the new node 10C.

[0048] First, a plurality of nodes constituting the wireless multi-hop network (Bluetooth Mesh network) in this embodiment are arranged at various positions within a space in which the wireless multi-hop network is formed (a space in which multi-hop communication is performed). When a new entrant node 10C is allowed to join such a wireless multi-hop network, for example, the owner of the new entrant node 10C arranges (installs) the new entrant node 10C at a predetermined position within the space in which the wireless multi-hop network is formed.

[0049] An agent management unit 15A included in the provisioner 10A determines, as the agent 10B, a node that is located within a range where communication based on BLE (short-range wireless communication) with the newly joining node 10C can be performed.

[0050] Note that, for example, if the provisioner 10A manages the arrangement (position) of each of the nodes constituting the wireless multi-hop network, the agent management unit 15A can determine, based on the position of each of the nodes, a node whose distance from the position where the new entrant node 10C is located is equal to or less than a predetermined value (i.e., within a predetermined range from the new entrant node 10C) as the agent 10B. Note that the position where the new entrant node 10C is located may be communicated, for example, from the owner of the new entrant node 10C to the owner of the provisioner 10A and input in advance to the provisioner 10A by the owner of the provisioner 10A. Also, the node determined as the agent 10B may be directly specified by the owner of the provisioner 10A.

[0051] When the agent 10B is determined as described above, the agent management unit 15A issues a provisioning proxy request requesting proxy authentication (i.e., provisioning) of the newly entrant node 10C, and transmits the issued provisioning proxy request to the agent 10B via the transmitter / receiver 11A (step S1). Note that the provisioning proxy request contains information necessary for provisioning (hereinafter referred to as provisioning information). The provisioning information may include, for example, device information about the newly entrant node 10C.

[0052] Since agent 10B is a node that constitutes a wireless multi-hop network (i.e., an already authenticated node), the above-mentioned provisioning proxy request can be sent from provisioner 10A to agent 10B via the wireless multi-hop network (i.e., by multi-hop communication).

[0053] When the process of step S1 is executed, the transmitter / receiver 11B included in the agent 10B receives the provisioning proxy request transmitted from the provisioner 10A. When the transmitter / receiver 11B receives the provisioning proxy request, the agent 10B operates to act as a proxy to authenticate the newly entrant node 10C. In this case, the authentication proxy unit 14B acts as a proxy to perform authentication communication (communication for authenticating the newly entrant node 10C) and starts scanning for beacon signals via the transmitter / receiver 11B.

[0054] Here, the newly entrant node 10C is placed in the space in which the wireless multi-hop network is formed as described above, and when the power of the newly entrant node 10C is turned on, it operates to periodically transmit a beacon signal (perform a beacon advertisement) (step S2).

[0055] As described above, when a beacon signal is transmitted from the new entry node 10C after the authentication agent 14B starts scanning for beacon signals, the transmitter / receiver 11B included in the agent 10B receives the beacon signal.

[0056] In the above-described step S1, the provisioning proxy request is transmitted to one node determined as the agent 10B, but the provisioning proxy request may be transmitted to multiple nodes. In this case, among the multiple nodes that have received the provisioning proxy request, the node that has been able to receive the beacon signal transmitted from the new entry node 10C may operate as the agent 10B.

[0057] When the beacon signal is received by the transmitting / receiving unit 11B, the authentication agent unit 14B notifies the new entry node 10C of the start of provisioning (step S3).

[0058] The communication between the agent 10B and the new entry node 10C, including the processes in steps S2 and S3, is wireless communication based on BLE (Bluetooth communication). The same applies to the following communication between the agent 10B and the new entry node 10C.

[0059] Next, the agent 10B and the new entry node 10C exchange public keys to be used for encrypting communication between the agent 10B and the new entry node 10C (step S4). In step S4, the public key of the agent 10B is transmitted from the agent 10B to the new entry node 10C, and the public key of the new entry node 10C is transmitted from the new entry node 10C to the agent 10B. The public key is a key paired with a private key generated based on a public key cryptosystem, and the private key of the agent 10B is managed within the agent 10B, and the private key of the new entry node 10C is managed within the new entry node 10C. According to this, for example, data encrypted in the new entry node 10C using the public key of the agent 10B can be decrypted in the agent 10B using the private key of the agent 10B. Similarly, for example, data encrypted in the agent 10B using the public key of the new entry node 10C can be decrypted in the new entry node 10C using the private key of the new entry node 10C. This makes it possible to improve the security of the communication between the agent 10B and the new entry node 10C.

[0060] When the process of step S4 is executed, the authentication agent 14B included in the agent 10B performs device authentication for the new entry node 10C (step S5).

[0061] The device authentication performed in step S5 will be described below. In Bluetooth Mesh, device authentication is performed according to one of three authentication methods: Input authentication, Output authentication, and Static authentication.

[0062] Input authentication is an authentication method performed based on, for example, an input to the new entry node 10 C. Specifically, in input authentication, for example, when the owner of the new entry node 10 C presses a button provided on the new entry node 10 C, the new entry node 10 C operates to communicate (transmit) to the agent 10 B the number of times the button was pressed, and when the agent 10 B confirms that the number of times matches a previously issued instruction, the authentication of the new entry node 10 C is successful.

[0063] Output authentication is an authentication method performed based on, for example, the output from the new entry node 10C. Specifically, in output authentication, for example, the new entry node 10C performs an operation of turning on an LED provided in the new entry node 10C, and if the agent 10B confirms that the operation (the color and number of times the LED is turned on) matches a previously performed instruction, the authentication of the new entry node 10C is successful.

[0064] In the above-described Input authentication and Output authentication, the newly entrant node 10C is authenticated by performing a predetermined operation on the newly entrant node 10C (i.e., the newly entrant node 10C is identified), whereas Static authentication is performed, for example, based only on information held by the agent 10B, without the newly entrant node 10C performing any special operation. Here, the provisioning proxy request transmitted from the provisioner 10A to the agent 10B in the above-described step S1 includes provisioning information, and the provisioning information includes the MAC address of the newly entrant node 10C as device information about the newly entrant node 10C that is known in advance by the owner of the provisioner 10A. In this case, in Static authentication, the MAC address extracted from the provisioning information contained in the provisioning proxy request is compared with the MAC address transmitted from the newly entrant node 10C in communication with the newly entrant node 10C, and if it is confirmed that the MAC addresses match, the authentication of the newly entrant node 10C is successful.

[0065] In this embodiment, device authentication is performed according to an authentication method selected by the agent 10B from the above-mentioned plurality of authentication methods (for example, input authentication, output authentication, and static authentication).

[0066] In this embodiment, the agent 10B must select an authentication method, but the selected authentication method may be specified by the provisioner 10A in the provisioning information included in the provisioning proxy request. The provisioner 10A may specify an authentication method randomly selected from the above-mentioned plurality of authentication methods, may specify a predetermined authentication method, or may specify an authentication method in response to an instruction from the owner of the provisioner 10A.

[0067] If the authentication of the new entry node 10C is successful in the device authentication performed in step S5, the new entry node 10C can join the wireless multi-hop network. However, in the wireless multi-hop network, data (packets) in units of transmission and reception called network PDUs (Protocol Data Units) are encrypted using a common key (a key based on a common key cryptosystem) called a network key. Each node constituting the wireless multi-hop network can transmit and receive data in multi-hop communication by possessing the network key. Therefore, the network management unit 12B included in the agent 10B accesses the network key managed by the network management unit 12B (i.e., the network key possessed by the agent 10B) and assigns (transmits) the network key to the new entry node 10C via the transmitter / receiver 11B (step S6).

[0068] Since all nodes constituting the wireless multi-hop network possess the same network key, in this embodiment, agent 10B passes the network key possessed by agent 10B to newly joining node 10C, thereby enabling newly joining node 10C to perform multi-hop communication.

[0069] When the process of step S6 is executed, the authentication agent unit 14B included in the agent 10B transmits an authentication completion notice to the provisioner 10A via the transmitter / receiver unit 11B to report the completion of authentication of the new entry node 10C (step S7). The authentication completion notice transmitted in step S7 includes, for example, identification information for identifying the new entry node 10C (i.e., the authenticated node).

[0070] The exchange between the agent 10B and the new entry node 10C, which corresponds to the processing of steps S2 to S6 described above, corresponds to authentication communication, and is generally performed between the provisioner 10A and the new entry node 10C. However, this authentication communication is not a particularly burdensome process (task), and does not use information held only by the provisioner 10A. For this reason, in this embodiment, authentication communication with the new entry node 10C is performed between the agent 10B and the provisioner 10A, and while this authentication communication is being performed, the provisioner 10A does not need to communicate with the new entry node 10C. That is, in this embodiment, only the provisioning proxy request and authentication completion notification described above are transmitted over the wireless multi-hop network, and other information is exchanged only between the agent 10B and the new entry node 10C.

[0071] Here, the network key assigned in step S7 described above makes it possible to decrypt the data transmitted in the multi-hop communication (the network PDU encrypted using the network key), but in order for the new entrant node 10C to perform the multi-hop communication, there are cases where the new entrant node 10C needs information that is not held by the agent 10B. For this reason, the new entrant node 10C obtains such information that is not held by the agent 10B from the provisioner 10A.

[0072] As described above, since the new entry node 10C holds the network key, multi-hop communication can be performed between the provisioner 10A and the new entry node 10C.

[0073] First, the authentication management unit 14A included in the provisioner 10A assigns (issues) a unicast address based on the authentication completion notification sent in step S7 described above. Note that the unicast address is address information unique within the wireless multi-hop network, and to maintain uniqueness, it is desirable for the provisioner 10A, which knows all the nodes within the network, to assign it. For this reason, the unicast address is provided from the provisioner 10A to the newly joining node 10C. The unicast address assigned by the authentication management unit 14A in this way is assigned to the newly joining node 10C and managed by the network management unit 12A.

[0074] Furthermore, in this embodiment, data (application data) corresponding to an application program may be transmitted and received via the wireless multi-hop network. In order to transmit and receive such application data (hereinafter referred to as application communication), an application key must be possessed. The application key is, for example, a common key prepared for each application applied to each node. That is, since the agent 10B does not possess an application key corresponding to an application that is not applied to the agent 10B (i.e., the agent 10B is not involved in), the application key is provided from the provisioner 10A to the newly joining node 10C.

[0075] The application key is used to protect application data, and the network key is used to protect the entire packet. Therefore, in multi-hop communication, network information and the like are added to the application data encrypted with the application key, and the entire data is encrypted with the network key before being transmitted and received.

[0076] The network management unit 12A assigns (transmits) the above-mentioned unicast address and application key to the new entry node 10C via the transmitting / receiving unit 11A as information necessary for the new entry node 10C to perform multi-hop communication (step S8).

[0077] When the processing of step S8 is executed and it is confirmed that the newly joined node 10C has joined the wireless multi-hop network (i.e., it has become possible to perform multi-hop communication), the agent management unit 15A included in the provisioner 10A issues a provisioning proxy termination request requesting the termination of proxy provisioning (authentication of the newly joined node 10C), and transmits the issued provisioning proxy termination request to the agent 10B via the transceiver unit 11A (step S9).

[0078] When the process of step S9 is executed, the process of making the new entry node 10C enter the wireless multi-hop network shown in FIG. 6 ends.

[0079] As described above, in this embodiment, a provisioner 10A (first wireless communication device) that operates to manage a wireless multi-hop network requests an agent 10B (second wireless communication device) different from the provisioner 10A to proxy authentication of a new entry node 10C (third wireless communication device) that is to newly enter the wireless multi-hop network. Furthermore, in this embodiment, the agent 10B performs authentication communication with the new entry node 10C to authenticate the new entry node 10C. Note that, in this embodiment, while the authentication communication is being performed, the provisioner 10A and the agent 10B do not, in principle, perform communication related to the authentication. However, even while the authentication communication is being performed, the provisioner 10A and the agent 10B can communicate as a wireless multi-hop network, and in some cases, a proxy end request may be transmitted and received during authentication.

[0080] In this embodiment, it is assumed that the provisioner 10A, the agent 10B, and the new entrant node 10C (or wireless communication devices operating as such) are configured to be able to perform wireless communication (Bluetooth communication) based on BLE, and that the wireless multi-hop network is a network formed by Bluetooth Mesh. It is also assumed that the provisioner 10A is located at a distance from the new entrant node 10C where wireless communication based on BLE cannot be performed (i.e., far from the new entrant node 10C), and the agent 10B is located at a distance where wireless communication based on BLE can be performed from the new entrant node 10C (i.e., near the new entrant node 10C). It is also assumed that the agent 10B is determined (selected) from among multiple nodes constituting the wireless multi-hop network based on the location of the new entrant node 10C.

[0081] In this embodiment, the above-described configuration makes it possible to reduce the load for authenticating a node (wireless communication device) that is newly allowed to join the wireless multi-hop network.

[0082] Here, a wireless communication system (hereinafter referred to as a first comparative example of this embodiment) is assumed in which the provisioner 10A mainly performs authentication of the new entry node 10C. In the case of such a first comparative example of this embodiment, if the wireless multi-hop network is large-scale, every time authentication of the new entry node 10C is performed, the provisioner 10A needs to move to a range where wireless communication based on BLE can be performed with the new entry node 10C, and the load of authenticating the new entry node 10C is large.

[0083] Also, consider a wireless communication system (hereinafter referred to as a second comparative example of this embodiment) in which a single node capable of directly communicating (Bluetooth communication) with the newly entrant node 10C is used as an authentication proxy node, and the provisioner authenticates the newly entrant node 10C via the authentication proxy node. In this second comparative example of this embodiment, the provisioner 10A can remotely authenticate the newly entrant node 10C, but the authentication proxy node merely relays the authentication communication, and information for authentication is transmitted and received between the provisioner 10A and the newly entrant node 10C via the wireless multi-hop network. In light of the low throughput of the wireless multi-hop network formed by Bluetooth Mesh in this embodiment, in the second comparative example of this embodiment, there is a possibility that authentication of the newly entrant node 10C will put a strain on other application communications executed via the wireless multi-hop network (i.e., the load on the wireless multi-hop network will increase).

[0084] In contrast, in this embodiment, authentication communication is performed between agent 10B, which directly communicates wirelessly based on BLE, and the newly joining node 10C (i.e., agent 10B is responsible for most of the authentication procedure), thereby making it possible to achieve remote authentication while reducing the load on the wireless multi-hop network.

[0085] In this embodiment, if the agent 10B successfully authenticates the newly joined node 10C, it transmits a network key used for multi-hop communication to the newly joined node 10C and notifies the provisioner 10A of the completion of authentication via the wireless multi-hop network.

[0086] In addition, in this embodiment, when the provisioner 10A is notified by the agent 10B that authentication has been completed, the provisioner 10A transmits the address (unicast address) assigned to the newly joining node 10C in the wireless multi-hop network to the newly joining node 10C via the wireless multi-hop network.

[0087] From the viewpoint of avoiding overloading other application communications when authenticating the newly entrant node 10C as described above, a configuration in which the above-described unicast address is also transmitted (assigned) from the agent 10B to the newly entrant node 10C (hereinafter referred to as a third comparative example of this embodiment) is conceivable. However, to realize such a third comparative example of this embodiment, all nodes constituting the wireless multi-hop network (all nodes that can operate as the agent 10B) need to know all unicast addresses assigned to other nodes, which makes the management of unicast addresses at each node complicated. In other words, in the third comparative example of this embodiment, it may not be possible to reduce the load required to authenticate the newly entrant node 10C.

[0088] In contrast to this, in this embodiment, the provisioner 10A, which is aware of all nodes (of their unicast addresses) in the wireless multi-hop network, is configured to issue and assign a unicast address to the newly joining node 10C, thereby reducing the load required to authenticate the newly joining node 10C.

[0089] Here, it has been explained that the unicast address is assigned by the provisioner 10A, but it is also assumed that the application key is assigned by the provisioner 10A. Specifically, each node constituting the wireless multi-hop network holds only an application key corresponding to an application applied to that node. In such a case, if the agent 10B were to assign to the new entrant node 10C an application key corresponding to an application applied to the new entrant node 10C, all nodes constituting the wireless multi-hop network (i.e., all nodes that can operate as the agent 10B) would need to manage all the application keys, which would be cumbersome.

[0090] For this reason, in this embodiment, the provisioner 10A, which manages all application keys, is configured to grant the application keys.

[0091] However, if the agent 10B possesses an application key corresponding to an application applied to the newly entrant node 10C (i.e., the application applied by the agent 10B and the newly entrant node 10C is the same), the agent 10B may assign the application key to the newly entrant node 10C. Specifically, if only a single application is running in the wireless multi-hop network (i.e., the same application is applied to all nodes constituting the wireless multi-hop network), the agent 10B may assign the application key possessed by the agent 10B to the newly entrant node 10C. Alternatively, if the newly entrant node 10C notifies the agent 10B of an application applied to the newly entrant node 10C, and it is determined that the agent 10B possesses an application key corresponding to the application, the agent 10B may assign the application key to the newly entrant node 10C. If the agent 10B can assign the application key to the newly entrant node 10C in this way, there is no need to transmit and receive the application key via the wireless multi-hop network, which can reduce congestion on application communication. It is assumed that the application to be applied to the new entry node 10C is applied for by, for example, the owner of the provisioner 10A or the owner of the new entry node 10C.

[0092] Furthermore, in the present embodiment, it has been described that the provisioner 10A assigns a unicast address and an application key to the newly entrant node 10C after the agent 10B transmits an authentication completion notification to the provisioner 10A, but the unicast address and application key may be provided in advance by the provisioner 10A to the agent 10B as provisioning information to be described in a provisioning proxy request. In such a case, the agent 10B can assign a unicast address and an application key to the newly entrant node 10C after the agent 10B transmits an authentication completion notification to the provisioner 10A as described above, thereby minimizing communication with the provisioner 10A.

[0093] Furthermore, in this embodiment, when the provisioner 10A requests proxy authentication of the new entrant node 10C, the provisioner 10A may transmit device information about the new entrant node 10C (static information about the new entrant node 10C) to the agent 10B. In this case, the device information about the new entrant node 10C is included in the provisioning information described in the provisioning proxy request. In this embodiment, by using such device information to perform device authentication (to authenticate the new entrant node 10C), for example, no operation on the new entrant node 10C is required, thereby reducing the effort required for device authentication.

[0094] In this embodiment, the MAC address of the newly entrant node 10C is used as the above-mentioned device information, but the device information may be other unique information such as the UUID (Universally Unique Identifier) ​​of the newly entrant node 10C or a device name.

[0095] Alternatively, a password designated by the owner of the newly entrant node 10C may be used as the device information. The owner of the newly entrant node 10C may communicate this password to the owner of the provisioner 10A in advance, and the password is transmitted (transmitted) from the provisioner 10A to the agent 10B using the provisioning proxy request described above. In this case, when it is confirmed that the password transmitted from the newly entrant node 10C to the agent 10B matches the password transmitted from the provisioner 10A to the agent 10B in device authentication, authentication of the newly entrant node 10C is successful. In this case, the newly entrant node 10C is provided with, for example, an interface through which the owner of the newly entrant node 10C can input a password. By using such a temporary password to perform device authentication, it is possible to prevent unique information such as the MAC address from being transmitted and received via the wireless multi-hop network (i.e., from being propagated throughout the wireless multi-hop network), thereby suppressing unnecessary information propagation.

[0096] Here, in this embodiment, the provisioner 10A is described as sending a provisioning proxy request to the agent 10B, but the provisioner 10A may set, in the provisioning proxy request (provisioning information), the period (hereinafter referred to as the proxy period) during which the agent 10B will proxy the authentication of the newly joining node 10C (proxy authentication) or the conditions for ending the proxy (hereinafter referred to as the proxy termination conditions), for example, depending on the operation of the owner of the provisioner 10A, etc.

[0097] Specifically, for example, if the newly entrant node 10C has already been placed (installed) and authentication of the newly entrant node 10C can be started immediately, the provisioner 10A can set the above-mentioned proxy period to a short period such as one hour in the provisioning proxy request. On the other hand, if a long-term operation is expected in which a large number of newly entrant nodes 10C are placed and authenticated, the provisioner 10A can set the proxy period to one day in the provisioning proxy request.

[0098] When the agent 10B receives a provisioning proxy request with such a proxy period set from the provisioner and is unable to complete authentication of the newly joining node 10C (i.e., authentication communication) before the proxy period expires, the agent 10B terminates the proxy authentication. In this case, the agent 10B may automatically terminate the proxy authentication when the proxy period expires, or may terminate the proxy authentication in accordance with an authentication proxy termination notification sent from the provisioner 10A when the proxy period expires.

[0099] Furthermore, for example, if the provisioner 10A knows the number of newly joining nodes 10C, the provisioner 10A can set this number as a proxy end condition in the provisioning proxy request.

[0100] The agent 10B ends the authentication proxy when authentication of the number of newly entrant nodes 10C set as the proxy termination condition is completed (ended). The agent 10B may end the authentication proxy in accordance with an authentication proxy termination notice sent from the provisioner 10A when authentication of the number of newly entrant nodes 10C set as the proxy termination condition is completed. The provisioner 10A can grasp the number of newly entrant nodes 10C for which authentication has been completed based on the number of authentication completion notices sent from the agent 10B (or unicast addresses issued for the newly entrant nodes 10C).

[0101] The above-described proxy authentication may be terminated, for example, by an instruction from the owner of the provisioner 10A. When proxy authentication of multiple newly joining nodes 10C is performed, the authentication may be performed by one agent 10B or multiple agents 10B.

[0102] (Second embodiment) Next, a second embodiment will be described. In the second embodiment, the description of the same parts as in the first embodiment will be omitted, and the description will mainly focus on the parts that are different from the first embodiment.

[0103] In the first embodiment described above, it was explained that additional information (unicast address and application key) is provided from the provisioner to the newly joining node in response to an authentication completion notification from the agent. However, this embodiment differs from the first embodiment in that the newly joining node queries the provisioner for the additional information.

[0104] The functional configuration and hardware configuration of the wireless communication device (provisioner and agent) according to this embodiment are the same as those explained in the first embodiment, and will be explained using FIGS. 3 to 5.

[0105] An example of a processing procedure for allowing a new node to join the wireless multi-hop network according to this embodiment will be described below with reference to the sequence chart of Fig. 7. As with Fig. 6, Fig. 7 shows the operations of the provisioner 10A, the agent 10B, and the new node 10C.

[0106] First, the processes of steps S11 to S16 corresponding to the processes of steps S1 to S6 shown in FIG. 6 are executed.

[0107] In the first embodiment described above, the agent 10B transmits an authentication completion notification to the provisioner 10A, but in this embodiment, when the processing of step S16 is executed, the new entry node 10C transmits an authentication completion notification to the provisioner 10A via the wireless multi-hop network (step S17). The processing of step S17 corresponds to a request (inquiry) for a unicast address and an application key to be assigned to the new entry node 10C.

[0108] At the time when the process of step S17 is executed, the new entry node 10C does not have a unicast address, so the source address in the request is set to null information such as "0.0·0·0".

[0109] When the provisioner 10A receives a request (authentication completion notification) from the new entrant node 10C by executing the process of step S17, the provisioner 10A (authentication management unit 14A) issues a candidate unicast address to be assigned to the new entrant node 10C in the wireless multi-hop network, and transmits the issued candidate unicast address via the wireless multi-hop network (step S18). Note that, in this case, a unicast address has not been assigned to the new entrant node 10C (that is, the unicast address of the new entrant node 10C has not been registered), so the candidate unicast address is broadcast to all nodes constituting the wireless multi-hop network.

[0110] The candidate unicast address may be one address that can be assigned to the newly entrant node 10C, or may be multiple addresses. Specifically, if there is one newly entrant node 10C, unicast address duplication will not occur, so one address may be used as the candidate unicast address from the viewpoint of reducing communication volume, etc. On the other hand, if there are multiple newly entrant nodes 10C, unicast address duplication may occur, so it is preferable to use multiple addresses as the candidate unicast address from the viewpoint of avoiding retransmission of the candidate unicast address, etc.

[0111] When the newcomer node 10C receives the unicast address candidates broadcast from the provisioner 10A, the newcomer node 10C transmits an address use request to the provisioner 10A based on the unicast address candidates (step S19). The address use request includes, for example, the unicast address selected by the newcomer node 10C. The unicast address included in the address use request may be selected randomly from the unicast address candidates transmitted from the provisioner 10A in the above-mentioned step S18, or may be selected (specified) by the owner of the newcomer node 10C.

[0112] When the process of step S19 is executed, the provisioner 10A receives the address use request transmitted from the newly joining node 10C in step S19 and responds to the address use request. Specifically, the provisioner 10A manages the unicast addresses (hereinafter referred to as the unicast addresses of other nodes) assigned to each node constituting the wireless multi-hop network, and checks whether the unicast address included in the address use request overlaps with the unicast addresses of other nodes.

[0113] If the unicast address included in the address use request does not overlap with the unicast address of another node, the provisioner 10A assigns the unicast address included in the address use request to the new entrant node 10C and transmits a notification (address use permission notification) permitting use of the unicast address and an application key to the new entrant node 10C (step S20). The unicast address assigned to the new entrant node 10C is managed by the network management unit 12A included in the provisioner 10A. The application key transmitted from the provisioner 10A to the new entrant node 10C in step S20 is the same as that explained in the first embodiment, and therefore will not be explained in detail here.

[0114] When the process of step S20 described above is executed (that is, when the provisioner responds to the address use request), it becomes possible to perform multi-hop communication using the unicast address assigned to the new entry node 10C.

[0115] Here, it has been explained that the unicast address included in the address use request does not overlap with the unicast address of another node, but if the unicast address included in the address use request overlaps with the unicast address of another node, a notification to the effect that use of the unicast address is denied (i.e., the unicast address cannot be used) is transmitted from the provisioner 10A to the new entry node 10C. In this case, the new entry node 10C may select another unicast address from the above-mentioned unicast address candidates and execute the processing from step S19 onwards, or may return to step S18 and repeat the processing.

[0116] As described above, in this embodiment, when the new entry node 10C notifies the provisioner 10A of the completion of authentication of the new entry node 10C, the unicast address assigned to the new entry node 10C is transmitted from the provisioner 10A to the new entry node 10C via the wireless multi-hop network. In this embodiment, such a configuration makes it possible to reduce the load on the agent 10B that has performed authentication (authentication communication) on behalf of the new entry node 10C, compared to the first embodiment described above.

[0117] In the present embodiment, the newly entrant node 10C inquires of the provisioner 10A about additional information such as a unicast address and an application key, but the unicast address (candidate) may be transmitted in advance from the provisioner 10A to the agent 10B as provisioning information described in a provisioning proxy request. In this case, the unicast address candidate transmitted in advance from the provisioner 10A to the agent 10B is in a reserved state at the time of transmitting the provisioning proxy request, and is officially assigned (registered) to the newly entrant node 10C by the provisioner 10A at the time when the authentication proxy is completed (i.e., when an authentication completion notification is received), and is also given to the newly entrant node 10C by the agent 10B.

[0118] According to at least one of the above-described embodiments, it is possible to provide a wireless communication system, a wireless communication device, and a method that can reduce the load required to authenticate a wireless communication device that is newly added to a wireless multi-hop network.

[0119] Although several embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These embodiments can be implemented in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their modifications are included within the scope and spirit of the invention, as well as within the scope of the invention described in the claims and their equivalents. [Explanation of symbols]

[0120] 10-1 to 10-5, 10A, 10B...wireless communication device, 11A...transmitter / receiver unit, 11B...transmitter / receiver unit, 12A...network management unit, 12B...network management unit, 13A...application processing unit, 13B...application processing unit, 14A...authentication management unit, 14B...authentication agent unit, 15A...agent management unit, 101...CPU, 102...non-volatile memory, 103...main memory, 104...communication device.

Claims

1. In a wireless communication system including a plurality of wireless communication devices that form a wireless multi-hop network, a first wireless communication device that operates to manage the wireless multi-hop network among the plurality of wireless communication devices requests a second wireless communication device different from the first wireless communication device to perform authentication on behalf of a third wireless communication device that is to newly join the wireless multi-hop network; the second wireless communication device performs authentication communication with the third wireless communication device to authenticate the third wireless communication device; While the authentication communication is being performed, the first wireless communication device and the second wireless communication device do not perform communication related to the authentication. Wireless communication system.

2. 2. The wireless communication system of claim 1, wherein, if authentication of the third wireless communication device is successful, the second wireless communication device transmits to the third wireless communication device a network key used for communication via the wireless multi-hop network that is held in the second wireless communication device, and notifies the first wireless communication device of the completion of the authentication via the wireless multi-hop network.

3. 3. The wireless communication system of claim 2, wherein when the first wireless communication device is notified by the second wireless communication device that the authentication has been completed, the first wireless communication device transmits an address assigned to the third wireless communication device in the wireless multi-hop network to the third wireless communication device via the wireless multi-hop network.

4. When the authentication of the third wireless communication device is successful, the second wireless communication device transmits to the third wireless communication device a network key held in the second wireless communication device and used for communication via the wireless multi-hop network; The third wireless communication device notifies the first wireless communication device of the completion of the authentication via the wireless multi-hop network.

2. The wireless communication system according to claim 1.

5. The wireless communication system of claim 4, wherein when the first wireless communication device is notified by the third wireless communication device that the authentication has been completed, the first wireless communication device transmits an address assigned to the third wireless communication device in the wireless multi-hop network to the third wireless communication device via the wireless multi-hop network.

6. A wireless communication system described in any one of claims 2 to 5, wherein the first wireless communication device transmits an application key used to perform application communication via the wireless multi-hop network to the third wireless communication device.

7. the first wireless communication device transmits device information regarding the third wireless communication device to the second wireless communication device when requesting proxy authentication of the third wireless communication device; The second wireless communication device authenticates the third wireless communication device using device information transmitted from the first wireless communication device.

2. The wireless communication system according to claim 1.

8. The wireless communication system according to claim 7 , wherein the device information includes a MAC address, a UUID (Universally Unique Identifier), a device name, or a password of the third wireless communication device.

9. the first wireless communication device transmits to the second wireless communication device, when requesting proxy authentication of the third wireless communication device, an address assigned to the third wireless communication device in the wireless multi-hop network and an application key used for performing application communication via the wireless multi-hop network; When the authentication of the third wireless communication device is successful, the second wireless communication device transmits to the third wireless communication device a network key used for communication via the wireless multi-hop network, the address, and the application key, which are held in the second wireless communication device.

2. The wireless communication system according to claim 1.

10. the first wireless communication device sets a period for which the proxy will be performed or a condition for ending the proxy when requesting proxy authentication of the third wireless communication device; The second wireless communication device performs the authentication communication in accordance with the set period or conditions.

2. The wireless communication system according to claim 1.

11. The wireless communication system of claim 1, wherein the first wireless communication device requests the second wireless communication device to end its role in authenticating the third wireless communication device when it is confirmed that the third wireless communication device has joined the wireless multi-hop network.

12. the first to third wireless communication devices are configured to be capable of performing wireless communication based on BLE (Bluetooth Low Energy); The wireless multi-hop network is a network formed by Bluetooth Mesh.

2. The wireless communication system according to claim 1.

13. the first wireless communication device is located at a distance from the third wireless communication device such that the first wireless communication device cannot perform wireless communication based on the BLE; The second wireless communication device is disposed at a distance from the third wireless communication device such that the second wireless communication device can perform wireless communication based on the BLE.

13. The wireless communication system of claim 12.

14. The wireless communication system according to claim 13 , wherein the second wireless communication device is determined from among the plurality of wireless communication devices based on a location of the third wireless communication device.

15. A wireless communication device that operates to manage a wireless multi-hop network among a plurality of wireless communication devices that configure the wireless multi-hop network, a requesting means for requesting a first wireless communication device of the plurality of wireless communication devices to perform authentication on behalf of a second wireless communication device that is to newly join the wireless multi-hop network; the first wireless communication device performs authentication communication with the second wireless communication device to authenticate the second wireless communication device; While the authentication communication is being performed, the wireless communication device and the first wireless communication device do not perform communication related to the authentication. Wireless communication device.

16. In a wireless communication device constituting a wireless multi-hop network, an authentication proxy means for performing authentication communication with a second wireless communication device, the second wireless communication device being newly allowed to participate in the wireless multi-hop network, based on a request from the first wireless communication device that operates to manage the wireless multi-hop network; While the authentication communication is being performed, the wireless communication device and the first wireless communication device do not perform communication related to the authentication. Wireless communication device.

17. A method executed by a wireless communication system including a plurality of wireless communication devices that configure a wireless multi-hop network, a step in which a first wireless communication device, which operates to manage the wireless multi-hop network, among the plurality of wireless communication devices, requests a second wireless communication device different from the first wireless communication device to perform authentication on behalf of a third wireless communication device that is to newly join the wireless multi-hop network; a step of the second wireless communication device performing authentication communication with the third wireless communication device for authenticating the third wireless communication device; Equipped with While the authentication communication is being performed, the first wireless communication device and the second wireless communication device do not perform communication related to the authentication. method.

18. A method executed by a wireless communication device that operates to manage a wireless multi-hop network, among a plurality of wireless communication devices that configure a wireless multi-hop network, comprising: a step of requesting a first wireless communication device of the plurality of wireless communication devices to perform authentication of a second wireless communication device that is to newly join the wireless multi-hop network on behalf of the first wireless communication device; the first wireless communication device performs authentication communication with the second wireless communication device to authenticate the second wireless communication device; While the authentication communication is being performed, the wireless communication device and the first wireless communication device do not perform communication related to the authentication. method.

19. In a wireless communication device constituting a wireless multi-hop network, performing authentication communication with a second wireless communication device, the second wireless communication device being caused to newly participate in the wireless multi-hop network, based on a request from the first wireless communication device operating to manage the wireless multi-hop network; While the authentication communication is being performed, the wireless communication device and the first wireless communication device do not perform communication related to the authentication. method.

Images